Rehber HijackThis Log Paylaşımı ve Çözümleri

Logfile of HiJackThis+ (Alpha version) by Alex Dragokas v.3.1.0.2

Platform:  x64 Windows 10 (Home), 10.0.19045.3086 (ReleaseId: 2009, 22H2), Service Pack: 0
Time:      27.06.2023 - 01:25 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Memory:    11475 MiB Free (30 %). CPU Loading: (4 %)
Elevated:  Yes
Ran by:    fpkyz    (group: Administrators; type: Microsoft) on DESKTOP-3UTRFCH, FirstRun: yes

Chrome:  114.0.5735.134
Internet Explorer: 11.0.19041.1566
Default: "C:\Program Files\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal (Secure Boot: On) (Code Integrity: On)

Running processes:
Number | Path
   1  C:\goodbyedpi-0.2.2\x86_64\goodbyedpi.exe
   1  C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
   1  C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe
   1  C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe
   2  C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler64.exe
   1  C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
   1  C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avp.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avpui.exe
   1  C:\Program Files (x86)\LightingService\LightingService.exe
   2  C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe
   1  C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
   1  C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
   1  C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe
   1  C:\Program Files\Acer\NitroSense Service\PSAdminAgent.exe
   1  C:\Program Files\Acer\NitroSense Service\PSAgent.exe
   1  C:\Program Files\Acer\NitroSense Service\PSSvc.exe
   1  C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe
   1  C:\Program Files\bitbeans\Simple DNSCrypt x64\dnscrypt-proxy\dnscrypt-proxy.exe
   1  C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
   2  C:\Program Files\COMODO\COMODO Internet Security\cis.exe
   2  C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
   1  C:\Program Files\Intel\Intel Arc Control\ArcControlService.exe
   1  C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
   1  C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
   2  C:\Program Files\NVIDIA Corporation\NvBroadcast.NvContainer\NvBroadcast.Container.exe
   2  C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
   1  C:\Program Files\NVIDIA Corporation\NVIDIA Broadcast\NVIDIA Broadcast UI.exe
   1  C:\Program Files\NVIDIA Corporation\NVIDIA Broadcast\NvVirtualCamera\NVIDIA Broadcast.exe
   1  C:\Program Files\Riot Vanguard\vgtray.exe
   1  C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4979.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
   1  C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4979.0_x64__8j3eq9eme6ctt\IGCC.exe
   1  C:\Program Files\WindowsApps\Microsoft.GamingServices_13.78.12002.0_x64__8wekyb3d8bbwe\gamingservices.exe
   1  C:\Program Files\WindowsApps\Microsoft.GamingServices_13.78.12002.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
   1  C:\Riot Games\Riot Client\RiotClientCrashHandler.exe
   1  C:\Riot Games\Riot Client\RiotClientServices.exe
   1  C:\Users\fpkyz\OneDrive\Masaüstü\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
   1  C:\Windows\System32\audiodg.exe
   4  C:\Windows\System32\conhost.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\ctfmon.exe
   1  C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
   1  C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
   1  C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
   1  C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
   1  C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
   1  C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_aa8c460a9b7cf2b9\igfxCUIServiceN.exe
   1  C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_aa8c460a9b7cf2b9\igfxEMN.exe
   1  C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
   1  C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4ce8bafd96682424\esif_uf.exe
   1  C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_d41475607d200c40\OneApp.IGCC.WinService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e248cb521a75faf7\IntelCpHDCPSvc.exe
   1  C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_0f43cda6a2474b5c\AS\IAS\IntelAudioService.exe
   1  C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
   2  C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_7f99dc46d04e93fd\Display.NvContainer\NVDisplay.Container.exe
   3  C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_aca6886fc90e37cd\RtkAudUService64.exe
   1  C:\Windows\System32\dwm.exe
   2  C:\Windows\System32\fontdrvhost.exe
   1  C:\Windows\System32\LsaIso.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\rundll32.exe
   3  C:\Windows\System32\RuntimeBroker.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SecurityHealthService.exe
   1  C:\Windows\System32\SecurityHealthSystray.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\SgrmBroker.exe
   1  C:\Windows\System32\sihost.exe
   1  C:\Windows\System32\smartscreen.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  85  C:\Windows\System32\svchost.exe
   2  C:\Windows\System32\taskhostw.exe
   1  C:\Windows\System32\vmcompute.exe
   1  C:\Windows\System32\vmms.exe
   1  C:\Windows\System32\wbem\unsecapp.exe
   2  C:\Windows\System32\wbem\WmiPrvSE.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\System32\wlanext.exe
   2  C:\Windows\System32\WUDFHost.exe
   1  C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
   1  C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
   1  C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe

O1 - Hosts: Reset contents to default
O1 - Hosts: 127.0.0.1 redshell.io.
O1 - Hosts: 127.0.0.1 api.redshell.io.
O1 - Hosts: 127.0.0.1 treasuredata.com.
O1 - Hosts: 127.0.0.1 api.treasuredata.com.
O1 - Hosts: 127.0.0.1 in.treasuredata.com.
O1 - Hosts: 0.0.0.0 redshell.io.
O1 - Hosts: 0.0.0.0 api.redshell.io.
O1 - Hosts: 0.0.0.0 treasuredata.com.
O1 - Hosts: 0.0.0.0 in.treasuredata.com.
O1 - Hosts: 0.0.0.0 api.treasuredata.com
O1 - Hosts.ICS: 172.31.64.1 DESKTOP-3UTRFCH.mshome.net # 2028 6 6 24 22 24 32 715
O1 - Hosts.ICS: .21.115.52 kyzen-Virtual-Machine.mshome.net # 2023 6 6 17 17 20 10 287
O1 - Hosts.ICS: 7
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll (sign: 'Oracle America, Inc.')
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre-1.8\bin\ssv.dll (sign: 'Oracle America, Inc.')
O4 - ActiveSetup: HKLM\..\{8A69D345-D564-463c-AFF1-A69D9E530F96}: [StubPath] = C:\Program Files\Google\Chrome\Application\114.0.5735.134\Installer\chrmstp.exe --configure-user-settings --verbose-logging --system-level --channel=stable (sign: 'Google LLC')
O4 - Autorun.inf: D:\autorun.inf - open - AutoRun\AutoRunX\AutoRunX.exe (file missing)
O4 - HKCU\..\StartupApproved\Run: [MicrosoftEdgeAutoLaunch_5A35D542A36B53B21BBC8A93E32ED37B] = C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe --no-startup-window --win-session-start /prefetch:5 (2023/03/18) (sign: 'Microsoft')
O4 - HKCU\..\StartupApproved\Run: [ProtonVPN] = C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe (2023/04/04) (sign: 'Proton Technologies AG')
O4 - HKLM\..\Run: [Riot Vanguard] = C:\Program Files\Riot Vanguard\vgtray.exe (sign: 'Riot Games, Inc.')
O4 - HKLM\..\Run: [RtkAudUService] = C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_aca6886fc90e37cd\RtkAudUService64.exe -background (sign: 'Microsoft')
O4 - HKLM\..\StartupApproved\Run32: [Intel Driver & Support Assistant] = C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (2023/03/18) (sign: 'Intel Corporation')
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe (sign: 'Kilonova LLC')
O4-32 - HKLM\..\Run: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (sign: 'Oracle America, Inc.')
O7 - Policy: HKLM\Software\Microsoft\Windows Defender: [DisableAntiSpyware] = 1
O7 - Policy: HKLM\Software\Microsoft\Windows Defender: [DisableAntiVirus] = 1
O17 - DHCP DNS 1: 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{ea902db3-165d-4569-9f9d-aaeb82f55031}: [NameServer] = 156.154.70.25
O17 - HKLM\System\CCS\Services\Tcpip\..\{ea902db3-165d-4569-9f9d-aaeb82f55031}: [NameServer] = 156.154.71.25
O22 - Task (.job): (Not scheduled) update-S-1-5-21-3321202877-3430668699-1019276826-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe (sign: 'OOO Lightshot')
O22 - Task (.job): (Not scheduled) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe (sign: 'OOO Lightshot')
O22 - Tasks: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_AC - C:\Windows\system32\MusNotification.exe /RunOnAC Reboot (sign: 'Microsoft')
O22 - Tasks: (disabled) (update) \Microsoft\Windows\UpdateOrchestrator\Reboot_Battery - C:\Windows\system32\MusNotification.exe /RunOnBattery Reboot (sign: 'Microsoft')
O22 - Tasks: (disabled) \Agent Activation Runtime\S-1-5-21-3321202877-3430668699-1019276826-1001 - C:\Windows\System32\AgentActivationRuntimeStarter.exe (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Autopilot\DetectHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},DetectHardwareChange - C:\Windows\System32\Autopilot.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Autopilot\RemediateHardwareChange - {62B2DD2C-F129-42EE-BF59-55D3FD21C215},RemediateHardwareChange - C:\Windows\System32\Autopilot.dll (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\Retry - C:\Windows\system32\ProvTool.exe /turn 5 /source ProvRetryTask (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\Management\Provisioning\RunOnReboot - C:\Windows\system32\ProvTool.exe /turn 5 /source ContinueSessionTask (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work - C:\Windows\system32\usoclient.exe StartMaintenanceWork (sign: 'Microsoft')
O22 - Tasks: (disabled) \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work - C:\Windows\system32\usoclient.exe StartWork (sign: 'Microsoft')
O22 - Tasks: (telemetry) \COMODO\COMODO Telemetry {18AD3DFA-30C0-4B5F-84F7-F1870B1A4921} - C:\Program Files\COMODO\COMODO Internet Security\cis.exe --telemetry (sign: 'Comodo Security Solutions, Inc.')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\PcaPatchDbTask - C:\Windows\system32\rundll32.exe C:\Windows\system32\PcaSvc.dll,PcaPatchSdbTask (sign: 'Microsoft')
O22 - Tasks: (telemetry) NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (sign: 'NVIDIA Corporation')
O22 - Tasks: (telemetry) NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (sign: 'NVIDIA Corporation')
O22 - Tasks: (telemetry) NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (sign: 'NVIDIA Corporation')
O22 - Tasks: (telemetry) NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (sign: 'NVIDIA Corporation')
O22 - Tasks: \ASUS\ASUSUpdateTaskMachineCore1d96d45b6280393 - C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe /c (sign: 'ASUSTeK COMPUTER INC.')
O22 - Tasks: \ASUS\ASUSUpdateTaskMachineUA - C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe /ua /installsource scheduler (sign: 'ASUSTeK COMPUTER INC.')
O22 - Tasks: \CareCenter\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}_Reg_HKLMRun - C:\Program Files\COMODO\COMODO Internet Security\cis.exe --cistrayUI (sign: 'Comodo Security Solutions, Inc.')
O22 - Tasks: \CareCenter\Discord_Reg_HKCURun_S-1-5-21-3321202877-3430668699-1019276826-1001 - C:\Users\fpkyz\AppData\Local\Discord\Update.exe --processStart Discord.exe (sign: 'Discord Inc.')
O22 - Tasks: \CareCenter\Intel Driver & Support Assistant_Reg_HKLMWow6432Run - C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe (sign: 'Intel Corporation')
O22 - Tasks: \CareCenter\Lightshot_Reg_HKLMWow6432Run - C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe (sign: 'Kilonova LLC')
O22 - Tasks: \CareCenter\ProtonVPN_Reg_HKCURun_S-1-5-21-3321202877-3430668699-1019276826-1001 - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe (sign: 'Proton Technologies AG')
O22 - Tasks: \CareCenter\RiotClient_Reg_HKCURun_S-1-5-21-3321202877-3430668699-1019276826-1001 - C:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (sign: 'Riot Games, Inc.')
O22 - Tasks: \CareCenter\SunJavaUpdateSched_Reg_HKLMWow6432Run - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (sign: 'Oracle America, Inc.')
O22 - Tasks: \COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} - C:\Program Files\COMODO\COMODO Internet Security\cis.exe --cistrayUI (sign: 'Comodo Security Solutions, Inc.')
O22 - Tasks: \COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627} - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {06A09C0F-DD9C-4191-A670-71115CD78627} (sign: 'Comodo Security Solutions, Inc')
O22 - Tasks: \COMODO\COMODO Maintenance {947247B5-026A-4437-9371-770782BE839D} - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {947247B5-026A-4437-9371-770782BE839D} (sign: 'Comodo Security Solutions, Inc')
O22 - Tasks: \COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {F140D794-60B6-4F00-9235-D6457AA25B22} (sign: 'Comodo Security Solutions, Inc')
O22 - Tasks: \COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} (sign: 'Comodo Security Solutions, Inc')
O22 - Tasks: \COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} - C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe --launchSchedule {A6D52E4F-569B-4756-B3D8-DF217313DA85} (sign: 'Comodo Security Solutions, Inc')
O22 - Tasks: ACCAgent - C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe (sign: 'Acer Incorporated')
O22 - Tasks: ACCBackgroundApplication - C:\Program Files (x86)\Acer\Care Center\ACCStd.exe (sign: 'Acer Incorporated')
O22 - Tasks: Google Play Games Notifier - C:\Program Files\Google\Play Games\Bootstrapper.exe /bg (sign: 'Google LLC')
O22 - Tasks: GoogleUpdateTaskMachineCore{A980CCCE-8F44-4D13-AF40-694550C38645} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c (sign: 'Google LLC')
O22 - Tasks: GoogleUpdateTaskMachineUA{033B0CDB-3788-447C-9F38-C8CA8EF97054} - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler (sign: 'Google LLC')
O22 - Tasks: IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe --automatic (sign: 'Intel Corporation')
O22 - Tasks: IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe --automatic (sign: 'Intel Corporation')
O22 - Tasks: iTopVPN_Scheduler_fpkyz - C:\Program Files (x86)\iTop VPN\iTopVPN.exe /autostart (file missing)
O22 - Tasks: iTopVPN_SkipUAC_fpkyz - C:\Program Files (x86)\iTop VPN\iTopVPN.exe /SkipUac (file missing)
O22 - Tasks: iTopVPN_Update_fpkyz - C:\Program Files (x86)\iTop VPN\atud.exe /auto (file missing)
O22 - Tasks: Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} - C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe /waitUpgrade (sign: 'Kaspersky Lab JSC')
O22 - Tasks: NitroSense - C:\Program Files\Acer\NitroSense Service\PSLauncher.exe (sign: 'Acer Incorporated')
O22 - Tasks: NvBroadcast_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NVIDIA Broadcast\NVIDIA Broadcast UI.exe -minimized (sign: 'NVIDIA Corporation')
O22 - Tasks: NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log (sign: 'Nvidia Corporation')
O22 - Tasks: NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (sign: 'Nvidia Corporation')
O22 - Tasks: NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler (sign: 'NVIDIA Corporation')
O22 - Tasks: NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (sign: 'NVIDIA Corporation')
O22 - Tasks: NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (sign: 'NVIDIA Corporation')
O22 - Tasks: OneDrive Reporting Task-S-1-5-21-3321202877-3430668699-1019276826-1001 - C:\Users\fpkyz\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (sign: 'Microsoft')
O22 - Tasks: Software Update Application - C:\ProgramData\OEM\UpgradeTool\ListCheck.exe (sign: 'Acer Incorporated')
O22 - Tasks: update-S-1-5-21-3321202877-3430668699-1019276826-1001 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate (sign: 'OOO Lightshot')
O22 - Tasks: update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate (sign: 'OOO Lightshot')
O22 - Tasks: Wise Turbo Checker.job - C:\Program Files (x86)\Wise\Wise Care 365\WiseTurbo.exe (sign: 'Lespeed Technology Co., Ltd')
O23 - Service R2: ACC Service - (ACCSvc) - C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe (sign: 'Acer Incorporated')
O23 - Service R2: ASUS AURA SYNC lighting service - (LightingService) - C:\Program Files (x86)\LightingService\LightingService.exe (sign: 'ASUSTeK COMPUTER INC.')
O23 - Service R2: COMODO Internet Security Helper Service - (CmdAgent) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe (sign: 'Comodo Security Solutions, Inc.')
O23 - Service R2: COMODO Internet Security Protected Helper Service - (CmdAgentProt) - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe /ProtectedSvc (sign: 'Comodo Security Solutions, Inc.')
O23 - Service R2: DNSCrypt client proxy - (dnscrypt-proxy) - C:\Program Files\bitbeans\Simple DNSCrypt x64\dnscrypt-proxy\dnscrypt-proxy.exe -config dnscrypt-proxy.toml (sign: 'Christian Hermann')
O23 - Service R2: GameInput Service - C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe (sign: 'Microsoft')
O23 - Service R2: GameSDK Service - C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe (sign: 'ASUSTeK COMPUTER INC.')
O23 - Service R2: Gaming Services - (GamingServices) - C:\Program Files\WindowsApps\Microsoft.GamingServices_13.78.12002.0_x64__8wekyb3d8bbwe\GamingServices.exe (sign: 'Microsoft')
O23 - Service R2: Gaming Services - (GamingServicesNet) - C:\Program Files\WindowsApps\Microsoft.GamingServices_13.78.12002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe (sign: 'Microsoft')
O23 - Service R2: GoodbyeDPI - C:\goodbyedpi-0.2.2\x86_64\goodbyedpi.exe -5 --blacklist "C:\goodbyedpi-0.2.2\russia-blacklist.txt" (not signed)
O23 - Service R2: Intel(R) Arc Control Service - (IntelArcControlService) - C:\Program Files\Intel\Intel Arc Control\ArcControlService.exe (sign: 'Intel Corporation')
O23 - Service R2: Intel(R) Audio Service - (IntelAudioService) - C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_0f43cda6a2474b5c\\AS\\IAS\\IntelAudioService.exe (sign: 'Microsoft')
O23 - Service R2: Intel(R) Content Protection HDCP Service - (cplspcon) - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e248cb521a75faf7\IntelCpHDCPSvc.exe (sign: 'Microsoft')
O23 - Service R2: Intel(R) Driver & Support Assistant - (DSAService) - C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe (sign: 'Intel Corporation')
O23 - Service R2: Intel(R) Dynamic Application Loader Host Interface Service - (jhi_service) - C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe (sign: 'Microsoft')
O23 - Service R2: Intel(R) Dynamic Tuning service - (esifsvc) - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4ce8bafd96682424\esif_uf.exe (sign: 'Microsoft')
O23 - Service R2: Intel(R) Graphics Command Center Service - (igccservice) - C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_d41475607d200c40\OneApp.IGCC.WinService.exe (sign: 'Microsoft')
O23 - Service R2: Intel(R) HD Graphics Control Panel Service - (igfxCUIService2.0.0.0) - C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_aa8c460a9b7cf2b9\igfxCUIServiceN.exe (sign: 'Microsoft')
O23 - Service R2: Intel(R) Management and Security Application Local Management Service - (LMS) - C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe (sign: 'Microsoft')
O23 - Service R2: Kaspersky Hizmeti 21.13 - (AVP21.13) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avp.exe -r (sign: 'Kaspersky Lab JSC')
O23 - Service R2: Killer Analytics Service - C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe (sign: 'Microsoft')
O23 - Service R2: Killer Network Service - C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe (sign: 'Microsoft')
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (sign: 'Microsoft') (+safe mode)
O23 - Service R2: NVIDIA Broadcast LocalSystem Container - (NvBroadcast.ContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvBroadcast.NvContainer\NvBroadcast.Container.exe -s NvBroadcast.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NvBroadcast.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvBroadcast.NvContainer\plugins\LocalSystem" -r -p 30000  (sign: 'Nvidia Corporation')
O23 - Service R2: NVIDIA Display Container LS - (NVDisplay.ContainerLocalSystem) - C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_7f99dc46d04e93fd\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_7f99dc46d04e93fd\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem (sign: 'Microsoft')
O23 - Service R2: NVIDIA LocalSystem Container - (NvContainerLocalSystem) - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -s NvContainerLocalSystem -a -f "C:\ProgramData\NVIDIA\NvContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem" -r -p 30000 -st "C:\Program Files\NVIDIA Corporation\NvContainer\NvContainerTelemetryApi.dll" (sign: 'Nvidia Corporation')
O23 - Service R2: Realtek Audio Universal Service - (RtkAudioUniversalService) - C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_aca6886fc90e37cd\RtkAudUService64.exe (sign: 'Microsoft')
O23 - Service R2: ROG Live Service - C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (sign: 'ASUSTeK COMPUTER INC.')
O23 - Service R2: Wise Boot Assistant - (WiseBootAssistant) - C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe (sign: 'Lespeed Technology Co., Ltd')
O23 - Service R2: xTendUtilityService - C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe (sign: 'Microsoft')
O23 - Service R3: Intel(R) Driver & Support Assistant Updater - (DSAUpdateService) - C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe (sign: 'Intel Corporation')
O23 - Service R3: Killer Smart AP Selection Service - (KAPSService) - C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe (sign: 'Microsoft')
O23 - Service R3: Predator Service - (PSSvc) - C:\Program Files\Acer\NitroSense Service\PSSvc.exe (sign: 'Acer Incorporated')
O23 - Service S2: ASUS Güncelleme Hizmeti (asus) - (asus) - C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe /svc (sign: 'ASUSTeK COMPUTER INC.')
O23 - Service S2: AsusROGLSLService Download ROGLSLoader - (AsusROGLSLService) - C:\Program Files (x86)\ASUS\AsusROGLSLService\AsusROGLSLService.exe -runservice (sign: 'ASUSTeK COMPUTER INC.')
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc (sign: 'Google LLC')
O23 - Service S2: Intel(R) TPM Provisioning Service - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\TPMProvisioningService.exe (sign: 'Microsoft')
O23 - Service S2: xTendSoftAPService - C:\Windows\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe (sign: 'Microsoft')
O23 - Service S3: Armoury Live Update - (ArmouryLiveUpdate) - C:\Windows\System32\DriverStore\FileRepository\rogms.inf_amd64_9074891d243b506d\ArmouryLiveUpdate.exe (sign: 'Microsoft')
O23 - Service S3: ASUS Güncelleme Hizmeti (asusm) - (asusm) - C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe /medsvc (sign: 'ASUSTeK COMPUTER INC.')
O23 - Service S3: BattlEye Service - (BEService) - C:\Program Files (x86)\Common Files\BattlEye\BEService.exe (sign: 'BattlEye Innovations e.K.')
O23 - Service S3: COMODO Virtual Service Manager - (cmdvirth) - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe (sign: 'Comodo Security Solutions, Inc.')
O23 - Service S3: Easy Anti-Cheat (Epic Online Services) - (EasyAntiCheat_EOS) - C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe (sign: 'EasyAntiCheat Oy')
O23 - Service S3: EasyAntiCheat - C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe (sign: 'EasyAntiCheat Oy')
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe (sign: 'Epic Games Inc.')
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files\Google\Chrome\Application\114.0.5735.134\elevation_service.exe (sign: 'Google LLC')
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc (sign: 'Google LLC')
O23 - Service S3: Intel(R) Capability Licensing Service TCP IP Interface - C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe (sign: 'Microsoft')
O23 - Service S3: Intel(R) SUR QC Software Asset Manager - (Intel(R) SUR QC SAM) - C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe (sign: 'Intel Corporation')
O23 - Service S3: Kaspersky Volume Shadow Copy Service Bridge 21.13 - (klvssbridge64_21.13) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\x64\vssbridge64.exe (sign: 'Kaspersky Lab JSC')
O23 - Service S3: Killer Dynamic Bandwidth Management - (KNDBWM) - C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe (sign: 'Microsoft')
O23 - Service S3: NVIDIA FrameView SDK service - (FvSvc) - C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe -service (sign: 'NVIDIA Corporation')
O23 - Service S3: ProtonVPN Service - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe (sign: 'Proton Technologies AG')
O23 - Service S3: ProtonVPN WireGuard - C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.WireGuardService.exe "C:\ProgramData\ProtonVPN\WireGuard\ProtonVPN.conf" (sign: 'Proton Technologies AG')
O23 - Service S3: Rockstar Game Library Service - (Rockstar Service) - C:\Program Files\Rockstar Games\Launcher\RockstarService.exe (sign: 'Rockstar Games, Inc.')
O23 - Service S3: Steam Client Service - C:\Program Files (x86)\Common Files\Steam\steamservice.exe /RunAsService (sign: 'Valve Corp.')
O23 - Service S3: Uncheater for BattleGrounds_GL - (ucldr_battlegrounds_gl) - C:\Program Files\Common Files\Wellbia.com\ucldr_battlegrounds_gl.exe (sign: 'Wellbia.com Co., Ltd.')
O23 - Service S3: vgc - C:\Program Files\Riot Vanguard\vgc.exe (sign: 'Riot Games, Inc.')
O23 - Service S3: Zakynthos Service - (zksvc) - C:\Program Files\Common Files\PUBG\zksvc.exe (sign: 'KRAFTON, Inc.')
O23 - Driver R: The WinDivert driver [URL: https://reqrypt.org/windivert.html] [Bitcoin: 1C5vZVSbizPeZ8ydTYhUfm4LA2cNwBfcYh] - C:\goodbyedpi-0.2.2\x86_64\WinDivert64.sys (sign: 'Ars Nova Systems')
O23 - Driver R0: AO Kaspersky Lab Cryptographic Module x64 (56 bit) - (cm_km) - C:\Windows\system32\DRIVERS\cm_km.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: klupd_Kaspersky4Win-21-13_arkmon - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_arkmon.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: klupd_Kaspersky4Win-21-13_klbg - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_klbg.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: COMODO Internet Security Eradication Driver - (cmderd) - C:\Windows\System32\DRIVERS\cmderd.sys (+safe mode) (sign: 'Comodo Security Solutions, Inc.')
O23 - Driver R1: COMODO Internet Security Firewall Driver - (inspect) - C:\Windows\system32\DRIVERS\inspect.sys (+safe mode) (sign: 'Comodo Security Solutions, Inc.')
O23 - Driver R1: COMODO Internet Security Helper Driver - (cmdhlp) - C:\Windows\system32\DRIVERS\cmdhlp.sys (+safe mode) (sign: 'Comodo Security Solutions, Inc.')
O23 - Driver R1: COMODO Internet Security Sandbox Driver - (cmdGuard) - C:\Windows\system32\DRIVERS\cmdguard.sys (sign: 'Comodo Security Solutions, Inc.')
O23 - Driver R1: Kaspersky Anti-Virus NDIS 6 Filter - (klim6) - C:\Windows\system32\DRIVERS\klim6.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Driver.Kaspersky4Win-21-13 - (KLIF.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klif.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab format recognizer driver.Kaspersky4Win-21-13 - (klpd.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klpd.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Kernel DLL.Kaspersky4Win-21-13 - (KLFLT.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klbackupdisk.Kaspersky4Win-21-13 - (klbackupdisk.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klbackupdisk.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klbackupflt.Kaspersky4Win-21-13 - (klbackupflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klbackupflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab KLKBDFLT.Kaspersky4Win-21-13 - (klkbdflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klkbdflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klpnpflt.Kaspersky4Win-21-13 - (klpnpflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klpnpflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Security Extender Driver.Kaspersky4Win-21-13 - (klgse.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klgse.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab service driver.Kaspersky4Win-21-13 - (KLHK.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klhk.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: kldisk.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\kldisk.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: klwfp.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klwfp.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: klwtp.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klwtp.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: kneps.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\kneps.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Malwarebytes Anti-Exploit - (ESProtectionDriver) - C:\Windows\system32\drivers\mbae64.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R1: vgk - C:\Program Files\Riot Vanguard\vgk.sys (sign: 'Riot Games, Inc.')
O23 - Driver R2: MBAMChameleon - C:\Windows\System32\Drivers\MbamChameleon.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: ___ Windows 10 64 Bit için Intel(R) Wireless Bağdaştırıcı Sürücüsü  - (Netwtw10) - C:\Windows\System32\drivers\Netwtw10.sys (+safe mode) (sign: 'Intel Wireless Driver')
O23 - Driver R3: Acer Airplane Mode Controller - (AcerAirplaneModeController) - C:\Windows\System32\drivers\AcerAirplaneModeController.sys (sign: 'Acer Incorporated')
O23 - Driver R3: dptf_acpi - C:\Windows\System32\DriverStore\FileRepository\dptf_acpi.inf_amd64_58a6d4f6ac5608c6\dptf_acpi.sys (+safe mode) (sign: 'Intel Corporation')
O23 - Driver R3: dptf_cpu - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4ce8bafd96682424\dptf_cpu.sys (+safe mode) (sign: 'Intel Corporation')
O23 - Driver R3: esif_lf - C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4ce8bafd96682424\esif_lf.sys (+safe mode) (sign: 'Intel Corporation')
O23 - Driver R3: igfxn - C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e248cb521a75faf7\igdkmdn64.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel(R) GNA Scoring Accelerator service - (IntelGNA) - C:\Windows\System32\DriverStore\FileRepository\gna.inf_amd64_689d3d5fefeef458\gna.sys (sign: 'Gaussian Mixture Models and Neural Networks Accelerator')
O23 - Driver R3: Intel(R) Management Engine Interface  - (MEIx64) - C:\Windows\System32\DriverStore\FileRepository\heci.inf_amd64_605dda426937489f\x64\TeeDriverW10x64.sys (sign: 'Intel(R) Embedded Subsystems and IP Blocks Group')
O23 - Driver R3: Intel(R) Serial IO GPIO Driver v2 - (iaLPSS2_GPIO2_TGL) - C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_42e0121b9785f90e\iaLPSS2_GPIO2_TGL.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel(R) Serial IO I2C Driver v2 - (iaLPSS2_I2C_TGL) - C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_70d4531ccdd0c3c2\iaLPSS2_I2C_TGL.sys (+safe mode) (sign: 'Intel Corporation')
O23 - Driver R3: Intel(R) Serial IO SPI Driver v2 - (iaLPSS2_SPI_TGL) - C:\Windows\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_b9ae9f760b62c73a\iaLPSS2_SPI_TGL.sys (+safe mode) (sign: 'Intel Corporation')
O23 - Driver R3: Intel(R) Serial IO UART Driver v2 - (iaLPSS2_UART2_TGL) - C:\Windows\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_da87610cdf3862a4\iaLPSS2_UART2_TGL.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel(R) Wireless Bluetooth(R) - (ibtusb) - C:\Windows\System32\DriverStore\FileRepository\ibtusb.inf_amd64_723c8f13c52715bb\ibtusb.sys (+safe mode) (sign: 'Intel(R) Wireless Connectivity Solutions')
O23 - Driver R3: Intel® Smart Sound Technology BUS - (IntcAudioBus) - C:\Windows\System32\DriverStore\FileRepository\intcaudiobus.inf_amd64_a5bfc4a9cc7fdf5a\IntcAudioBus.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel® Smart Sound Technology for Bluetooth® Audio - (IntcBTAu) - C:\Windows\System32\DriverStore\FileRepository\intcbtau.inf_amd64_42d4c8c359e6d3fb\IntcBTAu.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel® Smart Sound Technology for USB Audio - (IntcUSB) - C:\Windows\System32\DriverStore\FileRepository\intcusb.inf_amd64_2cc98897d8dddf62\IntcUSB.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel® Smart Sound Technology OED - (IntcOED) - C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_0f43cda6a2474b5c\IntcOED.sys (sign: 'Intel Corporation')
O23 - Driver R3: Kaspersky Lab KLMOUFLT.Kaspersky4Win-21-13 - (klmouflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klmouflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: KfeCoSvc - C:\Windows\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys (sign: 'Rivet Networks LLC')
O23 - Driver R3: Killer E2500/E2600 NDIS 6.40 64-bit Driver - (e2kw10x64) - C:\Windows\System32\drivers\e2kw10x64.sys (+safe mode) (sign: 'Realtek Semiconductor Corp.')
O23 - Driver R3: klids.Kaspersky4Win-21-13 - C:\ProgramData\Kaspersky Lab\AVP21.13\Bases\klids.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: klupd_Kaspersky4Win-21-13_klark - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_klark.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: klupd_Kaspersky4Win-21-13_mark - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_mark.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: MBAMFarflt - C:\Windows\system32\DRIVERS\farflt.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: MBAMProtection - C:\Windows\system32\DRIVERS\mbam.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: MBAMSwissArmy - C:\Windows\System32\Drivers\mbamswissarmy.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: MBAMWebProtection - C:\Windows\system32\DRIVERS\mwac.sys (sign: 'Malwarebytes Inc.')
O23 - Driver R3: NVIDIA Broadcast - (nvrtxvad_WaveExtensible) - C:\Windows\system32\drivers\nvrtxvad64v.sys (sign: 'Nvidia Corporation')
O23 - Driver R3: NVIDIA Virtual Audio Device (Wave Extensible) (WDM) - (nvvad_WaveExtensible) - C:\Windows\system32\drivers\nvvad64v.sys (sign: 'Nvidia Corporation')
O23 - Driver R3: nvlddmkm - C:\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_7f99dc46d04e93fd\nvlddmkm.sys (sign: 'NVIDIA Corporation')
O23 - Driver R3: NvModuleTracker - C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys (sign: 'Nvidia Corporation')
O23 - Driver R3: NVPCF Service - (nvpcf) - C:\Windows\System32\drivers\nvpcf.sys (sign: 'NVIDIA Corporation')
O23 - Driver R3: NVVHCI Enumerator Service - (nvvhci) - C:\Windows\System32\drivers\nvvhci.sys (sign: 'Nvidia Corporation')
O23 - Driver R3: ROG Keyboard - (ROGKB) - C:\Windows\System32\DriverStore\FileRepository\rogkb.inf_amd64_d77507607440a92c\ROGKB.sys (sign: 'ASUSTeK COMPUTER INC.')
O23 - Driver R3: ROG Mouse - (ROGMS) - C:\Windows\System32\DriverStore\FileRepository\rogms.inf_amd64_9074891d243b506d\ROGMS.sys (sign: 'ASUSTeK COMPUTER INC.')
O23 - Driver R3: Service for NVIDIA High Definition Audio Driver - (NVHDA) - C:\Windows\system32\drivers\nvhda64v.sys (sign: 'Nvidia Corporation')
O23 - Driver R3: Service for Realtek HD Audio (WDM) - (IntcAzAudAddService) - C:\Windows\system32\drivers\RTKVHD64.sys (sign: 'Realtek Semiconductor Corp.')
O23 - Driver R3: Synaptics HID Service - (SynRMIHID) - C:\Windows\System32\drivers\SynRMIHID.sys (sign: 'Synaptics Incorporated')
O23 - Driver R3: TAP-ProtonVPN Windows Adapter V9 - (tapprotonvpn) - C:\Windows\System32\drivers\tapprotonvpn.sys (+safe mode) (sign: 'Microsoft' - The OpenVPN Project)
O23 - Driver R3: Wintun - (wintun) - C:\Windows\system32\DRIVERS\wintun.sys (+safe mode) (sign: 'Microsoft' - WireGuard LLC)
O23 - Driver S3: BERT Reader Service - (bertreader) - C:\Windows\System32\drivers\bertreader.sys (sign: 'Intel Corporation')
O23 - Driver S3: Intel(R) Serial IO GPIO Controller Driver - (iaLPSSi_GPIO) - C:\Windows\System32\drivers\iaLPSSi_GPIO.sys (sign: 'Intel Corporation - Client Components Group')
O23 - Driver S3: ProtonVPN Callout - (ProtonVPNCallout) - C:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys (+safe mode) (sign: 'Microsoft' - Proton Technologies AG)
O23 - Driver S3: VoiceAIDriver - C:\Windows\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.sys (sign: 'Voice AI LLC')
O23 - Driver S3: WireGuard - C:\Windows\System32\drivers\wireguard.sys (sign: 'Microsoft' - WireGuard LLC)
O23 - Driver S3: WiseHDInfo - C:\Windows\WiseHDInfo64.dll (sign: 'Beijing Lang Xingda Network Technology Co., Ltd')
O23 - Driver S3: xhunter1 - C:\Windows\xhunter1.sys (sign: 'Wellbia.com Co., Ltd.')
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'e2kw10x64'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'inspect'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'klim6'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'klwfp.Kaspersky4Win-21-13'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'klwtp.Kaspersky4Win-21-13'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'Netwtw10'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'ProtonVPNCallout'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'tapprotonvpn'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'wintun'


--
End of file - Time spent: 23,3 sec. - 85608 bytes, CRC32: FFFFFFFF. Sign: 㩗㔻

Logfile of HiJackThis+ (Alpha version) by Alex Dragokas v.3.1.0.2

Platform:  x64 Windows 8.1 (Home Single Language), 6.3.9600.20778, Service Pack: 0
Time:      28.06.2023 - 18:14 (UTC+03:00)
Language:  OS: Turkish (0x41F). Display: Turkish (0x41F). Non-Unicode: Turkish (0x41F)
Memory:    5712 MiB Free (26 %). CPU Loading: (2 %)
Elevated:  Yes
Ran by:    Casper    (group: Administrators) on CASPERNIRVANA, FirstRun: yes

Chrome:  109.0.5414.149
Firefox: 114.0.2.8570
Internet Explorer: 11.0.9600.20671
Default: "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --single-argument %1 (Google Chrome)

Boot mode: Normal (Secure Boot: On)

Running processes:
Number | Path
   1  C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler.exe
   1  C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler64.exe
   2  C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avp.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avpui.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksde.exe
   1  C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksdeui.exe
   1  C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
   1  C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
   1  C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
   1  C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
   1  C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
   1  C:\Users\Casper\Desktop\HiJackThis.exe
   1  C:\Windows\explorer.exe
   1  C:\Windows\servicing\TrustedInstaller.exe
   1  C:\Windows\System32\audiodg.exe
   2  C:\Windows\System32\csrss.exe
   1  C:\Windows\System32\dasHost.exe
   1  C:\Windows\System32\dwm.exe
   1  C:\Windows\System32\lsass.exe
   1  C:\Windows\System32\SearchFilterHost.exe
   1  C:\Windows\System32\SearchIndexer.exe
   1  C:\Windows\System32\SearchProtocolHost.exe
   1  C:\Windows\System32\services.exe
   1  C:\Windows\System32\smss.exe
   1  C:\Windows\System32\spoolsv.exe
  12  C:\Windows\System32\svchost.exe
   1  C:\Windows\System32\taskeng.exe
   1  C:\Windows\System32\taskhostex.exe
   1  C:\Windows\System32\wininit.exe
   1  C:\Windows\System32\winlogon.exe
   1  C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.19991_none_fa0fb7959b4c8c91\TiWorker.exe

O2 - HKLM\..\BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (file missing)
O2 - HKLM\..\BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll (sign: 'Oracle America, Inc.')
O2 - HKLM\..\BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre-1.8\bin\ssv.dll (sign: 'Oracle America, Inc.')
O4 - ActiveSetup: HKLM\..\{8A69D345-D564-463c-AFF1-A69D9E530F96}: [StubPath] = C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.149\Installer\chrmstp.exe --configure-user-settings --verbose-logging --system-level (sign: 'Google LLC')
O4 - ActiveSetup: HKLM\..\{9459C573-B17A-45AE-9F64-1857B5D58CEE}: [StubPath] = C:\Program Files (x86)\Microsoft\Edge\Application\88.0.705.81\Installer\setup.exe --configure-user-settings --verbose-logging --system-level --msedge (sign: 'Microsoft')
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] = C:\Windows\system32\spool\DRIVERS\x64\3\E_YATISME.EXE /EPT "EPLTarget\P0000000000000000" /M "L4160 Series" (not signed)
O4 - HKCU\..\StartupApproved\Run: [Discord] = C:\Users\Casper\AppData\Local\Discord\Update.exe --processStart Discord.exe (2022/02/02) (sign: 'Discord Inc.')
O4 - HKCU\..\StartupApproved\Run: [EpicGamesLauncher] = C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe -silent (2022/02/02) (sign: 'Epic Games Inc.')
O4 - HKLM\..\StartupApproved\Run: [EPPCCMON] = C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE (2020/11/13) (sign: 'SEIKO EPSON CORPORATION')
O4 - HKLM\..\StartupApproved\Run32: [SunJavaUpdateSched] = C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (2022/04/18) (sign: 'Oracle America, Inc.')
O4 - MountPoints2: HKCU\..\{bf8a5293-4032-11e9-82a1-b8aeed39b416}\shell\AutoRun\command: (default) = "E:\LaunchU3.exe" -a (file missing)
O4 - MountPoints2: HKCU\..\{f6fc2608-df24-11e6-8268-806e6f6e6963}\shell\AutoRun\command: (default) = D:\auto.exe (file missing)
O4 - Startup: C:\Users\Casper\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Kaspersky Premium.lnk    ->    C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avpui.exe (sign: 'Kaspersky Lab JSC')
O4-32 - HKLM\..\Run: [Lightshot] = C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe (sign: 'Kilonova LLC')
O7 - Policy: HKLM\Software\Microsoft\Windows Defender: [DisableAntiSpyware] = 1
O7 - Policy: HKLM\Software\Microsoft\Windows Defender: [DisableAntiVirus] = 1
O17 - DHCP DNS 1: 8.8.8.8 (Well-known DNS: Google)
O17 - DHCP DNS 2: 8.8.4.4 (Well-known DNS: Google)
O17 - HKLM\System\CCS\Services\Tcpip\..\{221EFBC8-178E-405D-9BE9-03E4FCBD007F}: [NameServer] = 8.8.4.4 (Well-known DNS: Google)
O17 - HKLM\System\CCS\Services\Tcpip\..\{221EFBC8-178E-405D-9BE9-03E4FCBD007F}: [NameServer] = 8.8.8.8 (Well-known DNS: Google)
O22 - Task (.job): (Ready) update-S-1-5-21-145828315-310934734-1855277650-1001.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe (sign: 'OOO Lightshot')
O22 - Task (.job): (Ready) update-sys.job - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe (sign: 'OOO Lightshot')
O22 - Tasks: (damaged) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\CompatTelRunner.exe (user missing) (sign: 'Microsoft')
O22 - Tasks: (damaged) \WPD\SqmUpload_S-1-5-21-145828315-310934734-1855277650-1002 - C:\Windows\system32\rundll32.exe portabledeviceapi.dll,#1 (user missing) (sign: 'Microsoft')
O22 - Tasks: (damaged) Microsoft OneDrive Auto Update Task-S-1-5-21-145828315-310934734-1855277650-1002 - C:\Users\Casper\AppData\Local\Microsoft\OneDrive\OneDrive.exe /autoupdate (user missing) (sign: 'Microsoft')
O22 - Tasks: (damaged) User_Feed_Synchronization-{10121423-D82C-423E-A803-34BF0463E485} - C:\Windows\system32\msfeedssync.exe sync (user missing) (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\compattel\DiagTrackRunner.exe /UploadEtlFilesOnly (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\CompatTelRunner.exe (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Application Experience\ProgramDataUpdater - C:\Windows\system32\CompatTelRunner.exe -maintenance (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Customer Experience Improvement Program\Uploader - C:\Windows\system32\WSqmCons.exe -u (sign: 'Microsoft')
O22 - Tasks: (telemetry) NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe (file missing)
O22 - Tasks: (telemetry) NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe (file missing)
O22 - Tasks: (telemetry) NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (file missing)
O22 - Tasks: (telemetry) NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (file missing)
O22 - Tasks: (telemetry) NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (file missing)
O22 - Tasks: (telemetry) NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe (file missing)
O22 - Tasks: (update) \Microsoft\Windows\Setup\EOSNotify - C:\Windows\system32\EOSNotify.exe (sign: 'Microsoft')
O22 - Tasks: (update) \Microsoft\Windows\Setup\EOSNotify2 - C:\Windows\system32\EOSNotify.exe -Daily (sign: 'Microsoft')
O22 - Tasks: \Microsoft\Office\Office Feature Updates - C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe (sign: 'Microsoft')
O22 - Tasks: \Microsoft\Office\Office Feature Updates Logon - C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe /onlogon (sign: 'Microsoft')
O22 - Tasks: \Mozilla\Firefox Background Update 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate (sign: 'Mozilla Corporation')
O22 - Tasks: \Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" (sign: 'Mozilla Corporation')
O22 - Tasks: \Mozilla\Firefox Default Browser Agent ECFD90D9CF1ECDEE - C:\Users\Casper\AppData\Local\Mozilla Firefox\default-browser-agent.exe do-task "ECFD90D9CF1ECDEE" (sign: 'Mozilla Corporation')
O22 - Tasks: {1FBDB6EB-E114-4E34-8E6C-0702316A7A2B} - C:\Windows\system32\pcalua.exe -a D:\Drivers\DCU-11\UninstallDriver.exe -d D:\Drivers\DCU-11 (sign: 'Microsoft')
O22 - Tasks: {5BA76BF0-04B5-46A4-9C2E-DB4BB6DE2452} - C:\Windows\system32\pcalua.exe -a D:\Install\setup.exe -d D:\Install (sign: 'Microsoft')
O22 - Tasks: {6146CC9F-766F-4DE6-B4AD-7B58975C5799} - C:\Windows\system32\pcalua.exe -a D:\applications\D2P\InstMsi-x86w.exe -d D:\applications\D2P (sign: 'Microsoft')
O22 - Tasks: {8BF7A36B-1EB9-4DBD-8038-127FC350B95C} - C:\Windows\system32\pcalua.exe -a D:\start.exe -d D:\ (sign: 'Microsoft')
O22 - Tasks: EPSON L4160 Series Update {099B5A8D-DE71-453A-9929-002298C096B6} - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSSME.EXE /EXE:"{099B5A8D-DE71-453A-9929-002298C096B6}" /F:"Update" (file missing)
O22 - Tasks: GoogleUpdateTaskMachineCore - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c (sign: 'Google Inc')
O22 - Tasks: GoogleUpdateTaskMachineUA - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler (sign: 'Google Inc')
O22 - Tasks: IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (sign: 'Intel® Services Manager')
O22 - Tasks: IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon - C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (sign: 'Intel® Services Manager')
O22 - Tasks: Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} - C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe /waitUpgrade (sign: 'Kaspersky Lab JSC')
O22 - Tasks: klcp_update - C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe /verysilent /update /freq=30 (not signed)
O22 - Tasks: Microsoft OneDrive Auto Update Task-S-1-5-21-145828315-310934734-1855277650-1002 - C:\Users\Casper\AppData\Local\Microsoft\OneDrive\OneDrive.exe /autoupdate (sign: 'Microsoft')
O22 - Tasks: NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files (x86)\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log (file missing)
O22 - Tasks: NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log (file missing)
O22 - Tasks: NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (file missing)
O22 - Tasks: NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe --launcher=TaskScheduler (file missing)
O22 - Tasks: NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (file missing)
O22 - Tasks: NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} - C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe (file missing)
O22 - Tasks: UMonitor Task - C:\Windows\SysWOW64\UMonit64.exe (file missing)
O22 - Tasks: update-S-1-5-21-145828315-310934734-1855277650-1001 - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate (sign: 'OOO Lightshot')
O22 - Tasks: update-sys - C:\Program Files (x86)\Skillbrains\Updater\Updater.exe -runmode=checkupdate (sign: 'OOO Lightshot')
O23 - Service R2: Kaspersky Hizmeti 21.13 - (AVP21.13) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\avp.exe -r (sign: 'Kaspersky Lab JSC')
O23 - Service R2: Kaspersky VPN Secure Connection Hizmeti 5.13 - (KSDE5.13) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.13\ksde.exe -r (sign: 'Kaspersky Lab JSC')
O23 - Service R2: Malwarebytes Service - (MBAMService) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (sign: 'Microsoft') (+safe mode)
O23 - Service R2: TeamViewer - C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (sign: 'TeamViewer Germany GmbH')
O23 - Service S2: EpsonCustomerResearchParticipation - C:\Program Files\EPSON\EpsonCustomerResearchParticipation\EPCP.exe (file missing)
O23 - Service S2: Google Güncelleme Hizmeti (gupdate) - (gupdate) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /svc (sign: 'Google Inc')
O23 - Service S2: Kaspersky Password Manager Service - (kpm_launch_service) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe (file missing)
O23 - Service S3: Epic Online Services - (EpicOnlineServices) - C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe (sign: 'Epic Games Inc.')
O23 - Service S3: Google Chrome Elevation Service (GoogleChromeElevationService) - (GoogleChromeElevationService) - C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.149\elevation_service.exe (sign: 'Google LLC')
O23 - Service S3: Google Güncelleme Hizmeti (gupdatem) - (gupdatem) - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /medsvc (sign: 'Google Inc')
O23 - Service S3: Kaspersky Volume Shadow Copy Service Bridge 21.13 - (klvssbridge64_21.13) - C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.13\x64\vssbridge64.exe (sign: 'Kaspersky Lab JSC')
O23 - Driver R0: AO Kaspersky Lab Cryptographic Module x64 (56 bit) - (cm_km) - C:\Windows\system32\DRIVERS\cm_km.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: F9FCB208 - C:\Windows\system32\drivers\F9FCB208.sys (+safe mode) (sign: 'Kaspersky Lab')
O23 - Driver R0: iaStorA - C:\Windows\System32\drivers\iaStorA.sys (sign: 'Intel Corporation - Intel® Rapid Storage Technology')
O23 - Driver R0: klupd_Kaspersky4Win-21-13_arkmon - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_arkmon.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R0: klupd_Kaspersky4Win-21-13_klbg - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_klbg.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Anti-Virus NDIS 6 Filter - (klim6) - C:\Windows\system32\DRIVERS\klim6.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Driver.Kaspersky4Win-21-13 - (KLIF.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klif.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab format recognizer driver.Kaspersky4Win-21-13 - (klpd.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klpd.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Kernel DLL.Kaspersky4Win-21-13 - (klflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klbackupdisk.Kaspersky4Win-21-13 - (klbackupdisk.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klbackupdisk.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klbackupflt.Kaspersky4Win-21-13 - (klbackupflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klbackupflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab KLKBDFLT.Kaspersky4Win-21-13 - (klkbdflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klkbdflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab klpnpflt.Kaspersky4Win-21-13 - (klpnpflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klpnpflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab Security Extender Driver.Kaspersky4Win-21-13 - (klgse.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klgse.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: Kaspersky Lab service driver.Kaspersky4Win-21-13 - (KLHK.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klhk.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: kldisk.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\kldisk.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: klwfp.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klwfp.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: klwtp.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klwtp.sys (+safe mode) (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R1: kneps.Kaspersky4Win-21-13 - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\kneps.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R2: CorsairLLAccess3B84E98236B28D4E075D5737DF9F567A1FB76E8A - C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys (sign: 'Microsoft' - Corsair Memory, Inc.)
O23 - Driver R2: MBAMChameleon - C:\Windows\System32\Drivers\MbamChameleon.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: Corsair Bus - (CorsairVBusDriver) - C:\Windows\System32\drivers\CorsairVBusDriver.sys (sign: 'Microsoft' - Corsair)
O23 - Driver R3: Corsair virtual device - (CorsairVHidDriver) - C:\Windows\System32\drivers\CorsairVHidDriver.sys (sign: 'Microsoft' - Corsair)
O23 - Driver R3: Genesys Logic Storage Driver - (GeneStor) - C:\Windows\system32\DRIVERS\GeneStor.sys (sign: 'GENESYS LOGIC, INC.')
O23 - Driver R3: Intel(R) Extreme Tuning Utility Device Service - (XtuAcpiDriver) - C:\Windows\System32\drivers\XtuAcpiDriver.sys (sign: 'Intel Corporation')
O23 - Driver R3: Intel(R) Management Engine Interface  - (MEIx64) - C:\Windows\System32\drivers\TeeDriverW8x64.sys (sign: 'Intel(R) Embedded Subsystems and IP Blocks Group')
O23 - Driver R3: Kaspersky Lab KLMOUFLT.Kaspersky4Win-21-13 - (klmouflt.Kaspersky4Win-21-13) - C:\Windows\system32\DRIVERS\Kaspersky4Win-21-13\klmouflt.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: Kaspersky Security Data Escort Adapter - (kltap) - C:\Windows\system32\DRIVERS\kltap.sys (+safe mode) (sign: 'AnchorFree Inc')
O23 - Driver R3: klupd_Kaspersky4Win-21-13_klark - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_klark.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: klupd_Kaspersky4Win-21-13_mark - C:\Windows\System32\Drivers\klupd_Kaspersky4Win-21-13_mark.sys (sign: 'Microsoft' - AO Kaspersky Lab)
O23 - Driver R3: MBAMSwissArmy - C:\Windows\System32\Drivers\mbamswissarmy.sys (sign: 'Microsoft' - Malwarebytes)
O23 - Driver R3: nvlddmkm - C:\Windows\system32\DRIVERS\nvlddmkm.sys (sign: 'NVIDIA Corporation')
O23 - Driver R3: Service for NVIDIA High Definition Audio Driver - (NVHDA) - C:\Windows\system32\drivers\nvhda64v.sys (sign: 'NVIDIA Corporation')
O23 - Driver R3: Service for Realtek HD Audio (WDM) - (IntcAzAudAddService) - C:\Windows\system32\drivers\RTKVHD64.sys (sign: 'Realtek Semiconductor Corp')
O23 - Driver S0: @oem6.inf,%AMDKMAFD_svcdesc%;AMD Audio Bus Lower Filter - (amdkmafd) - C:\Windows\System32\drivers\amdkmafd.sys (file missing) (+safe mode)
O23 - Driver S0: Intel(R) SATA RAID Controller Windows - (iaStorAV) - C:\Windows\System32\drivers\iaStorAV.sys (sign: 'Intel Corporation - Intel® Rapid Storage Technology')
O23 - Driver S3: @oem31.inf,%VBoxUSB.SvcDesc%;VirtualBox USB - (VBoxUSB) - C:\Windows\System32\Drivers\VBoxUSB.sys (+safe mode) (sign: 'Oracle Corporation')
O23 - Driver S3: @oem34.inf,%VBoxNetAdp6Service_Desc%;VirtualBox NDIS 6.0 Miniport Service - (VBoxNetAdp) - C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys (+safe mode) (sign: 'Oracle Corporation')
O23 - Driver S3: bcmfn2 Service - (bcmfn2) - C:\Windows\System32\drivers\bcmfn2.sys (sign: 'Broadcom Corporation')
O23 - Driver S3: Corsair Gaming Audio Service - (CorsairGamingAudioService) - C:\Windows\System32\drivers\CorsairGamingAudio64.sys (sign: 'Microsoft' - Corsair Memory, Inc.)
O23 - Driver S3: Initio Driver for USB Default Controller - (ivusb) - C:\Windows\System32\drivers\ivusb.sys (sign: 'Initio Corporation')
O23 - Driver S3: Intel(R) Serial IO GPIO Controller Driver - (iaLPSSi_GPIO) - C:\Windows\System32\drivers\iaLPSSi_GPIO.sys (sign: 'Intel Corporation - Software and Firmware Products')
O23 - Driver S3: Intel(R) Serial IO I2C Controller Driver - (iaLPSSi_I2C) - C:\Windows\System32\drivers\iaLPSSi_I2C.sys (+safe mode) (sign: 'Intel Corporation - Software and Firmware Products')
O23 - Driver S3: Realtek 8168 NT Driver - (RTL8168) - C:\Windows\system32\DRIVERS\Rt630x64.sys (+safe mode) (sign: 'Realtek Semiconductor Corp')
O23 - Driver S3: Realtek Wireless LAN 802.11n PCI-E Network Adapter - (RTWlanE) - C:\Windows\system32\DRIVERS\rtwlane.sys (+safe mode) (sign: 'Realtek Semiconductor Corp')
O23 - Driver S3: RT2870 USB Extensible Wireless LAN Card Driver - (netr28ux) - C:\Windows\system32\DRIVERS\netr28ux.sys (+safe mode) (sign: 'Mediatek Inc.')
O23 - Driver S3: RTCore64 - C:\Program Files (x86)\MSI Afterburner\Legacy\RTCore64.sys (sign: 'MICRO-STAR INTERNATIONAL CO., LTD.')
O23 - Driver S3: SAMSUNG  Mobile USB Modem Drivers (DEVGURU Ver.) - (ssudmdm) - C:\Windows\system32\DRIVERS\ssudmdm.sys (sign: 'Samsung Electronics Co., Ltd.')
O23 - Driver S3: SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.) - (dg_ssudbus) - C:\Windows\system32\DRIVERS\ssudbus.sys (+safe mode) (sign: 'Samsung Electronics Co., Ltd.')
O23 - Driver S3: WD SCSI Pass Thru driver - (WDC_SAM) - C:\Windows\System32\drivers\wdcsam64.sys (sign: 'WDKTestCert wdclab,130885612892544312', but untrusted root: 'WDKTestCert wdclab,130885612892544312' with fingerprint: C905FB0E0A1BB2E157824C4C40DFD15794CC6C2D)
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'klim6'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'kltap'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'klwfp.Kaspersky4Win-21-13'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'klwtp.Kaspersky4Win-21-13'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'netr28ux'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'RTL8168'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'RTWlanE'
O23 - Dependency: Microsoft Service Group 'NDIS' contains unknown service:  'VBoxNetAdp'


--
End of file - Time spent: 38,1 sec. - 47656 bytes, CRC32: FFFFFFFF. Sign: 䖥

O4 - ActiveSetup: HKLM\..\{8A69D345-D564-463c-AFF1-A69D9E530F96}: [StubPath] = C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.149\Installer\chrmstp.exe --configure-user-settings --verbose-logging --system-level (sign: 'Google LLC')
O4 - ActiveSetup: HKLM\..\{9459C573-B17A-45AE-9F64-1857B5D58CEE}: [StubPath] = C:\Program Files (x86)\Microsoft\Edge\Application\88.0.705.81\Installer\setup.exe --configure-user-settings --verbose-logging --system-level --msedge (sign: 'Microsoft')
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] = C:\Windows\system32\spool\DRIVERS\x64\3\E_YATISME.EXE /EPT "EPLTarget\P0000000000000000" /M "L4160 Series" (not signed)
O4 - MountPoints2: HKCU\..\{bf8a5293-4032-11e9-82a1-b8aeed39b416}\shell\AutoRun\command: (default) = "E:\LaunchU3.exe" -a (file missing)
O4 - MountPoints2: HKCU\..\{f6fc2608-df24-11e6-8268-806e6f6e6963}\shell\AutoRun\command: (default) = D:\auto.exe (file missing)
O22 - Tasks: (damaged) \Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser - C:\Windows\system32\CompatTelRunner.exe (user missing) (sign: 'Microsoft')
O22 - Tasks: (damaged) \WPD\SqmUpload_S-1-5-21-145828315-310934734-1855277650-1002 - C:\Windows\system32\rundll32.exe portabledeviceapi.dll,#1 (user missing) (sign: 'Microsoft')
O22 - Tasks: (damaged) Microsoft OneDrive Auto Update Task-S-1-5-21-145828315-310934734-1855277650-1002 - C:\Users\Casper\AppData\Local\Microsoft\OneDrive\OneDrive.exe /autoupdate (user missing) (sign: 'Microsoft')
O22 - Tasks: (damaged) User_Feed_Synchronization-{10121423-D82C-423E-A803-34BF0463E485} - C:\Windows\system32\msfeedssync.exe sync (user missing) (sign: 'Microsoft')
O22 - Tasks: (telemetry) \Microsoft\Windows\Customer Experience Improvement Program\Uploader - C:\Windows\system32\WSqmCons.exe -u (sign: 'Microsoft')
O22 - Tasks: {1FBDB6EB-E114-4E34-8E6C-0702316A7A2B} - C:\Windows\system32\pcalua.exe -a D:\Drivers\DCU-11\UninstallDriver.exe -d D:\Drivers\DCU-11 (sign: 'Microsoft')
O22 - Tasks: {5BA76BF0-04B5-46A4-9C2E-DB4BB6DE2452} - C:\Windows\system32\pcalua.exe -a D:\Install\setup.exe -d D:\Install (sign: 'Microsoft')
O22 - Tasks: {6146CC9F-766F-4DE6-B4AD-7B58975C5799} - C:\Windows\system32\pcalua.exe -a D:\applications\D2P\InstMsi-x86w.exe -d D:\applications\D2P (sign: 'Microsoft')
O22 - Tasks: {8BF7A36B-1EB9-4DBD-8038-127FC350B95C} - C:\Windows\system32\pcalua.exe -a D:\start.exe -d D:\ (sign: 'Microsoft')
O22 - Tasks: EPSON L4160 Series Update {099B5A8D-DE71-453A-9929-002298C096B6} - C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSSME.EXE /EXE:"{099B5A8D-DE71-453A-9929-002298C096B6}" /F:"Update" (file missing)
O22 - Tasks: UMonitor Task - C:\Windows\SysWOW64\UMonit64.exe (file missing)
O23 - Driver R0: F9FCB208 - C:\Windows\system32\drivers\F9FCB208.sys (+safe mode) (sign: 'Kaspersky Lab')
O23 - Driver S3: WD SCSI Pass Thru driver - (WDC_SAM) - C:\Windows\System32\drivers\wdcsam64.sys (sign: 'WDKTestCert wdclab,130885612892544312', but untrusted root: 'WDKTestCert wdclab,130885612892544312' with fingerprint: C905FB0E0A1BB2E157824C4C40DFD15794CC6C2D)