Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.08.2018
Ran by [removed] (administrator) on DESKTOP-6K07MG5 (24-08-2018 19:13:31)
Running from C:\Users\[removed]\Downloads\Yeet
[removed]
Platform: Windows 10 Pro Version 1709 16299.431 (X64) Language: hrvatski (Hrvatska)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Discord Inc.) C:\Users\Admin\AppData\Local\Discord\app-0.0.300\Discord.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Discord Inc.) C:\Users\Admin\AppData\Local\Discord\app-0.0.300\Discord.exe
() C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtDCpl64.exe [2917632 2015-05-27] (Realtek Semiconductor Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5885352 2017-06-29] (LogMeIn Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2423186807-2178947950-1186379069-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3206432 2018-08-09] (Valve Corporation)
HKU\S-1-5-21-2423186807-2178947950-1186379069-1001\...\Run: [Discord] => C:\Users\Admin\AppData\Local\Discord\app-0.0.300\Discord.exe [57821176 2018-01-08] (Discord Inc.)
HKU\S-1-5-21-2423186807-2178947950-1186379069-1001\...\Run: [uTorrent] => C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe [1984184 2018-07-10] (BitTorrent Inc.)
HKU\S-1-5-21-2423186807-2178947950-1186379069-1001\...\Run: [Gaijin.Net Agent] => C:\Users\Admin\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2128968 2018-06-14] (Gaijin Entertainment)
HKU\S-1-5-21-2423186807-2178947950-1186379069-1001\...\RunOnce: [Uninstall 18.065.0329.0002\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.065.0329.0002\amd64"
HKU\S-1-5-21-2423186807-2178947950-1186379069-1001\...\RunOnce: [Uninstall 18.065.0329.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Admin\AppData\Local\Microsoft\OneDrive\18.065.0329.0002"

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{40d60c2f-68ab-4b48-a88d-2fb2ff4634ba}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d0de2085-3992-4b56-815d-77d0643b28dd}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fc1e21ae-4775-4860-913f-feb1566e6c95}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-21] (Oracle Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-21] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-21] (Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-21] (Oracle Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation)

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-21] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-21] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-06-24] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-06-24] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxp://google.com/
CHR StartupUrls: Default -> "hxxp://google.com/"
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2018-08-24]
CHR Extension: (Slides) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-21]
CHR Extension: (Docs) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Google disk) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-21]
CHR Extension: (Nyan Cat Progress Bar for YouTube™) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdjaekjkckpdknkfncfnaibkabdcgmkg [2018-06-20]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-21]
CHR Extension: (Sheets) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-21]
CHR Extension: (Google dokumenti izvanmrežno) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-17]
CHR Extension: (Avast Online Security) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-06-17]
CHR Extension: (Space) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\hifhddjdplehpbndiikdofeaopbimfmi [2018-06-20]
CHR Extension: (Voice Recognition) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2018-01-22]
CHR Extension: (Chrome New Tab - Personalize Google Homepage) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfhafhklaobpgjijpokobalkegodlblm [2018-03-26]
CHR Extension: (Plaćanja u web-trgovini Chrome) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-21]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-08-10]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7211968 2018-08-08] ()
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [382504 2018-08-10] (EasyAntiCheat Ltd)
S2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3418024 2017-06-29] (LogMeIn Inc.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764896 2018-05-20] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [764896 2018-05-20] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2017-10-22] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2018-01-14] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
S2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
S3 WdNisSvc; "%ProgramData%\Microsoft\Windows Defender\platform\4.14.17639.18041-0\NisSrv.exe" [X]
S2 WinDefend; "C:\ProgramData\Microsoft\Windows Defender\platform\4.14.17639.18041-0\MsMpEng.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 amdhub31; C:\WINDOWS\System32\drivers\amdhub31.sys [141528 2016-02-27] (Advanced Micro Devices, Inc.)
S3 amdxhc31; C:\WINDOWS\System32\drivers\amdxhc31.sys [440536 2016-02-27] (Advanced Micro Devices, Inc.)
S3 asstahci64; C:\WINDOWS\System32\drivers\asstahci64.sys [89960 2016-05-17] (Asmedia Technology)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
R3 e1cexpress; C:\WINDOWS\system32\DRIVERS\e1c65x64.sys [488736 2015-08-04] (Intel Corporation)
S3 EtronSTOR; C:\WINDOWS\System32\Drivers\EtronSTOR.sys [39296 2014-02-13] (Etron Technology Inc)
S3 FLxHCIh; C:\WINDOWS\System32\drivers\FLxHCIh.sys [86656 2016-09-06] (Fresco Logic)
S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2017-06-29] (LogMeIn Inc.)
S3 IaNVMe; C:\WINDOWS\System32\drivers\IaNVMe.sys [125408 2017-05-23] (Intel Corporation)
S3 IaRNVMe; C:\WINDOWS\System32\drivers\IaRNVMe.sys [601696 2017-04-26] (Intel Corporation)
S3 iaStorB; C:\WINDOWS\System32\drivers\iaStorB.sys [574048 2017-02-23] (Intel Corporation)
R3 IntcAzAudAddService; C:\WINDOWS\system32\drivers\RTDVHD64.sys [2540800 2015-05-27] (Realtek Semiconductor Corp.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_38c9bee769f9ef1f\nvlddmkm.sys [17168744 2018-05-08] (NVIDIA Corporation)
S3 nvme; C:\WINDOWS\System32\drivers\nvme.sys [77488 2016-08-17] (Windows (R) Win 7 DDK provider)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31200 2018-05-20] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [67432 2018-03-15] (NVIDIA Corporation)
R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [68112 2018-05-23] (NVIDIA Corporation)
S3 ocznvme; C:\WINDOWS\System32\drivers\ocznvme.sys [99592 2016-06-10] (TOSHIBA CORPORATION)
S3 ocztrimfilter; C:\WINDOWS\System32\drivers\ocztrimfilter.sys [29064 2016-06-10] (TOSHIBA CORPORATION)
S3 rcraid; C:\WINDOWS\System32\drivers\rcraid.sys [551312 2016-08-13] (AMD, Inc.)
R3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [5707264 2017-09-29] (Realtek Semiconductor Corporation )
S3 rusb3hub; C:\WINDOWS\System32\drivers\rusb3hub.sys [114568 2012-08-28] (Renesas Electronics Corporation)
S3 rusb3xhc; C:\WINDOWS\System32\drivers\rusb3xhc.sys [230280 2012-08-28] (Renesas Electronics Corporation)
S3 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [135680 2017-03-20] (Samsung Electronics Co., Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46584 2018-08-07] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [340008 2018-08-07] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [61992 2018-08-07] (Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [47096 2018-03-06] (Wellbia.com Co., Ltd.)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-24 19:56 - 2018-05-19 18:38 - 096817152 _____ C:\WINDOWS\system32\config\SOFTWARE
2018-08-24 19:56 - 2018-05-19 18:38 - 020422656 _____ C:\WINDOWS\system32\config\SYSTEM
2018-08-24 19:56 - 2018-05-19 18:38 - 000483328 _____ C:\WINDOWS\system32\config\DEFAULT
2018-08-24 19:56 - 2018-05-19 18:38 - 000040960 _____ C:\WINDOWS\system32\config\SAM
2018-08-24 19:56 - 2018-05-19 18:37 - 000036864 _____ C:\WINDOWS\system32\config\SECURITY
2018-08-24 19:09 - 2018-08-24 19:09 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2423186807-2178947950-1186379069-1001
2018-08-24 19:09 - 2018-08-24 19:09 - 000002409 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2018-08-24 19:04 - 2018-08-24 19:04 - 000005554 _____ C:\WINDOWS\system32\PerfStringBackup.TMP
2018-08-24 17:22 - 2018-08-24 17:23 - 000000000 ____D C:\WINDOWS\system32\config\Backup
2018-08-24 17:12 - 2018-08-24 17:12 - 000000000 ___HD C:\$SysReset
2018-08-24 16:39 - 2018-08-24 16:39 - 000000000 ____D C:\Users\Admin\AppData\Local\ElevatedDiagnostics
2018-08-24 14:43 - 2018-08-24 14:43 - 000195346 _____ C:\Users\Admin\Downloads\wu170509.diagcab
2018-08-23 19:21 - 2018-08-23 19:21 - 000001461 _____ C:\Users\Admin\Desktop\Roblox Player.lnk
2018-08-19 23:30 - 2018-08-19 23:44 - 960958365 _____ C:\Users\Admin\Downloads\Creative Destruction_v1.0.9_apkpure.com.xapk
2018-08-10 22:42 - 2018-08-10 22:42 - 000000222 _____ C:\Users\Admin\Desktop\Dead by Daylight.url
2018-08-10 16:56 - 2018-08-10 16:56 - 000001161 _____ C:\Users\Public\Desktop\Play UltraStar Deluxe.lnk
2018-08-10 16:55 - 2018-08-10 17:37 - 000000000 ____D C:\Program Files (x86)\UltraStar Deluxe
2018-08-10 16:55 - 2018-08-10 16:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UltraStar Deluxe
2018-08-10 16:54 - 2018-08-10 16:55 - 000000000 ____D C:\Users\Admin\Downloads\Owl City - Fireflies
2018-08-10 16:07 - 2018-03-15 15:20 - 000045408 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\vmdrv.sys
2018-08-10 13:39 - 2018-08-10 13:40 - 000000000 ____D C:\Users\Admin\Downloads\WOOSH
2018-08-10 13:37 - 2018-08-10 13:37 - 000000000 ____D C:\Users\Admin\Downloads\NeptuneSamples
2018-08-10 13:09 - 2018-08-10 13:18 - 000000000 ____D C:\Users\Admin\Documents\Neptunia
2018-08-10 12:53 - 2018-08-10 13:19 - 000000000 ____D C:\Users\Admin\Downloads\SLAM_v1.5.4
2018-08-10 12:53 - 2018-08-10 12:53 - 000000000 ____D C:\Users\Admin\AppData\Local\SLAM
2018-07-28 18:39 - 2018-07-28 18:39 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2018-07-27 17:36 - 2018-07-27 17:36 - 000271200 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2018-07-25 15:45 - 2018-07-25 15:45 - 000001109 _____ C:\Users\Public\Desktop\Pivot Animator.lnk
2018-07-25 15:45 - 2018-07-25 15:45 - 000000000 ____D C:\Users\Admin\AppData\Local\Pivot Animator
2018-07-25 15:45 - 2018-07-25 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pivot Animator
2018-07-25 15:45 - 2018-07-25 15:45 - 000000000 ____D C:\Program Files (x86)\Pivot Animator

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-08-24 19:13 - 2018-06-01 17:14 - 000000000 ____D C:\Users\Admin\Downloads\Yeet
2018-08-24 19:13 - 2018-05-20 14:16 - 000000000 ____D C:\FRST
2018-08-24 19:09 - 2017-10-21 15:31 - 000000000 ___RD C:\Users\Admin\OneDrive
2018-08-24 19:04 - 2018-01-14 23:04 - 000000000 ____D C:\ProgramData\NVIDIA
2018-08-24 19:03 - 2018-01-15 23:16 - 000000000 ____D C:\Users\Admin\AppData\Roaming\discord
2018-08-24 18:58 - 2018-01-15 00:17 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2018-08-24 18:58 - 2018-01-15 00:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2018-08-24 18:33 - 2017-09-29 10:45 - 096817152 _____ C:\WINDOWS\system32\config\SOFTWARE1
2018-08-24 16:39 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2018-08-24 16:36 - 2018-01-18 11:43 - 000004212 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
2018-08-24 16:27 - 2018-01-15 00:03 - 000385288 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2018-08-24 15:21 - 2018-01-15 00:06 - 000000000 ____D C:\Users\Admin
2018-08-24 14:42 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF
2018-08-24 14:01 - 2018-01-22 13:37 - 000000000 ____D C:\WINDOWS\Minidump
2018-08-24 14:01 - 2017-10-21 16:18 - 000000000 ____D C:\Program Files (x86)\Steam
2018-08-24 14:01 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2018-08-23 19:21 - 2018-01-21 17:15 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2018-08-22 18:08 - 2018-05-07 07:43 - 000845000 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2018-08-21 17:00 - 2018-05-01 23:48 - 000000000 ____D C:\Users\Admin\Downloads\prez
2018-08-11 21:06 - 2017-10-21 16:23 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2018-08-11 20:54 - 2018-01-18 11:36 - 000000000 ____D C:\Users\Admin\AppData\Roaming\uTorrent
2018-08-10 22:42 - 2018-05-07 07:43 - 000382504 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe
2018-08-10 16:09 - 2017-10-21 15:36 - 000000000 ____D C:\ProgramData\Package Cache
2018-08-10 16:09 - 2017-09-29 10:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2018-08-10 11:12 - 2017-10-21 15:35 - 000002297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-08-07 17:11 - 2018-02-20 15:00 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2018-07-29 00:03 - 2018-07-06 19:05 - 000000000 ____D C:\Users\Admin\AppData\Local\Battle.net
2018-07-28 11:17 - 2018-01-15 00:18 - 001264366 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2018-07-27 17:36 - 2017-10-22 10:13 - 000271200 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2018-07-25 21:55 - 2018-06-16 18:21 - 000000000 ____D C:\Users\Admin\BrawlhallaReplays
2018-07-25 19:45 - 2017-10-22 10:12 - 000000000 ____D C:\Users\Admin\Documents\My Games
2018-07-25 19:16 - 2018-05-17 21:50 - 000000000 ____D C:\Users\Admin\Downloads\Celine songs
2018-07-25 19:16 - 2018-05-07 21:19 - 000000000 ____D C:\Users\Admin\Downloads\slike
2018-07-25 01:15 - 2018-07-24 15:01 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Opera Software
2018-07-25 01:15 - 2018-07-24 15:01 - 000000000 ____D C:\Users\Admin\AppData\Local\Opera Software
2018-07-25 01:15 - 2018-07-24 15:01 - 000000000 ____D C:\Program Files\Opera

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-05-19 18:38

==================== End of FRST.txt ============================