Rehber HijackThis Log Paylaşımı ve Çözümleri

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.10

Platform:  x64 Windows 10 (Home), 10.0.19044.1826 (ReleaseId: 2009, 21H2), Service Pack: 0
Time:      25.09.2022 - 05:24 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    BAHADR    (group: Administrators) on DESKTOP-RAL187J, FirstRun: yes

Chrome:  101.0.4951.54
Internet Explorer: 11.789.19041.0
Default: "C:\Users\baha3\AppData\Local\Programs\Opera GX\Launcher.exe" -noautoupdate -- "%1" (Opera GX Internet Browser)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
   1  C:\Program Files (x86)\Common Files\Microsoft Shared\Phone Tools\CoreCon\11.0\bin\IpOverUsbSvc.exe
   1  C:\Program Files (x86)\Cooler Master\MM530\MM530 HID.exe
   1  C:\Program Files (x86)\MusicBee\MusicBee.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
   7  C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
   1  C:\Program Files (x86)\Steam\steam.exe
   2  C:\Program Files\ImageGlass\ImageGlass.exe
   1  C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
   1  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
   2  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
   1  C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
   1  C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
   1  C:\Program Files\WindowsApps\Microsoft.GamingServices_4.67.21001.0_x64__8wekyb3d8bbwe\gamingservices.exe
   1  C:\Program Files\WindowsApps\Microsoft.GamingServices_4.67.21001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
   1  C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.822.6271.0_x64__8wekyb3d8bbwe\GameBar.exe
   1  C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.822.6271.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
   1  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22052.136.0_x64__8wekyb3d8bbwe\YourPhone.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
   1  C:\Users\baha3\Desktop\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\servicing\TrustedInstaller.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\backgroundTaskHost.exe
   1  C:\Windows\System32\BackgroundTransferHost.exe
   2  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
   1  C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\dptf_helper.exe
   1  C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\esif_uf.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c52b34f1b30918c5\RstMwService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_003a6d3c4c50c291\OneApp.IGCC.WinService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1dc9fc8d5e442f6a\IntelCpHDCPSvc.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1dc9fc8d5e442f6a\IntelCpHeciSvc.exe
   1  C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
   2  C:\Windows\System32\DriverStore\FileRepository\nvhmi.inf_amd64_7e2a7227fbf3b0fd\Display.NvContainer\NVDisplay.Container.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\ibtsiva.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\MoUsoCoreWorker.exe
   1  C:\Windows\System32\msiexec.exe
   1  C:\Windows\System32\rundll32.exe
   5  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  22  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\SynTPEnh.exe
   1  C:\Windows\System32\SynTPEnhService.exe
   1  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\WMIADAP.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\System32\wlanext.exe
   1  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
   1  C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1852_none_7de3b01c7cacf858\TiWorker.exe

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O1 - Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
O1 - Hosts: 127.0.0.1 lm.licenses.adobe.com
O1 - Hosts: 127.0.0.1 na1r.services.adobe.com
O1 - Hosts: 127.0.0.1 hlrcv.stage.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 genuine.adobe.com
O1 - Hosts: 127.0.0.1 prod.adobegenuine.com
O2 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_311\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_311\bin\ssv.dll
O2 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O2-32 - HKLM\..\BHO: Adobe Acrobat Create PDF Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O2-32 - HKLM\..\BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O3 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll
O3-32 - HKLM\..\Toolbar: Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll
O4 - HKCU\..\Run: [ImageGlass Spider] = C:\Program Files\ImageGlass\ImageGlass.exe -HideWindow
O4 - HKCU\..\Run: [ImageGlass] = C:\Program Files\ImageGlass\ImageGlass.exe -HideWindow
O4 - HKCU\..\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent
O4 - HKCU\..\StartupApproved\Run: [FACEIT] = C:\Users\baha3\AppData\Local\FACEIT\update.exe --processStart "FACEIT.exe" (2022/09/10)
O4 - HKLM\..\Run: [IAStorIcon] = C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\Run: [RTHDVCPL] = C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe -s
O4 - HKLM\..\SafeBoot: [AlternateShell] = (no file) (disabled)
O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2022/03/18)
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4-32 - HKLM\..\Run: [MM530] = C:\Program Files (x86)\Cooler Master\MM530\MM530 HID.exe
O15 - Trusted Zone: *.localhost
O15 - Trusted Zone: http://webcompanion.com
O17 - DHCP DNS 1: 1.1.1.1 (Well-known DNS: Cloudflare / APNIC)
O17 - DHCP DNS 2: 1.0.0.1 (Well-known DNS: Cloudflare / APNIC)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2b15dc59-9834-4fda-a2d5-2232fc529d4d}: [NameServer] = 1.0.0.1 (Well-known DNS: Cloudflare / APNIC)
O17 - HKLM\System\CCS\Services\Tcpip\..\{2b15dc59-9834-4fda-a2d5-2232fc529d4d}: [NameServer] = 1.1.1.1 (Well-known DNS: Cloudflare / APNIC)
O22 - Task (.job): (Not scheduled) update-S-1-5-21-2696083347-860251953-4110303618-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
O22 - Task: (damaged) Opera GX scheduled assistant Autoupdate 1624263509 - C:\Users\baha3\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\baha3\AppData\Local\Programs\Opera GX\assistant" $(Arg0) (user missing)
O22 - Task: (disabled) \Agent Activation Runtime\S-1-5-21-2696083347-860251953-4110303618-1001 - C:\Windows\System32\AgentActivationRuntimeStarter.exe
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (disabled) GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task: (disabled) GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task: (disabled) OneDrive Standalone Update Task-S-1-5-21-2696083347-860251953-4110303618-500 - C:\Users\baha3\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (file missing)
O22 - Task: (disabled) Overwolf Updater Task - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe /RunningFrom Schedule
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Task: (telemetry) NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
O22 - Task: NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
O22 - Task: NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
O22 - Task: NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
O22 - Task: NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
O22 - Task: OneDrive Standalone Update Task-S-1-5-21-3620144467-4133877577-726863005-500 - C:\Users\baha3\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (file missing)
O22 - Task: Opera GX scheduled assistant Autoupdate 1624263509 - C:\Users\baha3\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\baha3\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
O22 - Task: Opera GX scheduled Autoupdate 1623831437 - C:\Users\baha3\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate $(Arg0)
O22 - Task: Opera scheduled Autoupdate 1635179822 - C:\Users\baha3\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (file missing)
O22 - Task: update-S-1-5-21-2696083347-860251953-4110303618-1001 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Task: update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O23 - Service R2: FlexNet Licensing Service - C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
O23 - Service R2: Gaming Services - (GamingServices) - C:\Program Files\WindowsApps\Microsoft.GamingServices_4.67.21001.0_x64__8wekyb3d8bbwe\GamingServices.exe
O23 - Service R2: Gaming Services - (GamingServicesNet) - C:\Program Files\WindowsApps\Microsoft.GamingServices_4.67.21001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
O23 - Service R2: Intel Bluetooth Service - (ibtsiva) - C:\Windows\System32\ibtsiva.exe
O23 - Service R2: Intel(R) Content Protection HDCP Service - (cplspcon) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1dc9fc8d5e442f6a\IntelCpHDCPSvc.exe
O23 - Service R2: Intel(R) Dynamic Application Loader Host Interface Service - (jhi_service) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
O23 - Service R2: Intel(R) Dynamic Tuning service - (esifsvc) - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\esif_uf.exe
O23 - Service R2: Intel(R) Graphics Command Center Service - (igccservice) - C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_003a6d3c4c50c291\OneApp.IGCC.WinService.exe
O23 - Service R2: Intel(R) Management Engine WMI Provider Registration - (WMIRegistrationService) - C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
O23 - Service R2: Intel(R) Storage Middleware Service - (RstMwService) - C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c52b34f1b30918c5\RstMwService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Windows\System32\DriverStore\FileRepository\nvhmi.inf_amd64_7e2a7227fbf3b0fd\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvhmi.inf_amd64_7e2a7227fbf3b0fd\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: Realtek Audio Service - (RtkAudioService) - C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
O23 - Service R2: SynTPEnhService - C:\Windows\System32\SynTPEnhService.exe
O23 - Service R3: Intel(R) Content Protection HECI Service - (cphs) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1dc9fc8d5e442f6a\IntelCpHeciSvc.exe
O23 - Service S2: GameInput Service - C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe
O23 - Service S2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService2.0.0.0) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_12ed482042e0dee5\igfxCUIService.exe
O23 - Service S2: Intel(R) Rapid Storage Technology - (IAStorDataMgrSvc) - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service S2: Intel(R) TPM Provisioning Service - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\TPMProvisioningService.exe
O23 - Service S2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service S3: FACEITService - C:\Program Files\FACEIT AC\faceitservice.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\101.0.4951.54\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Intel(R) Capability Licensing Service TCP IP Interface - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe
O23 - Service S3: NVIDIA FrameView SDK service - (FvSvc) - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe -service
O23 - Service S3: Overwolf Updater Windows SCM - (OverwolfUpdater) - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe /RunningFrom SCM
O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice.exe /RunAsService
O23 - Service S3: Te.Service - C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe
O26 - Debugger: HKLM\..\EOSnotify.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\InstallAgent.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\MusNotification.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\MusNotificationUx.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\remsh.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\SihClient.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\UpdateAssistant.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\upfc.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\UsoClient.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\WaaSMedic.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\WaasMedicAgent.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\Windows10Upgrade.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\Windows10UpgraderApp.exe: [Debugger] = / (file missing)



Warning: New Root certificate is detected! Report to developer, please: Name: "Microsoft Identity Verification Root Certificate Authority 2020", Valid: "16.04.2020 21:36:16 - 16.04.2045 21:44:40"
ÿşW i n d o w s   R e g i s t r y   E d i t o r   V e r s i o n   5 . 0 0
 
 
 
 [ H K E Y _ L O C A L _ M A C H I N E \ S O F T W A R E \ M i c r o s o f t \ S y s t e m C e r t i f i c a t e s \ R O O T \ C e r t i f i c a t e s \ F 4 0 0 4 2 E 2 E 5 F 7 E 8 E F 8 1 8 9 F E D 1 5 5 1 9 A E C E 4 2 C 3 B F A 2 ]
 
 " B l o b " = h e x : 5 c , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 0 4 , 0 0 , 0 0 , 0 0 , 0 0 , 1 0 , 0 0 , 0 0 , 1 9 , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , \
 
     0 0 , 0 0 , 1 0 , 0 0 , 0 0 , 0 0 , 9 f , 6 8 , 7 5 , 8 1 , f 7 , e f , 7 4 , 4 e , c f , c 1 , 2 b , 9 c , e e , 6 2 , 3 8 , f 1 , 0 f , 0 0 , 0 0 , \
 
     0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 3 0 , 0 0 , 0 0 , 0 0 , 4 1 , c e , 9 2 , 5 6 , 7 8 , d f , e 0 , c c , a a , 8 0 , 8 9 , 2 6 , 3 c , 2 4 , 2 b , 8 9 , \
 
     7 c , a 5 , 8 2 , 0 8 , 9 d , 1 4 , e 5 , e b , 6 8 , 5 f , c a , 9 6 , 7 f , 3 6 , d b , d 3 , 3 4 , e 9 , 7 e , 8 1 , f d , 0 e , 6 4 , 8 1 , 5 f , \
 
     8 5 , 1 f , 9 1 , 4 a , d e , 1 a , 1 e , 0 3 , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 1 4 , 0 0 , 0 0 , 0 0 , f 4 , 0 0 , 4 2 , e 2 , e 5 , f 7 , \
 
     e 8 , e f , 8 1 , 8 9 , f e , d 1 , 5 5 , 1 9 , a e , c e , 4 2 , c 3 , b f , a 2 , 1 4 , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 1 4 , 0 0 , 0 0 , \
 
     0 0 , c 8 , 7 e , d 2 , 6 a , 8 5 , 2 a , 1 b , c a , 1 9 , 9 8 , 0 4 , 0 7 , 2 7 , c f , 5 0 , 1 0 , 4 f , 6 8 , a 8 , a 2 , 0 4 , 0 0 , 0 0 , 0 0 , \
 
     0 1 , 0 0 , 0 0 , 0 0 , 1 0 , 0 0 , 0 0 , 0 0 , b e , 9 5 , 4 f , 1 6 , 0 1 , 2 1 , 2 2 , 4 4 , 8 c , a 8 , b c , 2 7 , 9 6 , 0 2 , a c , f 5 , 2 0 , \
 
     0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , d 0 , 0 5 , 0 0 , 0 0 , 3 0 , 8 2 , 0 5 , c c , 3 0 , 8 2 , 0 3 , b 4 , a 0 , 0 3 , 0 2 , 0 1 , 0 2 , 0 2 , \
 
     1 0 , 5 4 , 9 8 , d 2 , d 1 , d 4 , 5 b , 1 9 , 9 5 , 4 8 , 1 3 , 7 9 , c 8 , 1 1 , c 0 , 8 7 , 9 9 , 3 0 , 0 d , 0 6 , 0 9 , 2 a , 8 6 , 4 8 , 8 6 , \
 
     f 7 , 0 d , 0 1 , 0 1 , 0 c , 0 5 , 0 0 , 3 0 , 7 7 , 3 1 , 0 b , 3 0 , 0 9 , 0 6 , 0 3 , 5 5 , 0 4 , 0 6 , 1 3 , 0 2 , 5 5 , 5 3 , 3 1 , 1 e , 3 0 , \
 
     1 c , 0 6 , 0 3 , 5 5 , 0 4 , 0 a , 1 3 , 1 5 , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , 6 6 , 7 4 , 2 0 , 4 3 , 6 f , 7 2 , 7 0 , 6 f , 7 2 , 6 1 , \
 
     7 4 , 6 9 , 6 f , 6 e , 3 1 , 4 8 , 3 0 , 4 6 , 0 6 , 0 3 , 5 5 , 0 4 , 0 3 , 1 3 , 3 f , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , 6 6 , 7 4 , 2 0 , \
 
     4 9 , 6 4 , 6 5 , 6 e , 7 4 , 6 9 , 7 4 , 7 9 , 2 0 , 5 6 , 6 5 , 7 2 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 9 , 6 f , 6 e , 2 0 , 5 2 , 6 f , 6 f , \
 
     7 4 , 2 0 , 4 3 , 6 5 , 7 2 , 7 4 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 5 , 2 0 , 4 1 , 7 5 , 7 4 , 6 8 , 6 f , 7 2 , 6 9 , 7 4 , 7 9 , 2 0 , 3 2 , \
 
     3 0 , 3 2 , 3 0 , 3 0 , 1 e , 1 7 , 0 d , 3 2 , 3 0 , 3 0 , 3 4 , 3 1 , 3 6 , 3 1 , 3 8 , 3 3 , 3 6 , 3 1 , 3 6 , 5 a , 1 7 , 0 d , 3 4 , 3 5 , 3 0 , \
 
     3 4 , 3 1 , 3 6 , 3 1 , 3 8 , 3 4 , 3 4 , 3 4 , 3 0 , 5 a , 3 0 , 7 7 , 3 1 , 0 b , 3 0 , 0 9 , 0 6 , 0 3 , 5 5 , 0 4 , 0 6 , 1 3 , 0 2 , 5 5 , 5 3 , \
 
     3 1 , 1 e , 3 0 , 1 c , 0 6 , 0 3 , 5 5 , 0 4 , 0 a , 1 3 , 1 5 , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , 6 6 , 7 4 , 2 0 , 4 3 , 6 f , 7 2 , 7 0 , \
 
     6 f , 7 2 , 6 1 , 7 4 , 6 9 , 6 f , 6 e , 3 1 , 4 8 , 3 0 , 4 6 , 0 6 , 0 3 , 5 5 , 0 4 , 0 3 , 1 3 , 3 f , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , \
 
     6 6 , 7 4 , 2 0 , 4 9 , 6 4 , 6 5 , 6 e , 7 4 , 6 9 , 7 4 , 7 9 , 2 0 , 5 6 , 6 5 , 7 2 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 9 , 6 f , 6 e , 2 0 , \
 
     5 2 , 6 f , 6 f , 7 4 , 2 0 , 4 3 , 6 5 , 7 2 , 7 4 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 5 , 2 0 , 4 1 , 7 5 , 7 4 , 6 8 , 6 f , 7 2 , 6 9 , 7 4 , \
 
     7 9 , 2 0 , 3 2 , 3 0 , 3 2 , 3 0 , 3 0 , 8 2 , 0 2 , 2 2 , 3 0 , 0 d , 0 6 , 0 9 , 2 a , 8 6 , 4 8 , 8 6 , f 7 , 0 d , 0 1 , 0 1 , 0 1 , 0 5 , 0 0 , \
 
     0 3 , 8 2 , 0 2 , 0 f , 0 0 , 3 0 , 8 2 , 0 2 , 0 a , 0 2 , 8 2 , 0 2 , 0 1 , 0 0 , b 3 , 9 1 , 2 a , 0 7 , 8 3 , 0 6 , 6 7 , f d , 9 e , 9 d , e 0 , \
 
     c 7 , c 0 , b 7 , a 4 , e 6 , 4 2 , 0 4 , 7 f , 0 f , a 6 , d b , 5 f , f b , d 5 , 5 a , d 7 , 4 5 , a 0 , f b , 7 7 , 0 b , f 0 , 8 0 , f 3 , a 6 , \
 
     6 d , 5 a , 4 d , 7 9 , 5 3 , d 8 , a 0 , 8 6 , 8 4 , 5 7 , 4 5 , 2 0 , c 7 , a 2 , 5 4 , f b , c 7 , a 2 , b f , 8 a , c 7 , 6 e , 3 5 , f 3 , a 2 , \
 
     1 5 , c 4 , 2 f , 4 e , e 3 , 4 a , 8 5 , 9 6 , 4 9 , 0 d , f f , b e , 9 9 , d 8 , 1 4 , f 6 , b c , 2 7 , 0 7 , e e , 4 2 , 9 b , 2 b , f 5 , 0 b , \
 
     9 2 , 0 6 , e 4 , f d , 6 9 , 1 3 , 6 5 , a 8 , 9 1 , 7 2 , f 2 , 9 8 , 8 4 , e b , 8 3 , 3 d , 0 e , e 4 , d 7 , 7 1 , 1 2 , 4 8 , 2 1 , c b , 0 d , \
 
     e d , f 6 , 4 7 , 4 9 , b 7 , 9 b , f 9 , c 9 , c 7 , 1 7 , b 6 , 8 4 , 4 f , f f , b 8 , a c , 9 a , d 7 , 7 3 , 6 7 , 4 9 , 8 5 , e 3 , 8 6 , b d , \
 
     3 7 , 4 0 , d 0 , 2 5 , 8 6 , d 4 , d e , b 5 , c 2 , 6 d , 6 2 , 6 a , d 5 , a 9 , 7 8 , b c , 2 d , 6 f , 4 9 , f 9 , e 5 , 6 c , 1 4 , 1 4 , f d , \
 
     1 4 , c 7 , d 3 , 6 5 , 1 6 , 3 7 , d e , c b , 6 e , b c , 5 e , 2 9 , 8 d , f d , 6 2 , 9 b , 1 5 , 2 c , d 6 , 0 5 , e 6 , b 9 , 8 9 , 3 2 , 3 3 , \
 
     a 3 , 6 2 , c 7 , d 7 , d 6 , 5 2 , 6 7 , 0 8 , c 4 , 2 e , f 4 , 5 6 , 2 b , 9 e , 0 b , 8 7 , c c , e c , a 7 , b 4 , a 6 , a a , e b , 0 5 , c d , \
 
     1 9 , 5 7 , a 5 , 3 a , 0 b , 0 4 , 2 7 , 1 c , 9 1 , 6 7 , 9 e , 2 d , 6 2 , 2 d , 2 f , 1 e , b e , d a , c 0 , 2 0 , c b , 0 4 , 1 9 , c a , 3 3 , \
 
     f b , 8 9 , b e , 9 8 , e 2 , 7 2 , a 0 , 7 2 , 3 5 , b e , 7 9 , e 1 , 9 c , 8 3 , 6 f , e 4 , 6 d , 1 7 , 6 f , 9 0 , f 3 , 3 d , 0 0 , 8 6 , 7 5 , \
 
     3 8 , 8 e , d 0 , e 0 , 4 9 , 9 a , b b , d b , d 3 , f 8 , 3 0 , c a , d 5 , 5 7 , 8 8 , 6 8 , 4 d , 7 2 , d 3 , b f , 6 d , 7 f , 7 1 , d 8 , f d , \
 
     b d , 0 d , a e , 9 2 , 6 4 , 4 8 , b 7 , 5 b , 6 f , 7 9 , 2 6 , b 5 , c d , 9 b , 9 5 , 2 1 , 8 4 , d 1 , e f , 0 f , 3 2 , 3 d , 7 b , 5 7 , 8 c , \
 
     f 3 , 4 5 , 0 7 , 4 c , 7 c , e 0 , 5 e , 1 8 , 0 e , 3 5 , 7 6 , 8 b , 6 d , 9 e , c b , 3 6 , 7 4 , a b , 0 5 , f 8 , e 0 , 7 3 , 5 d , 3 2 , 5 6 , \
 
     9 4 , 6 7 , 9 7 , 2 5 , 0 a , c 6 , 3 5 , 3 d , 9 4 , 9 7 , e 7 , c 1 , 4 4 , 8 b , 8 0 , f d , c 1 , f 8 , f 4 , 7 4 , 1 9 , e 5 , 3 0 , f 6 , 0 6 , \
 
     f b , 2 1 , 5 7 , 3 e , 0 6 , 1 c , 8 b , 6 b , 1 5 , 8 6 , 2 7 , 4 9 , 7 b , 8 2 , 9 3 , c a , 5 9 , e 8 , 7 5 , 4 7 , e 8 , 3 f , 3 8 , f 4 , c 7 , \
 
     5 3 , 7 9 , a 0 , b 6 , b 4 , e 2 , 5 c , 5 1 , e f , b d , 5 f , 3 8 , c 1 , 1 3 , e 6 , 7 8 , 0 c , 9 5 , 5 a , 2 e , c 5 , 4 0 , 5 9 , 2 8 , c c , \
 
     0 f , 2 4 , c 0 , e c , b a , 0 9 , 7 7 , 2 3 , 9 9 , 3 8 , a 6 , b 6 , 1 c , d a , c 7 , b a , 2 0 , b 6 , d 7 , 3 7 , d 8 , 7 f , 3 7 , a f , 0 8 , \
 
     e 3 , 3 b , 7 1 , d b , 6 e , 7 3 , 1 b , 7 d , 9 9 , 7 2 , b 0 , e 4 , 8 6 , 3 3 , 5 9 , 7 4 , b 5 , 1 6 , 0 0 , 7 b , 5 0 , 6 d , c 6 , 8 6 , 1 3 , \
 
     d a , f d , c 4 , 3 9 , 8 2 , 3 d , 2 4 , 0 0 , 9 a , 6 0 , d a , b a , 9 4 , c 0 , 0 5 , 5 1 , 2 c , 3 4 , a c , 5 0 , 9 9 , 1 3 , 8 7 , b b , b 3 , \
 
     0 5 , 8 0 , b 2 , 4 d , 3 0 , 0 2 , 5 c , b 8 , 2 6 , 8 3 , 5 d , b 4 , 6 3 , 7 3 , e f , a e , 2 3 , 9 5 , 4 f , 6 0 , 2 8 , b e , 3 7 , d 5 , 5 b , \
 
     a 5 , 0 2 , 0 3 , 0 1 , 0 0 , 0 1 , a 3 , 5 4 , 3 0 , 5 2 , 3 0 , 0 e , 0 6 , 0 3 , 5 5 , 1 d , 0 f , 0 1 , 0 1 , f f , 0 4 , 0 4 , 0 3 , 0 2 , 0 1 , \
 
     8 6 , 3 0 , 0 f , 0 6 , 0 3 , 5 5 , 1 d , 1 3 , 0 1 , 0 1 , f f , 0 4 , 0 5 , 3 0 , 0 3 , 0 1 , 0 1 , f f , 3 0 , 1 d , 0 6 , 0 3 , 5 5 , 1 d , 0 e , \
 
     0 4 , 1 6 , 0 4 , 1 4 , c 8 , 7 e , d 2 , 6 a , 8 5 , 2 a , 1 b , c a , 1 9 , 9 8 , 0 4 , 0 7 , 2 7 , c f , 5 0 , 1 0 , 4 f , 6 8 , a 8 , a 2 , 3 0 , \
 
     1 0 , 0 6 , 0 9 , 2 b , 0 6 , 0 1 , 0 4 , 0 1 , 8 2 , 3 7 , 1 5 , 0 1 , 0 4 , 0 3 , 0 2 , 0 1 , 0 0 , 3 0 , 0 d , 0 6 , 0 9 , 2 a , 8 6 , 4 8 , 8 6 , \
 
     f 7 , 0 d , 0 1 , 0 1 , 0 c , 0 5 , 0 0 , 0 3 , 8 2 , 0 2 , 0 1 , 0 0 , a f , 6 a , d d , e 6 , 1 9 , e 7 , 2 d , 9 4 , 4 3 , 1 9 , 4 e , c b , e 9 , \
 
     5 0 , 9 5 , 6 4 , a 5 , 0 3 , 9 1 , 0 2 , 8 b , e 2 , 3 6 , 8 0 , 3 b , 1 5 , a 2 , 5 2 , c 2 , 1 6 , 1 9 , b 6 , 6 a , 5 a , 5 d , 7 4 , 4 3 , 3 0 , \
 
     f 4 , 9 b , f f , 6 0 , 7 4 , 0 9 , b 1 , 2 1 , 1 e , 9 0 , 1 6 , 6 d , c 5 , 2 4 , 8 f , 5 c , 6 6 , 8 8 , 6 3 , f 4 , 4 f , c c , 7 d , f 2 , 1 2 , \
 
     4 c , 4 0 , 1 0 , 8 b , 0 1 , 9 f , d a , a 9 , c 8 , a e , f 2 , 9 5 , 1 b , c f , 9 d , 0 5 , e b , 4 9 , 3 e , 7 4 , a 0 , 6 8 , 5 b , e 5 , 5 6 , \
 
     2 c , 6 5 , 1 c , 8 2 , 7 e , 5 3 , d a , 5 6 , d 9 , 4 6 , 1 7 , 7 9 , 9 2 , 4 5 , c 4 , 1 0 , 3 6 , 0 8 , 5 2 , 2 9 , 1 7 , c b , 2 f , a 6 , f 2 , \
 
     7 e , d 4 , 6 9 , 2 4 , 8 a , 1 e , 8 f , b 0 , 7 3 , 0 d , c c , 1 c , 4 a , a b , b 2 , a a , e d , a 7 , 9 1 , 6 3 , 0 1 , 6 4 , 2 2 , a 8 , 3 2 , \
 
     b 8 , 7 e , 3 2 , 2 8 , b 3 , 6 7 , 7 3 , 2 d , 9 1 , b 4 , d c , 3 1 , 0 1 , 0 b , f 7 , 4 7 , 0 a , a 6 , f 1 , d 7 , 4 a , e d , 5 6 , 6 0 , c 4 , \
 
     2 c , 0 8 , a 3 , 7 b , 4 0 , b 0 , b c , 7 4 , 2 7 , 5 2 , 8 7 , d 6 , b e , 8 8 , d d , 3 7 , 8 a , 8 9 , 6 e , 6 7 , 8 8 , 1 d , f 5 , c 9 , 5 d , \
 
     a 0 , f e , b 6 , a b , 3 a , 8 0 , d 7 , 1 a , 9 7 , 3 c , 1 7 , 3 6 , 2 2 , 4 1 , 1 e , a c , 4 d , d 5 , 8 3 , e 6 , 3 c , 3 8 , b d , 4 f , 3 0 , \
 
     e 9 , 5 4 , a 9 , d 3 , b 6 , 0 4 , c 3 , 3 2 , 7 6 , 6 1 , b b , b 0 , 1 8 , c 5 , 2 b , 1 8 , b 3 , c 0 , 8 0 , d 5 , b 7 , 9 5 , b 0 , 5 e , 5 1 , \
 
     4 d , 2 2 , f c , e c , 5 8 , a a , e 8 , d 8 , 9 4 , b 4 , a 5 , 2 e , e d , 9 2 , d e , e 7 , 1 8 , 7 c , 2 1 , 5 7 , d d , 5 5 , 6 3 , f 7 , b f , \
 
     6 d , c d , 1 f , d 2 , a 6 , 7 7 , 2 8 , 7 0 , c 7 , e 2 , 5 b , 3 a , 5 b , 0 8 , d 2 , 5 b , 4 e , c 8 , 0 0 , 9 6 , b 3 , e 1 , 8 3 , 3 6 , a f , \
 
     8 6 , 0 a , 6 5 , 5 c , 7 4 , f 6 , e a , e c , 7 a , 6 a , 7 4 , a 0 , f 0 , 4 b , e e , e f , 9 4 , a 3 , a c , 5 0 , f 2 , 8 7 , e d , d 7 , 3 a , \
 
     3 0 , 8 3 , c 9 , f b , 7 d , 5 7 , b e , e 5 , e 3 , f 8 , 4 1 , c a , e 5 , 6 4 , a e , b 3 , a 3 , e c , 5 8 , e c , 8 5 , 9 a , c c , e f , b 9 , \
 
     e a , f 3 , 5 6 , 1 8 , b 9 , 5 c , 7 3 , 9 a , a f , c 5 , 7 7 , 1 7 , 8 3 , 5 9 , d b , 3 7 , 1 a , 1 8 , 7 2 , 5 4 , a 5 , 4 1 , d 2 , b 6 , 2 3 , \
 
     7 5 , a 3 , 4 3 , 9 a , e 5 , 7 7 , 7 c , 9 6 , 7 9 , b 7 , 4 1 , 8 d , b f , e c , d c , 8 0 , a 0 , 9 f , d 1 , 7 7 , 7 5 , 5 8 , 5 f , 3 5 , 1 3 , \
 
     e 0 , 2 5 , 1 a , 6 7 , 0 b , 7 d , c e , 2 5 , f a , 0 7 , 0 a , e 4 , 6 1 , 2 1 , d 8 , d 4 , 1 c , e 5 , 0 7 , c 6 , 3 6 , 9 9 , f 4 , 9 6 , d 0 , \
 
     c 6 , 1 5 , f e , 4 e , c d , d 7 , a e , 8 b , 9 d , d b , 1 6 , f d , 0 4 , c 6 , 9 2 , b d , d 4 , 8 8 , e 6 , a 9 , a 3 , a a , b b , f 7 , 6 4 , \
 
     3 8 , 3 b , 5 f , c c , 0 c , d 0 , 3 5 , b e , 7 4 , 1 9 , 0 3 , a 6 , c 5 , a a , 4 c , a 2 , 6 1 , 3 6 , 8 2 , 3 e , 1 d , f 3 , 2 b , b c , 9 7 , \
 
     5 d , d b , 4 b , 7 8 , 3 b , 2 d , f 5 , 3 b , e f , 6 0 , 2 3 , e 8 , f 5 , e c , 0 b , 2 3 , 3 6 , 9 5 , a f , 9 8 , 6 6 , b f , 5 3 , d 3 , 7 b , \
 
     b 8 , 6 9 , 4 a , 2 a , 9 6 , 6 6 , 6 9 , c 4 , 9 4 , c 6 , f 4 , 5 f , 6 e , a c , 9 8 , 7 8 , 8 8 , 8 0 , 0 6 , 5 c , a 2 , b 2 , e d , a 2
 
 
 
 \n\n
Warning: New Root certificate is detected! Report to developer, please: Name: "Microsoft Identity Verification Root Certificate Authority 2020", Valid: "16.04.2020 21:36:16 - 16.04.2045 21:44:40"
ÿşW i n d o w s   R e g i s t r y   E d i t o r   V e r s i o n   5 . 0 0
 
 
 
 [ H K E Y _ L O C A L _ M A C H I N E \ S O F T W A R E \ M i c r o s o f t \ S y s t e m C e r t i f i c a t e s \ R O O T \ C e r t i f i c a t e s \ F 4 0 0 4 2 E 2 E 5 F 7 E 8 E F 8 1 8 9 F E D 1 5 5 1 9 A E C E 4 2 C 3 B F A 2 ]
 
 " B l o b " = h e x : 5 c , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 0 4 , 0 0 , 0 0 , 0 0 , 0 0 , 1 0 , 0 0 , 0 0 , 1 9 , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , \
 
     0 0 , 0 0 , 1 0 , 0 0 , 0 0 , 0 0 , 9 f , 6 8 , 7 5 , 8 1 , f 7 , e f , 7 4 , 4 e , c f , c 1 , 2 b , 9 c , e e , 6 2 , 3 8 , f 1 , 0 f , 0 0 , 0 0 , \
 
     0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 3 0 , 0 0 , 0 0 , 0 0 , 4 1 , c e , 9 2 , 5 6 , 7 8 , d f , e 0 , c c , a a , 8 0 , 8 9 , 2 6 , 3 c , 2 4 , 2 b , 8 9 , \
 
     7 c , a 5 , 8 2 , 0 8 , 9 d , 1 4 , e 5 , e b , 6 8 , 5 f , c a , 9 6 , 7 f , 3 6 , d b , d 3 , 3 4 , e 9 , 7 e , 8 1 , f d , 0 e , 6 4 , 8 1 , 5 f , \
 
     8 5 , 1 f , 9 1 , 4 a , d e , 1 a , 1 e , 0 3 , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 1 4 , 0 0 , 0 0 , 0 0 , f 4 , 0 0 , 4 2 , e 2 , e 5 , f 7 , \
 
     e 8 , e f , 8 1 , 8 9 , f e , d 1 , 5 5 , 1 9 , a e , c e , 4 2 , c 3 , b f , a 2 , 1 4 , 0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , 1 4 , 0 0 , 0 0 , \
 
     0 0 , c 8 , 7 e , d 2 , 6 a , 8 5 , 2 a , 1 b , c a , 1 9 , 9 8 , 0 4 , 0 7 , 2 7 , c f , 5 0 , 1 0 , 4 f , 6 8 , a 8 , a 2 , 0 4 , 0 0 , 0 0 , 0 0 , \
 
     0 1 , 0 0 , 0 0 , 0 0 , 1 0 , 0 0 , 0 0 , 0 0 , b e , 9 5 , 4 f , 1 6 , 0 1 , 2 1 , 2 2 , 4 4 , 8 c , a 8 , b c , 2 7 , 9 6 , 0 2 , a c , f 5 , 2 0 , \
 
     0 0 , 0 0 , 0 0 , 0 1 , 0 0 , 0 0 , 0 0 , d 0 , 0 5 , 0 0 , 0 0 , 3 0 , 8 2 , 0 5 , c c , 3 0 , 8 2 , 0 3 , b 4 , a 0 , 0 3 , 0 2 , 0 1 , 0 2 , 0 2 , \
 
     1 0 , 5 4 , 9 8 , d 2 , d 1 , d 4 , 5 b , 1 9 , 9 5 , 4 8 , 1 3 , 7 9 , c 8 , 1 1 , c 0 , 8 7 , 9 9 , 3 0 , 0 d , 0 6 , 0 9 , 2 a , 8 6 , 4 8 , 8 6 , \
 
     f 7 , 0 d , 0 1 , 0 1 , 0 c , 0 5 , 0 0 , 3 0 , 7 7 , 3 1 , 0 b , 3 0 , 0 9 , 0 6 , 0 3 , 5 5 , 0 4 , 0 6 , 1 3 , 0 2 , 5 5 , 5 3 , 3 1 , 1 e , 3 0 , \
 
     1 c , 0 6 , 0 3 , 5 5 , 0 4 , 0 a , 1 3 , 1 5 , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , 6 6 , 7 4 , 2 0 , 4 3 , 6 f , 7 2 , 7 0 , 6 f , 7 2 , 6 1 , \
 
     7 4 , 6 9 , 6 f , 6 e , 3 1 , 4 8 , 3 0 , 4 6 , 0 6 , 0 3 , 5 5 , 0 4 , 0 3 , 1 3 , 3 f , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , 6 6 , 7 4 , 2 0 , \
 
     4 9 , 6 4 , 6 5 , 6 e , 7 4 , 6 9 , 7 4 , 7 9 , 2 0 , 5 6 , 6 5 , 7 2 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 9 , 6 f , 6 e , 2 0 , 5 2 , 6 f , 6 f , \
 
     7 4 , 2 0 , 4 3 , 6 5 , 7 2 , 7 4 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 5 , 2 0 , 4 1 , 7 5 , 7 4 , 6 8 , 6 f , 7 2 , 6 9 , 7 4 , 7 9 , 2 0 , 3 2 , \
 
     3 0 , 3 2 , 3 0 , 3 0 , 1 e , 1 7 , 0 d , 3 2 , 3 0 , 3 0 , 3 4 , 3 1 , 3 6 , 3 1 , 3 8 , 3 3 , 3 6 , 3 1 , 3 6 , 5 a , 1 7 , 0 d , 3 4 , 3 5 , 3 0 , \
 
     3 4 , 3 1 , 3 6 , 3 1 , 3 8 , 3 4 , 3 4 , 3 4 , 3 0 , 5 a , 3 0 , 7 7 , 3 1 , 0 b , 3 0 , 0 9 , 0 6 , 0 3 , 5 5 , 0 4 , 0 6 , 1 3 , 0 2 , 5 5 , 5 3 , \
 
     3 1 , 1 e , 3 0 , 1 c , 0 6 , 0 3 , 5 5 , 0 4 , 0 a , 1 3 , 1 5 , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , 6 6 , 7 4 , 2 0 , 4 3 , 6 f , 7 2 , 7 0 , \
 
     6 f , 7 2 , 6 1 , 7 4 , 6 9 , 6 f , 6 e , 3 1 , 4 8 , 3 0 , 4 6 , 0 6 , 0 3 , 5 5 , 0 4 , 0 3 , 1 3 , 3 f , 4 d , 6 9 , 6 3 , 7 2 , 6 f , 7 3 , 6 f , \
 
     6 6 , 7 4 , 2 0 , 4 9 , 6 4 , 6 5 , 6 e , 7 4 , 6 9 , 7 4 , 7 9 , 2 0 , 5 6 , 6 5 , 7 2 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 9 , 6 f , 6 e , 2 0 , \
 
     5 2 , 6 f , 6 f , 7 4 , 2 0 , 4 3 , 6 5 , 7 2 , 7 4 , 6 9 , 6 6 , 6 9 , 6 3 , 6 1 , 7 4 , 6 5 , 2 0 , 4 1 , 7 5 , 7 4 , 6 8 , 6 f , 7 2 , 6 9 , 7 4 , \
 
     7 9 , 2 0 , 3 2 , 3 0 , 3 2 , 3 0 , 3 0 , 8 2 , 0 2 , 2 2 , 3 0 , 0 d , 0 6 , 0 9 , 2 a , 8 6 , 4 8 , 8 6 , f 7 , 0 d , 0 1 , 0 1 , 0 1 , 0 5 , 0 0 , \
 
     0 3 , 8 2 , 0 2 , 0 f , 0 0 , 3 0 , 8 2 , 0 2 , 0 a , 0 2 , 8 2 , 0 2 , 0 1 , 0 0 , b 3 , 9 1 , 2 a , 0 7 , 8 3 , 0 6 , 6 7 , f d , 9 e , 9 d , e 0 , \
 
     c 7 , c 0 , b 7 , a 4 , e 6 , 4 2 , 0 4 , 7 f , 0 f , a 6 , d b , 5 f , f b , d 5 , 5 a , d 7 , 4 5 , a 0 , f b , 7 7 , 0 b , f 0 , 8 0 , f 3 , a 6 , \
 
     6 d , 5 a , 4 d , 7 9 , 5 3 , d 8 , a 0 , 8 6 , 8 4 , 5 7 , 4 5 , 2 0 , c 7 , a 2 , 5 4 , f b , c 7 , a 2 , b f , 8 a , c 7 , 6 e , 3 5 , f 3 , a 2 , \
 
     1 5 , c 4 , 2 f , 4 e , e 3 , 4 a , 8 5 , 9 6 , 4 9 , 0 d , f f , b e , 9 9 , d 8 , 1 4 , f 6 , b c , 2 7 , 0 7 , e e , 4 2 , 9 b , 2 b , f 5 , 0 b , \
 
     9 2 , 0 6 , e 4 , f d , 6 9 , 1 3 , 6 5 , a 8 , 9 1 , 7 2 , f 2 , 9 8 , 8 4 , e b , 8 3 , 3 d , 0 e , e 4 , d 7 , 7 1 , 1 2 , 4 8 , 2 1 , c b , 0 d , \
 
     e d , f 6 , 4 7 , 4 9 , b 7 , 9 b , f 9 , c 9 , c 7 , 1 7 , b 6 , 8 4 , 4 f , f f , b 8 , a c , 9 a , d 7 , 7 3 , 6 7 , 4 9 , 8 5 , e 3 , 8 6 , b d , \
 
     3 7 , 4 0 , d 0 , 2 5 , 8 6 , d 4 , d e , b 5 , c 2 , 6 d , 6 2 , 6 a , d 5 , a 9 , 7 8 , b c , 2 d , 6 f , 4 9 , f 9 , e 5 , 6 c , 1 4 , 1 4 , f d , \
 
     1 4 , c 7 , d 3 , 6 5 , 1 6 , 3 7 , d e , c b , 6 e , b c , 5 e , 2 9 , 8 d , f d , 6 2 , 9 b , 1 5 , 2 c , d 6 , 0 5 , e 6 , b 9 , 8 9 , 3 2 , 3 3 , \
 
     a 3 , 6 2 , c 7 , d 7 , d 6 , 5 2 , 6 7 , 0 8 , c 4 , 2 e , f 4 , 5 6 , 2 b , 9 e , 0 b , 8 7 , c c , e c , a 7 , b 4 , a 6 , a a , e b , 0 5 , c d , \
 
     1 9 , 5 7 , a 5 , 3 a , 0 b , 0 4 , 2 7 , 1 c , 9 1 , 6 7 , 9 e , 2 d , 6 2 , 2 d , 2 f , 1 e , b e , d a , c 0 , 2 0 , c b , 0 4 , 1 9 , c a , 3 3 , \
 
     f b , 8 9 , b e , 9 8 , e 2 , 7 2 , a 0 , 7 2 , 3 5 , b e , 7 9 , e 1 , 9 c , 8 3 , 6 f , e 4 , 6 d , 1 7 , 6 f , 9 0 , f 3 , 3 d , 0 0 , 8 6 , 7 5 , \
 
     3 8 , 8 e , d 0 , e 0 , 4 9 , 9 a , b b , d b , d 3 , f 8 , 3 0 , c a , d 5 , 5 7 , 8 8 , 6 8 , 4 d , 7 2 , d 3 , b f , 6 d , 7 f , 7 1 , d 8 , f d , \
 
     b d , 0 d , a e , 9 2 , 6 4 , 4 8 , b 7 , 5 b , 6 f , 7 9 , 2 6 , b 5 , c d , 9 b , 9 5 , 2 1 , 8 4 , d 1 , e f , 0 f , 3 2 , 3 d , 7 b , 5 7 , 8 c , \
 
     f 3 , 4 5 , 0 7 , 4 c , 7 c , e 0 , 5 e , 1 8 , 0 e , 3 5 , 7 6 , 8 b , 6 d , 9 e , c b , 3 6 , 7 4 , a b , 0 5 , f 8 , e 0 , 7 3 , 5 d , 3 2 , 5 6 , \
 
     9 4 , 6 7 , 9 7 , 2 5 , 0 a , c 6 , 3 5 , 3 d , 9 4 , 9 7 , e 7 , c 1 , 4 4 , 8 b , 8 0 , f d , c 1 , f 8 , f 4 , 7 4 , 1 9 , e 5 , 3 0 , f 6 , 0 6 , \
 
     f b , 2 1 , 5 7 , 3 e , 0 6 , 1 c , 8 b , 6 b , 1 5 , 8 6 , 2 7 , 4 9 , 7 b , 8 2 , 9 3 , c a , 5 9 , e 8 , 7 5 , 4 7 , e 8 , 3 f , 3 8 , f 4 , c 7 , \
 
     5 3 , 7 9 , a 0 , b 6 , b 4 , e 2 , 5 c , 5 1 , e f , b d , 5 f , 3 8 , c 1 , 1 3 , e 6 , 7 8 , 0 c , 9 5 , 5 a , 2 e , c 5 , 4 0 , 5 9 , 2 8 , c c , \
 
     0 f , 2 4 , c 0 , e c , b a , 0 9 , 7 7 , 2 3 , 9 9 , 3 8 , a 6 , b 6 , 1 c , d a , c 7 , b a , 2 0 , b 6 , d 7 , 3 7 , d 8 , 7 f , 3 7 , a f , 0 8 , \
 
     e 3 , 3 b , 7 1 , d b , 6 e , 7 3 , 1 b , 7 d , 9 9 , 7 2 , b 0 , e 4 , 8 6 , 3 3 , 5 9 , 7 4 , b 5 , 1 6 , 0 0 , 7 b , 5 0 , 6 d , c 6 , 8 6 , 1 3 , \
 
     d a , f d , c 4 , 3 9 , 8 2 , 3 d , 2 4 , 0 0 , 9 a , 6 0 , d a , b a , 9 4 , c 0 , 0 5 , 5 1 , 2 c , 3 4 , a c , 5 0 , 9 9 , 1 3 , 8 7 , b b , b 3 , \
 
     0 5 , 8 0 , b 2 , 4 d , 3 0 , 0 2 , 5 c , b 8 , 2 6 , 8 3 , 5 d , b 4 , 6 3 , 7 3 , e f , a e , 2 3 , 9 5 , 4 f , 6 0 , 2 8 , b e , 3 7 , d 5 , 5 b , \
 
     a 5 , 0 2 , 0 3 , 0 1 , 0 0 , 0 1 , a 3 , 5 4 , 3 0 , 5 2 , 3 0 , 0 e , 0 6 , 0 3 , 5 5 , 1 d , 0 f , 0 1 , 0 1 , f f , 0 4 , 0 4 , 0 3 , 0 2 , 0 1 , \
 
     8 6 , 3 0 , 0 f , 0 6 , 0 3 , 5 5 , 1 d , 1 3 , 0 1 , 0 1 , f f , 0 4 , 0 5 , 3 0 , 0 3 , 0 1 , 0 1 , f f , 3 0 , 1 d , 0 6 , 0 3 , 5 5 , 1 d , 0 e , \
 
     0 4 , 1 6 , 0 4 , 1 4 , c 8 , 7 e , d 2 , 6 a , 8 5 , 2 a , 1 b , c a , 1 9 , 9 8 , 0 4 , 0 7 , 2 7 , c f , 5 0 , 1 0 , 4 f , 6 8 , a 8 , a 2 , 3 0 , \
 
     1 0 , 0 6 , 0 9 , 2 b , 0 6 , 0 1 , 0 4 , 0 1 , 8 2 , 3 7 , 1 5 , 0 1 , 0 4 , 0 3 , 0 2 , 0 1 , 0 0 , 3 0 , 0 d , 0 6 , 0 9 , 2 a , 8 6 , 4 8 , 8 6 , \
 
     f 7 , 0 d , 0 1 , 0 1 , 0 c , 0 5 , 0 0 , 0 3 , 8 2 , 0 2 , 0 1 , 0 0 , a f , 6 a , d d , e 6 , 1 9 , e 7 , 2 d , 9 4 , 4 3 , 1 9 , 4 e , c b , e 9 , \
 
     5 0 , 9 5 , 6 4 , a 5 , 0 3 , 9 1 , 0 2 , 8 b , e 2 , 3 6 , 8 0 , 3 b , 1 5 , a 2 , 5 2 , c 2 , 1 6 , 1 9 , b 6 , 6 a , 5 a , 5 d , 7 4 , 4 3 , 3 0 , \
 
     f 4 , 9 b , f f , 6 0 , 7 4 , 0 9 , b 1 , 2 1 , 1 e , 9 0 , 1 6 , 6 d , c 5 , 2 4 , 8 f , 5 c , 6 6 , 8 8 , 6 3 , f 4 , 4 f , c c , 7 d , f 2 , 1 2 , \
 
     4 c , 4 0 , 1 0 , 8 b , 0 1 , 9 f , d a , a 9 , c 8 , a e , f 2 , 9 5 , 1 b , c f , 9 d , 0 5 , e b , 4 9 , 3 e , 7 4 , a 0 , 6 8 , 5 b , e 5 , 5 6 , \
 
     2 c , 6 5 , 1 c , 8 2 , 7 e , 5 3 , d a , 5 6 , d 9 , 4 6 , 1 7 , 7 9 , 9 2 , 4 5 , c 4 , 1 0 , 3 6 , 0 8 , 5 2 , 2 9 , 1 7 , c b , 2 f , a 6 , f 2 , \
 
     7 e , d 4 , 6 9 , 2 4 , 8 a , 1 e , 8 f , b 0 , 7 3 , 0 d , c c , 1 c , 4 a , a b , b 2 , a a , e d , a 7 , 9 1 , 6 3 , 0 1 , 6 4 , 2 2 , a 8 , 3 2 , \
 
     b 8 , 7 e , 3 2 , 2 8 , b 3 , 6 7 , 7 3 , 2 d , 9 1 , b 4 , d c , 3 1 , 0 1 , 0 b , f 7 , 4 7 , 0 a , a 6 , f 1 , d 7 , 4 a , e d , 5 6 , 6 0 , c 4 , \
 
     2 c , 0 8 , a 3 , 7 b , 4 0 , b 0 , b c , 7 4 , 2 7 , 5 2 , 8 7 , d 6 , b e , 8 8 , d d , 3 7 , 8 a , 8 9 , 6 e , 6 7 , 8 8 , 1 d , f 5 , c 9 , 5 d , \
 
     a 0 , f e , b 6 , a b , 3 a , 8 0 , d 7 , 1 a , 9 7 , 3 c , 1 7 , 3 6 , 2 2 , 4 1 , 1 e , a c , 4 d , d 5 , 8 3 , e 6 , 3 c , 3 8 , b d , 4 f , 3 0 , \
 
     e 9 , 5 4 , a 9 , d 3 , b 6 , 0 4 , c 3 , 3 2 , 7 6 , 6 1 , b b , b 0 , 1 8 , c 5 , 2 b , 1 8 , b 3 , c 0 , 8 0 , d 5 , b 7 , 9 5 , b 0 , 5 e , 5 1 , \
 
     4 d , 2 2 , f c , e c , 5 8 , a a , e 8 , d 8 , 9 4 , b 4 , a 5 , 2 e , e d , 9 2 , d e , e 7 , 1 8 , 7 c , 2 1 , 5 7 , d d , 5 5 , 6 3 , f 7 , b f , \
 
     6 d , c d , 1 f , d 2 , a 6 , 7 7 , 2 8 , 7 0 , c 7 , e 2 , 5 b , 3 a , 5 b , 0 8 , d 2 , 5 b , 4 e , c 8 , 0 0 , 9 6 , b 3 , e 1 , 8 3 , 3 6 , a f , \
 
     8 6 , 0 a , 6 5 , 5 c , 7 4 , f 6 , e a , e c , 7 a , 6 a , 7 4 , a 0 , f 0 , 4 b , e e , e f , 9 4 , a 3 , a c , 5 0 , f 2 , 8 7 , e d , d 7 , 3 a , \
 
     3 0 , 8 3 , c 9 , f b , 7 d , 5 7 , b e , e 5 , e 3 , f 8 , 4 1 , c a , e 5 , 6 4 , a e , b 3 , a 3 , e c , 5 8 , e c , 8 5 , 9 a , c c , e f , b 9 , \
 
     e a , f 3 , 5 6 , 1 8 , b 9 , 5 c , 7 3 , 9 a , a f , c 5 , 7 7 , 1 7 , 8 3 , 5 9 , d b , 3 7 , 1 a , 1 8 , 7 2 , 5 4 , a 5 , 4 1 , d 2 , b 6 , 2 3 , \
 
     7 5 , a 3 , 4 3 , 9 a , e 5 , 7 7 , 7 c , 9 6 , 7 9 , b 7 , 4 1 , 8 d , b f , e c , d c , 8 0 , a 0 , 9 f , d 1 , 7 7 , 7 5 , 5 8 , 5 f , 3 5 , 1 3 , \
 
     e 0 , 2 5 , 1 a , 6 7 , 0 b , 7 d , c e , 2 5 , f a , 0 7 , 0 a , e 4 , 6 1 , 2 1 , d 8 , d 4 , 1 c , e 5 , 0 7 , c 6 , 3 6 , 9 9 , f 4 , 9 6 , d 0 , \
 
     c 6 , 1 5 , f e , 4 e , c d , d 7 , a e , 8 b , 9 d , d b , 1 6 , f d , 0 4 , c 6 , 9 2 , b d , d 4 , 8 8 , e 6 , a 9 , a 3 , a a , b b , f 7 , 6 4 , \
 
     3 8 , 3 b , 5 f , c c , 0 c , d 0 , 3 5 , b e , 7 4 , 1 9 , 0 3 , a 6 , c 5 , a a , 4 c , a 2 , 6 1 , 3 6 , 8 2 , 3 e , 1 d , f 3 , 2 b , b c , 9 7 , \
 
     5 d , d b , 4 b , 7 8 , 3 b , 2 d , f 5 , 3 b , e f , 6 0 , 2 3 , e 8 , f 5 , e c , 0 b , 2 3 , 3 6 , 9 5 , a f , 9 8 , 6 6 , b f , 5 3 , d 3 , 7 b , \
 
     b 8 , 6 9 , 4 a , 2 a , 9 6 , 6 6 , 6 9 , c 4 , 9 4 , c 6 , f 4 , 5 f , 6 e , a c , 9 8 , 7 8 , 8 8 , 8 0 , 0 6 , 5 c , a 2 , b 2 , e d , a 2
 
 
 
 \n\n

--
End of file - Time spent: 13,1 sec. - 84814 bytes, CRC32: FFFFFFFF. Sign: 䬵廣

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O4 - HKCU\..\Run: [ImageGlass Spider] = C:\Program Files\ImageGlass\ImageGlass.exe -HideWindow
O4 - HKCU\..\Run: [ImageGlass] = C:\Program Files\ImageGlass\ImageGlass.exe -HideWindow
O4 - HKLM\..\Run: [IAStorIcon] = C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60
O4 - HKLM\..\SafeBoot: [AlternateShell] = (no file) (disabled)
O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2022/03/18)
O22 - Task: (damaged) Opera GX scheduled assistant Autoupdate 1624263509 - C:\Users\baha3\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\baha3\AppData\Local\Programs\Opera GX\assistant" $(Arg0) (user missing)
O22 - Task: (disabled) \Agent Activation Runtime\S-1-5-21-2696083347-860251953-4110303618-1001 - C:\Windows\System32\AgentActivationRuntimeStarter.exe
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (disabled) OneDrive Standalone Update Task-S-1-5-21-2696083347-860251953-4110303618-500 - C:\Users\baha3\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (file missing)
O22 - Task: (disabled) Overwolf Updater Task - C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe /RunningFrom Schedule
O22 - Task: OneDrive Standalone Update Task-S-1-5-21-362014446
O23 - Service S3: Te.Service - C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Services.exe
O26 - Debugger: HKLM\..\EOSnotify.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\InstallAgent.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\MusNotification.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\MusNotificationUx.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\remsh.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\SihClient.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\UpdateAssistant.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\upfc.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\UsoClient.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\WaaSMedic.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\WaasMedicAgent.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\Windows10Upgrade.exe: [Debugger] = / (file missing)
O26 - Debugger: HKLM\..\Windows10UpgraderApp.exe: [Debugger] = / (file missing)

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.10

Platform:  x64 Windows 10 (Home Single Language), 10.0.19044.2006 (ReleaseId: 2009, 21H2), Service Pack: 0
Time:      26.09.2022 - 13:40 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    Ömer Yiğit    (group: Administrators) on DESKTOP-UEGKA5N, FirstRun: yes

Chrome:  105.0.5195.127
Internet Explorer: 11.0.19041.1566
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
   5  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
   1  C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
   1  C:\Program Files\Elantech\ETDCtrl.exe
   1  C:\Program Files\Elantech\ETDCtrlHelper.exe
   1  C:\Program Files\Elantech\ETDService.exe
   2  C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
   1  C:\Program Files\Riot Vanguard\vgtray.exe
   1  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22072.207.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
   6  C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.194.874.0_x86__zpdnekdrzrea0\Spotify.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2207.7-0\NisSrv.exe
   1  C:\Users\Ömer Yiğit\AppData\Local\Microsoft\OneDrive\OneDrive.exe
   1  C:\Users\Ömer Yiğit\Desktop\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\ImmersiveControlPanel\SystemSettings.exe
   1  C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
   1  C:\Windows\System32\ApplicationFrameHost.exe
   1  C:\Windows\System32\audiodg.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\igfxCUIService.exe
   1  C:\Windows\System32\igfxEM.exe
   1  C:\Windows\System32\igfxHK.exe
   1  C:\Windows\System32\igfxTray.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\oobe\UserOOBEBroker.exe
   5  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SecurityHealthSystray.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  24  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SysWOW64\backgroundTaskHost.exe

O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_9092C97223193834C780180D3BDBFBA2] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5
O4 - HKCU\..\Run: [OneDrive] = C:\Users\Ömer Yiğit\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background (Microsoft)
O4 - HKCU\..\StartupApproved\Run: [Discord] = C:\Users\Ömer Yiğit\AppData\Local\Discord\Update.exe --processStart Discord.exe (file missing) (2022/08/28)
O4 - HKCU\..\StartupApproved\Run: [EpicGamesLauncher] = C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe -silent (2022/08/28)
O4 - HKCU\..\StartupApproved\Run: [Opera GX Browser Assistant] = C:\Users\Ömer Yiğit\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe (2022/09/16)
O4 - HKCU\..\StartupApproved\Run: [Opera GX Stable] = C:\Users\Ömer Yiğit\AppData\Local\Programs\Opera GX\launcher.exe (2022/09/16)
O4 - HKCU\..\StartupApproved\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent (2022/08/28)
O4 - HKLM\..\Run: [ETDCtrl] = C:\Program Files\Elantech\ETDCtrl.exe
O4 - HKLM\..\Run: [Riot Vanguard] = C:\Program Files\Riot Vanguard\vgtray.exe
O4-32 - HKLM\..\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
O22 - Task: (disabled) \Agent Activation Runtime\S-1-5-21-4069481009-3373610414-1637781445-1001 - C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe
O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\WINDOWS\System32\Autopilot.dll (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\WINDOWS\System32\Autopilot.dll (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\WINDOWS\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\WINDOWS\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\WINDOWS\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Task: \Microsoft\Windows\SMB\UninstallSMB1ClientTask - C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Client"
O22 - Task: \Microsoft\Windows\SMB\UninstallSMB1ServerTask - C:\WINDOWS\system32\WindowsPowerShell\v1.0\powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& C:\WINDOWS\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Server"
O22 - Task: GoogleUpdateTaskMachineCore{6C1E77CF-EDE1-4F07-AC8C-ADFE3C9CF520} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task: GoogleUpdateTaskMachineUA{56A368AE-A944-4A12-9D15-E52FC3E753E8} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task: OneDrive Reporting Task-S-1-5-21-4069481009-3373610414-1637781445-1001 - C:\Users\Ömer Yiğit\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Task: Opera GX scheduled assistant Autoupdate 1662466197 - C:\Users\Ömer Yiğit\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Ömer Yiğit\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
O22 - Task: Opera GX scheduled Autoupdate 1661880318 - C:\Users\Ömer Yiğit\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate $(Arg0)
O23 - Service R2: Elan Service - (ETDService) - C:\Program Files\Elantech\ETDService.exe
O23 - Service R2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService1.0.0.0) - C:\WINDOWS\system32\igfxCUIService.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: BattlEye Service - (BEService) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service S3: Easy Anti-Cheat (Epic Online Services) - (EasyAntiCheat_EOS) - C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\105.0.5195.127\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Intel(R) Content Protection HECI Service - (cphs) - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice.exe /RunAsService
O23 - Service S3: vgc - C:\Program Files\Riot Vanguard\vgc.exe


--
End of file - Time spent: 15,5 sec. - 19250 bytes, CRC32: FFFFFFFF. Sign: 뚏캀

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.23

Platform:  x64 Windows 10 (Home), 10.0.19042.1706 (ReleaseId: 2009, 20H2), Service Pack: 0
Time:      06.10.2022 - 21:50 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Hindi (0x439)
Memory:    8991 MiB Free (28 %). CPU Loading: (60 %)
Elevated:  Yes
Ran by:    CAN    (group: Administrators) on DESKTOP-IM87BNA, FirstRun: yes

Chrome:  105.0.5195.127
Internet Explorer: 11.0.19041.1566
Default: "C:\Users\CAN\AppData\Local\Programs\Opera GX\Launcher.exe" -noautoupdate -- "%1" (Opera GX Internet Browser)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\AnyDesk\AnyDesk.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
   1  C:\Program Files (x86)\HTTPDebuggerPro\HTTPDebuggerSvc.exe
   1  C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
   1  C:\Program Files\AMD\CNext\CNext\cnext.exe
   1  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
   1  C:\Program Files\OpenVPN\bin\openvpnserv.exe
   1  C:\Program Files\Riot Vanguard\vgtray.exe
   1  C:\Program Files\Sandboxie\SbieSvc.exe
   1  C:\Program Files\Shadow Defender\DefenderDaemon.exe
   1  C:\Program Files\Shadow Defender\Service.exe
   1  C:\Program Files\TxGameAssistant\AppMarket\AppMarket.exe
   3  C:\Program Files\TxGameAssistant\AppMarket\cef_frame_render.exe
   1  C:\Program Files\TxGameAssistant\AppMarket\DL\syzs_dl_svr.exe
   1  C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
   1  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
   1  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22072.207.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
   1  C:\taskktbesfrvjb\tasketctbe.exe
   4  C:\Users\CAN\AppData\Local\Programs\Opera GX\90.0.4480.117\opera_autoupdate.exe
   1  C:\Users\CAN\AppData\Local\Programs\Opera GX\90.0.4480.117\opera_crashreporter.exe
   1  C:\Users\CAN\AppData\Local\Programs\Opera GX\launcher.exe
  27  C:\Users\CAN\AppData\Local\Programs\Opera GX\opera.exe
   6  C:\Users\CAN\AppData\Roaming\Spotify\Spotify.exe
   1  C:\Users\CAN\Desktop\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\ImmersiveControlPanel\SystemSettings.exe
   1  C:\Windows\servicing\TrustedInstaller.exe
   1  C:\Windows\System32\ApplicationFrameHost.exe
   1  C:\Windows\System32\atieclxx.exe
   1  C:\Windows\System32\atiesrxx.exe
   1  C:\Windows\System32\audiodg.exe
   5  C:\Windows\System32\backgroundTaskHost.exe
   1  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dasHost.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\LsaIso.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\MoUsoCoreWorker.exe
   1  C:\Windows\System32\oobe\UserOOBEBroker.exe
   6  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
   1  C:\Windows\System32\sppsvc.exe
  83  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
   1  C:\Windows\SysWOW64\PnkBstrA.exe
   1  C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1704_none_7de951067ca990f6\TiWorker.exe
   1  D:\Program Files\Microvirt\MEmu\MemuService.exe

O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_333\bin\jp2ssv.dll
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_333\bin\ssv.dll
O2-32 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_333\bin\jp2ssv.dll
O2-32 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_333\bin\ssv.dll
O4 - HKCU\..\Run: [Discord] = C:\Users\CAN\AppData\Local\Discord\Update.exe --processStart Discord.exe
O4 - HKCU\..\Run: [Spotify] = C:\Users\CAN\AppData\Roaming\Spotify\Spotify.exe --autostart --minimized
O4 - HKCU\..\StartupApproved\Run: [Comrade.exe] = D:\OYUNLAR\crysis-comrade\Comrade.exe (2022/09/17)
O4 - HKCU\..\StartupApproved\Run: [EpicGamesLauncher] = D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe -silent (2022/08/05)
O4 - HKCU\..\StartupApproved\Run: [OneDrive] = C:\Users\CAN\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background (2022/06/26)
O4 - HKCU\..\StartupApproved\Run: [OPENVPN-GUI] = C:\Program Files\OpenVPN\bin\openvpn-gui.exe (2022/08/05)
O4 - HKCU\..\StartupApproved\Run: [Opera GX Browser Assistant] = C:\Users\CAN\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe (2022/08/12)
O4 - HKCU\..\StartupApproved\Run: [Opera GX Stable] = C:\Users\CAN\AppData\Local\Programs\Opera GX\launcher.exe (2022/06/26)
O4 - HKCU\..\StartupApproved\Run: [RealUI Notification Service] = C:\Users\CAN\AppData\Local\FEF00F9\vh5OGRs.exe (2022/08/05)
O4 - HKCU\..\StartupApproved\Run: [SandboxieControl] = C:\Program Files\Sandboxie\SbieCtrl.exe (2022/10/06)
O4 - HKLM\..\Run: [Riot Vanguard] = C:\Program Files\Riot Vanguard\vgtray.exe
O4 - HKLM\..\Run: [Shadow Defender Daemon] = C:\Program Files\Shadow Defender\DefenderDaemon.exe /Auto
O4 - HKLM\..\Run: [StartCN] = C:\Program Files\AMD\CNext\CNext\cnext.exe atlogon
O4 - HKLM\..\StartupApproved\Run: [CL-26-89014CC6-732B-4F7C-908F-B9AC3EFB8000] = C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-26-89014CC6-732B-4F7C-908F-B9AC3EFB8000\setuplauncher.exe /run:Installer.exe /args:"/setup-folder:"CL-26-89014CC6-732B-4F7C-908F-B9AC3EFB8000"" (file missing) (2022/10/06)
O4 - HKLM\..\StartupApproved\Run: [SecurityHealth] = C:\Windows\system32\SecurityHealthSystray.exe
O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2022/06/26)
O4 - HKLM\..\StartupApproved\StartupFolder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk    ->    C:\Program Files (x86)\AnyDesk\AnyDesk.exe --control (2022/06/26)
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O17 - DHCP DNS 1: 192.168.1.1
O22 - Task (.job): (Not scheduled) update-S-1-5-21-1371245204-2330880901-2416174337-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (Microsoft)
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Tasks: \Microsoft\Windows\WindowsUpdate\RUXIM\PLUGScheduler - C:\Program Files\RUXIM\PLUGscheduler.exe (Microsoft)
O22 - Tasks: GoogleUpdateTaskMachineCore{D3753CEC-EEDF-4C41-B75A-B7334FADC534} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Tasks: GoogleUpdateTaskMachineUA{3AB10A26-BE4E-46C4-B74B-BB7EC3B24314} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Tasks: OneDrive Reporting Task-S-1-5-21-1371245204-2330880901-2416174337-1001 - C:\Users\CAN\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Tasks: Opera GX scheduled assistant Autoupdate 1656574791 - C:\Users\CAN\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate --component-name=assistant --component-path="C:\Users\CAN\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
O22 - Tasks: Opera GX scheduled Autoupdate 1656233073 - C:\Users\CAN\AppData\Local\Programs\Opera GX\launcher.exe --scheduledautoupdate $(Arg0)
O22 - Tasks: update-S-1-5-21-1371245204-2330880901-2416174337-1001 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Tasks: update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O23 - Service R2: AMD External Events Utility - C:\Windows\system32\atiesrxx.exe
O23 - Service R2: AnyDesk Service - (AnyDesk) - C:\Program Files (x86)\AnyDesk\AnyDesk.exe --service
O23 - Service R2: HTTP Debugger Pro - (HTTPDebuggerPro) - C:\Program Files (x86)\HTTPDebuggerPro\HTTPDebuggerSvc.exe
O23 - Service R2: MEmuSVC - D:\Program Files\Microvirt\MEmu\MemuService.exe
O23 - Service R2: OpenVPN Interactive Service - (OpenVPNServiceInteractive) - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service R2: PnkBstrA - C:\Windows\system32\PnkBstrA.exe (file missing)
O23 - Service R2: QMEmulatorService - C:\Program Files\TxGameAssistant\AppMarket\QMEmulatorService.exe
O23 - Service R2: Sandboxie Service - (SbieSvc) - C:\Program Files\Sandboxie\SbieSvc.exe
O23 - Service R2: Shadow Defender Service - ({0CBD4F48-3751-475D-BE88-4F271385B672}) - C:\Program Files\Shadow Defender\Service.exe
O23 - Service R2: tasketctbe - C:\taskktbesfrvjb\tasketctbe.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\105.0.5195.127\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: OpenVPN Legacy Service - (OpenVPNServiceLegacy) - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service S3: OpenVPNService - C:\Program Files\OpenVPN\bin\openvpnserv2.exe
O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\SteamService.exe /RunAsService
O23 - Service S3: vgc - C:\Program Files\Riot Vanguard\vgc.exe
O23 - Service S3: Visual Studio Standard Collector Service 150 - (VSStandardCollectorService150) - D:\Microsoft\SDK\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe


--
End of file - Time spent: 7,5 sec. - 23746 bytes, CRC32: FFFFFFFF. Sign: 癩煱

O4 - HKCU\..\StartupApproved\Run: [Comrade.exe] = D:\OYUNLAR\crysis-comrade\Comrade.exe (2022/09/17)
O4 - HKCU\..\StartupApproved\Run: [OneDrive] = C:\Users\CAN\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background (2022/06/26)
O4 - HKCU\..\StartupApproved\Run: [OPENVPN-GUI] = C:\Program Files\OpenVPN\bin\openvpn-gui.exe (2022/08/05)
O4 - HKCU\..\StartupApproved\Run: [Opera GX Browser Assistant] = C:\Users\CAN\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe (2022/08/12)
O4 - HKCU\..\StartupApproved\Run: [Opera GX Stable] = C:\Users\CAN\AppData\Local\Programs\Opera GX\launcher.exe (2022/06/26)
O4 - HKCU\..\StartupApproved\Run: [RealUI Notification Service] = C:\Users\CAN\AppData\Local\FEF00F9\vh5OGRs.exe (2022/08/05)
O4 - HKLM\..\StartupApproved\Run: [CL-26-89014CC6-732B-4F7C-908F-B9AC3EFB8000] = C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-26-89014CC6-732B-4F7C-908F-B9AC3EFB8000\setuplauncher.exe /run:Installer.exe /args:"/setup-folder:"CL-26-89014CC6-732B-4F7C-908F-B9AC3EFB8000"" (file missing) (2022/10/06)
O4 - HKLM\..\StartupApproved\Run: [SecurityHealth] = C:\Windows\system32\SecurityHealthSystray.exe
O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2022/06/26)
O4 - HKLM\..\StartupApproved\StartupFolder: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk    ->    C:\Program Files (x86)\AnyDesk\AnyDesk.exe --control (2022/06/26)
O23 - Service R2: HTTP Debugger Pro - (HTTPDebuggerPro) - C:\Program Files (x86)\HTTPDebuggerPro\HTTPDebuggerSvc.exe
O23 - Service R2: tasketctbe - C:\taskktbesfrvjb\tasketctbe.exe

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.23

Platform:  x64 Windows 10 (Pro), 10.0.19044.2130 (ReleaseId: 2009, 21H2), Service Pack: 0
Time:      16.10.2022 - 22:10 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Memory:    9753 MiB Free (41 %). CPU Loading: (2 %)
Elevated:  Yes
Ran by:    KeljiX    (group: Administrators) on DESKTOP-N60KA3P, FirstRun: yes

Chrome:  106.0.5249.119
Firefox: 105.0.3.8315
Internet Explorer: 11.0.19041.1566
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
   1  C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
   1  C:\Program Files (x86)\ASUS\AXSP\4.02.15\atkexComSvc.exe
   1  C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
   1  C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
   1  C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
   1  C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
   1  C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
   1  C:\Program Files (x86)\Common Files\Steam\steamservice.exe
   1  C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
   1  C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
   1  C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
   1  C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
   5  C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
   1  C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
   1  C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
   1  C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
   1  C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe
   1  C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe
   1  C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
   1  C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
   5  C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe
   1  C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
   1  C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
   1  C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
   1  C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
   1  C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
   1  C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
   7  C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
   1  C:\Program Files (x86)\Steam\steam.exe
   1  C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
   1  C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
   2  C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
   1  C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
   1  C:\Program Files\AMD\CNext\CNext\amdow.exe
   1  C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
   1  C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
   1  C:\Program Files\AMD\CNext\CNext\cncmd.exe
   1  C:\Program Files\AMD\CNext\CNext\QtWebEngineProcess.exe
   1  C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
   2  C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Creative Cloud UI Helper.exe
   1  C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
   1  C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
   1  C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
   1  C:\Program Files\Microsoft OneDrive\OneDrive.exe
   1  C:\Program Files\OpenVPN\bin\openvpn-gui.exe
   1  C:\Program Files\OpenVPN\bin\openvpnserv.exe
   1  C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
   1  C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
   1  C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
   1  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxOutlook.exe
   1  C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
   1  C:\Program Files\WindowsApps\Microsoft.YourPhone_1.22082.117.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2209.7-0\MpCopyAccelerator.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2209.7-0\MsMpEng.exe
   1  C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2209.7-0\NisSrv.exe
   9  C:\Users\KeljiX\AppData\Local\Microsoft\Teams\current\Teams.exe
   1  C:\Users\KeljiX\Desktop\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\ImmersiveControlPanel\SystemSettings.exe
   1  C:\Windows\System32\amdfendrsr.exe
   1  C:\Windows\System32\ApplicationFrameHost.exe
   1  C:\Windows\System32\audiodg.exe
   2  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\dasHost.exe
   2  C:\Windows\System32\dllhost.exe
   1  C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_e769ee9bce5bb697\RstMwService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\u0382767.inf_amd64_2ba2e1bcba1eb9ff\B378972\atieclxx.exe
   1  C:\Windows\System32\DriverStore\FileRepository\u0382767.inf_amd64_2ba2e1bcba1eb9ff\B378972\atiesrxx.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\oobe\UserOOBEBroker.exe
   1  C:\Windows\System32\rundll32.exe
  10  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SecurityHealthSystray.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  77  C:\Windows\System32\svchost.exe
   2  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\unsecapp.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
   2  C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
   1  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [SuggestionsURL_JSON] = https://suggest.yandex.com.tr/suggest-ff.cgi?srv=ie11&uil=tr&part={searchTerms}&clid=2233630 - Yandex
R4 - SearchScopes: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8C3078A0-9AAB-4371-85D1-656CA8E46EE8}: [URL] = https://yandex.com.tr/search/?text={searchTerms}&clid=2233630 - Yandex
O4 - HKCU\..\Run: [com.squirrel.Teams.Teams] = C:\Users\KeljiX\AppData\Local\Microsoft\Teams\Update.exe --processStart "Teams.exe" --process-start-args "--system-initiated" (file missing)
O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_69584DB13FF3FC48BB9B83215480486C] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5
O4 - HKCU\..\Run: [OneDrive] = C:\Program Files\Microsoft OneDrive\OneDrive.exe /background (Microsoft)
O4 - HKCU\..\Run: [OpenVPN-GUI] = C:\Program Files\OpenVPN\bin\openvpn-gui.exe
O4 - HKCU\..\Run: [Steam] = C:\Program Files (x86)\Steam\steam.exe -silent
O4 - HKCU\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
O4 - HKLM\..\Run: [AdobeGCInvoker-1.0] = C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe
O4 - HKU\S-1-5-18\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized (User 'LocalSystem')
O4 - Startup: C:\Users\KeljiX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel® Processor Identification Utility.lnk    ->    C:\Program Files (x86)\Intel Corporation\Intel Processor Identification Utility\ProcID.exe
O4-32 - HKLM\..\Run: [Adobe CCXProcess] = C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
O4-32 - HKLM\..\Run: [Adobe Creative Cloud] = C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true
O4-32 - HKLM\..\Run: [Intel Driver & Support Assistant] = C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4-32 - HKLM\..\Run: [RazerCortex] = C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe -autorun
O4-32 - HKLM\..\Run: [TeamsMachineInstaller] = C:\Program Files\Teams Installer\Teams.exe --checkInstall --source=PROPLUS (file missing)
O15 - Trusted Zone: https://ikuedu-files.sharepoint.com
O15 - Trusted Zone: https://ikuedu-myfiles.sharepoint.com
O17 - DHCP DNS 1: 208.67.222.222 (Well-known DNS: Cisco OpenDNS)
O17 - DHCP DNS 2: 208.67.220.220 (Well-known DNS: Cisco OpenDNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{04321de5-42dd-4100-9d16-465fa6ad6ce2}: [NameServer] = 208.67.220.220 (Well-known DNS: Cisco OpenDNS)
O17 - HKLM\System\CCS\Services\Tcpip\..\{04321de5-42dd-4100-9d16-465fa6ad6ce2}: [NameServer] = 208.67.222.222 (Well-known DNS: Cisco OpenDNS)
O21 - HKLM\..\ShellIconOverlayIdentifiers\ - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O22 - BITS Job: (download) {16322DE8-0276-4E13-A6F8-1E7212A7CCC7} - https://download-installer.cdn.mozilla.net/pub/firefox/releases/104.0/update/win64/tr/firefox-103.0.2-104.0.partial.mar -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\updates\downloading\update.mar
O22 - BITS Job: (download) {C07B018E-5339-4092-AD3D-98E6B7D5B83A} - https://download-installer.cdn.mozilla.net/pub/firefox/releases/103.0.2/update/win64/tr/firefox-103.0.1-103.0.2.partial.mar -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\updates\downloading\update.mar
O22 - BITS Job: Fix all (including legit)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe
O22 - Task (.job): (Not scheduled) update-S-1-5-21-1645741515-2259805149-346464281-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
O22 - Tasks: (disabled) \Agent Activation Runtime\S-1-5-21-1645741515-2259805149-346464281-1001 - C:\Windows\System32\AgentActivationRuntimeStarter.exe
O22 - Tasks: (disabled) \Microsoft\Windows\Clip\LicenseImdsIntegration - C:\Windows\system32\fclip.exe (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\Windows\System32\Autopilot.dll (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\Windows\System32\Autopilot.dll (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (Microsoft)
O22 - Tasks: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files\Microsoft Office\root\Office16\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Tasks: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files\Microsoft Office\root\Office16\msoia.exe scan upload (Microsoft)
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Tasks: \ASUS\AcPowerNotification - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe (file missing)
O22 - Tasks: \ASUS\ArmourySocketServer - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (file missing)
O22 - Tasks: \ASUS\Framework Service - C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (file missing)
O22 - Tasks: \ASUS\NoiseCancelingEngine - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe (file missing)
O22 - Tasks: \ASUS\P508PowerAgent_sdk - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (file missing)
O22 - Tasks: \Microsoft\Office\Office Performance Monitor - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe (Microsoft)
O22 - Tasks: \Mozilla\Firefox Background Update 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
O22 - Tasks: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
O22 - Tasks: AdobeGCInvoker-1.0 - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe -mode=scheduled
O22 - Tasks: AMDInstallLauncher - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe /InstallAUEP
O22 - Tasks: AMDLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe -AMDLinkUpdate
O22 - Tasks: GoogleUpdateTaskMachineCore{458FA5A4-6AE6-482D-B72C-77FB2CDA8466} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Tasks: GoogleUpdateTaskMachineUA{DCCBEFA9-EE2B-4CDE-BD36-33EBBF728619} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Tasks: IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe --automatic
O22 - Tasks: IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe --automatic
O22 - Tasks: IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (file missing)
O22 - Tasks: MicrosoftEdgeShadowStackRollbackTask - C:\Program Files (x86)\Microsoft\Edge\Application\106.0.1370.42\Installer\setup.exe --handle-crash="$(ProcessPath)"
O22 - Tasks: ModifyLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe -UpdateCurrentUser
O22 - Tasks: OneDrive Per-Machine Standalone Update Task - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe
O22 - Tasks: OneDrive Reporting Task-S-1-5-21-1645741515-2259805149-346464281-1001 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Tasks: RazerCortexScheduleClean - C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe -schtask-1
O22 - Tasks: StartCN - C:\Program Files\AMD\CNext\CNext\cncmd.exe startwithdelay
O22 - Tasks: StartDVR - C:\Program Files\AMD\CNext\CNext\RSServCmd.exe
O22 - Tasks: update-S-1-5-21-1645741515-2259805149-346464281-1001 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O22 - Tasks: update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate
O23 - Service R2: Adobe Genuine Monitor Service - (AGMService) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
O23 - Service R2: Adobe Genuine Software Integrity Service - (AGSService) - C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
O23 - Service R2: AdobeUpdateService - C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
O23 - Service R2: AMD Crash Defender Service - C:\Windows\System32\amdfendrsr.exe
O23 - Service R2: AMD External Events Utility - C:\Windows\System32\DriverStore\FileRepository\u0382767.inf_amd64_2ba2e1bcba1eb9ff\B378972\atiesrxx.exe
O23 - Service R2: ASUS Com Service - (asComSvc) - C:\Program Files (x86)\ASUS\AXSP\4.02.15\atkexComSvc.exe
O23 - Service R2: AsusCertService - C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
O23 - Service R2: CortexLauncherService - C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe
O23 - Service R2: Intel(R) Driver & Support Assistant - (DSAService) - C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
O23 - Service R2: Intel(R) Dynamic Application Loader Host Interface Service - (jhi_service) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
O23 - Service R2: Intel(R) Management Engine WMI Provider Registration - (WMIRegistrationService) - C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
O23 - Service R2: Intel(R) Storage Middleware Service - (RstMwService) - C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_e769ee9bce5bb697\RstMwService.exe
O23 - Service R2: OpenVPN Interactive Service - (OpenVPNServiceInteractive) - C:\Program Files\OpenVPN\bin\openvpnserv.exe
O23 - Service R2: Razer Central Service - (RzActionSvc) - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
O23 - Service R2: Razer Chroma SDK Server - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
O23 - Service R2: Razer Chroma SDK Service - C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
O23 - Service R2: Razer Chroma Stream Server - C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
O23 - Service R2: Razer Game Manager - (Razer Game Manager Service) - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
O23 - Service R2: Razer Game Manager Service 3 - C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
O23 - Service R2: Razer Synapse Service - C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
O23 - Service R2: VMware USB Arbitration Service - (VMUSBArbService) - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
O23 - Service R3: Intel(R) Driver & Support Assistant Updater - (DSAUpdateService) - C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
O23 - Service R3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice.exe /RunAsService
O23 - Service S2: AsusUpdateCheck - C:\Windows\System32\AsusUpdateCheck.exe
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S3: FileSyncHelper - C:\Program Files\Microsoft OneDrive\22.196.0918.0001\FileSyncHelper.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: Intel(R) SUR QC Software Asset Manager - (Intel(R) SUR QC SAM) - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
O23 - Service S3: Mozilla Maintenance Service - (MozillaMaintenance) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service S3: OneDrive Updater Service - C:\Program Files\Microsoft OneDrive\22.196.0918.0001\OneDriveUpdaterService.exe
O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - D:\Rockstar Games\Launcher\RockstarService.exe
O23 - Service S3: SAMSUNG Mobile USB Connectivity Launcher - (ss_conn_launcher_service) - C:\Windows\System32\Samsung\EasySetup\ss_conn_launcher.exe


--
End of file - Time spent: 21,2 sec. - 43618 bytes, CRC32: FFFFFFFF. Sign: 

Logfile of HiJackThis Fork by Alex Dragokas v.2.10.0.10

Platform:  x64 Windows 11 (Pro), 10.0.22000.1098 (ReleaseId: 2009, 21H2), Service Pack: 0
Time:      17.10.2022 - 12:24 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Elevated:  Yes
Ran by:    koray    (group: Administrators) on KORAY-PC, FirstRun: yes

Chrome:  106.0.5249.119
Internet Explorer: 11.0.22000.120
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal

Running processes:
Number | Path
   1  C:\Program Files (x86)\Common Files\Zoom\Support\CptService.exe
   1  C:\Program Files (x86)\KeyDominator2\KeyDominator2\KeyDominator2.exe
   2  C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
   5  C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe
   1  C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
   1  C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
   1  C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
   1  C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
   1  C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
   1  C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
   1  C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
   2  C:\Program Files\Norton Security\Engine\22.22.9.11\NortonSecurity.exe
   1  C:\Program Files\Norton Security\Engine\22.22.9.11\nsWscSvc.exe
   3  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   3  C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
   1  C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
   1  C:\Program Files\reWASD\reWASDService.exe
   1  C:\Program Files\Riot Vanguard\vgtray.exe
   1  C:\Program Files\WindowsApps\Microsoft.GamingServices_7.70.13002.0_x64__8wekyb3d8bbwe\gamingservices.exe
   1  C:\Program Files\WindowsApps\Microsoft.GamingServices_7.70.13002.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
   1  C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.685.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe
   1  C:\Users\koray\Desktop\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\ImmersiveControlPanel\SystemSettings.exe
   1  C:\Windows\RtkBtManServ.exe
   1  C:\Windows\System32\AggregatorHost.exe
   1  C:\Windows\System32\ApplicationFrameHost.exe
   1  C:\Windows\System32\audiodg.exe
   1  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   2  C:\Windows\System32\dllhost.exe
   2  C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1b5e80ff87b1f5c8\Display.NvContainer\NVDisplay.Container.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\LsaIso.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\msiexec.exe
   1  C:\Windows\System32\rundll32.exe
   2  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SecurityHealthSystray.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  71  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\wbem\unsecapp.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe
   1  C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxyServer] = http://libpxy.cc.yildiz.edu.tr:81 (disabled)
O1 - Hosts: Reset contents to default
O1 - Hosts: 127.0.0.1 ic.adobe.io
O1 - Hosts: 127.0.0.1 52.6.155.20
O1 - Hosts: 127.0.0.1 52.10.49.85
O1 - Hosts: 127.0.0.1 23.22.30.141
O1 - Hosts: 127.0.0.1 34.215.42.13
O1 - Hosts: 127.0.0.1 52.84.156.37
O1 - Hosts: 127.0.0.1 65.8.207.109
O1 - Hosts: 127.0.0.1 3.220.11.113
O1 - Hosts: 127.0.0.1 3.221.72.231
O1 - Hosts: 127.0.0.1 3.216.32.253
O1 - Hosts: 127.0.0.1 3.208.248.199
O1 - Hosts: 127.0.0.1 3.219.243.226
O1 - Hosts: 127.0.0.1 13.227.103.57
O1 - Hosts: 127.0.0.1 34.192.151.90
O1 - Hosts: 127.0.0.1 34.237.241.83
O1 - Hosts: 127.0.0.1 44.240.189.42
O1 - Hosts: 127.0.0.1 52.20.222.155
O1 - Hosts: 127.0.0.1 52.208.86.132
O1 - Hosts: 127.0.0.1 54.208.86.132
O1 - Hosts: 127.0.0.1 63.140.38.120
O1 - Hosts: 127.0.0.1 63.140.38.160
O1 - Hosts: 127.0.0.1 63.140.38.169
O1 - Hosts: 127.0.0.1 63.140.38.219
O1 - Hosts: 127.0.0.1 wip.adobe.com
O1 - Hosts: 127.0.0.1 adobeereg.com
O1 - Hosts: 127.0.0.1 18.228.243.121
O1 - Hosts: 127.0.0.1 18.230.164.221
O1 - Hosts: 127.0.0.1 54.156.135.114
O1 - Hosts: 127.0.0.1 54.221.228.134
O1 - Hosts: 127.0.0.1 54.224.241.105
O1 - Hosts: 127.0.0.1 100.24.211.130
O1 - Hosts: 127.0.0.1 162.247.242.20
O1 - Hosts: 127.0.0.1 wip1.adobe.com
O1 - Hosts: 127.0.0.1 wip2.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip4.adobe.com
O1 - Hosts: 127.0.0.1 3dns.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 199.232.114.137
O1 - Hosts: 127.0.0.1 bam.nr-data.net
O1 - Hosts: 127.0.0.1 practivate.adobe
O1 - Hosts: 127.0.0.1 ood.opsource.net
O1 - Hosts: 127.0.0.1 crl.verisign.net
O1 - Hosts: 127.0.0.1 3dns-1.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-4.adobe.com
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O1 - Hosts: 127.0.0.1 genuine.adobe.com
O1 - Hosts: 127.0.0.1 www.adobeereg.com
O1 - Hosts: 127.0.0.1 www.wip.adobe.com
O1 - Hosts: 127.0.0.1 www.wip1.adobe.com
O1 - Hosts: 127.0.0.1 www.wip2.adobe.com
O1 - Hosts: 127.0.0.1 www.wip3.adobe.com
O1 - Hosts: 127.0.0.1 www.wip4.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip.adobe.com
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip1.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip2.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip4.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip1.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip2.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip4.adobe.com
O1 - Hosts: 127.0.0.1 cc-api-data.adobe.io
O1 - Hosts: 127.0.0.1 practivate.adobe.ntp
O1 - Hosts: 127.0.0.1 practivate.adobe.ipp
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-1.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-4.adobe.com
O1 - Hosts: 127.0.0.1 lm.licenses.adobe.com
O1 - Hosts: 127.0.0.1 hlrcv.stage.adobe.com
O1 - Hosts: 127.0.0.1 prod.adobegenuine.com
O1 - Hosts: 127.0.0.1 practivate.adobe.newoa
O1 - Hosts: 127.0.0.1 activate.wip.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 uds.licenses.adobe.com
O1 - Hosts: 127.0.0.1 k.sni.global.fastly.net
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip1.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip2.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip4.adobe.com
O1 - Hosts: 127.0.0.1 na1r.services.adobe.com
O1 - Hosts: 127.0.0.1 lmlicenses.wip4.adobe.com
O1 - Hosts: 127.0.0.1 na2m-pr.licenses.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 workflow-ui-prod.licensingstack.com
O4 - HKCU\..\Run: [BloodyKeyboard] = C:\Program Files (x86)\KeyDominator2\KeyDominator2\KeyDominator2.exe Minimum
O4 - HKCU\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized
O4 - HKCU\..\StartupApproved\Run: [MicrosoftEdgeAutoLaunch_6EE36375AD86FD8EE83227BC6DABFC21] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5 (2021/10/16)
O4 - HKCU\..\StartupApproved\Run: [reWASD Engine] = C:\Program Files\reWASD\reWASDEngine.exe (2022/07/15)
O4 - HKLM\..\Run: [Riot Vanguard] = C:\Program Files\Riot Vanguard\vgtray.exe
O4 - HKLM\..\Run: [RtkAudUService] = C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_31a20374e0a7b123\RtkAudUService64.exe -background (file missing)
O4 - HKLM\..\StartupApproved\Run: [TabletDriverCenter] = C:\Program Files\VKTablet\TabletDriverCenter.exe (2022/08/10)
O4 - HKLM\..\StartupApproved\Run32: [Adobe CCXProcess] = C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe (2022/01/21)
O4 - HKU\S-1-5-18\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized (User 'LocalSystem')
O10 - Unknown file in Winsock LSP: C:\Windows\system32\nlansp_c.dll
O15 - Trusted Zone: https://stdyildizedu-files.sharepoint.com
O15 - Trusted Zone: https://stdyildizedu-myfiles.sharepoint.com
O17 - DHCP DNS 1: 192.168.1.1
O21 - HKLM\..\ShellIconOverlayIdentifiers\ - C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll
O21 - HKLM\..\ShellIconOverlayIdentifiers\ - C:\Program Files\Norton Security\Engine\22.22.9.11\buShell.dll
O21-32 - HKLM\..\ShellIconOverlayIdentifiers\ - C:\Program Files\Norton Security\Engine32\22.22.9.11\buShell.dll
O22 - BITS Job: (download) {CF2C87DB-3CA7-48CF-83A9-541F5D74A338} - https://outlook.office365.com/OAB/e9f05585-ab02-4e1a-88e2-36a7e8fcb267/0006bffd-ca30-4a8f-0000-000000000000/oab.xml -> C:\Users\koray\AppData\Local\Microsoft\Outlook\oab7.xml
O22 - BITS Job: Fix all (including legit)
O22 - Task (.job): (disabled) (Not scheduled) CreateExplorerShellUnelevatedTask.job - C:\Windows\explorer.exe
O22 - Task: (disabled) \Microsoft\Windows\Clip\LicenseImdsIntegration - C:\Windows\system32\fclip.exe (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\Windows\System32\Autopilot.dll (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\Windows\System32\Autopilot.dll (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\MdmDiagnosticsCleanup - C:\Windows\system32\MdmDiagnosticsTool.exe /clean (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (Microsoft)
O22 - Task: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentFallBack2016 - C:\Program Files\Microsoft Office\root\Office16\msoia.exe scan upload mininterval:2880 (Microsoft)
O22 - Task: (telemetry) \Microsoft\Office\OfficeTelemetryAgentLogOn2016 - C:\Program Files\Microsoft Office\root\Office16\msoia.exe scan upload (Microsoft)
O22 - Task: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (Microsoft)
O22 - Task: (telemetry) NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: (telemetry) NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe
O22 - Task: \Microsoft\Office\Office Performance Monitor - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe (Microsoft)
O22 - Task: \Norton 360\Norton 360 Autofix - C:\Program Files\Norton Security\Engine\22.22.9.11\SymErr.exe /ui
O22 - Task: \Norton 360\Norton 360 Error Analyzer - C:\Program Files\Norton Security\Engine\22.22.9.11\SymErr.exe /analyze
O22 - Task: \Norton 360\Norton 360 Error Processor - C:\Program Files\Norton Security\Engine\22.22.9.11\SymErr.exe /submit
O22 - Task: \Remediation\AntimalwareMigrationTask - C:\Program Files\Common Files\AV\Norton 360\Upgrade.exe /upgrade /user_logon
O22 - Task: BlueStacksHelper_nxt - C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe -sr
O22 - Task: GoogleUpdateTaskMachineCore{AFDBB048-0125-474C-AF89-41B1DC0D6FE5} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
O22 - Task: GoogleUpdateTaskMachineUA{502B4251-2E72-445E-A88E-A18A20FEE002} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
O22 - Task: Norton WSC Integration - C:\Program Files\Norton Security\Engine\22.22.9.11\WSCStub.exe /taskschd
O22 - Task: NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
O22 - Task: NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe
O22 - Task: NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler
O22 - Task: NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
O22 - Task: NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe
O23 - Service R2: "Realtek Bluetooth Device Manager Service"    ;RtkServ - (RtkBtManServ) - C:\Windows\RtkBtManServ.exe
O23 - Service R2: Game Controller Mapping Service - (reWASDService) - C:\Program Files\reWASD\reWASDService.exe
O23 - Service R2: GameInput Service - C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe
O23 - Service R2: Gaming Services - (GamingServices) - C:\Program Files\WindowsApps\Microsoft.GamingServices_7.70.13002.0_x64__8wekyb3d8bbwe\GamingServices.exe
O23 - Service R2: Gaming Services - (GamingServicesNet) - C:\Program Files\WindowsApps\Microsoft.GamingServices_7.70.13002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
O23 - Service R2: Norton Security - (NortonSecurity) - C:\Program Files\Norton Security\Engine\22.22.9.11\NortonSecurity.exe /s "NortonSecurity" /m "C:\Program Files\Norton Security\Engine\22.22.9.11\diMaster.dll" /prefetch:1
O23 - Service R2: Norton WSC Service - (nsWscSvc) - C:\Program Files\Norton Security\Engine\22.22.9.11\nsWscSvc.exe
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1b5e80ff87b1f5c8\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1b5e80ff87b1f5c8\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll"
O23 - Service R2: Razer Central Service - (RzActionSvc) - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
O23 - Service R2: Razer Game Manager - (Razer Game Manager Service) - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
O23 - Service R2: Razer Synapse Service - C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
O23 - Service R2: Zoom Sharing Service - (ZoomCptService) - C:\Program Files (x86)\Common Files\Zoom\Support\CptService.exe -user_path "C:\Users\koray\AppData\Roaming\Zoom"
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc
O23 - Service S2: Origin Web Helper Service - D:\Program Files (x86)\Origin\OriginWebHelperService.exe
O23 - Service S3: BattlEye Service - (BEService) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc
O23 - Service S3: NVIDIA FrameView SDK service - (FvSvc) - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe -service
O23 - Service S3: Origin Client Service - D:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - D:\Program Files (x86)\Rockstar Games\Launcher\RockstarService.exe
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice.exe /RunAsService
O23 - Service S3: vgc - C:\Program Files\Riot Vanguard\vgc.exe


--
End of file - Time spent: 14,4 sec. - 38180 bytes, CRC32: FFFFFFFF. Sign: 㤶㵣

O4 - HKCU\..\Run: [MicrosoftEdgeAutoLaunch_69584DB13FF3FC48BB9B83215480486C] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5
O4 - HKCU\..\Run: [OneDrive] = C:\Program Files\Microsoft OneDrive\OneDrive.exe /background (Microsoft)
O4 - HKCU\..\Run: [OpenVPN-GUI] = C:\Program Files\OpenVPN\bin\openvpn-gui.exe
O4 - HKCU\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized
O4 - HKU\S-1-5-18\..\Run: [Synapse3] = C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe /StartMinimized (User 'LocalSystem')
O4 - Startup: C:\Users\KeljiX\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Intel® Processor Identification Utility.lnk    ->    C:\Program Files (x86)\Intel Corporation\Intel Processor Identification Utility\ProcID.exe
O4-32 - HKLM\..\Run: [Adobe Creative Cloud] = C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe --showwindow=false --onOSstartup=true
O4-32 - HKLM\..\Run: [Intel Driver & Support Assistant] = C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe
O4-32 - HKLM\..\Run: [RazerCortex] = C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe -autorun
O22 - BITS Job: (download) {16322DE8-0276-4E13-A6F8-1E7212A7CCC7} - https://download-installer.cdn.mozilla.net/pub/firefox/releases/104.0/update/win64/tr/firefox-103.0.2-104.0.partial.mar -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\updates\downloading\update.mar
O22 - BITS Job: (download) {C07B018E-5339-4092-AD3D-98E6B7D5B83A} - https://download-installer.cdn.mozilla.net/pub/firefox/releases/103.0.2/update/win64/tr/firefox-103.0.1-103.0.2.partial.mar -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\updates\downloading\update.mar
O22 - Tasks: \ASUS\AcPowerNotification - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe (file missing)
O22 - Tasks: \ASUS\ArmourySocketServer - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (file missing)
O22 - Tasks: \ASUS\Framework Service - C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (file missing)
O22 - Tasks: \ASUS\NoiseCancelingEngine - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe (file missing)
O22 - Tasks: \ASUS\P508PowerAgent_sdk - C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (file missing)
O22 - Tasks: AMDLinkUpdate - C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe -AMDLinkUpdate
O22 - Tasks: IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe --automatic
O22 - Tasks: IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe --automatic
O22 - Tasks: IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (file missing)
O22 - Tasks: MicrosoftEdgeShadowStackRollbackTask - C:\Program Files (x86)\Microsoft\Edge\Application\106.0.1370.42\Installer\setup.exe --handle-crash="$(ProcessPath)"
O22 - Tasks: OneDrive Per-Machine Standalone Update Task - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe
O22 - Tasks: OneDrive Reporting Task-S-1-5-21-1645741515-2259805149-346464281-1001 - C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe /reporting
O22 - Tasks: RazerCortexScheduleClean - C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe -schtask-1
O23 - Service S2: AsusUpdateCheck - C:\Windows\System32\AsusUpdateCheck.exe

O4 - HKCU\..\Run: [BloodyKeyboard] = C:\Program Files (x86)\KeyDominator2\KeyDominator2\KeyDominator2.exe Minimum
O4 - HKCU\..\StartupApproved\Run: [MicrosoftEdgeAutoLaunch_6EE36375AD86FD8EE83227BC6DABFC21] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5 (2021/10/16)
O4 - HKCU\..\StartupApproved\Run: [reWASD Engine] = C:\Program Files\reWASD\reWASDEngine.exe (2022/07/15)
O4 - HKLM\..\StartupApproved\Run: [TabletDriverCenter] = C:\Program Files\VKTablet\TabletDriverCenter.exe (2022/08/10)
O22 - Task: \Norton 360\Norton 360 Autofix - C:\Program Files\Norton Security\Engine\22.22.9.11\SymErr.exe /ui
O22 - Task: \Norton 360\Norton 360 Error Analyzer - C:\Program Files\Norton Security\Engine\22.22.9.11\SymErr.exe /analyze
O22 - Task: \Norton 360\Norton 360 Error Processor - C:\Program Files\Norton Security\Engine\22.22.9.11\SymErr.exe /submit
O22 - Task: \Remediation\AntimalwareMigrationTask - C:\Program Files\Common Files\AV\Norton 360\Upgrade.exe /upgrade /user_logon
O22 - Task: Norton WSC Integration - C:\Program Files\Norton Security\Engine\22.22.9.11\WSCStub.exe /taskschd