Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30-10-2021
Ran by marys (administrator) on DESKTOP-6JCI5C5 (Micro-Star International Co., Ltd MS-7C02) (01-11-2021 10:58:01)
Running from F:\Download
Loaded Profiles: marys
: Microsoft Windows 10 Pro Version 21H1 19043.1288 (X64) Language: Čeština (Česko)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe
(ASUSTEK COMPUTER INC. -> ASUSTeK COMPUTER INC.) E:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe
(ASUSTEK COMPUTER INC. -> ASUSTeK COMPUTER INC.) E:\Program Files (x86)\ASUS\GPU TweakII\Monitor.exe
(ASUSTEK COMPUTER INCORPORATION -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe
(ASUSTEK COMPUTER INCORPORATION -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(ASUSTEK COMPUTER INCORPORATION -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(Bitsum Technologies (Bitsum LLC) -> Bitsum LLC) F:\Program Files\Process Lasso\bitsumsessionagent.exe
(Discord Inc. -> Discord Inc.) C:\Users\marys\AppData\Local\Discord\app-1.0.9003\Discord.exe <6>
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Google LLC -> ) C:\Program Files\Google\Drive File Stream\52.0.6.0\crashpad_handler.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\94.0.4606.27\remoting_host.exe <2>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <48>
(Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\52.0.6.0\GoogleDriveFS.exe <7>
(Jan Fiala -> Jan Fiala) D:\Program Files (x86)\PSPad editor\PSPad.exe
(Kristjan Skutta -> ) D:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2109.6305.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.58.25004.0_x64__8wekyb3d8bbwe\gamingservices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.58.25004.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.10202.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.721.10202.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®) C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.exe
(MICRO-STAR INTERNATIONAL CO., LTD) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.119.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Speed Up\StorageMonitor.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\One Dragon Center\CC_Engine_x64.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\One Dragon Center\Super_Charger\MSI_Super_Charger_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe
(Micro-Star INT'L CO., LTD.) [File not signed] C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\nvrla.exe
(NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\PresentMon_x64.exe <2>
(NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
(NZXT, Inc. -> ) C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\native\target\release\service.exe
(Open Source Developer, Robin Krom -> Greenshot) E:\Program Files\Greenshot\Greenshot.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_df67044ddd98b524\RtkAudUService64.exe <2>
(Skutta, Kristjan -> ) D:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(Solid State System) [File not signed] C:\Program Files (x86)\YENKEE\Gaming Headset\YHP 3035\YHP 3035 Gaming Headset 7.1.exe
(SSS) [File not signed] C:\Windows\System32\AudioDeviceService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) D:\Program Files (x86)\Steam\steam.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_df67044ddd98b524\RtkAudUService64.exe [1273712 2021-07-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [ProfilerU] => C:\Program Files\Saitek\SD6\Software\ProfilerU.exe [357888 2009-06-03] (Saitek) [File not signed]
HKLM\...\Run: [SaiMfd] => C:\Program Files\Saitek\SD6\Software\SaiMfd.exe [194560 2009-06-03] (Saitek) [File not signed]
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [167496 2021-10-27] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [Greenshot] => e:\Program Files\Greenshot\Greenshot.exe [527792 2017-08-09] (Open Source Developer, Robin Krom -> Greenshot)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26310800 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [YHP 3035 Gaming Headset 7.1] => C:\Program Files (x86)\YENKEE\Gaming Headset\YHP 3035\YHP 3035 Gaming Headset 7.1.exe [11706368 2021-07-12] (Solid State System) [File not signed]
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\52.0.6.0\GoogleDriveFS.exe [54107992 2021-10-18] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\52.0.6.0\GoogleDriveFS.exe [54107992 2021-10-18] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-4204758392-1910564176-188706453-1001\...\Run: [Discord] => C:\Users\marys\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-4204758392-1910564176-188706453-1001\...\Run: [Steam] => D:\Program Files (x86)\Steam\steam.exe [4267928 2021-10-13] (Valve -> Valve Corporation)
HKU\S-1-5-21-4204758392-1910564176-188706453-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [597640 2020-02-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-4204758392-1910564176-188706453-1001\...\Run: [uTorrent] => C:\Users\marys\AppData\Roaming\uTorrent\uTorrent.exe [2091560 2021-10-19] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-4204758392-1910564176-188706453-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\52.0.6.0\GoogleDriveFS.exe [54107992 2021-10-18] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-4204758392-1910564176-188706453-1001\...\Run: [GoogleChromeAutoLaunch_3D937A5087EB950738AFC75D317B47B4] => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\52.0.6.0\GoogleDriveFS.exe [54107992 2021-10-18] (Google LLC -> Google, Inc.)
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\Windows\system32\WSPDFelementMonitor.dll [286264 2020-07-23] (Wondershare Technology Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\95.0.4638.54\Installer\chrmstp.exe [2021-10-21] (Google LLC -> Google LLC)
BootExecute: autocheck autochk * sdnclean64.exe
GroupPolicy-x32: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0856E5BB-C5A1-4F64-9CD3-0EE7B51EDF6B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {0CA3DA2C-6B6B-4D69-9024-5967BD7539E7} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [78648 2021-04-01] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {0DCC6E04-3996-41EB-A680-24418FAC43FC} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {0F261EBB-1D47-49A0-ABF3-2D338209B00E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-25] (Google LLC -> Google LLC)
Task: {1A5C6D01-065B-4172-B608-1B0939F4FA6A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6241704 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {1AF76560-3798-4472-BA6E-15B1E10368CA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {2C51E9C8-1BD2-4FC3-BDFC-E146FA11C34E} - System32\Tasks\LastPassUpdater => e:\Program Files (x86)\LastPass\Updater\Updater.exe [1317584 2021-10-17] (LogMeIn, Inc. -> LogMeIn Inc.)
Task: {37A5A5ED-8599-4FC5-88C3-F6A42B320742} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3B07AE4F-3C5A-40C6-89AA-32ED286C1738} - System32\Tasks\MSIAfterburner => F:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
Task: {3EE45D29-C83B-48FD-BE35-ADCEA140F135} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-maryskam@jsembuh.cz => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500936 2015-05-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {46EB50E5-9D35-460F-80FA-FF4B0EFFF46E} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [6785448 2020-03-30] (Nota Inc. -> Nota Inc.)
Task: {4F8DF9E7-E0CD-4282-8338-7D5375BF215D} - System32\Tasks\AMDAutoUpdate => C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [667832 2021-07-16] (Advanced Micro Devices INC. -> )
Task: {50501C79-165C-4D51-880E-EACD75EC49DD} - System32\Tasks\MSI Task Host - MSI.True Color => C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe [47416 2021-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {543D8A55-1367-4436-AF44-909E98DA099B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [681400 2021-07-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {57B70C67-6F07-44F6-A94D-22F18A5CBA04} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108928 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C9F5712-D6D8-4983-979E-7C972BEB5F57} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe
Task: {62F90F82-1C81-496C-82C2-0BFAF01733A9} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {667BDA81-7B30-4CE0-A51D-F81D95037196} - System32\Tasks\MSI Task Host - LEDKeeper2_Host => C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe [1746256 2021-08-24] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {693B0707-883A-48F4-A922-DDD6503A9731} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {76292413-6BB5-4817-958D-356CF5C6931C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [108928 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {77D8A566-3144-40C5-B221-ACEA3467BEF3} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {79E233FE-0AF5-417C-9A06-3568405B2CF9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [6241704 2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {7F984723-758E-4C88-B898-E5A730ABB2BA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {900E61C8-E33E-4188-979E-D07F73B34A60} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [3354296 2019-01-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {9066542C-C3D3-407F-966D-2079761E4465} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {98720C37-5E03-4313-8E24-CDEB43BC3C7B} - System32\Tasks\CCleaner Update => D:\Program Files\CCleaner\CCUpdate.exe [686384 2020-08-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {AED5EE02-A0AB-4F34-83C2-FC87E593482E} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.exe /NoUACCheck
Task: {B14828BA-BFA6-4D40-BA0E-51C08D0F04B5} - System32\Tasks\MSI Task Host - DisplayID => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [78648 2021-04-01] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {B2208340-F3DE-42DF-8673-ACBA431AAF36} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1562376 2021-08-16] (Adobe Inc. -> Adobe Inc.)
Task: {B292BC3D-C19A-4E85-9F00-409F82D10385} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [6785448 2020-03-30] (Nota Inc. -> Nota Inc.)
Task: {C93E2DF5-96F4-4F98-8192-231947E570D4} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CF1B0D38-EDCB-40E0-ACCE-0E71E1B84237} - System32\Tasks\Session agent for Process Lasso => f:\Program Files\Process Lasso\bitsumsessionagent.exe [169672 2021-03-29] (Bitsum Technologies (Bitsum LLC) -> Bitsum LLC)
Task: {D18CBE64-41B2-4C19-A949-C662D61EB9F8} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D5408AF0-E000-4118-9EF3-FA786AD0376B} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-09-20] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {D7DFD789-E8EE-4C0A-A95B-DC8F19195F32} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-09-20] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {D935C31D-C1F3-4006-8BBB-602D70B899DC} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E271913E-1175-4097-B039-F6204B9209FD} - System32\Tasks\CCleanerSkipUAC => D:\Program Files\CCleaner\CCleaner.exe [24770744 2020-08-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E4782318-BB5B-4662-865E-67F43753AA8E} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [104600 2021-08-19] (ASUSTeK Computer Inc. -> ASUS)
Task: {E87CA8EA-C01D-4B71-BA56-8A776818FD5D} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2178936 2021-08-19] (ASUSTeK Computer Inc. -> ASUS)
Task: {EB0EC1E5-0F52-40A4-B069-FA696E5417A6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-03-25] (Google LLC -> Google LLC)
Task: {F098CBB5-D3B1-4BA1-8949-9DBE31638280} - System32\Tasks\Mozilla\Firefox Default Browser Agent 9DED23DF4360B491 => C:\Program Files\mozilla firefox\default-browser-agent.exe [681400 2021-07-26] (Mozilla Corporation -> Mozilla Foundation)
Task: {FAA0A541-0E95-40AB-A051-A6CBF381CD21} - System32\Tasks\GPU Tweak II => E:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe [13209752 2021-09-27] (ASUSTEK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {FC5A51E9-34C4-411D-AB58-BCCC5B31C826} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22655904 2021-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {FE5A4091-F371-44A4-8F32-335518653B04} - System32\Tasks\BlueStacksHelper => E:\blue\BlueStacks\Client\Helper\BlueStacksHelper.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\MSIGH_Host.job => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe
Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 86.49.5.221 86.49.5.222
Tcpip\..\Interfaces\{a069c886-cc20-4503-a293-adf45a3f3839}: [DhcpNameServer] 86.49.5.221 86.49.5.222
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge: 
=======
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\marys\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-11]
Edge Extension: (LastPass: Free Password Manager) - C:\Users\marys\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbcinlkgjjkejfdpemiealijmmooekmp [2021-09-30]
Edge Extension: (Outlook) - C:\Users\marys\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2020-10-18]
Edge Extension: (Word) - C:\Users\marys\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2020-10-18]
Edge Extension: (Excel) - C:\Users\marys\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2020-10-18]
Edge Extension: (PowerPoint) - C:\Users\marys\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2020-10-18]
Edge HKLM-x32\...\Edge\Extension: [bbcinlkgjjkejfdpemiealijmmooekmp]

FireFox:
========
FF DefaultProfile: dhswpui2.default
FF ProfilePath: C:\Users\marys\AppData\Roaming\Mozilla\Firefox\Profiles\zgvqgjv8.default-release-1 [2021-10-11]
FF Extension: (LastPass: Free Password Manager) - C:\Users\marys\AppData\Roaming\Mozilla\Firefox\Profiles\zgvqgjv8.default-release-1\Extensions\support@lastpass.com.xpi [2021-04-27]
FF ProfilePath: C:\Users\marys\AppData\Roaming\Mozilla\Firefox\Profiles\dhswpui2.default [2021-09-16]
FF ProfilePath: C:\Users\marys\AppData\Roaming\Mozilla\Firefox\Profiles\g426h7ou.default-release [2021-10-11]
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.261.2 -> D:\Java\bin\dtplugin\npDeployJava1.dll [2020-07-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.261.2 -> D:\Java\bin\plugin2\npjp2.dll [2020-07-18] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-10-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-11-01]

Chrome: 
=======
CHR Profile: C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default [2021-11-01]
CHR Notifications: Default -> hxxps//www.duolingo.com
CHR HomePage: Default -> hxxps//www.google.com/
CHR StartupUrls: Default -> "hxxps//www.google.com/"
CHR Session Restore: Default -> is enabled.
CHR Extension: (Prezentace) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-03-25]
CHR Extension: (BetterTTV) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2021-10-16]
CHR Extension: (Dokumenty) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-25]
CHR Extension: (Disk Google) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-25]
CHR Extension: (uBlock Origin) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-10-17]
CHR Extension: (Steam Inventory Helper) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmeakgjggjdlcpncigglobpjbkabhmjl [2021-11-01]
CHR Extension: (Multiple Account Checker for Gmail™) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnimhgelcnggigekhdjlifjpndgmnglm [2020-03-25]
CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2021-07-17]
CHR Extension: (Tabulky) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-03-25]
CHR Extension: (Page load time) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\fploionmjgeclbkemipmkogoaohcdbig [2021-06-01]
CHR Extension: (Dokumenty Google offline) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-15]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2021-10-23]
CHR Extension: (Chrome Remote Desktop) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2020-05-19]
CHR Extension: (Spouštěč aplikací pro Disk (od Googlu)) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-23]
CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2021-10-26]
CHR Extension: (Twitch Now) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2020-06-30]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2021-10-30]
CHR Extension: (Gmail) - C:\Users\marys\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR HKU\S-1-5-21-4204758392-1910564176-188706453-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-08-16] (Adobe Inc. -> Adobe Inc.)
S3 AntiCheatExpert Service; C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe [2695304 2021-09-27] (PROXIMA BETA PTE. LIMITED -> )
R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [349928 2021-09-10] (ASUSTEK COMPUTER INCORPORATION -> ASUSTeK COMPUTER INC.)
S2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.06\atkexComSvc.exe [456008 2021-09-08] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-09-20] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [313008 2021-09-06] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-09-20] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AudioDeviceService; C:\WINDOWS\system32\AudioDeviceService.exe [2930584 2021-07-12] (SSS) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-10-30] (BattlEye Innovations e.K. -> )
R2 CAMService; C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\native\target\release\service.exe [538304 2021-06-01] (NZXT, Inc. -> )
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\94.0.4606.27\remoting_host.exe [72536 2021-08-30] (Google LLC -> Google LLC)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12034464 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [9861528 2021-10-30] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2021-10-12] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [595944 2021-10-09] (EasyAntiCheat Oy -> Epic Games, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3141480 2021-10-27] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3141480 2021-10-27] (ESET, spol. s r.o. -> ESET)
R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [46776 2018-09-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2027192 2019-01-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [3565600 2021-08-17] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R2 LightKeeperService; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe [86776 2020-12-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 MBAMService; e:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7785656 2021-09-18] (Malwarebytes Inc -> Malwarebytes)
S3 mracsvc; C:\WINDOWS\System32\mracsvc.exe [20536992 2020-08-20] (Mail.Ru LLC -> LLC Mail.Ru)
R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [86688 2018-07-25] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Central_Service; C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe [147088 2020-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MSI_Companion_Service; C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe [143160 2021-03-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2333328 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Super_Charger_Service; C:\Program Files (x86)\MSI\One Dragon Center\Super_Charger\MSI_Super_Charger_Service.exe [39224 2021-04-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe [32752 2021-02-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 Mystic_Light_Service; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe [39760 2021-05-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557656 2021-10-19] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3476184 2021-10-19] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; D:\wolf\Overwolf\OverwolfUpdater.exe [2465624 2020-05-18] (Overwolf Ltd -> Overwolf LTD)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2020-06-24] (Even Balance, Inc. -> )
S3 Rockstar Service; F:\Launcher\RockstarService.exe [2020144 2021-09-17] (Rockstar Games, Inc. -> Rockstar Games)
R2 ROG Live Service; C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe [5937384 2021-08-20] (ASUSTEK COMPUTER INCORPORATION -> ASUSTek COMPUTER INC.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5414976 2021-10-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 tmGAInstall; C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.EXE [48344 2018-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®)
S4 VoiceControlService; C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe [32752 2021-02-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 Wallpaper Engine Service; D:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe [517112 2020-09-04] (Kristjan Skutta -> )
S3 wampapache64; e:\wamp64\bin\apache\apache2.4.46\bin\httpd.exe [29696 2020-08-02] (Apache Software Foundation) [File not signed]
S3 wampmariadb64; e:\wamp64\bin\mariadb\mariadb10.4.13\bin\mysqld.exe [16058280 2020-05-09] (MariaDB Corporation Ab -> )
S3 wampmysqld64; e:\wamp64\bin\mysql\mysql5.7.31\bin\mysqld.exe [41826304 2020-06-02] () [File not signed]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2021-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2021-01-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5292bbfbf575e2d2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [1732664 2021-10-30] (HIGH MORALE DEVELOPMENTS LIMITED -> ANTICHEATEXPERT.COM)
S3 ACE-GAME; C:\WINDOWS\system32\drivers\ACE-GAME.sys [752768 2021-09-14] (Tencent Technology(Shenzhen) Company Limited -> ANTICHEATEXPERT.COM)
R1 Asusgio2; C:\WINDOWS\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\WINDOWS\system32\drivers\AsIO3.sys [43160 2021-09-06] (ASUSTeK Computer Inc. -> )
R2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-10-04] (Bluestack Systems, Inc -> Bluestack System Inc.)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [17944 2021-10-11] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [183408 2021-10-27] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [124496 2021-10-27] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-04-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [201984 2021-10-27] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43920 2021-10-27] (ESET, spol. s r.o. -> ESET)
R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [69736 2021-10-27] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107456 2021-10-27] (ESET, spol. s r.o. -> ESET)
R1 googledrivefs3525; C:\WINDOWS\System32\DRIVERS\googledrivefs3525.sys [389640 2021-08-09] (Google LLC -> Google, Inc.)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
S3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [38544 2018-12-13] (Feature Integration Technology Inc -> FINTEK Corp.)
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [46728 2021-05-18] (ASUSTEK COMPUTER INC. -> ASUSTeK Computer Inc.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-01-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-01-29] (Malwarebytes Inc -> Malwarebytes)
S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv1.sys [19767024 2020-08-20] (Mail.Ru LLC -> LLC Mail.Ru)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
S3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\One Dragon Center\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\One Dragon Center\Lib\SYS\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_CPU; C:\Program Files (x86)\MSI\One Dragon Center\Super_Charger\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\NTIOLib_X64.sys [14288 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 rspLLL; C:\WINDOWS\System32\DRIVERS\rspLLL64.sys [26368 2020-08-21] (Daniel Terhell -> Resplendence Software Projects Sp.)
S3 rspWhySoSlow; C:\WINDOWS\System32\DRIVERS\rspWhy64.sys [28928 2016-12-17] (Daniel Terhell -> Resplendence Software Projects Sp.)
S3 SaiH353E; C:\WINDOWS\system32\DRIVERS\SaiH353E.sys [171144 2007-05-01] (Saitek -> Saitek)
R3 SaiMini; C:\WINDOWS\System32\drivers\SaiMini.sys [16000 2009-06-10] (Saitek -> Saitek)
R3 SaiNtBus; C:\WINDOWS\system32\drivers\SaiBus.sys [43264 2009-06-10] (Saitek -> Saitek)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 UAExt; C:\WINDOWS\System32\DRIVERS\UAExt.sys [151056 2021-07-12] (Solid State System Co., Ltd. -> Solid State System.)
S3 VBAudio100VMVAIO3MME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio364_win10.sys [71712 2020-06-18] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2021-01-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429296 2021-01-13] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2021-01-13] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2719256 2020-10-18] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
U1 aswbdisk; no ImagePath
S3 cpuz145; \??\C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [X]
S3 GPUZ-v2; \??\C:\Users\marys\AppData\Local\Temp\GPUZ-v2.sys [X] <==== ATTENTION
S3 HWiNFO_161; \??\C:\Users\marys\AppData\Local\Temp\HWiNFO64A_161.SYS [X] <==== ATTENTION
S3 VBAudioVMAUXVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmauxvaio64_win10.sys [X]
S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-01 10:13 - 2021-11-01 10:13 - 000003094 _____ C:\WINDOWS\system32\Tasks\GPU Tweak II
2021-10-31 00:39 - 2021-10-31 00:39 - 000000000 ____D C:\Users\marys\AppData\LocalLow\Bunnyhug
2021-10-30 19:14 - 2021-10-30 19:14 - 001732664 _____ (ANTICHEATEXPERT.COM) C:\WINDOWS\system32\Drivers\ACE-BASE.sys
2021-10-29 23:55 - 2021-10-29 23:55 - 000000234 _____ C:\Users\marys\Desktop\Riders Republic.url
2021-10-29 23:55 - 2021-10-29 23:55 - 000000000 ____D C:\Riders
2021-10-29 17:52 - 2021-10-29 17:52 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk
2021-10-29 15:31 - 2021-10-29 15:31 - 000003790 _____ C:\WINDOWS\system32\Tasks\LastPassUpdater
2021-10-29 15:31 - 2021-10-29 15:31 - 000001108 _____ C:\Users\Public\Desktop\My LastPass Vault.lnk
2021-10-29 15:31 - 2021-10-29 15:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass
2021-10-27 17:02 - 2021-10-27 17:02 - 000201984 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2021-10-27 17:02 - 2021-10-27 17:02 - 000183408 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2021-10-27 17:02 - 2021-10-27 17:02 - 000107456 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2021-10-27 17:02 - 2021-10-27 17:02 - 000069736 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2021-10-27 17:02 - 2021-10-27 17:02 - 000043920 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2021-10-23 10:16 - 2021-10-23 10:16 - 000000364 _____ C:\Users\marys\Desktop\Among the Sleep - Enhanced Edition.url
2021-10-23 10:16 - 2021-10-23 10:16 - 000000000 ____D C:\Users\marys\AppData\LocalLow\Krillbite Studio
2021-10-22 09:46 - 2021-10-22 09:46 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4204758392-1910564176-188706453-1001
2021-10-22 09:46 - 2021-10-22 09:46 - 000002377 _____ C:\Users\marys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-21 14:58 - 2021-10-21 14:58 - 000000219 _____ C:\Users\marys\Desktop\Counter-Strike Global Offensive.url
2021-10-21 12:36 - 2021-10-21 12:36 - 000000330 _____ C:\Users\marys\Desktop\Just Cause 4.url
2021-10-15 10:58 - 2021-10-15 10:58 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-15 10:58 - 2021-10-15 10:58 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-15 10:58 - 2021-10-15 10:58 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-15 10:58 - 2021-10-15 10:58 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-15 10:58 - 2021-10-15 10:58 - 000011495 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-15 10:49 - 2021-10-15 10:49 - 000000000 ___HD C:\$WinREAgent
2021-10-14 12:50 - 2021-10-14 12:50 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-10-14 09:15 - 2021-10-14 09:15 - 000003656 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask
2021-10-14 09:13 - 2021-10-14 09:13 - 000000000 ____D C:\WINDOWS\Tasks\ImCleanDisabled
2021-10-14 01:15 - 2021-10-14 01:15 - 000000000 ____D C:\Users\marys\AppData\Roaming\NVIDIA
2021-10-13 22:25 - 2021-10-13 22:25 - 000000000 ____D C:\WINDOWS\system32\lxss
2021-10-13 22:25 - 2021-10-13 22:25 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2021-10-13 22:23 - 2021-10-07 01:58 - 000125568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2021-10-13 22:23 - 2021-10-07 01:58 - 000038016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2021-10-13 22:17 - 2021-10-07 09:32 - 001874648 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-10-13 22:17 - 2021-10-07 09:32 - 001874648 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-10-13 22:17 - 2021-10-07 09:32 - 001464976 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-10-13 22:17 - 2021-10-07 09:32 - 001450200 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-10-13 22:17 - 2021-10-07 09:32 - 001450200 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-10-13 22:17 - 2021-10-07 09:32 - 001206416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-10-13 22:17 - 2021-10-07 09:32 - 001111256 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-10-13 22:17 - 2021-10-07 09:32 - 001111256 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-10-13 22:17 - 2021-10-07 09:32 - 000965336 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-10-13 22:17 - 2021-10-07 09:32 - 000965336 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-10-13 22:17 - 2021-10-07 09:29 - 000800384 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-10-13 22:17 - 2021-10-07 09:29 - 000656512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-10-13 22:17 - 2021-10-07 09:29 - 000635008 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 002114672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 001597584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 001523328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 001172608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 000981136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 000792208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 000707712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-10-13 22:17 - 2021-10-07 09:28 - 000676480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-10-13 22:17 - 2021-10-07 09:28 - 000564352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-10-13 22:17 - 2021-10-07 09:27 - 008722576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-10-13 22:17 - 2021-10-07 09:27 - 007843456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-10-13 22:17 - 2021-10-07 09:27 - 005703288 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2021-10-13 22:17 - 2021-10-07 09:27 - 004938872 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-10-13 22:17 - 2021-10-07 09:27 - 002850432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-10-13 22:17 - 2021-10-07 09:27 - 000452224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-10-13 22:17 - 2021-10-07 09:26 - 000849040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-10-13 22:17 - 2021-10-07 09:25 - 007578032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2021-10-13 22:17 - 2021-10-07 09:25 - 006428792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-10-13 22:17 - 2021-10-07 01:58 - 000085583 _____ C:\WINDOWS\system32\nvinfo.pb
2021-10-13 15:01 - 2021-10-13 15:01 - 000000220 _____ C:\Users\marys\Desktop\EVE Online.url
2021-10-13 11:01 - 2021-10-31 19:55 - 000000364 _____ C:\Users\marys\Documents\rendercapslog.txt
2021-10-12 10:47 - 2021-10-12 10:48 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat_EOS
2021-10-11 17:17 - 2021-10-11 17:17 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-10-11 17:17 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-10-11 17:17 - 2021-06-09 15:17 - 002838384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2021-10-11 17:17 - 2021-06-09 15:17 - 002186608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2021-10-11 17:17 - 2021-05-15 08:19 - 000067952 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2021-10-11 16:54 - 2021-10-11 16:54 - 000000889 _____ C:\Users\Public\Desktop\ASUS GPU TweakII.lnk
2021-10-11 16:54 - 2021-10-11 16:54 - 000000000 ____D C:\Users\marys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2021-10-11 16:54 - 2021-10-11 16:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2021-10-11 16:16 - 2021-10-11 16:16 - 131526656 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2021-10-11 16:16 - 2021-10-11 16:16 - 009101312 _____ C:\WINDOWS\system32\config\DRIVERS.iobit
2021-10-11 16:16 - 2021-10-11 16:16 - 005373952 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2021-10-11 16:16 - 2021-10-11 16:16 - 000081920 _____ C:\WINDOWS\system32\config\SAM.iobit
2021-10-11 16:16 - 2021-10-11 16:16 - 000036864 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2021-10-11 16:15 - 2021-10-11 16:15 - 000000000 ____D C:\Users\marys\AppData\Local\fontconfig
2021-10-11 16:15 - 2021-10-11 16:15 - 000000000 ____D C:\Users\marys\.dbus-keyrings
2021-10-11 16:13 - 2021-10-14 09:15 - 000000000 ____D C:\Users\marys\AppData\LocalLow\IObit
2021-10-11 16:13 - 2021-10-13 10:34 - 000000000 ____D C:\ProgramData\ProductData
2021-10-11 16:13 - 2021-10-11 16:13 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2021-10-11 16:12 - 2021-10-14 09:15 - 000000000 ____D C:\Users\marys\AppData\Roaming\IObit
2021-10-11 16:12 - 2021-10-14 09:15 - 000000000 ____D C:\ProgramData\IObit
2021-10-11 09:58 - 2021-10-11 09:58 - 001823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-11 09:58 - 2021-10-11 09:58 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-11 09:58 - 2021-10-11 09:58 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-11 09:58 - 2021-10-11 09:58 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-11 09:58 - 2021-10-11 09:58 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-11 09:58 - 2021-10-11 09:58 - 000203264 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2021-10-11 09:58 - 2021-10-11 09:58 - 000158208 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-10-11 09:58 - 2021-10-11 09:58 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-11 09:58 - 2021-10-11 09:58 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2021-10-11 09:58 - 2021-10-11 09:58 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2021-10-11 09:58 - 2021-10-11 09:58 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2021-10-11 09:46 - 2021-10-11 09:46 - 000003216 _____ C:\WINDOWS\system32\Tasks\MSI Task Host - MSI.True Color
2021-10-11 09:46 - 2021-10-11 09:46 - 000003190 _____ C:\WINDOWS\system32\Tasks\MSI Task Host - LEDKeeper2_Host
2021-10-11 09:44 - 2021-07-29 01:27 - 048046994 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2021-10-10 16:41 - 2021-10-10 16:41 - 000000000 ____D C:\Users\marys\AppData\Roaming\Greenshot
2021-10-10 16:41 - 2021-10-10 16:41 - 000000000 ____D C:\Users\marys\AppData\Local\Greenshot
2021-10-10 16:41 - 2021-10-10 16:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot
2021-10-09 16:42 - 2021-10-09 16:42 - 000000000 ____D C:\Users\marys\AppData\Local\IdleMasterExtended
2021-10-09 10:27 - 2021-10-26 14:57 - 000000000 ____D C:\Users\marys\AppData\Roaming\EasyAntiCheat
2021-10-09 00:30 - 2021-10-09 00:30 - 000002219 _____ C:\Users\Public\Desktop\AMD Ryzen Master.lnk
2021-10-08 23:13 - 2021-10-08 23:13 - 000000000 ____D C:\Users\marys\Documents\Square Enix
2021-10-07 11:45 - 2021-10-07 11:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinHTTrack
2021-10-03 15:57 - 2021-10-03 15:57 - 000000000 ____D C:\Users\marys\Documents\Ubisoft
2021-10-02 17:11 - 2021-10-02 17:10 - 003697319 _____ C:\Users\marys\Documents\MP Replay v101.101.53347.0 @2021.10.02 173138 (1).aoe2record

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-11-01 10:58 - 2020-08-30 11:32 - 000000000 ____D C:\FRST
2021-11-01 10:57 - 2020-03-25 16:18 - 000000000 ____D C:\Users\marys\AppData\Roaming\discord
2021-11-01 10:56 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-11-01 10:17 - 2020-03-25 17:36 - 000000000 ____D C:\Users\marys\AppData\Local\Adobe
2021-11-01 10:15 - 2020-08-15 19:51 - 001521678 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-11-01 10:15 - 2020-04-06 14:54 - 000000000 ____D C:\SteamLibrary
2021-11-01 10:15 - 2020-03-25 20:29 - 000000000 ____D C:\Users\marys\AppData\Local\CrashDumps
2021-11-01 10:15 - 2020-03-25 16:19 - 000000000 ____D C:\ProgramData\NVIDIA
2021-11-01 10:15 - 2020-03-25 16:18 - 000000000 ____D C:\Users\marys\AppData\Local\Discord
2021-11-01 10:15 - 2019-12-07 15:43 - 000647128 _____ C:\WINDOWS\system32\perfh005.dat
2021-11-01 10:15 - 2019-12-07 15:43 - 000122506 _____ C:\WINDOWS\system32\perfc005.dat
2021-11-01 10:15 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-11-01 10:13 - 2020-03-25 15:56 - 000000000 ____D C:\Program Files (x86)\Google
2021-11-01 10:11 - 2020-08-15 19:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-11-01 01:27 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-11-01 00:31 - 2020-03-25 18:13 - 000001480 _____ C:\Users\marys\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2021-10-31 21:47 - 2021-09-23 10:23 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-31 21:47 - 2020-06-06 11:52 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-31 21:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-31 17:33 - 2020-03-25 21:09 - 000000000 ____D C:\Users\marys\AppData\Local\Ubisoft Game Launcher
2021-10-31 14:29 - 2020-08-15 19:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-31 11:49 - 2020-10-20 11:36 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-10-31 00:38 - 2020-03-25 14:09 - 000000000 ____D C:\Users\marys\AppData\Local\Packages
2021-10-31 00:38 - 2020-03-25 14:05 - 000000000 ____D C:\ProgramData\Packages
2021-10-31 00:38 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-30 23:16 - 2021-08-05 00:00 - 000000000 ____D C:\Program Files\EA Games
2021-10-30 20:03 - 2021-09-07 20:11 - 000000000 ____D C:\ProgramData\AntiCheatExpert
2021-10-30 16:12 - 2020-04-05 19:29 - 000000000 ____D C:\Users\marys\AppData\Roaming\TeamViewer
2021-10-30 00:23 - 2020-03-25 18:53 - 000000000 ____D C:\Users\marys\AppData\Local\D3DSCache
2021-10-30 00:22 - 2020-03-25 23:06 - 000000000 ____D C:\Users\marys\AppData\Local\BattlEye
2021-10-29 19:46 - 2020-05-13 23:32 - 000000000 ____D C:\Users\marys\AppData\Roaming\vlc
2021-10-28 22:16 - 2020-03-26 01:48 - 000000000 ____D C:\Users\marys\Documents\My Games
2021-10-28 15:44 - 2020-05-21 18:09 - 000000000 ____D C:\Users\marys\AppData\Roaming\Origin
2021-10-28 15:35 - 2020-11-03 18:24 - 000000000 ____D C:\Program Files (x86)\Origin Games
2021-10-28 15:35 - 2020-05-21 18:09 - 000000000 ____D C:\ProgramData\Origin
2021-10-28 15:34 - 2020-05-21 18:10 - 000000000 ____D C:\Program Files (x86)\Origin
2021-10-28 15:34 - 2020-05-21 18:09 - 000000000 ____D C:\Users\marys\AppData\Local\Origin
2021-10-28 13:11 - 2020-04-16 10:30 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-10-28 13:11 - 2020-03-29 18:12 - 002220480 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2021-10-28 13:11 - 2020-03-29 18:12 - 000324024 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2021-10-28 13:11 - 2020-03-29 18:12 - 000217536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2021-10-28 13:11 - 2020-03-29 18:12 - 000197072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2021-10-28 13:11 - 2020-03-29 18:12 - 000061904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2021-10-28 00:43 - 2020-06-24 22:24 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2021-10-27 17:02 - 2020-10-26 08:28 - 000124496 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2021-10-27 15:04 - 2021-09-08 19:59 - 000002061 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2021-10-27 15:04 - 2021-09-08 19:59 - 000001899 _____ C:\Users\Default\Desktop\Google Slides.lnk
2021-10-27 15:04 - 2021-09-08 19:59 - 000001899 _____ C:\Users\Default\Desktop\Google Sheets.lnk
2021-10-27 15:04 - 2021-09-08 19:59 - 000001887 _____ C:\Users\Default\Desktop\Google Docs.lnk
2021-10-26 23:06 - 2020-09-03 09:34 - 000000000 ____D C:\Users\marys\AppData\Roaming\uTorrent
2021-10-26 21:05 - 2020-12-15 20:11 - 000000000 ____D C:\Users\marys\AppData\Local\BitTorrentHelper
2021-10-26 20:30 - 2020-03-25 16:12 - 000000000 ____D C:\ProgramData\Package Cache
2021-10-25 13:01 - 2020-05-06 19:19 - 000000000 ____D C:\Users\marys\AppData\Roaming\Stormworks
2021-10-24 06:50 - 2020-07-21 20:25 - 000000000 ____D C:\Users\marys\Documents\BeamNG.drive
2021-10-21 21:34 - 2020-06-27 23:05 - 000000000 ____D C:\Users\marys\Zomboid
2021-10-21 21:29 - 2021-09-18 21:36 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-21 21:29 - 2021-09-18 21:36 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-10-21 15:28 - 2020-03-25 18:53 - 000000000 ____D C:\Users\marys\AppData\Local\EpicGamesLauncher
2021-10-21 15:26 - 2020-03-27 20:24 - 000000000 ____D C:\Users\marys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-10-21 12:54 - 2020-03-27 22:08 - 000000000 ____D C:\Users\marys\AppData\Roaming\ObviousIdea
2021-10-15 21:42 - 2020-08-15 19:47 - 000472408 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-15 21:40 - 2019-12-07 15:47 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-10-15 21:40 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-15 21:40 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-15 13:54 - 2021-07-14 12:34 - 000000000 ____D C:\Users\marys\Desktop\Plocha 1407
2021-10-15 11:00 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-15 10:49 - 2020-03-25 23:53 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-10-15 10:46 - 2020-03-25 23:53 - 139806512 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-10-13 22:26 - 2020-03-25 16:16 - 000000000 ____D C:\Users\marys\AppData\Local\NVIDIA
2021-10-13 22:25 - 2020-03-25 14:05 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2021-10-13 15:06 - 2020-03-27 14:31 - 000000000 ____D C:\Users\marys\AppData\Local\CCP
2021-10-11 17:17 - 2021-08-04 09:26 - 000001443 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2021-10-11 17:17 - 2020-03-25 16:19 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2021-10-11 17:17 - 2020-03-25 14:05 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2021-10-11 16:55 - 2020-03-25 16:15 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-10-11 16:54 - 2021-08-04 09:16 - 000000000 ____D C:\ProgramData\ASUS
2021-10-11 16:53 - 2021-08-04 19:28 - 000000000 ____D C:\WINDOWS\Downloaded Installations
2021-10-11 16:25 - 2020-08-15 18:02 - 000000000 ___DC C:\WINDOWS\Panther
2021-10-11 16:25 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-10-11 16:20 - 2021-05-19 12:04 - 000000000 ____D C:\Users\marys\Documents\enson
2021-10-11 16:15 - 2020-08-15 19:14 - 000000000 ____D C:\Users\marys
2021-10-11 16:08 - 2020-05-27 22:41 - 000000000 ____D C:\Users\marys\AppData\LocalLow\VRChat
2021-10-11 16:07 - 2021-05-20 22:46 - 000000000 ____D C:\Users\marys\AppData\Roaming\2K Sports
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-10-11 10:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-10-11 09:46 - 2021-07-23 19:40 - 000017944 _____ (Creative Technology Innovation Co., LTd.) C:\WINDOWS\system32\Drivers\CtiIo64.sys
2021-10-11 09:46 - 2020-04-10 17:32 - 000000000 ____D C:\Program Files\ENE
2021-10-11 09:46 - 2020-03-25 18:11 - 000000000 ____D C:\MSI
2021-10-11 09:44 - 2020-03-25 16:13 - 000000000 ___HD C:\Program Files (x86)\Temp
2021-10-10 10:00 - 2020-08-15 19:57 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-10 10:00 - 2020-08-15 19:57 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-09 16:44 - 2020-06-04 11:11 - 000000000 ____D C:\Users\marys\AppData\Local\mkw
2021-10-09 08:43 - 2021-02-20 13:09 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-10-09 00:29 - 2020-08-15 19:57 - 000003528 _____ C:\WINDOWS\system32\Tasks\AMDAutoUpdate
2021-10-09 00:29 - 2020-03-25 16:16 - 000000000 ____D C:\Users\marys\AppData\Local\Downloaded Installations
2021-10-03 13:53 - 2021-05-01 01:16 - 000000000 ____D C:\Users\marys\AppData\LocalLow\KingArt
2021-10-02 19:24 - 2021-08-29 21:41 - 000000000 ____D C:\Users\marys\AppData\Roaming\CaptureAge
2021-10-02 19:02 - 2021-08-29 21:41 - 000002391 _____ C:\Users\marys\Desktop\CaptureAge.lnk
2021-10-02 19:01 - 2021-08-29 21:41 - 000000000 ____D C:\Users\marys\AppData\Local\captureage-updater

==================== Files in the root of some directories ========

2020-09-13 22:24 - 2020-09-14 01:01 - 000000000 _____ () C:\Users\marys\AppData\Roaming\Albion_Online_Stats.launch.pyw.log
2020-08-20 16:25 - 2020-08-20 16:25 - 000000365 _____ () C:\Users\marys\AppData\Roaming\OpenSceneryX Installer.plist
2020-06-10 14:44 - 2020-07-20 22:52 - 000034791 _____ () C:\Users\marys\AppData\Roaming\VoiceMeeterBananaDefault.xml
2020-06-18 23:18 - 2020-06-18 23:18 - 000004662 _____ () C:\Users\marys\AppData\Roaming\VoiceMeeterDefault.xml
2020-06-18 22:31 - 2020-06-18 22:59 - 000060313 _____ () C:\Users\marys\AppData\Roaming\VoiceMeeterPotatoDefault.xml
2021-07-25 17:38 - 2021-07-25 17:38 - 000783608 _____ (www.sordum.org) C:\Users\marys\AppData\Roaming\Wub.exe
2021-07-25 17:38 - 2021-07-25 21:36 - 000002796 _____ () C:\Users\marys\AppData\Roaming\Wub.ini
2020-09-11 00:04 - 2020-09-11 00:04 - 000000051 _____ () C:\Users\marys\AppData\Roaming\~SiMPLEX.ini
2020-03-25 18:13 - 2021-11-01 00:31 - 000001480 _____ () C:\Users\marys\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2021-08-28 13:54 - 2021-08-28 13:55 - 000041756 _____ () C:\Users\marys\AppData\Local\HDGraph.log
2021-05-21 11:08 - 2021-05-21 11:08 - 000001498 _____ () C:\Users\marys\AppData\Local\recently-used.xbel
2020-06-20 18:54 - 2020-06-20 18:54 - 000000017 _____ () C:\Users\marys\AppData\Local\resmon.resmoncfg
2020-08-04 00:37 - 2020-08-21 12:48 - 000000093 _____ () C:\Users\marys\AppData\Local\X-Plane 11 Preferences.prf
2020-08-04 00:39 - 2020-08-29 21:47 - 000000075 _____ () C:\Users\marys\AppData\Local\X-Plane_drm_11.prf
2020-08-04 00:37 - 2020-08-04 00:37 - 000000049 _____ () C:\Users\marys\AppData\Local\x-plane_install_11.txt

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================