Windows Security Blocked An Attack, Now I'm Paranoid. Help Please. - Virus, Trojan, Spyware, and Malware Removal Help (2023)

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-05-2023 01

Ran by skim8 (administrator) on AWESOMOUS (Dell Inc. G7 7700) (12-05-2023 19:55:00)

Running from C:\Users\skim8\OneDrive\Desktop\FRST64.exe

Loaded Profiles: skim8

Platform: Microsoft Windows 11 Home Version 22H2 22621.1702 (X64) Language: English (United States)

Default browser: Chrome

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>

(A-Volute SAS -> A-Volute) C:\Users\skim8\AppData\Local\NhNotifSys\awsc\awscns.exe

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler.exe

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.133\BraveCrashHandler64.exe

(C:\Fraps\fraps.exe ->) (Beepa Pty Ltd -> Beepa P/L) C:\Fraps\fraps64.dat

(C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe ->) (Malwarebytes Inc -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae64.exe

(C:\Program Files (x86)\SonicsVPN\sonicsvpn.exe ->) () [File not signed] C:\Program Files (x86)\SonicsVPN\data\flutter_assets\ClashAssets\sonics.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRApp.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRAppBS.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRAgent.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRAppPB.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe

(C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRManager.exe

(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe

(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe

(C:\Program Files\Alienware\Alienware Command Center\AWCC.Service.exe ->) (Dell Inc -> Dell Technologies) C:\Program Files\Alienware\Alienware Command Center\AWCC.Background.Server.exe

(C:\Program Files\Alienware\Alienware Command Center\AWCC.Service.exe ->) (Dell Inc -> Dell Technologies) C:\Program Files\Alienware\Alienware Command Center\OCControlService\OCControl.Service.exe

(C:\Program Files\BiglyBT\BiglyBT.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe

(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe

(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(C:\Program Files\ugeeTablet\ugeeTabletDriver.exe ->) (Hanvon Ugee Technology Co., Ltd. -> Hanvon Ugee Technology Co.) C:\Program Files\ugeeTablet\ugeeTablet.exe

(cmd.exe ->) (Bigly Software -> ) C:\Users\skim8\AppData\Roaming\BiglyBT\plugins\aznettor\BiglyBTTor.exe

(CRYPTOCOMPANY OÜ -> CRYPTOCOMPANY OU) C:\Program Files (x86)\CryptoCompany\Update\1.3.105.33\CryptoTabCrashHandler.exe

(CRYPTOCOMPANY OÜ -> CRYPTOCOMPANY OU) C:\Program Files (x86)\CryptoCompany\Update\1.3.105.33\CryptoTabCrashHandler64.exe

(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe

(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe

(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe

(explorer.exe ->) (Azadi Network LLC -> ) C:\ProgramData\SharewareOnSale Notifier\SharewareOnSale Notifier.exe

(explorer.exe ->) (Bartels Media GmbH -> Bartels Media GmbH) C:\Program Files (x86)\PhraseExpress\phraseexpress.exe

(explorer.exe ->) (Bigly Software -> Bigly Software) C:\Program Files\BiglyBT\BiglyBT.exe

(explorer.exe ->) (Bright Data Ltd -> Bright Data Ltd.) C:\Program Files (x86)\EarnApp\earnapp.exe

(explorer.exe ->) (com.example) [File not signed] C:\Program Files (x86)\SonicsVPN\sonicsvpn.exe

(explorer.exe ->) (Hanvon Ugee Technology Co., Ltd. -> ) C:\Program Files\ugeeTablet\ugeeTabletDriver.exe

(explorer.exe ->) (Hewlett Packard -> HP Inc.) C:\Program Files\HP\HP ENVY 4520 series\Bin\ScanToPCActivationApp.exe

(explorer.exe ->) (IPRoyal Services FZE LLC -> IPRoyal) C:\Program Files\Pawns.app\Pawns.app.exe <5>

(explorer.exe ->) (Mega Limited -> Mega Limited) C:\Users\skim8\AppData\Local\MEGAsync\MEGAsync.exe

(explorer.exe ->) (Notion Labs, Inc. -> Notion Labs, Inc) C:\Users\skim8\AppData\Local\Programs\Notion\Notion.exe <9>

(explorer.exe ->) (Simple Coding Solutions LLC -> ) C:\Program Files (x86)\Peer2Profit\Peer2Profit.exe <2>

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.212\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.212\GoogleCrashHandler64.exe

(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <55>

(Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe

(Malwarebytes Inc -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Users\skim8\AppData\Local\MicrosoftAdvertisingEditor\app-11.30.15196\Microsoft.Advertising.Editor.exe

(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(OOO "XMAC" -> ) C:\Users\skim8\AppData\Roaming\Honeygain\Honeygain.exe

(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe

(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe

(services.exe ->) (Bright Data Ltd -> BrightData Ltd. (certified)) C:\Program Files (x86)\EarnApp\net_updater32.exe

(services.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\ENS\ensserver.exe

(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe

(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe

(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\Fusion\FusionService.exe

(services.exe ->) (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe

(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe

(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe

(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe

(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe

(services.exe ->) (Dell Inc -> Dell Technologies) C:\Program Files\Alienware\Alienware Command Center\AWCC.Service.exe

(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe

(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe

(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe

(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_1da48d5885266bb7\esif_uf.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_d6e4236a0f82e7b4\RstMwService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_454f22d7cdb5b4cd\IntelCpHDCPSvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_454f22d7cdb5b4cd\IntelCpHeciSvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d4564390a9b1e980\WMIRegistrationService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe

(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\SysWOW64\XtuService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe

(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe

(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe

(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe

(services.exe ->) (Keepsolid Inc. -> KeepSolid Inc.) C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe

(services.exe ->) (Malwarebytes Inc -> Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae-svc.exe

(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\NisSrv.exe

(services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe

(services.exe ->) (nordvpn s.a. -> TEFINCOM S.A.) C:\Program Files\NordVPN\nordvpn-service.exe

(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdmi.inf_amd64_3d50ed78ef5da3d8\Display.NvContainer\NVDisplay.Container.exe <2>

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_44e42040d5543576\RtkAudUService64.exe <3>

(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe

(services.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe

(services.exe ->) (Splashtop Inc. -> Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe

(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe

(sihost.exe ->) (F005DA31-7CE1-4D3E-ABEE-08A4AFF4F592 -> Dell Technologies) C:\Program Files\WindowsApps\DellInc.AlienwareCommandCenter_5.5.46.0_x64__htrsf667h5kn2\GameLibrary\GameLibraryAppService.exe

(Slack Technologies, Inc. -> Slack Technologies Inc.) C:\Users\skim8\AppData\Local\slack\app-4.32.122\slack.exe <5>

(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2317.9.0_x64__cv1g1gvanyjgm\WhatsApp.exe

(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeNotificationClient_2.0.1.8_x86__enpm4xejd91yc\AdobeNotificationClient.exe

(svchost.exe ->) (Adobe Systems Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe

(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicSvc64.exe

(svchost.exe ->) (Beepa Pty Ltd -> Beepa P/L) C:\Fraps\fraps.exe

(svchost.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed] C:\Program Files (x86)\EaseUS\EaseUS Partition Master\ToolKits\EaseUS CleanGenius\bin\CleanGenius.exe

(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt\IGCC.exe

(svchost.exe ->) (F005DA31-7CE1-4D3E-ABEE-08A4AFF4F592 -> Dell Technologies) C:\Program Files\WindowsApps\DellInc.AlienwareCommandCenter_5.5.46.0_x64__htrsf667h5kn2\AWCC.exe

(svchost.exe ->) (GRETECH CORPORATION -> GOM & Company) C:\Program Files (x86)\GOM\GOMPlayer\GOM.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.14326.21386.0_x64__8wekyb3d8bbwe\onenoteim.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25305.9000.0_x64__8wekyb3d8bbwe\SecHealthUI.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21422.0_x64__8wekyb3d8bbwe\HxOutlook.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21422.0_x64__8wekyb3d8bbwe\HxTsr.exe

(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.11600.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <5>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SecurityHealth\1.0.2303.28002-0\SecurityHealthHost.exe <2>

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_44e42040d5543576\RtkAudUService64.exe [1591680 2022-09-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM\...\Run: [PenTablet] => C:\Program Files\ugeeTablet\ugeeTabletDriver.exe [206968 2023-04-11] (Hanvon Ugee Technology Co., Ltd. -> )

HKLM-x32\...\Run: [CryptoTab Browser] => C:\Program Files\CryptoTab Browser\Application\browser.exe [2492928 2022-08-03] (CRYPTOCOMPANY OÜ -> The Chromium and CryptoTab Browser Authors)

HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [781552 2022-03-26] (Adobe Inc. -> Adobe Inc.)

HKLM-x32\...\Run: [Malwarebytes Anti-Exploit] => C:\Program Files (x86)\Malwarebytes Anti-Exploit\mbae.exe [2478800 2021-07-28] (Malwarebytes Inc -> Malwarebytes Corporation)

HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [291080 2022-12-14] (Intel Corporation -> Intel)

HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [SharewareOnSale Notifier] => C:\ProgramData\SharewareOnSale Notifier\SharewareOnSale Notifier.exe [1008816 2021-04-16] (Azadi Network LLC -> ) <==== ATTENTION

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [KakaoTalk] => C:\Program Files (x86)\Kakao\KakaoTalk\KakaoTalk.exe [23144032 2022-01-13] (Kakao corp. -> Kakao Corp.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4268456 2022-01-16] (Valve Corp. -> Valve Corporation)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [7 Taskbar Tweaker] => C:\Users\skim8\AppData\Local\Programs\7+ Taskbar Tweaker\7+ Taskbar Tweaker.exe [491120 2021-11-30] (Michael Maltsev -> RaMMicHaeL)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [BlueJeans.Detector] => C:\Users\skim8\AppData\Local\BlueJeans\BlueJeans.Detector.exe [16376 2021-07-07] (Blue Jeans Network, Inc. -> BlueJeans)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [Samsung DeX] => C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe [10484392 2021-07-01] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [Microsoft.Advertising.Editor] => C:\Users\skim8\AppData\Local\MicrosoftAdvertisingEditor\app-11.30.15196\Microsoft.Advertising.Editor.exe [6447584 2023-05-12] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [HP ENVY 4520 series (NET)] => C:\Program Files\HP\HP ENVY 4520 series\Bin\ScanToPCActivationApp.exe [3770504 2017-04-06] (Hewlett Packard -> HP Inc.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [253816 2022-08-03] (nordvpn s.a. -> TEFINCOM S.A.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7592400 2023-05-04] (Adobe Inc. -> Adobe Systems Incorporated)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [EarnApp] => C:\Program Files (x86)\EarnApp\earnapp.exe [15470664 2023-05-08] (Bright Data Ltd -> Bright Data Ltd.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [Google Update] => C:\Users\skim8\AppData\Local\Google\Update\1.3.36.212\GoogleUpdateCore.exe [223000 2023-04-24] (Google LLC -> Google LLC)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [electron.app.Pawns.app] => C:\Program Files\Pawns.app\Pawns.app.exe [149032536 2023-04-24] (IPRoyal Services FZE LLC -> IPRoyal)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [Peer2Profit] => C:\Program Files (x86)\Peer2Profit\Peer2Profit.exe [2302840 2022-10-09] (Simple Coding Solutions LLC -> )

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [TeraBoxWeb] => C:\Users\skim8\AppData\Roaming\TeraBox\TeraBoxWebService.exe [1139056 2023-02-22] (FLEXTECH INC. -> Flextech Inc.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [electron.app.Poised] => C:\Users\skim8\AppData\Local\Programs\poise\Poised.exe (No File)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1001\...\Run: [com.squirrel.slack.slack] => C:\Users\skim8\AppData\Local\slack\slack.exe [310584 2023-05-10] (Slack Technologies, Inc. -> Slack Technologies Inc.)

HKU\S-1-5-21-2649961789-1134712864-1179498568-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [61440 2022-05-07] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Print\Monitors\HP D711 Status Monitor: C:\Windows\system32\hpinkstsD711LM.dll [393352 2017-03-26] (Hewlett Packard -> HP Inc.)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}] -> C:\Program Files\CryptoTab Browser\Application\103.0.5060.134\Installer\chrmstp.exe [2022-08-22] (CRYPTOCOMPANY OÜ -> The Chromium and CryptoTab Browser Authors)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\113.0.5672.93\Installer\chrmstp.exe [2023-05-11] (Google LLC -> Google LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\113.1.51.114\Installer\chrmstp.exe [2023-05-09] (Brave Software, Inc. -> Brave Software, Inc.)

HKLM\Software\...\Authentication\Credential Providers: [{97E1814E-5601-41c8-9971-10C319EF61CC}] -> C:\WINDOWS\system32\SRCredentialProvider.dll [2022-01-11] (Splashtop Inc. -> Splashtop Inc.)

HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PhraseExpress.lnk [2022-05-31]

ShortcutTarget: PhraseExpress.lnk -> C:\Program Files (x86)\PhraseExpress\phraseexpress.exe (Bartels Media GmbH -> Bartels Media GmbH)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RescueTime.lnk [2021-06-30]

ShortcutTarget: RescueTime.lnk -> C:\Program Files (x86)\RescueTime\RescueTime.exe (RescueTime, Inc.) [File not signed]

Startup: C:\Users\skim8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HoneygainUpdater.lnk [2021-06-04]

ShortcutTarget: HoneygainUpdater.lnk -> C:\Users\skim8\AppData\Roaming\Honeygain\HoneygainUpdater.exe (OOO "XMAC" -> Honeygain)

Startup: C:\Users\skim8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Luminar AI.lnk [2022-12-14]

ShortcutTarget: Luminar AI.lnk -> C:\Program Files\Skylum\Luminar AI\Luminar AI.exe (Skylum Software USA, Inc. -> Skylum)

Startup: C:\Users\skim8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2022-03-05]

ShortcutTarget: MEGAsync.lnk -> C:\Users\skim8\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0240CBDC-A455-437F-8824-56943558F3E0} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-2649961789-1134712864-1179498568-1001 => C:\Users\skim8\AppData\Local\MEGAsync\MEGAupdater.exe [2531504 2023-04-12] (Mega Limited -> )

Task: {0481C1B6-A3DF-4E44-8212-BDEEDF6AC03B} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [738144 2023-04-07] (Dell Inc -> Dell Inc.)

Task: {12A44B25-068D-4792-9EDD-05B04686C799} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2649961789-1134712864-1179498568-1001UA{D758DFCD-F438-4F17-8239-2E3F26BF00E9} => C:\Users\skim8\AppData\Local\Google\Update\GoogleUpdate.exe [171480 2022-11-08] (Google LLC -> Google LLC)

Task: {1B4E43F0-5A86-4C60-957C-111F7C9B1D01} - System32\Tasks\Driver Easy Scheduled Scan => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe [3978504 2021-07-29] (Easeware Technology Limited -> Easeware)

Task: {1CABABD5-FE8A-4D6C-BAA6-077E1766C5C1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe/RunOnAC ReadyToReboot

Task: {2DCCAFB4-2494-4DB2-88A2-726C15F5D3DD} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-04-16] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {2EC7CBD3-2E50-4819-96D8-F40851E4D85F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe/RunOnBattery ReadyToReboot

Task: {3EC45263-7404-4A6E-9DAC-467B68D62610} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002480 2023-02-21] (Intel Corporation -> Intel Corporation)

Task: {4282A4B3-D554-405C-83B9-9FBE4546034C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {487544A3-485F-4B86-BB4F-A6A03977B8C1} - System32\Tasks\GoogleUpdateTaskMachineUA{12F1622C-6D4F-43D4-BDB2-62B15B76711D} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-10] (Google LLC -> Google LLC)

Task: {492B380F-236D-4C3C-8187-1A5E2641CAC6} - System32\Tasks\NahimicSvc64Run => C:\WINDOWS\system32\NahimicSvc64.exe [1098400 2022-07-15] (A-Volute SAS -> Nahimic)

Task: {4C92CD4B-065D-4165-BF80-03E805794377} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-01-27] (Nvidia Corporation -> NVIDIA Corporation)

Task: {4E2113E1-2824-45FB-B881-AAC0A4AAFB3E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {573F886B-5684-434D-BB0B-59B51CC36169} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {584D96EF-F7BE-46E6-BB41-D88108B0D73E} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2022-01-31] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)

Task: {5885687A-60BD-490C-B4F3-27FC0D7CF187} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe/s

Task: {58C68D94-3DEE-4050-B6E1-457186C315B6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564152 2023-04-03] (Adobe Inc. -> Adobe Inc.)

Task: {5A303D5E-2D99-4125-9B5E-2BB021222826} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {5A87B6F6-B5E6-46DF-865A-5BD6CADBECB7} - System32\Tasks\AWCC\Update => C:\Program Files (x86)\InstallShield Installation Information\{D2DA930B-CB5D-4DD6-BF62-BE6C310A353D}\Update\IMSilentUpdate.exe [19888 2023-04-07] (Dell Inc -> )

Task: {5F04FAAB-E7B3-40AD-B381-1978C2548C14} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26513320 2023-04-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {63FE0729-0051-4552-ACE4-E7F4CD14AFD8} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-04-16] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {6524F69C-F7FD-4CC2-8074-57767869BDB9} - System32\Tasks\GoogleUpdateTaskMachineCore{5E35D070-8178-45E7-91F9-E57EF3713D58} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-10] (Google LLC -> Google LLC)

Task: {691DA003-F152-4999-8DDD-1366DE8FC3EA} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {6D25EEAC-6531-4906-BBA8-488827777169} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}

Task: {826CBCAE-1D72-4A3C-B422-69552215861B} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [190816 2023-04-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {85DB5ACE-D15D-4CC0-B3C7-BC20A038695F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {8D9D9535-AD44-4A3E-B126-05F754FD4E8A} - System32\Tasks\CryptoTabUpdateTaskMachineUA => C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe [181288 2021-04-16] (CRYPTOCOMPANY OÜ -> CRYPTOCOMPANY OU)

Task: {9565510C-20DD-4F4F-BA47-1EE7A012FD9E} - System32\Tasks\CleanGenius => C:\Program Files (x86)\EaseUS\EaseUS Partition Master\ToolKits\EaseUS CleanGenius\bin\CleanGenius.exe [610440 2022-03-24] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [File not signed]

Task: {98318420-16CB-4BF9-A19A-63D10A226452} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-s.kim89@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

Task: {9B87463B-0469-4E9C-B09D-494C5914A3CE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26513320 2023-04-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {9FBE5D2E-F526-47B5-9309-76F6A6FA9EB1} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\WINDOWS\System32\Wscript.exe [200704 2023-05-09] (Microsoft Windows -> Microsoft Corporation) -> //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"

Task: {A5D78222-5B89-44B4-9CDC-E19EF5F076B8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2304.8-0\MpCmdRun.exe [1650024 2023-05-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {ADF5D6B3-DE0E-48B9-84E1-EEDED8F85ADE} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel® Update Manager\bin\iumsvc.exe--automatic

Task: {AEF3DC72-C98A-4F38-B688-D988818B5836} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2649961789-1134712864-1179498568-1001Core{7DBFC47E-4CC3-41DB-862B-995810DDE9F9} => C:\Users\skim8\AppData\Local\Google\Update\GoogleUpdate.exe [171480 2022-11-08] (Google LLC -> Google LLC)

Task: {AF659593-AC00-4495-BF7B-E7FBC13D9A7A} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {AFF7BA97-52CA-4120-8DFE-22905C1F9F35} - System32\Tasks\NahimicTask32 => C:\WINDOWS\system32\..\SysWOW64\NahimicSvc32.exe [837280 ] (A-Volute SAS -> Nahimic)

Task: {B439E8DD-E509-45DF-866C-23BE5450E609} - System32\Tasks\FRAPS => C:\Fraps\fraps.exe [2652760 2019-08-30] (Beepa Pty Ltd -> Beepa P/L)

Task: {BDABDBA4-1BC2-4A27-826E-53323ADC6797} - System32\Tasks\NahimicTask64 => C:\WINDOWS\system32\.\NahimicSvc64.exe [1098400 ] (A-Volute SAS -> Nahimic)

Task: {BE570586-0121-4CC6-9B35-673DA0B9D9F8} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {CAAAEC95-7C4E-4F3A-B986-C9AC6545FAEA} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => C:\WINDOWS\system32\MusNotification.exeLogonUpdateResults

Task: {CF33746A-947E-4359-9948-ED76B9A158E8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {D07EAE0C-632B-4D56-9A35-728571714CB4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [157664 2023-04-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {D4D2C5D3-297B-4336-9BD6-1131BC38C67D} - System32\Tasks\NahimicSvc32Run => C:\WINDOWS\SysWOW64\NahimicSvc32.exe [837280 2022-07-15] (A-Volute SAS -> Nahimic)

Task: {DE5C2800-CE86-4571-AD8B-C916F80492A7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-15] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {DF5E8D33-D94A-4E42-96EF-6A2134F806D6} - System32\Tasks\CryptoTabUpdateTaskMachineCore => C:\Program Files (x86)\CryptoCompany\Update\CryptoTabUpdate.exe [181288 2021-04-16] (CRYPTOCOMPANY OÜ -> CRYPTOCOMPANY OU)

Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (No File)

Task: {EE1135F8-814A-4BEC-B77C-4A3A7F1C7F19} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [157664 2023-04-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {EE29AEE6-FA62-4376-B9D8-49BB82D48470} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {F28F1637-2026-48D7-87B4-05E964118DDA} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [5002480 2023-02-21] (Intel Corporation -> Intel Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Task: C:\WINDOWS\Tasks\Driver Easy Scheduled Scan.job => C:\Program Files\Easeware\DriverEasy\DriverEasy.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-2649961789-1134712864-1179498568-1001] => Proxy is enabled.

ProxyServer: [S-1-5-21-2649961789-1134712864-1179498568-1001] => 127.0.0.1:7890

Tcpip\Parameters: [DhcpNameServer] 64.71.255.204 64.71.255.198

Tcpip\..\Interfaces\{48ae4133-2012-491f-bf0f-e0b5afd0e991}: [NameServer] 208.67.222.222,208.67.220.220

Tcpip\..\Interfaces\{48ae4133-2012-491f-bf0f-e0b5afd0e991}: [DhcpNameServer] 64.71.255.204 64.71.255.198

Tcpip\..\Interfaces\{ed60931c-1a22-4741-b30f-0e9c4075777b}: [DhcpNameServer] 172.22.255.204 172.22.255.206

ManualProxies: 1127.0.0.1:7890 <==== ATTENTION

Edge:

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default [2023-05-11]

Edge HomePage: Default -> hxxp://ads.microsoft.com/

Edge Session Restore: Default -> is enabled.

Edge Extension: (Loom for Edge) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\abeameknhmpmfegfbeioekonmhbmbpai [2022-06-22]

Edge Extension: (PayPal Honey: Automatic Coupons & Cash Back) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\amnbcmdbanbkjhnfoeceemmmdiepnbpp [2023-04-06]

Edge Extension: (LastPass: Free Password Manager) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bbcinlkgjjkejfdpemiealijmmooekmp [2023-04-29]

Edge Extension: (Social Blade) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2022-09-07] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION

Edge Extension: (Grammarly: Grammar Checker and Writing App) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cnlefmmeadmemmdciolhbnfeacpdfbkd [2023-04-29]

Edge Extension: (Email Exporter) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ecnfbegpagpeocjegnecbifjepfcpnhe [2023-05-05]

Edge Extension: (MetaMask) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ejbalbakoplchlghecdalmeeeajnimhm [2023-04-18]

Edge Extension: (Meta Pixel Helper) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2023-03-20]

Edge Extension: (Keywords Everywhere - Keyword Tool) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hbapdpeemoojbophdfndmlgdhppljgmp [2023-05-09]

Edge Extension: (Rakuten Button Canada) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\idpbkophnbfijcnlffdmmppgnncgappc [2022-10-28]

Edge Extension: (Malwarebytes Browser Guard) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-05-05]

Edge Extension: (WhatFont) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2022-06-22]

Edge Extension: (SimilarWeb - Traffic Rank & Website Analysis) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\lgecefcjlholabgliikbfdifhdfbfnma [2022-06-22]

Edge Extension: (Cookie-Editor) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\neaplmfkghagebokkhpjpoebhdledlfi [2023-03-17]

Edge Extension: (UET Tag Helper (by Microsoft Advertising)) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nmcihgehpmokipeigjpeckphhdejjpbf [2021-06-16]

Edge Extension: (uBlock Origin) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2023-04-29]

Edge Extension: (ColorPick Eyedropper) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ohcpnigalekghcmgcdcenkpelffpdolg [2022-08-27]

Edge Extension: (vidIQ Vision for YouTube) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pachckjkecffpdphbpmfolblodfkgbhl [2023-04-29]

Edge Extension: (Sort for TikTok) - C:\Users\skim8\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\piiiffonpmeolocfghlpeolmdabhiemi [2022-06-22]

Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:

========

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-01] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)

FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-05-04] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2022-03-26] (Adobe Inc. -> Adobe Systems)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-11-01] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.CryptoTab.com/CryptoTab Update;version=3 -> C:\Program Files (x86)\CryptoCompany\Update\1.3.105.33\npCryptoTabUpdate3.dll [2021-08-08] (CRYPTOCOMPANY OÜ -> CRYPTOCOMPANY OU)

FF Plugin-x32: @tools.CryptoTab.com/CryptoTab Update;version=9 -> C:\Program Files (x86)\CryptoCompany\Update\1.3.105.33\npCryptoTabUpdate3.dll [2021-08-08] (CRYPTOCOMPANY OÜ -> CRYPTOCOMPANY OU)

FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2022-03-26] (Adobe Inc. -> Adobe Systems)

Chrome:

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default [2023-05-12]

CHR Notifications: Default -> hxxps://adbullion.everflowclient.io; hxxps://admin.plugrush.com; hxxps://app.airtm.com; hxxps://app.clickup.com; hxxps://app.impact.com; hxxps://app.marketplan.io; hxxps://app.scalenut.com; hxxps://app.slack.com; hxxps://business.facebook.com; hxxps://calendar.google.com; hxxps://crm.zoho.com; hxxps://dashboard.godaddy.com; hxxps://dcc.godaddy.com; hxxps://freesoff.com; hxxps://funkywithans.dashclicks.com; hxxps://giveaways.joinsurf.com; hxxps://go.adbullion.com; hxxps://gregoryfavorite.space; hxxps://in.godaddy.com; hxxps://mail.proton.me; hxxps://mail.protonmail.com; hxxps://mail.zoho.com; hxxps://meet.google.com; hxxps://outlook.office.com; hxxps://portal.smartadv.com; hxxps://sync.beatoven.ai; hxxps://trading.questrade.com; hxxps://www.facebook.com; hxxps://www.messenger.com; hxxps://www.netflix.com; hxxps://www.plugrush.com; hxxps://www.tiktok.com; hxxps://www.youtube.com; hxxps://www36.orvilleandrea.pro

CHR Session Restore: Default -> is enabled.

CHR Extension: (Superpower for ChatGPT) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\amhmeenmapldpjdedekalnfifgnpfnkc [2023-05-09]

CHR Extension: (PayPal Honey: Automatic Coupons & Cash Back) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2023-05-12]

CHR Extension: (Social Blade) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2022-09-09] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION

CHR Extension: (OneTab) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2023-04-15]

CHR Extension: (uBlock Origin) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2023-04-29]

CHR Extension: (Tampermonkey) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2022-11-30]

CHR Extension: (Meta Pixel Helper) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2023-03-21]

CHR Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2023-04-01]

CHR Extension: (Google Docs Offline) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-24]

CHR Extension: (Save to Google Drive) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2023-02-13]

CHR Extension: (Keywords Everywhere - Keyword Tool) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbapdpeemoojbophdfndmlgdhppljgmp [2023-05-09]

CHR Extension: (LastPass: Free Password Manager) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2023-05-05]

CHR Extension: (Cookie-Editor) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlkenndednhfkekhgcdicdfddnkalmdm [2023-03-13]

CHR Extension: (Similarweb - Traffic Rank & Website Analysis) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoklmmgfnpapgjgcpechhaamimifchmp [2023-04-29]

CHR Extension: (Rakuten Button Canada) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\idpbkophnbfijcnlffdmmppgnncgappc [2022-10-28]

CHR Extension: (Discussions button for Google Search™) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\igjiggoeheaondbmhmilpmbdkpgcjmdn [2023-04-24]

CHR Extension: (Malwarebytes Browser Guard) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-05-05]

CHR Extension: (WhatFont) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2022-02-16]

CHR Extension: (Tag Assistant Companion) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmekfmbnaedfebfnmakmokmlfpblbfdm [2023-04-29]

CHR Extension: (Google Analytics Debugger) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnkmfdileelhofjcijamephohjechhna [2023-03-14]

CHR Extension: (Grammarly: Grammar Checker and Writing App) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2023-05-12]

CHR Extension: (Tag Assistant Legacy (by Google)) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2022-12-25]

CHR Extension: (Loom – Screen Recorder & Screen Capture) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2023-05-05]

CHR Extension: (Tag Assistant for Conversions Beta) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\llpfnmnallbompdmklfkcibfpcfpncdd [2022-12-25]

CHR Extension: (MetaMask) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2023-05-05]

CHR Extension: (Chrome Web Store Payments) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-10]

CHR Extension: (UProc for LinkedIn) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\odfhegllgcagejmjbanonlofmllejfea [2023-05-02]

CHR Extension: (ColorPick Eyedropper) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohcpnigalekghcmgcdcenkpelffpdolg [2022-08-27]

CHR Extension: (Sort for TikTok) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\piiiffonpmeolocfghlpeolmdabhiemi [2022-02-24]

CHR Extension: (Podawaa - Get more Engagement on LinkedIn) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppgndohgacfggdpbcdlgibdkdknimfmn [2023-05-03]

CHR Extension: (Quick Proposal Generator) - C:\Users\skim8\OneDrive\Desktop\Quick Proposal Generator [2023-04-25]

CHR Profile: C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-11]

CHR Profile: C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Profile 1 [2023-02-12]

CHR Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2023-01-28]

CHR Extension: (Google Docs Offline) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-01-28]

CHR Extension: (Save to Google Drive) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gmbmikajjgmnabiglmofipeabaddhgne [2023-01-28]

CHR Extension: (Malwarebytes Browser Guard) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-02-12]

CHR Extension: (Chrome Web Store Payments) - C:\Users\skim8\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-01-28]

CHR Profile: C:\Users\skim8\AppData\Local\Google\Chrome\User Data\System Profile [2023-05-12]

CHR HKLM-x32\...\Chrome\Extension: [fjoaledfpmneenckfbpdfhkmimnjocfa]

CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Brave:

=======

BRA DefaultProfile: Default

BRA Profile: C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-03-19]

BRA Notifications: Default -> hxxps://app.impact.com; hxxps://business.facebook.com; hxxps://mail.protonmail.com; hxxps://meet.google.com; hxxps://voice.google.com; hxxps://www.facebook.com; hxxps://www.instagram.com; hxxps://www.netflix.com; hxxps://www.youtube.com

BRA Extension: (Google Translate) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-11]

BRA Extension: (Redirect Path) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aomidfkchockcldhbkggjokdkkebmdll [2021-06-03]

BRA Extension: (ColorZilla) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2021-07-12]

BRA Extension: (Mobile View Switcher) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bmhfelbhbkeoldaiphchjibggnoodpcj [2023-03-14]

BRA Extension: (PayPal Honey: Automatic Coupons & Cash Back) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2023-03-17]

BRA Extension: (Social Blade) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2022-09-09] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ATTENTION

BRA Extension: (FUNNELBOT CF Page Copier) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cpiagapooikhbopmlcjnpphhmjiegcpi [2023-03-14]

BRA Extension: (User-Agent Switcher for Chrome) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\djflhoibgkdhkhhcedjiklpkjnoahfmg [2021-11-21]

BRA Extension: (Email Exporter) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ecnfbegpagpeocjegnecbifjepfcpnhe [2022-09-02]

BRA Extension: (L.O.C) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eojdckfcadamkapabechhbnkleligand [2023-03-14]

BRA Extension: (Simple Social Tools Audience Toolkit (Legacy)) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\epemanhmbacheecolglokjjbanjnmcae [2022-01-26]

BRA Extension: (Meta Pixel Helper) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2023-03-14]

BRA Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2023-03-17]

BRA Extension: (PinDown) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\flieckppkcgagklbnnhnkkeladdghogp [2021-10-12]

BRA Extension: (Tailwind – AI marketing content assistant) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gkbhgdhhefdphpikedbinecandoigdel [2023-03-17]

BRA Extension: (Keywords Everywhere - Keyword Tool) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\hbapdpeemoojbophdfndmlgdhppljgmp [2023-03-14]

BRA Extension: (LastPass: Free Password Manager) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2023-03-14]

BRA Extension: (Similarweb - Traffic Rank & Website Analysis) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\hoklmmgfnpapgjgcpechhaamimifchmp [2023-03-14]

BRA Extension: (Rakuten Button Canada) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\idpbkophnbfijcnlffdmmppgnncgappc [2023-03-14]

BRA Extension: (Malwarebytes Browser Guard) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-03-14]

BRA Extension: (WhatFont) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2021-10-15]

BRA Extension: (Grammarly: Grammar Checker and Writing App) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2023-03-16]

BRA Extension: (Loom – Screen Recorder & Screen Capture) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\liecbddmkiiihnedobmlmillhodjkdmb [2023-03-14]

BRA Extension: (Tag Assistant for Conversions Beta) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\llpfnmnallbompdmklfkcibfpcfpncdd [2023-03-14]

BRA Extension: (TubeBuddy) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\mhkhmbddkmdggbhaaaodilponhnccicb [2023-03-17]

BRA Extension: (Video Speed Controller) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nffaoalbilbmmfgbnbgppjihopabppdk [2023-03-14]

BRA Extension: (MetaMask) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2022-10-06]

BRA Extension: (NoCoding Data Scraper - Easy Web Scraping) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ojaffphbffmdaicdkahnmihipclmepok [2023-03-18]

BRA Extension: (vidIQ Vision for YouTube) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\pachckjkecffpdphbpmfolblodfkgbhl [2023-03-14]

BRA Extension: (Sort for TikTok) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\piiiffonpmeolocfghlpeolmdabhiemi [2022-02-22]

BRA Extension: (Lead Grabber) - C:\Users\skim8\OneDrive\Documents\2022 Business Breakthrough\January 2022\Courses\Extensions\Lead Grabber [2022-02-07]

BRA Profile: C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Guest Profile [2023-03-19]

BRA Profile: C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1 [2022-09-20]

BRA Extension: (Malwarebytes Browser Guard) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-09-02]

BRA Profile: C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2023-03-19]

BRA Extension: (Brave Local Data Files Updater) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-03-19]

BRA Extension: (Brave NTP background images) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-09-03]

BRA Extension: (Wallet Data Files Updater) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-03-17]

BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-11-04]

BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2022-03-12]

BRA Extension: (Brave Ads Resources) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\emgmepnebbddgnkhfmhdhmjifkglkamo [2021-05-24]

BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-03-14]

BRA Extension: (Brave Ads Resources) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\gpaihfendegmjoffnpngjjhbipbioknd [2021-05-24]

BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\skim8\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-03-18]

Windows Security Blocked An Attack, Now I'm Paranoid. Help Please. - Virus, Trojan, Spyware, and Malware Removal Help (2023)

References