Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-12-2019 Ran by Simi (administrator) on DESKTOP-O4OMJLU (Gigabyte Technology Co., Ltd. B250-HD3P) (26-12-2019 20:03:34) Running from C:\Users\Simi\Desktop Loaded Profiles: Simi (Available Profiles: Simi) Platform: Windows 10 Home Version 1903 18362.388 (X64) Language: Slovak (Slovakia) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe (Adobe Systems Incorporated -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0349841.inf_amd64_01bbb629805d901e\B349895\atieclxx.exe (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0349841.inf_amd64_01bbb629805d901e\B349895\atiesrxx.exe (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe (Canon Inc. -> Canon INC.) C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler.exe (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.422\GoogleCrashHandler64.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch_comp.inf_amd64_c8e108d4a62c59d5\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch_comp.inf_amd64_c8e108d4a62c59d5\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch_base.inf_amd64_b95c9a044993331b\IntelCpHDCPSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch_base.inf_amd64_b95c9a044993331b\IntelCpHeciSvc.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\schtasks.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Spotify AB -> Spotify Ltd) C:\Users\Simi\AppData\Roaming\Spotify\Spotify.exe (Spotify AB -> Spotify Ltd) C:\Users\Simi\AppData\Roaming\Spotify\Spotify.exe (Spotify AB -> Spotify Ltd) C:\Users\Simi\AppData\Roaming\Spotify\Spotify.exe (Spotify AB -> Spotify Ltd) C:\Users\Simi\AppData\Roaming\Spotify\Spotify.exe (Spotify AB -> Spotify Ltd) C:\Users\Simi\AppData\Roaming\Spotify\Spotify.exe (VIA Technologies, Inc -> VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\Wacom\WacomHost.exe (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [183088 2019-12-25] (ESET, spol. s r.o. -> ESET) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle America, Inc. -> Oracle Corporation) HKLM\...\Policies\Explorer: [HideSCAHealth] 1 HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-739093134-1882289950-3713944110-1003\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd) HKU\S-1-5-21-739093134-1882289950-3713944110-1003\...\Run: [GoogleChromeAutoLaunch_D7EAC1086D66935526BA2B6E74B38258] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5 HKU\S-1-5-21-739093134-1882289950-3713944110-1003\...\Run: [Spotify] => C:\Users\Simi\AppData\Roaming\Spotify\Spotify.exe [22151072 2019-12-18] (Spotify AB -> Spotify Ltd) HKU\S-1-5-21-739093134-1882289950-3713944110-1003\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [36060048 2019-12-17] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-739093134-1882289950-3713944110-1003\...\Run: [Discord] => C:\Users\Simi\AppData\Local\Discord\app-0.0.305\Discord.exe [81780056 2019-03-07] (Discord Inc. -> Discord Inc.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2019-12-19] (Google LLC -> Google LLC) Startup: C:\Users\Simi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EOS Utility.lnk [2019-02-12] ShortcutTarget: EOS Utility.lnk -> C:\Program Files (x86)\Canon\EOS Utility\EOS Utility.exe (Canon Inc. -> Canon INC.) Startup: C:\Users\Simi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-11-21] ShortcutTarget: MEGAsync.lnk -> C:\Users\Simi\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited) ==================== Scheduled Tasks (Whitelisted) ============ (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {12B38F4D-6E29-4EBF-BB6C-4B8BBC909677} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_pepper.exe [1453112 2019-12-10] (Adobe Inc. -> Adobe) Task: {3B5C1EB3-124B-4D9E-A499-76A16166FF8F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd) Task: {3FCC88EC-23BB-4E03-B8C9-390D5BF9E4BC} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [506880 2019-12-16] (Advanced Micro Devices, Inc.) [File not signed] Task: {874A2D18-65F8-4487-8B6B-66D77A067881} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [1677600 2019-09-06] (Corel Corporation -> Corel Corporation) Task: {8844155F-3AE1-42D8-8785-4F085E95DC62} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe Task: {8B065C80-6EF3-4DFD-84CB-A0D7700B9B22} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-739093134-1882289950-3713944110-1003 => C:\Users\Simi\AppData\Local\MEGAsync\MEGAupdater.exe [615160 2019-09-16] (Mega Limited -> Mega Limited) Task: {992C8FBF-18BB-4FD1-8B3B-0BB20C9B9FBE} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\BIN64\InstallManagerApp.exe [506880 2019-12-16] (Advanced Micro Devices, Inc.) [File not signed] Task: {9ECD3294-73AF-4D0E-8A7D-00337890DE66} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd) Task: {9FF7A98A-4BB6-4E15-9E28-B2A2DE995BF3} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2019-12-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {A308D4D4-ADFB-44C2-B0E1-83E2F70BB655} - System32\Tasks\ViGEmBusUpdater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [901144 2019-05-10] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) Task: {CA15448F-AF25-4E35-9932-6FFED9767832} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [506880 2019-12-16] (Advanced Micro Devices, Inc.) [File not signed] Task: {CD6CA929-2E7A-412E-8B9A-895734011E00} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-03] (Google Inc -> Google Inc.) Task: {D2CC4110-09E3-4737-9FB2-96137DE42A6F} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {D36C7157-11ED-469B-9520-41B33E1F12FA} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-O4OMJLU-Simi => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe Task: {E5D0A49A-0BB2-4BB4-8119-B4B1A23475F5} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2019-12-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {E85BDD0C-BBB0-43E6-B433-AC37FAE1877B} - System32\Tasks\CorelUpdateHelperTask-CE20E9513B8623C3E7ED5160CA32CE99 => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [1677600 2019-09-06] (Corel Corporation -> Corel Corporation) Task: {EBC022E5-DB8D-40E8-9586-A7A64619779A} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {F056B715-41D9-468D-AE39-CE8B4932150C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-09-03] (Google Inc -> Google Inc.) Task: {FAC3194B-FA94-4940-AA6E-E23EFDE97A52} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-12-10] (Adobe Inc. -> Adobe) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 195.146.128.62 Tcpip\..\Interfaces\{131f8176-b0cb-45d4-98e3-baec7a65264b}: [DhcpNameServer] 192.168.1.1 195.146.128.62 Tcpip\..\Interfaces\{e882b637-9488-49c2-8fc8-c35c60d3bfe8}: [DhcpNameServer] 192.168.1.1 195.146.128.62 Internet Explorer: ================== BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_171\bin\ssv.dll [2018-06-13] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-06-13] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-21] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-21] (Oracle America, Inc. -> Oracle Corporation) Edge: ====== DownloadDir: C:\Users\Simi\Downloads FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-06-13] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-06-13] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-21] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-21] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-14] (Google LLC -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2019-12-14] (Google LLC -> Google LLC) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems, Incorporated -> Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> hxxp://www.search.ask.com/?o=APN11459&gct=hp&d=488-101&v=n11470-300&t=4 CHR StartupUrls: Default -> "hxxps://www.youtube.com/" CHR Notifications: Default -> hxxps://eseecmoa.com; hxxps://maranhesduve.club; hxxps://www.youtube.com CHR Profile: C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default [2019-12-26] CHR Extension: (Prekladač Google) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2018-04-22] CHR Extension: (Prezentácie) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14] CHR Extension: (Magio GO) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\anoiechkjklgabdfompidjolhpfdpjdd [2018-12-30] CHR Extension: (Dokumenty) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14] CHR Extension: (Disk Google) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-03] CHR Extension: (Translator) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blndkmebkmenignoajhoemebccmmfjib [2019-08-14] CHR Extension: (YouTube) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-03] CHR Extension: (Honey) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2019-12-18] CHR Extension: (uBlock Origin) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2019-10-29] CHR Extension: (uVPN - free and unlimited VPN for everyone) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\coahpcpgfnnaddeelpphpifmgfobflog [2019-09-08] CHR Extension: (Video Downloader professional) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2019-04-11] CHR Extension: (Tabuľky) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14] CHR Extension: (Musixmatch Lyrics for YouTube) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfenjblodoldnbiddmggcbkcapiolbig [2018-05-28] CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-16] CHR Extension: (VisualOn Chrome Plugin Helper) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\icnlblaamineciagcjhkkgeinkpiebhe [2018-12-31] CHR Extension: (Grammarly for Chrome) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2019-12-19] CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04] CHR Extension: (InteractiveFics) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pcpjpdomcbnlkbghmchnjgeejpdlonli [2019-10-24] CHR Extension: (Gmail) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29] CHR Extension: (Chrome Media Router) - C:\Users\Simi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-12-12] CHR HKU\S-1-5-21-739093134-1882289950-3713944110-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [olfeabkoenfaoljndfecamgilllcpiak] CHR HKLM-x32\...\Chrome\Extension: [icnlblaamineciagcjhkkgeinkpiebhe] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818136 2018-09-13] (Adobe Systems Incorporated -> Adobe Inc.) R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\u0349841.inf_amd64_01bbb629805d901e\B349895\atiesrxx.exe [524504 2019-12-17] (Advanced Micro Devices, Inc. -> AMD) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2017-09-14] (ASUSTeK Computer Inc. -> ) R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.25\aaHMSvc.exe [963544 2017-09-14] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7211968 2018-08-19] (BattlEye Innovations e.K. -> ) R2 EaseUS Agent; C:\Program Files (x86)\EaseUS\Todo Backup\bin\Agent.exe [40016 2018-12-25] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2018-08-19] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-12-25] (ESET, spol. s r.o. -> ESET) R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2245488 2019-12-25] (ESET, spol. s r.o. -> ESET) S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [File not signed] S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2475312 2019-12-25] (Electronic Arts, Inc. -> Electronic Arts) S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3352376 2019-12-25] (Electronic Arts, Inc. -> Electronic Arts) R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc) R2 VIAKaraokeService; C:\WINDOWS\system32\viakaraokesrv.exe [41952 2016-10-27] (VIA Technologies, Inc -> VIA Technologies, Inc.) S3 ViGEmBusUpdater; C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBusUpdater.exe [901144 2019-05-10] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) R2 WTabletServicePro; C:\Program Files\Tablet\Wacom\WTabletServicePro.exe [779208 2017-10-18] (Wacom Technology Corporation -> Wacom Technology, Corp.) S4 wuauserv; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL) S4 wuauserv; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Windows Publisher -> Microsoft Corporation) <==== ATTENTION (no ServiceDLL) ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\u0349841.inf_amd64_01bbb629805d901e\B349895\atikmdag.sys [65722064 2019-12-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\u0349841.inf_amd64_01bbb629805d901e\B349895\atikmpag.sys [592296 2019-12-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2017-09-03] (ASUSTeK Computer Inc. -> ) R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2017-09-03] (ASUSTeK Computer Inc. -> ) R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-11-18] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices) R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [149944 2019-12-25] (ESET, spol. s r.o. -> ESET) R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [103264 2019-12-25] (ESET, spol. s r.o. -> ESET) S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15800 2019-12-25] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET) R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [189512 2019-12-25] (ESET, spol. s r.o. -> ESET) R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [50712 2019-12-25] (ESET, spol. s r.o. -> ESET) R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [79744 2019-12-25] (ESET, spol. s r.o. -> ESET) R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [116696 2019-12-25] (ESET, spol. s r.o. -> ESET) R0 EUBAKUP; C:\WINDOWS\System32\drivers\eubakup.sys [73448 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R0 EUBKMON; C:\WINDOWS\System32\drivers\EUBKMON.sys [53504 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> ) R1 EUDSKACS; C:\WINDOWS\system32\drivers\eudskacs.sys [22784 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) R1 EUFDDISK; C:\WINDOWS\system32\drivers\EuFdDisk.sys [341760 2018-10-08] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd) S3 MTsensor; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> ) R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software) R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> ) R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> ) R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2017-09-06] (TunnelBear, Inc. -> The OpenVPN Project) S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2017-10-10] (OpenVPN Technologies, Inc. -> The OpenVPN Project) S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-02-01] (Windscribe Limited -> The OpenVPN Project) S3 VIAHdAudAddService; C:\WINDOWS\system32\drivers\viahduaa.sys [709856 2016-10-27] (VIA Technologies Inc. -> VIA Technologies, Inc.) R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer) S3 WacHidRouterPro; C:\WINDOWS\System32\drivers\wachidrouter.sys [115704 2017-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Wacom Technology, Corp.) S3 wacomrouterfilter; C:\WINDOWS\System32\drivers\wacomrouterfilter.sys [17912 2017-10-08] (Microsoft Windows Hardware Compatibility Publisher -> Wacom Technology, Corp.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation) S2 AODDriver4.3; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) =================== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-12-26 20:02 - 2019-12-26 20:03 - 000047142 _____ C:\Users\Simi\Desktop\Addition.txt 2019-12-26 20:01 - 2019-12-26 20:04 - 000027408 _____ C:\Users\Simi\Desktop\FRST.txt 2019-12-26 19:59 - 2019-12-26 19:59 - 000000000 ____D C:\Users\Simi\AppData\LocalLow\AMD 2019-12-26 19:57 - 2019-12-26 19:58 - 000009384 _____ C:\Users\Simi\Desktop\Fixlog.txt 2019-12-26 19:56 - 2019-12-26 19:56 - 000001591 _____ C:\Users\Simi\Desktop\SearchReg.txt 2019-12-26 19:50 - 2019-12-26 19:50 - 000000000 ____D C:\Users\Simi\Desktop\FRST-OlderVersion 2019-12-26 14:55 - 2019-12-26 14:56 - 000001098 _____ C:\Users\Public\Desktop\AMD Product Verification Tool.lnk 2019-12-26 14:55 - 2019-12-26 14:56 - 000001098 _____ C:\ProgramData\Desktop\AMD Product Verification Tool.lnk 2019-12-26 14:43 - 2019-12-26 14:56 - 000001110 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Product Verification Tool.lnk 2019-12-26 14:43 - 2019-12-26 14:56 - 000000000 ____D C:\Program Files\AMDProduct Verification Tool 2019-12-26 14:43 - 2016-01-28 14:22 - 000504320 _____ (Newtonsoft) C:\WINDOWS\system32\Newtonsoft.Json.dll 2019-12-26 02:03 - 2019-12-26 19:51 - 000002083 _____ C:\Users\Simi\Desktop\Search.txt 2019-12-26 01:51 - 2019-12-26 01:51 - 000000000 ____D C:\Users\Simi\Desktop\Autoruns 2019-12-26 01:51 - 2019-12-26 01:44 - 001728127 _____ C:\Users\Simi\Desktop\Autoruns.zip 2019-12-26 01:39 - 2019-12-26 19:50 - 002272256 _____ (Farbar) C:\Users\Simi\Desktop\FRST64.exe 2019-12-26 01:36 - 2019-12-26 20:03 - 000000000 ____D C:\FRST 2019-12-26 01:33 - 2019-12-26 01:33 - 000000000 ____D C:\Users\Simi\AppData\Local\ATI 2019-12-26 01:28 - 2019-12-26 19:59 - 000003124 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher 2019-12-26 01:28 - 2019-12-26 18:41 - 000000000 ____D C:\Users\Simi\AppData\Local\D3DSCache 2019-12-26 01:26 - 2019-12-26 01:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Software 2019-12-26 01:26 - 2019-12-26 01:26 - 000000000 ____D C:\Program Files (x86)\AMD 2019-12-26 01:25 - 2019-12-26 01:26 - 000000000 ____D C:\Program Files\AMD 2019-12-26 01:25 - 2019-12-26 01:25 - 000000000 ____D C:\Users\Simi\AppData\Local\RadeonInstaller 2019-12-26 01:25 - 2019-12-26 01:25 - 000000000 ____D C:\ProgramData\AMD 2019-12-26 01:18 - 2019-12-26 01:19 - 000231156 _____ C:\WINDOWS\ntbtlog.txt 2019-12-26 01:14 - 2019-12-26 01:14 - 000000000 ____D C:\Users\Simi\Desktop\DDU v18.0.2.1 2019-12-26 01:13 - 2019-12-26 01:13 - 001236824 _____ C:\Users\Simi\Desktop\[Guru3D.com]-DDU.zip 2019-12-26 01:13 - 2019-12-26 01:13 - 000000000 ____D C:\Users\Simi\Desktop\[Guru3D.com]-DDU 2019-12-25 16:21 - 2019-12-25 17:57 - 000000000 ____D C:\Users\Simi\Desktop\DS4Windows 2019-12-25 15:21 - 2019-12-25 15:21 - 000000000 ____D C:\ESD 2019-12-25 15:17 - 2019-12-25 15:17 - 000000000 ___HD C:\$Windows.~WS 2019-12-25 15:17 - 2019-12-25 15:17 - 000000000 ____D C:\$WINDOWS.~BT 2019-12-25 14:36 - 2019-12-25 14:36 - 000003722 _____ C:\WINDOWS\system32\Tasks\ViGEmBusUpdater 2019-12-25 14:36 - 2019-12-25 14:36 - 000000000 ____D C:\Program Files\Nefarius Software Solutions 2019-12-25 13:22 - 2019-12-25 13:22 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2019-12-25 13:22 - 2019-12-25 13:22 - 000000863 _____ C:\ProgramData\Desktop\CCleaner.lnk 2019-12-25 13:10 - 2019-12-25 13:10 - 000000000 ____D C:\Users\Simi\AppData\Local\cache 2019-12-25 13:05 - 2019-12-26 19:59 - 000003110 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate 2019-12-25 13:05 - 2019-12-26 01:28 - 000000000 ____D C:\Users\Simi\AppData\Local\AMD 2019-12-25 13:05 - 2019-12-26 01:26 - 000003194 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate 2019-12-25 13:05 - 2019-12-25 13:05 - 000000000 ____D C:\WINDOWS\system32\AMD 2019-12-25 13:04 - 2019-12-26 01:26 - 000003160 _____ C:\WINDOWS\system32\Tasks\StartCN 2019-12-25 13:04 - 2019-12-26 01:26 - 000003080 _____ C:\WINDOWS\system32\Tasks\StartDVR 2019-12-25 13:03 - 2019-12-25 13:03 - 000000000 ___HD C:\OneDriveTemp 2019-12-25 12:07 - 2019-12-25 12:07 - 000000000 ____D C:\WINDOWS\Panther 2019-12-24 21:25 - 2019-12-24 21:25 - 000000298 _____ C:\Users\Simi\Desktop\Detroit Become Human.url 2019-12-23 21:38 - 2019-12-23 21:38 - 002275756 _____ C:\Users\Simi\Desktop\tumblr_pkw1mv7ELC1y3f5sfo1_540.webp 2019-12-21 18:11 - 2019-12-21 18:11 - 000000000 ____D C:\Users\Simi\AppData\Local\Sony Interactive Entertainment Network America LLC 2019-12-21 18:11 - 2019-12-21 18:11 - 000000000 ____D C:\Program Files\DIFX 2019-12-21 18:10 - 2019-12-21 18:11 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Sony Interactive Entertainment Network America LLC 2019-12-21 18:00 - 2019-12-21 18:00 - 000000000 ____D C:\ProgramData\Nefarius Software Solutions e.U 2019-12-20 21:04 - 2019-12-20 21:04 - 000000294 _____ C:\Users\Simi\Desktop\Towerfall Ascension.url 2019-12-20 18:55 - 2019-12-25 17:57 - 000000000 ____D C:\Users\Simi\AppData\Roaming\DS4Windows 2019-12-20 18:23 - 2019-12-20 18:23 - 000000222 _____ C:\Users\Simi\Desktop\Tomb Raider.url 2019-12-17 21:08 - 2019-12-17 21:08 - 062867672 _____ C:\WINDOWS\system32\amd_comgr.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 052403416 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 004564184 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 004076760 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 001730776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 001243352 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 001243352 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 001073312 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 001073312 _____ C:\WINDOWS\system32\vulkan-1.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000941784 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000930136 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000930136 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000852392 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000852392 _____ C:\WINDOWS\system32\vulkaninfo.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000769240 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000761048 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000710056 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000710056 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000574888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000554200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000493992 _____ C:\WINDOWS\system32\dgtrayicon.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000491944 _____ C:\WINDOWS\system32\GameManager64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000485800 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000469208 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000467160 _____ C:\WINDOWS\system32\amdlogum.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000451800 _____ C:\WINDOWS\system32\atieah64.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000428968 _____ C:\WINDOWS\system32\EEURestart.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000384216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000374696 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000345816 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000345000 _____ C:\WINDOWS\system32\clinfo.exe 2019-12-17 21:08 - 2019-12-17 21:08 - 000241880 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000209112 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000184744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000178864 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000163240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000159656 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000158216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000153512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000138664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000136616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000136616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000135384 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000124632 _____ C:\WINDOWS\system32\atidxx64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000121560 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000121048 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000107224 _____ C:\WINDOWS\SysWOW64\atidxx32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000106200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000091560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mcl64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000076200 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mcl32.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000070872 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000047528 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000044456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000020632 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll 2019-12-17 21:08 - 2019-12-17 21:08 - 000020608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll 2019-12-17 21:07 - 2019-12-17 21:07 - 078651096 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll 2019-12-17 21:07 - 2019-12-17 21:07 - 000484568 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2019-12-17 21:07 - 2019-12-17 21:07 - 000373976 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2019-12-17 21:07 - 2019-12-17 21:07 - 000197392 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll 2019-12-17 21:07 - 2019-12-17 21:07 - 000166992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 001686624 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 001365984 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000546328 _____ C:\WINDOWS\system32\amdmiracast.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000134944 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000128736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000128736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000119856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000107840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2019-12-17 21:06 - 2019-12-17 21:06 - 000107840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2019-12-16 19:35 - 2019-12-16 19:35 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap 2019-12-16 19:35 - 2019-12-16 19:35 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap 2019-12-16 19:33 - 2019-12-16 19:33 - 000204952 _____ C:\WINDOWS\SysWOW64\ativvsvl.dat 2019-12-16 19:33 - 2019-12-16 19:33 - 000204952 _____ C:\WINDOWS\system32\ativvsvl.dat 2019-12-16 19:33 - 2019-12-16 19:33 - 000157144 _____ C:\WINDOWS\SysWOW64\ativvsva.dat 2019-12-16 19:33 - 2019-12-16 19:33 - 000157144 _____ C:\WINDOWS\system32\ativvsva.dat 2019-12-16 19:27 - 2019-12-16 19:27 - 000541192 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb 2019-12-16 19:27 - 2019-12-16 19:27 - 000541192 _____ C:\WINDOWS\system32\atiapfxx.blb 2019-12-14 19:44 - 2019-12-14 20:05 - 000000000 ____D C:\Users\Simi\AppData\Local\Ori and the Blind Forest DE 2019-12-13 21:44 - 2019-12-13 21:44 - 000000289 _____ C:\Users\Simi\Desktop\The Wolf Among Us.url 2019-12-13 20:10 - 2019-12-25 13:33 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Discord 2019-12-13 20:10 - 2019-12-13 20:10 - 000002273 _____ C:\Users\Simi\Desktop\Discord.lnk 2019-12-13 20:10 - 2019-12-13 20:10 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2019-12-13 20:10 - 2019-12-13 20:10 - 000000000 ____D C:\Users\Simi\AppData\Local\SquirrelTemp 2019-12-13 20:10 - 2019-12-13 20:10 - 000000000 ____D C:\Users\Simi\AppData\Local\Discord 2019-12-12 16:37 - 2019-12-25 15:04 - 000001444 _____ C:\Users\Public\Desktop\The Sims 4.lnk 2019-12-12 16:37 - 2019-12-25 15:04 - 000001444 _____ C:\ProgramData\Desktop\The Sims 4.lnk 2019-12-12 16:37 - 2019-12-12 16:37 - 000000000 ____D C:\Users\Simi\AppData\Local\Electronic Arts 2019-12-12 16:37 - 2019-12-12 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4 2019-12-11 22:17 - 2019-12-25 17:58 - 000000000 ____D C:\Users\Simi\AppData\Local\EpicGamesLauncher 2019-12-11 22:17 - 2019-12-11 22:17 - 000001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2019-12-11 22:17 - 2019-12-11 22:17 - 000001258 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk 2019-12-11 22:17 - 2019-12-11 22:17 - 000001258 _____ C:\ProgramData\Desktop\Epic Games Launcher.lnk 2019-12-11 22:17 - 2019-12-11 22:17 - 000000000 ____D C:\Program Files (x86)\Epic Games 2019-12-09 22:19 - 2019-12-09 22:19 - 040198144 _____ C:\Users\Simi\Desktop\New Canvas.sai 2019-12-01 09:14 - 2019-12-01 09:15 - 000000000 ____D C:\Users\Simi\AppData\Local\LarianLauncher 2019-11-26 22:04 - 2019-11-26 22:04 - 000002328 _____ C:\Users\Simi\AppData\Roaming\PureRef.ini 2019-11-26 10:11 - 2019-09-24 22:38 - 000024512 _____ C:\WINDOWS\system32\7B296FC0-376B-497d-B013-58F4D9633A22-5P-1.B5841A4C-A289-439d-8115-50AB69CD450 ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-12-26 20:01 - 2017-09-03 11:20 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Spotify 2019-12-26 19:59 - 2019-03-19 05:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-12-26 19:59 - 2017-09-03 16:51 - 000000000 ____D C:\Users\Simi\AppData\Roaming\WTablet 2019-12-26 19:59 - 2017-09-03 11:21 - 000000000 ____D C:\Users\Simi\AppData\Local\Spotify 2019-12-26 19:58 - 2019-08-14 21:15 - 000000000 __SHD C:\Users\Simi\IntelGraphicsProfiles 2019-12-26 19:58 - 2019-06-24 21:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-12-26 19:58 - 2019-03-19 05:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2019-12-26 15:30 - 2019-06-24 20:57 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-12-26 14:57 - 2018-05-19 01:15 - 000000000 ____D C:\Users\Simi\AppData\Local\PlaceholderTileLogoFolder 2019-12-26 07:53 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2019-12-26 01:26 - 2019-03-19 05:50 - 000000000 ____D C:\WINDOWS\INF 2019-12-25 17:14 - 2018-05-18 21:49 - 000189512 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys 2019-12-25 17:14 - 2018-05-18 21:49 - 000149944 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys 2019-12-25 17:14 - 2018-05-18 21:49 - 000116696 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys 2019-12-25 17:14 - 2018-05-18 21:49 - 000103264 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys 2019-12-25 17:14 - 2018-05-18 21:49 - 000079744 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys 2019-12-25 17:14 - 2018-05-18 21:49 - 000050712 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys 2019-12-25 17:10 - 2018-05-18 21:49 - 000015800 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys 2019-12-25 17:09 - 2018-06-09 21:51 - 000000000 ____D C:\Program Files\ESET 2019-12-25 17:01 - 2019-06-24 19:55 - 000000000 ____D C:\Users\Simi 2019-12-25 16:44 - 2018-07-02 12:45 - 000000000 ____D C:\Program Files (x86)\Steam 2019-12-25 15:32 - 2018-06-30 11:11 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Origin 2019-12-25 14:57 - 2018-06-28 09:03 - 000000000 ____D C:\Program Files (x86)\Origin Games 2019-12-25 14:57 - 2017-09-03 18:49 - 000000000 ____D C:\ProgramData\Origin 2019-12-25 14:56 - 2018-06-30 11:11 - 000000000 ____D C:\Users\Simi\AppData\Local\Origin 2019-12-25 14:55 - 2018-06-30 11:10 - 000000000 ____D C:\Program Files (x86)\Origin 2019-12-25 13:41 - 2018-04-03 14:55 - 000000000 ____D C:\GOG Games 2019-12-25 13:24 - 2018-01-04 19:34 - 000000000 ____D C:\TEMP 2019-12-25 13:22 - 2019-06-24 21:07 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2019-12-25 13:19 - 2018-04-08 16:48 - 000000000 ____D C:\Program Files (x86)\Adobe 2019-12-25 13:03 - 2017-09-03 02:27 - 000000000 ___RD C:\Users\Simi\OneDrive 2019-12-25 12:54 - 2017-09-03 00:35 - 000000000 ____D C:\AMD 2019-12-25 12:24 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\NDF 2019-12-24 21:04 - 2018-06-13 18:00 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Twitch 2019-12-24 16:24 - 2017-09-08 19:14 - 000000206 _____ C:\WINDOWS\MSUTIL.INI 2019-12-24 16:22 - 2017-11-18 19:04 - 000000000 ____D C:\Program Files\NewBlue 2019-12-24 16:22 - 2017-11-18 19:04 - 000000000 ____D C:\Program Files (x86)\NewBlue 2019-12-24 16:21 - 2017-09-08 19:11 - 000000000 ____D C:\ProgramData\VEGAS 2019-12-24 16:21 - 2017-09-08 19:11 - 000000000 ____D C:\Program Files (x86)\VEGAS 2019-12-24 16:20 - 2017-12-17 19:31 - 000000000 ____D C:\Users\Simi\AppData\Local\Ubisoft Game Launcher 2019-12-24 16:19 - 2017-09-27 14:27 - 000000000 ____D C:\ProgramData\Skype 2019-12-24 16:17 - 2017-09-23 09:57 - 000000000 ____D C:\Users\Simi\AppData\Roaming\uTorrent 2019-12-20 18:23 - 2018-04-03 15:26 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2019-12-20 18:11 - 2019-06-24 21:07 - 000840890 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-12-20 18:11 - 2017-09-08 19:41 - 000013362 _____ C:\WINDOWS\system32\perfh01B.dat 2019-12-20 18:11 - 2017-09-08 19:41 - 000004020 _____ C:\WINDOWS\system32\perfc01B.dat 2019-12-19 19:11 - 2017-09-03 10:53 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-12-15 18:26 - 2019-04-20 20:36 - 000000000 ____D C:\Users\Simi\AppData\Local\BitTorrentHelper 2019-12-14 08:47 - 2019-06-24 21:07 - 000003420 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2019-12-14 08:47 - 2019-06-24 21:07 - 000003296 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2019-12-13 21:31 - 2019-05-27 08:25 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Microsoft Games 2019-12-13 21:31 - 2019-05-27 08:22 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Games 2019-12-13 21:31 - 2019-05-27 08:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Games 2019-12-13 21:31 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-12-13 21:31 - 2018-01-04 21:48 - 000000000 ____D C:\Users\Simi\AppData\Local\Packages 2019-12-13 21:31 - 2017-09-03 22:40 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2019-12-13 21:31 - 2017-09-03 00:18 - 000000000 __RHD C:\Users\Public\AccountPictures 2019-12-13 21:30 - 2019-09-11 17:48 - 000000000 ____D C:\Program Files (x86)\The Wolf Among Us Episode 5 2019-12-13 21:29 - 2019-03-19 05:52 - 000000000 ___HD C:\Program Files\WindowsApps 2019-12-13 21:29 - 2018-03-24 08:16 - 000000000 ____D C:\Users\Simi\AppData\Local\Razer 2019-12-13 21:29 - 2018-03-24 08:14 - 000000000 ____D C:\ProgramData\Razer 2019-12-13 21:29 - 2018-03-24 08:14 - 000000000 ____D C:\Program Files (x86)\Razer 2019-12-13 21:28 - 2019-03-01 21:35 - 000000000 ____D C:\Users\Simi\AppData\Roaming\Mediatronic 2019-12-13 21:25 - 2018-08-19 22:40 - 000000000 ____D C:\Program Files\Epic Games 2019-12-11 22:19 - 2018-08-19 22:25 - 000000000 ____D C:\ProgramData\Epic 2019-12-11 17:04 - 2019-06-15 14:28 - 000000000 ____D C:\Users\Simi\AppData\Local\Jagex 2019-12-11 17:04 - 2019-06-15 14:28 - 000000000 ____D C:\ProgramData\Jagex 2019-12-10 19:58 - 2019-06-24 21:07 - 000004598 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier 2019-12-10 19:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed 2019-12-10 19:58 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Macromed 2019-12-06 12:35 - 2019-11-14 23:12 - 000003334 _____ C:\WINDOWS\system32\Tasks\CorelUpdateHelperTask-CE20E9513B8623C3E7ED5160CA32CE99 2019-12-04 18:31 - 2018-11-11 14:45 - 000000000 ____D C:\ProgramData\Ubisoft 2019-11-26 10:11 - 2019-10-08 18:19 - 000000024 _____ C:\WINDOWS\system32\WinUpdates105.dat 2019-11-26 10:11 - 2019-10-08 18:19 - 000000003 _____ C:\WINDOWS\system32\wdbcache.tmp ==================== Files in the root of some directories ======== 2017-09-03 19:13 - 2018-11-20 19:22 - 000000132 _____ () C:\Users\Simi\AppData\Roaming\Adobe PNG Format CS6 Prefs 2019-02-25 13:28 - 2019-11-25 11:35 - 000000034 _____ () C:\Users\Simi\AppData\Roaming\AdobeWLCMCache.dat 2019-11-26 22:04 - 2019-11-26 22:04 - 000002328 _____ () C:\Users\Simi\AppData\Roaming\PureRef.ini 2017-11-13 20:45 - 2019-09-22 09:06 - 000001456 _____ () C:\Users\Simi\AppData\Local\Adobe Save for Web 13.0 Prefs 2019-02-13 20:57 - 2019-02-13 20:57 - 000000000 _____ () C:\Users\Simi\AppData\Local\oobelibMkey.log 2018-06-14 22:36 - 2018-06-14 22:36 - 000001713 _____ () C:\Users\Simi\AppData\Local\recently-used.xbel ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================