01✓ ready
AppData Scanner
Sweeps Roaming/Local AppData by keyword for configs, logs and cheat remnants.
Step 01 · Automatic
14 scanners,
one click.
Hit START SCAN and Custos runs every scanner below in parallel, each reporting its own progress. Green means clean; a red count means findings to expand and review.
02✓ ready
Prefetch Scanner
Reads the Windows Prefetch folder — traces of every program ever executed.
03✓ ready
Recent Files Scanner
Lists recently accessed files to reveal what the user actually opened.
04✓ ready
Game Folder Scanner
Inspects game install directories for injected or foreign files.
05✓ ready
Registry Scanner
Keyword search across MuiCache, AppSwitched, ShowJumpView and more.
06✓ ready
Browser History Scanner
Deep search of browser history and caches against cheat keywords.
07✓ ready
Process Scanner
Enumerates running processes with full paths and command lines.
08✓ ready
Steam Scanner
Checks Steam accounts and associated folders for tampering.
09✓ ready
Amcache Scanner
Parses Amcache — the system journal of program execution history.
10✓ ready
BAM / DAM Scanner
Reads the Background Activity Moderator, a second execution-history source.
11✓ ready
Shellbags Scanner
Analyzes Shellbags — Windows records of every folder accessed.
12✓ ready
DNS Cache Scanner
Scans the DNS cache for suspicious domains, with 12+ locale support.
13✓ ready
Scheduled Tasks Scanner
Audits scheduled tasks cheats abuse for auto-start persistence.
14✓ ready
VM Scanner
Detects virtual machines and sandbox environments — a serious red flag.
▸ Results export to custos-scan-YYYY-MM-DD.txt — but the auto-scan never finds everything. The manual check is mandatory.