Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Latest News: BORN Ontario child registry data breach affects 3.4 million people

Featured Deal: Get started in AI or make your own with this $19.97 course bundle

Latest Buyer's Guide: Best VPNs to unblock Stan outside Australia in 2023

My PC keeps filling out with new files - no space left

Started by cherm , Aug 27 2023 05:38 AM

Page 3 of 6
1
2
3
4
5

This topic is locked

77 replies to this topic

#31 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:24 PM

Posted 07 September 2023 - 12:15 PM

When was the last time it booted successfully and what steps did you take just prior to the boot failure. I see some antivirus program activity and a System Reset entry on 8-30. Did it fail to boot immediately following those steps?

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

BC AdBot (Login to Remove)

BleepingComputer.com
Register to remove ads

#32 cherm

Topic Starter

Members
94 posts
OFFLINE

Gender:Male
Local time:04:24 AM

Posted 07 September 2023 - 04:32 PM

I don't know exactly when I booted successfully last time.

I don't know for sure when did I boo successfully, I used to keep my pc active 24/7.

I believe it was during the last week of August.

#33 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:24 PM

Posted 07 September 2023 - 04:51 PM

Thank you.

Please attempt this.

===================================================

Farbar Recovery Scan Tool Fix From Installed Recovery Partition

--------------------

If necessary, download Farbar Recover Scan Tool for 64 bit systems and save it to a USB device
Download Fixlist.txt 22bytes 3 downloads and save it in the same USB device
Insert the USB device into your compromised computer
Holding down the Shift Key click Start, click the power icon, then select Reboot
Click Troubleshoot
Click Advanced options
Click Command Prompt
Type G:\FRST64.exe then hit Enter
Press Fix button
Reboot your computer
A fixlog.txt file will be saved on the USB drive. Please copy and paste it to your reply.
A $SysReset folder will hopefully be placed on the USB device
Please zip and upload the folder here

===================================================

Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.

Fixlog
Uploaded zip folder

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

#34 cherm

Topic Starter

Members
94 posts
OFFLINE

Gender:Male
Local time:04:24 AM

Posted 08 September 2023 - 04:18 AM

Fix result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023

Ran by SYSTEM (08-09-2023 12:10:55) Run:1

Running from G:\

Boot Mode: Recovery

==============================================

fixlist content:

*****************

Copy: C:\$SysReset G:\

*****************

================== "Copy: C:\$SysReset G:\" ===================

"C:\$SysReset\Scratch\csrss.exe" copied successfully

"C:\$SysReset\Logs\dism.log" copied successfully

"C:\$SysReset\Logs\PushButtonReset.etl" copied successfully

"C:\$SysReset\Logs\SessionID.xml" copied successfully

"C:\$SysReset\Logs\setupact.log" copied successfully

"C:\$SysReset\Logs\setuperr.log" copied successfully

"C:\$SysReset\Logs\Timestamp.xml" copied successfully

=== End of Copy: ===

==== End of Fixlog 12:10:56 ====

$SysReset folder was submitted

#35 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:24 PM

Posted 08 September 2023 - 08:22 AM

Thank you.

A System Reset was attempted on 2023-08-30 22:30. Did that occur before or after the computer was unbootable?

In addition, please run the below Fixlist as you did before and post the results.

Attached Files

Fixlist.txt 13bytes 5 downloads

Edited by Oh My!, 08 September 2023 - 09:48 AM.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

#36 cherm

Topic Starter

Members
94 posts
OFFLINE

Gender:Male
Local time:04:24 AM

Posted 08 September 2023 - 09:47 AM

I believe it was before the computer was unbootable.

#37 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:24 PM

Posted 08 September 2023 - 09:49 AM

Thank you.

Sorry, I just modified the previous post to have you run a Fixlist.

I suspect the attempted System Reset resulted in a corruption of the operating system. We just need to figure out what to do about it.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

#38 cherm

Topic Starter

Members
94 posts
OFFLINE

Gender:Male
Local time:04:24 AM

Posted 08 September 2023 - 01:59 PM

I"ll waited patiently for your instructions.

#39 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:24 PM

Posted 08 September 2023 - 07:03 PM

Thank you.

Please do this

===================================================

Farbar Recovery Scan Tool Fix From Installed Recovery Partition

--------------------

If necessary, download Farbar Recover Scan Tool for 64 bit systems and save it to a USB device
Download Fixlist.txt 20.55KB 1 downloads and save it in the same USB device
Insert the USB device into your compromised computer
Holding down the Shift Key click Start, click the power icon, then select Reboot
Click Troubleshoot
Click Advanced options
Click Command Prompt
Type G:\FRST64.exe then hit Enter
Press Fix button
Reboot your computer
A fixlog.txt file will be saved on the USB drive. Please copy and paste it to your reply.
Attempt to boot your computer into Normal or Safe Mode

Fixlog
Can you boot?

Edited by Oh My!, 09 September 2023 - 08:45 AM.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

#40 cherm

Topic Starter

Members
94 posts
OFFLINE

Gender:Male
Local time:04:24 AM

Posted 09 September 2023 - 02:31 AM

I tried to recover my memory as to my steps fighting the over production of new files.

1. I ran the following online antivirus programs: HouseCall, ESET, Malwarebyte and F-Secure, None identified the source of the problem/

2. I tried another program, I don't recall its name. The program suggested creating a Restore point, which sounded legitimate. Then it requested to uninstall 2 current antivirus programs' stating that they interfere with its functioning. Since I remember the McAfee asked the same act, I followed it.

Most probably this program created to booting problem. I can not the cause for the over productions of files.

#41 Oh My!

Adware and Spyware and Malware

Malware Response Instructor
55,541 posts
OFFLINE

Gender:Male
Location:California
Local time:06:24 PM

Posted 09 September 2023 - 07:34 AM

Thank you for the information. Make sure to run the steps in Post #39.

Gary

“Lord, to whom shall we go? You have the words of eternal life. We have come to believe and to know that you are the Holy One of God.”
Where to Start

#42 cherm

Topic Starter

Members
94 posts
OFFLINE

Gender:Male
Local time:04:24 AM

Posted 09 September 2023 - 08:54 AM

Fix result of Farbar Recovery Scan Tool (x64) Version: 28-08-2023

Ran by SYSTEM (09-09-2023 16:52:13) Run:2

Running from G:\

Boot Mode: Recovery

==============================================

fixlist content:

*****************

cmd: wmic qfe

cmd: type "C:\Windows\System32\Logfiles\Srt\SrtTrail.txt"

HKU\User\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

Task: {D791332B-4089-4697-B61A-2BFAD3DA3D5F} - System32\Tasks\Microsoft\Windows\InstallService\SmartRetry

Task: {132E87AF-BC2E-4C65-AD8A-16C732A3A076} - System32\Tasks\Avira_Antivirus_Systray => "C:\Program Files (x86)\Avira\Antivirus\avgnt.exe" /min (No File)

Task: {067C3245-A79E-497B-ABF7-D2D70D98C41B} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry

Task: {067C3245-A79E-497B-ABF7-D2D70D98C41B} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog

Task: {067C3245-A79E-497B-ABF7-D2D70D98C41B} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector

Task: {04F552BC-055E-4F20-9531-E5AB619F4C70} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [262024 2023-08-15] (Avira Operations GmbH -> Avira Operations GmbH)

Task: {C038F49D-0C13-4162-9DC5-B07826F0FD91} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1814672 2023-08-15] (Avira Operations GmbH -> Avira Operations GmbH)

Task: {9D8C5462-81A8-40FF-966A-460DBD434021} - System32\Tasks\Avira_Security_Update => C:\WINDOWS\system32\net.exe [81920 2022-05-06] (Microsoft Windows -> Microsoft Corporation)

Task: {5F43A270-3247-4E8C-94C9-433AD54CDD69} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [35381016 2023-03-31] (Avira Operations GmbH -> Avira Operations GmbH)

Task: {704EB81A-6813-4C0F-AE95-DC39CD45ED9D} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\27.0.1.259_0\WatchDog.exe [937000 2023-07-27] (Bitdefender SRL -> Bitdefender)

Task: {7FB9A476-EB83-41A8-82AD-5F28F3647B88} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe (No File)

Task: {0A3ADECE-74EE-465B-A257-D78C841DC213} - System32\Tasks\CCleanerSkipUAC - User => "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) (No File)

Task: {E20BD887-5588-429C-BE69-FA01597A3D86} - System32\Tasks\EOSv3 Scheduler onLogOn => D:\temp\scoped_dir4244_1181014593\esetonlinescanner.exe LOGON (No File) <==== ATTENTION

Task: {34967669-F2A1-4D02-B075-8DBAA8490580} - System32\Tasks\EOSv3 Scheduler onTime => D:\temp\scoped_dir4244_1181014593\esetonlinescanner.exe SCHED (No File) <==== ATTENTION

Task: {DB8639B3-ECEF-4AB0-86CD-BC1EBF0622EF} - System32\Tasks\GridinSoft Anti-Malware => C:\Program Files\GridinSoft Anti-Malware\gsam.exe [26792176 2023-08-28] (GRIDINSOFT, TOV -> Gridinsoft LLC)

Task: {1003759A-957F-4A92-BD44-3356D106F189} - System32\Tasks\klcp_update => "C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe" /verysilent /update /freq=30 (No File)

S2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3002640 2022-09-08] (Avira Operations GmbH -> Avira Operations GmbH)

S2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [266384 2023-08-15] (Avira Operations GmbH -> Avira Operations GmbH)

S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [297392 2023-08-15] (Avira Operations GmbH -> Avira Operations GmbH)

S2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [842264 2023-08-20] (Bitdefender SRL -> Bitdefender)

S2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [842264 2023-08-20] (Bitdefender SRL -> Bitdefender)

S2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [842264 2023-08-20] (Bitdefender SRL -> Bitdefender)

S2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2946088 2023-07-20] (Bitdefender SRL -> Bitdefender)

S2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2560552 2023-07-20] (Bitdefender SRL -> Bitdefender)

S2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [842264 2023-08-20] (Bitdefender SRL -> Bitdefender)

S2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [11147944 2023-08-29] (Avira Operations GmbH -> Avira Operations GmbH)

S3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [11147944 2023-08-29] (Avira Operations GmbH -> Avira Operations GmbH)

S2 SecurityService; C:\Program Files (x86)\TotalAV\SecurityService.exe [274584 2023-08-09] (Protected Antivirus Limited -> TotalAV) <==== ATTENTION

S2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [288792 2023-08-20] (Bitdefender SRL -> Bitdefender)

S2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [842264 2023-08-20] (Bitdefender SRL -> Bitdefender)

S3 CCleanerPerformanceOptimizerService; "C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe" [X]

S3 GoogleChromeElevationService; "C:\Program Files (x86)\Google\Chrome\Application\116.0.5845.112\elevation_service.exe" [X]

S2 MBAMService; "C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe" [X]

S3 OneDrive Updater Service; "C:\Program Files\Microsoft OneDrive\23.169.0813.0001\OneDriveUpdaterService.exe" [X]

S3 PrintNotify; C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll [X]

S1 atc; C:\Windows\System32\DRIVERS\atc.sys [6205488 2023-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)

S0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

S0 avelam; C:\Windows\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH & Co. KG)

S0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)

S2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [798128 2022-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)

S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [22976 2020-12-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)

S0 BdNet; C:\Windows\System32\DRIVERS\BdNet.sys [190712 2023-08-28] (Avira Operations GmbH -> Avira Operations GmbH)

S3 bdprivmon; C:\Windows\system32\DRIVERS\bdprivmon.sys [49200 2023-08-08] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender SRL)

S1 BdSentry; C:\Windows\System32\DRIVERS\BdSentry.sys [233560 2023-08-25] (Avira Operations GmbH -> Avira Operations GmbH)

S3 bduefiscan; C:\Windows\system32\DRIVERS\bduefiscan.sys [39840 2022-08-11] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)

S1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [1347496 2023-07-11] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)

S3 GridinSoftInetSecurityDriver; C:\Windows\system32\DRIVERS\gsInetSecurity.sys [107784 2023-08-28] (GridinSoft, LLC -> GridinSoft LLC)

S2 Ignisv2; C:\Windows\system32\DRIVERS\ignisv2.sys [165312 2023-08-06] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)

S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2022-04-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239544 2023-08-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S1 netprotection_network_filter; C:\Windows\System32\drivers\netprotection_network_filter.sys [114992 2023-08-18] (Avira Operations GmbH -> Avira Operations GmbH)

S0 rtp_elam; C:\Windows\System32\DRIVERS\rtp_elam.sys [28616 2023-08-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Avira Operations GmbH)

S1 rtp_filter; C:\Windows\System32\DRIVERS\rtp_filter.sys [357008 2023-08-28] (Avira Operations GmbH -> Avira Operations GmbH)

S1 rtp_traverse; C:\Windows\system32\DRIVERS\rtp_traverse.sys [41776 2023-08-28] (Avira Operations GmbH -> Avira Operations GmbH)

S1 webshieldfilter; C:\Windows\System32\drivers\webshieldfilter.sys [96264 2023-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Windows ® Win 7 DDK provider) <==== ATTENTION

S4 AndnetBus; \SystemRoot\System32\drivers\lgandnetbus64.sys [X]

S1 epp; \??\D:\DATA\Desktop\bin64\epp.sys [X]

S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X]

S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

UpperFilters: [{71A27CDD-812A-11D0-BEC7-08002BE2092F}] -> [volsnap avusbflt]

C:\Program Files\CCleaner

C:\Program Files (x86)\Avira

C:\WINDOWS\system32\net.exe

C:\Program Files\Bitdefender Agent

D:\temp

C:\Program Files\GridinSoft Anti-Malware

C:\Program Files\Bitdefender\Bitdefender Security

C:\Program Files\Avira

C:\Program Files (x86)\TotalAV

C:\Program Files\Malwarebytes

C:\Windows\System32\DRIVERS\atc.sys

C:\Windows\System32\DRIVERS\avdevprot.sys

C:\Windows\System32\drivers\avelam.sys

C:\Windows\System32\Drivers\avusbflt.sys

C:\Windows\system32\DRIVERS\bddci.sys

C:\Windows\System32\drivers\bdelam.sys

C:\Windows\System32\DRIVERS\BdNet.sys

C:\Windows\system32\DRIVERS\bdprivmon.sys

C:\Windows\System32\DRIVERS\BdSentry.sys

C:\Windows\system32\DRIVERS\bduefiscan.sys

C:\Windows\System32\DRIVERS\gemma.sys

C:\Windows\system32\DRIVERS\gsInetSecurity.sys

C:\Windows\system32\DRIVERS\ignisv2.sys

C:\Windows\System32\DRIVERS\MbamElam.sys

C:\Windows\System32\Drivers\mbamswissarmy.sys

C:\Windows\System32\drivers\netprotection_network_filter.sys

C:\Windows\System32\DRIVERS\rtp_elam.sys

C:\Windows\System32\DRIVERS\rtp_filter.sys

C:\Windows\system32\DRIVERS\rtp_traverse.sys

C:\Windows\System32\drivers\webshieldfilter.sys

2023-08-30 10:38 - 2023-08-30 10:38 - 000003322 _____ C:\Windows\System32\Tasks\GridinSoft Anti-Malware

2023-08-30 08:38 - 2023-08-18 01:24 - 000114992 _____ (Avira Operations GmbH) C:\Windows\System32\Drivers\netprotection_network_filter.sys

2023-08-30 08:37 - 2023-08-30 08:37 - 000000000 ____D C:\Program Files\Avira

2023-08-30 08:37 - 2023-08-28 20:31 - 000357008 _____ (Avira Operations GmbH) C:\Windows\System32\Drivers\rtp_filter.sys

2023-08-30 08:37 - 2023-08-28 20:31 - 000041776 _____ (Avira Operations GmbH) C:\Windows\System32\Drivers\rtp_traverse.sys

2023-08-30 08:37 - 2023-08-28 20:31 - 000028616 _____ (Avira Operations GmbH) C:\Windows\System32\Drivers\rtp_elam.sys

2023-08-30 08:37 - 2023-08-28 01:54 - 000190712 _____ (Avira Operations GmbH) C:\Windows\System32\Drivers\BdNet.sys

2023-08-30 08:37 - 2023-08-25 02:47 - 000233560 _____ (Avira Operations GmbH) C:\Windows\System32\Drivers\BdSentry.sys

2023-08-30 08:33 - 2023-08-30 08:33 - 000705300 _____ C:\ProgramData\cl.1693412566.bdinstall.v2.bin

2023-08-30 08:33 - 2023-08-30 08:33 - 000118388 _____ C:\ProgramData\cl.kit.1693412562.bdinstall.v2.bin

2023-08-30 08:32 - 2023-08-30 08:32 - 000000000 ____D C:\ProgramData\Gemma

2023-08-30 08:32 - 2023-08-30 08:32 - 000000000 ____D C:\ProgramData\Atc

2023-08-30 08:31 - 2023-08-30 08:31 - 000090164 _____ C:\ProgramData\agent.update.1693413084.bdinstall.v2.bin

2023-08-30 08:29 - 2023-08-30 08:33 - 000000000 ____D C:\ProgramData\BDLogging

2023-08-30 08:29 - 2023-08-30 08:29 - 000002378 _____ C:\Users\Public\Desktop\Bitdefender.lnk

2023-08-30 08:29 - 2023-08-30 08:29 - 000000000 ____D C:\Windows\System32\elambkup

2023-08-30 08:29 - 2020-12-17 15:33 - 000022976 _____ (Bitdefender) C:\Windows\System32\Drivers\bdelam.sys

2023-08-30 08:28 - 2023-08-30 08:28 - 000000000 ____D C:\Users\User\AppData\Roaming\Bitdefender Security App

2023-08-30 08:28 - 2023-08-09 23:08 - 006205488 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\Windows\System32\Drivers\atc.sys

2023-08-30 08:28 - 2023-08-08 21:27 - 000049200 _____ (Bitdefender SRL) C:\Windows\System32\Drivers\bdprivmon.sys

2023-08-30 08:28 - 2023-07-11 23:27 - 001347496 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\Windows\System32\Drivers\gemma.sys

2023-08-30 08:28 - 2022-12-07 07:14 - 000633248 _____ (Bitdefender) C:\Windows\System32\Drivers\Trufos.sys

2023-08-30 08:28 - 2022-09-29 03:18 - 000798128 _____ (Bitdefender) C:\Windows\System32\Drivers\bddci.sys

2023-08-30 08:28 - 2022-08-11 20:56 - 000039840 _____ (Bitdefender) C:\Windows\System32\Drivers\bduefiscan.sys

2023-08-30 08:27 - 2023-08-30 08:27 - 000000000 ____D C:\Users\User\AppData\Roaming\Bitdefender

2023-08-30 08:27 - 2023-08-30 08:27 - 000000000 ____D C:\ProgramData\Bitdefender

2023-08-30 08:27 - 2023-08-30 08:27 - 000000000 ____D C:\Program Files\Bitdefender

2023-08-30 08:27 - 2023-08-06 16:19 - 000165312 _____ (Bitdefender) C:\Windows\System32\Drivers\ignisv2.sys

2023-08-30 08:23 - 2023-08-30 08:31 - 000003854 _____ C:\Windows\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864

2023-08-30 08:22 - 2023-03-17 08:25 - 000522136 _____ (Bitdefender) C:\Windows\System32\Drivers\vlflt.sys

2023-08-30 08:21 - 2023-08-30 08:31 - 000000000 ____D C:\Program Files\Bitdefender Agent

2023-08-30 08:21 - 2023-08-30 08:21 - 000142132 _____ C:\ProgramData\agent.1693412509.bdinstall.v2.bin