Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
Ran by [removed] (administrator) on DESKTOP-K7PP17U (MSI MS-7A72) (18-05-2024 09:12:30)
Running from C:\Users\[removed]\Downloads\FRST64.exe
[removed]
Platform: Microsoft Windows 10 Pro N Version 22H2 19045.4412 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.17\avp.exe ->) (AO Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.17\avpui.exe
(C:\Program Files\DefenderUI\DefenderUIService.exe ->) (VoodooSoft, LLC -> VoodooSoft, LLC) C:\Program Files\DefenderUI\DefenderUI.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <19>
(Microsoft Corporation -> Sysinternals - www.sysinternals.com) C:\Users\wavy\Downloads\autoruns.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_e2af5870d35e2824\aesm_service.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.17\avp.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_de8e1115ac61e38a\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (VoodooSoft, LLC -> VoodooSoft, LLC) C:\Program Files\DefenderUI\DefenderUIService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3023152 2024-04-24] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\Software\Policies\...\system: [ShellSmartScreenLevel] Warn
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0
HKU\S-1-5-21-3323529197-3699784123-711685060-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3323529197-3699784123-711685060-1001\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKU\S-1-5-21-3323529197-3699784123-711685060-1001\...\Policies\Explorer: [NoResolveSearch] 1
HKU\S-1-5-21-3323529197-3699784123-711685060-1001\...\Policies\Explorer: [NoInternetOpenWith] 1
HKU\S-1-5-21-3323529197-3699784123-711685060-1001\...\Policies\Explorer: [NoViewContextMenu] 0
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\125.0.6422.61\Installer\chrmstp.exe [2024-05-17] (Google LLC -> Google LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {8B856A00-F529-4318-BFF5-2040CE8F8C20} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6462.0{475C5368-01AC-4E65-AB5F-2E9D06721719} => C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-05] (Google LLC -> Google LLC)
Task: {7C3DFCE6-C86B-4E27-A73D-06EACA0E6D89} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {292AD6F9-49B3-4616-B764-1E9633057D18} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky\upgrade_launcher.exe [726952 2024-05-17] (AO Kaspersky Lab -> AO Kaspersky Lab)
Task: {C5DF7D22-87D3-4A32-A372-4BBA2E07FD85} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {927E7696-FEF6-4E20-BE54-EB6D2EC210DA} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B5547647-CC43-4A6A-89F8-C1F91E86D95F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {32C0F75B-D19E-4E90-81D5-414EA318DB54} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2E9421CC-1282-4C68-B0F0-D1700B24700F} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8C00E651-9010-479B-A672-BFC161F3E0D0} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {56BA3A7D-B052-46BD-81A3-B3D02444CF57} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7BC55970-42D0-4C7A-9ACD-F9A660451BF7} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C307E769-BAB0-4D95-94FC-C0F03F0A43F4} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{23deca29-3b0f-4fc7-bd40-2c667cb91d0d}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge Profile: C:\Users\wavy\AppData\Local\Microsoft\Edge\User Data\Default [2024-05-18]
Edge StartupUrls: Default -> "hxxp://go.microsoft.com/fwlink/?LinkId=2134209&0x443"
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\wavy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2024-05-17]
Edge Extension: (Google Docs Offline) - C:\Users\wavy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-05-17]
Edge Extension: (Edge relevant text changes) - C:\Users\wavy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-05-17]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Chrome: 
=======
CHR Profile: C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default [2024-05-18]
CHR Extension: (Equalizer for Chrome browser) - C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default\Extensions\abikfbojmghmfjdjlbagiamkinbmbaic [2024-05-17]
CHR Extension: (Kaspersky Protection) - C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2024-05-17]
CHR Extension: (uBlock Origin) - C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-05-17]
CHR Extension: (AHA Music - Song Finder for Browser) - C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpacanjfikmhoddligfbehkpomnbgblf [2024-05-17]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-05-17]
CHR Extension: (Chrome Web Store Payments) - C:\Users\wavy\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-05-17]
CHR Profile: C:\Users\wavy\AppData\Local\Google\Chrome\User Data\System Profile [2024-05-17]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP21.17; C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.17\avp.exe [32008 2024-04-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 brlapi; C:\WINDOWS\brltty\bin\brltty.exe [847886 2019-10-15] (Microsoft Windows -> )
R2 DefenderUIService; C:\Program Files\DefenderUI\DefenderUIService.exe [341664 2024-01-24] (VoodooSoft, LLC -> VoodooSoft, LLC)
S2 GoogleUpdaterInternalService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-05] (Google LLC -> Google LLC)
S2 GoogleUpdaterService126.0.6462.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6462.0\updater.exe [4794656 2024-05-05] (Google LLC -> Google LLC)
S3 klvssbridge64_21.17; C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.17\x64\vssbridge64.exe [550312 2024-04-15] (AO Kaspersky Lab -> AO Kaspersky Lab)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8887344 2024-05-17] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-05-17] (Malwarebytes Inc. -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24040.4-0\MpDefenderCoreService.exe [1489000 2024-05-17] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_de8e1115ac61e38a\Display.NvContainer\NVDisplay.Container.exe [1275440 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522200 2024-05-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9649288 2024-04-24] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24040.4-0\NisSrv.exe [3236840 2024-05-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.24040.4-0\MsMpEng.exe [133704 2024-05-17] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 LGHUBUpdaterService; "C:\Program Files\LGHUB\lghub_updater.exe" --run-as-service [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [282624 2081-01-06] (Microsoft Corporation) [File not signed]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [147968 2081-01-06] (Microsoft Corporation) [File not signed]
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [245192 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 klbackupdisk.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klbackupdisk.sys [92184 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klbackupflt.K4W-21-17; C:\WINDOWS\System32\DRIVERS\K4W-21-17\klbackupflt.sys [250304 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 kldisk.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\kldisk.sys [109600 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [53576 2024-04-15] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klflt.sys [653744 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klgse.K4W-21-17; C:\WINDOWS\System32\DRIVERS\K4W-21-17\klgse.sys [841528 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klhk.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klhk.sys [2089168 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klids.K4W-21-17; C:\ProgramData\Kaspersky Lab\AVP21.17\Bases\klids.sys [245144 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 KLIF.K4W-21-17; C:\WINDOWS\System32\DRIVERS\K4W-21-17\klif.sys [1432496 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [86040 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klkbdflt.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klkbdflt.sys [99352 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klmouflt.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klmouflt.sys [92608 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klpd.K4W-21-17; C:\WINDOWS\System32\DRIVERS\K4W-21-17\klpd.sys [58904 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klpnpflt.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klpnpflt.sys [84400 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_K4W-21-17_arkmon; C:\WINDOWS\System32\Drivers\klupd_K4W-21-17_arkmon.sys [384656 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_K4W-21-17_klark; C:\WINDOWS\System32\Drivers\klupd_K4W-21-17_klark.sys [354640 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_K4W-21-17_klbg; C:\WINDOWS\System32\Drivers\klupd_K4W-21-17_klbg.sys [183120 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_K4W-21-17_mark; C:\WINDOWS\System32\Drivers\klupd_K4W-21-17_mark.sys [262712 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klwtp.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\klwtp.sys [522688 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 kneps.K4W-21-17; C:\WINDOWS\system32\DRIVERS\K4W-21-17\kneps.sys [368688 2024-04-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2024-05-17] (Logitech Inc -> Logitech)
S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2024-05-17] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2024-05-17] (Logitech Inc -> Logitech)
R0 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223184 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-05-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [201280 2024-05-18] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [78400 2024-05-18] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [188784 2024-05-18] (Malwarebytes Inc. -> Malwarebytes)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [21935504 2024-04-24] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21056 2024-05-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [601496 2024-05-17] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-05-17] (Microsoft Windows -> Microsoft Corporation)
S3 WinRing0_1_2_0; C:\Users\wavy\Desktop\New folder\AutoFixer\OpenHardwareMonitorLib.sys [14544 2024-05-17] (Noriyuki MIYAZAKI -> OpenLibSys.org)
U4 HomeGroupListener; no ImagePath
U4 HomeGroupProvider; no ImagePath
S3 ThrottleStop; \??\C:\Users\wavy\AppData\Local\Temp\ThrottleStop.sys [X] <==== ATTENTION
U4 WMPNetworkSvc; no ImagePath
U4 xbgm; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2081-01-06 23:42 - 2024-05-18 08:02 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2081-01-06 23:42 - 2024-05-18 08:02 - 000003270 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore21a29a185a72420
2081-01-06 23:41 - 2024-05-18 03:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2081-01-06 23:41 - 2024-05-17 13:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2081-01-06 23:40 - 2081-01-06 23:40 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\SystemCertificates
2081-01-06 23:40 - 2081-01-06 23:40 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Crypto
2081-01-06 23:39 - 2024-05-18 00:07 - 000000000 ____D C:\Users\wavy
2081-01-06 23:39 - 2024-05-17 23:23 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Windows
2081-01-06 23:38 - 2024-05-17 23:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2081-01-06 23:38 - 2024-05-17 16:57 - 000259416 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2081-01-06 23:36 - 2081-01-06 23:36 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2081-01-06 23:35 - 2081-01-06 23:35 - 000000000 ____D C:\WINDOWS\system32\Drivers\mde
2081-01-06 23:35 - 2081-01-06 23:35 - 000000000 ____D C:\ProgramData\ssh
2081-01-06 23:35 - 2024-05-18 07:23 - 000000000 ____D C:\WINDOWS\SystemTemp
2081-01-06 23:35 - 2024-05-17 16:54 - 000000000 ____D C:\WINDOWS\InboxApps
2081-01-06 23:28 - 2081-01-06 23:28 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2081-01-06 23:23 - 2081-01-06 23:40 - 000000000 ___HD C:\$SysReset
2024-05-18 09:12 - 2024-05-18 09:12 - 000019768 _____ C:\Users\wavy\Downloads\FRST.txt
2024-05-18 09:12 - 2024-05-18 09:12 - 000000000 ____D C:\FRST
2024-05-18 09:11 - 2024-05-18 09:11 - 002394112 _____ (Farbar) C:\Users\wavy\Downloads\FRST64.exe
2024-05-18 06:01 - 2024-05-18 06:02 - 000024752 _____ C:\WINDOWS\SysWOW64\AppRulesStorage-wal
2024-05-18 06:01 - 2024-05-18 06:01 - 000032768 _____ C:\WINDOWS\SysWOW64\DnsStorage-shm
2024-05-18 06:01 - 2024-05-18 06:01 - 000032768 _____ C:\WINDOWS\SysWOW64\AppRulesStorage-shm
2024-05-18 06:01 - 2024-05-18 06:01 - 000000000 _____ C:\WINDOWS\SysWOW64\DnsStorage-wal
2024-05-18 04:18 - 2024-05-18 04:18 - 125787696 _____ (Logitech Inc.) C:\Users\wavy\Downloads\LGS_9.04.49_x64_Logitech.exe
2024-05-18 04:17 - 2024-05-18 04:17 - 001099208 _____ (Logitech Inc.) C:\Users\wavy\Downloads\ConnectUtility_2.30.6_Logitech.exe
2024-05-18 04:17 - 2024-05-18 04:17 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Logitech
2024-05-18 04:17 - 2024-05-18 04:17 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Logishrd
2024-05-18 03:50 - 2024-05-18 03:50 - 000188784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2024-05-18 00:49 - 2024-05-18 00:49 - 000000000 ____D C:\ProgramData\Intel
2024-05-18 00:10 - 2024-05-18 00:10 - 000000000 ____D C:\WINDOWS\Panther
2024-05-17 23:27 - 2024-05-18 00:07 - 000000000 ____D C:\ProgramData\Optimizer
2024-05-17 23:13 - 2024-05-18 06:37 - 000000000 ____D C:\Users\wavy\Desktop\New folder
2024-05-17 23:13 - 2024-05-17 23:53 - 000000000 __SHD C:\Users\wavy\wc
2024-05-17 23:13 - 2024-05-17 23:13 - 000000000 __SHD C:\Users\wavy\AppData\Roaming\wyUpdate AU
2024-05-17 23:13 - 2024-05-17 23:13 - 000000000 ____D C:\Users\wavy\AppData\Roaming\WinRAR
2024-05-17 23:13 - 2024-05-17 23:13 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-17 23:13 - 2024-05-17 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2024-05-17 23:13 - 2024-05-17 23:13 - 000000000 ____D C:\Program Files\WinRAR
2024-05-17 22:37 - 2024-05-18 08:07 - 000000000 ____D C:\Users\wavy\AppData\Local\CrashDumps
2024-05-17 21:16 - 2024-05-17 22:04 - 000000000 ____D C:\Users\wavy\AppData\Roaming\slobs-client
2024-05-17 17:47 - 2024-05-17 17:47 - 000073040 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_xlcore.sys
2024-05-17 17:47 - 2024-05-17 17:47 - 000044880 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_bus_enum.sys
2024-05-17 17:47 - 2024-05-17 17:47 - 000000000 ____D C:\Users\wavy\AppData\Roaming\lghub
2024-05-17 17:47 - 2024-05-17 17:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2024-05-17 17:46 - 2024-05-17 17:47 - 000000000 ____D C:\ProgramData\LGHUB
2024-05-17 17:44 - 2024-05-17 17:45 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Geek Uninstaller
2024-05-17 17:42 - 2024-05-17 17:44 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\MMC
2024-05-17 17:05 - 2024-05-18 09:10 - 000000000 ____D C:\Users\wavy\AppData\Local\Malwarebytes
2024-05-17 17:05 - 2024-05-18 03:54 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-05-17 17:05 - 2024-05-17 17:05 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-05-17 17:04 - 2024-05-17 17:04 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-05-17 17:04 - 2024-05-17 17:04 - 000000000 ____D C:\Program Files\Malwarebytes
2024-05-17 17:00 - 2024-05-17 17:00 - 000000000 ____D C:\Users\wavy\AppData\Roaming\LGHUB_BKP
2024-05-17 16:44 - 2024-05-17 16:51 - 000000000 ____D C:\ProgramData\SecTaskMan
2024-05-17 16:43 - 2024-05-17 16:43 - 000020861 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-05-17 16:43 - 2024-05-17 16:43 - 000007600 _____ C:\Users\wavy\AppData\Local\Resmon.ResmonCfg
2024-05-17 16:42 - 2024-05-17 16:42 - 000020861 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-05-17 16:38 - 2024-05-17 16:38 - 000000000 ____D C:\WINDOWS\pss
2024-05-17 16:36 - 2081-01-06 23:32 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2dp.sys
2024-05-17 16:36 - 2081-01-06 23:32 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthHfEnum.sys
2024-05-17 16:36 - 2024-05-17 16:36 - 000000000 ___HD C:\$WinREAgent
2024-05-17 16:30 - 2024-05-17 17:47 - 000000000 ____D C:\Users\wavy\AppData\Roaming\G HUB
2024-05-17 15:08 - 2024-05-17 15:08 - 000000000 ____D C:\Users\wavy\AppData\Local\LGHUB
2024-05-17 15:02 - 2024-05-17 15:02 - 000000000 ____D C:\WINDOWS\system32\braille-tables
2024-05-17 15:02 - 2024-05-17 15:02 - 000000000 ____D C:\WINDOWS\brltty
2024-05-17 15:01 - 2024-05-17 15:01 - 000000000 ____D C:\Users\wavy\AppData\Roaming\slobs-plugins
2024-05-17 15:01 - 2024-05-17 15:01 - 000000000 ____D C:\Users\wavy\AppData\Roaming\obs-studio-node-server
2024-05-17 15:01 - 2024-05-17 15:01 - 000000000 ____D C:\ProgramData\obs-studio-hook
2024-05-17 15:00 - 2024-05-17 23:10 - 000000000 ____D C:\Program Files\Streamlabs OBS
2024-05-17 15:00 - 2024-05-17 15:00 - 000000000 ____D C:\Users\wavy\AppData\Local\slobs-client-updater
2024-05-17 14:48 - 2024-05-17 14:48 - 000032080 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_vir_hid.sys
2024-05-17 14:48 - 2024-05-17 14:48 - 000000000 ____D C:\Users\wavy\AppData\Roaming\ProcessLasso
2024-05-17 14:48 - 2024-05-17 14:48 - 000000000 ____D C:\Users\wavy\AppData\Local\ProcessLasso
2024-05-17 14:44 - 2024-05-17 14:44 - 000000000 ____D C:\Users\wavy\AppData\Local\PeerDistRepub
2024-05-17 14:43 - 2024-05-17 14:43 - 000000000 ____D C:\Users\wavy\Documents\League of Legends
2024-05-17 14:39 - 2024-05-18 05:33 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2024-05-17 14:36 - 2024-05-17 18:37 - 000000000 ____D C:\Users\wavy\AppData\Local\NVIDIA Corporation
2024-05-17 14:36 - 2024-05-17 14:36 - 000001443 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2024-05-17 14:36 - 2024-05-17 14:36 - 000000000 ____D C:\Users\wavy\AppData\Local\CEF
2024-05-17 14:36 - 2024-05-17 14:36 - 000000000 ____D C:\Users\wavy\ansel
2024-05-17 14:32 - 2024-05-17 15:01 - 000000000 ____D C:\ProgramData\Package Cache
2024-05-17 14:32 - 2024-05-17 14:32 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-05-17 14:32 - 2024-05-17 14:32 - 000000000 ____D C:\Users\wavy\AppData\LocalLow\NVIDIA
2024-05-17 14:32 - 2024-05-17 14:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2024-05-17 14:32 - 2024-05-17 14:32 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2024-05-17 14:32 - 2024-05-07 08:35 - 002900520 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2024-05-17 14:32 - 2024-05-07 08:35 - 002231336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2024-05-17 14:32 - 2024-05-07 08:35 - 001296936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2024-05-17 14:32 - 2024-05-07 08:35 - 000180760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2024-05-17 14:32 - 2024-05-07 08:35 - 000159768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2024-05-17 14:32 - 2024-05-07 08:35 - 000086568 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2024-05-17 14:32 - 2024-05-07 08:35 - 000075304 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2024-05-17 14:30 - 2024-05-07 18:52 - 002031376 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2024-05-17 14:30 - 2024-05-07 18:52 - 002031376 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-05-17 14:30 - 2024-05-07 18:52 - 001578872 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-05-17 14:30 - 2024-05-07 18:52 - 001578872 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-05-17 14:30 - 2024-05-07 18:52 - 001488024 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-05-17 14:30 - 2024-05-07 18:52 - 001445240 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2024-05-17 14:30 - 2024-05-07 18:52 - 001445240 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-05-17 14:30 - 2024-05-07 18:52 - 001295224 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2024-05-17 14:30 - 2024-05-07 18:52 - 001295224 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-05-17 14:30 - 2024-05-07 18:52 - 001227416 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-05-17 14:30 - 2024-05-07 18:49 - 001045528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2024-05-17 14:30 - 2024-05-07 18:49 - 000669824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2024-05-17 14:30 - 2024-05-07 18:49 - 000505368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2024-05-17 14:30 - 2024-05-07 18:48 - 002174080 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-05-17 14:30 - 2024-05-07 18:48 - 001626240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-05-17 14:30 - 2024-05-07 18:48 - 001543728 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-05-17 14:30 - 2024-05-07 18:48 - 001199640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-05-17 14:30 - 2024-05-07 18:48 - 001024128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2024-05-17 14:30 - 2024-05-07 18:48 - 000842392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2024-05-17 14:30 - 2024-05-07 18:48 - 000787592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2024-05-17 14:30 - 2024-05-07 18:47 - 016034328 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-05-17 14:30 - 2024-05-07 18:47 - 012929672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-05-17 14:30 - 2024-05-07 18:47 - 006780544 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-05-17 14:30 - 2024-05-07 18:47 - 003721352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-05-17 14:30 - 2024-05-07 18:47 - 000459392 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2024-05-17 14:30 - 2024-05-07 18:46 - 005913648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-05-17 14:30 - 2024-05-07 18:46 - 005772936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2024-05-17 14:30 - 2024-05-07 18:46 - 000853544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2024-05-17 14:30 - 2024-05-07 18:45 - 006034632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-05-17 14:30 - 2024-05-07 08:35 - 000119466 _____ C:\WINDOWS\system32\nvinfo.pb
2024-05-17 14:30 - 2024-05-07 08:35 - 000060240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys
2024-05-17 14:30 - 2024-05-07 08:35 - 000059928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2024-05-17 14:26 - 2024-05-17 14:26 - 000000000 ____D C:\Program Files\Reference Assemblies
2024-05-17 14:26 - 2024-05-17 14:26 - 000000000 ____D C:\Program Files\MSBuild
2024-05-17 14:26 - 2024-05-17 14:26 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2024-05-17 14:26 - 2024-05-17 14:26 - 000000000 ____D C:\Program Files (x86)\MSBuild
2024-05-17 14:24 - 2024-05-17 14:24 - 000000000 ____D C:\Program Files\Riot Vanguard
2024-05-17 14:22 - 2024-05-18 03:53 - 000000000 ____D C:\Users\wavy\AppData\Roaming\riot-client-ux
2024-05-17 14:22 - 2024-05-18 03:53 - 000000000 ____D C:\ProgramData\Riot Games
2024-05-17 14:22 - 2024-05-17 14:59 - 000001693 _____ C:\Users\Public\Desktop\League of Legends.lnk
2024-05-17 14:22 - 2024-05-17 14:43 - 000000000 ____D C:\Users\wavy\AppData\Local\Riot Games
2024-05-17 14:22 - 2024-05-17 14:39 - 000001491 _____ C:\Users\Public\Desktop\Riot Client.lnk
2024-05-17 14:22 - 2024-05-17 14:24 - 000000000 ____D C:\Riot Games
2024-05-17 14:22 - 2024-05-17 14:22 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Riot Games
2024-05-17 14:22 - 2024-05-17 14:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2024-05-17 14:21 - 2024-05-18 05:33 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-05-17 14:21 - 2024-05-17 14:30 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-05-17 14:21 - 2024-05-17 14:21 - 000000000 ____D C:\Users\wavy\AppData\Local\Google
2024-05-17 14:20 - 2024-05-17 14:20 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2024-05-17 14:20 - 2024-05-17 14:20 - 000000000 ____D C:\Program Files\Google
2024-05-17 14:20 - 2024-05-17 14:20 - 000000000 ____D C:\Program Files (x86)\Google
2024-05-17 14:17 - 2024-05-17 14:17 - 000003840 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2024-05-17 14:10 - 2024-05-18 05:30 - 000012288 _____ C:\WINDOWS\SysWOW64\AppRulesStorage
2024-05-17 14:10 - 2024-05-17 14:10 - 000012288 _____ C:\WINDOWS\SysWOW64\DnsStorage
2024-05-17 14:05 - 2024-05-18 05:33 - 000002421 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky.lnk
2024-05-17 14:05 - 2024-05-17 14:05 - 000003232 _____ C:\WINDOWS\system32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}
2024-05-17 14:05 - 2024-05-17 14:05 - 000000000 ____D C:\WINDOWS\system32\Drivers\K4W-21-17
2024-05-17 14:05 - 2024-05-17 14:05 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2024-05-17 14:05 - 2024-05-17 14:05 - 000000000 ____D C:\Program Files\Common Files\AV
2024-05-17 14:05 - 2024-05-17 14:05 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2024-05-17 14:03 - 2024-05-17 14:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DefenderUI
2024-05-17 14:03 - 2024-05-17 14:03 - 000000000 ____D C:\Program Files\DefenderUI
2024-05-17 13:59 - 2024-05-18 05:15 - 000000000 ____D C:\Users\wavy\AppData\Roaming\discord
2024-05-17 13:59 - 2024-05-18 00:59 - 000000000 ____D C:\Users\wavy\AppData\Local\Discord
2024-05-17 13:59 - 2024-05-17 13:59 - 000000000 ____D C:\Users\wavy\AppData\Roaming\NVIDIA
2024-05-17 13:59 - 2024-05-17 13:59 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2024-05-17 13:59 - 2024-05-17 13:59 - 000000000 ____D C:\Users\wavy\AppData\Local\SquirrelTemp
2024-05-17 13:59 - 2024-05-17 13:59 - 000000000 ____D C:\ProgramData\SquirrelMachineInstalls
2024-05-17 13:57 - 2024-05-17 14:30 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-05-17 13:56 - 2024-05-17 13:56 - 000000000 ____D C:\Users\wavy\AppData\Local\PlaceholderTileLogoFolder
2024-05-17 13:55 - 2024-05-18 06:37 - 000000000 ____D C:\Users\wavy\AppData\Local\D3DSCache
2024-05-17 13:53 - 2024-05-17 13:53 - 000000000 ____D C:\Users\wavy\AppData\Local\Comms
2024-05-17 13:52 - 2024-05-17 13:52 - 000000000 ____D C:\Users\wavy\AppData\Local\DBG
2024-05-17 13:51 - 2024-05-18 03:50 - 000000000 ____D C:\ProgramData\NVIDIA
2024-05-17 13:51 - 2024-05-17 22:36 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-05-17 13:51 - 2024-05-17 14:36 - 000000000 ____D C:\Users\wavy\AppData\Local\NVIDIA
2024-05-17 13:51 - 2024-05-17 14:32 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2024-05-17 13:51 - 2024-05-17 14:32 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-05-17 13:51 - 2024-05-17 13:51 - 000000000 ____D C:\WINDOWS\system32\lxss
2024-05-17 13:51 - 2024-05-07 18:45 - 006948672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-05-17 13:51 - 2024-05-07 08:35 - 000121880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2024-05-17 13:49 - 2024-05-17 13:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-05-17 13:48 - 2024-05-17 13:48 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Spelling
2024-05-17 13:45 - 2024-05-18 03:57 - 000840778 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-05-17 13:44 - 2024-05-17 13:44 - 000000000 ____D C:\Users\wavy\AppData\Local\OneDrive
2024-05-17 13:44 - 2024-05-17 13:44 - 000000000 ____D C:\Program Files\RUXIM
2024-05-17 13:44 - 2024-05-17 13:44 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2024-05-17 13:42 - 2024-05-17 23:55 - 000000000 ____D C:\Users\wavy\AppData\Local\Packages
2024-05-17 13:42 - 2024-05-17 14:32 - 000000000 ____D C:\ProgramData\Packages
2024-05-17 13:42 - 2024-05-17 13:42 - 000000020 ___SH C:\Users\wavy\ntuser.ini
2024-05-17 13:42 - 2024-05-17 13:42 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Network
2024-05-17 13:42 - 2024-05-17 13:42 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Adobe
2024-05-17 13:42 - 2024-05-17 13:42 - 000000000 ____D C:\Users\wavy\AppData\Local\VirtualStore
2024-05-17 13:42 - 2024-05-17 13:42 - 000000000 ____D C:\Users\wavy\AppData\Local\Publishers
2024-05-17 13:42 - 2024-05-17 13:42 - 000000000 ____D C:\Users\wavy\AppData\Local\ConnectedDevicesPlatform
2024-05-16 00:55 - 2024-05-17 14:49 - 000000000 ___SD C:\Users\wavy\AppData\Roaming\Microsoft\Credentials
2024-05-16 00:55 - 2024-05-17 13:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-05-16 00:55 - 2024-05-17 13:42 - 000000000 ___RD C:\Users\wavy\3D Objects
2024-05-16 00:55 - 2024-05-16 00:55 - 000000000 ___SD C:\Users\wavy\AppData\Roaming\Microsoft\Protect
2024-05-16 00:55 - 2024-05-16 00:55 - 000000000 ____D C:\Users\wavy\AppData\Roaming\Microsoft\Vault
2024-05-16 00:54 - 2024-05-16 00:54 - 000000000 ____D C:\WINDOWS\CSC
2024-05-16 00:52 - 2024-05-16 00:52 - 000000000 _SHDL C:\Documents and Settings
2024-05-16 00:51 - 2024-05-18 05:33 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-05-16 00:51 - 2024-05-18 03:50 - 000008192 ___SH C:\DumpStack.log.tmp

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2081-01-06 23:38 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\appcompat
2081-01-06 23:37 - 2019-12-07 02:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2081-01-06 23:35 - 2019-12-07 02:51 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2081-01-06 23:35 - 2019-12-07 02:51 - 000020827 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2081-01-06 23:35 - 2019-12-07 02:51 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2081-01-06 23:35 - 2019-12-07 02:51 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2081-01-06 23:35 - 2019-12-07 02:48 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2081-01-06 23:35 - 2019-12-07 02:14 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2081-01-06 23:35 - 2019-12-07 02:14 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SystemApps
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\Com
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\IME
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\Program Files\Common Files\System
2081-01-06 23:35 - 2019-12-07 02:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-05-18 05:08 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-05-18 05:01 - 2019-12-07 02:12 - 000000000 ____D C:\WINDOWS\INF
2024-05-18 03:52 - 2019-12-07 02:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-05-18 03:50 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-05-18 01:13 - 2019-12-07 02:03 - 000065536 _____ C:\WINDOWS\system32\config\BBI
2024-05-18 01:05 - 2019-12-07 02:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-05-17 23:55 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-05-17 23:45 - 2019-12-07 02:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-05-17 16:58 - 2019-12-07 02:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-05-17 16:55 - 2019-12-07 02:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-05-17 16:54 - 2019-12-07 02:51 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2024-05-17 16:54 - 2019-12-07 02:51 - 000000000 ___SD C:\WINDOWS\system32\AppV
2024-05-17 16:54 - 2019-12-07 02:51 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\Provisioning
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-05-17 16:54 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-05-17 16:54 - 2019-12-07 02:03 - 000000000 ____D C:\WINDOWS\servicing
2024-05-17 14:05 - 2019-12-07 02:03 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2024-05-17 13:44 - 2019-12-07 02:14 - 000000000 ____D C:\Program Files\Windows Defender
2024-05-17 13:42 - 2019-12-07 02:49 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2024-05-17 13:42 - 2019-12-07 02:14 - 000000000 ____D C:\WINDOWS\system32\spool
2024-05-17 13:42 - 2019-12-07 02:14 - 000000000 ____D C:\ProgramData\USOPrivate

==================== Files in the root of some directories ========

2024-05-17 16:43 - 2024-05-17 16:43 - 000007600 _____ () C:\Users\wavy\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================