prosím o kontrolu logu - podezření na viry
Odeslal: 06 Lis 2026 17:03
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
Ran by Admin (administrator) on DESKTOP-Q9C497L (Gigabyte Technology Co., Ltd. B650 EAGLE) (06-11-2026 16:53:23)
Running from C:\Users\Admin\Downloads\FRST64.exe
Loaded Profiles: Admin
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\Avast Software\Suite\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswEngSrv.exe
(C:\Program Files\Avast Software\Suite\AvastUI.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\model_host.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe ->) (GN Hearing A/S -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\apps\engine\prism\SteelSeriesPrism.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe ->) (Roblox Corporation -> ) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxCrashHandler.exe
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> The Qt Company Ltd.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\QtWebEngineProcess.exe <2>
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\crashpad_handler.exe
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(Discord Inc. -> Discord Inc.) C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe <6>
(explorer.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastUI.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <20>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <5>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(Roblox Corporation -> Roblox Corporation) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Suite\wsc_proxy.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\TuneupSvc.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®) C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(sihost.exe ->) (Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.29.380.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2611.1001.9.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.264.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.195.1006.0007\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe [2257752 2024-09-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe [195640 2026-11-02] (GN Hearing A/S -> SteelSeries A/S)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Suite\AvLaunch.exe [1082296 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [271496 2017-11-02] (Canon Inc. -> CANON INC.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36981208 2024-12-26] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [VoicemodV3] => C:\Program Files\Voicemod V3\Voicemod.exe [6781384 2026-07-30] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (No File)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\Update.exe [1596344 2025-07-28] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RobloxPlayerBeta] => C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe [144435664 2026-11-06] (Roblox Corporation -> Roblox Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TS3300 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDG3.DLL [506368 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: C:\WINDOWS\system32\CNMLMG3.DLL [1334784 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\Installer\chrmstp.exe [6413680 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {D96FE9D3-A062-451E-A262-E8F27B492996} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {DC1AB745-BB82-4267-8975-94AD4634EEF5} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7E4755DF-3462-4437-8A29-1BABA8A020D3} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2624568 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {88C0CD79-24AB-4E19-BCCD-0A902A4D8EBD} - System32\Tasks\Avast Software\Avast Suite Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-suite\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EB1CF22A-C3C8-48D7-B5AD-CADEFAD8BD5C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AAB48FED-F247-4DAF-A9DA-41797E58E31B} - System32\Tasks\Avast Software\Suite Emergency Update => C:\Program Files\Avast Software\Suite\AvEmUpdate.exe [5832120 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1DC3EAFF-937A-474A-B5A1-1CD6D8124A67} - System32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D91EC3B1-6750-45D1-84E4-3D89FEFD2D19} - System32\Tasks\AvastDefaultBrowserTask => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C243ACDD-16CB-4B82-A8E1-ABE586CAACE6} - System32\Tasks\AvastDefaultBrowserTask2 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {ED3FFB3C-DC75-47D9-84F5-A54EB9C686FC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C4EF9082-66CC-4FCC-8387-3FA09A416CAE} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B2C33B86-FA53-4324-90ED-60D6BBEDBB12} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {A4F6A68F-A61D-4CB4-8147-DF8DB891651B} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {3207776E-ECEF-4C3A-80F1-97D32B40AB28} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35404904 2024-10-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9233B5EB-4C39-417A-8F59-328D7F48751F} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8AC794DA-D554-4F47-8E3A-3EB8CA8F6CFD} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterDeferralTask-{d0db0f45-e744-4653-806f-9873445b824b} => {AF28889E-B0FD-494C-9FB0-D3B058A96B34}
Task: {FA614F71-5D59-4589-9663-4A62454B405D} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterRefreshForExpirationTask-{83384942-361c-49f4-8b2e-430689df0d92} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {E950036C-3336-4F90-A15B-71F539D8217F} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterTriggerTask-128000000001627409-render-{a505c6c9-95aa-43bf-9344-9c8ce9ead680} => {F47D8C53-0B74-4A66-959D-367710AB1F84}
Task: {5BA01223-2BE7-4C5C-85E9-DC04EE73A921} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\SoftLandingRefreshForExpirationTask-{e553db43-cee9-476f-a5b4-7d5a3d92b68e} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 06 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 06 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{b3986dfc-a28a-4dfc-bc34-5b43e674da2d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{da698474-86af-47b9-a1b6-0636e52f4c39}: [DhcpNameServer] 192.168.1.147 192.168.1.147
FireFox:
========
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Edge:
=======
Edge DefaultProfile: Profile 3
Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3 [2026-11-06]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\bojobppfploabceghnmlahpoonbcbacn [2026-10-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-26]
Edge Extension: (Edge relevant text changes) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-09-07]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Suite\aswidsagent.exe [8015800 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Suite\AvastSvc.exe [1051064 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Suite\afwServ.exe [2795448 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Suite\aswToolsSvc.exe [1120184 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Suite\TuneupSvc.exe [24096696 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastDriverUpdSvc; C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe [21313464 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\elevation_service.exe [4380736 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Suite\wsc_proxy.exe [56912 2026-11-04] (Avast Software s.r.o. -> AVAST Software)
S3 Denuvo Anti-Cheat Update Service; C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat-update-service.exe [1201304 2026-08-20] (DENUVO GmbH -> Denuvo GmbH)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [1039800 2026-08-18] (Epic Games Inc. -> Epic Games, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150640 2023-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2606520 2026-08-29] (Epic Games Inc. -> Epic Games, Inc.)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [19568 2024-07-04] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> )
S3 LiveStudioElevationService; C:\Program Files\TikTok LIVE Studio\1.36.6\elevation_service.exe [2522408 2026-09-19] (TikTok Pte. Ltd. -> The Chromium Authors)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe [11567496 2026-04-14] (Logitech Inc -> Logitech, Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [159744 2026-11-04] (Microsoft Windows -> )
S3 RedKard_Rooster; C:\ProgramData\RedKard\Splitgate 2\bin\anticheat.x64.redkard.exe [9678760 2025-07-27] (1047 Games, Inc. -> 1047 Games, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-08-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\updateService\SteelSeriesGGUpdateServiceProxy.exe [1587768 2026-10-06] (GN Hearing A/S -> )
R2 tmGAInstall; C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.EXE [48344 2018-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 CTIIO; \??\C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 Denuvo Anti-Cheat; \??\C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat.sys [4973192 2026-08-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 gdrv3; \??\C:\WINDOWS\System32\drivers\gdrv3.sys [52440 2024-12-05] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray.AMD64.sys [89480 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-10-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217704 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MSIO; \??\C:\WINDOWS\system32\drivers\MsIo64.sys [19672 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1559944 2022-03-30] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
S3 RedKard; \??\C:\ProgramData\RedKard\bin\RedKard.sys [5213216 2025-07-26] (1047 Games, Inc. -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_16d0e5f2b3759518\rt68cx21x64.sys [845256 2024-08-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [48728 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [61008 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_036e27f3054ae1bc\SteelSeries-Sonar-VAD.sys [95912 2026-05-06] (GN Hearing A/S -> Windows (R) Win 7 DDK provider)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\mvvad.sys [51840 2024-11-11] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Windows (R) Win 7 DDK provider)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [677952 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4355960 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1519024 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 16:31 - 2026-11-06 16:31 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-06 15:48 - 2026-11-06 15:48 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2026-11-06 15:48 - 2026-11-06 15:48 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2026-11-05 17:04 - 2026-11-05 17:04 - 000000547 _____ C:\Users\Admin\Downloads\Fixlog.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000031640 _____ C:\Users\Admin\Downloads\FRST.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000000000 ____D C:\FRST
2026-11-05 16:47 - 2026-11-05 16:47 - 002457088 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2026-11-04 19:04 - 2026-11-04 19:04 - 000003502 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask2
2026-11-04 19:04 - 2026-11-04 19:04 - 000003500 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask
2026-11-04 19:04 - 2026-11-04 19:04 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000002485 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000000000 ____D C:\Users\Admin\AppData\Roaming\xpdf
2026-11-04 19:03 - 2026-11-04 19:03 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2026-11-04 19:03 - 2026-11-04 19:03 - 000003812 _____ C:\WINDOWS\system32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001
2026-11-04 19:03 - 2026-11-04 19:03 - 000003632 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-11-04 19:03 - 2026-11-04 19:03 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2026-11-04 19:02 - 2026-11-04 19:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000003510 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2026-11-04 19:02 - 2026-11-04 19:02 - 000003386 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2026-11-04 19:02 - 2026-11-04 19:02 - 000002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000002172 _____ C:\Users\Public\Desktop\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2026-11-04 19:02 - 2026-11-04 19:00 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-11-04 19:00 - 2026-11-04 19:03 - 000000000 ____D C:\Program Files\Avast Software
2026-11-04 19:00 - 2026-11-04 19:00 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2026-11-04 19:00 - 2026-11-04 18:59 - 000056128 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-04 18:59 - 2026-11-06 15:42 - 000000000 ____D C:\ProgramData\Avast Software
2026-11-04 18:59 - 2026-11-04 18:59 - 001757928 _____ (Gen Digital Inc.) C:\Users\Admin\Downloads\avast_one_premium_security.exe
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-11-04 18:24 - 2026-11-04 18:24 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-11-01 09:07 - 2026-11-01 09:07 - 000000000 ____D C:\Users\Admin\AppData\Local\WindowsOobeAppHost
2026-10-30 10:21 - 2026-10-30 10:21 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\ttpsandbox
2026-10-30 10:09 - 2026-10-30 10:09 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CapCut
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
2026-10-24 16:14 - 2026-10-24 16:14 - 000000000 ____D C:\Program Files\XboxService
2026-10-24 16:13 - 2026-10-24 16:13 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-24 16:13 - 2026-10-24 16:12 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-20 14:42 - 2026-11-04 18:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\Program Files\Malwarebytes
2026-10-20 14:41 - 2026-10-20 14:42 - 002906704 _____ (Malwarebytes) C:\Users\Admin\Downloads\MBSetup-3.3.exe
2026-10-20 13:16 - 2026-10-20 13:16 - 000000000 ____D C:\Users\Admin\Untitled Project
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Public\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Resolve Welcome
2026-10-20 13:12 - 2026-10-20 13:12 - 000000000 ____D C:\ProgramData\Blackmagic Design
2026-10-20 13:09 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files\Blackmagic Design
2026-10-20 12:52 - 2026-10-20 12:52 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Control Panels Setup
2026-10-20 12:49 - 2026-10-20 13:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2026-10-20 12:48 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2026-10-18 11:04 - 2026-11-04 18:44 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-10-18 11:03 - 2026-11-04 18:52 - 000630744 _____ C:\WINDOWS\ntbtlog.txt
2026-10-18 10:53 - 2026-10-30 09:39 - 000003868 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-10-18 10:53 - 2026-10-30 09:39 - 000003426 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-10-18 08:38 - 2026-11-04 18:21 - 000001423 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-11-04 18:21 - 000001317 _____ C:\Users\Admin\Desktop\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-10-18 08:38 - 000000000 ____D C:\Users\Admin\AppData\Local\ESET
2026-10-18 08:37 - 2026-10-18 08:37 - 008423856 _____ (ESET) C:\Users\Admin\Downloads\esetonlinescanner.exe
2026-10-16 18:43 - 2026-10-16 18:43 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001682664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-16 18:24 - 2026-08-18 09:33 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001408744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 032167144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 028094696 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 000137032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-10-16 18:24 - 2026-08-18 09:31 - 020994792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005796584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-16 18:24 - 2026-08-18 09:30 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-16 18:24 - 2026-08-18 09:30 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-16 18:24 - 2026-08-18 08:54 - 000167436 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-13 17:09 - 2026-11-05 19:00 - 000000000 ____D C:\Users\Admin\.lyra-cli
2026-10-11 12:38 - 2026-10-11 12:38 - 659217449 _____ C:\Users\Admin\Downloads\1011 (1).mp4
2026-10-11 09:48 - 2026-10-11 09:48 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000000000 ____D C:\ProgramData\obs-studio-hook
2026-10-11 09:47 - 2026-10-11 09:48 - 000000000 ____D C:\Program Files\obs-studio
2026-10-11 09:46 - 2026-10-11 09:46 - 159809104 _____ (OBS Project) C:\Users\Admin\Downloads\OBS-Studio-32.2.2-Windows-x64-Installer.exe
2026-10-10 16:52 - 2026-10-10 16:52 - 000000222 _____ C:\Users\Admin\Desktop\Phasmophobia.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 16:44 - 2025-12-04 18:44 - 000000000 ____D C:\Users\Admin\AppData\Local\Discord
2026-11-06 16:31 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-06 16:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-06 16:24 - 2024-12-05 14:14 - 000000000 ___RD C:\Users\Admin\OneDrive
2026-11-06 15:51 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Local\Roblox
2026-11-06 15:48 - 2024-12-05 13:59 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-06 15:48 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-06 15:44 - 2026-07-27 12:46 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Player.lnk
2026-11-06 15:44 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2026-11-06 15:44 - 2025-08-04 15:00 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2026-11-06 15:44 - 2025-04-16 13:31 - 000000000 ____D C:\Users\Admin\AppData\Local\VoicemodV3
2026-11-06 15:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-06 15:42 - 2025-04-10 12:50 - 000003446 _____ C:\WINDOWS\system32\Tasks\GCC
2026-11-06 15:42 - 2024-12-05 14:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-06 15:42 - 2024-12-05 14:13 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-11-06 15:42 - 2024-12-05 14:09 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-06 15:42 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-06 15:41 - 2024-12-05 14:51 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-05 20:06 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-11-05 20:05 - 2025-05-03 17:30 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-05 19:25 - 2025-07-27 10:36 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2026-11-05 19:01 - 2026-08-02 15:10 - 000000000 ____D C:\Users\Admin\AppData\Roaming\obs-studio
2026-11-05 18:43 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-05 17:49 - 2026-07-27 12:45 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Studio.lnk
2026-11-04 19:55 - 2024-12-05 14:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2026-11-04 19:49 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-04 19:34 - 2026-07-30 09:42 - 000001313 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-04 19:34 - 2025-12-04 18:45 - 000002252 _____ C:\Users\Admin\Desktop\Discord.lnk
2026-11-04 19:33 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 19:08 - 2024-12-05 14:51 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-11-04 19:05 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-11-04 19:03 - 2024-12-05 14:14 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2026-11-04 19:02 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-11-04 18:56 - 2025-09-15 12:44 - 000000000 ____D C:\Users\Admin\AppData\Roaming\steelseries-gg-client
2026-11-04 18:53 - 2024-12-05 14:52 - 000297192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-04 18:52 - 2025-12-15 15:36 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-04 18:52 - 2025-07-11 21:00 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-11-04 18:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-11-04 18:39 - 2024-04-01 08:26 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-11-04 18:39 - 2024-04-01 08:26 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-11-04 18:24 - 2024-12-05 13:56 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-04 18:14 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-11-04 18:04 - 2024-12-05 14:52 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{9A89023D-D65A-4B5A-BC02-2CC490EFCB3F}
2026-11-04 18:04 - 2024-12-05 14:52 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{FB04E5EC-C9FC-4D1A-BB04-3AFA51C26365}
2026-11-02 18:31 - 2024-12-05 14:52 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 18:31 - 2024-12-05 14:52 - 000002344 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-11-02 07:48 - 2025-09-08 09:44 - 000061008 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys
2026-11-02 07:48 - 2025-09-08 09:44 - 000048728 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\ssdevfactory.sys
2026-11-01 09:27 - 2025-01-29 09:43 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2026-10-31 09:26 - 2026-10-03 10:45 - 000000000 ____D C:\common_attachment
2026-10-31 08:50 - 2026-06-12 18:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\.minecraft
2026-10-30 12:59 - 2025-02-10 15:28 - 000000000 ____D C:\XboxGames
2026-10-30 12:59 - 2024-12-05 13:55 - 000000000 ____D C:\ProgramData\Packages
2026-10-30 10:09 - 2026-09-29 16:04 - 000001377 _____ C:\Users\Admin\Desktop\CapCut.lnk
2026-10-29 20:33 - 2025-02-05 14:26 - 000003576 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000002381 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-25 13:00 - 2026-07-02 12:02 - 000000000 ____D C:\Users\Admin\Downloads\ACLib
2026-10-24 16:52 - 2026-07-27 15:50 - 000003185 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-24 16:12 - 2025-02-10 15:28 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 001223112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-24 16:12 - 2025-02-10 15:28 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-20 14:42 - 2026-05-21 16:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Sentry
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod V3
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\Program Files\Voicemod V3
2026-10-20 13:17 - 2024-12-05 14:04 - 000000000 ____D C:\Users\Admin
2026-10-19 20:03 - 2026-05-14 15:22 - 001092224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\GameInputRedist.dll
2026-10-19 20:02 - 2026-05-14 15:22 - 000873600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-18 09:34 - 2026-02-03 19:33 - 000000000 ___HD C:\Users\Admin\AppData\Roaming\Name
2026-10-18 08:36 - 2024-12-05 14:16 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-18 08:35 - 2024-12-05 14:16 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-16 19:06 - 2026-10-03 10:37 - 000000000 ____D C:\Users\Admin\Downloads\zasilka-WRF5GENE92ADU67W
2026-10-16 18:24 - 2024-12-05 14:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-10-11 09:48 - 2026-08-02 15:10 - 000000000 ____D C:\ProgramData\obs-studio
2026-10-10 16:52 - 2025-05-03 18:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
==================== Files in the root of some directories ========
2026-02-14 15:05 - 2026-02-14 15:05 - 000000137 _____ () C:\Users\Admin\AppData\Roaming\EVIL-MONTHLY-1D33CE0FE809.log
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ () C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
Ran by Admin (administrator) on DESKTOP-Q9C497L (Gigabyte Technology Co., Ltd. B650 EAGLE) (06-11-2026 16:53:23)
Running from C:\Users\Admin\Downloads\FRST64.exe
Loaded Profiles: Admin
Platform: Microsoft Windows 11 Pro Version 26H2 26300.9818 (X64) Language: Čeština (Česko)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\Avast Software\Suite\AvastSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswEngSrv.exe
(C:\Program Files\Avast Software\Suite\AvastUI.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\model_host.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\ShadowPlay\nvsphelper64.exe
(C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe ->) (GN Hearing A/S -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\apps\engine\prism\SteelSeriesPrism.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(C:\Program Files\XboxService\x64\XboxService.exe ->) (Microsoft Corporation -> ) C:\Program Files\Microsoft GameInput\x64\GameInputRawInputProxy.exe
(C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe ->) (Roblox Corporation -> ) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxCrashHandler.exe
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> The Qt Company Ltd.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\QtWebEngineProcess.exe <2>
(C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe ->) (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\crashpad_handler.exe
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(Discord Inc. -> Discord Inc.) C:\Users\Admin\AppData\Local\Discord\app-1.0.9267\Discord.exe <6>
(explorer.exe ->) (GN Hearing A/S -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastUI.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <20>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <5>
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA app\CEF\NVIDIA Overlay.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(Roblox Corporation -> Roblox Corporation) C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Suite\wsc_proxy.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\aswToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\AvastSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Avast Software\Suite\TuneupSvc.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe
(services.exe ->) (Microsoft Corporation -> Windows (R) Win 7 DDK provider) C:\Program Files\XboxService\x64\XboxService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®) C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.37021.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(sihost.exe ->) (Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.294.583.0_x64__zpdnekdrzrea0\Spotify.exe <7>
(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.29.380.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.4019.0_x64__8wekyb3d8bbwe\EdgeGameAssist.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22608.1401.7.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2611.1001.9.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.264.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Admin\AppData\Local\Microsoft\OneDrive\26.195.1006.0007\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España) C:\Users\Admin\AppData\Local\VoicemodV3\app\last\Voicemod.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c2fa179f72a88c18\RtkAudUService64.exe [2257752 2024-09-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGGEZ.exe [195640 2026-11-02] (GN Hearing A/S -> SteelSeries A/S)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Suite\AvLaunch.exe [1082296 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [271496 2017-11-02] (Canon Inc. -> CANON INC.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36981208 2024-12-26] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [VoicemodV3] => C:\Program Files\Voicemod V3\Voicemod.exe [6781384 2026-07-30] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (No File)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\Update.exe [1596344 2025-07-28] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [RobloxPlayerBeta] => C:\Users\Admin\AppData\Local\Roblox\Versions\version-f0ea5da9412f4e35\RobloxPlayerBeta.exe [144435664 2026-11-06] (Roblox Corporation -> Roblox Corporation)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\...\Run: [MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon TS3300 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDG3.DLL [506368 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3300 series: C:\WINDOWS\system32\CNMLMG3.DLL [1334784 2023-06-05] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\Installer\chrmstp.exe [6413680 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
HKU\S-1-5-21-1453151362-2910950682-4162620220-1001\Environment\\UserInitMprLogonScript: -> (No File)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {D96FE9D3-A062-451E-A262-E8F27B492996} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {DC1AB745-BB82-4267-8975-94AD4634EEF5} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files\AVAST Software\Browser\Application\AvastBrowser.exe [4983464 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {7E4755DF-3462-4437-8A29-1BABA8A020D3} - System32\Tasks\Avast Secure Browser VPS Differential Update => C:\Program Files\AVAST Software\Browser\Application\vps_helper.exe [2624568 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {88C0CD79-24AB-4E19-BCCD-0A902A4D8EBD} - System32\Tasks\Avast Software\Avast Suite Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-suite\icarus.exe [9896952 2026-10-06] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EB1CF22A-C3C8-48D7-B5AD-CADEFAD8BD5C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [3710456 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {AAB48FED-F247-4DAF-A9DA-41797E58E31B} - System32\Tasks\Avast Software\Suite Emergency Update => C:\Program Files\Avast Software\Suite\AvEmUpdate.exe [5832120 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {1DC3EAFF-937A-474A-B5A1-1CD6D8124A67} - System32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {D91EC3B1-6750-45D1-84E4-3D89FEFD2D19} - System32\Tasks\AvastDefaultBrowserTask => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C243ACDD-16CB-4B82-A8E1-ABE586CAACE6} - System32\Tasks\AvastDefaultBrowserTask2 => C:\Program Files\AVAST Software\Browser\Application\AvastBrowserProtect.exe [1998328 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {ED3FFB3C-DC75-47D9-84F5-A54EB9C686FC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {C4EF9082-66CC-4FCC-8387-3FA09A416CAE} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {B2C33B86-FA53-4324-90ED-60D6BBEDBB12} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {A4F6A68F-A61D-4CB4-8147-DF8DB891651B} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Admin\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-18] (ESET, spol. s r.o. -> ESET)
Task: {3207776E-ECEF-4C3A-80F1-97D32B40AB28} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35404904 2024-10-22] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {9233B5EB-4C39-417A-8F59-328D7F48751F} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8AC794DA-D554-4F47-8E3A-3EB8CA8F6CFD} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterDeferralTask-{d0db0f45-e744-4653-806f-9873445b824b} => {AF28889E-B0FD-494C-9FB0-D3B058A96B34}
Task: {FA614F71-5D59-4589-9663-4A62454B405D} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterRefreshForExpirationTask-{83384942-361c-49f4-8b2e-430689df0d92} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {E950036C-3336-4F90-A15B-71F539D8217F} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\ActionCenterTriggerTask-128000000001627409-render-{a505c6c9-95aa-43bf-9344-9c8ce9ead680} => {F47D8C53-0B74-4A66-959D-367710AB1F84}
Task: {5BA01223-2BE7-4C5C-85E9-DC04EE73A921} - System32\Tasks\SoftLanding\S-1-5-21-1453151362-2910950682-4162620220-1001\SoftLandingRefreshForExpirationTask-{e553db43-cee9-476f-a5b4-7d5a3d92b68e} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 06 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 06 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{b3986dfc-a28a-4dfc-bc34-5b43e674da2d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{da698474-86af-47b9-a1b6-0636e52f4c39}: [DhcpNameServer] 192.168.1.147 192.168.1.147
FireFox:
========
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1995.6\npAvastBrowserUpdate3.dll [2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
Edge:
=======
Edge DefaultProfile: Profile 3
Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3 [2026-11-06]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\bojobppfploabceghnmlahpoonbcbacn [2026-10-20]
Edge Extension: (Dokumenty Google offline) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-26]
Edge Extension: (Edge relevant text changes) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Profile 3\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-09-07]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR DefaultProfile: Default
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Suite\aswidsagent.exe [8015800 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Antivirus; C:\Program Files\Avast Software\Suite\AvastSvc.exe [1051064 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Firewall; C:\Program Files\Avast Software\Suite\afwServ.exe [2795448 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Suite\aswToolsSvc.exe [1120184 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastCleanupSvc; C:\Program Files\Avast Software\Suite\TuneupSvc.exe [24096696 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastDriverUpdSvc; C:\Program Files\Avast Software\Suite\DriverUpdSvc.exe [21313464 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [194016 2026-11-04] (Gen Digital Inc. -> Gen Digital Inc.)
S3 AvastSecureBrowserElevationService; C:\Program Files\AVAST Software\Browser\Application\154.0.35638.100\elevation_service.exe [4380736 2026-10-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Suite\wsc_proxy.exe [56912 2026-11-04] (Avast Software s.r.o. -> AVAST Software)
S3 Denuvo Anti-Cheat Update Service; C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat-update-service.exe [1201304 2026-08-20] (DENUVO GmbH -> Denuvo GmbH)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [1039800 2026-08-18] (Epic Games Inc. -> Epic Games, Inc.)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [150640 2023-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2606520 2026-08-29] (Epic Games Inc. -> Epic Games, Inc.)
R2 GameInputRedistService; C:\Program Files\Microsoft GameInput\x64\GameInputRedistService.exe [466600 2026-10-19] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [19568 2024-07-04] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [460488 2024-04-03] (Canon Inc. -> )
S3 LiveStudioElevationService; C:\Program Files\TikTok LIVE Studio\1.36.6\elevation_service.exe [2522408 2026-09-19] (TikTok Pte. Ltd. -> The Chromium Authors)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray_service.AMD64.exe [11567496 2026-04-14] (Logitech Inc -> Logitech, Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-10-20] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_cc526ccc3287f5cd\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-08-18] (NVIDIA Corporation -> NVIDIA Corporation)
S3 PlutonQcService; C:\WINDOWS\system32\PlutonQcService.exe [159744 2026-11-04] (Microsoft Windows -> )
S3 RedKard_Rooster; C:\ProgramData\RedKard\Splitgate 2\bin\anticheat.x64.redkard.exe [9678760 2025-07-27] (1047 Games, Inc. -> 1047 Games, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-08-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\updateService\SteelSeriesGGUpdateServiceProxy.exe [1587768 2026-10-06] (GN Hearing A/S -> )
R2 tmGAInstall; C:\Program Files (x86)\Thrustmaster\Thrustmaster FFB Driver\drivers\amd64\tmGAInstall.EXE [48344 2018-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Thrustmaster®)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XboxService; C:\Program Files\XboxService\x64\XboxService.exe [579752 2026-10-14] (Microsoft Corporation -> Windows (R) Win 7 DDK provider)
R2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [878840 2026-11-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 AppShellElevationService; "C:\Program Files\TikTok LIVE Studio\1.14.2\elevation_service.exe" (No File)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [253024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [396896 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [95320 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [311904 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [641632 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [862816 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1302624 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [276064 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [484960 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 CTIIO; \??\C:\WINDOWS\system32\drivers\CtiIo64.sys [34920 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 Denuvo Anti-Cheat; \??\C:\Program Files\Denuvo Anti-Cheat\denuvo-anti-cheat.sys [4973192 2026-08-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 gdrv3; \??\C:\WINDOWS\System32\drivers\gdrv3.sys [52440 2024-12-05] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_dc165490f32791ad\logi_lamparray.AMD64.sys [89480 2026-04-14] (Logitech Inc -> Logitech, Inc.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-10-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217704 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MSIO; \??\C:\WINDOWS\system32\drivers\MsIo64.sys [19672 2024-12-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1559944 2022-03-30] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
S3 RedKard; \??\C:\ProgramData\RedKard\bin\RedKard.sys [5213216 2025-07-26] (1047 Games, Inc. -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_16d0e5f2b3759518\rt68cx21x64.sys [845256 2024-08-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [48728 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [61008 2026-11-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_036e27f3054ae1bc\SteelSeries-Sonar-VAD.sys [95912 2026-05-06] (GN Hearing A/S -> Windows (R) Win 7 DDK provider)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\mvvad.sys [51840 2024-11-11] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Windows (R) Win 7 DDK provider)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [677952 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wesp; C:\WINDOWS\System32\drivers\wesp.sys [4355960 2026-11-04] (Microsoft Windows -> Microsoft Corporation)
S0 wespelam; C:\WINDOWS\System32\drivers\wesp_elam.sys [1519024 2026-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S1 eocquekn; \??\C:\WINDOWS\system32\drivers\eocquekn.sys (No File)
S3 HWiNFO_202; \??\C:\Users\Admin\AppData\Local\Temp\HWiNFO_x64_202.sys (No File) <==== ATTENTION
==================== SvcHost (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 16:31 - 2026-11-06 16:31 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-06 15:48 - 2026-11-06 15:48 - 000677108 _____ C:\WINDOWS\system32\perfh005.dat
2026-11-06 15:48 - 2026-11-06 15:48 - 000144960 _____ C:\WINDOWS\system32\perfc005.dat
2026-11-05 17:04 - 2026-11-05 17:04 - 000000547 _____ C:\Users\Admin\Downloads\Fixlog.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000031640 _____ C:\Users\Admin\Downloads\FRST.txt
2026-11-05 16:48 - 2026-11-06 16:53 - 000000000 ____D C:\FRST
2026-11-05 16:47 - 2026-11-05 16:47 - 002457088 _____ (Farbar) C:\Users\Admin\Downloads\FRST64.exe
2026-11-04 19:04 - 2026-11-04 19:04 - 000003502 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask2
2026-11-04 19:04 - 2026-11-04 19:04 - 000003500 _____ C:\WINDOWS\system32\Tasks\AvastDefaultBrowserTask
2026-11-04 19:04 - 2026-11-04 19:04 - 000002520 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000002485 _____ C:\Users\Public\Desktop\Avast Secure Browser.lnk
2026-11-04 19:04 - 2026-11-04 19:04 - 000000000 ____D C:\Users\Admin\AppData\Roaming\xpdf
2026-11-04 19:03 - 2026-11-04 19:03 - 000003844 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Hourly)
2026-11-04 19:03 - 2026-11-04 19:03 - 000003812 _____ C:\WINDOWS\system32\Tasks\AvastBrowserProtectS-1-5-21-1453151362-2910950682-4162620220-1001
2026-11-04 19:03 - 2026-11-04 19:03 - 000003632 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser VPS Differential Update
2026-11-04 19:03 - 2026-11-04 19:03 - 000003260 _____ C:\WINDOWS\system32\Tasks\Avast Secure Browser Heartbeat Task (Logon)
2026-11-04 19:02 - 2026-11-04 19:03 - 000000000 ____D C:\Users\Admin\AppData\Local\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000003510 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineUA
2026-11-04 19:02 - 2026-11-04 19:02 - 000003386 _____ C:\WINDOWS\system32\Tasks\AvastUpdateTaskMachineCore
2026-11-04 19:02 - 2026-11-04 19:02 - 000002184 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000002172 _____ C:\Users\Public\Desktop\Avast One.lnk
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Avast Software
2026-11-04 19:02 - 2026-11-04 19:02 - 000000000 ____D C:\Program Files (x86)\AVAST Software
2026-11-04 19:02 - 2026-11-04 19:00 - 000330168 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2026-11-04 19:00 - 2026-11-04 19:03 - 000000000 ____D C:\Program Files\Avast Software
2026-11-04 19:00 - 2026-11-04 19:00 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2026-11-04 19:00 - 2026-11-04 18:59 - 000056128 _____ (Gen Digital Inc.) C:\WINDOWS\system32\icarus_rvrt.exe
2026-11-04 18:59 - 2026-11-06 15:42 - 000000000 ____D C:\ProgramData\Avast Software
2026-11-04 18:59 - 2026-11-04 18:59 - 001757928 _____ (Gen Digital Inc.) C:\Users\Admin\Downloads\avast_one_premium_security.exe
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-11-04 18:25 - 2026-11-04 18:25 - 000092642 _____ C:\WINDOWS\system32\ctac.json
2026-11-04 18:24 - 2026-11-04 18:24 - 000018208 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-11-01 09:07 - 2026-11-01 09:07 - 000000000 ____D C:\Users\Admin\AppData\Local\WindowsOobeAppHost
2026-10-30 10:21 - 2026-10-30 10:21 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\ttpsandbox
2026-10-30 10:09 - 2026-10-30 10:09 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CapCut
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
2026-10-24 16:14 - 2026-10-24 16:14 - 000000000 ____D C:\Program Files\XboxService
2026-10-24 16:13 - 2026-10-24 16:13 - 000000000 ____D C:\Program Files\Microsoft GameInput
2026-10-24 16:13 - 2026-10-24 16:12 - 000526792 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_16.dll.0
2026-10-20 14:42 - 2026-11-04 18:19 - 000000000 ____D C:\Users\Admin\AppData\Local\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-10-20 14:42 - 2026-10-20 14:42 - 000000000 ____D C:\Program Files\Malwarebytes
2026-10-20 14:41 - 2026-10-20 14:42 - 002906704 _____ (Malwarebytes) C:\Users\Admin\Downloads\MBSetup-3.3.exe
2026-10-20 13:16 - 2026-10-20 13:16 - 000000000 ____D C:\Users\Admin\Untitled Project
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Public\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\Documents\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Blackmagic Design
2026-10-20 13:15 - 2026-10-20 13:15 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Resolve Welcome
2026-10-20 13:12 - 2026-10-20 13:12 - 000000000 ____D C:\ProgramData\Blackmagic Design
2026-10-20 13:09 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files\Blackmagic Design
2026-10-20 12:52 - 2026-10-20 12:52 - 000000000 ____D C:\Users\Admin\AppData\Local\DaVinci Control Panels Setup
2026-10-20 12:49 - 2026-10-20 13:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2026-10-20 12:48 - 2026-10-20 13:09 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2026-10-18 11:04 - 2026-11-04 18:44 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-10-18 11:03 - 2026-11-04 18:52 - 000630744 _____ C:\WINDOWS\ntbtlog.txt
2026-10-18 10:53 - 2026-10-30 09:39 - 000003868 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-10-18 10:53 - 2026-10-30 09:39 - 000003426 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-10-18 08:38 - 2026-11-04 18:21 - 000001423 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-11-04 18:21 - 000001317 _____ C:\Users\Admin\Desktop\ESET Online Scanner.lnk
2026-10-18 08:38 - 2026-10-18 08:38 - 000000000 ____D C:\Users\Admin\AppData\Local\ESET
2026-10-18 08:37 - 2026-10-18 08:37 - 008423856 _____ (ESET) C:\Users\Admin\Downloads\esetonlinescanner.exe
2026-10-16 18:43 - 2026-10-16 18:43 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-16 18:42 - 2026-10-16 18:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:37 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001682664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-10-16 18:24 - 2026-08-18 09:33 - 001592040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001408744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 001238760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000676584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-10-16 18:24 - 2026-08-18 09:33 - 000510696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 032167144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 028094696 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 002337512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001731304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 001068264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000824040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-10-16 18:24 - 2026-08-18 09:32 - 000469736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-10-16 18:24 - 2026-08-18 09:32 - 000137032 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-10-16 18:24 - 2026-08-18 09:31 - 020994792 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005925608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 005796584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 004714728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-16 18:24 - 2026-08-18 09:31 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-10-16 18:24 - 2026-08-18 09:30 - 000572368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-10-16 18:24 - 2026-08-18 09:30 - 000441368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-16 18:24 - 2026-08-18 08:54 - 000167436 _____ C:\WINDOWS\system32\nvinfo.pb
2026-10-13 17:09 - 2026-11-05 19:00 - 000000000 ____D C:\Users\Admin\.lyra-cli
2026-10-11 12:38 - 2026-10-11 12:38 - 659217449 _____ C:\Users\Admin\Downloads\1011 (1).mp4
2026-10-11 09:48 - 2026-10-11 09:48 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2026-10-11 09:48 - 2026-10-11 09:48 - 000000000 ____D C:\ProgramData\obs-studio-hook
2026-10-11 09:47 - 2026-10-11 09:48 - 000000000 ____D C:\Program Files\obs-studio
2026-10-11 09:46 - 2026-10-11 09:46 - 159809104 _____ (OBS Project) C:\Users\Admin\Downloads\OBS-Studio-32.2.2-Windows-x64-Installer.exe
2026-10-10 16:52 - 2026-10-10 16:52 - 000000222 _____ C:\Users\Admin\Desktop\Phasmophobia.url
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2026-11-06 16:44 - 2025-12-04 18:44 - 000000000 ____D C:\Users\Admin\AppData\Local\Discord
2026-11-06 16:31 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-06 16:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-06 16:24 - 2024-12-05 14:14 - 000000000 ___RD C:\Users\Admin\OneDrive
2026-11-06 15:51 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Local\Roblox
2026-11-06 15:48 - 2024-12-05 13:59 - 001603790 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-06 15:48 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-06 15:44 - 2026-07-27 12:46 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Player.lnk
2026-11-06 15:44 - 2025-09-29 07:43 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2026-11-06 15:44 - 2025-08-04 15:00 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2026-11-06 15:44 - 2025-04-16 13:31 - 000000000 ____D C:\Users\Admin\AppData\Local\VoicemodV3
2026-11-06 15:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-06 15:42 - 2025-04-10 12:50 - 000003446 _____ C:\WINDOWS\system32\Tasks\GCC
2026-11-06 15:42 - 2024-12-05 14:52 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-06 15:42 - 2024-12-05 14:13 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2026-11-06 15:42 - 2024-12-05 14:09 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-06 15:42 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-06 15:41 - 2024-12-05 14:51 - 000906528 _____ C:\WINDOWS\system32\wpbbin.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000878840 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2026-11-06 15:41 - 2024-12-05 14:51 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-05 20:06 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-11-05 20:05 - 2025-05-03 17:30 - 000000000 ____D C:\Program Files (x86)\Steam
2026-11-05 19:25 - 2025-07-27 10:36 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2026-11-05 19:01 - 2026-08-02 15:10 - 000000000 ____D C:\Users\Admin\AppData\Roaming\obs-studio
2026-11-05 18:43 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-05 17:49 - 2026-07-27 12:45 - 000001411 _____ C:\Users\Admin\Desktop\Roblox Studio.lnk
2026-11-04 19:55 - 2024-12-05 14:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2026-11-04 19:49 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-11-04 19:34 - 2026-07-30 09:42 - 000001313 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-11-04 19:34 - 2025-12-04 18:45 - 000002252 _____ C:\Users\Admin\Desktop\Discord.lnk
2026-11-04 19:33 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 19:08 - 2024-12-05 14:51 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-11-04 19:05 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-11-04 19:03 - 2024-12-05 14:14 - 000000000 ____D C:\Users\Admin\AppData\Local\PlaceholderTileLogoFolder
2026-11-04 19:02 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-11-04 18:56 - 2025-09-15 12:44 - 000000000 ____D C:\Users\Admin\AppData\Roaming\steelseries-gg-client
2026-11-04 18:53 - 2024-12-05 14:52 - 000297192 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-11-04 18:52 - 2025-12-15 15:36 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-11-04 18:52 - 2025-07-11 21:00 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 17:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-11-04 18:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-11-04 18:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-11-04 18:39 - 2024-04-01 08:26 - 000327680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2026-11-04 18:39 - 2024-04-01 08:26 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2026-11-04 18:24 - 2024-12-05 13:56 - 003385856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-11-04 18:14 - 2024-12-05 14:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-11-04 18:04 - 2024-12-05 14:52 - 000003716 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{9A89023D-D65A-4B5A-BC02-2CC490EFCB3F}
2026-11-04 18:04 - 2024-12-05 14:52 - 000003644 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{FB04E5EC-C9FC-4D1A-BB04-3AFA51C26365}
2026-11-02 18:31 - 2024-12-05 14:52 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 18:31 - 2024-12-05 14:52 - 000002344 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-11-02 07:48 - 2025-09-08 09:44 - 000061008 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys
2026-11-02 07:48 - 2025-09-08 09:44 - 000048728 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\ssdevfactory.sys
2026-11-01 09:27 - 2025-01-29 09:43 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps
2026-10-31 09:26 - 2026-10-03 10:45 - 000000000 ____D C:\common_attachment
2026-10-31 08:50 - 2026-06-12 18:52 - 000000000 ____D C:\Users\Admin\AppData\Roaming\.minecraft
2026-10-30 12:59 - 2025-02-10 15:28 - 000000000 ____D C:\XboxGames
2026-10-30 12:59 - 2024-12-05 13:55 - 000000000 ____D C:\ProgramData\Packages
2026-10-30 10:09 - 2026-09-29 16:04 - 000001377 _____ C:\Users\Admin\Desktop\CapCut.lnk
2026-10-29 20:33 - 2025-02-05 14:26 - 000003576 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1453151362-2910950682-4162620220-1001
2026-10-29 20:33 - 2024-12-05 14:14 - 000002381 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-25 13:00 - 2026-07-02 12:02 - 000000000 ____D C:\Users\Admin\Downloads\ACLib
2026-10-24 16:52 - 2026-07-27 15:50 - 000003185 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-24 16:12 - 2025-02-10 15:28 - 004671944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 001223112 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000330184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000281032 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000166344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2026-10-24 16:12 - 2025-02-10 15:28 - 000158152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2026-10-24 16:12 - 2025-02-10 15:28 - 000084424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2026-10-20 14:42 - 2026-05-21 16:13 - 000000000 ____D C:\Users\Admin\AppData\Local\Sentry
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod V3
2026-10-20 13:45 - 2025-04-16 13:31 - 000000000 ____D C:\Program Files\Voicemod V3
2026-10-20 13:17 - 2024-12-05 14:04 - 000000000 ____D C:\Users\Admin
2026-10-19 20:03 - 2026-05-14 15:22 - 001092224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\GameInputRedist.dll
2026-10-19 20:02 - 2026-05-14 15:22 - 000873600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-18 10:30 - 2024-04-01 17:30 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-18 10:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-18 09:34 - 2026-02-03 19:33 - 000000000 ___HD C:\Users\Admin\AppData\Roaming\Name
2026-10-18 08:36 - 2024-12-05 14:16 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-18 08:35 - 2024-12-05 14:16 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-16 19:06 - 2026-10-03 10:37 - 000000000 ____D C:\Users\Admin\Downloads\zasilka-WRF5GENE92ADU67W
2026-10-16 18:24 - 2024-12-05 14:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-10-11 09:48 - 2026-08-02 15:10 - 000000000 ____D C:\ProgramData\obs-studio
2026-10-10 16:52 - 2025-05-03 18:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
==================== Files in the root of some directories ========
2026-02-14 15:05 - 2026-02-14 15:05 - 000000137 _____ () C:\Users\Admin\AppData\Roaming\EVIL-MONTHLY-1D33CE0FE809.log
2026-10-25 15:10 - 2026-10-25 15:11 - 000000015 _____ () C:\Users\Admin\AppData\Roaming\obs-virtualcam.txt
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================