start CreateRestorePoint: R1 SAVOnAccess; C:\WINDOWS\System32\DRIVERS\savonaccess.sys [161024 2015-12-02] (Sophos Limited) R1 swi_callout; C:\WINDOWS\system32\DRIVERS\swi_callout.sys [47760 2016-09-13] (Sophos Limited) 2017-06-29 18:34 - 2017-06-29 18:34 - 00496128 _____ C:\Users\MuYbJeN\Desktop\SpyHunterCleaner_1.05.exe 2017-06-28 21:23 - 2017-06-28 21:23 - 00114319 _____ C:\spyhunter.fix 2017-06-28 21:23 - 2017-06-27 20:43 - 00008192 _____ C:\shldr.mbr 2017-06-28 21:23 - 2010-03-11 15:17 - 00185835 _____ C:\shldr 2017-06-28 21:05 - 2017-06-29 18:31 - 00000000 ____D C:\WINDOWS\9E897D0FF80441A3966C7BB6EB5B6BE8.TMP 2017-06-27 20:18 - 2017-06-27 20:10 - 01222144 _____ C:\Users\MuYbJeN\Desktop\RSITx64.exe 2017-06-27 20:11 - 2017-06-27 20:12 - 00000000 ____D C:\rsit 2017-06-26 22:04 - 2017-06-26 22:04 - 00000000 ____D C:\Users\MuYbJeN\AppData\Roaming\AVG 2017-06-26 22:03 - 2017-06-26 22:03 - 00000000 ____D C:\Users\MuYbJeN\AppData\Local\AvgSetupLog 2017-06-26 21:59 - 2017-06-26 22:07 - 00000000 ____D C:\AVG_Remover 2017-06-26 22:00 - 2015-05-23 11:07 - 00000000 ____D C:\Users\MuYbJeN\AppData\Local\Avg 2017-06-26 21:31 - 2016-01-13 17:24 - 00000000 ____D C:\Program Files (x86)\Sophoss C:\WINDOWS\System32\DRIVERS\savonaccess.sys C:\WINDOWS\system32\DRIVERS\swi_callout.sys HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service" Reboot: end