Bluescreen když hraju CS:GO
Napsal: 12 srp 2018 11:14
Nikdy se mi to nestávalo než od včera, za tu dobu jsem dostal 3 bluescreeny, nevím jak to spravit a jestli to má dělat něco s virem.. tady je log FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.08.2018
Ran by test (administrator) on TEST-PC (12-08-2018 12:09:37)
Running from D:\Program files v2
Loaded Profiles: test (Available Profiles: test)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(WinZip Computing) C:\Program Files\WinZip\WzPreloader.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
() C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler64.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-07-17] (AVAST Software)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2862032 2018-04-23] (Corel Corporation)
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124032 2018-04-23] (WinZip Computing)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2018-04-23] (WinZip Computing, S.L.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5199984 2015-11-09] (VIA)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3206432 2018-08-09] (Valve Corporation)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Tanks] => "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Tanks (1)] => "C:\Games\World_of_Tanks_CT\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Warships] => "C:\Games\World_of_Warships\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Warplanes] => "C:\Games\World_of_Warplanes\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Discord] => C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [EpicGamesLauncher] => "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40F5143E-E1E8-494E-B925-72839C3F31C7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{AE568813-CC7A-4B9D-B4B4-8D4030A09294}: [NameServer] 77.234.40.79
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {3BF1670B-0D8A-4E20-B24B-CFD61F757B1A} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {9F976E67-9D9C-4F2B-BB92-BE375CC328CA} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10454__180521__yaie&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {C0C85594-B862-4570-848F-E85A0AB6DD3A} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-06-17] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-07-17] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-17] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-07-17] (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FireFox:
========
FF DefaultProfile: aiixix9q.default
FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default [2018-05-21]
FF Homepage: Mozilla\Firefox\Profiles\aiixix9q.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10454__180521__yaff
FF NewTab: Mozilla\Firefox\Profiles\aiixix9q.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10454__180521__yaff
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-23] [Legacy]
FF Extension: (Avast SafePrice) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\sp@avast.com.xpi [2017-09-09]
FF Extension: (Avast Online Security) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\wrc@avast.com.xpi [2017-09-09]
FF Extension: (Adblock Plus) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-10-23] [Legacy]
FF SearchPlugin: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\searchplugins\yahoo-lavasoft-ff59.xml [2018-05-21]
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-17] (Oracle Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default [2018-08-12]
CHR Extension: (Honey) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2018-07-22]
CHR Extension: (AdBlock) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-07-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-13]
CHR Extension: (Chrome Media Router) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-10]
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\System Profile [2018-05-21]
CHR HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7780400 2018-07-17] (AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-07-17] (AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6893704 2018-07-15] ()
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-08-09] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2018-03-29] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2017-10-15] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2015-11-09] (VIA Technologies, Inc.)
R2 Wallpaper Engine Service; C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe [348136 2018-05-08] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-11-15] (Microsoft Corporation)
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
S3 NvStreamNetworkSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" [X]
S2 NvStreamSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" [X]
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [197160 2018-07-17] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229392 2018-07-17] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201328 2018-07-17] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-07-17] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59592 2018-07-17] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [239680 2018-07-17] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46976 2018-07-17] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159640 2018-07-17] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111872 2018-07-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-07-17] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027728 2018-07-17] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467064 2018-07-23] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [211160 2018-07-17] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [53904 2017-03-18] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381584 2018-07-17] (AVAST Software)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-11-15] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-23] ()
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2018-07-15] (Echobit, LLC)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [50088 2017-02-08] (Visicom Media Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-23] (Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-11-06] (Malwarebytes)
S3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-11-06] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253888 2017-10-23] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-11-06] (Malwarebytes)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35992 2014-12-29] (Visicom Media Inc.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47552 2017-03-28] (NVIDIA Corporation)
R3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [38656 2017-06-13] (The OpenVPN Project)
R3 VBAudioVMAUXVAIOMME; C:\Windows\System32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [41192 2017-08-30] (Windows (R) Win 7 DDK provider)
R3 VBAudioVMVAIOMME; C:\Windows\System32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-08-30] (Windows (R) Win 7 DDK provider)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
R1 XQHDrv; C:\Windows\System32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 cpuz138; \??\C:\Users\test\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X] <==== ATTENTION
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-08-11 17:42 - 2018-08-11 17:42 - 000000220 _____ C:\Users\test\Desktop\Source Filmmaker.url
2018-08-11 03:24 - 2018-08-11 04:23 - 000000022 _____ C:\Users\test\Desktop\saga.txt
2018-08-11 00:51 - 2018-08-11 00:56 - 000000000 ____D C:\Users\test\Desktop\SummertimeSaga-0.16.1-pc
2018-08-10 12:33 - 2018-08-10 12:33 - 000405576 _____ C:\Windows\Minidump\081018-21906-01.dmp
2018-08-09 23:04 - 2018-08-09 23:04 - 000000826 _____ C:\Users\test\Desktop\League of Legends.lnk
2018-08-09 23:03 - 2018-08-09 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2018-08-03 13:37 - 2018-08-03 13:47 - 000000000 ____D C:\Users\test\AppData\LocalLow\Disney Interactive
2018-08-03 13:31 - 2018-08-03 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Club Penguin Island
2018-08-01 19:20 - 2018-08-01 19:20 - 000000000 ____D C:\Users\test\AppData\LocalLow\Fearem
2018-08-01 19:06 - 2018-08-01 19:06 - 000000222 _____ C:\Users\test\Desktop\Daemonical.url
2018-08-01 02:06 - 2018-08-01 02:06 - 000000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2018-07-30 18:25 - 2018-08-10 23:53 - 000000000 ____D C:\Users\test\Desktop\SLAM
2018-07-30 18:25 - 2018-07-17 00:49 - 035445760 _____ C:\Users\test\ffmpeg.exe
2018-07-30 18:25 - 2017-08-11 06:52 - 001219584 _____ () C:\Users\test\SLAM.exe
2018-07-30 18:25 - 2017-03-21 08:18 - 000401920 _____ (Newtonsoft) C:\Users\test\Newtonsoft.Json.dll
2018-07-30 18:25 - 2017-03-21 08:18 - 000032256 _____ () C:\Users\test\YoutubeExtractor.dll
2018-07-30 18:25 - 2017-01-14 19:17 - 013765120 _____ (Vitalii Fedorchenko) C:\Users\test\NReco.VideoConverter.dll
2018-07-30 18:25 - 2016-08-08 14:23 - 007556500 _____ C:\Users\test\template.blend
2018-07-30 18:25 - 2016-08-06 18:08 - 015730729 _____ C:\Users\test\preview.mp4
2018-07-30 18:25 - 2016-08-04 17:06 - 000884053 _____ C:\Users\test\Rezonate - Pump It!(Monstercat Release) - Intro.flac
2018-07-30 18:25 - 2016-06-04 05:11 - 000000000 ____D C:\Users\test\top140-n82-blender168
2018-07-30 18:25 - 2015-09-12 11:48 - 000464384 _____ (Mark Heath) C:\Users\test\NAudio.dll
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\gtk
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\gobject
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\glib
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\gio
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\encodings
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\cairo
2018-07-30 18:24 - 2018-05-06 16:19 - 000002662 ____N C:\Users\test\Installer.class
2018-07-30 18:24 - 2018-05-06 16:19 - 000001483 ____N C:\Users\test\WindowsInfo.class
2018-07-30 18:24 - 2018-05-06 16:19 - 000000000 ____D C:\Users\test\META-INF
2018-07-30 18:24 - 2015-12-29 00:17 - 000000000 ____D C:\Users\test\mods
2018-07-30 18:24 - 2015-10-26 21:12 - 001478656 _____ C:\Users\test\IPHLPAPI.dll
2018-07-30 18:24 - 2010-10-19 10:25 - 000140302 ____N C:\Users\test\win32con.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000042908 ____N C:\Users\test\doctest.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000041509 ____N C:\Users\test\locale.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000039286 ____N C:\Users\test\pdb.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000039197 ____N C:\Users\test\optparse.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000031847 ____N C:\Users\test\pickle.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000026410 ____N C:\Users\test\difflib.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000024622 ____N C:\Users\test\unittest.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000023653 ____N C:\Users\test\threading.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000021857 ____N C:\Users\test\calendar.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000021278 ____N C:\Users\test\inspect.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000018900 ____N C:\Users\test\sre_parse.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000018361 ____N C:\Users\test\subprocess.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000018330 ____N C:\Users\test\codecs.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000017795 ____N C:\Users\test\_abcoll.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000016197 ____N C:\Users\test\random.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000015691 ____N C:\Users\test\bdb.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000014993 ____N C:\Users\test\os.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000014083 ____N C:\Users\test\gettext.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000013475 ____N C:\Users\test\tempfile.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000011587 ____N C:\Users\test\string.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000011259 ____N C:\Users\test\_strptime.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000011034 ____N C:\Users\test\sre_compile.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000010500 ____N C:\Users\test\tokenize.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000009983 ____N C:\Users\test\warnings.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000009645 ____N C:\Users\test\heapq.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000008657 ____N C:\Users\test\ntpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000008556 ____N C:\Users\test\copy.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007975 ____N C:\Users\test\cmd.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007896 ____N C:\Users\test\UserDict.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007849 ____N C:\Users\test\posixpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007846 ____N C:\Users\test\pprint.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007011 ____N C:\Users\test\traceback.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006958 ____N C:\Users\test\shlex.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006251 ____N C:\Users\test\shutil.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006062 ____N C:\Users\test\StringIO.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006028 ____N C:\Users\test\re.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005937 ____N C:\Users\test\sre_constants.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005678 ____N C:\Users\test\opcode.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005603 ____N C:\Users\test\dis.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005454 ____N C:\Users\test\collections.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005182 ____N C:\Users\test\textwrap.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000004998 ____N C:\Users\test\repr.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000004214 ____N C:\Users\test\copy_reg.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003920 ____N C:\Users\test\getopt.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003682 ____N C:\Users\test\token.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003454 ____N C:\Users\test\os2emxpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003378 ____N C:\Users\test\abc.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002886 ____N C:\Users\test\dummy_thread.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002860 ____N C:\Users\test\_threading_local.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002484 ____N C:\Users\test\linecache.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002367 ____N C:\Users\test\stat.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002336 ____N C:\Users\test\types.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002237 ____N C:\Users\test\genericpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002190 ____N C:\Users\test\__future__.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001966 ____N C:\Users\test\fnmatch.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001932 ____N C:\Users\test\glob.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001803 ____N C:\Users\test\keyword.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001763 ____N C:\Users\test\bisect.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001653 ____N C:\Users\test\pygtk.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001495 ____N C:\Users\test\atexit.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000859 ____N C:\Users\test\functools.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000557 ____N C:\Users\test\pangocairo.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000551 ____N C:\Users\test\win32gui.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000545 ____N C:\Users\test\select.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000542 ____N C:\Users\test\pango.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000536 ____N C:\Users\test\atk.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000347 ____N C:\Users\test\sre.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000219 ____N C:\Users\test\struct.pyo
2018-07-26 20:27 - 2018-07-26 20:27 - 000001103 _____ C:\Users\test\Desktop\Cheat Engine.lnk
2018-07-26 20:27 - 2018-07-26 20:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.8.1
2018-07-26 20:27 - 2018-07-26 20:27 - 000000000 ____D C:\Program Files (x86)\Cheat Engine 6.8.1
2018-07-25 23:34 - 2018-08-11 22:39 - 000003496 _____ C:\Windows\System32\Tasks\BlueStacksHelper
2018-07-25 22:12 - 2018-08-02 19:00 - 000000055 _____ C:\Users\test\Desktop\Nový textový dokument.txt
2018-07-25 03:27 - 2018-07-25 03:57 - 000104808 _____ C:\Users\test\Documents\dbd.veg
2018-07-25 03:27 - 2018-07-25 03:27 - 000020152 _____ C:\Users\test\Documents\dbd.veg.bak
2018-07-22 19:22 - 2018-07-22 19:22 - 000000000 ___HD C:\Users\Public\Shared Files
2018-07-18 10:54 - 2018-07-18 10:55 - 000000000 ____D C:\Users\test\AppData\Roaming\Battle.net
2018-07-18 10:54 - 2018-07-18 10:55 - 000000000 ____D C:\Users\test\AppData\Local\Battle.net
2018-07-18 10:53 - 2018-07-18 10:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2018-07-18 01:17 - 2018-07-18 01:17 - 000000000 ____D C:\Users\test\AppData\Local\VEGAS
2018-07-18 01:17 - 2018-07-18 01:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2018-07-18 01:17 - 2018-07-18 01:17 - 000000000 ____D C:\Program Files (x86)\VEGAS
2018-07-17 14:23 - 2018-07-17 14:20 - 000378072 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-07-17 00:48 - 2018-07-29 19:53 - 000000000 ____D C:\Users\test\csgo
2018-07-17 00:48 - 2018-07-17 00:57 - 000000000 ____D C:\Users\test\temp
2018-07-16 16:32 - 2018-07-16 16:32 - 000000000 ____D C:\Users\test\AppData\LocalLow\JustUsLab
2018-07-16 14:57 - 2018-07-16 14:57 - 000000000 ____D C:\Users\test\AppData\LocalLow\Cool Games
2018-07-15 20:21 - 2018-07-15 20:21 - 000000000 ____D C:\Users\test\AppData\Local\BattlEye
2018-07-15 18:30 - 2018-07-15 18:30 - 000021656 _____ (Echobit, LLC) C:\Windows\system32\Drivers\evolve.sys
2018-07-15 18:29 - 2018-07-15 18:29 - 000000000 ____D C:\Users\test\AppData\Local\Echobit
2018-07-15 18:29 - 2018-07-15 18:29 - 000000000 ____D C:\ProgramData\Echobit
2018-07-15 18:29 - 2018-07-15 18:29 - 000000000 ____D C:\Program Files\Echobit
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-08-12 12:09 - 2016-02-04 20:33 - 000000000 ____D C:\FRST
2018-08-12 12:06 - 2009-07-14 06:45 - 000031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-12 12:06 - 2009-07-14 06:45 - 000031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-12 11:59 - 2015-11-20 15:32 - 000000000 ____D C:\Users\test\AppData\Roaming\Skype
2018-08-12 11:56 - 2017-03-18 13:54 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-08-12 11:53 - 2016-07-17 13:53 - 000000000 ____D C:\Program Files (x86)\Steam
2018-08-12 11:48 - 2017-01-02 17:11 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-08-12 11:47 - 2015-11-19 17:50 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-08-12 11:47 - 2015-11-15 01:13 - 000000000 ____D C:\ProgramData\NVIDIA
2018-08-12 11:47 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-11 22:39 - 2018-05-17 05:24 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d15d7bd5d2ebca
2018-08-11 22:39 - 2018-05-17 05:24 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d12d273b5e9ef8
2018-08-11 22:39 - 2018-05-07 20:04 - 000003526 _____ C:\Windows\System32\Tasks\WinZip Update Notifier 2
2018-08-11 22:39 - 2018-05-07 20:04 - 000003524 _____ C:\Windows\System32\Tasks\WinZip Update Notifier 3
2018-08-11 22:39 - 2018-05-07 20:04 - 000003524 _____ C:\Windows\System32\Tasks\WinZip Update Notifier 1
2018-08-11 22:39 - 2018-03-12 18:27 - 000003162 _____ C:\Windows\System32\Tasks\{51E23819-6969-4A2E-9A8A-E90D654DAB5A}
2018-08-11 22:39 - 2018-02-01 15:01 - 000003454 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-test-PC-test
2018-08-11 22:39 - 2017-04-19 17:58 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2016-08-20 13:12 - 000009010 _____ C:\Windows\System32\Tasks\Gerkmiwegh Cache
2018-08-11 22:39 - 2016-02-04 20:13 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-08-11 22:39 - 2015-11-21 02:50 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-08-11 22:39 - 2015-11-15 00:14 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-08-11 19:43 - 2015-11-20 15:39 - 000000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-08-11 19:28 - 2015-11-15 01:04 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-08-11 19:16 - 2017-08-23 23:24 - 000000000 ____D C:\Users\test\AppData\Roaming\discord
2018-08-11 10:40 - 2016-05-29 21:04 - 595527894 _____ C:\Windows\MEMORY.DMP
2018-08-11 10:40 - 2016-05-29 21:04 - 000000000 ____D C:\Windows\Minidump
2018-08-11 00:08 - 2017-08-17 19:51 - 000000000 ____D C:\Users\test\AppData\Roaming\audacity
2018-08-10 23:48 - 2016-11-11 16:12 - 000000000 ____D C:\Users\test\Desktop\Songs
2018-08-10 23:30 - 2018-05-10 19:01 - 000000000 _____ C:\Windows\system32\last.dump
2018-08-10 00:36 - 2017-10-23 15:43 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-08-10 00:19 - 2017-12-29 15:49 - 000000000 ____D C:\Users\test\AppData\Roaming\RenPy
2018-08-09 23:02 - 2016-09-04 18:02 - 000000000 ____D C:\Riot Games
2018-08-06 02:24 - 2015-11-27 23:22 - 000000000 ____D C:\Users\test\AppData\Local\CrashDumps
2018-08-05 12:32 - 2017-10-16 20:39 - 000000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-08-05 02:24 - 2017-08-27 22:22 - 000000000 ____D C:\Users\test\AppData\Roaming\obs-studio
2018-08-03 15:13 - 2018-05-08 14:42 - 000000000 ____D C:\Users\test\Desktop\all
2018-08-03 13:47 - 2018-01-02 18:20 - 000000000 ____D C:\Users\test\AppData\LocalLow\Unity
2018-08-01 13:39 - 2016-12-17 23:15 - 000000000 ____D C:\Users\test\AppData\Local\Ubisoft Game Launcher
2018-08-01 02:10 - 2015-11-22 00:29 - 000000000 ____D C:\Users\test\Documents\My Games
2018-07-30 18:26 - 2017-12-30 15:06 - 000000000 ____D C:\Users\test\AppData\Local\SLAM
2018-07-30 18:25 - 2018-06-03 01:05 - 000000000 ____D C:\Users\test\ModCompile
2018-07-30 18:25 - 2015-11-15 00:59 - 000000000 ____D C:\Users\test
2018-07-30 01:11 - 2016-11-04 23:20 - 000000000 ____D C:\Users\test\AppData\Local\Bluestacks
2018-07-29 22:09 - 2017-04-28 23:07 - 000000000 ____D C:\Users\test\AppData\Roaming\vlc
2018-07-26 14:40 - 2018-06-12 05:58 - 000000000 ____D C:\Users\test\Desktop\ss
2018-07-25 03:29 - 2018-06-09 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GenArts Sapphire OFX
2018-07-24 16:02 - 2018-04-05 05:20 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2018-07-24 15:09 - 2017-02-08 22:19 - 000000000 ____D C:\Users\test\AppData\Roaming\CPUCores
2018-07-23 18:23 - 2016-07-18 18:34 - 000467064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-07-22 19:14 - 2016-07-15 11:03 - 000000000 ____D C:\Users\test\AppData\Local\UnrealEngine
2018-07-18 10:50 - 2017-04-07 18:42 - 000000000 ____D C:\Users\test\AppData\Local\Blizzard
2018-07-18 10:08 - 2018-04-05 05:16 - 000000000 ____D C:\Users\test\AppData\Local\AVAST Software
2018-07-18 01:17 - 2018-06-05 18:04 - 000000000 ____D C:\ProgramData\VEGAS
2018-07-18 01:16 - 2018-06-05 18:02 - 000000000 ____D C:\Users\test\AppData\Roaming\Sony
2018-07-17 14:20 - 2017-11-18 18:14 - 000197160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000381584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000211160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000159640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000111872 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000085968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000046976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-07-17 14:17 - 2017-11-24 15:29 - 000239680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-07-17 14:17 - 2016-07-18 18:34 - 001027728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000346664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbloga.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000229392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000201328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsha.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000059592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniva.sys
2018-07-15 18:39 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-07-15 13:27 - 2016-09-03 12:34 - 000004514 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-07-15 13:27 - 2015-11-21 02:50 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-07-15 13:27 - 2015-11-21 02:50 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-07-15 13:27 - 2015-11-21 02:50 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-07-15 13:27 - 2015-11-21 02:50 - 000000000 ____D C:\Windows\system32\Macromed
2018-07-15 13:15 - 2015-11-15 00:13 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories =======
2018-07-30 18:25 - 2018-07-17 00:49 - 035445760 _____ () C:\Users\test\ffmpeg.exe
2018-07-30 18:24 - 2015-10-26 21:12 - 001478656 _____ () C:\Users\test\IPHLPAPI.dll
2018-07-30 18:25 - 2015-09-12 11:48 - 000464384 _____ (Mark Heath) C:\Users\test\NAudio.dll
2018-07-30 18:25 - 2017-03-21 08:18 - 000401920 _____ (Newtonsoft) C:\Users\test\Newtonsoft.Json.dll
2018-07-30 18:25 - 2017-01-14 19:17 - 013765120 _____ (Vitalii Fedorchenko) C:\Users\test\NReco.VideoConverter.dll
2018-07-30 18:25 - 2017-08-11 06:52 - 001219584 _____ () C:\Users\test\SLAM.exe
2018-06-03 01:05 - 2017-11-03 15:51 - 000000147 _____ () C:\Users\test\start-tModLoaderServer-steam-friends.bat
2018-06-03 01:05 - 2017-11-03 15:51 - 000000147 _____ () C:\Users\test\start-tModLoaderServer-steam-private.bat
2018-06-03 01:05 - 2017-11-03 15:51 - 000000125 _____ () C:\Users\test\start-tModLoaderServer.bat
2018-06-03 01:05 - 2018-05-06 16:19 - 012277760 _____ (Re-Logic) C:\Users\test\Terraria.exe
2018-06-03 01:05 - 2018-05-06 16:19 - 012264448 _____ (Re-Logic) C:\Users\test\tModLoaderServer.exe
2018-07-30 18:25 - 2017-03-21 08:18 - 000032256 _____ () C:\Users\test\YoutubeExtractor.dll
2016-11-01 20:50 - 2016-11-01 20:50 - 000066309 _____ () C:\Users\test\AppData\Roaming\icarus-dxdiag.xml
2015-12-13 17:50 - 2015-12-13 17:50 - 000000097 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg
2015-12-13 17:45 - 2015-12-13 17:45 - 000010496 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_live.bin
2015-12-13 17:42 - 2015-12-13 17:42 - 000000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg
2015-12-19 16:53 - 2016-08-06 20:24 - 000000910 _____ () C:\Users\test\AppData\Local\_settings.ini
Some files in TEMP:
====================
2018-07-30 01:11 - 2018-06-21 11:50 - 000826376 _____ (BlueStack Systems, Inc.) C:\Users\test\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2018-07-30 01:11 - 2018-06-21 11:50 - 000421344 _____ (CodeTitans) C:\Users\test\AppData\Local\Temp\JSON.dll
2018-04-27 07:17 - 2018-07-24 15:49 - 057812744 _____ (Skype Technologies S.A.) C:\Users\test\AppData\Local\Temp\SkypeSetup.exe
2018-04-21 16:35 - 2018-04-19 18:50 - 000331072 _____ () C:\Users\test\AppData\Local\Temp\UninstallTwitch.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-08-06 12:26
==================== End of FRST.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02.08.2018
Ran by test (administrator) on TEST-PC (12-08-2018 12:09:37)
Running from D:\Program files v2
Loaded Profiles: test (Available Profiles: test)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(WinZip Computing) C:\Program Files\WinZip\WzPreloader.exe
(WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
() C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
() C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler.exe
(AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.136.333\AvastBrowserCrashHandler64.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(Discord Inc.) C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-07-17] (AVAST Software)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [316392 2018-05-11] (Adobe Systems, Incorporated)
HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2862032 2018-04-23] (Corel Corporation)
HKLM\...\Run: [WinZip PreLoader] => C:\Program Files\WinZip\WzPreloader.exe [124032 2018-04-23] (WinZip Computing)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436416 2018-04-23] (WinZip Computing, S.L.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [5199984 2015-11-09] (VIA)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4468056 2015-06-18] (Disc Soft Ltd)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3206432 2018-08-09] (Valve Corporation)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Tanks] => "C:\Games\World_of_Tanks\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Tanks (1)] => "C:\Games\World_of_Tanks_CT\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Warships] => "C:\Games\World_of_Warships\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [World of Warplanes] => "C:\Games\World_of_Warplanes\WargamingGameUpdater.exe"
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Discord] => C:\Users\test\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\...\Run: [EpicGamesLauncher] => "C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe" -silent
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40F5143E-E1E8-494E-B925-72839C3F31C7}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{AE568813-CC7A-4B9D-B4B4-8D4030A09294}: [NameServer] 77.234.40.79
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {3BF1670B-0D8A-4E20-B24B-CFD61F757B1A} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {9F976E67-9D9C-4F2B-BB92-BE375CC328CA} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {C0C3A6C6-03BC-4195-8FCB-AEA091301353} URL = hxxps://search.yahoo.com/yhs/search?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__ch_WCYID10454__180521__yaie&p={searchTerms}
SearchScopes: HKU\S-1-5-21-1906927588-4285542165-1585533686-1000 -> {C0C85594-B862-4570-848F-E85A0AB6DD3A} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-06-17] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-07-17] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-17] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-07-17] (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FireFox:
========
FF DefaultProfile: aiixix9q.default
FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default [2018-05-21]
FF Homepage: Mozilla\Firefox\Profiles\aiixix9q.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10454__180521__yaff
FF NewTab: Mozilla\Firefox\Profiles\aiixix9q.default -> hxxps://search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10454__180521__yaff
FF Extension: (Safe Browsing Version 4 (temporary add-on)) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\sbv4-gradual-rollout@mozilla.com.xpi [2017-10-23] [Legacy]
FF Extension: (Avast SafePrice) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\sp@avast.com.xpi [2017-09-09]
FF Extension: (Avast Online Security) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\wrc@avast.com.xpi [2017-09-09]
FF Extension: (Adblock Plus) - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-10-23] [Legacy]
FF SearchPlugin: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\aiixix9q.default\searchplugins\yahoo-lavasoft-ff59.xml [2018-05-21]
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-17] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-17] (Oracle Corporation)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1224194.dll [2016-02-19] (Adobe Systems, Inc.)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-11-05] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-06-29] (Adobe Systems Inc.)
Chrome:
=======
CHR HomePage: Default -> msn.com
CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC ... earchTerms}
CHR DefaultSearchKeyword: Default -> bing.com
CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__ ... earchTerms}
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default [2018-08-12]
CHR Extension: (Honey) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2018-07-22]
CHR Extension: (AdBlock) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-07-25]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-13]
CHR Extension: (Chrome Media Router) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-10]
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\System Profile [2018-05-21]
CHR HKU\S-1-5-21-1906927588-4285542165-1585533686-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [2321384 2018-05-11] (Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems, Incorporated)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7780400 2018-07-17] (AVAST Software)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [322464 2018-07-17] (AVAST Software)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-04-05] (AVAST Software)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6893704 2018-07-15] ()
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1268568 2015-06-18] (Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-08-09] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1165368 2016-05-02] (NVIDIA Corporation)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2018-03-29] (Hi-Rez Studios) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2017-10-15] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2015-11-09] (VIA Technologies, Inc.)
R2 Wallpaper Engine Service; C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe [348136 2018-05-08] ()
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2015-11-15] (Microsoft Corporation)
S3 NvContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000
S3 NvContainerNetworkService; "C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe" -s NvContainerNetworkService -f "C:\ProgramData\NVIDIA\NvContainerNetworkService.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\NetworkService" -r -p 30000
S3 NvStreamNetworkSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe" [X]
S2 NvStreamSvc; "C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe" [X]
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 AsrRamDisk; C:\Windows\System32\DRIVERS\AsrRamDisk.sys [34640 2012-08-09] (ASRock Inc.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [197160 2018-07-17] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [229392 2018-07-17] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [201328 2018-07-17] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [346664 2018-07-17] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [59592 2018-07-17] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [239680 2018-07-17] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46976 2018-07-17] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159640 2018-07-17] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111872 2018-07-17] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-07-17] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027728 2018-07-17] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [467064 2018-07-23] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [211160 2018-07-17] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [53904 2017-03-18] (The OpenVPN Project)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381584 2018-07-17] (AVAST Software)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2015-11-15] (Disc Soft Ltd)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77440 2017-10-23] ()
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2018-07-15] (Echobit, LLC)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [50088 2017-02-08] (Visicom Media Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [192952 2017-10-23] (Malwarebytes)
S3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-11-06] (Malwarebytes)
S3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [45504 2017-11-06] (Malwarebytes)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [253888 2017-10-23] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-11-06] (Malwarebytes)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35992 2014-12-29] (Visicom Media Inc.)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47552 2017-03-28] (NVIDIA Corporation)
R3 tap-tb-0901; C:\Windows\System32\DRIVERS\tap-tb-0901.sys [38656 2017-06-13] (The OpenVPN Project)
R3 VBAudioVMAUXVAIOMME; C:\Windows\System32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [41192 2017-08-30] (Windows (R) Win 7 DDK provider)
R3 VBAudioVMVAIOMME; C:\Windows\System32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-08-30] (Windows (R) Win 7 DDK provider)
R1 VBoxUSBMon; C:\Windows\System32\DRIVERS\VBoxUSBMon.sys [127432 2015-09-16] (BigNox Corporation)
S3 wdm_usb; C:\Windows\System32\DRIVERS\usb2ser.sys [159936 2016-08-16] (MBB)
R1 XQHDrv; C:\Windows\System32\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
R1 XQHDrv; C:\Windows\SysWOW64\DRIVERS\XQHDrv.sys [253384 2015-09-16] (BigNox Corporation)
S3 cpuz138; \??\C:\Users\test\AppData\Local\Temp\cpuz138\cpuz138_x64.sys [X] <==== ATTENTION
S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-08-11 17:42 - 2018-08-11 17:42 - 000000220 _____ C:\Users\test\Desktop\Source Filmmaker.url
2018-08-11 03:24 - 2018-08-11 04:23 - 000000022 _____ C:\Users\test\Desktop\saga.txt
2018-08-11 00:51 - 2018-08-11 00:56 - 000000000 ____D C:\Users\test\Desktop\SummertimeSaga-0.16.1-pc
2018-08-10 12:33 - 2018-08-10 12:33 - 000405576 _____ C:\Windows\Minidump\081018-21906-01.dmp
2018-08-09 23:04 - 2018-08-09 23:04 - 000000826 _____ C:\Users\test\Desktop\League of Legends.lnk
2018-08-09 23:03 - 2018-08-09 23:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2018-08-03 13:37 - 2018-08-03 13:47 - 000000000 ____D C:\Users\test\AppData\LocalLow\Disney Interactive
2018-08-03 13:31 - 2018-08-03 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Club Penguin Island
2018-08-01 19:20 - 2018-08-01 19:20 - 000000000 ____D C:\Users\test\AppData\LocalLow\Fearem
2018-08-01 19:06 - 2018-08-01 19:06 - 000000222 _____ C:\Users\test\Desktop\Daemonical.url
2018-08-01 02:06 - 2018-08-01 02:06 - 000000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2018-07-30 18:25 - 2018-08-10 23:53 - 000000000 ____D C:\Users\test\Desktop\SLAM
2018-07-30 18:25 - 2018-07-17 00:49 - 035445760 _____ C:\Users\test\ffmpeg.exe
2018-07-30 18:25 - 2017-08-11 06:52 - 001219584 _____ () C:\Users\test\SLAM.exe
2018-07-30 18:25 - 2017-03-21 08:18 - 000401920 _____ (Newtonsoft) C:\Users\test\Newtonsoft.Json.dll
2018-07-30 18:25 - 2017-03-21 08:18 - 000032256 _____ () C:\Users\test\YoutubeExtractor.dll
2018-07-30 18:25 - 2017-01-14 19:17 - 013765120 _____ (Vitalii Fedorchenko) C:\Users\test\NReco.VideoConverter.dll
2018-07-30 18:25 - 2016-08-08 14:23 - 007556500 _____ C:\Users\test\template.blend
2018-07-30 18:25 - 2016-08-06 18:08 - 015730729 _____ C:\Users\test\preview.mp4
2018-07-30 18:25 - 2016-08-04 17:06 - 000884053 _____ C:\Users\test\Rezonate - Pump It!(Monstercat Release) - Intro.flac
2018-07-30 18:25 - 2016-06-04 05:11 - 000000000 ____D C:\Users\test\top140-n82-blender168
2018-07-30 18:25 - 2015-09-12 11:48 - 000464384 _____ (Mark Heath) C:\Users\test\NAudio.dll
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\gtk
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\gobject
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\glib
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\gio
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\encodings
2018-07-30 18:24 - 2018-07-30 18:24 - 000000000 ____D C:\Users\test\cairo
2018-07-30 18:24 - 2018-05-06 16:19 - 000002662 ____N C:\Users\test\Installer.class
2018-07-30 18:24 - 2018-05-06 16:19 - 000001483 ____N C:\Users\test\WindowsInfo.class
2018-07-30 18:24 - 2018-05-06 16:19 - 000000000 ____D C:\Users\test\META-INF
2018-07-30 18:24 - 2015-12-29 00:17 - 000000000 ____D C:\Users\test\mods
2018-07-30 18:24 - 2015-10-26 21:12 - 001478656 _____ C:\Users\test\IPHLPAPI.dll
2018-07-30 18:24 - 2010-10-19 10:25 - 000140302 ____N C:\Users\test\win32con.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000042908 ____N C:\Users\test\doctest.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000041509 ____N C:\Users\test\locale.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000039286 ____N C:\Users\test\pdb.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000039197 ____N C:\Users\test\optparse.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000031847 ____N C:\Users\test\pickle.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000026410 ____N C:\Users\test\difflib.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000024622 ____N C:\Users\test\unittest.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000023653 ____N C:\Users\test\threading.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000021857 ____N C:\Users\test\calendar.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000021278 ____N C:\Users\test\inspect.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000018900 ____N C:\Users\test\sre_parse.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000018361 ____N C:\Users\test\subprocess.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000018330 ____N C:\Users\test\codecs.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000017795 ____N C:\Users\test\_abcoll.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000016197 ____N C:\Users\test\random.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000015691 ____N C:\Users\test\bdb.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000014993 ____N C:\Users\test\os.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000014083 ____N C:\Users\test\gettext.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000013475 ____N C:\Users\test\tempfile.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000011587 ____N C:\Users\test\string.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000011259 ____N C:\Users\test\_strptime.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000011034 ____N C:\Users\test\sre_compile.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000010500 ____N C:\Users\test\tokenize.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000009983 ____N C:\Users\test\warnings.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000009645 ____N C:\Users\test\heapq.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000008657 ____N C:\Users\test\ntpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000008556 ____N C:\Users\test\copy.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007975 ____N C:\Users\test\cmd.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007896 ____N C:\Users\test\UserDict.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007849 ____N C:\Users\test\posixpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007846 ____N C:\Users\test\pprint.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000007011 ____N C:\Users\test\traceback.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006958 ____N C:\Users\test\shlex.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006251 ____N C:\Users\test\shutil.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006062 ____N C:\Users\test\StringIO.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000006028 ____N C:\Users\test\re.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005937 ____N C:\Users\test\sre_constants.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005678 ____N C:\Users\test\opcode.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005603 ____N C:\Users\test\dis.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005454 ____N C:\Users\test\collections.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000005182 ____N C:\Users\test\textwrap.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000004998 ____N C:\Users\test\repr.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000004214 ____N C:\Users\test\copy_reg.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003920 ____N C:\Users\test\getopt.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003682 ____N C:\Users\test\token.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003454 ____N C:\Users\test\os2emxpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000003378 ____N C:\Users\test\abc.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002886 ____N C:\Users\test\dummy_thread.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002860 ____N C:\Users\test\_threading_local.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002484 ____N C:\Users\test\linecache.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002367 ____N C:\Users\test\stat.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002336 ____N C:\Users\test\types.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002237 ____N C:\Users\test\genericpath.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000002190 ____N C:\Users\test\__future__.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001966 ____N C:\Users\test\fnmatch.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001932 ____N C:\Users\test\glob.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001803 ____N C:\Users\test\keyword.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001763 ____N C:\Users\test\bisect.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001653 ____N C:\Users\test\pygtk.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000001495 ____N C:\Users\test\atexit.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000859 ____N C:\Users\test\functools.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000557 ____N C:\Users\test\pangocairo.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000551 ____N C:\Users\test\win32gui.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000545 ____N C:\Users\test\select.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000542 ____N C:\Users\test\pango.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000536 ____N C:\Users\test\atk.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000347 ____N C:\Users\test\sre.pyo
2018-07-30 18:24 - 2010-10-19 10:25 - 000000219 ____N C:\Users\test\struct.pyo
2018-07-26 20:27 - 2018-07-26 20:27 - 000001103 _____ C:\Users\test\Desktop\Cheat Engine.lnk
2018-07-26 20:27 - 2018-07-26 20:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.8.1
2018-07-26 20:27 - 2018-07-26 20:27 - 000000000 ____D C:\Program Files (x86)\Cheat Engine 6.8.1
2018-07-25 23:34 - 2018-08-11 22:39 - 000003496 _____ C:\Windows\System32\Tasks\BlueStacksHelper
2018-07-25 22:12 - 2018-08-02 19:00 - 000000055 _____ C:\Users\test\Desktop\Nový textový dokument.txt
2018-07-25 03:27 - 2018-07-25 03:57 - 000104808 _____ C:\Users\test\Documents\dbd.veg
2018-07-25 03:27 - 2018-07-25 03:27 - 000020152 _____ C:\Users\test\Documents\dbd.veg.bak
2018-07-22 19:22 - 2018-07-22 19:22 - 000000000 ___HD C:\Users\Public\Shared Files
2018-07-18 10:54 - 2018-07-18 10:55 - 000000000 ____D C:\Users\test\AppData\Roaming\Battle.net
2018-07-18 10:54 - 2018-07-18 10:55 - 000000000 ____D C:\Users\test\AppData\Local\Battle.net
2018-07-18 10:53 - 2018-07-18 10:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2018-07-18 01:17 - 2018-07-18 01:17 - 000000000 ____D C:\Users\test\AppData\Local\VEGAS
2018-07-18 01:17 - 2018-07-18 01:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2018-07-18 01:17 - 2018-07-18 01:17 - 000000000 ____D C:\Program Files (x86)\VEGAS
2018-07-17 14:23 - 2018-07-17 14:20 - 000378072 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-07-17 00:48 - 2018-07-29 19:53 - 000000000 ____D C:\Users\test\csgo
2018-07-17 00:48 - 2018-07-17 00:57 - 000000000 ____D C:\Users\test\temp
2018-07-16 16:32 - 2018-07-16 16:32 - 000000000 ____D C:\Users\test\AppData\LocalLow\JustUsLab
2018-07-16 14:57 - 2018-07-16 14:57 - 000000000 ____D C:\Users\test\AppData\LocalLow\Cool Games
2018-07-15 20:21 - 2018-07-15 20:21 - 000000000 ____D C:\Users\test\AppData\Local\BattlEye
2018-07-15 18:30 - 2018-07-15 18:30 - 000021656 _____ (Echobit, LLC) C:\Windows\system32\Drivers\evolve.sys
2018-07-15 18:29 - 2018-07-15 18:29 - 000000000 ____D C:\Users\test\AppData\Local\Echobit
2018-07-15 18:29 - 2018-07-15 18:29 - 000000000 ____D C:\ProgramData\Echobit
2018-07-15 18:29 - 2018-07-15 18:29 - 000000000 ____D C:\Program Files\Echobit
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-08-12 12:09 - 2016-02-04 20:33 - 000000000 ____D C:\FRST
2018-08-12 12:06 - 2009-07-14 06:45 - 000031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-08-12 12:06 - 2009-07-14 06:45 - 000031312 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-08-12 11:59 - 2015-11-20 15:32 - 000000000 ____D C:\Users\test\AppData\Roaming\Skype
2018-08-12 11:56 - 2017-03-18 13:54 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-08-12 11:53 - 2016-07-17 13:53 - 000000000 ____D C:\Program Files (x86)\Steam
2018-08-12 11:48 - 2017-01-02 17:11 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2018-08-12 11:47 - 2015-11-19 17:50 - 000065536 _____ C:\Windows\system32\Ikeext.etl
2018-08-12 11:47 - 2015-11-15 01:13 - 000000000 ____D C:\ProgramData\NVIDIA
2018-08-12 11:47 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-08-11 22:39 - 2018-05-17 05:24 - 000003386 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d15d7bd5d2ebca
2018-08-11 22:39 - 2018-05-17 05:24 - 000003258 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d12d273b5e9ef8
2018-08-11 22:39 - 2018-05-07 20:04 - 000003526 _____ C:\Windows\System32\Tasks\WinZip Update Notifier 2
2018-08-11 22:39 - 2018-05-07 20:04 - 000003524 _____ C:\Windows\System32\Tasks\WinZip Update Notifier 3
2018-08-11 22:39 - 2018-05-07 20:04 - 000003524 _____ C:\Windows\System32\Tasks\WinZip Update Notifier 1
2018-08-11 22:39 - 2018-03-12 18:27 - 000003162 _____ C:\Windows\System32\Tasks\{51E23819-6969-4A2E-9A8A-E90D654DAB5A}
2018-08-11 22:39 - 2018-02-01 15:01 - 000003454 _____ C:\Windows\System32\Tasks\AdobeGCInvoker-1.0-test-PC-test
2018-08-11 22:39 - 2017-04-19 17:58 - 000003738 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003738 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003730 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003554 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2017-04-19 17:58 - 000003494 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2018-08-11 22:39 - 2016-08-20 13:12 - 000009010 _____ C:\Windows\System32\Tasks\Gerkmiwegh Cache
2018-08-11 22:39 - 2016-02-04 20:13 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-08-11 22:39 - 2015-11-21 02:50 - 000004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-08-11 22:39 - 2015-11-15 00:14 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2018-08-11 19:43 - 2015-11-20 15:39 - 000000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-08-11 19:28 - 2015-11-15 01:04 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2018-08-11 19:16 - 2017-08-23 23:24 - 000000000 ____D C:\Users\test\AppData\Roaming\discord
2018-08-11 10:40 - 2016-05-29 21:04 - 595527894 _____ C:\Windows\MEMORY.DMP
2018-08-11 10:40 - 2016-05-29 21:04 - 000000000 ____D C:\Windows\Minidump
2018-08-11 00:08 - 2017-08-17 19:51 - 000000000 ____D C:\Users\test\AppData\Roaming\audacity
2018-08-10 23:48 - 2016-11-11 16:12 - 000000000 ____D C:\Users\test\Desktop\Songs
2018-08-10 23:30 - 2018-05-10 19:01 - 000000000 _____ C:\Windows\system32\last.dump
2018-08-10 00:36 - 2017-10-23 15:43 - 000002224 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-08-10 00:19 - 2017-12-29 15:49 - 000000000 ____D C:\Users\test\AppData\Roaming\RenPy
2018-08-09 23:02 - 2016-09-04 18:02 - 000000000 ____D C:\Riot Games
2018-08-06 02:24 - 2015-11-27 23:22 - 000000000 ____D C:\Users\test\AppData\Local\CrashDumps
2018-08-05 12:32 - 2017-10-16 20:39 - 000000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-08-05 02:24 - 2017-08-27 22:22 - 000000000 ____D C:\Users\test\AppData\Roaming\obs-studio
2018-08-03 15:13 - 2018-05-08 14:42 - 000000000 ____D C:\Users\test\Desktop\all
2018-08-03 13:47 - 2018-01-02 18:20 - 000000000 ____D C:\Users\test\AppData\LocalLow\Unity
2018-08-01 13:39 - 2016-12-17 23:15 - 000000000 ____D C:\Users\test\AppData\Local\Ubisoft Game Launcher
2018-08-01 02:10 - 2015-11-22 00:29 - 000000000 ____D C:\Users\test\Documents\My Games
2018-07-30 18:26 - 2017-12-30 15:06 - 000000000 ____D C:\Users\test\AppData\Local\SLAM
2018-07-30 18:25 - 2018-06-03 01:05 - 000000000 ____D C:\Users\test\ModCompile
2018-07-30 18:25 - 2015-11-15 00:59 - 000000000 ____D C:\Users\test
2018-07-30 01:11 - 2016-11-04 23:20 - 000000000 ____D C:\Users\test\AppData\Local\Bluestacks
2018-07-29 22:09 - 2017-04-28 23:07 - 000000000 ____D C:\Users\test\AppData\Roaming\vlc
2018-07-26 14:40 - 2018-06-12 05:58 - 000000000 ____D C:\Users\test\Desktop\ss
2018-07-25 03:29 - 2018-06-09 16:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GenArts Sapphire OFX
2018-07-24 16:02 - 2018-04-05 05:20 - 000002429 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2018-07-24 15:09 - 2017-02-08 22:19 - 000000000 ____D C:\Users\test\AppData\Roaming\CPUCores
2018-07-23 18:23 - 2016-07-18 18:34 - 000467064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-07-22 19:14 - 2016-07-15 11:03 - 000000000 ____D C:\Users\test\AppData\Local\UnrealEngine
2018-07-18 10:50 - 2017-04-07 18:42 - 000000000 ____D C:\Users\test\AppData\Local\Blizzard
2018-07-18 10:08 - 2018-04-05 05:16 - 000000000 ____D C:\Users\test\AppData\Local\AVAST Software
2018-07-18 01:17 - 2018-06-05 18:04 - 000000000 ____D C:\ProgramData\VEGAS
2018-07-18 01:16 - 2018-06-05 18:02 - 000000000 ____D C:\Users\test\AppData\Roaming\Sony
2018-07-17 14:20 - 2017-11-18 18:14 - 000197160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000381584 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000211160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000159640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000111872 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000085968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-07-17 14:20 - 2016-07-18 18:34 - 000046976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-07-17 14:17 - 2017-11-24 15:29 - 000239680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-07-17 14:17 - 2016-07-18 18:34 - 001027728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000346664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbloga.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000229392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000201328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsha.sys
2018-07-17 14:16 - 2017-03-18 13:54 - 000059592 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniva.sys
2018-07-15 18:39 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-07-15 13:27 - 2016-09-03 12:34 - 000004514 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-07-15 13:27 - 2015-11-21 02:50 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-07-15 13:27 - 2015-11-21 02:50 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-07-15 13:27 - 2015-11-21 02:50 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-07-15 13:27 - 2015-11-21 02:50 - 000000000 ____D C:\Windows\system32\Macromed
2018-07-15 13:15 - 2015-11-15 00:13 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Files in the root of some directories =======
2018-07-30 18:25 - 2018-07-17 00:49 - 035445760 _____ () C:\Users\test\ffmpeg.exe
2018-07-30 18:24 - 2015-10-26 21:12 - 001478656 _____ () C:\Users\test\IPHLPAPI.dll
2018-07-30 18:25 - 2015-09-12 11:48 - 000464384 _____ (Mark Heath) C:\Users\test\NAudio.dll
2018-07-30 18:25 - 2017-03-21 08:18 - 000401920 _____ (Newtonsoft) C:\Users\test\Newtonsoft.Json.dll
2018-07-30 18:25 - 2017-01-14 19:17 - 013765120 _____ (Vitalii Fedorchenko) C:\Users\test\NReco.VideoConverter.dll
2018-07-30 18:25 - 2017-08-11 06:52 - 001219584 _____ () C:\Users\test\SLAM.exe
2018-06-03 01:05 - 2017-11-03 15:51 - 000000147 _____ () C:\Users\test\start-tModLoaderServer-steam-friends.bat
2018-06-03 01:05 - 2017-11-03 15:51 - 000000147 _____ () C:\Users\test\start-tModLoaderServer-steam-private.bat
2018-06-03 01:05 - 2017-11-03 15:51 - 000000125 _____ () C:\Users\test\start-tModLoaderServer.bat
2018-06-03 01:05 - 2018-05-06 16:19 - 012277760 _____ (Re-Logic) C:\Users\test\Terraria.exe
2018-06-03 01:05 - 2018-05-06 16:19 - 012264448 _____ (Re-Logic) C:\Users\test\tModLoaderServer.exe
2018-07-30 18:25 - 2017-03-21 08:18 - 000032256 _____ () C:\Users\test\YoutubeExtractor.dll
2016-11-01 20:50 - 2016-11-01 20:50 - 000066309 _____ () C:\Users\test\AppData\Roaming\icarus-dxdiag.xml
2015-12-13 17:50 - 2015-12-13 17:50 - 000000097 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg
2015-12-13 17:45 - 2015-12-13 17:45 - 000010496 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_live.bin
2015-12-13 17:42 - 2015-12-13 17:42 - 000000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg
2015-12-19 16:53 - 2016-08-06 20:24 - 000000910 _____ () C:\Users\test\AppData\Local\_settings.ini
Some files in TEMP:
====================
2018-07-30 01:11 - 2018-06-21 11:50 - 000826376 _____ (BlueStack Systems, Inc.) C:\Users\test\AppData\Local\Temp\BlueStacksClientUninstaller.exe
2018-07-30 01:11 - 2018-06-21 11:50 - 000421344 _____ (CodeTitans) C:\Users\test\AppData\Local\Temp\JSON.dll
2018-04-27 07:17 - 2018-07-24 15:49 - 057812744 _____ (Skype Technologies S.A.) C:\Users\test\AppData\Local\Temp\SkypeSetup.exe
2018-04-21 16:35 - 2018-04-19 18:50 - 000331072 _____ () C:\Users\test\AppData\Local\Temp\UninstallTwitch.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-08-06 12:26
==================== End of FRST.txt ============================