[SOLVED] Keeps alt-tabbing by itself

[micbp]

hey everyone
i have a problem with Windows 10 home seemingly doing alt-tab by itself
doesnt take away focus from the active window, but the window just becomes inactive for a split second and then active again
during full-screen watching (youtube/twitch) windows bar gets visible for a second
minimizes some small applications/some applications blink black
in general, the exact same effect if i quickly press alt-tab with no other window to choose

interesting thing is that i did full clean windows re-install (with completely deleting the main SSD partition and creating it again, didnt touch OEM partitions though), but the problem still here
installed only essential programs, like Visual C++, NVidia and HP drivers, all which usually didnt cause any problems for over a year of past using

ps. also have an additional HDD with some documents and files, which i didnt wipe during reinstall
have kaspersky and fully checked the pc with it and with adwcleaner
have no idea what could be causing this after complete clean reinstall

pps. if there is something launching, maybe is there a way to track what process it is, when i catch it by the exact time?

 

[Colif]

Does it happen in safe mode?

1. go to settings/update & security/recovery
2. under advanced startup, click restart now button
3. this restarts PC in a blue menu
4. choose troubleshoot
5. choose advanced
6. choose startup options
7. click the restart button
8. choose a safe mode (it doesn't matter which) by using number associated with it.
9. Pc will restart and load safe mode

If not, does it happen in a clean boot?
Try a clean boot and see if it changes anything - make sure to read instructions and make sure NOT to disable any microsoft services or windows won't load right - https://support.microsoft.com/en-au/help/929135/how-to-perform-a-clean-boot-in-windows

if clean boot fixes it, it shows its likely a startup program. You should, over a number of startups. restart the programs you stopped to isolate the one that is to blame.

I can only think, from the drivers you installed, it could be the HP ones. What are they for? is this a HP PC or is it just printer drivers?

have you cleaned keyboard? just to make sure its not a physical thing. Does it happen if keyboard unplugged?

 

[micbp]

thanks for your reply, i will try safe mode and clean boot and report back

im pretty sure its not a physical thing, since its not a "legit" alt-tab, because window choice tab doesnt even show up
it is more like some invisible window launches and closes right away, making currently active window inactive for a second and then active back again

and those are variety of hp drivers, bios updates, realtek and such, it is an hp laptop, but those drivers never caused any problems for over a year, and hasnt been updated or changed in a while before this thing started happening. i think they might have started conflicting with some recent windows kb update, which windows constantly installs from time to time, so they still might be the cause i guess

 

[Colif]

if its a non windows program launching and closing suddenly, you might identify it via those 2 things as it shouldn't happen at all in safe mode, and if its a start up program, turning them all off and slowly adding them one by one over a few start ups might isolate it.
How often does it happen?? If its only sometimes it might take a while to find cause. Means you have to add programs back slower to startup.

if clean boot doesn't help, and it doesn't happen in safe mode, then it might be drivers. I have a program we can use to see what is installed, but I wait and see how you go first.

 

[micbp]

yeah, thats the problem that it doesnt happen very often
and very random, could happen twice in an hour or once in 8 hours
and i also have to catch it by either watching active window upper part or stream or some application that would minimize
and i could pretty much blink and miss it

tbh right now im just trying to catch it again in a regular mode, since it hasnt happen in 2 days already, since my first post here (or i keep missing it)
so maybe it actually got fixed somehow? (or government agent watching my laptop causing this saw that i created this topic)
but it was happening several times every day for around 2 weeks before that post
i have no idea right now tbh, but will report back whatever the result will be

 

[Colif]

or government agent watching my laptop causing this saw that i created this topic)

lol

wonder if its a command prompt window or something else.
you could use process monitor to track what opens cmd but its going to be a long list as I feel many programs use it - https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

 

[micbp]

yeah, its still happening
i will try to track it with a process monitor then, seems like a good idea, thanks
and yeah, there is a long list, but hopefully, something unsual will turn up

 

[Colif]

So it happens in a clean boot, did you try safe mode?? not sure if its a driver or not.

lets see if its windows
right click start button
choose powershell (admin)
type SFC /scannow and press enter
once its completed, copy/paste this command into same window:

Repair-WindowsImage -Online -RestoreHealth
and press enter

SFC fixes system files, second command cleans image files, re run SFC if it failed to fix all files and restart PC

which version of win 10?
right click start
choose run...
type winver and press enter
current version is 20H2

 

[micbp]

couldnt catch it in a safe mode yet, but it may still happen there, i just have to be sitting for several days using it and actively looking to catch it.. so cannot confirm or deny yet sadly

i will try to repair, maybe something gets corrupted even right after clean install too and it will fix it, thanks

yes, its 20H2 with 19042.906 build, and it usually automatically installs all the latest KB updates too

 

[micbp]

ok by running SFC /scannow it reported that it has detected and restored damaged files
but by running Repair-WindowsImage -Online -RestoreHealth it reported
Path :
Online : True
ImageHealthState : Healthy
RestartNeeded : False

so i guess second command didnt do anything

hopefully the first one did something

ps. btw checked autoruns, nothing unusual there

 

[Colif]

Is this a laptop or desktop? I see HP, so is it made by them? what model is it?

just wondering if its a function that would stop happening if a driver was installed.

procmon at least track the usage so you just need to wait and then look at its output for same time

 

[micbp]

it is a laptop made by HP
model is Omen 15-dc1068tx

yeah, i keep running procmon in the background to be ready to catch it lol

 

[Colif]

have you run the HP Diagnostics?
https://www8.hp.com/us/en/campaigns/hpsupportassistant/hpsupport.html

 

[micbp]

i think it only checks hardware
you think it could be related to ssd or hdd or ram or such?

 

[micbp]

actually scratch that, im wrong, it can check system as well
i will try to run it

edit: it didnt find anything
guess will try to wait and try to catch it again after SFC /scannow and while running procmon
it did say it fixed something, so maybe it actually did?

 

[Colif]

you think it could be related to ssd or hdd or ram or such?

not directly, I am just trying to see what it might be.
I prefer not to wait for something that sometimes happens. I don't like errors like that.

 

[micbp]

well, the fact that even complete clean reinstall didnt fix it, worries me also tbh

also maybe im reading the log wrong, but i guess SFC /scannow fixed only that

2021-04-07 14:36:34, Info CSI 000001da [SR] Repairing 1 components
2021-04-07 14:36:34, Info CSI 000001db [SR] Beginning Verify and Repair transaction
2021-04-07 14:36:34, Info CSI 000001dc [SR] Repairing file \??\C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\\OneDrive.lnk from store

which is i guess caused by me deleting onedrive, so i guess it didnt actually fixed anything

ps. at least, the only thing i could find under "repairing" or "restoring" there

 

[Colif]

i asked a friend if he has any ideas that might speed up identifying cause

Can you download and run Driverview - http://www.nirsoft.net/utils/driverview.html
All it does is looks at drivers installed; it won't install any (this is intentional as 3rd party driver updaters often get it wrong)
When you run it, go into view tab and set it to hide all Microsoft drivers, will make list shorter.

Now its up to you, you can look through the drivers and try to find old drivers, or you can take a screenshot from (and including)Driver name to (and including)Creation date.

upload it to an image sharing website and show link here

All I would do is look at driver versions (or dates if you lucky to have any) to see what might have newer versions.

I have to go soon but I don't want to just wait around for it to happen...

it might be a hardware bug, only as it does survive clean installs.

worst part is its so random, you can't make it happen, or if you can, the pattern isn't obvious.

 

[micbp]

here is a combined screenshot:
https://ibb.co/93MxQhz

sorry, it doesnt let me insert it as an image into the post for some reason, but the link itself works

and here is a text version for full info:

Spoiler: drivers

==================================================
Driver Name : dump_dumpfve.sys
Address : FFFFF80632420000 End Address : FFFFF8063243D000
Size : 0x0001d000
Load Count : 1
Index : 183
File Type : Unknown
Description :
Version :
Company :
Product Name :
Modified Date : N/A
Created Date : N/A
Filename : C:\Windows\System32\Drivers\dump_dumpfve.sys
File Attributes :
Service Name :
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : dump_dumpstorport.sys
Address : FFFFF80632390000 End Address : FFFFF8063239E000
Size : 0x0000e000
Load Count : 2
Index : 181
File Type : Unknown
Description :
Version :
Company :
Product Name :
Modified Date : N/A
Created Date : N/A
Filename : C:\Windows\System32\Drivers\dump_dumpstorport.sys
File Attributes :
Service Name :
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : dump_stornvme.sys
Address : FFFFF806323D0000 End Address : FFFFF806323FB000
Size : 0x0002b000
Load Count : 1
Index : 182
File Type : Unknown
Description :
Version :
Company :
Product Name :
Modified Date : N/A
Created Date : N/A
Filename : C:\Windows\System32\drivers\dump_stornvme.sys
File Attributes :
Service Name :
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : hpcustomcapdriver.sys
Address : FFFFF80630D20000 End Address : FFFFF80630D29000
Size : 0x00009000
Load Count : 1
Index : 145
File Type : System Driver
Description : HP Custom Capabilities Driver
Version : 1.0.0.1
Company : HP Inc.
Product Name : hpcustomcapdriver.sys
Modified Date : 06.07.2018 6:20:18
Created Date : 06.07.2018 6:20:18
Filename : C:\Windows\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys
File Attributes :
Service Name : HPCustomCapDriver
Service Display Name: @oem11.inf,%HPCustomCapDriverDesc%;HP Application Driver
Digital Signature :
==================================================

==================================================
Driver Name : ViGEmBus.sys
Address : FFFFF80630F80000 End Address : FFFFF80630F95000
Size : 0x00015000
Load Count : 1
Index : 162
File Type : Unknown
Description : Virtual Gamepad Emulation Bus Driver
Version : 1.14.3.0
Company : Benjamin Hoglinger-Stelzer
Product Name : Virtual Gamepad Emulation Bus Driver
Modified Date : 01.08.2018 5:55:32
Created Date : 01.08.2018 5:55:32
Filename : C:\Windows\System32\DriverStore\FileRepository\vigembus.inf_amd64_e84845c70c38fbe7\x64\ViGEmBus.sys
File Attributes :
Service Name : ViGEmBus
Service Display Name: @oem34.inf,%ViGEmBus.SVCDESC%;Virtual Gamepad Emulation Service
Digital Signature :
==================================================

==================================================
Driver Name : hpomencustomcapdriver.sys
Address : FFFFF80630D00000 End Address : FFFFF80630D09000
Size : 0x00009000
Load Count : 1
Index : 143
File Type : System Driver
Description : HP Omen Custom Capabilities Driver
Version : 1.0.0.1
Company : HP Inc.
Product Name : hpomencustomcapdriver.sys
Modified Date : 19.12.2018 22:45:30
Created Date : 19.12.2018 22:45:30
Filename : C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_326f2e1d16385daf\x64\hpomencustomcapdriver.sys
File Attributes :
Service Name : HPOmenCustomCapDriver
Service Display Name: @oem8.inf,%HPOmenCustomCapDriverDesc%;HP Omen Driver
Digital Signature :
==================================================

==================================================
Driver Name : iaStorAC.sys
Address : FFFFF80619400000 End Address : FFFFF80619FE4000
Size : 0x00be4000
Load Count : 1
Index : 44
File Type : System Driver
Description : Intel(R) Rapid Storage Technology driver - x64
Version : 17.9.0.1007
Company : Intel Corporation
Product Name : Intel(R) Rapid Storage Technology driver
Modified Date : 20.05.2020 16:44:12
Created Date : 20.05.2020 16:44:12
Filename : C:\Windows\System32\drivers\iaStorAC.sys
File Attributes : A
Service Name : iaStorAC
Service Display Name: @oem85.inf,%iaStorAC.ServiceName%;Intel(R) Chipset SATA/PCIe RST Premium Controller
Digital Signature :
==================================================

==================================================
Driver Name : WirelessButtonDriver64.sys
Address : FFFFF80630DB0000 End Address : FFFFF80630DBA000
Size : 0x0000a000
Load Count : 1
Index : 150
File Type : System Driver
Description : HP Wireless Button Driver
Version : 2.1.14.1
Company : HP
Product Name : HP Wireless Button Driver
Modified Date : 08.06.2020 8:59:28
Created Date : 08.06.2020 8:59:28
Filename : C:\Windows\System32\drivers\WirelessButtonDriver64.sys
File Attributes : A
Service Name : WirelessButtonDriver64
Service Display Name: @oem17.inf,%ServiceDesc%;HP Wireless Button Driver Service
Digital Signature :
==================================================

==================================================
Driver Name : TeeDriverW10x64.sys
Address : FFFFF806344C0000 End Address : FFFFF8063450C000
Size : 0x0004c000
Load Count : 1
Index : 130
File Type : System Driver
Description : Intel(R) Management Engine Interface
Version : 2031.15.0.1743
Company : Intel Corporation
Product Name : Intel(R) Management Engine Interface
Modified Date : 10.08.2020 0:31:38
Created Date : 10.08.2020 0:31:38
Filename : C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_1308ad4bd1ad0f9f\x64\TeeDriverW10x64.sys
File Attributes :
Service Name : MEIx64
Service Display Name: @oem16.inf,%TEE_SvcDesc%;Intel(R) Management Engine Interface
Digital Signature :
==================================================

==================================================
Driver Name : rt640x64.sys
Address : FFFFF80630950000 End Address : FFFFF80630A66000
Size : 0x00116000
Load Count : 1
Index : 131
File Type : Network Driver
Description : Realtek 8125/8136/8168/8169 NDIS 6.40 64-bit Driver
Version : 10.43.723.2020
Company : Realtek
Product Name : Realtek 8125/8136/8168/8169 PCI/PCIe Adapters
Modified Date : 25.08.2020 3:48:52
Created Date : 25.08.2020 3:48:52
Filename : C:\Windows\System32\drivers\rt640x64.sys
File Attributes : A
Service Name : rt640x64
Service Display Name: @oem73.inf,%rt640.Service.DispName%;Realtek RT640 NT Driver
Digital Signature :
==================================================

==================================================
Driver Name : RtsPer.sys
Address : FFFFF80630A70000 End Address : FFFFF80630BBC000
Size : 0x0014c000
Load Count : 1
Index : 132
File Type : System Driver
Description : RTS PCIE READER Driver
Version : 10.0.19041.21338
Company : Realsil Semiconductor Corporation
Product Name : Windows (R) Win 7 DDK driver
Modified Date : 02.09.2020 19:21:20
Created Date : 02.09.2020 19:21:20
Filename : C:\Windows\System32\drivers\RtsPer.sys
File Attributes : A
Service Name : RTSPER
Service Display Name: @oem4.inf,%Rts5227PER%;Realtek PCIE Card Reader - PER
Digital Signature :
==================================================

==================================================
Driver Name : ibtusb.sys
Address : FFFFF80631A00000 End Address : FFFFF80631FE2000
Size : 0x005e2000
Load Count : 1
Index : 168
File Type : Unknown
Description : Intel(R) Wireless Bluetooth(R) Filter Driver
Version : 22.0.0.2
Company : Intel Corporation
Product Name : Intel(R) Wireless Bluetooth(R)
Modified Date : 18.09.2020 18:05:06
Created Date : 18.09.2020 18:05:06
Filename : C:\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_6b40b9e7d046126e\ibtusb.sys
File Attributes :
Service Name : ibtusb
Service Display Name: @oem10.inf,%ibtusb.SVCDESC_IBT%;Intel(R) Wireless Bluetooth(R)
Digital Signature :
==================================================

==================================================
Driver Name : Netwtw08.sys
Address : FFFFF80633BD0000 End Address : FFFFF806344AD000
Size : 0x008dd000
Load Count : 1
Index : 127
File Type : Network Driver
Description : Intel® Wireless WiFi Link Driver
Version : 21.80.10.1
Company : Intel Corporation
Product Name : Intel® Wireless WiFi Link Adapter
Modified Date : 02.10.2020 12:30:10
Created Date : 02.10.2020 12:30:10
Filename : C:\Windows\System32\drivers\Netwtw08.sys
File Attributes : A
Service Name : Netwtw08
Service Display Name: ___ Драйвер адаптера Intel(R) Wireless для Windows 10 64 Bit
Digital Signature :
==================================================

==================================================
Driver Name : Accelerometer.sys
Address : FFFFF80630D10000 End Address : FFFFF80630D1E000
Size : 0x0000e000
Load Count : 1
Index : 144
File Type : System Driver
Description : HP Accelerometer
Version : 7.0.18.1
Company : HP
Product Name : Mobile Data Protection System
Modified Date : 28.10.2020 7:49:54
Created Date : 28.10.2020 7:49:54
Filename : C:\Windows\System32\drivers\Accelerometer.sys
File Attributes : A
Service Name : Accelerometer
Service Display Name: @oem3.inf,%accelerometer_desc%;HP Mobile Data Protection Sensor
Digital Signature :
==================================================

==================================================
Driver Name : hpdskflt.sys
Address : FFFFF8061AA30000 End Address : FFFFF8061AA41000
Size : 0x00011000
Load Count : 1
Index : 57
File Type : System Driver
Description : HP Disk Filter - SATA/RAID
Version : 7.0.18.1
Company : HP
Product Name : Mobile Data Protection System
Modified Date : 28.10.2020 7:49:56
Created Date : 28.10.2020 7:49:56
Filename : C:\Windows\System32\drivers\hpdskflt.sys
File Attributes : A
Service Name : hpdskflt
Service Display Name: @oem3.inf,%service_desc%;HP Disk Filter
Digital Signature :
==================================================

==================================================
Driver Name : ICCWDT.sys
Address : FFFFF80634510000 End Address : FFFFF8063451B000
Size : 0x0000b000
Load Count : 1
Index : 133
File Type : System Driver
Description : Intel(R) Watchdog Timer Driver (Intel(R) WDT)
Version : 11.7.0.1001
Company : Intel Corporation
Product Name : Intel(R) Watchdog Timer Driver (Intel(R) WDT)
Modified Date : 18.11.2020 14:20:16
Created Date : 18.11.2020 14:20:16
Filename : C:\Windows\System32\drivers\ICCWDT.sys
File Attributes : A
Service Name : ICCWDT
Service Display Name: @oem79.inf,%ICCWDT.SVCDESC%;Intel(R) Watchdog Timer Driver (Intel(R) WDT)
Digital Signature :
==================================================

==================================================
Driver Name : iocbios2.sys
Address : FFFFF80630FA0000 End Address : FFFFF80630FAA000
Size : 0x0000a000
Load Count : 1
Index : 163
File Type : System Driver
Description : Intel(R) Overclocking Device Driver
Version : 6.5.1.40
Company : Intel Corporation
Product Name : Intel(R) Extreme Tuning Utility
Modified Date : 18.11.2020 14:20:36
Created Date : 18.11.2020 14:20:36
Filename : C:\Windows\System32\drivers\iocbios2.sys
File Attributes : A
Service Name : XTUComponent
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : rtf64x64.sys
Address : FFFFF80630320000 End Address : FFFFF80630330000
Size : 0x00010000
Load Count : 1
Index : 96
File Type : System Driver
Description : Realtek packet filter driver
Version : 3.4.828.2018
Company : Realtek
Product Name : Realtek packet filter driver
Modified Date : 22.12.2020 3:49:16
Created Date : 22.12.2020 3:49:16
Filename : C:\Windows\system32\DRIVERS\rtf64x64.sys
File Attributes : A
Service Name : rtf64
Service Display Name: @oem80.inf,%rtf64_Desc%;Realtek LightWeight Filter (NDIS6.40)
Digital Signature :
==================================================

==================================================
Driver Name : klbackupdisk.sys
Address : FFFFF80630500000 End Address : FFFFF80630519000
Size : 0x00019000
Load Count : 1
Index : 67
File Type : Dynamic Link Library
Description : Backup Disk Filter [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:52
Created Date : 19.02.2021 21:08:52
Filename : C:\Windows\system32\DRIVERS\klbackupdisk.sys
File Attributes : A
Service Name : klbackupdisk
Service Display Name: Kaspersky Lab klbackupdisk
Digital Signature :
==================================================

==================================================
Driver Name : cm_km.sys
Address : FFFFF806190E0000 End Address : FFFFF8061911B000
Size : 0x0003b000
Load Count : 1
Index : 34
File Type : Dynamic Link Library
Description : Cryptographic Module Driver x86 (56 bit)
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:52
Created Date : 19.02.2021 21:08:52
Filename : C:\Windows\system32\DRIVERS\cm_km.sys
File Attributes : A
Service Name : cm_km
Service Display Name: AO Kaspersky Lab Cryptographic Module x64 (56 bit)
Digital Signature :
==================================================

==================================================
Driver Name : klbackupflt.sys
Address : FFFFF8062F800000 End Address : FFFFF8062F831000
Size : 0x00031000
Load Count : 1
Index : 70
File Type : Dynamic Link Library
Description : Backup File Filter [fre_win7_x64]
Version : 30.587.0.810
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:54
Created Date : 19.02.2021 21:08:54
Filename : C:\Windows\system32\DRIVERS\klbackupflt.sys
File Attributes : A
Service Name : klbackupflt
Service Display Name: Kaspersky Lab klbackupflt
Digital Signature :
==================================================

==================================================
Driver Name : kldisk.sys
Address : FFFFF8062FC50000 End Address : FFFFF8062FC6C000
Size : 0x0001c000
Load Count : 1
Index : 78
File Type : Dynamic Link Library
Description : Virtual Disk [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:54
Created Date : 19.02.2021 21:08:54
Filename : C:\Windows\system32\DRIVERS\kldisk.sys
File Attributes : A
Service Name : kldisk
Service Display Name: kldisk
Digital Signature :
==================================================

==================================================
Driver Name : klim6.sys
Address : FFFFF80630300000 End Address : FFFFF80630315000
Size : 0x00015000
Load Count : 1
Index : 95
File Type : Dynamic Link Library
Description : Packet Network Filter [fre_win7_x64]
Version : 30.587.0.930
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:56
Created Date : 19.02.2021 21:08:56
Filename : C:\Windows\system32\DRIVERS\klim6.sys
File Attributes : A
Service Name : klim6
Service Display Name: @oem44.inf,%KLIM6_Desc%;Kaspersky Anti-Virus NDIS 6 Filter
Digital Signature :
==================================================

==================================================
Driver Name : klpd.sys
Address : FFFFF8062FC30000 End Address : FFFFF8062FC42000
Size : 0x00012000
Load Count : 1
Index : 77
File Type : Dynamic Link Library
Description : Format Recognizer [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:58
Created Date : 19.02.2021 21:08:58
Filename : C:\Windows\system32\DRIVERS\klpd.sys
File Attributes : A
Service Name : klpd
Service Display Name: Kaspersky Lab format recognizer driver
Digital Signature :
==================================================

==================================================
Driver Name : klkbdflt.sys
Address : FFFFF80636BE0000 End Address : FFFFF80636BF9000
Size : 0x00019000
Load Count : 1
Index : 138
File Type : Dynamic Link Library
Description : Keyboard Device Filter [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:58
Created Date : 19.02.2021 21:08:58
Filename : C:\Windows\system32\DRIVERS\klkbdflt.sys
File Attributes : A
Service Name : klkbdflt
Service Display Name: Kaspersky Lab KLKBDFLT
Digital Signature :
==================================================

==================================================
Driver Name : klmouflt.sys
Address : FFFFF80630CB0000 End Address : FFFFF80630CCA000
Size : 0x0001a000
Load Count : 1
Index : 140
File Type : Dynamic Link Library
Description : Mouse Device Filter [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:58
Created Date : 19.02.2021 21:08:58
Filename : C:\Windows\system32\DRIVERS\klmouflt.sys
File Attributes : A
Service Name : klmouflt
Service Display Name: Kaspersky Lab KLMOUFLT
Digital Signature :
==================================================

==================================================
Driver Name : klpnpflt.sys
Address : FFFFF80631300000 End Address : FFFFF80631315000
Size : 0x00015000
Load Count : 1
Index : 103
File Type : Dynamic Link Library
Description : Generic PnP filter [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:09:00
Created Date : 19.02.2021 21:09:00
Filename : C:\Windows\system32\DRIVERS\klpnpflt.sys
File Attributes : A
Service Name : klpnpflt
Service Display Name: Kaspersky Lab klpnpflt
Digital Signature :
==================================================

==================================================
Driver Name : kltap.sys
Address : FFFFF806307D0000 End Address : FFFFF806307DD000
Size : 0x0000d000
Load Count : 1
Index : 114
File Type : Network Driver
Description : TAP-Windows Virtual Network Driver (NDIS 6.0)
Version : 9.0.0.22
Company : The OpenVPN Project
Product Name : TAP-Windows Virtual Network Driver (NDIS 6.0)
Modified Date : 19.02.2021 21:09:00
Created Date : 19.02.2021 21:09:00
Filename : C:\Windows\System32\drivers\kltap.sys
File Attributes : A
Service Name : kltap
Service Display Name: @oem29.inf,%devicedescription%;Kaspersky Security Data Escort Adapter
Digital Signature :
==================================================

==================================================
Driver Name : klwtp.sys
Address : FFFFF806302B0000 End Address : FFFFF806302FB000
Size : 0x0004b000
Load Count : 1
Index : 94
File Type : Dynamic Link Library
Description : WFP Network Connection Filter Driver [fre_win7_x64]
Version : 30.587.0.590
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:09:00
Created Date : 19.02.2021 21:09:00
Filename : C:\Windows\system32\DRIVERS\klwtp.sys
File Attributes : A
Service Name : klwtp
Service Display Name: KLwtp - WFP callout traffic inspector
Digital Signature :
==================================================

==================================================
Driver Name : klwfp.sys
Address : FFFFF80630100000 End Address : FFFFF80630124000
Size : 0x00024000
Load Count : 1
Index : 88
File Type : Dynamic Link Library
Description : WFP Network Filter [fre_win7_x64]
Version : 30.587.0.170
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:09:00
Created Date : 19.02.2021 21:09:00
Filename : C:\Windows\system32\DRIVERS\klwfp.sys
File Attributes : A
Service Name : klwfp
Service Display Name: klwfp
Digital Signature :
==================================================

==================================================
Driver Name : klhk.sys
Address : FFFFF8062FA00000 End Address : FFFFF8062FB7F000
Size : 0x0017f000
Load Count : 1
Index : 75
File Type : Dynamic Link Library
Description : klhk [fre_win7_x64]
Version : 20.7.4.0
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:09:02
Created Date : 19.02.2021 21:09:02
Filename : C:\Windows\system32\DRIVERS\klhk.sys
File Attributes : A
Service Name : klhk
Service Display Name: Kaspersky Lab service driver
Digital Signature :
==================================================

==================================================
Driver Name : kneps.sys
Address : FFFFF80630600000 End Address : FFFFF80630649000
Size : 0x00049000
Load Count : 1
Index : 108
File Type : Dynamic Link Library
Description : Network Processor [fre_win7_x64]
Version : 30.587.0.460
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:09:02
Created Date : 19.02.2021 21:09:02
Filename : C:\Windows\system32\DRIVERS\kneps.sys
File Attributes : A
Service Name : kneps
Service Display Name: kneps
Digital Signature :
==================================================

==================================================
Driver Name : klgse.sys
Address : FFFFF8062FB80000 End Address : FFFFF8062FC21000
Size : 0x000a1000
Load Count : 1
Index : 76
File Type : Dynamic Link Library
Description : Security Extender [fre_win7_x64]
Version : 20.7.4.0
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:09:02
Created Date : 19.02.2021 21:09:02
Filename : C:\Windows\system32\DRIVERS\klgse.sys
File Attributes : A
Service Name : klgse
Service Display Name: Kaspersky Lab Security Extender Driver
Digital Signature :
==================================================

==================================================
Driver Name : Smb_driver_Intel.sys
Address : FFFFF80630CF0000 End Address : FFFFF80630CFF000
Size : 0x0000f000
Load Count : 1
Index : 142
File Type : Driver
Description : Synaptics SMBus Driver
Version : 19.5.35.61
Company : Synaptics Incorporated
Product Name : Synaptics SMBus Driver
Modified Date : 10.11.2020 19:46:40
Created Date : 30.03.2021 17:00:52
Filename : C:\Windows\System32\drivers\Smb_driver_Intel.sys
File Attributes : A
Service Name : SmbDrvI
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : SynTP.sys
Address : FFFFF80630BC0000 End Address : FFFFF80630C83000
Size : 0x000c3000
Load Count : 1
Index : 135
File Type : Driver
Description : Synaptics Touchpad Win64 Driver
Version : 19.5.35.61
Company : Synaptics Incorporated
Product Name : Synaptics Pointing Device Driver
Modified Date : 10.11.2020 19:46:58
Created Date : 30.03.2021 17:00:52
Filename : C:\Windows\System32\drivers\SynTP.sys
File Attributes : A
Service Name : SynTP
Service Display Name: @oem18.inf,%SynTP.SvcDesc%;Synaptics TouchPad Driver
Digital Signature :
==================================================

==================================================
Driver Name : RTKVHD64.sys
Address : FFFFF806328A0000 End Address : FFFFF80632E78000
Size : 0x005d8000
Load Count : 1
Index : 166
File Type : Sound Driver
Description : Realtek(r) High Definition Audio Function Driver
Version : 6.0.9018.1
Company : Realtek Semiconductor Corp.
Product Name : Realtek(r) High Definition Audio Function Driver
Modified Date : 03.09.2020 1:07:54
Created Date : 30.03.2021 17:01:23
Filename : C:\Windows\system32\drivers\RTKVHD64.sys
File Attributes : A
Service Name : IntcAzAudAddService
Service Display Name: Service for Realtek HD Audio (WDM)
Digital Signature :
==================================================

==================================================
Driver Name : nvhda64v.sys
Address : FFFFF80630FB0000 End Address : FFFFF80630FD3000
Size : 0x00023000
Load Count : 1
Index : 164
File Type : Sound Driver
Description : NVIDIA HDMI Audio Driver
Version : 1.3.38.40
Company : NVIDIA Corporation
Product Name : NVIDIA HDMI Audio Driver
Modified Date : 26.03.2021 2:34:15
Created Date : 30.03.2021 17:06:04
Filename : C:\Windows\system32\drivers\nvhda64v.sys
File Attributes : A
Service Name : NVHDA
Service Display Name: @oem83.inf,%NVHDA.SvcDesc%;Service for NVIDIA High Definition Audio Driver
Digital Signature :
==================================================

==================================================
Driver Name : klflt.sys
Address : FFFFF80630560000 End Address : FFFFF806305EA000
Size : 0x0008a000
Load Count : 1
Index : 69
File Type : Dynamic Link Library
Description : Filter Core [fre_win7_x64]
Version : 30.587.0.1060
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:56
Created Date : 30.03.2021 17:08:26
Filename : C:\Windows\system32\DRIVERS\klflt.sys
File Attributes : A
Service Name : klflt
Service Display Name: Kaspersky Lab Kernel DLL
Digital Signature :
==================================================

==================================================
Driver Name : klif.sys
Address : FFFFF8062F870000 End Address : FFFFF8062F970000
Size : 0x00100000
Load Count : 1
Index : 73
File Type : Dynamic Link Library
Description : Core System Interceptors [fre_win7_x64]
Version : 30.587.0.1060
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 19.02.2021 21:08:56
Created Date : 30.03.2021 17:08:26
Filename : C:\Windows\system32\DRIVERS\klif.sys
File Attributes : A
Service Name : KLIF
Service Display Name: Kaspersky Lab Driver
Digital Signature :
==================================================

==================================================
Driver Name : klupd_klif_mark.sys
Address : FFFFF806712A0000 End Address : FFFFF806712D3000
Size : 0x00033000
Load Count : 1
Index : 224
File Type : Dynamic Link Library
Description : Kaspersky Lab Anti-Rootkit Memory Driver
Version : 6.5.3.0
Company : AO Kaspersky Lab
Product Name : Kaspersky Bases
Modified Date : 30.03.2021 17:08:50
Created Date : 30.03.2021 17:08:50
Filename : C:\Windows\System32\Drivers\klupd_klif_mark.sys
File Attributes : A
Service Name : klupd_klif_mark
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : klupd_klif_arkmon.sys
Address : FFFFF80619000000 End Address : FFFFF8061903E000
Size : 0x0003e000
Load Count : 1
Index : 30
File Type : Dynamic Link Library
Description : Kaspersky Lab Anti-Rootkit Monitor Driver
Version : 2.5.3.0
Company : AO Kaspersky Lab
Product Name : Kaspersky Bases
Modified Date : 30.03.2021 17:08:50
Created Date : 30.03.2021 17:08:50
Filename : C:\Windows\System32\Drivers\klupd_klif_arkmon.sys
File Attributes : A
Service Name : klupd_klif_arkmon
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : klupd_klif_klbg.sys
Address : FFFFF8061AB60000 End Address : FFFFF8061AB79000
Size : 0x00019000
Load Count : 1
Index : 62
File Type : Dynamic Link Library
Description : Kaspersky Lab Boot Guard Driver
Version : 11.6.1.0
Company : AO Kaspersky Lab
Product Name : Kaspersky Bases
Modified Date : 30.03.2021 17:08:50
Created Date : 30.03.2021 17:08:50
Filename : C:\Windows\System32\Drivers\klupd_klif_klbg.sys
File Attributes : A
Service Name : klupd_klif_klbg
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : klids.sys
Address : FFFFF806712E0000 End Address : FFFFF80671319000
Size : 0x00039000
Load Count : 1
Index : 225
File Type : Dynamic Link Library
Description : Network Processor [fre_win10_amd64]
Version : 10.2.0.120
Company : AO Kaspersky Lab
Product Name : Coretech Delivery
Modified Date : 01.04.2021 13:08:46
Created Date : 30.03.2021 17:09:21
Filename : C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys
File Attributes : A
Service Name : klids
Service Display Name: klids
Digital Signature :
==================================================

==================================================
Driver Name : klupd_klif_klark.sys
Address : FFFFF806752D0000 End Address : FFFFF8067531B000
Size : 0x0004b000
Load Count : 1
Index : 228
File Type : Dynamic Link Library
Description : Kaspersky Lab Anti-Rootkit
Version : 4.6.1.0
Company : AO Kaspersky Lab
Product Name : Kaspersky Bases
Modified Date : 30.03.2021 17:10:48
Created Date : 30.03.2021 17:10:48
Filename : C:\Windows\System32\Drivers\klupd_klif_klark.sys
File Attributes : A
Service Name : klupd_klif_klark
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : HpPortIox64.sys
Address : FFFFF80632FE0000 End Address : FFFFF80632FE7000
Size : 0x00007000
Load Count : 1
Index : 209
File Type : Dynamic Link Library
Description : WinRing0
Version : 1.2.0.5
Company : OpenLibSys.org
Product Name : WinRing0
Modified Date : 22.12.2020 3:49:16
Created Date : 30.03.2021 19:09:51
Filename : C:\Windows\System32\drivers\HpPortIox64.sys
File Attributes : A
Service Name : HpPortIo
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : nvlddmkm.sys
Address : FFFFF80634520000 End Address : FFFFF80636AA3000
Size : 0x02583000
Load Count : 1
Index : 119
File Type : Display Driver
Description : NVIDIA Windows Kernel Mode Driver, Version 465.89
Version : 27.21.14.6589
Company : NVIDIA Corporation
Product Name : NVIDIA Windows Kernel Mode Driver, Version 465.89
Modified Date : 26.03.2021 10:49:18
Created Date : 30.03.2021 19:19:54
Filename : C:\Windows\System32\DriverStore\FileRepository\nvhmi.inf_amd64_04635e3a1590b33b\nvlddmkm.sys
File Attributes : A
Service Name : nvlddmkm
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : UcmCxUcsiNvppc.sys
Address : FFFFF80633AF0000 End Address : FFFFF80633B9E000
Size : 0x000ae000
Load Count : 1
Index : 125
File Type : Dynamic Link Library
Description : NVIDIA PPC Function Driver.
Version : 1.46.831.832
Company : NVIDIA Corporation
Product Name : NVPPC
Modified Date : 26.03.2021 2:34:15
Created Date : 30.03.2021 19:20:20
Filename : C:\Windows\System32\DriverStore\FileRepository\nvppc.inf_amd64_25fb711132593303\UcmCxUcsiNvppc.sys
File Attributes :
Service Name : UcmCxUcsiNvppc
Service Display Name: @oem82.inf,%UcmCxUcsiNvppc.SVCDESC%;NVIDIA USB Type-C PPC Service
Digital Signature :
==================================================

==================================================
Driver Name : ThrottleStop.sys
Address : FFFFF80671340000 End Address : FFFFF8067134D000
Size : 0x0000d000
Load Count : 1
Index : 227
File Type : System Driver
Description : Low-Level Driver
Version : 2.0.1.0
Company :
Product Name : Low-Level Driver
Modified Date : 07.04.2021 13:27:30
Created Date : 30.03.2021 19:26:12
Filename : C:\Users\lukia\AppData\Local\Temp\ThrottleStop.sys
File Attributes : A
Service Name : ThrottleStop
Service Display Name: ThrottleStop
Digital Signature :
==================================================

==================================================
Driver Name : CimFS.SYS
Address : FFFFF806300E0000 End Address : FFFFF806300FB000
Size : 0x0001b000
Load Count : 1
Index : 87
File Type : Unknown
Description :
Version :
Company :
Product Name :
Modified Date : 30.03.2021 19:41:37
Created Date : 30.03.2021 19:41:37
Filename : C:\Windows\System32\Drivers\CimFS.SYS
File Attributes : A
Service Name :
Service Display Name:
Digital Signature :
==================================================

==================================================
Driver Name : PROCMON24.SYS
Address : FFFFF80671320000 End Address : FFFFF8067133B000
Size : 0x0001b000
Load Count : 1
Index : 226
File Type : System Driver
Description : Process Monitor Driver
Version : 3.61.0.0
Company : Sysinternals - www.sysinternals.com
Product Name : Process Monitor
Modified Date : 07.04.2021 13:19:35
Created Date : 07.04.2021 13:19:35
Filename : C:\Windows\system32\Drivers\PROCMON24.SYS
File Attributes : AH
Service Name :
Service Display Name:
Digital Signature :
==================================================

yeah, im still hoping its just some temporary conflict between newest KB update and some drivers, which just hasnt been tested properly... i would try to update some drivers from 2018 for now

 

[Colif]

wonder if its the PCIE card reader, I seen odd things with them in past

I hate how kaspersky is half the list of drivers
not sure why you have Intel rapid storage tech drivers installed, how many drives in PC?
Intel extreme tuning is odd to find on a laptop - you shouldn't really need it. its for overclocking which isn't something most laptops do.

Do you use WIFI or Ethernet?
likely newer versions of both.
Ethernet - https://www.realtek.com/en/componen...0-1000m-gigabit-ethernet-pci-express-software
WIFI - I will need to look at model and see what chipset it has from realtek to find newest drivers.

I have top go but will look in here tomorrow. Things I have to do in morning so maybe be a while.

 

[micbp]

no worries man, its been like that for several weeks, i dont expect something will happen rapidly
thanks for helping with this

i think both those intel rapid storage and intel overclock are automatically installed by hp support assistant from this list:
https://support.hp.com/us-en/driver...1000-laptop-pc-series/26122182/model/29099943
even though i dont really use them. but they were always automatically installed from the day i got this lapot over a year ago, and never caused any problems before

i have wifi, but its usually off and laptop is plugged in with a cord
and Ethernet i honestly have no idea what that even is, so i guess i dont use it(?)

ps. i have 1 ssd and 1 hdd, both of them toshiba and have been installed from the beggining also

 

[micbp]

btw, i think this one is suspicious:
CimFS.SYS FFFFF80150270000 FFFFF8015028B000 0x0001b000 1 87 Unknown 30.03.2021 19:41:37 30.03.2021 19:41:37 C:\Windows\System32\Drivers\CimFS.SYS A
on the screenshot its right at the end after throttlestop driver, and before procmon driver
(i use throttlestop to underclock cpu, and its almost last thing i installed after doing that clean install)
it has unknown and such, what it could be for?

 

[Colif]

ethernet - the cord. update the realtek drivers i linked you.

CimFS.SYS

thats part of windows, driver view isn't perfect
https://www.systemlookup.com/Drivers/12492-CimFS_sys.html

 

[micbp]

damn, i already started thinking im on to the critter lol

ok, drivers done

 

[gardenman]

Hi, download this and run it to see if it helps:
https://www.softpedia.com/get/System/System-Info/Window-Focus-Logger.shtml

You want to run the WindowFocusLoggerGUI.exe and not the other .exe file. Set the Runtime in minutes to 1 hour or so, long enough for it to alt-tab out.

It tells you which programs have focus. Right after it alt-tabs out, see if it shows up in this program. I've not had much luck with this program before, but it's worth a shot.