Could you run FRST from safe mode please as it will grab a bit more data