Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2023 Ran by Jack (administrator) on DESKTOP-CJ6LTSN (24-10-2023 07:51:32) Running from C:\Users\Jack\Desktop\FRST64.exe Loaded Profiles: Jack Platform: Microsoft Windows 10 Pro Version 22H2 19045.3570 (X64) Language: English (United States) Default browser: Chrome Boot Mode: Normal ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (Urban Cyber Security Inc. -> ) C:\Program Files\UrbanVPN\bin\urbanvpnserv.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2307.4.0_x64__8wekyb3d8bbwe\CalculatorApp.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2308.3.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe ==================== Registry (Whitelisted) =================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [MTPW] => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> ) HKLM\...\Run: [BraveVpnWireguardService] => C:\Program Files\BraveSoftware\Brave-Browser\Application\118.1.59.120\BraveVpnWireguardService\brave_vpn_wireguard_service.exe [11338776 2023-10-18] (Brave Software, Inc. -> Brave Software, Inc.) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [USB Gamepad] => C:\Windows\USB Vibration\dr100&110\USB Gamepad.exe -boot (No File) HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2023-03-07] (Adobe Inc. -> ) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [UrbanVPN] => C:\Program Files\UrbanVPN\bin\urbanvpn-gui.exe [23855464 2023-10-03] (Urban Cyber Security Inc. -> ) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4375912 2023-09-29] (Valve Corp. -> Valve Corporation) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [Keybase.Keybase.GUI] => C:\Users\Jack\AppData\Local\Keybase\Gui\Keybase.exe [166008624 2023-09-28] (Zoom Video Communications, Inc. -> GitHub, Inc.) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [RiotClient] => C:\Riot Games\Riot Client\RiotClientServices.exe --launch-background-mode (No File) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [TeraBox] => "C:\Users\Jack\AppData\Roaming\TeraBox\TeraBox.exe" AutoRun (No File) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [TeraBoxWeb] => "C:\Users\Jack\AppData\Roaming\TeraBox\TeraBoxWebService.exe" (No File) HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\...\Run: [MicrosoftEdgeAutoLaunch_3C32DD8DCCCF754B3FFB51F344CC4011] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4187176 2023-10-20] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-18\...\Run: [UrbanVPN] => C:\Program Files\UrbanVPN\bin\urbanvpn-gui.exe [23855464 2023-10-03] (Urban Cyber Security Inc. -> ) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [203936 2023-02-14] (Adobe Inc. -> Adobe Systems Inc) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\118.0.5993.89\Installer\chrmstp.exe [2023-10-19] (Google LLC -> Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\118.1.59.120\Installer\chrmstp.exe [2023-10-18] (Brave Software, Inc. -> Brave Software, Inc.) Startup: C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2023-03-09] ShortcutTarget: MEGAsync.lnk -> C:\Users\Jack\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited) ==================== Scheduled Tasks (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {C07D028C-8164-45F5-B80E-B5C883D005EB} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{ADAC9FB7-75D2-4B97-9D86-CD0835B1A5D5} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-03-18] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {05AD2806-8576-4D7E-BB7B-86931BAACF70} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{60DC2823-4DBA-4BE4-A3CD-58E4C8ED2450} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-03-18] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {3EA7EE1D-E17F-447D-A6A2-E57802B1FAC3} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem120.0.6077.0{E7E6E24D-037C-4E5E-A4C2-241F238A7241} => C:\Program Files (x86)\Google\GoogleUpdater\120.0.6077.0\updater.exe [4580640 2023-10-19] (Google LLC -> Google LLC) <==== ATTENTION Task: {70633076-BA4D-46D9-B19C-36C594EA0DEE} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-3678229789-2673764803-1741663152-1001 => C:\Users\Jack\AppData\Local\MEGAsync\MEGAupdater.exe [2531504 2023-08-18] (Mega Limited -> ) Task: {AF76DB51-1C23-4425-A413-46C3D05D0417} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {FA55AAF8-0DFB-4034-B5B8-FB794EB531B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {06D8E2F6-EE2D-4A70-95E8-5460A6FFFE8A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {671BB3F5-3AB1-49D6-84CC-90B94459DE0F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8FA5EF41-FDF7-4B96-AAF4-82DA70398409} - System32\Tasks\MiniToolPartitionWizard => C:\Program Files\MiniTool Partition Wizard 12\updatechecker.exe [219616 2020-02-19] (MiniTool Software Limited -> ) Task: {4C46A488-2F77-49B4-8C6B-E3976565F21B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-10-13] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {E661B1D9-F42F-4FC1-B337-577460D43C93} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718240 2023-10-13] (Mozilla Corporation -> Mozilla Foundation) Task: {90A85282-9539-479A-9FD0-47DC873FD689} - System32\Tasks\Opera scheduled Autoupdate 1678107536 => C:\Users\Jack\AppData\Local\Programs\Opera\launcher.exe [42724048 2021-09-13] (Opera Software AS -> Opera Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\..\Interfaces\{0e4a800f-87e4-4c12-a7a8-d6309e00c4bc}: [DhcpNameServer] 192.168.43.30 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\Jack\AppData\Local\Microsoft\Edge\User Data\Default [2023-10-24] Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2023-10-20] Edge Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-20] Edge Extension: (Edge relevant text changes) - C:\Users\Jack\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-10-20] Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn] Edge HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [dpadflhmiohjfhhaehelneimpllfbpcg] - C:\Users\Jack\AppData\Roaming\TeraBox\terabox_ext_chrome.crx Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn] FireFox: ======== FF DefaultProfile: h4ep0r8q.default FF ProfilePath: C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\idw5sya4.Jack User [2023-10-23] FF Session Restore: Mozilla\Firefox\Profiles\idw5sya4.Jack User -> is enabled. FF ProfilePath: C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\h4ep0r8q.default [2023-03-27] FF ProfilePath: C:\Users\Jack\AppData\Roaming\Mozilla\Firefox\Profiles\c129bme1.default-release [2023-03-27] FF Session Restore: Mozilla\Firefox\Profiles\c129bme1.default-release -> is enabled. FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-02-14] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [No File] Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Default [2023-10-24] CHR Session Restore: Default -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-27] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-16] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Default\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-05] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-04-26] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 1 [2023-10-24] CHR Session Restore: Profile 1 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-08-11] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-31] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-08-22] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 10 [2023-04-22] CHR Session Restore: Profile 10 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-04-22] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 10\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 11 [2023-03-08] CHR Session Restore: Profile 11 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-03-07] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 11\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 12 [2023-03-08] CHR Session Restore: Profile 12 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-03-07] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 12\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 13 [2023-03-07] CHR Session Restore: Profile 13 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-03-07] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 13\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 14 [2023-06-14] CHR Session Restore: Profile 14 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 14\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-14] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 14\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-14] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 14\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 15 [2023-07-13] CHR Session Restore: Profile 15 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 15\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-07-13] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 15\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-04] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 15\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-08] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 16 [2023-10-12] CHR Session Restore: Profile 16 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 16\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-12] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 16\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-12] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 16\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 16\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 16\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-09] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 17 [2023-09-29] CHR Session Restore: Profile 17 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 17\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-26] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 17\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-02] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 17\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-09-26] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 17\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-12] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 18 [2023-09-10] CHR Session Restore: Profile 18 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 18\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 18\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 18\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-14] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 19 [2023-07-14] CHR Session Restore: Profile 19 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 19\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-07-14] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 19\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-18] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 19\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-18] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 2 [2023-10-22] CHR Session Restore: Profile 2 -> is enabled. CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-18] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 20 [2023-09-10] CHR Session Restore: Profile 20 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 20\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 20\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-09] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 20\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 20\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-23] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 21 [2023-05-31] CHR Session Restore: Profile 21 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 21\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-05-31] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 21\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-31] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 21\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-23] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 22 [2023-03-24] CHR Session Restore: Profile 22 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-03-24] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-24] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 22\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-24] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 23 [2023-09-06] CHR Session Restore: Profile 23 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 23\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-06] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 23\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-06] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 23\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-03] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 24 [2023-08-12] CHR Session Restore: Profile 24 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 24\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-08-11] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 24\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-25] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 24\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-04] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 25 [2023-09-23] CHR Session Restore: Profile 25 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 25\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-08-25] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 25\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-09] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 25\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-09-23] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 25\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-08-25] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 25\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-05] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 26 [2023-10-03] CHR Session Restore: Profile 26 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 26\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-03] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 26\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 26\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 27 [2023-04-07] CHR Session Restore: Profile 27 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 27\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-04-07] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 27\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 27\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 28 [2023-09-10] CHR Session Restore: Profile 28 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 28\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 28\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 28\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 28\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-11] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 29 [2023-04-19] CHR Session Restore: Profile 29 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 29\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-04-19] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 29\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-19] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 29\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-19] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 3 [2023-10-20] CHR Session Restore: Profile 3 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-18] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-18] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-18] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 30 [2023-09-10] CHR Session Restore: Profile 30 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 30\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 30\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 30\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-19] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 31 [2023-04-26] CHR Session Restore: Profile 31 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 31\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-04-26] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 31\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-23] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 31\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-23] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 32 [2023-10-22] CHR Session Restore: Profile 32 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 32\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-26] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 32\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-16] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 32\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-26] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 34 [2023-10-18] CHR Session Restore: Profile 34 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 34\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-08] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 34\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-24] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 34\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-18] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 34\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-18] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 34\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-04] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 35 [2023-06-07] CHR Session Restore: Profile 35 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 35\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-07] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 35\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-07] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 35\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-13] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 36 [2023-09-11] CHR Session Restore: Profile 36 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 36\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-11] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 36\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-11] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 36\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-13] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 37 [2023-06-18] CHR Session Restore: Profile 37 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 37\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-18] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 37\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-18] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 37\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-15] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 38 [2023-10-24] CHR DownloadDir: C:\Users\Jack\Downloads CHR Session Restore: Profile 38 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 38\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-26] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 38\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-17] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 38\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 38\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-06-02] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 39 [2023-06-25] CHR Session Restore: Profile 39 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 39\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-25] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 39\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-25] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 39\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-06-25] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 4 [2023-09-18] CHR Session Restore: Profile 4 -> is enabled. CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-18] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-08-22] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 40 [2023-09-10] CHR Session Restore: Profile 40 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 40\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 40\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-07-26] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 40\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-07-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 40\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-07-10] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 41 [2023-07-13] CHR Session Restore: Profile 41 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 41\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-07-13] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 41\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-07-13] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 41\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-07-13] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 41\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-07-13] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 42 [2023-10-19] CHR Session Restore: Profile 42 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 42\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-19] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 42\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-11] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 42\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-19] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 42\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-19] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 42\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-08-11] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 43 [2023-10-12] CHR Notifications: Profile 43 -> hxxps://www.crio.do CHR Session Restore: Profile 43 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 43\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-12] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 43\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-12] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 43\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 43\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 43\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-08-12] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 44 [2023-09-01] CHR Session Restore: Profile 44 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 44\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-01] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 44\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-01] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 44\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-01] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 44\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-01] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 45 [2023-10-03] CHR Session Restore: Profile 45 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 45\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-03] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 45\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-01] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 45\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-03] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 45\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-01] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 45\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-01] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 46 [2023-09-09] CHR Session Restore: Profile 46 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 46\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-01] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 46\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-01] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 46\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-01] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 46\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-01] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 47 [2023-10-22] CHR Session Restore: Profile 47 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 47\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-12] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 47\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-18] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 47\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 47\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 47\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-05] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 48 [2023-10-12] CHR Session Restore: Profile 48 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 48\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-12] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 48\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-05] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 48\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 48\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 48\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-05] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 49 [2023-09-08] CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 49\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-08] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 49\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-08] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 49\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-08] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 49\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-08] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5 [2023-10-22] CHR Session Restore: Profile 5 -> is enabled. CHR Extension: (AMZ Suggestion Expander) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cpeaihkccbeemkfefcapijechkbfjlhb [2023-10-22] CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-05] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-02] CHR Extension: (DS Amazon Quick View) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\jkompbllimaoekaogchhkmkdogpkhojg [2023-10-22] CHR Extension: (Helium 10) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\njmehopjdpcckochcggncklnlmikcbnb [2023-10-22] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 50 [2023-10-23] CHR Session Restore: Profile 50 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 50\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-22] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 50\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 50\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-19] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 50\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-22] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 50\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-10] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 51 [2023-09-21] CHR Session Restore: Profile 51 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 51\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 51\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 51\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 51\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-10] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 52 [2023-09-11] CHR Session Restore: Profile 52 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 52\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-11] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 52\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-11] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 52\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-09-11] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 52\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-09-11] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 53 [2023-10-12] CHR Session Restore: Profile 53 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 53\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-03] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 53\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-03] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 53\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 53\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 53\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-03] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 54 [2023-10-19] CHR Session Restore: Profile 54 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 54\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-05] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 54\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-05] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 54\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-19] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 54\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-19] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 54\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-05] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 55 [2023-10-18] CHR Session Restore: Profile 55 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 55\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-08] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 55\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-18] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 55\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Online Security) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 55\Extensions\llbcnfanfmjhpedaedhbcnpgeepdnnok [2023-10-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 55\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-08] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 6 [2023-09-10] CHR Session Restore: Profile 6 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-10] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 7 [2023-10-18] CHR Session Restore: Profile 7 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-18] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-18] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-18] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 7\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-06] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 8 [2023-10-12] CHR Session Restore: Profile 8 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-12] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-10] CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2023-10-12] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 8\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 9 [2023-04-22] CHR Session Restore: Profile 9 -> is enabled. CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-04-05] CHR Extension: (Google Docs Offline) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-05] CHR Extension: (Chrome Web Store Payments) - C:\Users\Jack\AppData\Local\Google\Chrome\User Data\Profile 9\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-03-07] CHR Profile: C:\Users\Jack\AppData\Local\Google\Chrome\User Data\System Profile [2023-10-22] CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] CHR HKLM\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] CHR HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dpadflhmiohjfhhaehelneimpllfbpcg] - C:\Users\Jack\AppData\Roaming\TeraBox\terabox_ext_chrome.crx CHR HKU\S-1-5-21-3678229789-2673764803-1741663152-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] CHR HKLM-x32\...\Chrome\Extension: [dpadflhmiohjfhhaehelneimpllfbpcg] - C:\Users\Jack\AppData\Roaming\TeraBox\terabox_ext_chrome.crx CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee] CHR HKLM-x32\...\Chrome\Extension: [llbcnfanfmjhpedaedhbcnpgeepdnnok] Opera: ======= OPR Profile: C:\Users\Jack\AppData\Roaming\Opera Software\Opera Stable [2023-03-06] Brave: ======= BRA Profile: C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-10-24] BRA Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-06-01] BRA Extension: (Brave Local Data Files Updater) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-06-01] BRA Extension: (Brave NTP background images) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2023-03-18] BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications List (plaintext))) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2023-04-24] BRA Extension: (Wallet Data Files Updater) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-06-01] BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2023-06-01] BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2023-03-18] BRA Extension: (Brave NTP sponsored images) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe [2023-06-01] BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-06-01] BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-06-01] BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2023-03-18] BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Jack\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-06-01] ==================== Services (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.) S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-03-18] (Brave Software, Inc. -> BraveSoftware Inc.) S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2023-03-18] (Brave Software, Inc. -> BraveSoftware Inc.) S3 BraveVpnService; C:\Program Files\BraveSoftware\Brave-Browser\Application\118.1.59.120\brave_vpn_helper.exe [3073048 2023-10-18] (Brave Software, Inc. -> Brave Software, Inc.) S3 BraveVpnWireguardService; C:\Program Files\BraveSoftware\Brave-Browser\Application\118.1.59.120\BraveVpnWireguardService\brave_vpn_wireguard_service.exe [11338776 2023-10-18] (Brave Software, Inc. -> Brave Software, Inc.) S2 GoogleUpdaterInternalService120.0.6077.0; C:\Program Files (x86)\Google\GoogleUpdater\120.0.6077.0\updater.exe [4580640 2023-10-19] (Google LLC -> Google LLC) S2 GoogleUpdaterService120.0.6077.0; C:\Program Files (x86)\Google\GoogleUpdater\120.0.6077.0\updater.exe [4580640 2023-10-19] (Google LLC -> Google LLC) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402264 2023-10-11] (Microsoft Windows Publisher -> Microsoft Corporation) R2 UrbanVPNServiceInteractive; C:\Program Files\UrbanVPN\bin\urbanvpnserv.exe [450768 2023-09-06] (Urban Cyber Security Inc. -> ) S3 UrbanVPNUpdater; C:\Program Files\UrbanVPN\UrbanVPNUpdater.exe [1022312 2023-10-03] (Urban Cyber Security Inc. -> Urban Security) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe [3116904 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe [133584 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\118.1.59.120\elevation_service.exe" [X] R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_7e5fd280efaa5445\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem S3 TeraBoxUtility; C:\Users\Jack\AppData\Roaming\TeraBox\YunUtilityService.exe [X] ===================== Drivers (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed] S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [File not signed] S3 h647906; C:\Windows\System32\drivers\h647906.sys [63856 2008-08-08] (Shen Zhen Dragon Rise Macro Technology Limited Company -> Your Corporation) S3 h648101; C:\Windows\System32\drivers\h648101.sys [65776 2008-08-08] (Shen Zhen Dragon Rise Macro Technology Limited Company -> Your Corporation) S3 h648103; C:\Windows\System32\drivers\h648103.sys [62960 2008-08-08] (Shen Zhen Dragon Rise Macro Technology Limited Company -> Your Corporation) S3 hid7906; C:\Windows\SysWOW64\drivers\hid7906.sys [41272 2008-08-08] (Shen Zhen Dragon Rise Macro Technology Limited Company -> Your Corporation) S3 hid8101; C:\Windows\SysWOW64\drivers\hid8101.sys [43192 2008-08-08] (Shen Zhen Dragon Rise Macro Technology Limited Company -> Your Corporation) S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [31140 2007-09-21] (Compuware Corporation) [File not signed] R3 MpKsl35cc157a; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{55C49D16-2616-40CD-999A-7FCEFD949A6E}\MpKslDrv.sys [263560 2023-10-23] (Microsoft Windows -> Microsoft Corporation) R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [37336 2021-03-09] (MiniTool Solution Ltd -> ) S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> ) R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-10-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [572712 2023-10-05] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105872 2023-10-05] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) (Whitelisted) ========= (If an entry is included in the fixlist, the file/folder will be moved.) 2023-10-24 07:46 - 2023-10-24 07:51 - 000090078 _____ C:\Users\Jack\Desktop\Addition.txt 2023-10-24 07:45 - 2023-10-24 07:52 - 000062560 _____ C:\Users\Jack\Desktop\FRST.txt 2023-10-24 07:44 - 2023-10-24 07:51 - 000000000 ____D C:\FRST 2023-10-24 07:42 - 2023-10-24 07:42 - 000013415 _____ C:\Users\Jack\Desktop\ZHPCleaner (R).html 2023-10-24 07:42 - 2023-10-24 07:42 - 000005467 _____ C:\Users\Jack\Desktop\ZHPCleaner (R).txt 2023-10-24 07:38 - 2023-10-24 07:38 - 000013492 _____ C:\Users\Jack\Desktop\ZHPCleaner (S).html 2023-10-24 07:38 - 2023-10-24 07:38 - 000005521 _____ C:\Users\Jack\Desktop\ZHPCleaner (S).txt 2023-10-24 07:30 - 2023-10-24 07:42 - 000000000 ____D C:\Users\Jack\AppData\Roaming\ZHP 2023-10-24 07:30 - 2023-10-24 07:30 - 000000874 _____ C:\Users\Jack\Desktop\ZHPCleaner.lnk 2023-10-24 07:30 - 2023-10-24 07:30 - 000000000 ____D C:\Users\Jack\AppData\Local\ZHP 2023-10-24 07:19 - 2023-10-24 07:20 - 000000000 ____D C:\AdwCleaner 2023-10-24 07:18 - 2023-10-24 07:18 - 002383360 _____ (Farbar) C:\Users\Jack\Desktop\FRST64.exe 2023-10-24 07:16 - 2023-10-24 07:17 - 003344032 _____ (Nicolas Coolman) C:\Users\Jack\Desktop\ZHPCleaner.exe 2023-10-24 07:13 - 2023-10-24 07:13 - 008791352 _____ (Malwarebytes) C:\Users\Jack\Desktop\adwcleaner.exe 2023-10-24 06:55 - 2023-10-24 06:55 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf 2023-10-23 19:14 - 2023-10-24 06:00 - 000001381 _____ C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk 2023-10-23 19:14 - 2023-10-24 05:59 - 000001275 _____ C:\Users\Jack\Desktop\ESET Online Scanner.lnk 2023-10-23 19:14 - 2023-10-23 19:14 - 000000000 ____D C:\Users\Jack\AppData\Local\ESET 2023-10-23 19:12 - 2023-10-23 19:13 - 015274968 _____ (ESET) C:\Users\Jack\Downloads\esetonlinescanner.exe 2023-10-23 11:37 - 2023-10-23 11:37 - 000000000 ____D C:\Users\Jack\Desktop\Google marketing 2023-10-23 09:38 - 2023-10-23 09:38 - 000551979 _____ C:\Users\Jack\Downloads\Laudo Completo 27_02_2023 (1).pdf 2023-10-23 09:22 - 2023-10-23 09:22 - 000583686 _____ C:\Users\Jack\Downloads\Laudo Completo 13_09_2023 (1).pdf 2023-10-22 21:29 - 2023-10-23 12:32 - 000000062 _____ C:\Users\Jack\Desktop\New Text Document (7).txt 2023-10-22 17:09 - 2023-10-22 17:09 - 000000000 ____D C:\Users\Jack\AppData\Roaming\Python 2023-10-22 16:40 - 2023-10-22 16:40 - 000300090 _____ C:\Users\Jack\Downloads\coursera-dl-master.zip 2023-10-22 15:53 - 2023-10-22 15:53 - 028978512 _____ (Python Software Foundation) C:\Users\Jack\Downloads\python-3.10.8-amd64.exe 2023-10-22 15:53 - 2023-10-22 15:53 - 000000000 ____D C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10 2023-10-22 15:21 - 2023-10-22 15:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git 2023-10-22 15:21 - 2023-10-22 15:21 - 000000000 ____D C:\Program Files\Git 2023-10-22 15:18 - 2023-10-22 15:19 - 061263968 _____ (The Git Development Community ) C:\Users\Jack\Downloads\Git-2.42.0.2-64-bit.exe 2023-10-22 14:45 - 2023-10-22 14:45 - 000000000 ____D C:\Users\Jack\AppData\Local\pip 2023-10-22 14:37 - 2023-10-22 15:53 - 000000000 ____D C:\Users\Jack\AppData\Local\Package Cache 2023-10-22 14:37 - 2023-10-22 14:37 - 026507904 _____ (Python Software Foundation) C:\Users\Jack\Downloads\python-3.12.0-amd64.exe 2023-10-22 14:31 - 2023-10-22 17:08 - 000000000 ____D C:\Users\Jack\Desktop\Coursera 2023-10-20 16:15 - 2023-10-20 16:15 - 000000219 _____ C:\Users\Jack\Desktop\Counter-Strike 2.url 2023-10-18 19:51 - 2023-10-18 19:51 - 000000000 _____ C:\Users\Jack\Desktop\New Text Document (5).txt 2023-10-16 14:45 - 2023-10-16 14:45 - 000081571 _____ C:\Users\Jack\Downloads\boleto abrace.pdf 2023-10-16 10:26 - 2023-10-16 10:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UrbanVPN 2023-10-16 10:26 - 2023-10-16 10:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TAP-Windows 2023-10-16 10:26 - 2023-10-16 10:26 - 000000000 ____D C:\Program Files\UrbanVPN 2023-10-16 10:26 - 2023-10-16 10:26 - 000000000 ____D C:\Program Files\TAP-Windows 2023-10-13 08:33 - 2023-10-14 09:49 - 000000000 ____D C:\Program Files\Mozilla Firefox 2023-10-12 09:54 - 2023-10-12 09:54 - 000000000 ____D C:\ProgramData\PLUG 2023-10-11 21:00 - 2023-10-11 21:00 - 000000000 ____D C:\Program Files\RUXIM 2023-10-11 09:28 - 2023-10-11 09:28 - 000016059 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json 2023-10-11 09:21 - 2023-10-11 09:21 - 000000000 ___HD C:\$WinREAgent 2023-10-11 09:21 - 2023-10-11 09:21 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER 2023-10-10 08:40 - 2023-10-10 08:40 - 000297532 _____ C:\Users\Jack\Downloads\matematica-2017-prova.pdf 2023-10-10 08:40 - 2023-10-10 08:40 - 000137531 _____ C:\Users\Jack\Downloads\matematica-2017-gabarito.pdf 2023-10-06 19:42 - 2023-10-10 16:50 - 000000057 _____ C:\Users\Jack\Desktop\New Text Document (4).txt 2023-10-06 16:42 - 2023-10-06 16:42 - 002661737 _____ C:\Users\Jack\Downloads\The non-resident-Survival-Guide V1.3.pdf 2023-10-05 17:17 - 2023-10-05 17:17 - 000002440 _____ C:\Users\Jack\Desktop\Tiktok from USA - Chrome.lnk 2023-10-03 11:01 - 2023-10-03 11:01 - 000002440 _____ C:\Users\Jack\Desktop\print on demand 2 - Chrome.lnk 2023-10-02 14:39 - 2023-10-02 14:39 - 000156777 _____ C:\Users\Jack\Downloads\grafico-taxa-de-alcool-no-sangue.pdf 2023-10-02 13:23 - 2023-10-02 13:23 - 001320434 _____ C:\Users\Jack\Downloads\matematica-capitulo-9.pdf 2023-10-02 10:29 - 2023-10-02 10:29 - 001106309 _____ C:\Users\Jack\Downloads\matematica-capitulo-8.pdf 2023-10-02 10:03 - 2023-10-02 10:03 - 003844523 _____ C:\Users\Jack\Downloads\matematica-capitulo-7.pdf 2023-10-02 09:33 - 2023-10-02 09:33 - 002039620 _____ C:\Users\Jack\Downloads\matematica-capitulo-6.pdf 2023-09-30 15:40 - 2023-09-30 15:40 - 001909751 _____ C:\Users\Jack\Downloads\matematica-capitulo-5.pdf 2023-09-30 15:29 - 2023-09-30 15:29 - 001801822 _____ C:\Users\Jack\Downloads\matematica-capitulo-4.pdf 2023-09-30 14:43 - 2023-09-30 14:43 - 001303669 _____ C:\Users\Jack\Downloads\matematica-capitulo-3.pdf 2023-09-30 13:58 - 2023-09-30 13:58 - 001563936 _____ C:\Users\Jack\Downloads\matematica-capitulo-2.pdf 2023-09-30 13:15 - 2023-09-30 13:15 - 001790773 _____ C:\Users\Jack\Downloads\matematica-capitulo-1.pdf 2023-09-29 08:36 - 2023-09-29 08:36 - 000001335 _____ C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Keybase.lnk 2023-09-28 10:31 - 2023-09-28 10:31 - 017934074 _____ C:\Users\Jack\Downloads\encceja_matematica_ens_medio.pdf ==================== One month (modified) ================== (If an entry is included in the fixlist, the file/folder will be moved.) 2023-10-24 07:47 - 2019-12-07 06:13 - 000000000 ____D C:\Windows\INF 2023-10-24 07:43 - 2023-03-06 10:02 - 000002392 _____ C:\Users\Jack\Desktop\Jacques - Chrome.lnk 2023-10-24 07:33 - 2019-12-07 06:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-10-24 07:20 - 2023-04-07 14:01 - 000000000 ____D C:\Users\Jack\AppData\Roaming\Keybase 2023-10-24 07:20 - 2023-03-05 19:43 - 000000000 ____D C:\ProgramData\NVIDIA 2023-10-24 07:19 - 2023-03-25 14:09 - 000000000 ____D C:\Program Files (x86)\Steam 2023-10-24 07:10 - 2019-12-07 06:14 - 000000000 ___HD C:\Windows\ELAMBKUP 2023-10-24 06:50 - 2023-03-06 03:29 - 000000000 ____D C:\Windows\system32\SleepStudy 2023-10-24 05:31 - 2023-03-06 10:14 - 000000000 ___HD C:\Users\Jack\Downloads\.opera 2023-10-24 05:31 - 2023-03-06 10:14 - 000000000 ___HD C:\Users\Jack\.opera 2023-10-24 02:42 - 2023-04-07 14:01 - 000000000 ____D C:\Users\Jack\AppData\Local\Keybase 2023-10-23 19:17 - 2023-03-06 16:29 - 000000000 ____D C:\Users\Jack\AppData\Local\CrashDumps 2023-10-23 19:04 - 2023-03-05 19:47 - 000004166 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{55308F34-82BC-4769-B34F-B89C57BE5719} 2023-10-23 17:52 - 2023-03-07 09:31 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2023-10-23 02:28 - 2022-09-08 00:12 - 000000000 ____D C:\Windows\SystemTemp 2023-10-22 16:36 - 2023-03-05 19:37 - 000840878 _____ C:\Windows\system32\PerfStringBackup.INI 2023-10-22 16:30 - 2023-04-03 16:52 - 000000000 ____D C:\ProgramData\boost_interprocess 2023-10-22 16:29 - 2023-03-06 11:19 - 000000000 ____D C:\ProgramData\UrbanVPN 2023-10-22 16:29 - 2023-03-06 03:29 - 000008192 ___SH C:\DumpStack.log.tmp 2023-10-22 16:29 - 2023-03-06 03:29 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2023-10-22 16:28 - 2019-12-07 06:03 - 000524288 _____ C:\Windows\system32\config\BBI 2023-10-22 15:53 - 2023-03-06 09:58 - 000000000 ____D C:\ProgramData\Package Cache 2023-10-22 10:47 - 2019-12-07 06:14 - 000000000 ___HD C:\Program Files\WindowsApps 2023-10-22 10:47 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\AppReadiness 2023-10-22 10:41 - 2023-03-06 03:29 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-10-21 10:25 - 2023-09-23 09:14 - 000002380 _____ C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2023-10-21 10:25 - 2023-03-05 19:51 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3678229789-2673764803-1741663152-1001 2023-10-21 10:25 - 2023-03-05 19:40 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3678229789-2673764803-1741663152-1001 2023-10-20 16:15 - 2023-04-11 15:05 - 000000000 ____D C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2023-10-20 10:57 - 2023-05-05 10:53 - 000000445 _____ C:\Users\Jack\Desktop\New Text Document (2).txt 2023-10-20 10:41 - 2023-03-05 19:37 - 000000000 ____D C:\Users\Jack\AppData\Local\Packages 2023-10-20 10:41 - 2023-03-05 19:37 - 000000000 ____D C:\ProgramData\Packages 2023-10-20 10:40 - 2023-03-05 19:41 - 000000000 ____D C:\Users\Jack\AppData\Local\PlaceholderTileLogoFolder 2023-10-19 19:23 - 2023-03-05 19:42 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2023-10-19 19:23 - 2023-03-05 19:42 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2023-10-18 16:39 - 2023-03-18 10:14 - 000002364 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk 2023-10-18 16:39 - 2023-03-18 10:14 - 000002323 _____ C:\Users\Public\Desktop\Brave.lnk 2023-10-14 09:49 - 2023-03-25 13:52 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2023-10-13 13:52 - 2023-03-25 13:52 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2023-10-12 10:09 - 2019-12-07 06:03 - 000000000 ____D C:\Windows\CbsTemp 2023-10-12 09:54 - 2019-12-07 06:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2023-10-11 21:47 - 2023-03-06 03:29 - 000259896 _____ C:\Windows\system32\FNTCACHE.DAT 2023-10-11 21:46 - 2019-12-07 06:54 - 000000000 ___SD C:\Windows\system32\AppV 2023-10-11 21:46 - 2019-12-07 06:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2023-10-11 21:46 - 2019-12-07 06:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2023-10-11 21:46 - 2019-12-07 06:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ___SD C:\Windows\SysWOW64\F12 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ___SD C:\Windows\system32\UNP 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ___SD C:\Windows\system32\F12 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ___RD C:\Windows\PrintDialog 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\setup 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\oobe 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\Dism 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\Com 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\SystemResources 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\WinMetadata 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\Sysprep 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\ShellExperiences 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\setup 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\oobe 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\migwiz 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\lv-LV 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\lt-LT 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\et-EE 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\es-MX 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\Dism 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\Com 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\appraiser 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\ShellExperiences 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\ShellComponents 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\Provisioning 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\PolicyDefinitions 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\IME 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\bcastdvr 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Program Files\Windows Defender 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Program Files\Common Files\System 2023-10-11 21:46 - 2019-12-07 06:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2023-10-11 21:46 - 2019-12-07 06:03 - 000000000 ____D C:\Windows\servicing 2023-10-11 16:19 - 2023-03-11 10:13 - 000000000 ____D C:\Users\Jack\Downloads\Marketing more book 2023-10-11 16:19 - 2023-03-07 09:31 - 000000000 ____D C:\Users\Jack\AppData\LocalLow\Mozilla 2023-10-11 09:34 - 2019-12-07 06:54 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll 2023-10-11 09:34 - 2019-12-07 06:15 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll 2023-10-11 09:34 - 2019-12-07 06:14 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll 2023-10-11 09:28 - 2023-03-05 19:31 - 003014144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll 2023-10-11 09:11 - 2023-03-08 11:24 - 000000000 ____D C:\Windows\system32\MRT 2023-10-11 09:07 - 2023-03-08 11:24 - 181553176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2023-10-10 10:21 - 2023-09-01 16:25 - 000000000 ____D C:\Users\Jack\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps 2023-10-06 21:08 - 2023-03-05 19:37 - 000000000 ____D C:\Users\Jack 2023-10-06 21:07 - 2023-03-06 09:58 - 000000000 ____D C:\Users\Jack\AppData\Roaming\utorrent 2023-10-05 11:33 - 2023-03-06 03:29 - 000000000 ____D C:\Windows\system32\Drivers\wd 2023-09-28 09:32 - 2023-03-05 19:44 - 000000000 ____D C:\Users\Jack\AppData\Local\D3DSCache ==================== Files in the root of some directories ======== 2023-03-05 20:11 - 2023-03-05 20:11 - 000000023 _____ () C:\Users\Jack\AppData\Roaming\epm_user.ini 2023-04-25 14:47 - 2023-06-07 15:20 - 000001456 _____ () C:\Users\Jack\AppData\Local\Adobe Save for Web 13.0 Prefs ==================== SigCheck ============================ (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ========================