The additional detections in the second scan are not because the driver downloaded more stuff, but because you had the archive scan disabled. All the detections were found within archives or containers. The "->" in the object names means the detection was within a file embedded in that file
Ok, I have to say that I don't like Mrizos and his videos... He is in this 'business" for a long time and he still acts like a noob in some situations...