Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-02-2026
Ran by peter (administrator) on CHO (Micro-Star International Co., Ltd. GS65 Stealth Thin 8RF) (23-02-2026 16:49:52)
Running from C:\Users\peter\Desktop\FRST64.exe
Loaded Profiles: peter
Platform: Microsoft Windows 10 Home Version 22H2 19045.6466 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ) (Malwarebytes Inc Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe (drivers\RivetNetworks\Killer\KSPSService.exe ) (Intel Corporation Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\KSPS.exe (DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe ) (Intel Corporation Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe (explorer.exe ) (Google LLC Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <35> (Intel(R) Rapid Storage Technology Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(services.exe
) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe (services.exe ) () [File not signed] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(services.exe
) (Brother Industries, Ltd.) [File not signed] C:\Program Files (x86)\Browny02\BrYNSvc.exe (services.exe ) (Google LLC Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\145.0.7632.25\remoting_host.exe <2> (services.exe ) (Intel Corporation Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe (services.exe ) (Intel Corporation Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe (services.exe ) (Intel Corporation Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe (services.exe ) (Intel Corporation Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe (services.exe ) (Intel Corporation Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe (services.exe ) (Intel Corporation Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe (services.exe ) (Intel Corporation Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe (services.exe ) (Intel Corporation Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\KSPSService.exe (services.exe ) (Intel(R) Rapid Storage Technology Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (services.exe ) (Malwarebytes Inc Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (services.exe ) (Microsoft Corporation Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ) (Microsoft Windows Publisher Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe (services.exe ) (Microsoft Windows Publisher Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe (services.exe ) (Micro-Star International CO., LTD. ) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\Sendevsvc\Sendevsvc.exe (services.exe ) (Micro-Star International CO., LTD. Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\Dragon Center\MSIAPP_Service\MSIAPService.exe (services.exe ) (Micro-Star International Co., Ltd.) [File not signed] C:\Program Files (x86)\SCM\MSIService.exe
(services.exe
) (NVIDIA Corporation NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe
) (NVIDIA Corporation NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_7b850875618e1cb3\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe
) (PORTRAIT DISPLAYS, INC. Portrait Displays, Inc.) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe
(services.exe
) (Realtek Semiconductor Corp. Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_2a44e4b4c6ebcd5d\RtkAudUService64.exe <2>
(services.exe
) (SteelSeries France SASU Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe
) (Synaptics Incorporated Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(SteelSeries France SASU
A-Volute) C:\Users\peter\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (svchost.exe ) (21E1B422-257A-44A2-9C8F-379165856473 ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.9.0_x64__w2gh52qy24etm\Nahimic3.exe (svchost.exe ) (Microsoft Corporation Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (svchost.exe ) (Microsoft Windows Microsoft Corporation) C:\Windows\System32\dllhost.exe (svchost.exe ) (Microsoft Windows Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ) (Microsoft Windows Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ) (Micro-Star International Co., Ltd.) [File not signed] C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe
(svchost.exe
) (SteelSeries France SASU Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe
) (SteelSeries France SASU Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(Synaptics Incorporated
Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe (SynTPEnhService.exe ) (Synaptics Incorporated Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2018-02-13] (Intel(R) Rapid Storage Technology Intel Corporation)
HKLM...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_2a44e4b4c6ebcd5d\RtkAudUService64.exe [3070416 2025-07-02] (Realtek Semiconductor Corp.
Realtek Semiconductor) HKLM...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [302360 2017-11-14] (Micro-Star International CO., LTD. ) [File not signed]
HKLM...\Run: [MsiTrueColor] => C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColor.exe [5870416 2017-11-29] (PORTRAIT DISPLAYS, INC.
Portrait Displays, Inc.) HKLM...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [4147608 2026-02-12] (Riot Games, Inc. Riot Games, Inc.)
HKLM-x32...\Run: [Genshin Impact_Launcher] => [X]
HKLM-x32...\Run: [Honkai Impact 3rd_Launcher] => [X]
HKLM-x32...\Run: [Genshin Impact_launcher__1_1] => [X]
HKLM-x32...\Run: [Honkai Impact 3rd_launcher__1_1] => [X]
HKLM-x32...\Run: [Star Rail_launcher_hoyoverse_PC_1_1] => [X]
HKU\S-1-5-21-3770983433-3408265141-2813071809-1001...\Run: [Spotify] => C:\Users\peter\AppData\Roaming\Spotify\Spotify.exe [25726696 2022-04-07] (Spotify AB
Spotify Ltd) HKU\S-1-5-21-3770983433-3408265141-2813071809-1001...\Run: [Norton Download Manager{NS22150088-SHPD-FSD5140133}] => C:\Users\Public\Downloads\Norton{NS22150088-SHPD-FSD5140133}\FSDUI_Custom.exe /m /SHOWONECLICK /WIN10_UPGRADE "C:\Users\peter\AppData\Local\Temp{B2A1B8FA-8342-4F39-9F49-203F0906919E}\Upgrade.exe" (No File) <==== ATTENTION
HKU\S-1-5-21-3770983433-3408265141-2813071809-1001...\Run: [Windows PowerShell v1.0] => powershell -NoP -Exec Bypass -W Hidden -Command "Iex(Irm 0xc0.0x6d.0xc8.0x3f/regevent)" (No File) <==== ATTENTION
HKU\S-1-5-21-3770983433-3408265141-2813071809-1001...\Run: [Gemini Representing Identify 4651] => "C:\Users\peter\AppData\Roaming\Intel\Updates\Local\55dc3319cdc88878\wslservice.exe" "C:\Users\peter\AppData\Roaming\Intel\Updates\Local\55dc3319cdc88878\copal.cat" (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2026-01-30] (Google LLC Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] C:\Program Files (x86)\Google\Chrome\Application\145.0.7632.109\Installer\chrmstp.exe [2026-02-19] (Google LLC Google LLC) Startup: C:\Users\peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\watchhost.lnk [2026-02-22] <==== ATTENTION
ShortcutTarget: watchhost.lnk E:\Fitegirlpackgamesinstallationsetup\TEKKEN 8\tekkenupdatev2.08.3parts\data.temp\Vs1NM5aYV.exe (No File) <==== ATTENTION
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2024-10-14]
ShortcutTarget: Brother iPSMonitor.lnk
C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [File not signed] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FxSound.lnk [2025-09-06]
ShortcutTarget: FxSound.lnk C:\Program Files\FxSound LLC\FxSound\FxSound.exe (FxSound, LLC FxSound LLC)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {00dad4db-8c4b-44c1-a485-047e26e2aa9e} - no filepath. <==== ATTENTION
Task: {06f32d74-5cb1-4271-ba64-0a4e4e09086b} - no filepath. <==== ATTENTION
Task: {0c82ff30-9649-40e3-906f-60d73d55c3d1} - no filepath. <==== ATTENTION
Task: {0cbe699f-4ae1-4a15-9ce0-d51d46d69ad1} - no filepath. <==== ATTENTION
Task: {0d6d47db-8f51-47e9-9c3c-cc0f79e9f0ab} - no filepath. <==== ATTENTION
Task: {0e1a2613-8126-43dd-a6c7-519ad55a4730} - no filepath. <==== ATTENTION
Task: {0e4219a7-175a-41a3-adb3-8717af2f9359} - no filepath. <==== ATTENTION
Task: {0ec149bc-bd32-4a31-b7eb-65091cbc68c5} - no filepath. <==== ATTENTION
Task: {0f51ac0b-d836-4b4a-831d-40df5f88b107} - no filepath. <==== ATTENTION
Task: {0f9ca29f-b3f1-4b60-bbba-f1e93afb5cfc} - no filepath. <==== ATTENTION
Task: {131a85fd-c49a-404e-8745-49ed7972488c} - no filepath. <==== ATTENTION
Task: {1471ad8a-c83c-418d-9ea3-5cc5998d99ca} - no filepath. <==== ATTENTION
Task: {151f8182-fecc-4ae5-8dc1-31413f2e4af3} - no filepath. <==== ATTENTION
Task: {1728d36c-6696-4431-a7f8-68203ca9b8fa} - no filepath. <==== ATTENTION
Task: {184508a4-61cb-4d23-a71e-41c03694f905} - no filepath. <==== ATTENTION
Task: {1ce8b38f-a785-46ef-9c01-57a250d49173} - no filepath. <==== ATTENTION
Task: {1dd267ca-9ff3-4c85-bd6a-c1b47ac6c4c5} - no filepath. <==== ATTENTION
Task: {1eac3251-5ee0-489d-b98f-c553d89b63e8} - no filepath. <==== ATTENTION
Task: {1fa34ab4-bc20-4576-8db0-ce33178dfae6} - no filepath. <==== ATTENTION
Task: {2218a4e0-af23-421b-9a04-1fa80a30a3fc} - no filepath. <==== ATTENTION
Task: {23a0cf81-8583-4b03-950a-16bb517f9102} - no filepath. <==== ATTENTION
Task: {23aa5737-e3da-4fd4-bf4c-6b836907abee} - no filepath. <==== ATTENTION
Task: {2e4d39e5-2617-46af-9e4e-5f509717ba60} - no filepath. <==== ATTENTION
Task: {2f336ecd-d35a-4ea9-913b-63815521bfb1} - no filepath. <==== ATTENTION
Task: {2fbc79a5-8fd7-4cf4-bb7a-11eac17ced20} - no filepath. <==== ATTENTION
Task: {344f7e11-0c90-4f1f-9203-f36db7fc29b2} - no filepath. <==== ATTENTION
Task: {35c3cf4e-776e-473f-91a2-ccc3af1a34bb} - no filepath. <==== ATTENTION
Task: {3a4f3004-7029-4bc0-abc1-b0897188e949} - no filepath. <==== ATTENTION
Task: {3a776aeb-afae-4d70-bc4f-5c81670a5df7} - no filepath. <==== ATTENTION
Task: {3a815f5e-fcaa-48b7-99f7-9f9ea84b1168} - no filepath. <==== ATTENTION
Task: {3addf824-4026-46ad-afe3-49dadb1bee89} - no filepath. <==== ATTENTION
Task: {3aeb23e2-d09a-435f-871f-ce924b9f8456} - no filepath. <==== ATTENTION
Task: {3b54aee6-d1fa-4a6c-b9ff-ce6b179c7abc} - no filepath. <==== ATTENTION
Task: {3ba004ec-83cd-46e8-aa35-325d0462c503} - no filepath. <==== ATTENTION
Task: {3c50f160-0caf-4b99-b930-acf430febf29} - no filepath. <==== ATTENTION
Task: {3eca293c-52f6-49b5-9ade-7d3f3ad9b131} - no filepath. <==== ATTENTION
Task: {3f52515b-2996-4646-926d-f1a84e002a93} - no filepath. <==== ATTENTION
Task: {42edc8de-a76a-4368-bc04-4b30f12d1f6f} - no filepath. <==== ATTENTION
Task: {4522df28-f859-4204-8bd1-60d9cd21fc75} - no filepath. <==== ATTENTION
Task: {453d8939-0306-43ef-8442-81f9f988788d} - no filepath. <==== ATTENTION
Task: {4614842d-01ec-457d-a34a-f2ed5dd86955} - no filepath. <==== ATTENTION
Task: {48df544d-ee15-41c6-b11c-d581f0879afb} - no filepath. <==== ATTENTION
Task: {4aca9db1-dcb2-45d4-b431-297f68158811} - no filepath. <==== ATTENTION
Task: {4ad2f6cf-b439-4151-9475-90f6a4c438cd} - no filepath. <==== ATTENTION
Task: {4bc0b6bd-b75d-4e28-9ef7-03f79fe08b67} - no filepath. <==== ATTENTION
Task: {4c8dba5b-20f0-40d2-a87d-6e1c67147fe0} - no filepath. <==== ATTENTION
Task: {4f7b43ed-f2d6-4ac2-b26a-8ff04720d53f} - no filepath. <==== ATTENTION
Task: {4f81b4d1-caa9-4e71-939e-c4bac2ed2b44} - no filepath. <==== ATTENTION
Task: {506cc37c-81be-482a-b2c5-88294e54d755} - no filepath. <==== ATTENTION
Task: {521a1abf-a5b7-4f92-852b-13a23d6062c8} - no filepath. <==== ATTENTION
Task: {5557dcea-12b6-4c02-9472-cada3830caf2} - no filepath. <==== ATTENTION
Task: {55f7f798-0d2b-4fc1-aefa-74e0196c2a2c} - no filepath. <==== ATTENTION
Task: {5657beae-578a-4683-b17a-65736c718f49} - no filepath. <==== ATTENTION
Task: {56e5e8fc-ca2d-4029-a2ed-b787ce9fc8df} - no filepath. <==== ATTENTION
Task: {57654829-2b9a-48bf-8654-c800c6e9067e} - no filepath. <==== ATTENTION
Task: {58c5fe58-b5ea-4c96-a399-ed5672dcdba4} - no filepath. <==== ATTENTION
Task: {59efe778-daad-4e00-b174-ad441ff72929} - no filepath. <==== ATTENTION
Task: {5ac9c0a4-c0d6-44b6-9bbf-b120a94d7197} - no filepath. <==== ATTENTION
Task: {603edb27-0e20-44a1-8dd4-cba5cc2b1fdc} - no filepath. <==== ATTENTION
Task: {606724c0-9938-4418-b97b-9a3326d394e1} - no filepath. <==== ATTENTION
Task: {6078152f-12a5-4734-adff-7b0b5a9d9f09} - no filepath. <==== ATTENTION
Task: {629e88df-b995-45d4-a873-8acb65bd52d7} - no filepath. <==== ATTENTION
Task: {6540224b-431a-40b7-993f-10ea958108c5} - no filepath. <==== ATTENTION
Task: {65a4355e-8da0-4d9b-9497-1011bd9d6b3a} - no filepath. <==== ATTENTION
Task: {6610b2fb-cb34-4df2-918e-3d2b6163b427} - no filepath. <==== ATTENTION
Task: {669029bc-8013-4cd0-93b3-0d78ecdea251} - no filepath. <==== ATTENTION
Task: {67648486-ccb0-4ae1-996a-37625fac813f} - no filepath. <==== ATTENTION
Task: {67dc539f-6e5d-49d1-81e8-cdf70b08a9f7} - no filepath. <==== ATTENTION
Task: {694d90e6-476a-4c80-88a3-785c8b4c6068} - no filepath. <==== ATTENTION
Task: {69a86bb1-b938-47f2-82b6-b16aee6745e2} - no filepath. <==== ATTENTION
Task: {69ba53c5-65c4-4ea7-a49b-ca4987b1bd24} - no filepath. <==== ATTENTION
Task: {6a740e3a-70e8-4b63-9c22-a936c2862829} - no filepath. <==== ATTENTION
Task: {6b80a273-ec06-4c2f-a422-edfa261416c8} - no filepath. <==== ATTENTION
Task: {6c4595fc-8a96-449f-8765-ac73bfbae16f} - no filepath. <==== ATTENTION
Task: {6d70ee34-f38c-46ed-894b-65e6208ce000} - no filepath. <==== ATTENTION
Task: {70490ae9-e54b-4961-81d1-130fee541cb4} - no filepath. <==== ATTENTION
Task: {71dc1697-4722-4ae7-847e-c5656ab15c15} - no filepath. <==== ATTENTION
Task: {7302B207-A4BD-4322-B9EC-3A6F5D9BCC0C} - \Windows Perflog No File <==== ATTENTION
Task: {73090889-ec43-4fe5-9856-a924543cdcba} - no filepath. <==== ATTENTION
Task: {760e1cf2-d1e2-49da-a274-cafd954556bc} - no filepath. <==== ATTENTION
Task: {783b4cbd-5b16-4252-9441-b5714acb0f94} - no filepath. <==== ATTENTION
Task: {7c56ad2c-4bfd-473e-a548-76825c8dc201} - no filepath. <==== ATTENTION
Task: {802c17de-3ad0-47fc-9da6-1c8835f28977} - no filepath. <==== ATTENTION
Task: {80df3edb-e572-4c3e-82df-c9e297ccfcd6} - no filepath. <==== ATTENTION
Task: {81546c1f-8ec6-4935-bbc1-8deda16161dc} - no filepath. <==== ATTENTION
Task: {82a9f8b9-5493-4c69-96d1-77e5a421fea0} - no filepath. <==== ATTENTION
Task: {8792b0d3-f01c-4ff3-9f61-6cd1a71b3b9a} - no filepath. <==== ATTENTION
Task: {87a35038-4255-432d-ad47-a3f6ec4c892e} - no filepath. <==== ATTENTION
Task: {88a1e153-5c9a-46da-88aa-a18059f1aa9c} - no filepath. <==== ATTENTION
Task: {88e69f2f-f9f3-4fe5-88ab-61501181371a} - no filepath. <==== ATTENTION
Task: {8ae83651-ae93-4455-a4af-7c96dd292d1e} - no filepath. <==== ATTENTION
Task: {8dcdbf07-5192-489a-8a22-691088b5f21f} - no filepath. <==== ATTENTION
Task: {8dee5a79-cad6-4161-aee1-aedc80ae06dc} - no filepath. <==== ATTENTION
Task: {8e61f06a-119f-4a9c-870d-21593c73f0c0} - no filepath. <==== ATTENTION
Task: {8ec5cef9-6f1d-4592-a5d0-7b0add78d4c9} - no filepath. <==== ATTENTION
Task: {8f6e3977-2a45-49dc-951b-efd5dc26389e} - no filepath. <==== ATTENTION
Task: {9044c5c2-1ef9-40a0-a2a2-dd4e97b35969} - no filepath. <==== ATTENTION
Task: {91beb46d-1d98-42ee-9247-c91177856efd} - no filepath. <==== ATTENTION
Task: {9284a552-9c98-4e0a-8f7c-14b2cfaad23b} - no filepath. <==== ATTENTION
Task: {956f0e0b-861c-4d7a-b754-6ee9d2d157ee} - no filepath. <==== ATTENTION
Task: {965fcd16-4269-4a72-9aa1-73b8422ed690} - no filepath. <==== ATTENTION
Task: {981f7a7c-a4db-43a9-8bb5-00cf371c8439} - no filepath. <==== ATTENTION
Task: {98f88bc3-9d5f-4122-90e6-f1bd8404d72e} - no filepath. <==== ATTENTION
Task: {99b57d76-6563-4042-b746-2063b47b4851} - no filepath. <==== ATTENTION
Task: {9b3393cc-af34-4522-b763-8bfca197309d} - no filepath. <==== ATTENTION
Task: {9b4e67d4-5ba3-4eb8-9b5b-dacc357e16e8} - no filepath. <==== ATTENTION
Task: {9dbfed4c-2caf-4a0f-9310-22c641cae7d6} - no filepath. <==== ATTENTION
Task: {9e31397b-367a-4661-8eca-84e330532aa0} - no filepath. <==== ATTENTION
Task: {9f95a0e5-47a7-48c6-8cd8-252bc447d771} - no filepath. <==== ATTENTION
Task: {a0ac7dbf-45ca-435d-bbc4-a69efafdfbeb} - no filepath. <==== ATTENTION
Task: {a1db1285-f038-4cb4-bc59-ffaa0b1310f2} - no filepath. <==== ATTENTION
Task: {a2aa7e0e-6cda-48ef-8c6a-9e25813d1340} - no filepath. <==== ATTENTION
Task: {a310aefc-d81a-4812-9f0e-75332492bd4e} - no filepath. <==== ATTENTION
Task: {a5f6726e-4ab7-4a42-bc74-5b118299e931} - no filepath. <==== ATTENTION
Task: {a78a9710-900e-4513-bb9a-ed67891436d9} - no filepath. <==== ATTENTION
Task: {a83fee7a-eab3-48d2-bcdc-0c37c8becfb6} - no filepath. <==== ATTENTION
Task: {a8dfb3e9-9420-4d1a-a7dd-39fde366bea8} - no filepath. <==== ATTENTION
Task: {a91be869-1d0f-47cb-8884-d9302d2b5cb2} - no filepath. <==== ATTENTION
Task: {a9edc922-7bff-4929-aaa1-f3c37671b354} - no filepath. <==== ATTENTION
Task: {aa9272d9-ddbe-4461-b5c4-46a0fc9abc7c} - no filepath. <==== ATTENTION
Task: {ac7eade0-4790-4b48-aef2-fe5f098aa554} - no filepath. <==== ATTENTION
Task: {ad0ae22d-2012-4e0b-98ba-6d9a4a4c1e03} - no filepath. <==== ATTENTION
Task: {aec2dc21-ee40-4017-b04e-5b9ee1a9e0f8} - no filepath. <==== ATTENTION
Task: {b11b47c3-83d0-468a-8f6e-729252e3ebe7} - no filepath. <==== ATTENTION
Task: {b13a7558-02e6-4c95-b06f-247174d6475b} - no filepath. <==== ATTENTION
Task: {b2c41c43-0ac2-470e-b421-14d160ef83f1} - no filepath. <==== ATTENTION
Task: {b31f0870-0abc-4260-bdf7-b6e61ae5fff1} - no filepath. <==== ATTENTION
Task: {b361c8a3-338e-48bc-832e-c5fbdf94a0e1} - no filepath. <==== ATTENTION
Task: {b3e9e7d3-f201-4b3a-9995-0081c9e9a215} - no filepath. <==== ATTENTION
Task: {b4a002ab-18e3-47c7-8103-1055401099af} - no filepath. <==== ATTENTION
Task: {b910746d-76a0-4627-997e-8ea9bc79a3be} - no filepath. <==== ATTENTION
Task: {b984dde5-fc4b-428a-a50a-af2aa76b8811} - no filepath. <==== ATTENTION
Task: {bb3926f8-2582-46bc-971f-5e5e16872389} - no filepath. <==== ATTENTION
Task: {bb4317d3-9680-4269-aefb-bc0cd698997c} - no filepath. <==== ATTENTION
Task: {bc327408-a5e8-4e19-9050-9fca9a938b48} - no filepath. <==== ATTENTION
Task: {bfc5a227-89eb-4571-9fbf-74d2785a89b9} - no filepath. <==== ATTENTION
Task: {c084b141-601c-4190-a045-1a209417ddae} - no filepath. <==== ATTENTION
Task: {c33e3d33-e65a-40c6-80a4-d014a9ec235b} - no filepath. <==== ATTENTION
Task: {c3b69f64-9fe1-4ed0-87cb-56f7d5f66dd0} - no filepath. <==== ATTENTION
Task: {c3e3365b-b0e4-4c47-9739-233aa59744a9} - no filepath. <==== ATTENTION
Task: {c413b5f3-9162-4e3a-bc16-3ddd963282f6} - no filepath. <==== ATTENTION
Task: {c485c955-668e-496b-8982-69e7ab1ca822} - no filepath. <==== ATTENTION
Task: {c659d763-e735-4d34-bc71-21cabb1ba612} - no filepath. <==== ATTENTION
Task: {c673dc3f-999c-47f9-8a21-f39d5871fb82} - no filepath. <==== ATTENTION
Task: {c6d97de0-bff0-42fc-b21f-ae0403299b3b} - no filepath. <==== ATTENTION
Task: {c7f90cdc-c0fb-4a23-a0e2-3a2d59e3dd9e} - no filepath. <==== ATTENTION
Task: {c8c4c38f-89c7-4285-a91f-aaeb452e3927} - no filepath. <==== ATTENTION
Task: {ca95e850-65b0-4b87-8193-97676af9159e} - no filepath. <==== ATTENTION
Task: {cd0406e0-6f88-4ed7-b39b-8a6d2462ff94} - no filepath. <==== ATTENTION
Task: {d0bc343a-89f2-4b4e-a492-0c41c7398ab1} - no filepath. <==== ATTENTION
Task: {d14bc282-3ba0-4914-9a6d-be9638e5fcae} - no filepath. <==== ATTENTION
Task: {d4d016d8-5426-4168-bc92-12979d31b17b} - no filepath. <==== ATTENTION
Task: {d68f7de9-bdd3-448e-aaf6-d9d117fc4e94} - no filepath. <==== ATTENTION
Task: {d70e0c6e-2ff5-4639-9791-569eb319d601} - no filepath. <==== ATTENTION
Task: {d88a4866-bfd0-48ef-bfc1-45a452f75dfa} - no filepath. <==== ATTENTION
Task: {d90308b8-c305-4489-8462-8114d2f464fb} - no filepath. <==== ATTENTION
Task: {dabecd29-9933-49d1-bfe7-fd07626e8298} - no filepath. <==== ATTENTION
Task: {daf7268f-23b3-4545-baf1-07ada5e3b8b2} - no filepath. <==== ATTENTION
Task: {dd9f7d03-1a49-4397-a349-991543adc803} - no filepath. <==== ATTENTION
Task: {ddacb86d-3b80-4721-b9fd-e410dc11cbc1} - no filepath. <==== ATTENTION
Task: {ddcedb3f-a16a-4760-a320-c875d4eb92d7} - no filepath. <==== ATTENTION
Task: {e60d13af-2b94-4722-9e89-add7abb4970b} - no filepath. <==== ATTENTION
Task: {e67b6ff3-beb4-4d34-b88c-560a9cd8ea85} - no filepath. <==== ATTENTION
Task: {e6f3d2a7-c1d3-4e63-90c4-cdaf0d7a7b1f} - no filepath. <==== ATTENTION
Task: {e75b2d7c-88e8-4b16-8764-ab6d4048ed30} - no filepath. <==== ATTENTION
Task: {e7e4e706-0cfb-4eda-b0cb-ec6de04b7129} - no filepath. <==== ATTENTION
Task: {ea43ba04-6f19-46a9-a725-f6eb84a41560} - no filepath. <==== ATTENTION
Task: {eb849907-9d10-4198-b434-731e5d3e763d} - no filepath. <==== ATTENTION
Task: {ec44059e-2ce1-4a77-8194-6e4348ce11df} - no filepath. <==== ATTENTION
Task: {f0ffe309-3dc5-440a-91b0-efc555665890} - no filepath. <==== ATTENTION
Task: {f3faa0ee-f16c-44ab-8941-3960ad057b8a} - no filepath. <==== ATTENTION
Task: {f478f74b-cab6-411e-85c3-2b9922a4b250} - no filepath. <==== ATTENTION
Task: {f9aae5e8-7352-4cf8-ad2b-d1d073d797c3} - no filepath. <==== ATTENTION
Task: {fa5fed29-7184-4427-9646-77f2015b9615} - no filepath. <==== ATTENTION
Task: {fc8221a0-9952-4f65-b1ed-aad971bf545e} - no filepath. <==== ATTENTION
Task: {fc99ebfb-3142-4ddb-89c5-ead01f590bf8} - no filepath. <==== ATTENTION
Task: {fcf9edcc-297f-43c1-885d-857d59244d50} - no filepath. <==== ATTENTION
Task: {ffaafe98-fe8d-46fd-8225-3aa6e6b3a3c7} - no filepath. <==== ATTENTION
Task: {AA439D7D-AC13-40DC-AAE1-22C0975A0B38} - System32\Tasks\Dragon_Center_updater => C:\ProgramData\MSI\Dragon
Center\DragonCenter_Updater.exe DragonCenter Task: {BCCADD4F-EB46-453D-9F48-F77783057ED3} - System32\Tasks\FxSound\Update => C:\Program Files\FxSound LLC\FxSound\updater.exe [1675152 2025-06-28] (FxSound, LLC FxSound LLC)
Task: {D4447783-4126-4CEC-9C71-3A83CB9D044D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{14C5909C-8285-4F44-B40B-904196900A83} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [7056536 2025-11-26] (Google LLC
Google LLC) Task: {BEBE1C48-ACF2-44A6-90B9-75465B77BC7B} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\ConditionalAppStarter.exe [226024 2018-02-27] (Intel(R) Client Connectivity Division SW Intel Corporation)
Task: {C600932F-D9CF-4CCA-87EC-6A1674931A61} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\ConditionalAppStarter.exe [226024 2018-02-27] (Intel(R) Client Connectivity Division SW
Intel Corporation) Task: {6DDE3A83-95F8-40B6-99BC-349A263F065E} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\ConditionalAppStarter.exe [226024 2018-02-27] (Intel(R) Client Connectivity Division SW Intel Corporation)
Task: {07436D64-38CE-4C99-9B99-52517017833B} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe [2302184 2018-02-27] (Intel(R) Client Connectivity Division SW
Intel Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\ConditionalServiceStart
Task: {DDAB5A0D-4C73-452B-B972-411FA522572E} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows
Microsoft Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\start ThunderboltService
Task: {7295604C-5468-47D9-87BB-A333BEC2E521} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-10] (Microsoft Windows Publisher
Microsoft Corporation) Task: {8DBB3FF8-8C46-4197-925B-FE1CFB14FE0E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-10] (Microsoft Windows Publisher Microsoft Corporation)
Task: {306D893C-480C-4A58-BA57-C2B02DE82E2B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-10] (Microsoft Windows Publisher
Microsoft Corporation) Task: {529FD913-958A-4E52-AD5F-1B1654ABDF73} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpCmdRun.exe [1786528 2026-02-10] (Microsoft Windows Publisher Microsoft Corporation)
Task: {517ACE94-22FF-40A4-AD9F-E2216D563CF9} - System32\Tasks\MSI_Dragon Center => C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe [6255104 2020-05-06] (Micro-Star International Co., Ltd.) [File not signed]
Task: {DE00D26F-6EA3-410E-803F-F80E122C37C3} - System32\Tasks\MSI_Help_Desk_Agent => C:\Program Files (x86)\MSI\Help Desk\MSI Update Agent.exe (No File)
Task: {FB654E5C-34DF-40F0-9632-7DA604C04C9A} - System32\Tasks\MSISCMTsk => C:\Program Files (x86)\MSI\MSI Remind Manager\MSISCMTsk.exe [344184 2020-02-13] (Micro-Star International CO., LTD.
Application) Task: {28B0A3C5-C730-4567-B107-0E19630915FE} - System32\Tasks\NahimicSvc32Run => C:\WINDOWS\SysWOW64\NahimicSvc32.exe [1118128 2024-06-21] (SteelSeries France SASU Nahimic)
Task: {00AC1AF3-56BF-492B-9F6F-3B64D6049D2A} - System32\Tasks\NahimicSvc64Run => C:\WINDOWS\system32\NahimicSvc64.exe [1438128 2024-06-21] (SteelSeries France SASU
Nahimic) Task: {B0443E13-FD63-4DC0-8D93-B8DF34922646} - System32\Tasks\NahimicTask32 => C:\Windows\System32..\SysWOW64\NahimicSvc32.exe [1118128 0] (SteelSeries France SASU Nahimic)
Task: {12D0E6FF-7CCC-4EFF-87A0-11AAF060A967} - System32\Tasks\NahimicTask64 => C:\Windows\System32.\NahimicSvc64.exe [1438128 0] (SteelSeries France SASU
Nahimic) Task: {E88DDED8-7142-4F7F-851A-0B624FB168AE} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3324528 2025-10-15] (NVIDIA Corporation NVIDIA Corporation)
Task: {7F224861-49A2-40D2-859E-13C42057C682} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation
NVIDIA Corporation) Task: {2B8ACB48-7DAA-4B60-BD35-ED810A7D42B1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation NVIDIA Corporation)
Task: {1CB223A7-22DD-42FB-B1BC-582298D2B220} - System32\Tasks\RNIdle Task => C:\Windows\System32\drivers\RivetNetworks\Killer\RNIdleTask.exe [31640 2024-05-14] (Intel Corporation
)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{315e584d-ba31-4b96-8e22-9d3a81733d4c}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{315e584d-ba31-4b96-8e22-9d3a81733d4c}: [DhcpDomain] hsd1.ca.comcast.net
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}: [DhcpDomain] hsd1.ca.comcast.net
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}\34F6D63616374723E243: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}\34F6D63616374723E243: [DhcpDomain] hsd1.ca.comcast.net
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}\856696E6964797130313D223E243: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}\856696E6964797130313D223E243: [DhcpDomain] hsd1.ca.comcast.net
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}\856696E6964797130313D253: [DhcpNameServer] 75.75.75.75 75.75.76.76
Tcpip..\Interfaces{454b3ebf-310a-48b3-857b-63fe7b1208f7}\856696E6964797130313D253: [DhcpDomain] hsd1.ca.comcast.net

Edge:

Edge DefaultProfile: Profile 1
Edge Profile: C:\Users\peter\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2026-02-23]
Edge Extension: (Google Docs Offline) - C:\Users\peter\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-02-22]
Edge Extension: (Edge relevant text changes) - C:\Users\peter\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-06-10]

Chrome:

CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\peter\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-09-20]
CHR Profile: C:\Users\peter\AppData\Local\Google\Chrome\User Data\Profile 3 [2026-02-24]
CHR Extension: (Chrome Web Store Payments) - C:\Users\peter\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-02-22]
CHR Profile: C:\Users\peter\AppData\Local\Google\Chrome\User Data\System Profile [2026-02-22]
CHR HKLM...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [3386064 2026-02-14] (Blizzard Entertainment, Inc. Blizzard Entertainment)
R2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [500736 2024-05-31] (Brother Industries, Ltd.) [File not signed]
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\145.0.7632.25\remoting_host.exe [74392 2026-01-27] (Google LLC
Google LLC) S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [20446368 2026-02-21] (Electronic Arts, Inc. Electronic Arts)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [959216 2025-12-24] (EasyAntiCheat Oy
Epic Games, Inc.) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-02-10] (Epic Games Inc. Epic Games, Inc.)
S3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78240 2024-05-14] (Intel Corporation
Intel® Corporation) R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2354584 2024-05-14] (Intel Corporation Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2629936 2024-05-14] (Intel Corporation
Intel) S2 Killer Provider Data Helper Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerProviderDataHelperService.exe [1088304 2024-05-14] (Intel Corporation Intel)
R2 KillerSmartphoneSleepService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KSPSService.exe [77616 2024-05-14] (Intel Corporation
Rivet Networks, LLC.) S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2024-05-14] (Intel Corporation Intel® Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11287744 2026-02-23] (Malwarebytes Inc
Malwarebytes) S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2026-02-23] (Malwarebytes Inc. Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MpDefenderCoreService.exe [2067464 2026-02-10] (Microsoft Windows Publisher
Microsoft Corporation) R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2017-11-14] (Micro-Star International Co., Ltd.) [File not signed]
R2 MSI Foundation Service; C:\Program Files (x86)\MSI\Dragon Center\MSIAPP_Service\MSIAPService.exe [47568 2018-10-29] (Micro-Star International CO., LTD. Micro-Star International Co., Ltd.)
R2 MSITrueColorService; C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe [192848 2017-11-29] (PORTRAIT DISPLAYS, INC.
Portrait Displays, Inc.) R2 NahimicService; C:\WINDOWS\System32\NahimicService.exe [1910704 2024-06-21] (SteelSeries France SASU Nahimic)
S3 NGS; C:\WINDOWS\NGService.exe [2994248 2018-10-16] (NEXON Korea Corporation.
NEXON Korea Corporation) R2 Sendevsvc; C:\Program Files (x86)\MSI\Dragon Center\Sendevsvc\Sendevsvc.exe [302888 2019-01-30] (Micro-Star International CO., LTD. ) [File not signed]
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [11776 2024-08-19] () [File not signed]
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [55806032 2026-02-12] (Riot Games, Inc.
Riot Games, Inc.) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\NisSrv.exe [4435096 2026-02-10] (Microsoft Windows Publisher Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26010.5-0\MsMpEng.exe [290744 2026-02-10] (Microsoft Windows Publisher
Microsoft Corporation) R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [18944 2024-08-19] () [File not signed]
S3 EasyAntiCheat; "C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe" [X]
S3 EQU8_19; C:\ProgramData\EQU8\Totally Accurate Battlegrounds\bin\anticheat.x64.equ8.exe [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_7b850875618e1cb3\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_7b850875618e1cb3\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [3218536 2025-09-17] (Microsoft Windows Hardware Compatibility Publisher ANTICHEATEXPERT.COM)
S3 ACE-GAME; C:\WINDOWS\system32\drivers\ACE-GAME.sys [772640 2022-03-14] (HIGH MORALE DEVELOPMENTS LIMITED
ANTICHEATEXPERT.COM)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [File not signed]
S3 EQU8_HELPER_19; C:\WINDOWS\system32\DRIVERS\EQU8_HELPER_19.sys [38032 2021-06-09] (Int3 Software AB )
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-02-23] (Microsoft Windows Hardware Compatibility Publisher
Malwarebytes) R3 FXVAD; C:\WINDOWS\system32\drivers\fxvad.sys [326656 2024-12-24] (Microsoft Windows Hardware Compatibility Publisher Windows (R) Win 7 DDK provider)
S3 HoYoProtect; C:\WINDOWS\system32\HoYoKProtect.sys [3925168 2025-11-26] (Microsoft Windows Hardware Compatibility Publisher
miHoYo) R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [248624 2024-05-14] (Intel Corporation Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82352 2026-02-10] (Microsoft Windows
Microsoft Corporation) S3 ksophon_x64; C:\WINDOWS\system32\drivers\ksophon_x64.sys [9966728 2022-08-12] (PROXIMA BETA PTE. LIMITED PROXIMA BETE)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234600 2026-02-23] (Microsoft Windows Hardware Compatibility Publisher
Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-02-23] (Microsoft Windows Early Launch Anti-malware Publisher Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt.sys [212584 2026-02-23] (Microsoft Windows Hardware Compatibility Publisher
Malwarebytes) R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [80984 2026-02-23] (Microsoft Windows Hardware Compatibility Publisher Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-02-23] (Microsoft Windows Hardware Compatibility Publisher
Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-02-23] (Malwarebytes Inc Malwarebytes)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85616 2021-08-13] (A-Volute
Windows (R) Win 7 DDK provider) S3 ssbthid; C:\WINDOWS\System32\drivers\ssbthid.sys [43824 2017-12-15] (SteelSeries ApS )
R3 ssps2; C:\WINDOWS\System32\drivers\ssps2.sys [41104 2019-08-27] (SteelSeries ApS
) R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. )
R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp.
) S3 UniFairy; C:\WINDOWS\system32\UniFairy.sys [828144 2022-02-20] (Tencent Technology(Shenzhen) Company Limited )
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [43580536 2026-02-12] (Riot Games, Inc.
Riot Games, Inc.) R3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-05] (Microsoft Windows Hardware Compatibility Publisher Benjamin Höglinger-Stelzer)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-02-10] (Microsoft Windows Early Launch Anti-malware Publisher
Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2026-02-10] (Microsoft Windows Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102832 2026-02-10] (Microsoft Windows
Microsoft Corporation) R3 WINIO; C:\Program Files (x86)\MSI\Dragon Center\winio64.sys [18688 2018-07-19] (WDKTestCert heavenluo,131620253795976757 )
S3 xhunter1; C:\WINDOWS\xhunter1.sys [74552 2019-01-26] (Wellbia.com Co., Ltd.
Wellbia.com Co., Ltd.)
S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [X]
S4 SymEvnt; \??\C:\Program Files\Norton Security\NortonData\22.11.1.5\SymPlatform\SymEvnt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-02-23 16:49 - 2026-02-23 16:50 - 000041222 _ C:\Users\peter\Desktop\FRST.txt
2026-02-23 16:49 - 2026-02-23 16:50 - 000000000
D C:\FRST
2026-02-23 16:47 - 2026-02-23 16:48 - 002445312 _ (Farbar) C:\Users\peter\Desktop\FRST64.exe
2026-02-23 05:29 - 2026-02-23 05:29 - 000000818
C:\Users\peter\Desktop\Malwarebytes Website Blocked Report 2026-02-22 173648.txt
2026-02-22 17:34 - 2026-02-22 17:34 - 000190096
(Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-02-22 17:33 - 2026-02-22 17:36 - 000000000 _D C:\Users\peter\AppData\Local\Malwarebytes
2026-02-22 17:33 - 2026-02-22 17:33 - 000002100
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-02-22 17:32 - 2026-02-22 17:32 - 000000000 _D C:\ProgramData\Malwarebytes
2026-02-22 17:32 - 2026-02-22 17:32 - 000000000
D C:\Program Files\Malwarebytes
2026-02-22 16:17 - 2026-02-22 16:17 - 000000214 __
C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-02-22 16:02 - 2026-02-22 16:46 - 000000000 _D C:\WINDOWS\pss
2026-02-22 06:17 - 2026-02-22 06:17 - 000002443
C:\Users\peter\Desktop\Peter - Chrome.lnk
2026-02-22 05:55 - 2026-02-22 05:55 - 000000000 _D C:\Users\peter\Downloads\fb
2026-02-22 05:42 - 2026-02-22 08:02 - 000000000
D C:\EEK
2026-02-22 05:42 - 2026-02-22 05:43 - 000000000 ____D C:\ProgramData\Emsisoft
2026-02-21 21:59 - 2026-02-22 01:57 - 000000000 ____D C:\Users\peter\AppData\Roaming\Temp
2026-02-21 21:59 - 2026-02-22 01:57 - 000000000 ____D C:\Users\peter\AppData\LocalLow\Temp
2026-02-21 05:19 - 2026-02-21 05:20 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2026-02-21 02:31 - 2026-02-21 02:31 - 000000705 __
C:\Users\Public\Desktop\TEKKEN 8.lnk
2026-02-21 00:13 - 2026-02-21 00:13 - 000004928 _ C:\WINDOWS\system32\Drivers\etc\hosts.rollback
2026-02-21 00:13 - 2017-09-29 05:44 - 000000824
C:\WINDOWS\system32\Drivers\etc\hosts.backup
2026-02-14 00:30 - 2026-02-14 00:30 - 000768770
C:\Users\peter\Downloads\yugioh5dssub.torrent
2026-01-29 01:01 - 2026-01-29 01:01 - 000000000 _D C:\Users\peter\AppData\Local\SparkingZERO
2026-01-28 01:41 - 2026-01-28 01:41 - 000000223
C:\Users\peter\Desktop\DRAGON BALL Sparking! ZERO.url

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-02-23 16:46 - 2018-09-09 20:35 - 000000000 _D C:\Users\peter\AppData\Local\D3DSCache
2026-02-23 16:42 - 2021-12-17 00:09 - 000000000
_D C:\WINDOWS\SystemTemp
2026-02-23 16:42 - 2018-09-09 14:24 - 000000000 SHD C:\Users\peter\IntelGraphicsProfiles
2026-02-23 05:37 - 2018-03-18 16:42 - 000000000 _D C:\ProgramData\NVIDIA
2026-02-23 05:32 - 2020-09-29 16:23 - 000840812
C:\WINDOWS\system32\PerfStringBackup.INI
2026-02-23 05:32 - 2019-12-07 01:13 - 000000000 _D C:\WINDOWS\INF
2026-02-23 05:30 - 2021-11-07 02:10 - 000000001
C:\WINDOWS\vgkbootstatus.dat
2026-02-22 17:36 - 2021-05-24 13:25 - 000003108 _ C:\WINDOWS\system32\Tasks\NahimicTask32
2026-02-22 17:36 - 2021-05-24 13:25 - 000003088
C:\WINDOWS\system32\Tasks\NahimicTask64
2026-02-22 17:36 - 2020-09-29 16:20 - 000000006
H C:\WINDOWS\Tasks\SA.DAT
2026-02-22 17:36 - 2020-09-29 16:11 - 000008192 ___SH C:\DumpStack.log.tmp
2026-02-22 17:36 - 2019-12-07 01:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-02-22 17:36 - 2018-03-18 16:40 - 000000000 ____D C:\Intel
2026-02-22 17:35 - 2019-12-07 01:03 - 001572864 __
C:\WINDOWS\system32\config\BBI
2026-02-22 17:33 - 2019-12-07 01:14 - 000000000 HD C:\WINDOWS\ELAMBKUP
2026-02-22 17:07 - 2022-06-20 16:26 - 000000000
_D C:\ProgramData\Common
2026-02-22 15:39 - 2020-08-17 01:53 - 000002445 _ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-02-22 15:39 - 2020-08-17 01:53 - 000002283
C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-02-22 07:10 - 2019-12-07 01:14 - 000000000
HD C:\Program Files\WindowsApps
2026-02-22 07:10 - 2019-12-07 01:14 - 000000000 _D C:\WINDOWS\AppReadiness
2026-02-22 06:59 - 2022-01-10 15:57 - 000000000
_D C:\Program Files\Cheat Engine 7.3
2026-02-22 06:18 - 2022-02-15 16:49 - 000000000 _D C:\Users\peter\AppData\Roaming\discord
2026-02-22 06:05 - 2024-07-04 03:32 - 000001553
C:\Users\peter\Desktop\Zenless Zone Zero.lnk
2026-02-22 06:05 - 2024-06-04 03:11 - 000001557 _ C:\Users\peter\Desktop\Genshin Impact.lnk
2026-02-22 06:05 - 2023-10-16 15:01 - 000001561
C:\Users\peter\Desktop\Honkai Star Rail.lnk
2026-02-22 06:05 - 2021-12-02 16:46 - 000001553
C:\Users\peter\Desktop\Honkai Impact 3rd.lnk
2026-02-22 06:05 - 2018-09-10 15:54 - 000000000 _D C:\Users\peter\AppData\Local\Steam
2026-02-22 06:05 - 2018-09-10 15:54 - 000000000
_D C:\Program Files (x86)\Steam
2026-02-22 06:00 - 2024-03-03 10:17 - 000000000 _D C:\Users\peter\AppData\Roaming\riot-client-ux
2026-02-22 05:59 - 2026-01-22 04:57 - 000000000
_D C:\Users\peter\AppData\Roaming\Riot Client
2026-02-22 05:59 - 2018-09-10 22:38 - 000000000 _D C:\ProgramData\Riot Games
2026-02-22 05:23 - 2022-02-15 16:49 - 000000000
_D C:\Users\peter\AppData\Local\Discord
2026-02-22 05:12 - 2018-09-09 14:24 - 000000000 _D C:\Users\peter\AppData\Local\Packages
2026-02-22 01:47 - 2025-01-28 21:31 - 000000000
_D C:\Program Files\Riot Vanguard
2026-02-22 01:41 - 2020-09-29 16:15 - 000000000 _D C:\Users\peter
2026-02-21 21:58 - 2018-09-09 14:25 - 000000000
_D C:\Users\peter\AppData\Local\CrashDumps
2026-02-21 21:45 - 2020-09-29 16:11 - 000000000 _D C:\WINDOWS\system32\SleepStudy
2026-02-21 05:49 - 2021-05-31 02:32 - 000000000
_D C:\Users\peter\AppData\Local\visualboyadvance-m
2026-02-21 02:14 - 2023-07-25 16:13 - 000000000 _D C:\Users\peter\AppData\Roaming\EasyAntiCheat
2026-02-20 21:52 - 2023-02-14 17:33 - 000000000
_D C:\ProgramData\EA Desktop
2026-02-20 21:47 - 2024-06-07 19:33 - 000000000 _D C:\Users\peter\AppData\Roaming\qBittorrent
2026-02-19 15:01 - 2018-09-09 14:25 - 000000000
RD C:\Users\peter\OneDrive
2026-02-18 23:32 - 2024-09-19 14:19 - 000000000 _D C:\ProgramData\Packer
2026-02-18 21:35 - 2018-09-10 15:48 - 000002254
C:\Users\peter\Desktop\Discord.lnk
2026-02-18 20:46 - 2018-09-09 17:07 - 000002308 _ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-02-18 20:46 - 2018-09-09 17:07 - 000002267
C:\Users\Public\Desktop\Google Chrome.lnk
2026-02-17 21:35 - 2025-01-28 21:33 - 134222904
C:\WINDOWS\392667600.dat
2026-02-17 02:24 - 2021-11-11 00:16 - 000000000 _D C:\Users\peter\AppData\Local\Blizzard Entertainment
2026-02-16 23:29 - 2023-03-15 19:00 - 000000000
_D C:\ProgramData\Nahimic
2026-02-16 15:19 - 2025-01-21 02:40 - 000003576 _ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3770983433-3408265141-2813071809-1001
2026-02-16 15:19 - 2021-12-12 23:33 - 000003592
C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3770983433-3408265141-2813071809-1001
2026-02-16 15:19 - 2020-09-29 16:20 - 000003356
C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3770983433-3408265141-2813071809-1001
2026-02-16 15:19 - 2020-09-29 16:15 - 000002390 _ C:\Users\peter\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-02-14 01:56 - 2021-11-11 00:18 - 000000000
__D C:\Users\peter\AppData\Local\Battle.net
2026-02-14 01:55 - 2022-03-20 12:32 - 000000000 _D C:\ProgramData\Battle.netcomponents
2026-02-12 15:19 - 2020-09-29 16:20 - 000003534
C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-02-12 15:19 - 2020-09-29 16:20 - 000003408
C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-02-11 07:59 - 2018-09-09 15:23 - 000000000 _D C:\WINDOWS\system32\MRT
2026-02-11 07:57 - 2018-09-09 15:22 - 221154392
_C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-02-10 15:16 - 2018-09-09 18:47 - 000000000 _D C:\WINDOWS\system32\Drivers\wd
2026-02-05 15:19 - 2018-03-18 16:46 - 000000000
_D C:\ProgramData\A-Volute
2026-02-02 15:17 - 2018-09-09 17:06 - 000000000 ____D C:\Program Files (x86)\Google

==================== Files in the root of some directories ========

2024-06-20 20:06 - 2024-12-14 23:28 - 000000000 _ () C:\ProgramData\ace-drc.dat
2020-08-15 01:31 - 2022-06-14 23:19 - 000007611
() C:\Users\peter\AppData\Local\Resmon.ResmonCfg
2024-10-14 03:12 - 2024-10-14 03:12 - 000000000
__ () C:\Users\peter\AppData\Local\settingData.dat

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

Edit

Pub: 24 Feb 2026 09:29 UTC

Views: 31