Windows 10: what is securebootencodeuefi

Guys i was watching and suddenly a command prompt name securebootencodeuefi showed on my pc and it suddenly gone what is this am i safe is my pc damage why it suddenly showed

:)

 

SecureBootEncodeUEFI.exe

While i was playing i saw what looks like a cmd window open and close immediately but i managed to get a screenshot of it. Looking online i barely found any information about it, and i got a bit worried so im making this.

I have never had this happend to me.

I first went to task scheduler to see if there were any tasks that might be suspicious but to no avail. Next i went to the sytem32 folder and searched "SecureBootEncode" and found the .exe and 3 files located in "System32\Tasks\Microsoft\Windows\PI", the files are "SecureBootEncodeUEFI", "Secure-Boot-Update" and "Sqm-Tasks", with no extensions and File type of "File".

I tried to search for the same things on my laptop instead, but i didn't found the .exe, only 2 out of the 3 files, "Secure-Boot-Update" and "Sqm-Tasks".

I tried opening the files in Notepad++ but only "SecureBootEncodeUEFI" could be opened, in XML format, and it looks like a task but with no set trigger.

My Questions are: are all these legit? and what are they exactly? I know they are something related to Secure Boot but i dont know what.

System Info:

Windows 11 version 22H2

Ryzen 5 3600

Nvidia GeForce GTX 1650

8GB DDR4 RAM

If it helps i also have PowerToys installed and UEFI is enabled along with TPM.

This is my first time writing here so apologies if this isn't in the correct topics or i got something wrong.

Images:

 

Windows Script Host issue - SyncAppvPublishingServer.vbs  

Thank you - the results are below

Code:

 

Few processess clogging up memory, is it malware or just windows?

This is a fresh Windows 11 Pro install. I only had the same problem since 2 weeks ago, when I clicked an infected link downloading an infected pdf file. I just reinstalled windows to be safe, but the malware probably came back? It had infected other devices on LAN. As Windows usually has quite a lot of processes, I'd like to know which are legit and if that malware persisted.

My malware experience was identical to this post:

Redirecting

For example, looking at Firefox task manager (5 tabs open), I see it using 355 MB of memory, but on Windows task manager it shows 718.2 MB. About 90% out of 106 Windows processes are Service Host, MS Defender uses 96.7 MB while idle.



System info:

Installed Physical Memory (RAM) 8.00 GB

Total Physical Memory 7.37 GB

Available Physical Memory 2.52 GB

System SKU LENOVO_MT_82B5_BU_idea_FM_Legion 5-15ARH05

Processor AMD Ryzen 5 4600H with Radeon Graphics, 3000 Mhz, 6 Core(s), 12 Logical Processor(s)

Also a Hyper-V?

A hypervisor has been detected. Features required for Hyper-V will not be displayed.



ctfmon.exe in an unusual path with no signature.

ctfmon.exe Not Available 10116 13 Not Available Not Available 10/12/2023 9:28 AM Not Available Not Available Not Available

"C:\Windows\WinSxS\amd64_microsoft-windows-t..cesframework-ctfmon_31bf3856ad364e35_10.0.22621.1_none_fec65887844fba66\ctfmon.exe"

Few different svchost instances at the same time:

svchost.exe c:\windows\system32\svchost.exe 20340 8 200 1380 10/12/2023 9:29 AM 10.0.22621.1 78.05 KB (79,920 bytes) 5/7/2022 7:19 AM

svchost.exe Not Available 13608 8 Not Available Not Available 10/12/2023 1:02 PM Not Available Not Available Not Available

same with other processes:

conhost.exe Not Available 4224 8 Not Available Not Available 10/8/2023 5:35 PM Not Available Not Available Not Available

conhost.exe c:\windows\system32\conhost.exe 11940 6 200 1380 10/12/2023 9:28 AM 10.0.22621.2070 1,016.00 KB (1,040,384 bytes) 10/8/2023 5:27 PM

nvcontainer.exe Not Available 4480 8 Not Available Not Available 10/8/2023 5:35 PM Not Available Not Available Not Available

nvcontainer.exe c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe 18792 8 200 1380 10/12/2023 9:28 AM 1.37.3103.4323 979.62 KB (1,003,128 bytes) 10/8/2023 5:10 PM

securityhealthservice.exe Not Available 10944 8 Not Available Not Available 10/8/2023 5:36 PM Not Available Not Available Not Available

securityhealthsystray.exe c:\windows\system32\securityhealthsystray.exe 7472 8 200 1380 10/12/2023 9:28 AM 10.0.22621.608 260.00 KB (266,240 bytes) 5/5/2023 3:59 PM

taskhostw.exe Not Available 15308 8 Not Available Not Available 10/12/2023 3:32 PM Not Available Not Available Not Available

taskhostw.exe c:\windows\system32\taskhostw.exe 19876 8 200 1380 10/12/2023 9:28 AM 10.0.22621.1635 110.35 KB (113,000 bytes) 5/5/2023 3:58 PM

Current process log:

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.13



Platform: x64 Windows 11 (Pro), 10.0.22621.2283 (ReleaseId: 2009, 22H2), Service Pack: 0

Time: 12.10.2023 - 18:03 (UTC+03:00)

Language: OS: English (0x409). Display: English (0x409). Non-Unicode: English (0x409)

Elevated: Yes

Ran by: devian (group: Administrators) on DESKTOP-0P334B7, FirstRun: yes



Internet Explorer: 11.0.22621.1

Default: "C:\Program Files\WindowsApps\Mozilla.Firefox_118.0.1.0_x64__n80bbvh6b1yt2\VFS\ProgramFiles\Firefox Package Root\firefox.exe" -osint -url "%1" (Firefox)



Boot mode: Normal



Running processes:

Number | Path

1 C:\Program Files (x86)\Microsoft OneDrive\23.038.0219.0001\Microsoft.SharePoint.exe

1 C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

1 C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

1 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

1 C:\Program Files\NordVPN\nordvpn-service.exe

2 C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

1 C:\Program Files\qBittorrent\qbittorrent.exe

1 C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.23500.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe

1 C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.23500.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe

18 C:\Program Files\WindowsApps\Mozilla.Firefox_118.0.1.0_x64__n80bbvh6b1yt2\VFS\ProgramFiles\Firefox Package Root\firefox.exe

1 C:\ProgramData\Dolby\DAX3\RADARHOST\DSRHost.exe

1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe

1 C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe

5 C:\Users\devian\AppData\Local\Postman\app-10.19.0\Postman.exe

1 C:\Users\devian\Downloads\hijackthis-2.10.0.13-installer.exe

1 C:\Windows\explorer.exe

1 C:\Windows\ImmersiveControlPanel\SystemSettings.exe

1 C:\Windows\System32\AggregatorHost.exe

1 C:\Windows\System32\ApplicationFrameHost.exe

1 C:\Windows\System32\audiodg.exe

2 C:\Windows\System32\conhost.exe

2 C:\Windows\System32\csrss.exe

1 C:\Windows\System32\ctfmon.exe

1 C:\Windows\System32\dasHost.exe

4 C:\Windows\System32\dllhost.exe

2 C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe

1 C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_9c2a9014dc4e8797\FnHotkeyCapsLKNumLK.exe

1 C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_9c2a9014dc4e8797\FnHotkeyUtility.exe

1 C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_9c2a9014dc4e8797\LenovoUtilityService.exe

2 C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_64ea833c46d6bad8\Display.NvContainer\NVDisplay.Container.exe

1 C:\Windows\System32\dwm.exe

1 C:\Windows\System32\FMService64.exe

2 C:\Windows\System32\fontdrvhost.exe

1 C:\Windows\System32\LsaIso.exe

1 C:\Windows\System32\lsass.exe

1 C:\Windows\System32\oobe\UserOOBEBroker.exe

2 C:\Windows\System32\RtkAudUService64.exe

4 C:\Windows\System32\RuntimeBroker.exe

1 C:\Windows\System32\SearchFilterHost.exe

1 C:\Windows\System32\SearchIndexer.exe

1 C:\Windows\System32\SearchProtocolHost.exe

1 C:\Windows\System32\SecurityHealthService.exe

1 C:\Windows\System32\SecurityHealthSystray.exe

1 C:\Windows\System32\services.exe

1 C:\Windows\System32\Sgrm\SgrmBroker.exe

1 C:\Windows\System32\sihost.exe

1 C:\Windows\System32\smartscreen.exe

1 C:\Windows\System32\smss.exe

1 C:\Windows\System32\spoolsv.exe

90 C:\Windows\System32\svchost.exe

2 C:\Windows\System32\taskhostw.exe

1 C:\Windows\System32\Taskmgr.exe

1 C:\Windows\System32\wbem\unsecapp.exe

1 C:\Windows\System32\wbem\WmiPrvSE.exe

1 C:\Windows\System32\wininit.exe

1 C:\Windows\System32\winlogon.exe

1 C:\Windows\System32\wlanext.exe

1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe

1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe

1 C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe



O4 - HKCU\..\Run: [com.squirrel.Teams.Teams] = C:\Users\devian\AppData\Local\Microsoft\Teams\Update.exe --processStart "Teams.exe" --process-start-args "--system-initiated"

O4 - HKCU\..\Run: [EpicGamesLauncher] = C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe -silent -launchcontext=boot

O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_1AC6CBE5B59EFE9900DD9913D6E56F89] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5

O4 - HKCU\..\Run: [NordVPN] = C:\Program Files\NordVPN\NordVPN.exe

O4 - HKCU\..\Run: [OneDrive] = C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background (Microsoft)

O4 - HKLM\..\Run: [RtkAudUService] = C:\Windows\System32\RtkAudUService64.exe -background

O4 - HKU\S-1-5-19\..\Run: [OneDriveSetup] = C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (Microsoft) (User 'Local service')

O4 - HKU\S-1-5-20\..\Run: [OneDriveSetup] = C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (Microsoft) (User 'Network service')

O4-32 - HKLM\..\Run: [TeamsMachineInstaller] = C:\Program Files\Teams Installer\Teams.exe --checkInstall --source=PROPLUS (file missing)

O10 - Unknown file in Winsock LSP: C:\Windows\system32\nlansp_c.dll

O15 - Trusted Zone: https://vtmc-files.sharepoint.com

O15 - Trusted Zone: https://vtmc-myfiles.sharepoint.com

O17 - DHCP DNS 1: 172.20.10.1

O17 - HKLM\System\CCS\Services\Tcpip\..\{6260f058-60e9-4d92-ab8c-22f190a612c4}: [NameServer] = 8.8.4.4 (Well-known DNS: Google)

O17 - HKLM\System\CCS\Services\Tcpip\..\{6260f058-60e9-4d92-ab8c-22f190a612c4}: [NameServer] = 8.8.8.8 (Well-known DNS: Google)

O22 - Task: (damaged) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:aemarebackup.dll -f:BackupMareData (Microsoft) (user missing)

O22 - Task: (damaged) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:appraiser.dll -foScheduledTelemetryRun (Microsoft) (user missing)

O22 - Task: (disabled) \Microsoft\Windows\Clip\LicenseImdsIntegration - C:\Windows\system32\fclip.exe (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\Windows\System32\Autopilot.dll (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\Windows\System32\Autopilot.dll (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup - C:\Windows\system32\MdmDiagnosticsTool.exe /clean (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\Shell\ThemeAssetTask_SyncFODState - {3BC5DD7D-EA3B-428C-B9B6-0723DB6A1057} - C:\Windows\System32\Windows.UI.Immersive.dll (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (Microsoft)

O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (Microsoft)

O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW invsvc (Microsoft)

O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:aemarebackup.dll -f:BackupMareData (Microsoft)

O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:appraiser.dll -foScheduledTelemetryRun (Microsoft)

O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\sc.exe start InventorySvc

O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)

O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\SdbinstMergeDbTask - C:\Windows\system32\sdbinst.exe -mm (Microsoft)

O22 - Task: (telemetry) NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe

O22 - Task: (telemetry) NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe

O22 - Task: (telemetry) NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe

O22 - Task: (telemetry) NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe

O22 - Task: \Microsoft\Office\Office Performance Monitor - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe (Microsoft)

O22 - Task: \Microsoft\Office\Office Serviceability Manager - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe /checkin (Microsoft)

O22 - Task: \Microsoft\Windows\AppxDeploymentClient\UCPD velocity - C:\Windows\system32\UCPDMgr.exe (Microsoft)

O22 - Task: \Microsoft\Windows\CloudRestore\Backup - {722D0F89-B69C-4700-AE8C-4A44350E4876},$(Arg0) - C:\Windows\System32\CloudRestoreLauncher.dll (Microsoft)

O22 - Task: \Microsoft\Windows\CloudRestore\Restore - {b4bcfa6f-948d-46b8-bf27-e8b1117e23b3} - C:\Windows\system32\CloudRestoreLauncher.dll (Microsoft)

O22 - Task: \Microsoft\Windows\Input\InputSettingsRestoreDataAvailable - {378EAB97-EFD6-4ED5-9AD9-E64A6AA1E6FA},InputSettingsRestoreDataAvailable - C:\Windows\System32\InputCloudStore.dll (Microsoft)

O22 - Task: \Microsoft\Windows\Input\syncpensettings - {3ECEE215-83F5-4123-A592-74F1FE4C3D59},SYNC_PEN_SETTINGS - C:\Windows\System32\SettingsHandlers_Pen.dll (Microsoft)

O22 - Task: \Microsoft\Windows\PI\SecureBootEncodeUEFI - C:\Windows\system32\SecureBootEncodeUEFI.exe (Microsoft)

O22 - Task: \Microsoft\Windows\Printing\PrintJobCleanupTask - {8ABCE260-32B6-476C-AE13-B34D0C91292D} - C:\Windows\System32\PrinterCleanupTask.dll (Microsoft)

O22 - Task: \Microsoft\Windows\Security\Pwdless\IntelligentPwdlessTask - {8702A841-D5CA-47C3-812D-9CEDC304C200} - C:\Windows\system32\IntelligentPwdlessTask.dll (Microsoft)

O22 - Task: \Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScan_LicenseAccepted - C:\Windows\system32\usoclient.exe StartOobeAppsScan (Microsoft)

O22 - Task: \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\Windows\system32\MusNotification.exe (file missing)

O22 - Task: \Microsoft\Windows\WlanSvc\MoProfileManagement - {085EDA12-CF4A-4944-8222-8ADCADE137CB} - C:\Windows\System32\WlanMediaManager.dll (Microsoft)

O22 - Task: NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

O22 - Task: NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe

O22 - Task: NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler

O22 - Task: NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

O22 - Task: NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe

O22 - Task: OneDrive Per-Machine Standalone Update Task - C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe

O22 - Task: OneDrive Reporting Task-S-1-5-21-296276250-2114420591-2592920052-1001 - C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting

O23 - Service R2: Dolby DAX API Service - (DolbyDAXAPI) - C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_fe9531bca29258f3\DAX3API.exe

O23 - Service R2: Fortemedia APO Control Service - (FMAPOService) - C:\Windows\System32\FMService64.exe

O23 - Service R2: Lenovo Fn and function keys service - (LenovoFnAndFunctionKeys) - C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_9c2a9014dc4e8797\LenovoUtilityService.exe

O23 - Service R2: nordvpn-service - C:\Program Files\NordVPN\nordvpn-service.exe

O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_64ea833c46d6bad8\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_64ea833c46d6bad8\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"

O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\Windows\System32\RtkAudUService64.exe

O23 - Service S2: NordSec Update Service - (NordUpdaterService) - C:\Program Files\NordUpdater\NordUpdateService.exe

O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe

O23 - Service S3: FileSyncHelper - C:\Program Files (x86)\Microsoft OneDrive\23.038.0219.0001\FileSyncHelper.exe

O23 - Service S3: NVIDIA FrameView SDK service - (FvSvc) - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe -service

O23 - Service S3: OneDrive Updater Service - C:\Program Files (x86)\Microsoft OneDrive\23.038.0219.0001\OneDriveUpdaterService.exe





--

End of file - Time spent: 11 sec. - 29956 bytes, CRC32: FFFFFFFF. Sign: ﶊ

I am at loss, I do not want to keep losing my work indefinetly. As soon as I install windows, this keeps repeating for the past two weeks. I have linux on another SSD, it seems to dodge this issue, but I would like to be able to use Windows for work and school as I need certain apps.