Logfile of HiJackThis+ build 2025-01-16 Beta v.3.4.0.17
Platform: x64 Windows 11 (Pro), 10.0.22631.4317 (ReleaseId: 2009, 23H2), Service Pack: 0
Time: 30.07.2025 - 18:54 (UTC+03:00)
Language: OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Memory: 24,25 GiB Free / 32. Loading RAM (23 %), CPU (1 %)
Disk C: 17,24 GiB Free / 465 (SSD, GPT)
Elevated: Yes
Ran by: duran (group: Administrators; type: Microsoft) on FIRSTD02, FirstRun: yes
Chrome: 138.0.7204.183
Firefox: 141.0.0.299
Internet Explorer: 11.0.22621.3527
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)
Boot mode: Normal (Secure Boot: On) (Code Integrity: On)
Running processes:
Number | Path
1 C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
1 C:\Program Files (x86)\CoolerMaster\MasterPlus\MPService.exe
2 C:\Program Files (x86)\GlassWire\GWCrashpadHandler.exe
1 C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
1 C:\Program Files (x86)\GlassWire\GWIdlMon.exe
1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22\avp.exe
1 C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22\avpui.exe
6 C:\Program Files (x86)\Microsoft\EdgeWebView\Application\138.0.3351.109\msedgewebview2.exe
1 C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe
1 C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe
1 C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
1 C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe
1 C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
1 C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Engine.exe
1 C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe
1 C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
1 C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
1 C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
1 C:\Program Files\AMD\CNext\CNext\amdow.exe
1 C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
1 C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
1 C:\Program Files\AMD\CNext\CNext\cncmd.exe
1 C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
1 C:\Program Files\Bonjour\mDNSResponder.exe
1 C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
1 C:\Program Files\Google\Play Games Services\25.7.678.0\Service\data\windows.assets\crashpad_handler.exe
1 C:\Program Files\Google\Play Games Services\25.7.678.0\Service\GooglePlayGamesServices.exe
7 C:\Program Files\LM Studio\LM Studio.exe
1 C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
1 C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
1 C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
1 C:\Program Files\Riot Vanguard\vgtray.exe
1 C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe
1 C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe
1 C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2528.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
1 C:\Program Files\WindowsApps\Microsoft.Copilot_1.25064.139.0_x64__8wekyb3d8bbwe\Copilot.exe
1 C:\Program Files\WindowsApps\Microsoft.GamingServices_29.103.2001.0_x64__8wekyb3d8bbwe\gamingservices.exe
1 C:\Program Files\WindowsApps\Microsoft.GamingServices_29.103.2001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
1 C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.9.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe
1 C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25061.51.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
1 C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.15301.20.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe
1 C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25062.30.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
1 C:\Program Files\WindowsApps\MSTeams_25185.410.3812.8024_x64__8wekyb3d8bbwe\ms-teams.exe
1 C:\Program Files\Windscribe\WindscribeService.exe
1 C:\Program Files\WSL\wslservice.exe
1 C:\Users\duran\Desktop\HiJackThis.exe
1 C:\Windows\explorer.exe
1 C:\Windows\System32\AggregatorHost.exe
1 C:\Windows\System32\audiodg.exe
1 C:\Windows\System32\backgroundTaskHost.exe
1 C:\Windows\System32\cmd.exe
6 C:\Windows\System32\conhost.exe
2 C:\Windows\System32\csrss.exe
1 C:\Windows\System32\ctfmon.exe
1 C:\Windows\System32\dasHost.exe
1 C:\Windows\System32\dllhost.exe
1 C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrsr.exe
1 C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_2e5ec3779d1804d1\AmdPpkgSvc.exe
2 C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_32b266092fc6592d\RtkAudUService64.exe
1 C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\atieclxx.exe
1 C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\atiesrxx.exe
1 C:\Windows\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe
1 C:\Windows\System32\dwm.exe
2 C:\Windows\System32\fontdrvhost.exe
1 C:\Windows\System32\LsaIso.exe
1 C:\Windows\System32\lsass.exe
1 C:\Windows\System32\OpenSSH\ssh-agent.exe
6 C:\Windows\System32\RuntimeBroker.exe
1 C:\Windows\System32\SearchFilterHost.exe
1 C:\Windows\System32\SearchIndexer.exe
1 C:\Windows\System32\SearchProtocolHost.exe
1 C:\Windows\System32\SecurityHealthService.exe
1 C:\Windows\System32\SecurityHealthSystray.exe
1 C:\Windows\System32\services.exe
1 C:\Windows\System32\sihost.exe
1 C:\Windows\System32\smartscreen.exe
1 C:\Windows\System32\smss.exe
1 C:\Windows\System32\spoolsv.exe
89 C:\Windows\System32\svchost.exe
2 C:\Windows\System32\taskhostw.exe
1 C:\Windows\System32\vmcompute.exe
1 C:\Windows\System32\vmms.exe
1 C:\Windows\System32\wbem\unsecapp.exe
2 C:\Windows\System32\wbem\WmiPrvSE.exe
1 C:\Windows\System32\wininit.exe
1 C:\Windows\System32\winlogon.exe
1 C:\Windows\System32\wlanext.exe
2 C:\Windows\System32\WUDFHost.exe
1 C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
1 C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
1 C:\Windows\SysWOW64\vmnat.exe
1 C:\Windows\SysWOW64\vmnetdhcp.exe
2 C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
1 C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxyServer] = hxxp://192.168.56.36:8080 (disabled)
O1 - Hosts: ::1 localhost
O1 - Hosts.ICS: 172.26.80.1 firstd02.mshome.net # 2030 7 1 29 15 50 5 932
O1 - Hosts.ICS: 2 53 3 508
O1 - Hosts.ICS: 192.168.137.221 M2101K7BG.mshome.net # 2024 2 5 2 17 23 18 649
O1 - Hosts.ICS: 9
O2-32 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_461\bin\jp2ssv.dll (sign: 'Oracle America, Inc.')
O2-32 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_461\bin\ssv.dll (sign: 'Oracle America, Inc.')
O4 - ActiveSetup: HKLM\..\{8A69D345-D564-463c-AFF1-A69D9E530F96}: [StubPath] = C:\Program Files\Google\Chrome\Application\138.0.7204.183\Installer\chrmstp.exe --configure-user-settings --verbose-logging --system-level --channel=stable (sign: 'Google LLC')
O4 - HKCU\..\Run: [AMDNoiseSuppression] = C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe (sign: 'Advanced Micro Devices Inc.')
O4 - HKCU\..\Run: [electron.app.LM Studio] = C:\Program Files\LM Studio\LM Studio.exe --run-as-service (not signed - LM Studio - E0A4287A3F38EC4719D93799C70008DB90B604B7)
O4 - HKCU\..\Run: [Free Download Manager] = C:\Program Files\Softdeluxe\Free Download Manager\fdm.exe --hidden (not signed - Softdeluxe - 2EA071D6886E09DBD50498BEECBFA8D7BCCE8F65)
O4 - HKCU\..\StartupApproved\Run: [GlassWire] = C:\Program Files (x86)\GlassWire\glasswire.exe -hide (2023/08/09) (sign: 'domotz inc')
O4 - HKCU\..\StartupApproved\Run: [GogGalaxy] = C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe /launchViaAutoStart (2025/06/19) (sign: 'GOG sp. z o.o')
O4 - HKCU\..\StartupApproved\Run: [MicrosoftEdgeAutoLaunch_ADA3995E402FD8A06C905217FB4320B5] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --win-session-start (2023/08/04) (sign: 'Microsoft')
O4 - HKCU\..\StartupApproved\Run: [RiotClient] = H:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (2024/02/08) (sign: 'Riot Games, Inc.')
O4 - HKCU\..\StartupApproved\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent (2023/08/06) (sign: 'Valve Corp.')
O4 - HKLM\..\Run: [Riot Vanguard] = C:\Program Files\Riot Vanguard\vgtray.exe (sign: 'Riot Games, Inc.')
O4 - HKLM\..\Run: [RtkAudUService] = C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_32b266092fc6592d\RtkAudUService64.exe -background (sign: 'Realtek Semiconductor Corp.')
O4 - HKLM\..\Session Manager: [BootExecute] = C:\Windows\system32\autochk.exe /k:C * (sign: 'Microsoft')
O4 - HKLM\..\StartupApproved\Run: [mutectl] = C:\Program Files\ASTER\mutectl.exe -autostart (2024/03/27) (sign: 'IBIK LLC')
O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2023/08/04) (sign: 'Oracle America, Inc.')
O4 - HKU\S-1-5-18\..\Run: [AMDNoiseSuppression] = C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe (User 'LocalSystem') (sign: 'Advanced Micro Devices Inc.')
O4 - HKU\S-1-5-18\..\Run: [GlassWire] = C:\Program Files (x86)\GlassWire\glasswire.exe -hide (User 'LocalSystem') (sign: 'domotz inc')
O4 - HKU\S-1-5-18\..\RunOnce: [StartRSX] = C:\Program Files\AMD\CNext\CNext\LauncherRSXRuntime.exe (User 'LocalSystem') (sign: 'Advanced Micro Devices')
O4 - HKU\S-1-5-19\..\Run: [OneDriveSetup] = C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'Local service') (sign: 'Microsoft')
O4 - HKU\S-1-5-20\..\Run: [OneDriveSetup] = C:\Windows\System32\OneDriveSetup.exe /thfirstsetup (User 'Network service') (sign: 'Microsoft')
O7 - Policy: HKLM\Software\Microsoft\Windows Defender: [DisableAntiSpyware] = 1
O7 - Policy: HKLM\Software\Microsoft\Windows Defender: [DisableAntiVirus] = 1
O8 - Context menu item: HKCU\..\Internet Explorer\MenuExt\Se&nd to OneNote: (default) = C:\Program Files\Microsoft Office\root\Office16\ONBttnIE.dll (file missing)
O10 - Unknown file in Winsock LSP: C:\Program Files (x86)\Bonjour\mdnsNSP.dll (sign: 'Apple Inc.')
O17 - DHCP DNS 1: 1.1.1.1 (Well-known DNS: Cloudflare / APNIC)
O17 - DHCP DNS 2: 1.0.0.1 (Well-known DNS: Cloudflare / APNIC)
O17 - DHCP DNS 3: 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{0b4ef953-fcd2-41ba-a063-0774af3baca6}: [NameServer] = 1.0.0.1 (Well-known DNS: Cloudflare / APNIC)
O17 - HKLM\System\CCS\Services\Tcpip\..\{0b4ef953-fcd2-41ba-a063-0774af3baca6}: [NameServer] = 1.1.1.1 (Well-known DNS: Cloudflare / APNIC)
O18 - HKLM\Software\Classes\Protocols\Filter\application/octet-stream: [CLSID] = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - (no file)
O18 - HKLM\Software\Classes\Protocols\Filter\application/x-complus: [CLSID] = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - (no file)
O18 - HKLM\Software\Classes\Protocols\Filter\application/x-msdownload: [CLSID] = {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - (no file)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe (sign: 'Microsoft')
O22 - Task: (damaged) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\S-1-5-21-3950082741-2458409774-1106530551-1001\EnterpriseMgmt (empty)
O22 - Tasks: (disabled) \Microsoft\Office\Office Actions Server - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\ActionsServer\ActionsServer.exe availabilitycheck (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical - {613FBA38-A3DF-4AB8-9674-5604984A299A},/RuntimeWide - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical - {DE434264-8FE9-4C0B-A83B-89EBEEBFF78E},/RuntimeWide - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\AppxDeploymentClient\AppInstallerUpdater - C:\Windows\system32\rundll32.exe C:\Windows\system32\AppxDeploymentClient.dll,ScheduleAppInstallerBackgroundUpdate (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Clip\LicenseImdsIntegration - C:\Windows\system32\fclip.exe (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Flighting\FeatureConfig\BootstrapUsageDataReporting - {D759C938-B375-41CB-A2A2-E6D866A767F4} - C:\Windows\System32\fcon.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\Windows\System32\Autopilot.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\Windows\System32\Autopilot.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup - C:\Windows\system32\MdmDiagnosticsTool.exe /clean (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Shell\ThemeAssetTask_SyncFODState - {3BC5DD7D-EA3B-428C-B9B6-0723DB6A1057} - C:\Windows\System32\Windows.UI.Immersive.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\WaaSMedic\DeferredWork - {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32},DeferralWork - C:\Windows\System32\WaaSMedicSvc.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) SamsungMagician - C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe --disable-gpu-sandbox /AUTOHIDE (sign: 'Samsung Electronics Co., Ltd.')
O22 - Tasks: (telemetry) \Microsoft\Office\Office Performance Monitor - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:aeinv.dll -f:UpdateSoftwareInventoryW invsvc (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:aemarebackup.dll -f:BackupMareData (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\MareBackup - C:\Windows\system32\compattelrunner.exe -m:appraiser.dll -f:DoScheduledTelemetryRun (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\sc.exe start InventorySvc (sign: '')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\PcaWallpaperAppDetect - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaWallpaperAppDetect (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\SdbinstMergeDbTask - C:\Windows\system32\sdbinst.exe -mm (sign: 'Microsoft')
O22 - Tasks: \GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{104BBDE2-86C3-4655-8D16-1689110FEB39} - C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe --wake --system (sign: 'Google LLC')
O22 - Tasks: \Microsoft\Office\Office Background Push Maintenance - C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe /pushregistration (sign: 'Microsoft')
O22 - Tasks: \Microsoft\Office\Office Serviceability Manager - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe /checkin (sign: 'Microsoft')
O22 - Tasks: \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 - {84F0FAE1-C27B-4F6F-807B-28CF6F96287D},/RuntimeWide - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (sign: 'Microsoft')
O22 - Tasks: \Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 - {429BC048-379E-45E0-80E4-EB1977941B5C},/RuntimeWide - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngentasklauncher.dll (sign: 'Microsoft')
O22 - Tasks: \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker - C:\Windows\system32\MusNotification.exe (file missing)
O22 - Tasks: \Mozilla\Firefox Background Update S-1-5-21-3950082741-2458409774-1106530551-1001 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate (sign: 'Mozilla Corporation')
O22 - Tasks: \Mozilla\Firefox Background Update S-1-5-21-3950082741-2458409774-1106530551-1004 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate (sign: 'Mozilla Corporation')
O22 - Tasks: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (sign: 'Mozilla Corporation')
O22 - Tasks: AMD Install Manager - Check For Updates - C:\Program Files\AMD\AMDInstallManager\AMDInstallManager.exe -CheckForUpdates (sign: 'Advanced Micro Devices')
O22 - Tasks: AMDInstallUEP - C:\Program Files\AMD\InstallUEP\AMDInstallUEP.exe (file missing)
O22 - Tasks: AMDRyzenMasterSDKTask - C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe (sign: 'Advanced Micro Devices')
O22 - Tasks: FanControl - C:\FanControl\FanControl.exe (not signed - Rémi Mercier - 09963443D8FFBDD6E879F4992ACEF4DB9DDB6FE9)
O22 - Tasks: FreeDownloadManagerHelperService - C:\Program Files\Softdeluxe\Free Download Manager\helperservice.exe (not signed - Softdeluxe - 01799AB981BC716DCA62356CBA194843C0B1323D)
O22 - Tasks: Google Play Games Notifier - C:\Program Files\Google\Play Games\Bootstrapper.exe /bg (sign: 'Google LLC')
O22 - Tasks: HidHide_Updater - C:\Program Files\Nefarius Software Solutions\HidHide\HidHide_Updater.exe /silent (sign: 'Nefarius Software Solutions e.U.')
O22 - Tasks: Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} - C:\Program Files\Common Files\AV\Kaspersky\upgrade.exe /waitUpgrade (sign: 'AO Kaspersky Lab')
O22 - Tasks: ModifyLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe -UpdateCurrentUser (sign: 'Advanced Micro Devices')
O22 - Tasks: PostponeDeviceSetupToast_S-1-5-21-3950082741-2458409774-1106530551-1004_17 - {5ded83ef-1e99-48cf-bf83-676d2a6db408},PostponeDeviceSetupToast - C:\Windows\System32\oobe\UserOOBE.dll (file missing)
O22 - Tasks: StartCN - C:\Program Files\AMD\CNext\CNext\cncmd.exe startwithdelay (sign: 'Advanced Micro Devices')
O22 - Tasks: StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd.exe (sign: 'Advanced Micro Devices')
O23 - Service R2: AMD Crash Defender Service - C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrsr.exe (sign: 'Microsoft')
O23 - Service R2: AMD External Events Utility - C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\atiesrxx.exe (sign: 'Advanced Micro Devices')
O23 - Service R2: AMD Provisioning Packages Service - (AmdPpkgSvc) - C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_2e5ec3779d1804d1\AmdPpkgSvc.exe (sign: 'Advanced Micro Devices')
O23 - Service R2: Bonjour Service - C:\Program Files\Bonjour\mDNSResponder.exe (sign: 'Apple Inc.')
O23 - Service R2: CMigrationService - C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe (sign: 'Samsung Electronics Co., Ltd.')
O23 - Service R2: CoolerMaster MasterPlus Technology Service - (MPService) - C:\Program Files (x86)\CoolerMaster\MasterPlus\MPService.exe (not signed - no company - BE3336C2837F8D76A2C8BE542FF16963BE817356)
O23 - Service R2: DtsHPXV2Apo4Service - C:\Windows\System32\DTS\HP\APO4x\DtsHPXV2Apo4Service.exe (sign: 'HP Inc.')
O23 - Service R2: Gaming Services - (GamingServices) - C:\Program Files\WindowsApps\Microsoft.GamingServices_29.103.2001.0_x64__8wekyb3d8bbwe\GamingServices.exe (sign: 'Microsoft')
O23 - Service R2: Gaming Services - (GamingServicesNet) - C:\Program Files\WindowsApps\Microsoft.GamingServices_29.103.2001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe (sign: 'Microsoft')
O23 - Service R2: GlassWire Control Service - (GlassWire) - C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (sign: 'domotz inc')
O23 - Service R2: Google Play Games Services (25.7.678.0) - (GooglePlayGamesServices-25.7.678.0) - C:\Program Files\Google\Play Games Services\25.7.678.0\Service\GooglePlayGamesServices.exe (sign: 'Google LLC')
O23 - Service R2: Kaspersky Hizmeti 21.22 - (AVP21.22) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22\avp.exe -r (sign: 'Microsoft')
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (sign: 'Malwarebytes Inc') (+safe mode)
O23 - Service R2: MSI Center Service - (MSI_Center_Service) - C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe (sign: 'MICRO-STAR INTERNATIONAL CO., LTD.')
O23 - Service R2: MSI Voice Control Service - (MSI_VoiceControl_Service) - C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe (sign: 'MICRO-STAR INTERNATIONAL CO., LTD.')
O23 - Service R2: MSI_Case_Service - C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe (sign: 'MICRO-STAR INTERNATIONAL CO., LTD.')
O23 - Service R2: muteprx - C:\Windows\System32\svchost.exe -k mute; "ServiceDll" = C:\ProgramData\Asvp\muteprx.dll (not signed - no company - 988C044C4B5AFA2BC22ACA85E028EDF231E610BA)
O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_32b266092fc6592d\RtkAudUService64.exe (sign: 'Realtek Semiconductor Corp.')
O23 - Service R2: SamsungMagicianSVC - C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe (sign: 'Samsung Electronics Co., Ltd.')
O23 - Service R2: VMware Authorization Service - (VMAuthdService) - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe (sign: 'VMware, Inc.')
O23 - Service R2: VMware DHCP Service - (VMnetDHCP) - C:\Windows\SysWOW64\vmnetdhcp.exe (sign: 'VMware, Inc.')
O23 - Service R2: VMware NAT Service - C:\Windows\SysWOW64\vmnat.exe (sign: 'VMware, Inc.')
O23 - Service R2: VMware USB Arbitration Service - (VMUSBArbService) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe (sign: 'VMware Inc.')
O23 - Service R2: Windscribe Service - (WindscribeService) - C:\Program Files\Windscribe\WindscribeService.exe (sign: 'Windscribe Limited')
O23 - Service R2: WSL Service - (WSLService) - C:\Program Files\WSL\wslservice.exe (sign: 'Microsoft')
O23 - Service S2: AMD Application Compatibility Database Service - (AmdAppCompatSvc) - C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompatSvc.exe (sign: 'Advanced Micro Devices')
O23 - Service S2: filec service - (filec) - C:\Program Files\FileCentipede\lib\filec.exe service (file missing)
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc (sign: 'Google LLC')
O23 - Service S2: Google Güncelleyici Dahili Hizmeti (GoogleUpdaterInternalService140.0.7273.0) - (GoogleUpdaterInternalService140.0.7273.0) - C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe --system --windows-service --service=update-internal (sign: 'Google LLC')
O23 - Service S2: Google Güncelleyici Hizmeti (GoogleUpdaterService140.0.7273.0) - (GoogleUpdaterService140.0.7273.0) - C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe --system --windows-service --service=update (sign: 'Google LLC')
O23 - Service S3: AntiCheatExpert Protection - C:\Program Files\AntiCheatExpert\ACE-Service64.exe -autorun (sign: 'ACEVILLE PTE LTD')
O23 - Service S3: AntiCheatExpert Service - C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe -autorun (sign: 'ACEVILLE PTE LTD')
O23 - Service S3: BattlEye Service - (BEService) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe (sign: 'BattlEye Innovations e.K.')
O23 - Service S3: Docker Desktop Service - (com.docker.service) - C:\Program Files\Docker\Docker\com.docker.service (sign: 'Docker Inc')
O23 - Service S3: EAAntiCheatService - C:\Program Files\EA\AC\eaanticheat.gameservice.exe (sign: 'Electronic Arts, Inc.')
O23 - Service S3: EABackgroundService - C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (sign: 'Electronic Arts, Inc.')
O23 - Service S3: Easy Anti-Cheat (Epic Online Services) - (EasyAntiCheat_EOS) - C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe (sign: 'EasyAntiCheat Oy')
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe (sign: 'EasyAntiCheat Oy')
O23 - Service S3: Epic Games Updater - (EpicGamesUpdater) - C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe (sign: 'Epic Games Inc.')
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe (sign: 'Epic Games Inc.')
O23 - Service S3: FACEITService - C:\Program Files\FACEIT AC\faceitservice.exe (sign: 'ESL Gaming GmbH')
O23 - Service S3: FDGMonitorService - C:\Program Files\FlydigiSpaceStation\Service\GameControllerService.exe (not signed - no company - 08C1605C2F0874E5D0ABBEE4D6496CB02AA9E6C1)
O23 - Service S3: Futuremark SystemInfo Service - C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe (sign: 'Underwriters Laboratories Inc.')
O23 - Service S3: GalaxyClientService - C:\\?\C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe (file missing)
O23 - Service S3: GalaxyCommunication - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe (sign: 'GOG sp. z o.o')
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\138.0.7204.183\elevation_service.exe (sign: 'Google LLC')
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc (sign: 'Google LLC')
O23 - Service S3: Kaspersky Volume Shadow Copy Service Bridge 21.22 - (klvssbridge64_21.22) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22\x64\vssbridge64.exe (sign: 'AO Kaspersky Lab')
O23 - Service S3: MBVpnTunnelService - C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe (sign: 'Malwarebytes Inc.')
O23 - Service S3: Microsoft Defender Çekirdek Hizmeti - (MDCoreSvc) - C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25060.7-0\MpDefenderCoreService.exe (sign: 'Microsoft')
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (sign: 'Mozilla Corporation')
O23 - Service S3: RedKard_Rooster - C:\ProgramData\RedKard\Splitgate 2\bin\anticheat.x64.redkard.exe (sign: '1047 Games, Inc.')
O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe (sign: 'Rockstar Games, Inc.')
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice.exe /RunAsService (sign: 'Valve Corp.')
O23 - Service S3: Sunshine Service - (SunshineService) - C:\Program Files\Sunshine\tools\sunshinesvc.exe (not signed - no company - 6ADA4C9F65250C2014E4DEDEEA3A96526EECF72A)
O23 - Service S3: Uncheater for BattleGrounds_GL - (ucldr_battlegrounds_gl) - C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe (sign: 'Wellbia.com Co., Ltd.')
O23 - Service S3: vgc - C:\Program Files\Riot Vanguard\vgc.exe (sign: 'Riot Games, Inc.')
O23 - Service S3: Visual Studio Installer Elevation Service - (VSInstallerElevationService) - C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe (sign: 'Microsoft')
O23 - Service S3: Zakynthos Service - (zksvc) - C:\Program Files\Common Files\PUBG\zksvc.exe (sign: 'KRAFTON, Inc.')
O23 - Driver R0: AMD PSP Service - (amdpsp) - C:\Windows\System32\drivers\amdpsp.sys (sign: 'Advanced Micro Devices')
O23 - Driver R0: AO Kaspersky Lab Cryptographic Module x64 (56 bit) - (cm_km) - C:\Windows\system32\DRIVERS\cm_km.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: klupd_K4W-21-22_arkmon - C:\Windows\System32\Drivers\klupd_K4W-21-22_arkmon.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: klupd_K4W-21-22_klbg - C:\Windows\System32\Drivers\klupd_K4W-21-22_klbg.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: VMware VMCI Bus Driver - (vmci) - C:\Windows\System32\drivers\vmci.sys (+safe mode) (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver R0: vSockets Virtual Machine Communication Interface Sockets driver - (vsock) - C:\Windows\system32\DRIVERS\vsock.sys (+safe mode) (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver R1: FACEIT - C:\Program Files\FACEIT AC\FACEIT_AC.sys (sign: 'Microsoft' - no company)
O23 - Driver R1: GHAXM - (googlehaxm) - C:\Windows\system32\drivers\GoogleHaxm.sys (sign: 'Microsoft' - Google)
O23 - Driver R1: GlassWire Generic Driver - (gwdrv) - C:\Windows\System32\drivers\gwdrv.sys (+safe mode) (sign: 'Microsoft' - Domotz Inc)
O23 - Driver R1: Kaspersky Anti-Virus NDIS 6 Filter - (klim6) - C:\Windows\system32\DRIVERS\klim6.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Driver.K4W-21-22 - (KLIF.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klif.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab format recognizer driver.K4W-21-22 - (klpd.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klpd.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Kernel DLL.K4W-21-22 - (klflt.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klbackupdisk.K4W-21-22 - (klbackupdisk.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klbackupdisk.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klbackupflt.K4W-21-22 - (klbackupflt.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klbackupflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab KLKBDFLT.K4W-21-22 - (klkbdflt.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klkbdflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klpnpflt.K4W-21-22 - (klpnpflt.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klpnpflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Security Extender Driver.K4W-21-22 - (klgse.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klgse.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab service driver.K4W-21-22 - (klhk.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klhk.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: kldisk.K4W-21-22 - C:\Windows\system32\DRIVERS\K4W-21-22\kldisk.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: klwtp.K4W-21-22 - C:\Windows\system32\DRIVERS\K4W-21-22\klwtp.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: kneps.K4W-21-22 - C:\Windows\system32\DRIVERS\K4W-21-22\kneps.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Nefarius Virtual Gamepad Emulation Service - (ViGEmBus) - C:\Windows\System32\drivers\ViGEmBus.sys (sign: 'Microsoft' - Nefarius Software Solutions e.U.)
O23 - Driver R2: AMDRyzenMasterDriverV22 - C:\Program Files\AMD\RyzenMasterSDK\bin\AMDRyzenMasterDriver.sys (sign: 'Advanced Micro Devices Inc.')
O23 - Driver R2: AMDRyzenMasterDriverV28 - C:\Windows\system32\AMDRyzenMasterDriver.sys (sign: 'Advanced Micro Devices')
O23 - Driver R2: MBAMChameleon - (mbamchameleon) - C:\Windows\System32\Drivers\MbamChameleon.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R2: RtsUapx Driver - (RtsUapx) - C:\Windows\system32\drivers\RtsUapx.sys (sign: 'Realtek Semiconductor Corp.')
O23 - Driver R2: VMware Bridge Protocol - (VMnetBridge) - C:\Windows\system32\DRIVERS\vmnetbridge.sys (+safe mode) (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver R2: VMware hcmon - (hcmon) - C:\Windows\system32\DRIVERS\hcmon.sys (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver R2: VMware Virtual Ethernet Userif for VMnet - (VMnetuserif) - C:\Windows\system32\DRIVERS\vmnetuserif.sys (+safe mode) (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver R2: VMware vmx86 - (vmx86) - C:\Windows\system32\DRIVERS\vmx86.sys (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver R3: AMD Application Compatibility Database - (AmdAppCompat) - C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompat.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMD Controller Emulation - (AMDXE) - C:\Windows\System32\drivers\amdxe.sys (sign: 'Advanced Micro Devices Inc.')
O23 - Driver R3: AMD Crash Defender Driver - (amdfendr) - C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendr.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMD Crash Defender Manager Driver - (amdfendrmgr) - C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrmgr.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMD Function Driver for HD Audio Service - (AtiHDAudioService) - C:\Windows\System32\DriverStore\FileRepository\atihdwt6.inf_amd64_21c8ef1919e76bac\AtihdWT6.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMD GPIO Client Driver - (amdgpio2) - C:\Windows\System32\drivers\amdgpio2.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMD GPIO Client Driver - (amdgpio3) - C:\Windows\System32\drivers\amdgpio3.sys (sign: 'ASMedia Technology Inc.')
O23 - Driver R3: AMD I2C Controller Service - (amdi2c) - C:\Windows\System32\drivers\amdi2c.sys (+safe mode) (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMD PCI - (AMDPCIDev) - C:\Windows\System32\drivers\AMDPCIDev.sys (sign: 'Advanced Micro Devices Inc.')
O23 - Driver R3: AMD Provisioning Packages - (AmdPpkg) - C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_2e5ec3779d1804d1\AmdPpkg.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: AMDSAFD - C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66bdd11a4e97edd1\amdsafd.sys (sign: 'Microsoft' - Advanced Micro Devices)
O23 - Driver R3: amduw23g-416003-55c70b53 - C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\amdkmdag.sys (sign: 'Advanced Micro Devices')
O23 - Driver R3: cpuz158 - C:\Windows\temp\cpuz158\cpuz158_x64.sys (sign: 'Microsoft' - CPUID)
O23 - Driver R3: GeniTech Virtual Gamepad Service - (hidvirtualdriver) - C:\Windows\System32\drivers\hidvirtualdriver.sys (sign: 'Microsoft' - GeniTech Electronics Tech. Co., Ltd.,)
O23 - Driver R3: Kaspersky Lab KLMOUFLT.K4W-21-22 - (klmouflt.K4W-21-22) - C:\Windows\system32\DRIVERS\K4W-21-22\klmouflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: klids.K4W-21-22 - C:\ProgramData\Kaspersky Lab\AVP21.22\Bases\klids.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: klupd_K4W-21-22_klark - C:\Windows\System32\Drivers\klupd_K4W-21-22_klark.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: klupd_K4W-21-22_mark - C:\Windows\System32\Drivers\klupd_K4W-21-22_mark.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: MBAMSwissArmy - C:\Windows\System32\Drivers\mbamswissarmy.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: Mediatek PCI LE Extensible Wireless LAN Card Driver - (mtkwlex) - C:\Windows\System32\drivers\mtkwl6ex.sys (+safe mode) (sign: 'Microsoft' - MediaTek Inc.)
O23 - Driver R3: MTK BT Filter Driver - (MTKBTFilterx64) - C:\Windows\System32\drivers\mtkbtfilterx.sys (sign: 'Microsoft' - MediaTek Inc.)
O23 - Driver R3: Nefarius HidHide Service - (HidHide) - C:\Windows\System32\drivers\HidHide.sys (sign: 'Microsoft' - Nefarius Software Solutions e.U.)
O23 - Driver R3: NTIOLib_CC_Clock - C:\Program Files (x86)\MSI\MSI Center\Lib\NTIOLib_X64.sys (sign: 'MICRO-STAR INTERNATIONAL CO., LTD.')
O23 - Driver R3: NTIOLib_CC_COMM - C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys (sign: 'MICRO-STAR INTERNATIONAL CO., LTD.')
O23 - Driver R3: Realtek RT640 NT Driver - (rt640x64) - C:\Windows\System32\drivers\rt640x64.sys (+safe mode) (sign: 'Realtek Semiconductor Corp.')
O23 - Driver R3: Service for Realtek HD Audio (WDM) - (IntcAzAudAddService) - C:\Windows\system32\drivers\RTKVHD64.sys (sign: 'Realtek Semiconductor Corp.')
O23 - Driver R3: Steam Streaming Microphone - (SteamStreamingMicrophone) - C:\Windows\system32\drivers\SteamStreamingMicrophone.sys (sign: 'Valve Corp.')
O23 - Driver R3: Steam Streaming Speakers - (SteamStreamingSpeakers) - C:\Windows\system32\drivers\SteamStreamingSpeakers.sys (sign: 'Valve Corp.')
O23 - Driver R3: Virtual Mic for AudioRelay - (audiorelay_virtualmic) - C:\Windows\system32\drivers\virtual-mic.sys (sign: 'Microsoft' - Windows (R) Win 7 DDK provider)
O23 - Driver R3: Virtual Mouse Function Driver - (FeizVMO) - C:\Windows\System32\Drivers\FeizVMO64.sys (sign: 'Microsoft' - no company)
O23 - Driver R3: Virtual Speaker for AudioRelay - (audiorelay_virtualspeaker) - C:\Windows\system32\drivers\virtual-speaker.sys (sign: 'Microsoft' - Windows (R) Win 7 DDK provider)
O23 - Driver R3: Virtual VMKeyboard Function Driver - (FeizVKB) - C:\Windows\System32\Drivers\FeizVKB64.sys (sign: 'Microsoft' - no company)
O23 - Driver R3: WinRing0_1_2_0 - C:\Program Files (x86)\CoolerMaster\MasterPlus\WinRing0x64.sys (sign: 'Noriyuki MIYAZAKI')
O23 - Driver S2: inpoutx64 - C:\Windows\System32\Drivers\inpoutx64.sys (sign: 'Red Fox UK Limited')
O23 - Driver S3: @oem35.inf,%VMnetAdapter.Service.DispName%;VMware Virtual Ethernet Adapter Driver - (VMnetAdapter) - C:\Windows\system32\DRIVERS\vmnetadapter.sys (+safe mode) (sign: 'Microsoft' - VMware, Inc.)
O23 - Driver S3: ACE-BASE - C:\Windows\system32\drivers\ACE-BASE.sys (sign: 'Microsoft' - ANTICHEATEXPERT.COM)
O23 - Driver S3: ace-game - C:\Windows\System32\drivers\ace-game.sys (sign: 'Tencent Technology (Shenzhen) Company Limited')
O23 - Driver S3: ace-game-0 - C:\Windows\System32\drivers\ace-game-0.sys (file missing)
O23 - Driver S3: ACE-SSC-DRV64 - C:\Program Files\AntiCheatExpert\SGuard\x64\plugins\ACE-SSC-DRV64.sys (sign: 'Microsoft' - ANTICHEATEXPERT.COM)
O23 - Driver S3: Alternative A2DP Bluetooth Stereo Service - (AltA2DP) - C:\Windows\System32\DriverStore\FileRepository\alta2dp.inf_amd64_6b2acffd36b2da4b\AltA2DP.sys (sign: 'Luculent Systems, LLC')
O23 - Driver S3: atvi-randgrid_msstore - E:\xbox\Call of Duty\Content\Randgrid.sys (file missing)
O23 - Driver S3: cpuz157 - C:\Windows\temp\cpuz157\cpuz157_x64.sys (file missing)
O23 - Driver S3: DroidCam Source 3 - (DroidCamVideo) - C:\Windows\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys (sign: 'Microsoft' - Windows (R) Win 7 DDK provider)
O23 - Driver S3: DroidCam Virtual Audio - (DroidCam) - C:\Windows\System32\drivers\droidcam.sys (sign: 'Microsoft' - Dev47Apps)
O23 - Driver S3: EAAntiCheat - C:\Windows\system32\drivers\eaanticheat.sys (file missing)
O23 - Driver S3: FairplayKD - C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys (sign: 'Hans Roes')
O23 - Driver S3: HWiNFO Kernel Driver (v187) - (HWiNFO_187) - C:\Users\alper\AppData\Local\Temp\HWiNFO64A_187.SYS (file missing)
O23 - Driver S3: HWiNFO Kernel Driver (v202) - (HWiNFO_202) - C:\Users\alper\AppData\Local\Temp\HWiNFO_x64_202.sys (file missing)
O23 - Driver S3: Intel(R) Serial IO GPIO Controller Driver - (iaLPSSi_GPIO) - C:\Windows\System32\drivers\iaLPSSi_GPIO.sys (sign: 'Intel Corporation - Client Components Group')
O23 - Driver S3: LogMeIn Hamachi Virtual Miniport) - (Hamachi) - C:\Windows\system32\DRIVERS\Hamdrv.sys (+safe mode) (sign: 'Microsoft' - LogMeIn Inc.)
O23 - Driver S3: MpKsla75db5c5 - C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{ADE8AC38-4A77-4C24-B66B-2798CDA2E4B3}\MpKslDrv.sys (file missing)
O23 - Driver S3: PDFWKRNL - C:\Windows\SystemTemp\USBCPDFW\pdfwkrnl.sys (file missing)
O23 - Driver S3: RedKard - C:\ProgramData\RedKard\bin\RedKard.sys (sign: '1047 Games, Inc.')
O23 - Driver S3: RtsUpx Driver - (RtsUpx) - C:\Windows\system32\drivers\RtsUpx.sys (sign: 'Realtek Semiconductor Corp.')
O23 - Driver S3: TAP-Windows Adapter V9 - (tap0901) - C:\Windows\System32\drivers\tap0901.sys (+safe mode) (sign: 'Microsoft' - The OpenVPN Project)
O23 - Driver S3: USB Driver for GD device v2.0 - (GDDFUDriver) - C:\Windows\System32\drivers\GDDFUDriver.sys (sign: '北京兆易创新科技股份有限公司')
O23 - Driver S3: Windscribe Split Tunnel Callout Driver - (WindscribeSplitTunnel) - C:\Windows\system32\DRIVERS\WindscribeSplitTunnel.sys (+safe mode) (sign: 'Windscribe Limited')
O23 - Driver S3: Windscribe VPN - (tapwindscribe0901) - C:\Windows\System32\drivers\tapwindscribe0901.sys (+safe mode) (sign: 'Windscribe Limited')
O23 - Driver S3: Windtun420 - (windtun420) - C:\Windows\System32\drivers\windtun420.sys (+safe mode) (sign: 'Windscribe Limited')
O23 - Driver S3: Wintun - (wintun) - C:\Windows\System32\drivers\wintun.sys (sign: 'Microsoft' - WireGuard LLC)
O23 - Driver S3: WireGuard - C:\Windows\System32\drivers\wireguard.sys (sign: 'Microsoft' - WireGuard LLC)
O23 - Driver S3: Xbox360Filter64.sys - C:\Windows\System32\drivers\Xbox360Filter64.sys (sign: 'Microsoft' - no company)
O23 - Driver S3: xhunter1 - C:\Windows\xhunter1.sys (sign: 'Wellbia.com Co., Ltd.')
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'gwdrv'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'Hamachi'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'klim6'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'klwtp.K4W-21-22'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'mtkwlex'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'rt640x64'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'tap0901'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'tapwindscribe0901'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'VMnetAdapter'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'VMnetuserif'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'WindscribeSplitTunnel'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service: 'windtun420'
O26 - Office Addin: HKLM\..\MicrosoftDataStreamerforExcel - (Microsoft Data Streamer for Excel) -> C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\MicrosoftDataStreamerforExcel.vsto (not signed - no company - A9DA61511D2073E5B80ED742394B35C61D96DE3A)
O26 - Office Addin: HKLM\..\NativeShim - (Inquire) -> (no file)
O26 - Office Addin: HKLM\..\OutlookKLAvPlg.Addin_318BC5AB-D0CB-4CEC-B373-F588E689538B - (Kaspersky4Win Outlook Anti-Virus Addin) -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22\x64\mcou.dll (sign: 'AO Kaspersky Lab')
O26 - Office Addin: HKLM\..\TeamViewerMeetingAddIn.AddIn - (TeamViewer Meeting Add-In) -> C:\Program Files\TeamViewer\outlook\TeamViewerMeetingAddinShim64.dll (sign: 'TeamViewer Germany GmbH')
O26-32 - Office Addin: HKLM\..\OutlookKLAvPlg.Addin_318BC5AB-D0CB-4CEC-B373-F588E689538B - (Kaspersky4Win Outlook Anti-Virus Addin) -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.22\mcou.dll (sign: 'AO Kaspersky Lab')
Debug information:
30.07.2025 18:54:08 - HashTable::Remove_ - #91 (Object variable or With block variable not set) LastDllError = 0
30.07.2025 18:54:09 - HashTable::Remove_ - #91 (Object variable or With block variable not set) LastDllError = 0
30.07.2025 18:54:11 - HashTable::Remove_ - #91 (Object variable or With block variable not set) LastDllError = 0
30.07.2025 18:54:11 - HashTable::Remove_ - #91 (Object variable or With block variable not set) LastDllError = 0
30.07.2025 18:54:11 - HashTable::Remove_ - #91 (Object variable or With block variable not set) LastDllError = 0
30.07.2025 18:54:11 - CheckO23Item_Drivers - #9 (Subscript out of range) (The storage control block address is invalid.) LastDllError = 0 Service= {F1E1739A-29A1-49F9-B94D-AE9AC94667B7}
--
End of file - Time spent: 21,9 sec. - 92742 bytes, CRC32: FFFFFFFF. Sign: 측鲤
