Been having a lot of trouble with my pc

I feel like im getting ddos i get disconnected a lot, i get kicked out of chrome and WoW but my discord still plays for like 20 seconds saying i have 5000ms on there. I've gotten emails trying to extort money and they have their unique malware or virus they setup on my browser (chrome) that they get bored and watch what im doing sometimes. I bought a zonealarm licence and it found Trojan.Win32.Hosts2.gen

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09-01-2021

Ran by [removed] (administrator) on DESKTOP-I7R5ENF (11-01-2021 20:35:59)

Running from C:\Users\[removed]\Downloads

[removed]

Platform: Windows 10 Pro Version 2004 19041.685 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Amagicom AB -> Mullvad VPN AB) C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe

(ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.76\AsusFanControlService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.38\atkexComSvc.exe

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Battle.net\Battle.net.exe <4>

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\World of Warcraft\_classic_\UTILS\WowVoiceProxy.exe

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\World of Warcraft\_classic_\WowClassic.exe

(Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.7269\Agent.exe

(Check Point Software Technologies Ltd. -> ) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ThreatEmulation.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe

(Discord Inc. -> Discord Inc.) C:\Users\Adrian\AppData\Local\Discord\app-0.0.309\Discord.exe <6>

(DTS, Inc. -> ) C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe

(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Charter Security Suite\fshoster32.exe <3>

(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fshoster64.exe <2>

(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fsorsp64.exe

(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\FsPisces.exe

(F-Secure Corporation -> F-Secure Corporation) C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fsulprothoster.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <25>

(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe

(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <3>

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.8.7.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe <2>

(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe <2>

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\…\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [318920 2019-05-30] (Intel(R) Rapid Storage Technology -> Intel Corporation)

HKLM\…\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [838432 2019-03-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM-x32\…\Run: [ZaAntiRansomware] => C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAAR.exe [4234464 2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

HKLM-x32\…\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [325856 2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [Discord] => C:\Users\Adrian\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [TSMApplication] => C:\Program Files (x86)\TradeSkillMaster Application\app\TSMApplication.exe [1623040 2020-11-29] () [File not signed]

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [123793032 2020-12-24] (Logitech Inc -> Logitech, Inc.)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [Spotify] => C:\Users\Adrian\AppData\Roaming\Spotify\Spotify.exe [23592304 2020-12-12] (Spotify AB -> Spotify Ltd)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33131408 2020-11-24] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3411232 2020-12-20] (Valve -> Valve Corporation)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Run: [GalaxyClient] => [X]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.141\Installer\chrmstp.exe [2021-01-07] (Google LLC -> Google LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Dell Display Manager.lnk [2020-10-15]

ShortcutTarget: Dell Display Manager.lnk -> C:\Program Files (x86)\Dell\Dell Display Manager\ddm.exe (EnTech Taiwan -> EnTech Taiwan)

HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {065A7248-8836-4DC2-A1E1-2E5C65ABCB16} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {0E76F70C-99F4-4914-9914-FBA794B0E657} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log

Task: {19A452B0-0C58-46BB-948A-F1840A78F7A5} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {1F8F2760-BF42-40CD-A245-A06A3708C49F} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)

Task: {39A53813-42C6-4AE7-84E7-8D8F7D6C068F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {4DB18BD0-4572-444B-A5F0-09E3236D2B51} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {5637B43F-1BF7-48F1-A5A9-CF2E8B4891DE} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {57AD7501-52CD-4AF9-A53A-9AA8B2659D99} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {5C52B687-AAF9-4DA0-A0F7-0DFE82C33C15} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {679186DC-4150-4B2D-B053-E818DD8B385E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {70233B49-D2F9-421F-AECC-6CEB924764E7} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2488664 2021-01-02] (Overwolf Ltd -> Overwolf LTD)

Task: {98F091D2-97E7-4499-930D-3C1A59E90423} - System32\Tasks\F-Secure\F-Secure Hotfix => C:\Program Files (x86)\Charter Security Suite\fs_hotfix.exe [308608 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)

Task: {AFFDBA99-B081-4F02-BE58-4EF574FCDDF9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-08] (Google LLC -> Google LLC)

Task: {B4680D30-B7CF-47DE-BF77-AB1CB500A27B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {D983F85C-0785-4136-8519-C31EA8F332F7} - System32\Tasks\Agent Activation Runtime\S-1-5-21-3147232822-3033640963-3068048668-1001 => C:\Windows\System32\AgentActivationRuntimeStarter.exe [13312 2020-12-11] (Microsoft Windows -> )

Task: {F7A028BF-3916-4303-A55C-06ABFFE302E7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-08] (Google LLC -> Google LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{d7632651-d60a-42ca-b2f1-c6e3ca2d9006}: [DhcpNameServer] 192.168.1.1

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge:

======

DownloadDir: C:\Users\Adrian\Downloads

Edge Session Restore: HKU\S-1-5-21-3147232822-3033640963-3068048668-1001 -> is enabled.

Edge DefaultProfile: Default

Edge Profile: C:\Users\Adrian\AppData\Local\Microsoft\Edge\User Data\Default [2021-01-04]

Edge Session Restore: Default -> is enabled.

Edge Extension: (Browsing Protection by F-Secure) - C:\Users\Adrian\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2020-12-24]

Edge HKLM\…\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]

Edge HKLM-x32\…\Edge\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]

FireFox:

========

FF Plugin-x32: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2020-06-08] (Oracle America, Inc. -> Oracle Corporation)

Chrome:

=======

CHR Profile: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default [2021-01-11]

CHR Session Restore: Default -> is enabled.

CHR Extension: (Slides) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-06-08]

CHR Extension: (BetterTTV) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2020-12-18]

CHR Extension: (Docs) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-06-08]

CHR Extension: (Google Drive) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]

CHR Extension: (YouTube) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-06-08]

CHR Extension: (uBlock Origin) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-01-09]

CHR Extension: (Dark Reader) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2020-11-26]

CHR Extension: (Sheets) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-06-08]

CHR Extension: (ZoneAlarm Web Secure) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\flljooaijgdgaaogmfhakpojmddcjjmj [2021-01-11]

CHR Extension: (Google Docs Offline) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-17]

CHR Extension: (Browsing Protection by F-Secure) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2020-12-21]

CHR Extension: (TTV ad-block) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\kndhknfnihidhcfnaacnndbolonbimai [2020-11-29]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-06-08]

CHR Extension: (Gmail) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]

CHR Extension: (Chrome Media Router) - C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-19]

CHR Profile: C:\Users\Adrian\AppData\Local\Google\Chrome\User Data\System Profile [2020-09-15]

CHR HKLM\…\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]

CHR HKLM-x32\…\Chrome\Extension: [flljooaijgdgaaogmfhakpojmddcjjmj]

CHR HKLM-x32\…\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.38\atkexComSvc.exe [440368 2019-04-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe [1360016 2019-04-03] (ASUSTeK Computer Inc. -> ) [File not signed]

R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.76\AsusFanControlService.exe [2061872 2019-04-09] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

R2 CPEFR; C:\Program Files (x86)\CheckPoint\Endpoint Security\EFR\EFRService.exe [3108088 2020-10-14] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

R2 CpSbaCipolla; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33528 2020-10-27] (Check Point Software Technologies Ltd. -> )

R2 CpSbaUpdater; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\SBACipollaSrvHost.exe [33528 2020-10-27] (Check Point Software Technologies Ltd. -> )

R2 DTSAPO3Service; C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe [206720 2018-09-04] (DTS, Inc. -> )

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2020-09-04] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

R2 fshoster; C:\Program Files (x86)\Charter Security Suite\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)

R2 fsnethoster; C:\Program Files (x86)\Charter Security Suite\fshoster32.exe [244096 2020-11-03] (F-Secure Corporation -> F-Secure Corporation)

R2 fsulhoster; C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

R2 fsulnethoster; C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fshoster64.exe [624888 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

R2 fsulorsp; C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fsorsp64.exe [101248 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

R2 fsulprothoster; C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fsulprothoster.exe [624888 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-18] (NVIDIA Corporation -> NVIDIA)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2020-12-16] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-12-11] (GOG Sp. z o.o. -> GOG.com)

R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10898056 2020-12-24] (Logitech Inc -> Logitech, Inc.)

R2 MullvadVPN; C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe [10012456 2020-10-20] (Amagicom AB -> Mullvad VPN AB)

S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2488664 2021-01-02] (Overwolf Ltd -> Overwolf LTD)

R2 RemediationService; C:\Program Files (x86)\CheckPoint\Endpoint Security\Remediation\RemediationService.exe [18168 2020-09-10] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5197552 2020-12-11] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 TESvc; C:\Program Files (x86)\CheckPoint\Endpoint Security\Threat Emulation\TESvc.exe [135928 2020-10-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [4528344 2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-03] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-03] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 ZA NET ICM Service; C:\Program Files (x86)\CheckPoint\ICM\ICM-Service-NET.exe [42208 2020-03-13] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

R2 ZAARUpdateService; C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\ZAARUpdateService.exe [51936 2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZaPrivacyService.exe [119032 2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies, Ltd.)

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [34112 2019-07-02] (ASUSTeK Computer Inc. -> )

R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )

S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed]

R2 cpbak; C:\Windows\System32\DRIVERS\cpbak.sys [83248 2020-09-03] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

R1 CPEPMon; C:\Windows\System32\DRIVERS\CPEPMon.sys [158496 2020-08-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

R1 cposfw; C:\Windows\System32\DRIVERS\cposfw.sys [113968 2020-11-21] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

R1 epnetflt; C:\Windows\system32\drivers\epnetflt.sys [134448 2020-09-03] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

R1 epregflt; C:\Windows\system32\drivers\epregflt.sys [133416 2020-06-03] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

R3 F-Secure Gatekeeper; C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fsulgk.sys [321768 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

R1 F-Secure UL HIPS; C:\Program Files (x86)\Charter Security Suite\Ultralight\ulcore\1607432682\fshs.sys [104680 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

R0 fsbts; C:\Windows\System32\drivers\fsbts.sys [58752 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

S0 fselms; C:\Windows\System32\drivers\fselms.sys [15304 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> F-Secure Corporation)

R2 fsnif2; C:\Program Files (x86)\Charter Security Suite\Ultralight\nif2\1606295644\nif2s64.sys [179440 2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

R2 ISWKL; C:\Program Files (x86)\CheckPoint\Endpoint Security\Endpoint Common\bin\ISWKL.sys [56184 2020-06-17] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

R0 klbackupdisk; C:\Windows\System32\DRIVERS\klbackupdisk.sys [104200 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [205072 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [37496 2020-11-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)

R1 klflt; C:\Windows\system32\DRIVERS\klflt.sys [508160 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [633600 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1217792 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

R1 klifsdk; C:\Windows\System32\DRIVERS\klifsdk.sys [977664 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

R0 klupd_klifsdk_arkmon; C:\Windows\System32\Drivers\klupd_klifsdk_arkmon.sys [257208 2021-01-11] (Kaspersky Lab JSC -> AO Kaspersky Lab)

R3 klupd_klifsdk_kimul; C:\Windows\System32\Drivers\klupd_klifsdk_kimul.sys [99152 2021-01-11] (Kaspersky Lab -> AO Kaspersky Lab)

R3 klupd_klifsdk_klark; C:\Windows\System32\Drivers\klupd_klifsdk_klark.sys [310232 2021-01-11] (Kaspersky Lab JSC -> AO Kaspersky Lab)

R0 klupd_klifsdk_klbg; C:\Windows\System32\Drivers\klupd_klifsdk_klbg.sys [117456 2021-01-11] (Kaspersky Lab JSC -> AO Kaspersky Lab)

R3 klupd_klifsdk_mark; C:\Windows\System32\Drivers\klupd_klifsdk_mark.sys [207352 2021-01-11] (Kaspersky Lab JSC -> AO Kaspersky Lab)

R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [242952 2020-11-24] (Kaspersky Lab -> AO Kaspersky Lab)

R2 LGHUBTemperatureService; C:\ProgramData\LGHUB\depots\72671\driver_cpu_temperature\logi_core_temp.sys [25448 2020-12-24] (Logitech Inc. -> Logitech)

R3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [38136 2020-06-17] (Logitech Inc -> Logitech)

R3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [26672 2020-06-17] (Logitech Inc -> Logitech)

R3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [66808 2020-06-17] (Logitech Inc -> Logitech)

S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 tapmullvad0901; C:\Windows\System32\drivers\tapmullvad0901.sys [39616 2020-02-04] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R1 Vsdatant; C:\Windows\System32\drivers\vsdatant.sys [461240 2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48536 2020-12-03] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)

S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [429296 2020-12-03] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-03] (Microsoft Windows -> Microsoft Corporation)

U3 iswSvc; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-01-11 20:35 - 2021-01-11 20:36 - 000028245 _____ C:\Users\Adrian\Downloads\FRST.txt

2021-01-11 20:31 - 2021-01-11 20:36 - 000000000 ____D C:\FRST

2021-01-11 20:31 - 2021-01-11 20:31 - 002281472 _____ (Farbar) C:\Users\Adrian\Downloads\FRST64.exe

2021-01-11 18:50 - 2021-01-11 18:50 - 000310232 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klifsdk_klark.sys

2021-01-11 18:50 - 2021-01-11 18:50 - 000257208 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klifsdk_arkmon.sys

2021-01-11 18:50 - 2021-01-11 18:50 - 000207352 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klifsdk_mark.sys

2021-01-11 18:50 - 2021-01-11 18:50 - 000117456 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klifsdk_klbg.sys

2021-01-11 18:50 - 2021-01-11 18:50 - 000099152 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klifsdk_kimul.sys

2021-01-11 18:50 - 2021-01-11 18:50 - 000000000 _____ C:\Windows\system32\Drivers\etc\lmhosts

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\Users\Public\Documents\Endpoint!SystemFolder!Don't!Delete

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\Users\Adrian\Documents\Sandblast Agent&Protection;&Data;&Do; NotErase

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\Users\Adrian\AppData\Roaming\Check-PointSystem!DataDon'tRemove

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\Users\Adrian\AppData\Local\CheckPoint!SystemData!Do notRemove

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\ProgramData\Documents\Endpoint!SystemFolder!Don't!Delete

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\ProgramData\!CP!ProtectionData!Do Not!Delete

2021-01-11 18:48 - 2021-01-11 18:48 - 000000000 ___RD C:\Program Files (x86)\Sandblast Zero-Day_SystemRepositoryDo not_Discard

2021-01-11 18:47 - 2021-01-11 18:48 - 000440939 _____ C:\Windows\system32\Drivers\vsconfig.xml

2021-01-11 18:47 - 2021-01-11 18:47 - 000524288 _____ C:\Users\Public\Documents\CP_Endpoint_Shell_Shared_File

2021-01-11 18:47 - 2021-01-11 18:47 - 000524288 _____ C:\ProgramData\Documents\CP_Endpoint_Shell_Shared_File

2021-01-11 18:47 - 2021-01-11 18:47 - 000000778 _____ C:\Users\Public\Desktop\ZoneAlarm Security.lnk

2021-01-11 18:47 - 2021-01-11 18:47 - 000000778 _____ C:\ProgramData\Desktop\ZoneAlarm Security.lnk

2021-01-11 18:47 - 2021-01-11 18:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point

2021-01-11 18:46 - 2021-01-11 19:06 - 000000000 ____D C:\Program Files (x86)\CheckPoint

2021-01-11 18:39 - 2021-01-11 18:47 - 000000000 ____D C:\ProgramData\CheckPoint

2021-01-11 18:38 - 2021-01-11 18:38 - 005954848 _____ (Check Point Software Technologies Ltd.) C:\Users\Adrian\Downloads\ZASPSetupWeb_158_145_18590.exe

2021-01-01 07:53 - 2021-01-01 07:53 - 000000041 _____ C:\Users\Adrian\Desktop\live.m3u

2020-12-24 11:21 - 2020-12-24 11:21 - 000000650 _____ C:\Users\Public\Desktop\Logitech G HUB.lnk

2020-12-24 11:21 - 2020-12-24 11:21 - 000000650 _____ C:\ProgramData\Desktop\Logitech G HUB.lnk

2020-12-24 11:21 - 2020-12-24 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi

2020-12-24 11:21 - 2020-12-24 11:21 - 000000000 ____D C:\Program Files\LGHUB

2020-12-21 16:26 - 2020-12-21 16:26 - 000058752 _____ (F-Secure Corporation) C:\Windows\system32\Drivers\fsbts.sys

2020-12-21 16:26 - 2020-12-21 16:26 - 000015304 _____ (F-Secure Corporation) C:\Windows\system32\Drivers\fselms.sys

2020-12-21 16:24 - 2020-12-21 16:37 - 000000000 ____D C:\ProgramData\F-Secure

2020-12-21 16:24 - 2020-12-21 16:32 - 000000000 ____D C:\Users\Adrian\AppData\Local\F-Secure

2020-12-21 16:24 - 2020-12-21 16:24 - 001798016 _____ (F-Secure Corporation) C:\Users\Adrian\Downloads\CharterNetworkInstaller_C-26J9T-DXVHH-8G2Y7-F69KE-B4D3D_.exe

2020-12-21 16:24 - 2020-12-21 16:24 - 000002046 _____ C:\Users\Public\Desktop\Security Suite.lnk

2020-12-21 16:24 - 2020-12-21 16:24 - 000002046 _____ C:\ProgramData\Desktop\Security Suite.lnk

2020-12-21 16:24 - 2020-12-21 16:24 - 000000000 ____D C:\Windows\system32\Tasks\F-Secure

2020-12-21 16:24 - 2020-12-21 16:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Charter Security Suite

2020-12-21 16:24 - 2020-12-21 16:24 - 000000000 ____D C:\Program Files (x86)\Charter Security Suite

2020-12-20 16:09 - 2020-12-20 16:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTG Arena

2020-12-16 16:56 - 2020-12-12 05:50 - 001786584 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe

2020-12-16 16:56 - 2020-12-12 05:50 - 001786584 _____ C:\Windows\system32\vulkaninfo.exe

2020-12-16 16:56 - 2020-12-12 05:50 - 001454488 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2020-12-16 16:56 - 2020-12-12 05:50 - 001382616 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2020-12-16 16:56 - 2020-12-12 05:50 - 001382616 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2020-12-16 16:56 - 2020-12-12 05:50 - 001193880 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2020-12-16 16:56 - 2020-12-12 05:50 - 001087704 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll

2020-12-16 16:56 - 2020-12-12 05:50 - 001087704 _____ C:\Windows\system32\vulkan-1.dll

2020-12-16 16:56 - 2020-12-12 05:50 - 000940760 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll

2020-12-16 16:56 - 2020-12-12 05:50 - 000940760 _____ C:\Windows\SysWOW64\vulkan-1.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 001512856 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 001164528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 000685976 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe

2020-12-16 16:56 - 2020-12-12 05:48 - 000680856 _____ C:\Windows\system32\nvofapi64.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 000672496 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 000609688 _____ C:\Windows\system32\nvml.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 000559000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll

2020-12-16 16:56 - 2020-12-12 05:48 - 000547056 _____ C:\Windows\SysWOW64\nvofapi.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 008261360 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 007391984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 004612504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 002731928 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 002103024 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 001589144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 000812784 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2020-12-16 16:56 - 2020-12-12 05:47 - 000447384 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe

2020-12-16 16:56 - 2020-12-12 05:46 - 000849648 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe

2020-12-16 16:56 - 2020-12-12 05:45 - 006070008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2020-12-16 16:56 - 2020-12-11 20:01 - 000084008 _____ C:\Windows\system32\nvinfo.pb

2020-12-16 12:49 - 2020-12-16 21:19 - 000000000 ____D C:\Users\Adrian\AppData\Local\REDEngine

2020-12-16 12:49 - 2020-12-16 12:49 - 000000000 ____D C:\Users\Adrian\AppData\Local\CD Projekt Red

2020-12-14 12:36 - 2020-12-21 00:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberpunk 2077 [GOG.com]

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-01-11 20:35 - 2020-06-08 07:39 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\discord

2021-01-11 20:35 - 2020-06-08 07:29 - 000000000 ____D C:\Users\Adrian\AppData\Local\Battle.net

2021-01-11 20:31 - 2019-12-07 01:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2021-01-11 19:41 - 2020-06-08 04:20 - 000000000 ____D C:\Windows\system32\SleepStudy

2021-01-11 19:34 - 2020-07-10 07:51 - 000000147 _____ C:\Windows\system32\Drivers\etc\hosts.rollback

2021-01-11 19:30 - 2019-12-07 01:14 - 000000000 ___HD C:\Program Files\WindowsApps

2021-01-11 19:30 - 2019-12-07 01:14 - 000000000 ____D C:\Windows\AppReadiness

2021-01-11 19:03 - 2020-06-08 07:13 - 000842694 _____ C:\Windows\system32\PerfStringBackup.INI

2021-01-11 19:03 - 2019-12-07 01:13 - 000000000 ____D C:\Windows\INF

2021-01-11 18:58 - 2020-06-08 07:44 - 000000000 ____D C:\ProgramData\NVIDIA

2021-01-11 18:57 - 2020-06-17 08:43 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\LGHUB

2021-01-11 18:57 - 2020-06-17 08:43 - 000000000 ____D C:\Users\Adrian\AppData\Local\LGHUB

2021-01-11 18:56 - 2020-11-08 09:13 - 000000000 ____D C:\ProgramData\Mullvad VPN

2021-01-11 18:56 - 2020-06-08 07:10 - 000000000 ____D C:\Users\Adrian

2021-01-11 18:56 - 2020-06-08 04:20 - 000008192 ___SH C:\DumpStack.log.tmp

2021-01-11 18:56 - 2020-06-08 04:20 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2021-01-11 18:56 - 2019-12-07 01:03 - 000524288 _____ C:\Windows\system32\config\BBI

2021-01-11 18:47 - 2020-06-08 07:44 - 000000000 ____D C:\ProgramData\Package Cache

2021-01-11 18:47 - 2019-12-07 01:03 - 000032768 _____ C:\Windows\system32\config\ELAM

2021-01-11 18:44 - 2019-12-07 01:14 - 000000000 ____D C:\Windows\system32\NDF

2021-01-11 18:40 - 2020-11-08 09:13 - 000000000 ____D C:\Users\Adrian\AppData\Local\Mullvad VPN

2021-01-11 17:44 - 2020-06-18 16:11 - 000000000 ____D C:\Users\Adrian\AppData\Local\Spotify

2021-01-11 17:07 - 2020-06-09 16:31 - 000000000 ____D C:\Program Files (x86)\Hearthstone

2021-01-11 17:07 - 2020-06-08 07:37 - 000000000 ____D C:\Program Files (x86)\Overwatch

2021-01-11 17:07 - 2020-06-08 07:31 - 000000000 ____D C:\Program Files (x86)\World of Warcraft

2021-01-11 17:07 - 2020-06-08 07:28 - 000000000 ____D C:\Program Files (x86)\Battle.net

2021-01-11 16:43 - 2020-06-18 16:11 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\Spotify

2021-01-11 12:49 - 2020-11-06 15:51 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-01-11 12:49 - 2020-11-06 15:51 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-01-10 16:40 - 2020-06-10 11:40 - 000000000 ____D C:\ProgramData\Riot Games

2021-01-09 15:51 - 2020-06-11 02:11 - 000000000 ____D C:\Users\Adrian\AppData\Local\CrashDumps

2021-01-09 12:35 - 2020-11-06 15:52 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-01-09 12:35 - 2020-11-06 15:52 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk

2021-01-09 12:35 - 2020-11-06 15:52 - 000002276 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk

2021-01-08 12:02 - 2020-11-12 10:48 - 000002178 _____ C:\Users\Adrian\Desktop\CurseForge.lnk

2021-01-08 12:02 - 2020-11-12 10:48 - 000000000 ____D C:\Program Files (x86)\Overwolf

2021-01-08 12:02 - 2020-11-12 10:35 - 000000000 ____D C:\Users\Adrian\AppData\Local\Overwolf

2021-01-07 17:32 - 2020-06-08 07:13 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-01-07 06:57 - 2020-08-10 00:10 - 000000000 ____D C:\Program Files (x86)\Steam

2021-01-05 15:00 - 2020-06-08 07:54 - 000000000 ____D C:\Users\Adrian\AppData\Local\D3DSCache

2020-12-29 17:21 - 2019-12-07 01:03 - 000000000 ____D C:\Windows\CbsTemp

2020-12-24 17:27 - 2020-06-08 04:20 - 000267376 _____ C:\Windows\system32\FNTCACHE.DAT

2020-12-24 17:23 - 2020-06-08 09:23 - 000000000 ____D C:\Users\Adrian\AppData\Local\ElevatedDiagnostics

2020-12-21 16:26 - 2019-12-07 01:14 - 000000000 ___HD C:\Windows\ELAMBKUP

2020-12-18 11:28 - 2020-06-08 09:53 - 000000000 ____D C:\Users\Adrian\AppData\Roaming\Twitch

2020-12-16 18:22 - 2020-12-11 12:49 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy

2020-12-14 12:36 - 2020-12-11 12:48 - 000000000 ____D C:\ProgramData\GOG.com

2020-12-12 05:47 - 2020-11-03 04:15 - 000657816 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2020-12-12 05:45 - 2020-06-08 07:10 - 007114256 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

==================== Files in the root of some directories ========

2020-09-04 20:01 - 2020-09-04 20:01 - 000000218 _____ () C:\Users\Adrian\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09-01-2021

Ran by [removed] (11-01-2021 20:37:26)

Running from C:\Users\[removed]\Downloads

Windows 10 Pro Version 2004 19041.685 (X64) (2020-06-08 12:21:37)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3147232822-3033640963-3068048668-500 - Administrator - Disabled)

Adrian (S-1-5-21-3147232822-3033640963-3068048668-1001 - Administrator - Enabled) => C:\Users\Adrian

DefaultAccount (S-1-5-21-3147232822-3033640963-3068048668-503 - Limited - Disabled)

Guest (S-1-5-21-3147232822-3033640963-3068048668-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-3147232822-3033640963-3068048668-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ZoneAlarm Extreme Security Antivirus (Enabled - Up to date) {1947BAEA-75D2-7D68-8F78-84241FBC7C90}

AV: Security Suite by F-Secure (Enabled - Up to date) {01EEC97C-28E5-34E7-6F5F-47CED8192856}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

FW: ZoneAlarm Extreme Security Firewall (Enabled) {217C3BCF-3FBD-7C30-A427-2D11E16F3BEB}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Battle.net (HKLM-x32\…\Battle.net) (Version: - Blizzard Entertainment)

CDisplayEx 1.10.33 (HKLM\…\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.)

Check Point SBA (HKLM\…\{CEDFDB6D-9992-49DB-8F9C-9C4E1EE04DD0}) (Version: 86.6.5523 - Check Point Software Technologies Ltd.) Hidden

CurseForge (HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.0.89 - Overwolf app)

Cyberpunk 2077 (HKLM-x32\…\1423049311_is1) (Version: 1.05 - GOG.com)

Dell Display Manager (HKLM-x32\…\{AC50C05D-9D57-40F5-B2EF-AC402F14312B}_is1) (Version: 1.51.2015 - EnTech Taiwan)

Deluge 1.3.15 (HKLM-x32\…\Deluge) (Version: - )

Discord (HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Discord) (Version: 0.0.309 - Discord Inc.)

Epic Games Launcher (HKLM-x32\…\{0EE6DDEF-E36B-45EB-9E03-5A266EC8A8F8}) (Version: 1.1.279.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\…\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

GOG GALAXY (HKLM-x32\…\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)

Google Chrome (HKLM-x32\…\Google Chrome) (Version: 87.0.4280.141 - Google LLC)

Google Update Helper (HKLM-x32\…\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden

Hearthstone (HKLM-x32\…\Hearthstone) (Version: - Blizzard Entertainment)

Inner Space (HKLM\…\Inner Space) (Version: 1.16 Build 6700 - Lavish Software, LLC)

Inner Space (HKLM-x32\…\Inner Space) (Version: 1.16 Build 6700 - Lavish Software, LLC)

Intel(R) Management Engine Components (HKLM\…\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1916.12.0.1263 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\…\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.5.0.1017 - Intel Corporation)

Intel(R) Trusted Connect Service Client x86 (HKLM-x32\…\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.52.230.1 - Intel Corporation) Hidden

Intel(R) Trusted Connect Services Client (HKLM-x32\…\{c6de84fd-ece7-4c2a-9f06-8cabe7ab79a0}) (Version: 1.52.230.1 - Intel Corporation) Hidden

Intel® Optane™ Pinning Explorer Extensions (HKLM\…\{7D4998B3-AC68-4815-AC47-5A1969D91E30}) (Version: 17.5.0.1017 - Intel Corporation)

Launcher Prerequisites (x64) (HKLM-x32\…\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

League of Legends (HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)

Logitech G HUB (HKLM\…\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: - Logitech)

Microsoft Edge (HKLM-x32\…\Microsoft Edge) (Version: 87.0.664.75 - Microsoft Corporation)

Microsoft Edge Update (HKLM-x32\…\Microsoft Edge Update) (Version: 1.3.139.65 - )

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\…\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\…\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\…\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\…\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\…\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\…\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\…\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.26.28720 (HKLM-x32\…\{7d607fb4-7e28-4c7a-a92f-3fcdaf555faf}) (Version: 14.26.28720.3 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\…\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)

MTG Arena (HKLM\…\{C700347B-14A5-4724-BB85-EA0F8C791628}) (Version: 0.1.3288 - Wizards of the Coast)

Mullvad VPN 2020.6.0 (HKLM\…\2A356FD4-03B7-4F45-99B4-737BE580DC82) (Version: 2020.6.0 - Mullvad VPN)

Mullvad-Wintun (HKLM\…\{1238DE22-09F9-458D-A86E-A2D413208272}) (Version: 1.0 - Mullvad VPN AB) Hidden

NVAPI Monitor plugin for NvContainer (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden

NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.20.5.70 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)

NVIDIA Graphics Driver 460.89 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 460.89 - NVIDIA Corporation)

NVIDIA HD Audio Driver 1.3.38.40 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.19.0218 (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)

NvModuleTracker (HKLM\…\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden

Overwatch (HKLM-x32\…\Overwatch) (Version: - Blizzard Entertainment)

Overwolf (HKLM-x32\…\Overwolf) (Version: 0.162.0.8 - Overwolf Ltd.)

Realtek High Definition Audio Driver (HKLM-x32\…\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8666 - Realtek Semiconductor Corp.)

Security Suite (HKLM-x32\…\{46B8A013-32EE-4158-A401-E25B63FE5D28}) (Version: 17.9 - F-Secure Corporation)

Spotify (HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\Spotify) (Version: 1.1.48.625.g1c87c7f7 - Spotify AB)

Steam (HKLM-x32\…\Steam) (Version: 2.10.91.91 - Valve Corporation)

The Sims 4 (HKLM-x32\…\The Sims 4_is1) (Version: - )

TradeSkillMaster Application version 1.0 (HKLM-x32\…\{c44da794-b956-4d50-8733-346d56ae63c7}_is1) (Version: 1.0 - TradeSkillMaster)

Twitch (HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)

WinRAR 5.71 (64-bit) (HKLM\…\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

World of Warcraft (HKLM-x32\…\World of Warcraft) (Version: - Blizzard Entertainment)

World of Warcraft Classic (HKLM-x32\…\World of Warcraft Classic) (Version: - Blizzard Entertainment)

World of Warcraft Classic PTR (HKLM-x32\…\World of Warcraft Classic PTR) (Version: - Blizzard Entertainment)

ZoneAlarm Anti-Ransomware (HKLM-x32\…\{0B8C3231-9818-4CB9-8213-4AB839836791}) (Version: 1.001.1367 - Check Point Software) Hidden

ZoneAlarm Antivirus (HKLM-x32\…\{044997CD-D66D-4B20-95AA-E8A701278C8B}) (Version: 15.8.145.18590 - Check Point Software Technologies Ltd.) Hidden

ZoneAlarm Extreme Security (HKLM-x32\…\ZoneAlarm Extreme Security) (Version: 15.8.145.18590 - Check Point)

ZoneAlarm Firewall (HKLM-x32\…\{E992C73B-3DD2-455B-8F31-A3350DFA4604}) (Version: 15.8.145.18590 - Check Point Software Technologies Ltd.) Hidden

ZoneAlarm Security (HKLM-x32\…\{C5CC9126-351E-430F-B1A0-EF1A6E2C88C0}) (Version: 15.8.145.18590 - Check Point Software Technologies Ltd.) Hidden

Packages:

=========

DTS Headphone:X v1 -> C:\Program Files\WindowsApps\DTSInc.DTSHeadphoneXv1_1.2.4.0_x64__t5j2fzbtdg37r [2020-06-08] (DTS, Inc.)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-06-09] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-06-09] (Microsoft Corporation) [MS Ad]

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.959.0_x64__56jybvy8sckqj [2020-12-16] (NVIDIA Corp.)

Photos Media Engine Add-on -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-08-11] (Microsoft Corporation)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.2.175.0_x64__dt26b99r8h8gj [2020-06-08] (Realtek Semiconductor Corp)

Speedtest by Ookla -> C:\Program Files\WindowsApps\Ookla.SpeedtestbyOokla_1.13.139.0_x64__43tkc6nmykmb6 [2021-01-11] (Ookla)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3147232822-3033640963-3068048668-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Adrian\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\amd64\FileSyncShell64.dll => No File

CustomCLSID: HKU\S-1-5-21-3147232822-3033640963-3068048668-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Adrian\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\amd64\FileSyncShell64.dll => No File

CustomCLSID: HKU\S-1-5-21-3147232822-3033640963-3068048668-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Adrian\AppData\Local\Microsoft\OneDrive\20.064.0329.0008\amd64\FileSyncShell64.dll => No File

ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-05-09] (Intel(R) Rapid Storage Technology -> )

ShellIconOverlayIdentifiers: [F-Secure DataGuard Icon Overlay] -> {CA789262-D278-40F7-AC12-19C0395F9DD9} => C:\Program Files (x86)\Charter Security Suite\FsShellExtension64.dll [2020-11-03] (F-Secure Corporation -> F-Secure Corporation)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1: [ZLAVShExt] -> {D9872D13-7651-4471-9EEE-F0A00218BEBB} => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zlavscan.dll [2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-05-09] (Intel(R) Rapid Storage Technology -> )

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\nvshext.dll [2020-12-12] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6: [ZLAVShExt] -> {D9872D13-7651-4471-9EEE-F0A00218BEBB} => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zlavscan.dll [2020-11-24] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

==================== Loaded Modules (Whitelisted) =============

2020-06-08 08:04 - 2019-03-28 10:29 - 006065152 _____ () [File not signed] C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.76\libprotobufd.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 104873984 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\libcef.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000112128 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\libEGL.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 006227456 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\libGLESv2.dll

2020-11-22 14:04 - 2020-11-22 14:04 - 000986112 _____ (Microsoft Corporation) [File not signed] C:\Program Files (x86)\CheckPoint\ZoneAlarm\dbghelp.dll

2020-10-12 12:41 - 2020-10-12 12:41 - 001124352 _____ (Robert Simpson, et al.) [File not signed] [File is in use] C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\SQLite\System.Data.SQLite.dll

2020-11-21 11:38 - 2020-11-21 11:38 - 001189888 _____ (Robert Simpson, et al.) [File not signed] C:\Program Files (x86)\CheckPoint\Endpoint Security\TPCommon\Cipolla\x86\SQLite.Interop.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000810496 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\chrome_elf.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000047104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\audio\qtaudio_windows.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\imageformats\qgif.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000027136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\imageformats\qico.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000243712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\imageformats\qjpeg.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000223744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\imageformats\qmng.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\imageformats\qsvg.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000332288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\imageformats\qtiff.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 001140224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\platforms\qwindows.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000041984 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtGraphicalEffects\qtgraphicaleffectsplugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQml\Models.2\modelsplugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQuick.2\qtquick2plugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000084480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQuick\Controls.2\qtquickcontrols2plugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000267776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQuick\Controls\qtquickcontrolsplugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000071680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQuick\Layouts\qquicklayoutsplugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000211456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQuick\Templates.2\qtquicktemplates2plugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\qml\QtQuick\Window.2\windowplugin.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 004943360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Core.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 005022208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Gui.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000626176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Multimedia.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000877056 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Network.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 002908672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Qml.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 003078656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Quick.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000096256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5QuickControls2.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000681472 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5QuickTemplates2.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000259072 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Svg.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 004718080 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Widgets.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000439296 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5WinExtras.dll

2021-01-06 10:35 - 2021-01-06 10:35 - 000159232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.12601\Qt5Xml.dll

==================== Alternate Data Streams (Whitelisted) ========

==================== Safe Mode (Whitelisted) ==================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vsmon => ""="Service"

==================== Association (Whitelisted) =================

==================== Internet Explorer (Whitelisted) ==========

SearchScopes: HKU\S-1-5-21-3147232822-3033640963-3068048668-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Charter Security Suite\Ultralight\http\1608129094\browser\fs_ie_https\fs_ie_https64.dll [2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

BHO-x32: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files (x86)\Charter Security Suite\Ultralight\http\1608129094\browser\fs_ie_https\fs_ie_https.dll [2020-12-21] (F-Secure Corporation -> F-Secure Corporation)

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-12-07 01:14 - 2021-01-11 18:55 - 000000147 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1 localhost

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\Control Panel\Desktop\\Wallpaper -> c:\users\adrian\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\armenia_syunik_khustup_hayk_k13-wallpaper-2560x1440.jpg

DNS Servers: 192.168.1.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

HKLM\…\StartupApproved\Run: => "IAStorIcon"

HKLM\…\StartupApproved\Run32: => "ASUS WiFi GO! FileTransfer Execute"

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-3147232822-3033640963-3068048668-1001\…\StartupApproved\Run: => "EpicGamesLauncher"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{9597EBEB-ED82-497E-B605-767D502C2D52}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [UDP Query User{29889CF9-891B-45B1-9FBB-E1F85AA97CDF}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [TCP Query User{85D2880B-48D4-4F76-AF07-95EA2F01E671}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

FirewallRules: [UDP Query User{69EA22C0-286C-4897-B1A2-44727E4FEC9E}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

FirewallRules: [TCP Query User{20B7516F-554F-4A85-8891-5B5EE96AF640}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )

FirewallRules: [UDP Query User{B48D7C65-6461-43A2-A180-CFE1E0B2CD15}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )

FirewallRules: [TCP Query User{EFB2A0AC-2079-4C13-9551-1ED5A921287C}C:\users\adrian\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adrian\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [UDP Query User{F3AADC8B-C043-40D7-946E-DD1803208F75}C:\users\adrian\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\adrian\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [TCP Query User{0C8946FE-272B-4433-A017-F5EAB181E4C6}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [UDP Query User{0A96B5C5-4D58-4FEF-9399-5EB7D86DF636}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [TCP Query User{6EED2EE8-E9E4-4A6E-9B2D-053783104297}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve -> Valve Corporation)

FirewallRules: [UDP Query User{B8C21FFA-78E3-4823-8474-C021C62914A7}C:\program files (x86)\steam\steam.exe] => (Allow) C:\program files (x86)\steam\steam.exe (Valve -> Valve Corporation)

FirewallRules: [{23E58A45-F303-4400-B926-CDC47C6CD3F8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File

FirewallRules: [{06586B95-EB35-48E8-80B4-5C6F71E99CE7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File

FirewallRules: [{82B0E894-D6C2-42AB-B319-DE61D1BA6BB0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{48BD1425-8033-4F6F-BCD9-E26F93E5462F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{BCA7A09E-D49B-4C4A-82ED-1CB02AE149D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fall Guys\FallGuys_client.exe () [File not signed]

FirewallRules: [{2707666F-4617-451B-8E48-62215F3E441C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fall Guys\FallGuys_client.exe () [File not signed]

FirewallRules: [TCP Query User{31129501-132C-4AFE-979C-4AF6B5AEB3BC}C:\program files (x86)\steam\steamapps\common\new world public test\bin64\javelin_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\new world public test\bin64\javelin_x64.exe => No File

FirewallRules: [UDP Query User{0B8B3BB2-E299-4631-AB03-E3830511D6A9}C:\program files (x86)\steam\steamapps\common\new world public test\bin64\javelin_x64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\new world public test\bin64\javelin_x64.exe => No File

FirewallRules: [TCP Query User{F6803FB0-3827-4FD1-A629-423E8726BE4C}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe (Deluge Team) [File not signed]

FirewallRules: [UDP Query User{9B70FB8E-C0E7-435B-8BB1-289E3CD4368E}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe (Deluge Team) [File not signed]

FirewallRules: [TCP Query User{E0239021-F71A-474B-AACA-69D242E6502F}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )

FirewallRules: [UDP Query User{A145D65C-3F1F-4C2B-B503-FC6C282BD8DB}C:\program files\wizards of the coast\mtga\mtga.exe] => (Allow) C:\program files\wizards of the coast\mtga\mtga.exe (Wizards of the Coast, LLC -> )

FirewallRules: [{5F9F85A7-F308-4F92-A8A4-09B66B4673E2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{2A879660-3AAB-4B82-B22C-43926E733061}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{C0711E2D-6DB8-489E-B1D6-79D059CBB6DE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{787B68F6-B2C6-4CED-B340-99CDC0BA726B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{30F30E35-1F2E-480C-87AE-82AE6B8B36A3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{DE2F7476-4FEF-4763-A27D-9D4802C6AB69}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [TCP Query User{6DAA0922-BE66-4DC0-978F-ABDC4DE32896}C:\program files (x86)\gog galaxy\games\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\gog galaxy\games\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT SPÓŁKA AKCYJNA -> CD PROJEKT S.A.)

FirewallRules: [UDP Query User{2A5A50B7-12AE-4341-BDC4-DD7BD8BA4E18}C:\program files (x86)\gog galaxy\games\cyberpunk 2077\bin\x64\cyberpunk2077.exe] => (Allow) C:\program files (x86)\gog galaxy\games\cyberpunk 2077\bin\x64\cyberpunk2077.exe (CD PROJEKT SPÓŁKA AKCYJNA -> CD PROJEKT S.A.)

FirewallRules: [{388640C6-58BD-46C4-B508-891496233665}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{C8A02562-3CC1-488B-8965-AF03EDBE938A}] => (Allow) C:\Program Files (x86)\Overwolf\0.162.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)

FirewallRules: [{134ED2EB-4E32-4A46-8A52-973E3ACC9D44}] => (Allow) C:\Program Files (x86)\Overwolf\0.162.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)

FirewallRules: [{CC299604-E826-49A6-8913-ADA7A0F8C9D0}] => (Block) C:\Program Files (x86)\Overwolf\0.162.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)

FirewallRules: [{642459FB-6150-4C3B-A22F-637E3CE74F5D}] => (Block) C:\Program Files (x86)\Overwolf\0.162.0.8\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)

FirewallRules: [{1DFECAC5-29E8-4B76-808B-36D0C2F8B994}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

FirewallRules: [{A78A0993-76F0-45DB-994F-FF57371381C5}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

FirewallRules: [{3FD14193-1939-4AD3-A571-6AF9E5844F8F}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

FirewallRules: [{2A16ABFB-8A6D-4577-9C94-7330DE9B8FC8}] => (Allow) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

==================== Restore Points =========================

29-12-2020 17:21:04 Windows Modules Installer

06-01-2021 08:20:23 Scheduled Checkpoint

11-01-2021 18:47:25 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

==================== Faulty Device Manager Devices ============

==================== Event log errors: ========================

Application errors:

==================

Error: (01/11/2021 06:59:01 PM) (Source: SecurityCenter) (EventID: 17) (User: )

Description: Security Center failed to validate caller with error %1.

Error: (01/11/2021 06:56:04 PM) (Source: .NET Runtime) (EventID: 1025) (User: )

Description: Application: TESvc.exe

Framework Version: v4.0.30319

Description: The application requested process termination through System.Environment.FailFast(string message).

Message: Time: 2021-01-11 18:56:04Z

HResult: -2146232828

Is Terminating: True

Exception: System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. —> System.Net.Sockets.SocketException: A system call has failed

at System.Net.Sockets.Socket.InitializeSockets()

at System.Net.NetworkInformation.NetworkChange.AddressChangeListener.StartHelper(NetworkAddressChangedEventHandler caller, Boolean captureContext, StartIPOptions startIPOptions)

at System.Net.NetworkInformation.NetworkChange.add_NetworkAddressChanged(NetworkAddressChangedEventHandler value)

at CheckPoint.Emulation.Infrastructure.Cloud.LoadManager.Init()

at CheckPoint.ThreatEmulation.ExtensionsConnector.ExtensionsConnector.StartExtensionsConnector(Boolean isDebugging)

at CheckPoint.ThreatEmulation.ExtensionsConnector.ExtensionConnectorManager.Start(IExternalDetectionEngine externalDetectorInterface)

— End of inner exception stack trace —

at System.RuntimeMethodHandle.InvokeMethod(Object target, Object[] arguments, Signature sig, Boolean constructor)

at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(Object obj, Object[] parameters, Object[] arguments)

at System.Reflection.RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)

at Bridge.SBAService.ExternalEngines.ExternalDetectionManager.<>c__DisplayClass6_1.b__0()

at System.Threading.ThreadHelper.ThreadStart_Context(Object state)

at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)

at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)

at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)

at System.Threading.ThreadHelper.ThreadStart()

Stack:

at System.Environment.FailFast(System.String, System.Exception)

at EPNetUtils.Helper.FailureHandling.UnhandledExceptionHelper.WriteCrashEventLogAndExit(System.String, System.Exception)

at CheckPoint.ThreatEmulation.Service.Engine.Engine.UnhandledExceptionCallback(System.Object, System.UnhandledExceptionEventArgs)

at System.RuntimeMethodHandle.InvokeMethod(System.Object, System.Object[], System.Signature, Boolean)

at System.Reflection.RuntimeMethodInfo.UnsafeInvokeInternal(System.Object, System.Object[], System.Object[])

at System.Reflection.RuntimeMethodInfo.Invoke(System.Object, System.Reflection.BindingFlags, System.Reflection.Binder, System.Object[], System.Globalization.CultureInfo)

at Bridge.SBAService.ExternalEngines.ExternalDetectionManager+<>c__DisplayClass6_1.b__0()

at System.Threading.ThreadHelper.ThreadStart_Context(System.Object)

at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)

at System.Threading.ThreadHelper.ThreadStart()

Error: (01/11/2021 06:56:01 PM) (Source: .NET Runtime) (EventID: 1025) (User: )

Description: Application: TESvc.exe

Framework Version: v4.0.30319

Description: The application requested process termination through System.Environment.FailFast(string message).

Message: Time: 2021-01-11 18:56:01Z