﻿<?xml version="1.0" encoding="utf-8"?>
<DisplayDriverUninstaller Version="18.1.5.6">
	<LogEntries>
		<Event>
			<Time>7/31/2026 2:57:58 PM</Time>
			<Message>The following paths are detected.</Message>
			<Values Separator=" = ">
				<KvP>
					<Key>[Found] AppExeFile</Key>
					<Value>D:\Downloads\[Guru3D]-DDU\DDU v18.1.5.6\Display Driver Uninstaller.exe</Value>
				</KvP>
				<KvP>
					<Key>[Found] AppBase</Key>
					<Value>D:\Downloads\[Guru3D]-DDU\DDU v18.1.5.6\</Value>
				</KvP>
				<KvP>
					<Key>[Found] Settings</Key>
					<Value>D:\Downloads\[Guru3D]-DDU\DDU v18.1.5.6\Settings\</Value>
				</KvP>
				<KvP>
					<Key>[Found] Logs</Key>
					<Value>D:\Downloads\[Guru3D]-DDU\DDU v18.1.5.6\DDU Logs\</Value>
				</KvP>
				<KvP>
					<Key>[Found] Language</Key>
					<Value>D:\Downloads\[Guru3D]-DDU\DDU v18.1.5.6\Settings\Languages\</Value>
				</KvP>
				<KvP />
				<KvP>
					<Key>[Found] ProgramFiles</Key>
					<Value>C:\Program Files\</Value>
				</KvP>
				<KvP>
					<Key>[Found] ProgramFilesx86</Key>
					<Value>C:\Program Files (x86)\</Value>
				</KvP>
				<KvP />
				<KvP>
					<Key>[Found] Roaming</Key>
					<Value>C:\ProgramData\</Value>
				</KvP>
				<KvP>
					<Key>[Not found] AppBaseRoaming</Key>
					<Value>C:\ProgramData\DisplayDriverUninstaller\</Value>
				</KvP>
				<KvP />
				<KvP>
					<Key>[Found] SystemDrive</Key>
					<Value>C:\</Value>
				</KvP>
				<KvP>
					<Key>[Found] WinDir</Key>
					<Value>C:\Windows\</Value>
				</KvP>
				<KvP>
					<Key>[Found] UserPath</Key>
					<Value>C:\Users\</Value>
				</KvP>
				<KvP>
					<Key>[Found] System32</Key>
					<Value>C:\Windows\system32\</Value>
				</KvP>
				<KvP>
					<Key>[Found] SysWOW64</Key>
					<Value>C:\Windows\SysWOW64\</Value>
				</KvP>
			</Values>
		</Event>
		<Warning>
			<Time>7/31/2026 2:58:03 PM</Time>
			<Message>We are not in Safe Mode</Message>
		</Warning>
		<Event>
			<Time>7/31/2026 2:58:03 PM</Time>
			<Message>The following third-party driver packages are installed on this computer</Message>
			<Values Separator=" = ">
				<KvP>
					<Value>C:\Windows\inf\oem0.inf</Value>
				</KvP>
				<KvP>
					<Key>Provider</Key>
					<Value>NVIDIA</Value>
				</KvP>
				<KvP>
					<Key>Class</Key>
					<Value>Display</Value>
				</KvP>
				<KvP />
				<KvP>
					<Value>C:\Windows\inf\oem1.inf</Value>
				</KvP>
				<KvP>
					<Key>Provider</Key>
					<Value>NVIDIA Corporation</Value>
				</KvP>
				<KvP>
					<Key>Class</Key>
					<Value>MEDIA</Value>
				</KvP>
				<KvP />
				<KvP>
					<Value>C:\Windows\inf\oem3.inf</Value>
				</KvP>
				<KvP>
					<Key>Provider</Key>
					<Value>Realtek Semiconductor Corp.</Value>
				</KvP>
				<KvP>
					<Key>Class</Key>
					<Value>MEDIA</Value>
				</KvP>
				<KvP />
			</Values>
		</Event>
		<Event>
			<Time>7/31/2026 2:58:04 PM</Time>
			<Message>Trying to impersonate the SYSTEM account... SUCCESS !</Message>
			<Values Separator=" : ">
				<KvP>
					<Key>Number of process to check</Key>
					<Value>119</Value>
				</KvP>
				<KvP>
					<Key>svchost</Key>
					<Value>OpenProcessToken Failed 5, privilege not held</Value>
				</KvP>
				<KvP>
					<Key>svchost</Key>
					<Value>S-1-5-18</Value>
				</KvP>
				<KvP>
					<Key>svchost</Key>
					<Value>SYSTEM token obtained: SUCCESS</Value>
				</KvP>
			</Values>
		</Event>
		<Event>
			<Time>7/31/2026 2:58:04 PM</Time>
			<Message>Reverting the Impersonalisation is successful !</Message>
		</Event>
		<Event>
			<Time>7/31/2026 2:58:06 PM</Time>
			<Message>&gt;&gt; Successfully saved log to file!</Message>
		</Event>
	</LogEntries>
</DisplayDriverUninstaller>