Google chrome crashed and now laptop is running very slowly. Malware? - Virus, Trojan, Spyware, and Malware Removal Help - BleepingComputer

Hello,

My Huawei laptop is not very old and has been working perfectly until yesterday. Google Chrome crashed and now it takes longer to start up, and neither chrome or Microsoft edge work properly (very slow and keep buffering). My avast anti virus has not found anything when I scanned, but I can't think what else the problem can be.

I tried some of the steps in the post about a slow computer not being a malware problem but nothing changed, and since I don't have very much installed on my laptop I don't think it can be a problem with memory.

Any help in fixing this would be very much appreciated. I have attached my log here;

Rachel

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-04-2022

Ran by Rachel (administrator) on LAPTOP-AJP0U36V (HUAWEI BOHB-WAX9) (17-04-2022 16:11:18)

Running from C:\Users\Rachel\Downloads

Loaded Profiles: Rachel

Platform: Microsoft Windows 10 Home Single Language Version 21H2 19044.1645 (X64) Language: English (United States)

Default browser: Edge

Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>

(C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpnd\expressvpnd.exe

(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswEngSrv.exe

(C:\Program Files\Huawei\PCManager\MateBookService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\HwMdcCenter.exe

(C:\Program Files\Huawei\PCManager\MateBookService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MBAMessageCenter.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(DriverStore\FileRepository\cui_dch.inf_amd64_6eefa7742d2487c3\igfxCUIService.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_6eefa7742d2487c3\igfxEM.exe

(DriverStore\FileRepository\dptf_cpu.inf_amd64_9196e89091d8bdbb\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_9196e89091d8bdbb\dptf_helper.exe

(explorer.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPN.exe

(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <28>

(explorer.exe ->) (Grammarly, Inc. -> ) C:\Users\Rachel\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe

(EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationService.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe

(HWVEAudioService.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Windows\System32\HWVEAudioSession.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Users\Rachel\AppData\Local\Microsoft\Teams\current\Teams.exe <9>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\afwServ.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe

(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe

(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe

(services.exe ->) (EXPRSVPN LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe

(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\BasicService\BasicService.exe

(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\Hiview\HiviewService.exe

(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe

(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Program Files\Huawei\PCManager\MateBookService.exe

(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Windows\System32\HWVEAudioService.exe

(services.exe ->) (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.) C:\Windows\System32\RPC\OSD\osdservice.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_9196e89091d8bdbb\esif_uf.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_de0cf7bbf26b8ed4\aesm_service.exe

(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe

(services.exe ->) (Intel® Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe

(services.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_6eefa7742d2487c3\igfxCUIService.exe

(services.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_667c6615c75bd143\OneApp.IGCC.WinService.exe

(services.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_35bb87b7e5b3c943\IntelCpHDCPSvc.exe

(services.exe ->) (Intel® pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_35bb87b7e5b3c943\IntelCpHeciSvc.exe

(services.exe ->) (Intel® Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_7fd3c1076ca83746\Intel_PIE_Service.exe

(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Goodix) C:\Windows\System32\drivers\SessionService.exe

(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\IAS\IntelAudioService.exe

(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicSvc64.exe

(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe

(svchost.exe ->) (A-Volute) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.5.0_x64__w2gh52qy24etm\Nahimic3.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DriverUpdUI.exe] => "C:\Program Files\Avast Software\Driver Updater\DriverUpdUI.exe" /nogui (No File)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [208152 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [377256 2021-11-08] (EXPRSVPN LLC -> ExpressVPN)

HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [124599048 2021-08-18] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-562581118-480346903-3839931000-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2623368 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-562581118-480346903-3839931000-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Rachel\AppData\Local\Microsoft\Teams\Update.exe [2492120 2022-04-14] (Microsoft 3rd Party Application Component -> Microsoft Corporation)

HKU\S-1-5-21-562581118-480346903-3839931000-1001\...\Run: [Grammarly] => C:\Users\Rachel\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe [939560 2022-04-15] (Grammarly, Inc. -> )

HKU\S-1-5-21-562581118-480346903-3839931000-1001\...\Run: [MicrosoftEdgeAutoLaunch_D5CF5695A0FF5796447E3B3D7FCC2FF9] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3540408 2022-04-15] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-562581118-480346903-3839931000-1001\...\Run: [ExpressVPN4] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPN.exe [850344 2021-11-08] (EXPRSVPN LLC -> ExpressVPN)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\100.0.4896.88\Installer\chrmstp.exe [2022-04-13] (Google LLC -> Google LLC)

HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {281AD62D-932B-424E-A870-35D0A4506C31} - System32\Tasks\NahimicTask64 => C:\Windows\system32\.\NahimicSvc64.exe [1088608 2021-05-28] (A-Volute SAS -> Nahimic)

Task: {2F4A5561-FAD5-4B4B-AB01-0773E93A1A38} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4992792 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

Task: {448908E4-74E1-49EA-8533-503F0CAEED88} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2296088 2022-03-07] (Avast Software s.r.o. -> Avast Software)

Task: {488D27C9-C20A-4E94-BFBB-60F5C80238AC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {4E2B7728-3F8B-4C9A-B640-2FBA748149B7} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [4688664 2022-04-07] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramData\Avast Software\SecureLine VPN\log" --guid ef0f9a2b-9040-4cb9-949d-a31a2dd201d1

Task: {5DB93215-5489-4176-BB47-6F7B78BA4FB6} - System32\Tasks\Avast Software\Avast Cleanup Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-tu\icarus.exe [6475544 2022-03-23] (Avast Software s.r.o. -> Avast Software)

Task: {65C274C3-1B40-411B-A7BA-5901B685944A} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4102784 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {6E75E47D-5321-4AAE-8267-AF29CAE0AB79} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8338896 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {71E4FA6D-18EF-4BD0-A2C5-53CAFEB98DC9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-28] (Google LLC -> Google LLC)

Task: {8973F258-3054-42D1-B9CB-FE79C40DA56D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {8A4DF365-066F-4E07-8372-5BAA302A0EA5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22865832 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {94E00306-F39D-45C5-9ED3-00D4A9CF2D5C} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [829568 2021-05-28] (A-Volute SAS -> Nahimic)

Task: {A4A16CA5-BD7C-45DB-BCAD-6CBABE016200} - System32\Tasks\Avast Software\Avast Driver Updater BugReport => C:\Program Files\Avast Software\Driver Updater\AvBugReport.exe [4791064 2022-03-18] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 148 --programpath "C:\Program Files\Avast Software\Driver Updater\Setup\.." --configpath "C:\Program Files\Avast Software\Driver Updater\Setup" --path "C:\ProgramData\Avast Software\Driver Updater\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid c7b29d97-f162-45b3-9e15-9a0ac439525d

Task: {A4EA6D8F-BF87-4385-B079-155BEBC04203} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138680 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {AB3371E4-F1D1-4636-9423-F77DE45B0E65} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [61336 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {B4A107C4-D9F3-4547-9F35-A0BD6ADE0600} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4200320 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {B8D517A6-F4FA-4FDC-B6B8-A28E42497337} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8338896 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {BBAA67E9-B18F-42A4-A894-FADF1D74FF9D} - System32\Tasks\Avast Software\Avast Cleanup BugReport => C:\Program Files\Avast Software\Cleanup\AvBugReport.exe [4791064 2022-03-23] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 62 --programpath "C:\Program Files\Avast Software\Cleanup\Setup\.." --configpath "C:\Program Files\Avast Software\Cleanup\Setup" --path "C:\ProgramData\Avast Software\Cleanup\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --guid bb3cc4ab-fea8-455b-bec4-2af4b6fe0b4b

Task: {C08E172D-4958-4F3C-A291-FF4EA7A80EAC} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1227032 2022-04-07] (Avast Software s.r.o. -> AVAST Software)

Task: {C4557A28-A5AC-4547-8627-32BAA3B182DB} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1088608 2021-05-28] (A-Volute SAS -> Nahimic)

Task: {D35FCCE1-C019-410D-9FEE-A88AA86AECA5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-562581118-480346903-3839931000-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4200320 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

Task: {E0AA27C2-FBB9-4E61-B396-618275CE1925} - System32\Tasks\Avast Software\Avast Driver Updater Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-du\icarus.exe [6475544 2022-03-15] (Avast Software s.r.o. -> Avast Software)

Task: {E1397035-87DD-41A0-A699-EB8D69000813} - System32\Tasks\NahimicTask32 => C:\Windows\system32\..\SysWOW64\NahimicSvc32.exe [829568 2021-05-28] (A-Volute SAS -> Nahimic)

Task: {EE7AA679-56E6-4AAD-A92B-7D488C0D269B} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [6634776 2022-03-29] (Avast Software s.r.o. -> Avast Software)

Task: {F8FDFFBA-DDFD-4A27-B466-BE2D167BD0D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-28] (Google LLC -> Google LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 203.113.188.1 203.113.131.3

Tcpip\..\Interfaces\{6c1b2e25-aea8-4b03-b48c-398afa473a75}: [NameServer] 10.177.0.1

Tcpip\..\Interfaces\{e0ab8ccc-b664-4143-9586-92cdc85698bf}: [DhcpNameServer] 203.113.188.1 203.113.131.3

Tcpip\..\Interfaces\{e310cd76-5442-41c4-a97b-35c7a4b328a1}: [DhcpNameServer] 40.41.1.15

Edge Profile: C:\Users\Rachel\AppData\Local\Microsoft\Edge\User Data\Default [2022-04-17]

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-08] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-08] (Microsoft Corporation -> Microsoft Corporation)

CHR DefaultProfile: Profile 1

CHR Profile: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default [2022-04-17]

CHR Extension: (Slides) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-28]

CHR Extension: (Docs) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-28]

CHR Extension: (Google Drive) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-28]

CHR Extension: (YouTube) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-28]

CHR Extension: (Sheets) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-28]

CHR Extension: (Google Docs Offline) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-21]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-28]

CHR Extension: (Gmail) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-28]

CHR Profile: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-04-17]

CHR Profile: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-04-17]

CHR Extension: (Slides) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-28]

CHR Extension: (Docs) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-28]

CHR Extension: (Google Drive) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-28]

CHR Extension: (YouTube) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-28]

CHR Extension: (Sheets) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-28]

CHR Extension: (Google Docs Offline) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-04-08]

CHR Extension: (AdBlock — best ad blocker) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-03-09]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-28]

CHR Extension: (Gmail) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-28]

CHR Profile: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-03-31]

CHR Extension: (Slides) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-28]

CHR Extension: (Docs) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-28]

CHR Extension: (Google Drive) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-28]

CHR Extension: (YouTube) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-28]

CHR Extension: (Sheets) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-28]

CHR Extension: (Google Docs Offline) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-18]

CHR Extension: (Grammarly for Chrome) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2022-03-31]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-28]

CHR Extension: (Gmail) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-28]

CHR Profile: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3 [2022-03-27]

CHR Extension: (Slides) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2022-03-23]

CHR Extension: (Docs) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2022-03-23]

CHR Extension: (Google Drive) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-03-23]

CHR Extension: (YouTube) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2022-03-23]

CHR Extension: (Sheets) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2022-03-23]

CHR Extension: (Google Docs Offline) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-23]

CHR Extension: (Chrome Web Store Payments) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-23]

CHR Extension: (Gmail) - C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-03-23]

CHR Profile: C:\Users\Rachel\AppData\Local\Google\Chrome\User Data\System Profile [2022-04-17]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8507016 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [563024 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R2 avast! Firewall; C:\Program Files\Avast Software\Avast\afwServ.exe [1968976 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [563024 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2021-11-28] (Avast Software s.r.o. -> AVAST Software)

R2 CleanupPSvc; C:\Program Files\Avast Software\Cleanup\TuneupSvc.exe [15442712 2022-03-23] (Avast Software s.r.o. -> AVAST Software)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11666384 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

R2 DriverUpdSvc; C:\Program Files\Avast Software\Driver Updater\DriverUpdSvc.exe [7475480 2022-03-18] (Avast Software s.r.o. -> AVAST Software)

R2 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [437160 2021-11-08] (EXPRSVPN LLC -> ExpressVPN)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.055.0313.0001\FileSyncHelper.exe [3389824 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

R2 HiviewService; C:\Program Files\Huawei\Hiview\HiviewService.exe [3915976 2022-02-08] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

R2 HwPCCoreService; C:\Program Files\Huawei\BasicService\BasicService.exe [610504 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

R2 HWVEAudioService; C:\Windows\system32\HWVEAudioService.exe [161400 2021-06-28] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

R2 HW_OSDServer; C:\Windows\system32\RPC\OSD\osdservice.exe [252168 2020-12-23] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

R2 LCD_Service; C:\Program Files\Huawei\HwLcdEnhancement\LCD_Service.exe [38600 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

R2 MBAMainService; C:\Program Files\Huawei\PCManager\MateBookService.exe [572616 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

S2 MBAMInstallerService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMInstallerService.exe [7273144 2022-04-17] (Malwarebytes Inc -> Malwarebytes)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8348856 2022-04-17] (Malwarebytes Inc -> Malwarebytes)

R2 NahimicService; C:\Windows\system32\NahimicService.exe [1675360 2021-05-28] (A-Volute SAS -> Nahimic)

S3 OfficeSvcManagerAddons; C:\Windows\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-11-19] (Microsoft Windows -> Microsoft Corporation)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.055.0313.0001\OneDriveUpdaterService.exe [3867512 2022-04-05] (Microsoft Corporation -> Microsoft Corporation)

R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [9692952 2022-04-07] (Avast Software s.r.o. -> AVAST Software)

S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)

R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [36768 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [228912 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [378944 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [252984 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [100408 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R0 aswElam; C:\Windows\System32\drivers\aswElam.sys [21936 2021-11-28] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)

R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42400 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [269448 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswNetHub; C:\Windows\System32\drivers\aswNetHub.sys [546296 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [108888 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83968 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [855320 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [556088 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [215936 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [318736 2022-04-14] (Avast Software s.r.o. -> AVAST Software)

S3 aswVpnRdr; C:\Windows\System32\drivers\aswVpnRdr.sys [59008 2022-01-30] (Avast Software s.r.o. -> Avast Software)

R3 ESAuDriver; C:\Windows\System32\drivers\ESAuDriver.sys [123600 2021-11-25] (苏州顺芯半导体有限公司 -> Everest Semiconducor Co., Ltd)

R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [160176 2022-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [45640 2021-11-08] (ExprsVPN LLC -> ExpressVPN)

R3 expressvpntun; C:\Windows\System32\drivers\expressvpn-tun.sys [46896 2021-11-08] (Express VPN International Ltd. -> ExpressVPN)

R0 IBtRstd; C:\Windows\System32\drivers\ibtrstd.sys [52776 2019-12-02] (Intel® Wireless Connectivity Solutions -> Intel Corporation)

R3 IntcSST; C:\Windows\System32\DriverStore\FileRepository\intcsst.inf_amd64_d24fc82b7309ae97\IntcSST.sys [738024 2021-06-12] (Smart Sound Technology -> Intel® Corporation)

R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [223688 2022-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2022-04-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [195024 2022-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [69040 2022-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2022-04-17] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [158856 2022-04-17] (Malwarebytes Inc -> Malwarebytes)

R3 Nahimic_Mirroring; C:\Windows\System32\drivers\Nahimic_Mirroring.sys [85592 2021-05-06] (A-Volute -> Windows ® Win 7 DDK provider)

R3 segwindrv; C:\Windows\System32\drivers\segwindrvx64.sys [93464 2019-04-17] (Insyde Software Corp. -> Insyde Software Corp.)

S3 tapexpressvpn; C:\Windows\System32\drivers\tapexpressvpn.sys [61496 2021-11-08] (ExprsVPN LLC -> The OpenVPN Project)

U5 tiledatamodelsvc; C:\Windows\system32\svchost.exe [59952 2022-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)

R3 virtbus; C:\Windows\System32\drivers\virtbus.sys [35480 2022-02-24] (Huawei Device Co., Ltd. -> Huawei Device Co., Ltd.)

S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

R3 WDTDrv; C:\Windows\System32\Drivers\WDTDrv.sys [38288 2019-10-14] (Microsoft Windows Hardware Compatibility Publisher -> )

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-04-17 16:11 - 2022-04-17 16:17 - 000033117 _____ C:\Users\Rachel\Downloads\FRST.txt

2022-04-17 16:10 - 2022-04-17 16:13 - 000000000 ____D C:\FRST

2022-04-17 16:09 - 2022-04-17 16:09 - 002366464 _____ (Farbar) C:\Users\Rachel\Downloads\FRST64.exe

2022-04-17 15:48 - 2022-04-17 15:48 - 000069040 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys

2022-04-17 15:43 - 2022-04-17 15:43 - 000195024 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys

2022-04-17 15:43 - 2022-04-17 15:43 - 000158856 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys

2022-04-17 02:19 - 2022-04-17 02:19 - 000000000 ____D C:\Users\Rachel\AppData\Local\mbam

2022-04-17 02:16 - 2022-04-17 02:16 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys

2022-04-17 02:16 - 2022-04-17 02:16 - 000223688 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys

2022-04-17 02:16 - 2022-04-17 02:16 - 000002040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2022-04-17 02:16 - 2022-04-17 02:16 - 000002028 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2022-04-17 02:15 - 2022-04-17 02:13 - 000160176 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys

2022-04-17 02:15 - 2022-04-17 02:12 - 000019912 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys

2022-04-17 02:12 - 2022-04-17 02:12 - 000000000 ____D C:\ProgramData\Malwarebytes

2022-04-17 02:12 - 2022-04-17 02:12 - 000000000 ____D C:\Program Files\Malwarebytes

2022-04-17 02:11 - 2022-04-17 02:11 - 002443448 _____ (Malwarebytes) C:\Users\Rachel\Downloads\MBSetup (2).exe

2022-04-17 02:09 - 2022-04-17 02:10 - 002443448 _____ (Malwarebytes) C:\Users\Rachel\Downloads\MBSetup (1).exe

2022-04-17 02:08 - 2022-04-17 02:08 - 002443448 _____ (Malwarebytes) C:\Users\Rachel\Downloads\MBSetup.exe

2022-04-15 18:49 - 2022-04-15 18:49 - 000418541 _____ C:\Users\Rachel\Downloads\106-302987 (1).pdf

2022-04-15 18:49 - 2022-04-15 18:49 - 000394725 _____ C:\Users\Rachel\Downloads\106-302987.pdf

2022-04-14 19:10 - 2022-04-14 19:10 - 000113261 _____ C:\Users\Rachel\Documents\madrid fligth.pdf

2022-04-14 19:10 - 2022-04-14 19:10 - 000000000 ____D C:\Users\Rachel\AppData\LocalLow\Temp

2022-04-14 18:31 - 2022-04-14 18:31 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2022-04-14 18:31 - 2022-04-14 18:31 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2022-04-14 18:31 - 2022-04-14 18:31 - 000011803 _____ C:\Windows\system32\DrtmAuthTxt.wim

2022-04-14 18:30 - 2022-04-14 18:30 - 000162816 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe

2022-04-14 18:25 - 2022-04-14 18:25 - 000000000 ___HD C:\$WinREAgent

2022-04-14 01:02 - 2022-04-14 01:02 - 000340760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2022-04-14 01:02 - 2022-04-14 01:02 - 000215936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys

2022-04-08 10:40 - 2022-04-08 10:41 - 001225418 _____ C:\Users\Rachel\Downloads\The Bride Test by Helen Hoang.pdf

2022-04-08 09:45 - 2022-04-08 09:45 - 000151873 _____ C:\Users\Rachel\Downloads\JournalofSportsEconomics-2006-CainandHaddock-330-8.pdf

2022-04-07 21:40 - 2022-04-07 21:40 - 001144994 _____ C:\Users\Rachel\Downloads\The Kiss Quotient by Helen Hoang.pdf

2022-04-06 09:31 - 2022-04-06 09:31 - 001787952 _____ C:\Users\Rachel\Downloads\The Flatshare by Beth O'Leary.pdf

2022-04-02 09:21 - 2022-04-02 09:21 - 001280573 _____ C:\Users\Rachel\Downloads\Get a Life Chloe Brown by Talia Hibbert.pdf

2022-04-02 07:00 - 2022-04-02 07:00 - 000320740 _____ C:\Users\Rachel\Downloads\Get a Life Chloe Brown by Talia Hibbert.epub

2022-04-02 00:15 - 2022-04-02 00:15 - 003832741 _____ C:\Users\Rachel\Downloads\The-Love-Hypothesis-by-Ali-Hazelwood-booksfree.org_ (1).pdf

2022-04-01 14:11 - 2022-04-01 14:11 - 003832741 _____ C:\Users\Rachel\Downloads\The-Love-Hypothesis-by-Ali-Hazelwood-booksfree.org_.pdf

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2022-04-17 16:20 - 2021-11-28 00:11 - 000000000 ____D C:\Program Files (x86)\Google

2022-04-17 16:08 - 2019-12-07 16:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2022-04-17 15:51 - 2021-11-28 00:17 - 000004264 _____ C:\Windows\system32\Tasks\Avast Emergency Update

2022-04-17 15:47 - 2022-03-15 05:57 - 000000000 ____D C:\Users\Rachel\AppData\Roaming\PCManager

2022-04-17 15:43 - 2021-11-28 00:18 - 000004028 _____ C:\Windows\system32\Tasks\Avast SecureLine VPN Update

2022-04-17 15:42 - 2021-11-28 00:12 - 000000000 ____D C:\ProgramData\Avast Software

2022-04-17 15:42 - 2021-10-26 07:27 - 000003112 _____ C:\Windows\system32\Tasks\NahimicTask32

2022-04-17 15:42 - 2021-10-26 07:27 - 000003092 _____ C:\Windows\system32\Tasks\NahimicTask64

2022-04-17 15:41 - 2021-10-26 07:27 - 000000000 __SHD C:\Users\Rachel\IntelGraphicsProfiles

2022-04-17 15:41 - 2021-10-26 06:43 - 000000000 ___HD C:\Intel

2022-04-17 15:41 - 2021-07-10 02:09 - 000008192 ___SH C:\DumpStack.log.tmp

2022-04-17 15:41 - 2020-11-19 14:30 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2022-04-17 15:41 - 2020-11-19 14:30 - 000000000 ____D C:\Windows\system32\SleepStudy

2022-04-17 15:41 - 2019-12-07 16:14 - 000000000 ___HD C:\Program Files\WindowsApps.tmp

2022-04-17 15:41 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\ServiceState

2022-04-17 14:55 - 2019-12-07 16:14 - 000000000 ___HD C:\Program Files\WindowsApps

2022-04-17 14:50 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\registration

2022-04-17 14:39 - 2021-10-26 07:00 - 000000000 ____D C:\ProgramData\Goodix

2022-04-17 14:32 - 2021-10-26 07:27 - 000000000 ____D C:\Users\Rachel\AppData\Local\Packages

2022-04-17 11:13 - 2019-12-07 16:03 - 000524288 _____ C:\Windows\system32\config\BBI

2022-04-17 10:43 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\AppReadiness

2022-04-17 10:38 - 2020-11-19 14:32 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2022-04-17 10:38 - 2020-11-19 14:32 - 000002283 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk

2022-04-17 09:55 - 2019-12-07 16:13 - 000000000 ____D C:\Windows\INF

2022-04-17 02:15 - 2019-12-07 16:14 - 000000000 ___HD C:\Windows\ELAMBKUP

2022-04-17 02:08 - 2021-07-10 01:22 - 000795738 _____ C:\Windows\system32\PerfStringBackup.INI

2022-04-17 01:56 - 2021-11-28 00:23 - 000000000 ____D C:\Users\Rachel\AppData\Roaming\linknow

2022-04-16 01:41 - 2021-11-30 20:32 - 000000000 ____D C:\Windows\system32\MRT

2022-04-16 01:41 - 2019-12-07 16:03 - 000000000 ____D C:\Windows\CbsTemp

2022-04-16 01:40 - 2021-11-30 20:32 - 143823848 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2022-04-16 01:35 - 2020-11-19 14:30 - 000487368 _____ C:\Windows\system32\FNTCACHE.DAT

2022-04-16 01:33 - 2021-10-26 07:26 - 000000000 ____D C:\Users\Rachel

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\SysWOW64\Dism

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\SystemResources

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\system32\oobe

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\system32\Dism

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\ShellExperiences

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\Provisioning

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\PolicyDefinitions

2022-04-16 01:33 - 2019-12-07 16:14 - 000000000 ____D C:\Windows\bcastdvr

2022-04-16 00:18 - 2022-02-19 11:04 - 000001433 _____ C:\Users\Rachel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grammarly.lnk

2022-04-16 00:18 - 2022-02-19 11:04 - 000001425 _____ C:\Users\Rachel\Desktop\Grammarly.lnk

2022-04-14 09:44 - 2021-12-03 16:00 - 000002376 _____ C:\Users\Rachel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk

2022-04-14 09:44 - 2021-12-03 16:00 - 000002368 _____ C:\Users\Rachel\Desktop\Microsoft Teams.lnk

2022-04-14 01:02 - 2021-11-28 00:16 - 000556088 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000546296 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetHub.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000318736 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000269448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000252984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000108888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000100408 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000083968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys

2022-04-14 01:02 - 2021-11-28 00:16 - 000042400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys

2022-04-14 01:01 - 2021-11-28 00:16 - 000855320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2022-04-14 01:01 - 2021-11-28 00:16 - 000378944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys

2022-04-14 01:01 - 2021-11-28 00:16 - 000228912 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys

2022-04-14 01:01 - 2021-11-28 00:16 - 000036768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys

2022-04-13 04:22 - 2021-11-28 00:11 - 000002254 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2022-04-13 04:22 - 2021-11-28 00:11 - 000002213 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2022-04-10 12:19 - 2021-12-13 19:31 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2022-04-08 09:13 - 2021-11-28 00:12 - 000002399 _____ C:\Users\Rachel\Desktop\Person 1 - Chrome.lnk

2022-04-07 20:16 - 2021-11-28 00:17 - 000036120 _____ (Avast Software) C:\Windows\system32\icarus_rvrt.exe

2022-04-07 11:49 - 2021-11-30 20:35 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2022-04-06 09:26 - 2020-11-19 14:32 - 000003480 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2022-04-06 09:26 - 2020-11-19 14:32 - 000003356 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2022-04-05 22:28 - 2021-12-12 06:09 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-562581118-480346903-3839931000-1001

2022-04-05 22:28 - 2021-12-03 04:11 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2022-04-05 22:28 - 2021-12-03 04:11 - 000002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2022-04-05 07:34 - 2021-07-10 01:27 - 000000000 ____D C:\Program Files\Microsoft Office

2...