Fixlist - Similar_Gap7475 ; rifteyy.org

How to use this fixlist
1. Click Download as fixlist.txt (or copy and save manually as fixlist.txt - not fixlist.txt.txt)
2. Place the file in the same folder as FRST.exe / FRST64.exe
3. Save all open work and close all applications - FRST may close running programs and unsaved work will be lost
4. Run FRST as Administrator and click Fix
5. Post the content of Fixlog.txt back in the thread

Warning: Only run a fixlist prepared specifically for your system. Running someone else's fixlist will not work effectively even if you have similiar infection symptoms and may cause removal of legitimate entries or even system damage.

Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:

Task: {D1A716ED-87B9-4170-8B61-F76A56A53D90} - System32\Tasks\Acio{8506-8F2D-AD5D-DF70-8D33FD4C09A2265} => C:\Windows\system32\mshta.exe [36864 2025-04-25] (Microsoft Windows -> Microsoft Corporation) -> hxxps://acio-patron.cc <==== ATTENTION
Task: {F845E4EC-E583-46F5-99AE-45AA0E3DC428} - System32\Tasks\Acio{CF24-5BDE-A910-74B9-35AB5007044ACEE} => C:\Windows\system32\mshta.exe [36864 2025-04-25] (Microsoft Windows -> Microsoft Corporation) -> hxxps://acio-patron.cc <==== ATTENTION
Task: {5D27E3BA-DA46-43C6-BB70-DCF8E1273AE4} - System32\Tasks\Acio{E2AC-97B8-EB11-A8BF-E8BE6B8F051D480} => C:\Windows\system32\mshta.exe [36864 2025-04-25] (Microsoft Windows -> Microsoft Corporation) -> hxxps://acio-patron.cc <==== ATTENTION
Task: {D84121E5-6989-4F64-8C33-C932AC49B35E} - System32\Tasks\NvidiaSelfUpdate{6723-37C7-2598-A5FE-D128885916F364E} => C:\Windows\system32\mshta.exe [36864 2025-04-25] (Microsoft Windows -> Microsoft Corporation) -> hxxps://forest-entity.cc/foundation.gf72jZics <==== ATTENTION
Task: {A19EC237-B87C-4234-9F82-F9C84EAAC106} - System32\Tasks\NvidiaSelfUpdate{DDDB-C9CF-09E0-0E2B-07DC9CAAF88A5BF} => C:\Windows\system32\mshta.exe [36864 2025-04-25] (Microsoft Windows -> Microsoft Corporation) -> hxxps://forest-entity.cc/foundation.T9aZjJCRC <==== ATTENTION
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Pas de fichier)
Task: {0A8B8A29-9A42-4938-AABE-A82234A1B209} - System32\Tasks\ClearRAM => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [454656 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> -File "C:\Users\haele\AppData\Local\Temp\ClearRAM.ps1" <==== ATTENTION
Task: {AE6004A6-4E93-42DF-BFA7-6FB89ECB3A21} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe  (Pas de fichier)

C:\Users\haele\AppData\Local\Packages\Extensions

U3 aswbdisk; pas de ImagePath
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]

2026-03-02 21:09 - 2026-03-02 21:09 - 000077492 _____ C:\Users\haele\AppData\LocalLow\b69dfea3c98a3fe3e834331011fb67f59bd5dd0178fd077ca50eef1f38b37341
2026-03-02 21:09 - 2026-03-02 21:09 - 000063801 _____ C:\Users\haele\AppData\LocalLow\80ff1b78cbcead8f767cdd4533733da12372ca6ec40f570ce214c359b7b9173f
2026-03-02 21:09 - 2026-03-02 21:09 - 000000130 _____ C:\Users\haele\AppData\LocalLow\17abda28baeb94a3adb1d3b240e9b615ebe1dcc933507758b995814c7813160a
2026-03-02 21:09 - 2026-03-02 21:09 - 000000026 _____ C:\Users\haele\AppData\LocalLow\401822e0bd4a0d676e067d94705b9357a9c758bb7e9efb21cbb7b30b35433d9a
2026-02-12 13:10 - 2026-02-05 12:50 - 000000130 _____ C:\Users\haele\AppData\LocalLow\000d4397f2b895b03787294895c797c35f8d43660750f0943fd5517ad088688c
2026-02-11 21:30 - 2026-02-05 12:49 - 000000130 _____ C:\Users\haele\AppData\LocalLow\b450f380d89e182607c6829dfaecf52c3ab74263e0c3ef3bfeb480a0e7344671
2026-02-11 21:30 - 2026-02-05 10:42 - 000000130 _____ C:\Users\haele\AppData\LocalLow\06789dcbbc82e9567182dd11d00e92f503710f7e3ebe31d32210321fd73cb603
2026-02-15 13:41 - 2026-02-05 19:07 - 000000130 _____ C:\Users\haele\AppData\LocalLow\c012fc02525d8336528aa01da2fbe115b52249b97fa116c4c38b303cca8849a9
2026-02-21 12:53 - 2026-02-06 17:14 - 000015795 _____ C:\Users\haele\AppData\LocalLow\8e94316b835acd8339dfe721842bf78612c819216a7e9f9d1a0cc35a25e40f14
2026-03-09 00:15 - 2026-02-06 17:14 - 000000130 _____ C:\Users\haele\AppData\LocalLow\cc4bf64982c1fd07e06b53b69b8bd6056a016cb358a4c0907257e366697872da
2026-02-09 21:59 - 2026-02-27 21:18 - 000000130 _____ C:\Users\haele\AppData\LocalLow\ba0ab7e51b7a583caadfd9503895ea908463f55cbaa2d90a4946f536f07c2738
2026-02-09 21:59 - 2026-02-25 13:32 - 000133062 _____ C:\Users\haele\AppData\LocalLow\a73694e02294ece460be335ec008515e33d657e8699e8cb746b49d1bef1f8839
2026-02-09 18:43 - 2026-02-09 22:15 - 000014072 _____ C:\Users\haele\AppData\LocalLow\a226802c3157e3bf648a541324c350f4677ce25407d1c9f79791bd7628c52518
2026-02-09 18:43 - 2026-02-09 18:43 - 000000026 _____ C:\Users\haele\AppData\LocalLow\5b4efd1eeb8854980953928a644030799dde505a954f852564cddb936958454e
2026-02-08 14:06 - 2026-02-08 14:06 - 000002264 _____ C:\Users\haele\AppData\LocalLow\b44ee23ae652a8481d7b53c99a8c033cb0d47c7f544694fa45308721d5767033
2026-02-07 19:14 - 2026-02-07 19:14 - 000094751 _____ C:\Users\haele\AppData\LocalLow\57c1e0017dfb3f5afd6fff8d700ae4d25091b8bd98dae7ff8cdb4f7fea8682b5
2026-02-07 19:14 - 2026-02-07 19:14 - 000000194 _____ C:\Users\haele\AppData\LocalLow\f4f018b06d1c51d379ab9e912d11977711e3817340694dbbc18de31bcccaf4f4
2026-02-11 15:59 - 2026-03-05 23:21 - 000115049 _____ C:\Users\haele\AppData\LocalLow\1bbdc69c2c6c057c8eccdd6d7217a3c7cf1a3c3008226b2075726ffdd83c1e4f
2026-02-16 19:42 - 2026-02-16 19:42 - 000030348 _____ C:\Users\haele\AppData\LocalLow\e61dd827e4245ffa1a7401f0edaa2414af1b0e79c710909f9e58eefd794b8388
2026-02-16 19:42 - 2026-02-16 19:42 - 000003000 _____ C:\Users\haele\AppData\LocalLow\558766c54a881cc408c6581274e905c0f38899293c7596d0fe5be76d799fc21d
2026-02-16 19:42 - 2026-02-16 19:42 - 000000130 _____ C:\Users\haele\AppData\LocalLow\9d0b2297536f3c334c0b8838fc4961d6c24cfc82d531cfdddbad65e4b7a7cbc8
2026-02-16 19:42 - 2026-02-16 19:42 - 000000026 _____ C:\Users\haele\AppData\LocalLow\b918a2220031650789b1e7f3a8c2762e8445ec1ef5726fa78bbb45ae76972051
2026-02-20 17:17 - 2026-02-20 17:17 - 000005896 _____ C:\Users\haele\AppData\LocalLow\d21036fdd8dc4bab19ded952e84af8edb3cd4a676a55fa2fdcff30ad9bc37c56
2026-02-20 17:17 - 2026-02-20 17:17 - 000000026 _____ C:\Users\haele\AppData\LocalLow\08151fb6fe19910779c49ad8c1acde4f61ac085dac0ff7c08bb1731958515b0f
2026-03-02 21:09 - 2026-03-02 21:09 - 000077492 _____ C:\Users\haele\AppData\LocalLow\b69dfea3c98a3fe3e834331011fb67f59bd5dd0178fd077ca50eef1f38b37341
2026-03-02 21:09 - 2026-03-02 21:09 - 000063801 _____ C:\Users\haele\AppData\LocalLow\80ff1b78cbcead8f767cdd4533733da12372ca6ec40f570ce214c359b7b9173f
2026-03-02 21:09 - 2026-03-02 21:09 - 000000130 _____ C:\Users\haele\AppData\LocalLow\17abda28baeb94a3adb1d3b240e9b615ebe1dcc933507758b995814c7813160a
2026-03-02 21:09 - 2026-03-02 21:09 - 000000026 _____ C:\Users\haele\AppData\LocalLow\401822e0bd4a0d676e067d94705b9357a9c758bb7e9efb21cbb7b30b35433d9a

AlternateDataStreams: C:\ProgramData:EEF49EE5D3688B03 [217]
AlternateDataStreams: C:\Users\All Users:EEF49EE5D3688B03 [217]
AlternateDataStreams: C:\ProgramData\Application Data:EEF49EE5D3688B03 [217]
AlternateDataStreams: C:\ProgramData\PACE:30C26A3D9534AA52 [217]
AlternateDataStreams: C:\Users\haele\Downloads\flstudio_win64_24.2.2.4597 (1).exe:MBAM.Zone.Identifier [203]


EmptyTemp:
End::