nortonsafe.search.ask.com

curl.se

symevent64x86.cat

regid.1991-06.com.microsoft

nortonlifelock.norton

c:\program files\avast software\avast\avastsvc.exe

c:\program files\malwarebytes\anti-malware\mbamservice.exe

widgets.exe

xtendutilityservice.exe

cui_dch.inf

c:\windows\system32\driverstore\filerepository\cui_dch.inf

explorer.exe

c:\windows\system32\driverstore\filerepository\wavesapo77ac.inf

services.exe

c:\program files\avast software\avast\aswidsagent.exe

c:\program files\avast software\avast\wsc_proxy.exe

c:\program files\avast software\driver updater\driverupdsvc.exe

c:\windows\system32\veracrypt.exe

intelcphdcpsvc.exe

presentationfontcache.exe

nortonsecurity.exe

c:\windows\system32\driverstore\filerepository\nvacegpu.inf

c:\windows\system32\rtkauduservice64.exe

c:\windows\system32\drivers\rivetnetworks\killer\xtendutilityservice.exe

svchost.exe

c:\windows\immersivecontrolpanel\systemsettings.exe

avastui.exe

c:\windows\system32\onedrivesetup.exe

%windir%\system32\sc.exe

c:\program files\avast software\secureline vpn\vpnupdate.exe

c:\program files\common files\avast software\overseer\overseer.exe

c:\program files\common files\avast software\icarus\avast-tu\icarus.exe

c:\program files\avast software\cleanup\avbugreport.exe

c:\program files\common files\av\norton 360\upgrade.exe

c:\program files\avast software\secureline vpn\avbugreport.exe

c:\program files\common files\avast software\icarus\avast-vpn\icarus.exe

c:\windows\system32\inventorysvc.dll

c:\windows\system32\tabsvc.dll

msmpeng.exe

c:\windows\system32\drivers\rivetnetworks\killer\xtendsoftapservice.exe

c:\windows\system32\drivers\acerairplanemodecontroller.sys

c:\windows\system32\drivers\aswarpot.sys

c:\windows\system32\drivers\aswbidsh.sys

c:\windows\system32\drivers\aswelam.sys

c:\windows\system32\drivers\aswmonflt.sys

c:\windows\system32\drivers\aswrdr2.sys

c:\windows\system32\drivers\aswsnx.sys

c:\windows\system32\drivers\aswstm.sys

c:\windows\system32\drivers\aswvpnrdr.sys

bhdrvx64.sys

eectrl64.sys

c:\windows\system32\drivers\mbae64.sys

genpass.sys

c:\windows\system32\drivers\rivetnetworks\killer\kfeco10x64.sys

c:\windows\system32\drivers\mbamelam.sys

c:\windows\system32\drivers\mbam.sys

c:\windows\system32\drivers\mwac.sys

c:\windows\system32\drivers\pvscsii.sys

srtsp64.sys

symefasi64.sys

c:\windows\system32\drivers\symevent64x86.sys

ironx64.sys

c:\windows\system32\drivers\veracrypt.sys

c:\windows\system32\drivers\wd\wdfilter.sys

wpctrldrv.sys

winsetupmon.sys

c:\users\henry\downloads\frst64.exe

c:\windows\system32\intelihvrouter08.dll

c:\windows\system32\perfstringbackup.ini

c:\windows\system32\tasks\avast emergency update 2022-11-23 21:01 - 2022-11-23 21:01 - 000011433 _____ c:\windows\diagwrn.xml

c:\windows\system32\tasks\microsoftedgeupdatetaskmachineua 2022-11-23 21:01 - 2022-11-23 21:01 - 000003240 _____ c:\windows\system32\tasks\microsoftedgeupdatetaskmachinecore 2022-11-23 21:01 - 2022-11-23 21:01 - 000003066 _____ c:\windows\system32\tasks\onedrive reporting task-s-1-5-21-1327980298-1667911545-2908986163-1001 2022-11-23 21:01 - 2022-11-23 21:01 - 000002862 _____ c:\windows\system32\tasks\onedrive standalone update task-s-1-5-21-1327980298-1667911545-2908986163-1001 2022-11-23 21:01 - 2022-11-23 21:01 - 000002612 _____ c:\windows\system32\tasks\norton wsc integration 2022-11-23 21:01 - 2022-11-23 21:01 - 000000020 ___sh c:\users\henry\ntuser.ini

c:\windows\system32\fntcache.dat

c:\windows\syswow64\icu.dll

c:\windows\syswow64\curl.exe

c:\windows\system32\hvsimanagementapi.dll

c:\windows\system32\sfape.dll

c:\windows\system32\cloudidwxhextension.dll

c:\windows\system32\dplcsp.dll

c:\windows\system32\wow64base.dll

14_log.txt

c:\programdata\veracrypt 2022-11-21 00:40 - 2022-11-21 00:40 - 002040945 _____ c:\users\henry\onedrive\documents\veracrypt rescue disk.zip

c:\windows\system32\drivers\wd 2022-11-20 21:10 - 2022-11-24 23:23 - 000012288 ___sh c:\dumpstack.log

c:\windows\system32\rtkapi64u.dll

c:\windows\system32\rtkcfg64.dll

c:\windows\system32\vulkaninfo.exe

c:\windows\syswow64\vulkaninfo.exe

c:\windows\system32\vulkan-1.dll

c:\windows\syswow64\vulkan-1.dll

c:\windows\syswow64\nvofapi.dll

c:\windows\syswow64\nvcuvid.dll

c:\windows\system32\nvcuda.dll

c:\windows\syswow64\nvfbc.dll

c:\windows\syswow64\nvifr.dll

c:\windows\system32\nvmcumd.dll

c:\windows\system32\nvifropengl.dll

c:\windows\system32\nvidia-smi.exe

c:\windows\system32\nvdebugdump.exe

c:\windows\system32\mcu.exe

c:\windows\syswow64\nvapi.dll

c:\windows\system32\mfx_mft_h265ve_64.dll

c:\windows\system32\mfx_mft_h264ve_64.dll

c:\windows\syswow64\mfx_mft_vp9ve_32.dll

c:\windows\syswow64\libmfxhw32.dll

c:\windows\syswow64\mfx_mft_h264ve_32.dll

c:\windows\system32\intel_gfx_api-x64.dll

c:\windows\system32\mfxplugin64_hw.dll

c:\windows\system32\mfx_mft_mjpgvd_64.dll

c:\windows\syswow64\libglesv2.dll

c:\windows\syswow64\libegl.dll

c:\windows\syswow64\intel_opencl_icd32.dll

c:\windows\system32\drivers\rtaiodat.dat

c:\windows\syswow64\opencl.dll

c:\windows\system32\opencl.dll

onedrivesetup.exe

client.core

c:\program files\avast software\avast\ashshell.dll

c:\program files\malwarebytes\anti-malware\mbshlext.dll

aswsp.sys

spotify.exe

c:\users\henry\appdata\local\temp\bittorrent\bittorrent.exe

securityhealthservice.exe

c:\windows\system32\securityhealthservice.exe

mbae64.dll

symamsi.dll

addition.txt

208.94.176.20

10.255.0.0

5.68.0.0

https://nortonsafe.search.ask.com/web?omnisearch=yes&q={searchterms}

https://curl.se

HKLM\SOFTWARE\Microsoft\Windows

HKU\S-1-5-20\...\Run

HKLM\SOFTWARE\Policies\Mozilla\Firefox

HKLM\...\Avast

HKLM-x32\...\Microsoft

HKLM-x32

HKLM-x32\...\VeraCrypt

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HidSpiCx.sys

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HidSpiCx.sys

HKU\S-1-5-21-1327980298-1667911545-2908986163-1001\Control

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer