Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
Ran by Lara (administrator) on DESKTOP-OOO0RBD (Gigabyte Technology Co., Ltd. B450M H) (25-12-2025 14:18:35)
Running from C:\Users\Lara\Downloads\FRST64English.exe
Loaded Profiles: Lara & kiril
Platform: Майкрософт Windows 10 Домашняя Version 22H2 19045.5247 (X64) Language: Русский (Россия)
Default browser: Edge
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <8>
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\egui.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eOppFrame.exe
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eServiceHost.exe <2>
(C:\Program Files\ESET\ESET Security\ekrn.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <34>
(explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft Limited) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Telegram FZ-LLC -> Telegram FZ-LLC) C:\Users\Lara\AppData\Roaming\Telegram Desktop\Telegram.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngine.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe
(services.exe ->) (AVB Disc Soft, SIA -> Disc Soft Limited) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\efwd.exe
(services.exe ->) (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe
(services.exe ->) (LogMeIn, Inc. -> LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CredentialEnrollmentManager.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_33559cc6c2fd215a\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(services.exe ->) (YANDEX LLC -> YANDEX LLC) C:\Program Files (x86)\Yandex\YandexBrowser\25.10.3.1021\service_update.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2508.4.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [285616 2025-11-24] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2025-11-10] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2533352 2025-12-10] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe [14632 2016-02-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\MRT: Restriction <==== ATTENTION
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5750936 2025-12-23] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [Discord] => C:\Users\Lara\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2025-11-10] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [RazerAppEngine] => C:\Program Files\Razer\RazerAppEngine\RazerAppEngine.exe [853640 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [avoVPN] => C:\Program Files\avoVPN\avoVPN.exe [85190520 2025-11-07] (LARK COMPANY LIMITED -> avoVPN)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [Memory Cleaner] => C:\Users\Lara\AppData\Roaming\KoshyJohn.com\MemClean\MemClean.exe [1398808 2025-12-24] (Koshy John -> KoshyJohn.com)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Run: [MicrosoftEdgeAutoLaunch_07BD6F0BA9E650BEBE3D52D7D5C470B1] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\...\MountPoints2: {0f43b4e7-cbb2-11f0-9ca3-18c04d3473c3} - "G:\Autorun.exe" 
HKU\S-1-5-21-3844586854-2832619778-3748133936-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742544 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1002\...\Run: [Discord] => C:\Users\kiril\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1002\...\Run: [MicrosoftEdgeAutoLaunch_79939C33316C75703CEB1E4E4FDA8E58] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3844586854-2832619778-3748133936-1011\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4742544 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [RazerAppEngine] => C:\Program Files\Razer\RazerAppEngine\RazerAppEngine.exe [853640 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\143.0.7499.170\Installer\chrmstp.exe [2025-12-23] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{5EF9A232-5B5B-4768-95F2-3F601FB184E3}] -> C:\WINDOWS\system32\AutoGreenCP.dll [2021-01-17] () [File not signed]
IFEO\aswidsagent.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\autoruns.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\autorunsc.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\AvastSvc.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\AvastUI.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\avpui.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\bcdedit.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\GlassWire.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\GlassWireSetup.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\klwtblfs.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\KVRT.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\mbamagent.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\mbamservice.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\mbamtray.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\MediaCreationTool22H2.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\mmc.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\mstsc.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\PowerTool.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\PowerTool64.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\ReAgentc.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\recoverydrive.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\rstrui.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\systemreset.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\SystemSettingsAdminFlows.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\tcpview.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\tcpview64.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\vssadmin.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\Wireshark.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\wuapihost.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\wuauclt.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\x32dbg.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\x64dbg.exe: [MinimumStackCommitInBytes] 1099466887
IFEO\xcopy.exe: [MinimumStackCommitInBytes] 1099466887
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {35C3C627-2972-4225-8337-7CCF11C43AD1} - System32\Tasks\AMDAutoUpdate => C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [672064 2023-11-21] (Advanced Micro Devices Inc. -> )
Task: {8D7A2272-9277-4157-9A9A-B96826CD30E4} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {96A4D595-3369-4E6A-8213-3280E27E1405} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "daa7b84c-9cd7-450b-bc95-49e7eea6caf5" --version "6.39.0.11548" --silent
Task: {FB32F247-AA89-4D39-9D42-70EF86A12CC3} - System32\Tasks\CCleanerSkipUAC - Lara => C:\Program Files\CCleaner\CCleaner.exe [39822560 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {FD1CAEEF-87BD-484C-845A-D9863B63BFAE} - System32\Tasks\EasyTune => C:\Program Files (x86)\GIGABYTE\EasyTune\etinit.exe [15792 2019-02-21] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {02C5FC87-56C3-4075-9991-2FD7662697B7} - System32\Tasks\EasyTune 1 => C:\Program Files (x86)\GIGABYTE\EasyTune\etocfile.exe [18144 2019-11-14] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {B865ABE7-4B3A-4216-9383-A163602E7CFD} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem145.0.7569.0{D079A6A0-2F18-4087-84A1-68457E283CB5} => C:\Program Files (x86)\Google\GoogleUpdater\145.0.7569.0\updater.exe [7201944 2025-12-08] (Google LLC -> Google LLC)
Task: {2D3FACF2-6DA3-4E8F-B88F-AA36A54ED29C} - System32\Tasks\GraphicsCardEngine => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngineStarter.exe [232672 2019-11-07] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {E458911C-EE71-4D3C-BCC4-3AB9F549BE70} - System32\Tasks\Intelligent StandbyList Cleaner => C:\Users\Lara\Downloads\ISLC v1.0.3.0\Intelligent standby list cleaner ISLC.exe  (No File)
Task: {8F52CBC7-C31F-4A72-9EA9-BAD65EF41DBF} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194112 2025-11-10] (Adobe Inc. -> Adobe Inc.)
Task: {91EE449B-83FE-4327-B0EC-01FC4E5DB623} - System32\Tasks\LiquidSensord => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\LiquidSensord.exe [251616 2019-10-08] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {2F75849C-4076-4D39-89EF-B4CE15B3B0C7} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B130EDE-4D33-494E-95F4-38A3B61F8C38} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {9B9CEB7A-B9EE-430D-8445-69C172F67210} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {D1762174-FBCD-4385-AC57-EF237B64073E} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2463600 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {4AAFD56D-DC3E-46BB-BDD5-7C7C7246FC8F} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1938792 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {04083B42-A744-4432-B727-28CF40FD3AFC} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2335600 2021-09-08] (Microsoft Corporation -> Microsoft)
Task: {D1E54CCC-D880-48E7-BB9E-E28F4361506A} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\CEIP.exe [32632 2021-09-08] (Microsoft Corporation -> Microsoft)
Task: {94C3BCFE-B310-4170-8E6D-10C770CD2363} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2463600 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {AEE7A286-5D8A-40F6-92C3-A1705894E2F4} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1938792 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D8AED824-EE09-474F-847C-C80C3A65B498} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {18877D51-91DC-45E7-8DD5-D8A5400D61A3} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D6FC9175-BAE7-4634-BC74-8D363D160952} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CF50C4D8-710D-462D-9349-EFC68BFDBEBC} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4383592 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {C8811DC8-00C6-429B-B0D7-FB1FED2DE101} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3844586854-2832619778-3748133936-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4383592 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {0153D196-3E92-4416-92B6-C9CB8C299763} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3844586854-2832619778-3748133936-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4383592 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {25D8704A-41A0-446C-ABDA-897E614EEF49} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3844586854-2832619778-3748133936-1001 => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\OneDriveLauncher.exe [745832 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {38C11698-4988-4666-8F2E-B04112D0AC78} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3844586854-2832619778-3748133936-1002 => C:\Program Files\Microsoft OneDrive\25.222.1112.0002\OneDriveLauncher.exe [745832 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {B99E18D7-C613-4AED-934A-51CDF664D433} - System32\Tasks\SIV => C:\Program Files (x86)\GIGABYTE\SIV\thermald.exe [426208 2019-11-07] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {FFD2F430-6DB0-47DE-8797-6B3C3C853B59} - System32\Tasks\SIV-VGA => C:\Program Files (x86)\GIGABYTE\SIV\sensord.exe [254176 2019-11-07] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {536357A0-77DD-42EF-91A8-47966887DFF6} - System32\Tasks\SmartSurvey => C:\Program Files (x86)\GIGABYTE\SmartSurvey\GbtCareBotCmd.exe [139696 2018-09-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
Task: {7F189E8E-87A3-4733-8391-17827562C1A2} - System32\Tasks\UpdateTorrent => C:\Users\Lara\AppData\Roaming\utorrent\pro\uTorrentClient.exe [205985280 2025-09-05] (GitHub, Inc.) [File not signed] <==== ATTENTION
Task: {1A90F97D-8404-437E-BFE4-A59782D3F840} - System32\Tasks\Восстановление сервиса обновлений Яндекс Браузера => C:\Program Files (x86)\Yandex\YandexBrowser\25.10.3.1021\service_update.exe [4517616 2025-12-18] (YANDEX LLC -> YANDEX LLC)
Task: {3385B556-18C3-4C3E-91A6-0F6E04B33C1F} - System32\Tasks\Обновление Браузера Яндекс => C:\Users\Lara\AppData\Local\Yandex\YandexBrowser\Application\browser.exe  --background-update --noerrdialogs (No File)
Task: {DFD354C8-CD37-4091-97D1-281C75848297} - System32\Tasks\Системное обновление Браузера Яндекс => C:\Program Files (x86)\Yandex\YandexBrowser\25.10.3.1021\service_update.exe [4517616 2025-12-18] (YANDEX LLC -> YANDEX LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job => C:\Program Files (x86)\Yandex\YandexBrowser\25.10.3.1021\service_update.exe
Task: C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job => C:\Users\Lara\AppData\Local\Yandex\YandexBrowser\Application\browser.exe
Task: C:\WINDOWS\Tasks\Системное обновление Браузера Яндекс.job => C:\Program Files (x86)\Yandex\YandexBrowser\25.10.3.1021\service_update.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{1bb45269-d705-8b15-3a91-2a69f701748c}: [NameServer] 172.28.37.2
Tcpip\..\Interfaces\{4b81d788-9b92-4a56-91dc-9fa0e3bcdccd}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6303e4b7-0df4-41a3-aa22-38f28b427b35}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{6303e4b7-0df4-41a3-aa22-38f28b427b35}\224534B34534444E34D34: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{9738e33b-7f15-437b-a7a4-2c46fe3375a6}: [DhcpNameServer] 192.168.109.53
Tcpip\..\Interfaces\{ab8f7bf4-f2e2-4402-9872-6c9dac0cad40}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{ab8f7bf4-f2e2-4402-9872-6c9dac0cad40}: [DhcpNameServer] 192.168.3.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Lara\AppData\Local\Microsoft\Edge\User Data\Default [2025-12-25]
Error reading preferences. Please check "Secure Preferences" file for possible corruption. <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Lara\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gdaklcangmaacealgmgpdibnafeijgmm [2025-11-25] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Lara\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-03] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Lara\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Lara\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-12-17] [UpdateUrl:0] <==== ATTENTION
Edge Extension: (No Name) - C:\Users\Lara\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkapkmklnmidbbgjaipbgpcnbomnaakc [2025-12-25] [UpdateUrl:0] <==== ATTENTION
Edge HKLM-x32\...\Edge\Extension: [nkapkmklnmidbbgjaipbgpcnbomnaakc]

FireFox:
========
FF ProfilePath: C:\Users\Lara\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default [2025-01-07]
FF Homepage: Mozilla\Firefox\Profiles\nahd6ha2.default -> hxxps://www.yandex.ru/?win=556&clid=2313439-56
FF SearchPlugin: C:\Users\Lara\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\searchplugins\yandex.ru-20224028.xml [2022-08-28]
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2022-06-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2022-06-19] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2025-12-10] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2025-12-10] (Adobe Inc. -> Adobe Systems)

Chrome: 
=======
CHR Profile: C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default [2025-12-24]
CHR StartupUrls: Default -> "hxxp://www.google.com/"
    
CHR DefaultSearchKeyword: Default -> yandex.ru
CHR DefaultSuggestURL: Default -> hxxps://suggest.yandex.net/suggest-ff.cgi?uil=ru&part={searchTerms}
CHR Extension: (Slides) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-01-17]
CHR Extension: (Docs) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-01-17]
CHR Extension: (Google Drive) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-01-17]
CHR Extension: (YouTube) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-01-17]
CHR Extension: (Sheets) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-01-17]
CHR Extension: (Google Docs Offline) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-09-18]
CHR Extension: (Яндекс) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\gndelhfhcfbdhndfpcinebijfcjpmpec [2025-09-18]
CHR Extension: (Adblock - бесплатный блокировщик рекламы) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkcbjkjfonpnpojdokmhfhnkdndkjeha [2025-10-08] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (saveVPN) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\jddeddikaibbhgbkbgfodionolddonga [2022-11-23] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (Chrome Web Store Payments) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-17]
CHR Extension: (Gmail) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-01-17]
CHR Profile: C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Guest Profile [2025-12-24]
CHR Profile: C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-12-24]
CHR DefaultSearchURL: Profile 1 -> hxxps://yandex.ru/search/?__PARAM__from=chromesearch&text={searchTerms}
CHR DefaultSearchKeyword: Profile 1 -> yandex.ru
CHR DefaultSuggestURL: Profile 1 -> hxxps://suggest.yandex.net/suggest-ff.cgi?uil=ru&part={searchTerms}
CHR Extension: (Google Документы офлайн) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-09]
CHR Extension: (Яндекс) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gndelhfhcfbdhndfpcinebijfcjpmpec [2024-11-01]
CHR Extension: (saveVPN) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mmeianjnblahdbonelhjbmoalppfkohg [2022-11-23] [UpdateUrl:0] <==== ATTENTION
CHR Extension: (Платежная система Интернет-магазина Chrome) - C:\Users\Lara\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-10]
CHR Profile: C:\Users\Lara\AppData\Local\Google\Chrome\User Data\System Profile [2025-12-24]
CHR HKU\S-1-5-21-3844586854-2832619778-3748133936-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [gndelhfhcfbdhndfpcinebijfcjpmpec]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944608 2025-12-10] (Adobe Inc. -> Adobe Inc.)
S3 AppleChargerSrv; C:\WINDOWS\System32\AppleChargerSrv.exe [31272 2010-04-06] (Giga-Byte Technology -> )
S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3386064 2025-10-26] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [20285608 2025-04-09] (BattlEye Innovations e.K. -> )
R2 Bonjour Service; C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe [390504 2023-12-17] (Apple Inc. -> Apple Inc.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4941360 2025-03-14] (AVB Disc Soft, SIA -> Disc Soft Limited)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2025-04-09] (EasyAntiCheat Oy -> Epic Games, Inc)
R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [143072 2019-11-14] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 efwd; C:\Program Files\ESET\ESET Security\efwd.exe [5543856 2025-11-24] (ESET, spol. s r.o. -> ESET)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-24] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [4980040 2025-11-24] (ESET, spol. s r.o. -> ESET)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncHelper.exe [3614568 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
S2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [File not signed]
S2 GbtCareBotService; C:\Program Files (x86)\GIGABYTE\SmartSurvey\GbtCareBotService.exe [138160 2018-09-06] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)
S2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [4920184 2024-03-25] (LogMeIn, Inc. -> LogMeIn Inc.)
S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [128736 2019-11-07] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc. -> LogMeIn, Inc.)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 mracsvc; C:\WINDOWS\System32\mracsvc.exe [31453424 2025-01-06] (FRESH CODE - FZCO -> FRESH CODE - FZCO)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_33559cc6c2fd215a\Display.NvContainer\NVDisplay.Container.exe [1275016 2024-08-15] (NVIDIA Corporation -> NVIDIA Corporation)
S2 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [125664 2019-11-14] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.222.1112.0002\OneDriveUpdaterService.exe [3906448 2025-12-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Razer Elevation Service; C:\Program Files\Razer\razer_elevation_service\razer_elevation_service.exe [1741960 2025-04-25] (Razer USA Ltd. -> Razer Inc)
S2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [362248 2024-06-26] (Razer USA Ltd. -> Razer Inc)
S2 RvControlSvc; C:\Program Files (x86)\Radmin VPN\RvControlSvc.exe [1480056 2025-09-02] (Famatech Corp. -> Famatech Corp.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 YandexBrowserService; C:\Program Files (x86)\Yandex\YandexBrowser\25.10.3.1021\service_update.exe [4517616 2025-12-18] (YANDEX LLC -> YANDEX LLC)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\WINDOWS\System32\DRIVERS\AppleCharger.sys [22240 2013-10-28] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2025-11-27] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2025-11-27] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [232928 2025-11-24] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [139904 2025-11-24] (Microsoft Windows Hardware Compatibility Publisher -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [17840 2025-11-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [273768 2025-11-24] (ESET, spol. s r.o. -> ESET)
S2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [57368 2025-11-24] (ESET, spol. s r.o. -> ESET)
R1 EneIo; C:\WINDOWS\system32\drivers\ene.sys [17624 2019-05-22] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [86800 2025-11-24] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [126552 2025-11-24] (ESET, spol. s r.o. -> ESET)
R3 gdrv2; C:\WINDOWS\gdrv2.sys [32600 2021-01-17] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 GVCIDrv; C:\Program Files (x86)\GIGABYTE\RGBFusion\GVCIDrv64.sys [16712 2019-01-15] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
R3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2022-05-18] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv1.sys [30787136 2025-01-06] (Microsoft Windows Hardware Compatibility Publisher -> FRESH CODE - FZCO)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12435144 2024-10-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
R3 RvNetMP60; C:\WINDOWS\System32\drivers\RvNetMP60.sys [58288 2025-04-08] (Microsoft Windows Hardware Compatibility Publisher -> Famatech Corp.)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64880 2023-09-26] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_00aa; C:\WINDOWS\System32\drivers\RzDev_00aa.sys [63200 2022-05-09] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0257; C:\WINDOWS\System32\drivers\RzDev_0257.sys [56152 2021-03-22] (Razer USA Ltd. -> Razer Inc)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2022-02-03] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S1 UsbCharger; C:\WINDOWS\System32\DRIVERS\UsbCharger.sys [22240 2013-10-24] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21928 2025-12-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [635272 2025-12-19] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-19] (Microsoft Windows -> Microsoft Corporation)
R4 WinDivert; C:\Users\Lara\Desktop\запрет\bin\WinDivert64.sys [94144 2025-06-15] (成都密思听科技有限公司 -> Basil)
S3 WinRing0_1_2_0; C:\Program Files (x86)\GIGABYTE\RGBFusion\MODAPI.sys [14544 2021-01-21] (Noriyuki MIYAZAKI -> OpenLibSys.org)
S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2024-02-16] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
R3 XBCVideo; C:\WINDOWS\system32\DRIVERS\XBCVideo.sys [273488 2024-09-04] (Microsoft Windows Hardware Compatibility Publisher -> SplitmediaLabs Limited)
R3 XSplit_Dummy; C:\WINDOWS\system32\drivers\xspltspk.sys [37816 2024-09-04] (SplitmediaLabs Limited -> SplitmediaLabs Limited)
R3 XSpltAud; C:\WINDOWS\System32\drivers\XSpltAud.sys [84680 2024-11-11] (Microsoft Windows Hardware Compatibility Publisher -> SplitmediaLabs Limited)
S3 cpuz149; \??\C:\Users\Lara\AppData\Local\Temp\cpuz149\cpuz149_x64.sys [X] <==== ATTENTION
S2 MozillaVPNSplitTunnel; \??\C:\Program Files\Mozilla\Mozilla VPN\mullvad-split-tunnel.sys [X]
S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-12-25 05:28 - 2025-12-25 05:28 - 000000223 _____ C:\Users\Lara\Desktop\Baldur's Gate 3.url
2025-12-25 04:43 - 2025-12-25 04:43 - 002444288 _____ (Farbar) C:\Users\Lara\Downloads\FRST64.exe
2025-12-25 03:18 - 2025-12-25 03:23 - 000081283 _____ C:\Users\Lara\Downloads\Addition.txt
2025-12-25 03:16 - 2025-12-25 14:19 - 000036339 _____ C:\Users\Lara\Downloads\FRST.txt
2025-12-25 03:16 - 2025-12-25 14:18 - 000000000 ____D C:\FRST
2025-12-25 03:15 - 2025-12-25 03:15 - 002444288 _____ (Farbar) C:\Users\Lara\Downloads\FRST64English.exe
2025-12-25 02:57 - 2025-12-25 02:57 - 000002016 _____ C:\Users\Public\Desktop\Защита банковских операций и браузера ESET.lnk
2025-12-25 02:55 - 2025-12-25 02:55 - 011015736 _____ (ESET) C:\Users\Lara\Downloads\eset_smart_security_premium_live_installer (1).exe
2025-12-25 02:55 - 2025-12-25 02:55 - 000000000 ____D C:\Users\Lara\AppData\Local\ESET
2025-12-25 02:55 - 2025-12-25 02:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2025-12-25 02:55 - 2025-12-25 02:55 - 000000000 ____D C:\ProgramData\ESET
2025-12-25 02:55 - 2025-12-25 02:55 - 000000000 ____D C:\Program Files\ESET
2025-12-25 02:52 - 2025-12-25 02:52 - 011015600 _____ (ESET) C:\Users\Lara\Downloads\eset_smart_security_premium_live_installer.exe
2025-12-25 02:17 - 2025-12-25 02:17 - 000000000 ___HD C:\OneDriveTemp
2025-12-25 02:17 - 2025-12-25 02:17 - 000000000 ____D C:\Users\kiril\AppData\Roaming\com.adobe.dunamis
2025-12-25 02:17 - 2025-12-25 02:17 - 000000000 ____D C:\Users\kiril\AppData\LocalLow\Temp
2025-12-25 02:17 - 2025-12-25 02:17 - 000000000 ____D C:\Users\kiril\AppData\LocalLow\Adobe
2025-12-25 02:17 - 2025-12-25 02:17 - 000000000 ____D C:\Users\kiril\AppData\Local\CEF
2025-12-25 02:17 - 2025-12-25 02:17 - 000000000 ____D C:\Users\kiril\AppData\Local\Adobe
2025-12-25 02:16 - 2025-12-25 02:18 - 000000000 ____D C:\Users\kiril\AppData\Local\NVIDIA Corporation
2025-12-25 02:16 - 2025-12-25 02:16 - 000000020 ___SH C:\Users\kiril\ntuser.ini
2025-12-25 02:16 - 2025-12-25 02:16 - 000000000 ____D C:\Users\kiril\AppData\Roaming\Yandex
2025-12-25 02:16 - 2025-12-25 02:16 - 000000000 ____D C:\Users\kiril\AppData\LocalLow\NVIDIA
2025-12-25 02:16 - 2025-12-25 02:16 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Spelling
2025-12-25 02:15 - 2025-12-25 02:15 - 000000020 ___SH C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\ntuser.ini
2025-12-25 02:15 - 2025-12-25 02:15 - 000000020 ___SH C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\ntuser.ini
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\Шаблоны
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\Мои документы
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\главное меню
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\Documents\Моя музыка
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\Documents\мои рисунки
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\Documents\Мои видеозаписи
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\Шаблоны
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\Мои документы
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\главное меню
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\Documents\Моя музыка
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\Documents\мои рисунки
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\Documents\Мои видеозаписи
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\SystemCertificates
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Protect
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Crypto
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Credentials
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\SystemCertificates
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Protect
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Crypto
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Credentials
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Yandex
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Windows
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Vault
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\LocalLow\NVIDIA
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Local\VirtualStore
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Local\Packages
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Local\NVIDIA Corporation
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Local\Google
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Local\ConnectedDevicesPlatform
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Yandex
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Windows
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Vault
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\LocalLow\NVIDIA
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Local\VirtualStore
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Local\Packages
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Local\NVIDIA Corporation
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Local\Google
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Local\ConnectedDevicesPlatform
2025-12-25 02:15 - 2025-12-25 02:15 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000
2025-12-25 02:15 - 2024-06-04 18:42 - 000000000 ___RD C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\OneDrive
2025-12-25 02:15 - 2024-06-04 18:42 - 000000000 ___RD C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\OneDrive
2025-12-25 02:15 - 2024-04-19 11:42 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Local\LogMeIn Hamachi
2025-12-25 02:15 - 2024-04-19 11:42 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Local\LogMeIn Hamachi
2025-12-25 02:15 - 2021-10-12 00:16 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.001\AppData\Roaming\Microsoft\Network
2025-12-25 02:15 - 2021-10-12 00:16 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD.000\AppData\Roaming\Microsoft\Network
2025-12-25 02:13 - 2025-12-25 02:13 - 000000020 ___SH C:\Users\defaultuser1.DESKTOP-OOO0RBD\ntuser.ini
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\Шаблоны
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\Мои документы
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\главное меню
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\Documents\Моя музыка
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\Documents\мои рисунки
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\Documents\Мои видеозаписи
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 SHDJL C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\SystemCertificates
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Protect
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Crypto
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ___SD C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Credentials
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\Lara\Documents\EasyTune
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Yandex
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Windows
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Vault
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Spelling
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\LocalLow\NVIDIA
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Local\VirtualStore
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Local\Packages
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Local\NVIDIA Corporation
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Local\Google
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Local\ConnectedDevicesPlatform
2025-12-25 02:13 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD
2025-12-25 02:13 - 2024-06-04 18:42 - 000000000 ___RD C:\Users\defaultuser1.DESKTOP-OOO0RBD\OneDrive
2025-12-25 02:13 - 2024-04-19 11:42 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Local\LogMeIn Hamachi
2025-12-25 02:13 - 2021-10-12 00:16 - 000000000 ____D C:\Users\defaultuser1.DESKTOP-OOO0RBD\AppData\Roaming\Microsoft\Network
2025-12-25 02:12 - 2025-12-25 02:13 - 000000000 ____D C:\Users\defaultuser1\AppData\Local\Packages
2025-12-25 02:12 - 2025-12-25 02:12 - 000000020 ___SH C:\Users\defaultuser1\ntuser.ini
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\Шаблоны
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\Мои документы
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\главное меню
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\Documents\Моя музыка
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\Documents\мои рисунки
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\Documents\Мои видеозаписи
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 SHDJL C:\Users\defaultuser1\AppData\Roaming\Microsoft\Windows\Start Menu\Программы
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ___SD C:\Users\defaultuser1\AppData\Roaming\Microsoft\SystemCertificates
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ___SD C:\Users\defaultuser1\AppData\Roaming\Microsoft\Protect
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ___SD C:\Users\defaultuser1\AppData\Roaming\Microsoft\Crypto
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ___SD C:\Users\defaultuser1\AppData\Roaming\Microsoft\Credentials
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Roaming\Yandex
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Roaming\Microsoft\Windows
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Roaming\Microsoft\Vault
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\LocalLow\NVIDIA
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Local\VirtualStore
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Local\NVIDIA Corporation
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Local\Google
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1\AppData\Local\ConnectedDevicesPlatform
2025-12-25 02:12 - 2025-12-25 02:12 - 000000000 ____D C:\Users\defaultuser1
2025-12-25 02:12 - 2024-06-04 18:42 - 000000000 ___RD C:\Users\defaultuser1\OneDrive
2025-12-25 02:12 - 2024-04-19 11:42 - 000000000 ____D C:\Users\defaultuser1\AppData\Local\LogMeIn Hamachi
2025-12-25 02:12 - 2021-10-12 00:16 - 000000000 ____D C:\Users\defaultuser1\AppData\Roaming\Microsoft\Network
2025-12-25 01:58 - 2025-12-25 01:58 - 009629128 _____ (Malwarebytes) C:\Users\Lara\Downloads\adwcleaner.exe
2025-12-25 01:14 - 2025-12-25 01:14 - 000001397 _____ C:\Users\Lara\Desktop\Speccy - Ярлык.lnk
2025-12-25 00:47 - 2025-12-25 00:47 - 000001125 _____ C:\Users\Public\Desktop\Ускоритель Компьютера.lnk
2025-12-25 00:47 - 2025-12-25 00:47 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Other
2025-12-25 00:47 - 2025-12-25 00:47 - 000000000 ____D C:\Users\Lara\AppData\Roaming\AMS Software
2025-12-25 00:47 - 2025-12-25 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ускоритель Компьютера
2025-12-25 00:47 - 2025-12-25 00:47 - 000000000 ____D C:\Program Files (x86)\Fast Computer
2025-12-25 00:40 - 2025-12-25 00:40 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2025-12-25 00:40 - 2025-12-25 00:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2025-12-25 00:40 - 2025-12-25 00:40 - 000000000 ____D C:\Program Files\CCleaner
2025-12-25 00:36 - 2025-12-25 00:36 - 000002052 _____ C:\Users\Lara\Desktop\Memory Cleaner.lnk
2025-12-25 00:36 - 2025-12-25 00:36 - 000000000 ____D C:\Users\Lara\AppData\Roaming\KoshyJohn.com
2025-12-25 00:36 - 2025-12-25 00:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KoshyJohn.com
2025-12-25 00:29 - 2025-12-25 00:29 - 000000000 ____D C:\Users\Lara\AppData\Roaming\GHISLER
2025-12-25 00:29 - 2025-12-25 00:29 - 000000000 ____D C:\Users\Lara\AppData\Local\GHISLER
2025-12-22 14:01 - 2025-12-22 14:01 - 000000000 ____D C:\Users\Lara\AppData\Local\Icarus
2025-12-22 02:43 - 2025-12-22 02:43 - 000000223 _____ C:\Users\Lara\Desktop\Icarus.url
2025-12-17 09:56 - 2025-12-17 10:00 - 000000000 ____D C:\Users\Lara\AppData\Roaming\FileZilla
2025-12-17 09:56 - 2025-12-17 09:58 - 000000000 ____D C:\Users\Lara\AppData\Local\FileZilla
2025-12-13 00:12 - 2025-12-15 01:58 - 000000000 ____D C:\Users\Lara\Documents\elixxier
2025-12-12 23:59 - 2025-12-12 23:59 - 000000975 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\set.a.light 3D V3.lnk
2025-12-12 23:59 - 2025-12-12 23:59 - 000000963 _____ C:\Users\Public\Desktop\set.a.light 3D V3.lnk
2025-12-12 23:59 - 2025-12-12 23:59 - 000000000 ____D C:\Users\Lara\AppData\LocalLow\elixxier
2025-12-12 23:59 - 2025-12-12 23:59 - 000000000 ____D C:\Users\Lara\AppData\Local\elixxier
2025-12-12 23:59 - 2025-12-12 23:59 - 000000000 ____D C:\ProgramData\elixxier
2025-12-12 23:58 - 2025-12-12 23:59 - 000000000 ____D C:\Program Files\set.a.light 3D V3
2025-12-10 21:59 - 2025-12-10 21:59 - 000001386 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2025-11-27 21:12 - 2025-11-27 21:12 - 000063696 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtliteusbbus.sys
2025-11-27 21:12 - 2025-11-27 21:12 - 000042256 _____ (Disc Soft Ltd) C:\WINDOWS\system32\Drivers\dtlitescsibus.sys
2025-11-27 21:12 - 2025-11-27 21:12 - 000000834 _____ C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\Users\Public\Documents\Daemon Tools Images
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\Users\Public\Documents\Catch!
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Disc-Soft
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\Users\Lara\AppData\Roaming\DAEMON Tools Lite
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\Users\Lara\AppData\Local\Disc_Soft_Limited
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\DAEMON Tools Lite
2025-11-27 21:12 - 2025-11-27 21:12 - 000000000 ____D C:\Program Files\DAEMON Tools Lite
2025-11-27 21:11 - 2025-11-27 21:11 - 000000000 ____D C:\ProgramData\Disc-Soft
2025-11-26 21:31 - 2025-11-26 21:43 - 000000100 _____ C:\Users\Lara\Desktop\Идеи.TXT

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-12-25 14:16 - 2025-03-04 16:39 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting
2025-12-25 14:16 - 2025-03-04 16:39 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2025-12-25 14:14 - 2019-12-07 12:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-12-25 14:13 - 2024-04-21 02:22 - 000000508 _____ C:\WINDOWS\Tasks\Системное обновление Браузера Яндекс.job
2025-12-25 14:13 - 2024-04-21 02:22 - 000000468 _____ C:\WINDOWS\Tasks\Восстановление сервиса обновлений Яндекс Браузера.job
2025-12-25 14:13 - 2021-10-12 00:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-12-25 14:13 - 2021-09-23 16:22 - 000000000 ____D C:\Program Files (x86)\Steam
2025-12-25 05:33 - 2021-09-23 16:48 - 000000000 ____D C:\Users\Lara\AppData\Local\D3DSCache
2025-12-25 05:28 - 2021-09-29 17:58 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-12-25 05:27 - 2021-09-23 22:32 - 000000000 ____D C:\Users\Lara\AppData\Roaming\discord
2025-12-25 04:42 - 2022-06-29 17:42 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Telegram Desktop
2025-12-25 03:06 - 2019-12-07 12:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-25 02:56 - 2019-12-07 12:13 - 000000000 ____D C:\WINDOWS\INF
2025-12-25 02:55 - 2019-12-07 12:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-12-25 02:32 - 2019-12-07 12:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-12-25 02:23 - 2021-09-23 16:06 - 000000000 ____D C:\ProgramData\NVIDIA
2025-12-25 02:20 - 2021-09-29 17:53 - 000000000 ____D C:\Users\kiril\AppData\Roaming\Microsoft\Spelling
2025-12-25 02:19 - 2021-09-29 18:09 - 000000000 ____D C:\Users\kiril\AppData\Local\D3DSCache
2025-12-25 02:19 - 2021-09-29 17:45 - 000000000 ____D C:\Users\kiril\AppData\Local\Packages
2025-12-25 02:18 - 2025-10-09 00:40 - 000000000 ____D C:\Users\Lara\AppData\Roaming\uTorrentClient
2025-12-25 02:17 - 2021-10-12 00:14 - 000000000 ____D C:\Users\kiril\AppData\Roaming\Microsoft\Windows
2025-12-25 02:17 - 2021-09-29 18:12 - 000000000 ____D C:\Users\kiril\AppData\Roaming\discord
2025-12-25 02:17 - 2021-09-29 17:47 - 000000000 ____D C:\Users\kiril\AppData\Local\PlaceholderTileLogoFolder
2025-12-25 02:17 - 2021-09-29 17:46 - 000000000 ___RD C:\Users\kiril\OneDrive
2025-12-25 02:17 - 2021-09-29 17:45 - 000000000 ____D C:\Users\kiril\AppData\Roaming\Adobe
2025-12-25 02:17 - 2021-02-09 13:39 - 000000000 ____D C:\ProgramData\Packages
2025-12-25 02:17 - 2019-12-07 12:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-25 02:17 - 2019-12-07 12:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-25 02:16 - 2021-10-12 00:14 - 000000000 ____D C:\Users\kiril
2025-12-25 02:16 - 2021-09-29 17:45 - 000000000 ___SD C:\Users\kiril\AppData\Roaming\Microsoft\Protect
2025-12-25 02:16 - 2021-09-29 17:45 - 000000000 ___RD C:\Users\kiril\3D Objects
2025-12-25 02:16 - 2021-09-29 17:45 - 000000000 ____D C:\Users\kiril\AppData\Local\ConnectedDevicesPlatform
2025-12-25 02:16 - 2021-01-17 19:15 - 000000000 __RHD C:\Users\Public\AccountPictures
2025-12-25 01:41 - 2021-10-12 00:22 - 001753724 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-12-25 01:41 - 2019-12-07 17:34 - 000770768 _____ C:\WINDOWS\system32\perfh019.dat
2025-12-25 01:41 - 2019-12-07 17:34 - 000152014 _____ C:\WINDOWS\system32\perfc019.dat
2025-12-25 01:39 - 2022-06-24 11:36 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Microsoft\Word
2025-12-25 01:34 - 2024-04-21 02:22 - 000000456 _____ C:\WINDOWS\Tasks\Обновление Браузера Яндекс.job
2025-12-25 01:34 - 2022-06-12 21:48 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-12-25 01:34 - 2021-10-12 00:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-12-25 01:34 - 2021-10-12 00:14 - 000000000 ____D C:\Users\Lara
2025-12-25 01:34 - 2021-10-12 00:12 - 000008192 ___SH C:\DumpStack.log.tmp
2025-12-25 01:34 - 2019-12-07 12:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2025-12-25 01:28 - 2022-02-01 00:11 - 000000000 ____D C:\Users\Lara\AppData\Local\Adobe
2025-12-25 01:28 - 2021-01-17 19:15 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Adobe
2025-12-25 01:21 - 2025-05-15 22:32 - 000000000 ____D C:\Program Files\Streamlabs OBS
2025-12-25 01:05 - 2024-11-07 11:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2025-12-25 00:57 - 2022-08-28 17:40 - 000000000 ____D C:\Users\Lara\AppData\Local\Yandex
2025-12-25 00:53 - 2024-01-22 18:11 - 000000000 ____D C:\Users\Lara\AppData\Local\CrashDumps
2025-12-25 00:40 - 2025-01-07 05:32 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2025-12-24 05:09 - 2025-11-11 00:18 - 000003578 _____ C:\WINDOWS\system32\Tasks\Launch Adobe CCXProcess
2025-12-23 05:27 - 2021-01-17 20:54 - 000002297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-12-23 05:27 - 2021-01-17 20:54 - 000002256 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-12-22 14:02 - 2023-12-18 00:39 - 000000000 ____D C:\Users\Lara\AppData\Local\NVIDIA Corporation
2025-12-22 14:02 - 2023-11-28 06:28 - 000000000 ____D C:\Users\Lara\AppData\Local\UnrealEngine
2025-12-22 13:58 - 2021-10-13 02:37 - 000003666 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-22 13:58 - 2021-10-13 02:37 - 000003570 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7bee571d4eaeb
2025-12-20 12:41 - 2021-10-12 00:13 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-20 12:41 - 2021-10-12 00:13 - 000002288 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-12-20 12:41 - 2021-09-23 22:32 - 000000000 ____D C:\Users\Lara\AppData\Local\Discord
2025-12-19 18:54 - 2021-09-23 22:32 - 000002287 _____ C:\Users\Lara\Desktop\Discord.lnk
2025-12-19 17:07 - 2021-01-31 10:54 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-12-19 16:57 - 2023-05-23 01:15 - 000000000 ____D C:\Users\Lara\AppData\Local\LogMeIn Hamachi
2025-12-18 08:28 - 2025-10-03 15:15 - 000002610 _____ C:\Users\Lara\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yandex.lnk
2025-12-18 08:28 - 2024-04-21 02:22 - 000003682 _____ C:\WINDOWS\system32\Tasks\Системное обновление Браузера Яндекс
2025-12-18 08:28 - 2024-04-21 02:22 - 000003572 _____ C:\WINDOWS\system32\Tasks\Восстановление сервиса обновлений Яндекс Браузера
2025-12-15 08:30 - 2022-06-25 14:22 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-12-15 03:27 - 2021-01-17 19:15 - 000000000 ____D C:\Users\Lara\AppData\Local\Packages
2025-12-12 20:17 - 2025-02-06 17:09 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3844586854-2832619778-3748133936-1002
2025-12-12 20:17 - 2025-02-06 17:09 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3844586854-2832619778-3748133936-1001
2025-12-12 20:17 - 2022-06-25 14:22 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3844586854-2832619778-3748133936-1002
2025-12-12 20:17 - 2022-06-24 11:36 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-12-12 20:17 - 2022-06-24 11:36 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-12-12 20:17 - 2022-01-30 00:15 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3844586854-2832619778-3748133936-1001
2025-12-11 16:26 - 2022-02-01 00:12 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-12-10 21:59 - 2022-02-01 00:12 - 000000000 ____D C:\Program Files\Adobe
2025-12-10 21:59 - 2022-02-01 00:12 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-12-10 21:58 - 2025-11-10 20:42 - 000000000 ____D C:\Users\Lara\AppData\Roaming\com.adobe.dunamis
2025-12-07 07:40 - 2025-03-15 17:48 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2025-12-07 07:40 - 2025-03-15 17:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2025-12-07 07:40 - 2023-12-18 00:37 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2025-12-05 00:53 - 2021-09-23 15:39 - 000000000 ____D C:\Users\Lara\AppData\Local\Steam
2025-11-27 23:46 - 2021-10-11 14:02 - 000000000 ____D C:\Users\Lara\AppData\Roaming\uTorrent
2025-11-27 23:12 - 2021-10-11 14:03 - 000000000 ____D C:\Users\Lara\AppData\Local\BitTorrentHelper
2025-11-27 22:09 - 2022-08-11 21:39 - 000000000 ____D C:\Users\Lara\AppData\Roaming\Microsoft\Excel
2025-11-25 23:19 - 2025-10-09 00:40 - 000000970 _____ C:\Users\Lara\uTorrentClient.dat

==================== Files in the root of some directories ========

2025-10-09 00:40 - 2025-11-06 03:44 - 000000970 _____ () C:\Users\Lara\setup.dat
2025-10-09 00:40 - 2025-11-25 23:19 - 000000970 _____ () C:\Users\Lara\uTorrentClient.dat
2021-01-18 14:25 - 2022-02-04 00:11 - 000000926 _____ () C:\Users\Lara\AppData\Roaming\DESKTOP-OOO0RBD.MTBF.txt
2022-12-16 19:03 - 2023-11-17 21:35 - 000000156 _____ () C:\Users\Lara\AppData\Local\dc4f79923a5baeb14164.bin
2021-01-18 14:43 - 2021-01-18 14:43 - 000003584 _____ () C:\Users\Lara\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2025-11-24 12:44 - 2025-11-24 14:04 - 000116636 _____ () C:\Users\Lara\AppData\Local\mozillavpn.log
2025-01-07 07:02 - 2025-01-07 07:02 - 000007601 _____ () C:\Users\Lara\AppData\Local\Resmon.ResmonCfg

==================== FLock ==============================

2024-12-19 21:24 C:\DrWeb Quarantine

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



ATTENTION: ==> Could not access BCD.  -> 0
==================== End of FRST.txt ========================