Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-08-2021
Ran by [removed] (administrator) on DESKTOP-HAB2RL1 (ASUSTeK COMPUTER INC. UX510UWK) (24-08-2021 09:53:53)
Running from C:\Users\[removed]\Desktop
[removed]
Platform: Windows 10 Pro Version 21H1 19043.1165 (X64) Language: English (United Kingdom)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ACD Systems International Inc. -> ) C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ACDSeeCommanderUltimate11.exe
(ACD Systems International Inc. -> ACD Systems) C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\acdIDInTouch2.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\grpm-mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Bdrive Inc. -> ) C:\Program Files\NetDrive2\nd2svc.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\egui.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitPDFReaderUpdateService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\IntelCpHeciSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Logitech Inc -> Logitech) C:\ProgramData\LogiShrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\LogiShrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Sysinternals - www.sysinternals.com) C:\Users\James\Desktop\Tools\Autoruns64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mobsync.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe <2>
(Petr Stepanets -> ) [File not signed] C:\Program Files (x86)\Postimage\postimage.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Stardock Corporation -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start10\Start10_64.exe
(Stardock Corporation -> Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start10\Start10Srv.exe
(WinAbility Software Corporation -> WinAbility® Software Corporation) C:\Program Files\IconShepherd\ISEXE64.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [165928 2021-08-14] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [ACUW11EN] => C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\acdIDInTouch2.exe [2156984 2017-12-21] (ACD Systems International Inc. -> ACD Systems)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [644000 2021-03-10] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1667208 2020-11-24] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [6206360 2021-03-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [288184 2021-07-26] (Intel Corporation -> Intel)
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-942201848-496926140-1053970402-1001\...\Run: [Postimage] => C:\Program Files (x86)\Postimage\postimage.exe [16306936 2013-07-21] (Petr Stepanets -> ) [File not signed]
HKU\S-1-5-21-942201848-496926140-1053970402-1001\...\Run: [ACDSeeCommanderUltimate11] => C:\Program Files\ACD Systems\ACDSee Ultimate\11.0\ACDSeeCommanderUltimate11.exe [6395856 2018-03-02] (ACD Systems International Inc. -> )
HKU\S-1-5-21-942201848-496926140-1053970402-1001\...\Policies\Explorer: [NoPreviewPane] 1
HKU\S-1-5-21-942201848-496926140-1053970402-1001\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\92.0.4515.159\Installer\chrmstp.exe [2021-08-19] (Google LLC -> Google LLC)
IFEO\CompatTelRunner.exe: [Debugger] %windir%\System32\taskkill.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Icon Shepherd.lnk [2019-10-31]
ShortcutTarget: Icon Shepherd.lnk -> C:\Program Files\IconShepherd\ISEXE64.exe (WinAbility Software Corporation -> WinAbility® Software Corporation)
Startup: C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AutorunsDisabled [2021-08-10] ()
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
HKU\S-1-5-21-942201848-496926140-1053970402-1001\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05A5A403-62FE-492F-BDAD-49E8BD092864} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {05B55D6D-049D-4F18-9434-B49B67932667} - System32\Tasks\ASUS HotfixChecker => C:\Program Files (x86)\ASUS\HotfixChecker\HotfixChecker.exe [151352 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.)
Task: {0676743B-E46F-4AC5-AD6D-A41159C5293A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [673720 2021-08-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {107BAB5C-89C6-44E6-BDB8-A4F570D4BBA7} - System32\Tasks\CCleanerSkipUAC => C:\Users\James\Desktop\Tools\CCleaner64.exe [35144320 2021-08-16] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {1E6C6BE0-CAA4-4F5E-A67A-1B2B817EC3FA} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {220ED423-8091-4279-92CC-3AAC7CA87C7A} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {26768A82-EFD9-4262-9FCC-05FC4FBDC238} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\Windows\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {290F958E-84E7-4FB8-AB61-C5C6A14074F2} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {38DD15D7-9D0B-47B7-A0D2-42C3CD36CA87} - System32\Tasks\CCleaner Update => C:\Users\James\Desktop\Tools\CCUpdate.exe
Task: {4E29C56F-719B-415F-A518-B45B0A95EBFF} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.)
Task: {4F2012E0-DA2F-4B4A-BE96-2E8ECAE16D9E} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [855352 2016-02-19] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {5945FFFF-97C3-4FB5-BC16-D744D3CC00E4} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {5AF43569-62D8-4739-895D-B7BA7460AAFE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {654056B0-9773-4B6F-BE2C-5437266451D3} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1473032 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {69A767A4-B7B2-47A1-8657-9009CA1621B4} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {6BCD85AC-54B2-43A2-9ED5-0FAFFD37DE79} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {76A46443-3CE6-4988-A69A-EE85A1688EBD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {824EE78B-6EF9-491C-8AE9-59E93BC18537} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9420EE79-EC60-4AC4-83AB-9FF66E8E7245} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {BFDCB62C-DEAF-4AC4-90DE-722CC7701AEB} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CEA033B3-DE3F-4EB5-9F33-0BE8837FEF6D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-25] (Google LLC -> Google LLC)
Task: {D1903CBA-47A5-421C-82B5-833D355D4F3E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-05-25] (Google LLC -> Google LLC)
Task: {D7E58932-C3C0-4753-86F0-C9EF91833D87} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16717832 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {E5D6E6B6-31B6-4692-973F-D02E501BCB1D} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {EE1A39D2-0C76-453C-AC24-B1760737B3E3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F6A530CF-622D-4591-93E6-C1D429783673} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [7018264 2018-07-18] (Nero AG -> Nero AG)
Task: {FCB788DF-A338-4C8C-B0D7-BA3DF730467F} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NoUACCheck

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{215d2b21-abc4-4874-854c-91021d9a845c}: [DhcpNameServer] 192.168.1.254

Edge: 
=======
DownloadDir: C:\Users\James\Desktop
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [not found]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [not found]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [not found]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [not found]
Edge Profile: C:\Users\James\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-24]
Edge DownloadDir: Default -> C:\Users\James\Downloads
Edge StartupUrls: Default -> "hxxps://home.daffie.me.uk/"
Edge DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
Edge DefaultSearchKeyword: Default -> duckduckgo.com
Edge DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
Edge DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list

FireFox:
========
FF DefaultProfile: 0hgsahkr.default-1549538853801
FF ProfilePath: C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801 [2021-01-10]
FF DownloadDir: C:\Users\James\Desktop
FF Homepage: Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801 -> hxxps://home.daffie.me.uk/
FF NetworkProxy: Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801 -> no_proxies_on", "localhost, 127.0.0.1"
FF Notifications: Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801 -> hxxps://track.dpdlocal.co.uk
FF Extension: (Facebook Container) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\@contain-facebook.xpi [2020-09-30]
FF Extension: (Translate Now) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\@translatenow.xpi [2020-03-07]
FF Extension: (AdBlock — best ad blocker) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-01-06]
FF Extension: (English (GB) Language Pack) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2020-12-16]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-01-01] [Legacy]
FF Extension: (Show/Hide passwords) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2019-02-07]
FF Extension: (YouTube Video Downloader/YouTube HD Download) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2020-05-30]
FF Extension: (Stay secure with CyberGhost VPN Free Proxy) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{585280b0-ee78-428a-92c5-3fb3c0b85460}.xpi [2020-12-12] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]
FF Extension: (Online PDF Editor (pdf2go.com)) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2020-05-26]
FF Extension: (Download YouTube) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{612697f6-846a-4d55-a707-9f6c8da3f29e}.xpi [2020-07-04]
FF Extension: (hide.me Proxy) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{7079d3c5-b1a0-4964-8a7a-add0d2af8f52}.xpi [2020-08-25]
FF Extension: (Logitech SetPoint) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{84380428-8c9d-4bdf-913d-b2c34d6562d9}.xpi [2019-06-30]
FF Extension: (Easy Youtube Video Downloader Express) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2020-12-08]
FF Extension: (Adblock Plus - free ad blocker) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2020-12-15]
FF Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\James\AppData\Roaming\Mozilla\Firefox-old\Profiles\0hgsahkr.default-1549538853801\Extensions\{f73df109-8fb4-453e-8373-f59e61ca4da3}.xpi [2020-12-09]
FF ProfilePath: C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801 [2021-08-24]
FF Homepage: Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801 -> hxxps://home.daffie.me.uk/
FF Notifications: Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801 -> hxxps://track.dpdlocal.co.uk; hxxps://www.youtube.com; hxxps://track.dpd.co.uk
FF Extension: (Disconnect) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-03-28]
FF Extension: (Facebook Container) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\@contain-facebook.xpi [2021-08-03]
FF Extension: (Translate Now) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\@translatenow.xpi [2020-03-07]
FF Extension: (English (GB) Language Pack) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-08-11]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-07-31]
FF Extension: (Show/Hide passwords) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2019-02-07]
FF Extension: (uMatrix) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-07-20]
FF Extension: (YouTube Video Downloader/YouTube HD Download) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\[removed] [2021-05-11]
FF Extension: (Online PDF Editor (pdf2go.com)) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2020-05-26]
FF Extension: (hide.me Proxy) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\{7079d3c5-b1a0-4964-8a7a-add0d2af8f52}.xpi [2021-08-18]
FF Extension: (Logitech SetPoint) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\{84380428-8c9d-4bdf-913d-b2c34d6562d9}.xpi [2019-06-30]
FF Extension: (Easy Youtube Video Downloader Express) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2021-08-03]
FF Extension: (Adblock Plus - free ad blocker) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-07-27]
FF Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\James\AppData\Roaming\Mozilla\Firefox\Profiles\0hgsahkr.default-1549538853801\Extensions\{f73df109-8fb4-453e-8373-f59e61ca4da3}.xpi [2021-07-04]
FF ProfilePath: C:\Users\James\AppData\Roaming\Inno\SiteVaultPro\Profiles\cada3n4h.default [2020-03-20]
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt => not found
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-08-24]

Chrome: 
=======
CHR Profile: C:\Users\James\AppData\Local\Google\Chrome\User Data\Default [2021-08-23]
CHR HomePage: Default -> hxxp://startpage.com/
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Extension: (Google Drive) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-25]
CHR Extension: (Anonymous Proxy Browser) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjnfcmkfdcoeckplikldabeggcohmbmj [2020-10-10]
CHR Extension: (Startpage - English) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgmjlmbojbkmdpofahffgcpkhkngfpef [2021-08-14]
CHR Extension: (mobile browser emulator) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbofcampnkjmiomohpbaihdcbjhbfepf [2020-08-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-09]
CHR Extension: (hide.me Proxy) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohjocgmpmlfahafbipehkhbaacoemojp [2021-08-11]
CHR Extension: (Gmail) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\James\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-23]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9022120 2021-03-10] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [12952232 2021-03-10] (Acronis International GmbH -> )
R2 AcronisCyberProtectionService; C:\Program Files\Acronis\CyberProtect\cyber-protect-service.exe [1425256 2021-03-10] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1052280 2021-03-10] (Acronis International GmbH -> Acronis International GmbH)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2021-04-02] (Acronis International GmbH -> )
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2012-06-01] (ASUSTeK Computer Inc. -> )
S3 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [326032 2018-06-05] (ASUSTeK Computer Inc. -> )
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [36792 2021-07-26] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [177080 2021-07-26] (Intel Corporation -> Intel)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-14] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-08-14] (ESET, spol. s r.o. -> ESET)
R2 FoxitReaderUpdateService; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\FoxitPDFReaderUpdateService.exe [2357880 2021-07-21] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [File not signed]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [File not signed]
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4878840 2021-03-10] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-09-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [2136488 2021-03-23] (Acronis International GmbH -> )
R2 NetDrive2_Service_NetDrive2; C:\Program Files\NetDrive2\nd2svc.exe [851112 2018-02-21] (Bdrive Inc. -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5394872 2021-08-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Start10; C:\Program Files (x86)\Stardock\Start10\Start10Srv.exe [220440 2021-06-14] (Stardock Corporation -> Stardock Software, Inc)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7398360 2021-03-10] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
S3 wampapache64; c:\wamp64\bin\apache\apache2.4.35\bin\httpd.exe [29696 2018-09-19] (Apache Software Foundation) [File not signed]
S3 wampmariadb64; c:\wamp64\bin\mariadb\mariadb10.3.9\bin\mysqld.exe [15788968 2018-08-14] (MariaDB Corporation Ab -> )
S3 wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.23\bin\mysqld.exe [39626752 2018-06-08] () [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WSearch; C:\WINDOWS\system32\SearchIndexer.exe [935424 2021-08-10] (Access Denied)  [File not signed]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_72035dd8d03aecee\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2010-08-24] (ASUSTeK Computer Inc. -> )
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2020-08-20] (Bitdefender SRL -> Bitdefender)
R1 cbfs5; C:\Windows\system32\drivers\cbfs5.sys [422080 2015-10-04] (EldoS Corporation -> EldoS Corporation)
R1 cbfs6; C:\WINDOWS\system32\drivers\cbfs6.sys [460992 2016-09-21] (EldoS Corporation -> /n software, Inc.)
R1 cbfsconnect2017; C:\WINDOWS\system32\drivers\cbfsconnect2017.sys [481296 2020-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169424 2021-08-02] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123472 2021-08-02] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194776 2021-08-02] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43904 2021-08-02] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70232 2021-08-02] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107456 2021-08-02] (ESET, spol. s r.o. -> ESET)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [720392 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
R2 hfFilter; C:\WINDOWS\System32\drivers\hfFilter.sys [32752 2021-06-03] (Access Denied)  [File not signed]
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 NEWDRIVER; C:\Windows\SysWow64\WinVDEdrv6.sys [197648 2019-05-18] (NewSoftwares.net Inc. SDN. BHD. -> )
S0 ngelam; C:\WINDOWS\System32\drivers\ngelam.sys [15816 2021-03-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Acronis International GmbH)
R1 ngscan; C:\WINDOWS\System32\DRIVERS\ngscan.sys [179104 2021-03-23] (Acronis International GmbH -> Acronis International GmbH)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2013-09-30] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] (MiniTool Solution Ltd -> )
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [887032 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [694920 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2021-04-02] (Acronis International GmbH -> Acronis International GmbH)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [20496 2020-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-08-24 09:53 - 2021-08-24 09:54 - 000039449 _____ C:\Users\James\Desktop\FRST.txt
2021-08-24 09:53 - 2021-08-24 09:54 - 000000000 ____D C:\FRST
2021-08-24 09:36 - 2021-08-24 09:36 - 002300928 _____ (Farbar) C:\Users\James\Desktop\FRST64.exe
2021-08-24 08:13 - 2021-08-24 08:33 - 000001081 _____ C:\Users\James\Desktop\DxDiag.txt
2021-08-24 08:11 - 2021-08-24 08:12 - 000003186 _____ C:\WINDOWS\system32\Tasks\ASUS HotfixChecker
2021-08-23 13:35 - 2021-08-23 13:35 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2021-08-17 19:02 - 2021-08-17 19:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-08-17 18:54 - 2021-08-24 08:33 - 000008192 ___SH C:\DumpStack.log.tmp
2021-08-17 18:54 - 2021-08-17 18:54 - 000000000 ____D C:\WINDOWS\CSC
2021-08-17 10:17 - 2021-08-17 10:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant Standard Edition 8.8
2021-08-17 10:17 - 2021-08-17 10:17 - 000000000 ____D C:\Program Files (x86)\AOMEI Partition Assistant
2021-08-17 10:17 - 2020-12-22 14:58 - 001305680 _____ C:\WINDOWS\ddmmain.exe
2021-08-17 10:17 - 2017-02-28 14:20 - 000038320 _____ C:\WINDOWS\SysWOW64\ampa.sys
2021-08-17 10:17 - 2016-12-27 18:45 - 000035760 _____ C:\WINDOWS\system32\ddmdrv.sys
2021-08-16 09:48 - 2021-08-16 09:48 - 000003386 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d78ddffab44ca4
2021-08-13 15:02 - 2021-08-13 15:02 - 000000000 ____D C:\WINDOWS\Panther
2021-08-12 09:39 - 2021-08-12 09:39 - 000000000 ____D C:\Users\James\AppData\Local\Intel
2021-08-12 09:39 - 2021-08-12 09:39 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2021-08-11 19:00 - 2021-08-11 19:00 - 000000000 ____D C:\Users\James\AppData\Roaming\Filemail Desktop
2021-08-11 19:00 - 2021-08-11 19:00 - 000000000 ____D C:\Users\James\AppData\Local\FilemailDesktop
2021-08-11 19:00 - 2021-08-11 19:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Filemail Desktop
2021-08-11 19:00 - 2021-08-11 19:00 - 000000000 ____D C:\Program Files (x86)\FilemailDesktop
2021-08-11 13:35 - 2021-08-11 13:35 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-08-11 13:34 - 2021-08-11 13:34 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-08-11 13:34 - 2021-08-11 13:34 - 000011347 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-08-11 13:29 - 2021-08-11 13:29 - 000000000 ___HD C:\$WinREAgent
2021-08-10 16:27 - 2021-08-06 09:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-08-10 16:27 - 2021-08-06 09:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-08-10 16:27 - 2021-08-06 09:45 - 001474672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-08-10 16:27 - 2021-08-06 09:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-08-10 16:27 - 2021-08-06 09:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-08-10 16:27 - 2021-08-06 09:45 - 001212536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-08-10 16:27 - 2021-08-06 09:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-08-10 16:27 - 2021-08-06 09:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-08-10 16:27 - 2021-08-06 09:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-08-10 16:27 - 2021-08-06 09:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-08-10 16:27 - 2021-08-06 09:42 - 000716928 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-08-10 16:27 - 2021-08-06 09:42 - 000645248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-08-10 16:27 - 2021-08-06 09:42 - 000577152 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 002112144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 001595536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 001520760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 001171088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 000919184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 000750200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 000706168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-08-10 16:27 - 2021-08-06 09:41 - 000676480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-08-10 16:27 - 2021-08-06 09:41 - 000564352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-08-10 16:27 - 2021-08-06 09:40 - 008854136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-08-10 16:27 - 2021-08-06 09:40 - 007920760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-08-10 16:27 - 2021-08-06 09:40 - 005680768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2021-08-10 16:27 - 2021-08-06 09:40 - 004987512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-08-10 16:27 - 2021-08-06 09:40 - 002925688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-08-10 16:27 - 2021-08-06 09:40 - 000447096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-08-10 16:27 - 2021-08-06 09:39 - 000849024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-08-10 16:27 - 2021-08-06 09:38 - 006215808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-08-10 16:27 - 2021-08-05 22:12 - 000083062 _____ C:\WINDOWS\system32\nvinfo.pb
2021-08-10 13:52 - 2021-08-10 13:52 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-08-10 13:52 - 2021-08-10 13:52 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-08-10 13:52 - 2021-08-10 13:52 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-08-10 13:52 - 2021-08-10 13:52 - 000935424 _____ C:\WINDOWS\system32\SearchIndexer.exe
2021-08-10 13:52 - 2021-08-10 13:52 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-08-10 13:22 - 2021-08-10 13:22 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-08-10 13:21 - 2021-08-10 13:21 - 000000020 ___SH C:\Users\James\ntuser.ini
2021-08-10 13:12 - 2021-08-24 08:42 - 000840662 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-08-10 13:10 - 2021-08-24 08:33 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-08-10 13:10 - 2021-08-24 08:12 - 000003980 _____ C:\WINDOWS\system32\Tasks\Update Checker
2021-08-10 13:10 - 2021-08-16 09:48 - 000003480 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-08-10 13:10 - 2021-08-10 13:10 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000003348 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-08-10 13:10 - 2021-08-10 13:10 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000003184 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-08-10 13:10 - 2021-08-10 13:10 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000003124 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-08-10 13:10 - 2021-08-10 13:10 - 000003118 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2021-08-10 13:10 - 2021-08-10 13:10 - 000002994 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-08-10 13:10 - 2021-08-10 13:10 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002970 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2021-08-10 13:10 - 2021-08-10 13:10 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002924 _____ C:\WINDOWS\system32\Tasks\ATK Package 36D18D69AFC3
2021-08-10 13:10 - 2021-08-10 13:10 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-08-10 13:10 - 2021-08-10 13:10 - 000002738 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2021-08-10 13:10 - 2021-08-10 13:10 - 000002604 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2021-08-10 13:10 - 2021-08-10 13:10 - 000002586 _____ C:\WINDOWS\system32\Tasks\CreateExplorerShellUnelevatedTask
2021-08-10 13:10 - 2021-08-10 13:10 - 000002346 _____ C:\WINDOWS\system32\Tasks\RtHDVBg_ListenToDevice
2021-08-10 13:10 - 2021-08-10 13:10 - 000002280 _____ C:\WINDOWS\system32\Tasks\RTKCPL
2021-08-10 13:10 - 2021-08-10 13:10 - 000002244 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-08-10 13:10 - 2021-08-10 13:10 - 000002214 _____ C:\WINDOWS\system32\Tasks\ATK Package A22126881260
2021-08-10 13:10 - 2021-08-10 13:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Nero
2021-08-10 13:10 - 2021-08-10 13:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-08-10 13:10 - 2020-09-27 08:42 - 000003394 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1158337664-1572795887-1486983782-500
2021-08-10 13:09 - 2021-08-10 13:10 - 000015243 _____ C:\WINDOWS\diagwrn.xml
2021-08-10 13:09 - 2021-08-10 13:10 - 000015243 _____ C:\WINDOWS\diagerr.xml
2021-08-10 13:02 - 2021-08-10 13:02 - 000000000 ____D C:\WINDOWS\system32\lxss
2021-08-10 13:01 - 2021-08-24 09:32 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-08-10 13:01 - 2021-08-10 13:57 - 000467624 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-08-10 12:48 - 2021-08-10 14:01 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-08-10 12:47 - 2021-08-24 09:32 - 000000000 ____D C:\Users\James
2021-08-10 12:47 - 2021-08-10 14:01 - 000000000 ____D C:\Users\John
2021-08-10 12:47 - 2021-08-10 14:01 - 000000000 ____D C:\Users\Annie
2021-08-10 12:47 - 2019-12-07 10:10 - 000001105 _____ C:\Users\John\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-08-10 12:47 - 2019-12-07 10:10 - 000001105 _____ C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-08-10 12:47 - 2019-12-07 10:10 - 000001105 _____ C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-08-10 12:46 - 2021-08-10 12:48 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-08-10 12:40 - 2021-08-10 12:40 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-08-10 12:40 - 2021-08-10 12:40 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-08-10 12:40 - 2021-08-10 12:40 - 000153600 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2021-08-10 12:40 - 2021-08-10 12:40 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-08-10 12:40 - 2021-08-10 12:40 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-08-10 12:40 - 2021-08-10 12:40 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-08-10 12:40 - 2021-08-10 12:40 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-08-10 12:40 - 2021-08-10 12:40 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-08-10 12:39 - 2021-08-10 12:39 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-08-10 12:39 - 2021-08-10 12:39 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-08-10 12:39 - 2021-08-10 12:39 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-08-10 12:39 - 2021-08-10 12:39 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-08-10 12:39 - 2021-08-10 12:39 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-08-10 12:39 - 2021-08-10 12:39 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-08-10 12:39 - 2021-08-10 12:39 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-08-10 12:39 - 2021-08-10 12:39 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-08-10 12:39 - 2021-08-10 12:39 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-08-10 12:39 - 2021-08-10 12:39 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-08-10 12:38 - 2021-08-10 12:38 - 000563712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-08-10 12:38 - 2021-08-10 12:38 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-08-10 12:38 - 2021-08-10 12:38 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-08-10 12:38 - 2021-08-10 12:38 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-08-10 12:38 - 2021-08-10 12:38 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-08-10 12:27 - 2021-08-10 12:27 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-08-10 12:27 - 2021-08-10 12:27 - 000000000 ____D C:\Program Files\MSBuild
2021-08-10 12:27 - 2021-08-10 12:27 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-08-10 12:27 - 2021-08-10 12:27 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-08-10 12:21 - 2021-08-10 12:21 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-08-09 21:15 - 2021-08-09 21:15 - 011421048 _____ (Tim Kosse) C:\Users\James\Downloads\FileZilla_3.55.1_win64-setup.exe
2021-08-06 19:00 - 2021-08-06 19:00 - 000000016 _____ C:\Users\James\Desktop\PAC Numbers.txt
2021-07-28 19:31 - 2021-08-10 14:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PDF Reader
2021-07-28 09:29 - 2021-07-28 09:29 - 000001510 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk
2021-07-28 09:20 - 2021-08-09 21:20 - 000000000 ____D C:\Program Files\Audacity

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-08-24 09:42 - 2018-11-28 17:54 - 000000000 ____D C:\Users\James\AppData\LocalLow\Mozilla
2021-08-24 09:34 - 2019-01-30 12:03 - 000000000 ____D C:\ProgramData\Mozilla
2021-08-24 09:34 - 2018-11-28 17:26 - 000000000 ____D C:\ProgramData\NVIDIA
2021-08-24 09:32 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-08-24 09:32 - 2018-11-29 19:26 - 000000000 ____D C:\Program Files (x86)\Google
2021-08-24 09:32 - 2018-11-28 17:27 - 000000000 __SHD C:\Users\James\IntelGraphicsProfiles
2021-08-24 08:42 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-08-24 08:33 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-08-24 08:33 - 2018-11-30 10:55 - 000000000 ____D C:\ProgramData\NetDrive2
2021-08-24 08:13 - 2021-06-27 17:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2021-08-24 08:13 - 2018-11-28 17:42 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-08-24 08:03 - 2018-11-28 20:28 - 000000000 ____D C:\Users\James\AppData\Local\D3DSCache
2021-08-23 20:34 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-08-23 19:28 - 2020-06-06 10:48 - 000000500 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2021-08-23 17:51 - 2018-11-28 18:48 - 000000000 ___RD C:\Users\James\Desktop\Tools
2021-08-23 11:10 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-08-23 11:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-08-21 17:54 - 2020-09-27 08:36 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-08-19 13:44 - 2020-10-09 18:59 - 000000679 _____ C:\Users\James\Desktop\waitrose order additions.txt
2021-08-19 11:45 - 2020-05-25 05:58 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-08-18 12:51 - 2019-12-17 20:19 - 000000000 ____D C:\Program Files (x86)\Digiguide TV Guide
2021-08-17 19:11 - 2018-11-28 17:54 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-08-17 19:11 - 2018-11-28 17:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-08-17 19:02 - 2018-11-28 17:54 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-08-17 10:17 - 2020-01-18 12:31 - 000001024 ____H C:\AMTAG.BIN
2021-08-16 11:39 - 2019-06-15 11:00 - 000000000 ____D C:\Users\James\Documents\BlackVue
2021-08-15 21:15 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-08-14 15:47 - 2019-01-10 11:47 - 000000000 ____D C:\Program Files\BlackVue
2021-08-13 18:06 - 2019-02-05 11:29 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2021-08-13 13:41 - 2018-11-28 17:54 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
2021-08-12 15:53 - 2018-12-01 20:13 - 000000000 ____D C:\Users\James\AppData\Roaming\FileZilla
2021-08-12 15:45 - 2020-08-03 19:29 - 000000128 _____ C:\Users\James\AppData\Local\PUTTY.RND
2021-08-12 09:39 - 2018-11-28 17:30 - 000000000 ____D C:\ProgramData\Intel
2021-08-11 17:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-08-11 17:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-08-11 13:36 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-08-11 13:28 - 2018-11-28 17:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-08-11 13:24 - 2018-11-28 17:20 - 133215968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-08-10 16:32 - 2018-12-13 16:46 - 000000000 ____D C:\Users\James\AppData\Local\NVIDIA
2021-08-10 16:29 - 2018-11-28 17:25 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2021-08-10 14:01 - 2021-05-06 12:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.1
2021-08-10 14:01 - 2021-02-15 11:33 - 000000000 ____D C:\Users\Annie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-08-10 14:01 - 2021-02-13 19:40 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Core FTP (x64)
2021-08-10 14:01 - 2021-01-13 12:37 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-08-10 14:01 - 2020-10-23 20:02 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2021-08-10 14:01 - 2020-05-30 04:07 - 000000000 ____D C:\Program Files\UNP
2021-08-10 14:01 - 2020-03-17 20:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Stardock
2021-08-10 14:01 - 2019-12-07 10:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-08-10 14:01 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-08-10 14:01 - 2019-10-01 19:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2019
2021-08-10 14:01 - 2019-10-01 19:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2021-08-10 14:01 - 2019-05-18 18:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SecretFolder
2021-08-10 14:01 - 2019-04-02 16:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2021-08-10 14:01 - 2019-01-10 11:47 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlackVue
2021-08-10 14:01 - 2018-12-27 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
2021-08-10 14:01 - 2018-12-13 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2021-08-10 14:01 - 2018-12-02 19:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wampserver64
2021-08-10 14:01 - 2018-12-01 20:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2021-08-10 14:01 - 2018-11-30 11:05 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2021-08-10 14:01 - 2018-11-30 11:04 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MetaGeek
2021-08-10 14:01 - 2018-11-30 10:55 - 000000000 ____D C:\Users\James\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NetDrive2
2021-08-10 14:01 - 2018-11-30 10:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2021-08-10 14:01 - 2018-11-29 19:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2021-08-10 14:01 - 2018-11-29 19:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Postimage
2021-08-10 14:01 - 2018-11-29 19:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip
2021-08-10 14:01 - 2018-11-29 19:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ISO to USB
2021-08-10 14:01 - 2018-11-29 19:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2021-08-10 14:01 - 2018-11-29 19:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IconShepherd
2021-08-10 14:01 - 2018-11-29 18:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP
2021-08-10 14:01 - 2018-11-28 17:27 - 000000000 ____D C:\Program Files\Intel
2021-08-10 14:01 - 2018-11-28 17:27 - 000000000 ____D C:\Program Files (x86)\Intel
2021-08-10 14:01 - 2018-11-28 17:20 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2021-08-10 14:01 - 2018-09-15 08:33 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2021-08-10 14:01 - 2018-09-15 08:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-08-10 13:57 - 2019-12-07 15:49 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-08-10 13:57 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-08-10 13:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-08-10 13:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-08-10 13:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-08-10 13:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-08-10 13:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-08-10 13:57 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-08-10 13:37 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-08-10 13:21 - 2020-09-27 08:38 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-08-10 13:21 - 2018-12-12 12:22 - 000000000 ___RD C:\Users\James\3D Objects
2021-08-10 13:10 - 2020-03-03 20:16 - 000000400 __RSH C:\ProgramData\ntuser.pol
2021-08-10 13:06 - 2019-12-07 10:14 - 000000000 __RSD C:\WINDOWS\Media
2021-08-10 13:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-08-10 13:02 - 2018-12-13 16:43 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2021-08-10 13:02 - 2018-11-28 17:28 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2021-08-10 13:02 - 2018-11-28 17:28 - 000000000 ____D C:\WINDOWS\system32\DAX2
2021-08-10 13:00 - 2019-12-07 10:18 - 000000000 ____D C:\WINDOWS\Setup
2021-08-10 12:57 - 2019-12-07 10:14 - 000000000 __RHD C:\Users\Public\Libraries
2021-08-10 12:57 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-08-10 12:49 - 2020-12-08 20:33 - 000000000 ____D C:\WINDOWS\Firmware
2021-08-10 12:49 - 2019-11-15 12:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2021-08-10 12:49 - 2019-09-01 10:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows
2021-08-10 12:49 - 2018-12-03 10:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2021-08-10 12:49 - 2018-11-28 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2021-08-10 12:49 - 2018-11-28 17:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICEpower
2021-08-10 12:49 - 2018-11-28 17:20 - 000000000 ____D C:\WINDOWS\system32\Intel
2021-08-10 12:48 - 2021-01-12 14:09 - 000000000 ____D C:\Users\Annie\AppData\Local\Packages
2021-08-10 12:48 - 2018-11-28 17:28 - 000000000 ____D C:\Program Files\Realtek
2021-08-10 12:48 - 2018-11-28 17:13 - 000000000 ____D C:\Users\James\AppData\Local\Packages
2021-08-10 12:47 - 2021-02-15 21:17 - 000000000 ____D C:\Users\John\AppData\Local\Packages
2021-08-10 12:43 - 2019-12-07 15:46 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-08-10 12:43 - 2019-12-07 15:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2021-08-10 12:43 - 2019-12-07 15:45 - 000000000 ____D C:\WINDOWS\en-GB
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-08-10 12:43 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-08-10 12:42 - 2019-12-07 15:49 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-08-09 21:21 - 2018-12-02 15:22 - 000000000 ____D C:\Users\James\AppData\Roaming\audacity
2021-08-09 21:19 - 2018-12-02 20:10 - 000000000 ____D C:\Users\James\AppData\Local\CrashDumps
2021-08-09 21:17 - 2018-11-29 18:55 - 000000825 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2021-08-09 21:15 - 2018-12-01 20:12 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2021-08-06 09:38 - 2021-06-23 13:13 - 007280848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2021-08-04 09:17 - 2019-05-18 18:48 - 000000156 _____ C:\WINDOWS\HFIT.hff
2021-08-03 13:54 - 2019-05-18 18:48 - 000000000 ____D C:\Program Files (x86)\SecretFolder
2021-08-02 19:14 - 2018-10-09 15:39 - 000169424 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2021-08-02 19:14 - 2018-10-09 15:39 - 000123472 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2021-08-02 19:14 - 2018-08-28 00:55 - 000194776 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2021-08-02 19:14 - 2018-08-28 00:55 - 000107456 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2021-08-02 19:14 - 2018-08-28 00:55 - 000070232 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2021-08-02 19:14 - 2018-08-28 00:55 - 000043904 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2021-08-02 16:17 - 2018-11-29 18:54 - 000000000 ____D C:\Users\James\AppData\Roaming\AIMP
2021-07-28 19:31 - 2018-11-29 13:58 - 000000000 ____D C:\Users\James\AppData\Roaming\Foxit Software
2021-07-28 10:02 - 2021-02-20 11:23 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-07-28 09:29 - 2018-11-28 17:30 - 000000000 ____D C:\ProgramData\Package Cache
2021-07-28 09:20 - 2018-12-02 15:22 - 000000000 ____D C:\Users\James\AppData\Local\Audacity
2021-07-27 15:56 - 2018-11-29 19:36 - 000000837 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2021-07-26 10:35 - 2020-05-24 09:29 - 002201648 _____ C:\WINDOWS\ampa.exe

==================== Files in the root of some directories ========

2019-02-07 12:50 - 2019-02-07 12:50 - 034122240 _____ () C:\Users\James\ffmpeg.exe
2019-06-21 14:44 - 2019-06-21 14:45 - 000000003 _____ () C:\Users\James\AppData\Roaming\.ptbt0
2021-05-11 17:38 - 2021-05-11 17:38 - 055895552 _____ () C:\Users\James\AppData\Roaming\ffmpeg.exe
2019-11-11 12:55 - 2019-11-11 12:55 - 000000000 ____H () C:\Users\James\AppData\Local\.urbackupclientgui_startonce
2020-08-03 19:29 - 2021-08-12 15:45 - 000000128 _____ () C:\Users\James\AppData\Local\PUTTY.RND
2020-11-07 21:03 - 2020-11-07 21:03 - 000007605 _____ () C:\Users\James\AppData\Local\Resmon.ResmonCfg
2018-11-29 19:42 - 2018-11-29 19:42 - 016040448 _____ () C:\Users\James\AppData\Local\Sync-1543516946.msi
2018-11-29 19:42 - 2018-11-29 19:42 - 000193266 _____ () C:\Users\James\AppData\Local\Sync-1543516946.msi.log

==================== FLock ==============================

2021-08-10 13:52 C:\WINDOWS\system32\SearchIndexer.exe
2021-08-04 09:17 C:\WINDOWS\HFIT.hff
2021-06-03 14:03 C:\WINDOWS\system32\Drivers\hfFilter.sys

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================