Trojan.Siggen13.54088

Technical Information

Modifies file system

Creates the following files

<Current directory>\data\xsandbox.bin.__tmp__
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\generic_uninstaller.log
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\swcuengine.log
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\gf2engine.log.tmp.36ddc699-f672-4cad-940f-a81ca7ae6ac1
\gf2engine.log
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\swhealthex2.dll
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\swhealthex2.dll.__meta__.__tmp__
<Current directory>\data\roaming\modified\@programfilesx86@\avast software\avast cleanup\swhealthex.log
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\tuprogmanagercache.10.tudb
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\tuprogman.10.tudb
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\opm.log.tmp.535c8ac2-484d-406d-aa11-6fdd73059def
\opm.log
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\setup\servers.def
<Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\servers.def.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupui.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupui.exe.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}
<Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe.__tmp__
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040.__meta__.__tmp__
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033.__meta__.__tmp__
<Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\setup.ini.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\setup\config.def
<Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\config.def.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\event_manager.log.tmp.e95249b4-be1a-46c0-a6a9-674ee43523a3
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\burger_client.dll
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\burger_client.dll.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\tuneupcfg.ini
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\tuneupcfg.ini.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\tuneupsvc.log.tmp.6739635a-286a-4afe-a939-748c25c72608
\tuneupsvc.log
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\event_manager.log
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4
<Current directory>\data\local\temp\@appdatacommon@\avast software\subscriptions\license.avastgf
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\subscriptions\license.avastgf.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\tuneupcfg.ini
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\swcuengine.log.tmp.4cf2f551-66ae-4010-ae34-9ba52c893a17
\swcuengine.log
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}.__meta__.__tmp__
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040
<Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe.manifest.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\avchrome.dll
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\avchrome.dll.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\cookies
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\index
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\data_0
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\data_1
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\data_2
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\data_3
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\resources\dist\app-build.js
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\resources\dist\app-build.js.__meta__.__tmp__
%TEMP%\bcltmp\chrome\default\cookies
%TEMP%\bcltmp\chrome\default\history
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\ffl2.dat
%TEMP%\bcltmp\firefox\default\cookies.sqlite
%TEMP%\bcltmp\firefox\default\places.sqlite
%TEMP%\bcltmp\firefox\default\places.sqlite-shm
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\local storage\https_local.avast.com_0.localstorage-journal
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\local storage\https_local.avast.com_0.localstorage
%TEMP%\bcltmp\opera\cookies
%TEMP%\bcltmp\opera\history
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\log\bcuengine.log
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\log\bcuengine.log.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\bcuengine.log
%WINDIR%\temp\cabd3c2.tmp
%WINDIR%\temp\tard3c3.tmp
<Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\ffl2.dat
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\ffl2.dat.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\cookies-journal
%TEMP%\etilqs_3diogcmstku4pbh
<Current directory>\data\local\temp\2784_00700000_tls.dll
<Current directory>\data\local\temp\2784_6da80000_tls.dll
<Current directory>\data\roaming\modified\@appdata@\avast software\cleanup\cache\visited links
<Current directory>\data\local\temp\2024_00700000_tls.dll
<Current directory>\data\local\meta\@appdatacommon@\avast software\tuneup.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\libcef.dll
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\libcef.dll.__meta__.__tmp__
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\setup.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\libcrypto-1_1.dll
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\libcrypto-1_1.dll.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\autoreactivator.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\autoreactivator.exe.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\avbugreport.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\avbugreport.exe.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\gf2hlp.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\gf2hlp.exe.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\setup\setup.ini
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tulogcollector.exe.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tulogcollector.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupdate.exe.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupuninst.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupuninst.exe.__meta__.__tmp__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\tuneupui.log.tmp.24d7f00d-a386-4a11-9b0a-cbc6b13eb76d
\tuneupui.log
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\icudtl.dat
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\icudtl.dat.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\cef.pak
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\cef.pak.__meta__.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\cef_extensions.pak
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\cef_extensions.pak.__meta__.__tmp__
<Current directory>\data\local\temp\@appdata@\avast software\cleanup\cache\chromedwritefontcache
<Current directory>\data\local\meta\@appdata@\avast software\cleanup\cache\chromedwritefontcache.__meta__.__tmp__
<Current directory>\data\local\temp\2024_6da80000_tls.dll
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupdate.exe
%TEMP%\bcltmp\firefox\default\cookies.sqlite-shm
<Current directory>\data\local\temp\2828_65640000_tls.dll
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-time-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\autoreactivator.exe_0xbfa2117b1b2a3e8419bc628745944fe8.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avbugreport.exe_0x480ab8f2ac2e2205c1f752c0f546301d.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avchrome.dll_0x55e673faee7c7bc6032d55fa006c9ff7.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avdump.exe_0x4278a5466b82e0ea76bbd8a840d839e2.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\burger_client.dll_0x0387270646f5f9c12a4b60a80e2d06f3.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\commchannel.dll_0xd9d693c1f5b9173a0f06b9f81130059d.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\commonui.dll_0x765013656fa95e8001fe113fbff5aa5a.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\dll_loader.dll_0x6ad0ebec41f577aa96b173057c1ae550.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_manager.dll_0x050b8523e9ebd74baa2ecbb027479267.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_manager_burger.dll_0xca82d7cc1de20021ac64a45262a90ab1.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_routing.dll_0x90f3d6197856a745ce4480a4a6a02e7d.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_routing_rpc.dll_0x006bab3b6fa35873780ede2915851123.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\ffl2.dll_0xf21840243e82ea0184cb293bdd57b6e7.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\gf2hlp.exe_0x2e3b393085a0c34f0565f4fdcaab744c.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\gf2hlp.exe_0x313303924e07645e250c28efdb8bf298.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libcef.dll_0xfd2510710349cabe33c19ed95fb56cf9.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libcrypto-1_1.dll_0x2d8063c4fd27b47506119d3383b9bc80.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libegl.dll_0x644bf0c5c7aa753f2d2061f963fc7eb8.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libglesv2.dll_0x569469e75c387aaadc67cf68e402a590.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\log.dll_0x03b96b88f380d1b3f520bc9e88612cc8.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\module_lifetime.dll_0xc48a6f593e6090463dcf461a6b67b765.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\network_notifications.dll_0x5d2bb70e7291d9f88a8d861e76bcc3b0.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\swhealthex2.dll_0xb4b136a998c77a9e5679183bf665155c.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tasks_core.dll_0x090b0c91ef9f77ff05054ed4daa6092b.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tulogcollector.exe_0x1e7dece77701d5d20c195be941f6aa19.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupdate.exe_0xc34dd7294bed10b8aa9efa83e4298151.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupsvc.exe_0xb1451a6a52e15717d7f39d63c1ad4c86.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupui.exe_0xfea3d494996a4a94be1c62a700878f55.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupuninst.exe_0x6658415c907e51c6515bccd63dcd87be.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswproperty.dll_0xdca4691981c2ff16e79ab6f81aa7283c.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupuninstdeleter.exe_0x5b1760ac0126ef1f98ec09e7202fe5d2.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswip.dll_0x843bbf23d47e890d29c2f70cb11546a7.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnis.dll_0x2dc9cec3617a7e73d6bce6776991ece5.2.manifest.__tmp__
<Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupsvc.exe
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupsvc.exe.__meta__.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\asulaunch.exe\asulaunch.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnbs.dll\aswcmnbs.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnis.dll\aswcmnis.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnos.dll\aswcmnos.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswip.dll\aswip.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswproperty.dll\aswproperty.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\autoreactivator.exe\autoreactivator.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avbugreport.exe\avbugreport.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avchrome.dll\avchrome.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avdump.exe\avdump.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\burger_client.dll\burger_client.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\commchannel.dll\commchannel.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\commonui.dll\commonui.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\dll_loader.dll\dll_loader.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_manager.dll\event_manager.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_manager_burger.dll\event_manager_burger.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_routing.dll\event_routing.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_routing_rpc.dll\event_routing_rpc.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\ffl2.dll\ffl2.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\gf2hlp.exe\gf2hlp.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libcef.dll\libcef.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libcrypto-1_1.dll\libcrypto-1_1.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libegl.dll\libegl.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libglesv2.dll\libglesv2.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\log.dll\log.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\asulaunch.exe_0xe02e241751b789f124ac84521a918722.1.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnbs.dll_0x290d795e0a9e2e2ad9ed042398b8ce00.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnos.dll_0x7ed4a596620251efc58545e874abce4f.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\vaarclient.dll_0x0dc1513afe70210ff735f238430c4bee.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\widevinecdmadapter.dll_0x079f7bd7ae3e309bf7cd893e43be70c8.2.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\module_lifetime.dll\module_lifetime.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-util-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-conio-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-convert-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-environment-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-filesystem-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-heap-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-locale-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-math-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-multibyte-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-private-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-process-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-runtime-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-stdio-l1-1-0.dll.__tmp__
<Current directory>\data\local\temp\2828_00400000_tls.dll
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-string-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-utility-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\avast.vc140.crt.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\concrt140.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\msvcp140.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\ucrtbase.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\vcruntime140.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\x86_avast.vc140.crt@14.0.24210.0.manifest.__tmp__
<Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe.__tmp__
<Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\shallow\droidsansmono.ttf_0x07fb242045610cbef1df5de723331653.ttf.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-bold-webfont.ttf_0x86e3e34dc6d3fdca55ec97030717dfcc.ttf.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-light-webfont.ttf_0x44b3f6c24f56f8748a253c96ad437d4c.ttf.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-regular-webfont.ttf_0x1db429db8bb535bb03d4cb1188d2fa72.ttf.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-sysinfo-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-timezone-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-synch-l1-2-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-synch-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-string-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\swhealthex2.dll\swhealthex2.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tasks_core.dll\tasks_core.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tulogcollector.exe\tulogcollector.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupdate.exe\tuneupdate.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupsvc.exe\tuneupsvc.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupui.exe\tuneupui.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupuninst.exe\tuneupuninst.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupuninstdeleter.exe\tuneupuninstdeleter.exe.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\vaarclient.dll\vaarclient.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\widevinecdmadapter.dll\widevinecdmadapter.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-console-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-datetime-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-debug-l1-1-0.dll.__tmp__
<Current directory>\data\local\temp\2828_00e70000_tls.dll
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-errorhandling-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l2-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-handle-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-heap-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-interlocked-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-libraryloader-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-localization-l1-2-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-memory-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-namedpipe-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processenvironment-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processthreads-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processthreads-l1-1-1.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-profile-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-rtlsupport-l1-1-0.dll.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\network_notifications.dll\network_notifications.dll.manifest.__tmp__
%TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l1-2-0.dll.__tmp__
<Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup.__meta__.__tmp__

Deletes the following files

<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1
%TEMP%\bcltmp\firefox\default\places.sqlite-shm
%TEMP%\bcltmp\firefox\default\cookies.sqlite-shm
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}.__meta__
<Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
<Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1.__meta__
%WINDIR%\temp\cabd3c2.tmp
%WINDIR%\temp\tard3c3.tmp

Moves the following files

from <Current directory>\data\xsandbox.bin.__tmp__ to <Current directory>\data\xsandbox.bin
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\burger_client\8866f8a9-70c9-43a2-bfbe-ee00aa2dc417\44ed97c8-2d40-4a50-913d-673f6858b9af.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4 to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\burger_client\825e3dd4-926b-4eb9-a66e-9f88aad28a0f\b3da00ba-fb3d-4e93-ae07-00f15aee39a4.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\subscriptions\license.avastgf to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\subscriptions\license.avastgf
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\subscriptions\license.avastgf.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\subscriptions\license.avastgf.__meta__
from <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\swcuengine.log.tmp.4cf2f551-66ae-4010-ae34-9ba52c893a17 to \swcuengine.log
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1 to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{075cc190-59ee-499f-828b-0b5c098c8c15}_is1.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\x86_avast.vc140.crt@14.0.24210.0.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\x86_avast.vc140.crt@14.0.24210.0.manifest
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}.__meta__
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033 to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1033.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040 to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{92fb6c44-e685-45ad-9b20-cadf4caba132} - 1040.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{9be518e6-ecc6-35a9-88e4-87755c07200f}.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\tuneupcfg.ini.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\tuneupcfg.ini.__meta__
from <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\tuneupsvc.log.tmp.6739635a-286a-4afe-a939-748c25c72608 to \tuneupsvc.log
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\tuneupcfg.ini to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\tuneupcfg.ini
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\burger_client.dll.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\burger_client.dll.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\burger_client.dll to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\burger_client.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-process-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-process-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-runtime-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-runtime-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-stdio-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-stdio-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-string-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-string-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-time-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-time-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-utility-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-utility-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\avast.vc140.crt.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\avast.vc140.crt.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\concrt140.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\concrt140.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\msvcp140.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\msvcp140.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\ucrtbase.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\ucrtbase.dll
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{ec9c2282-a836-48a6-9e41-c2f0bf8d678b}.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{74d0e5db-b326-4dae-a6b2-445b9de1836e}
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\vcruntime140.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\vcruntime140.dll
from <Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe.manifest.__tmp__ to <Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\droidsansmono.ttf_0x07fb242045610cbef1df5de723331653.ttf.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\droidsansmono.ttf_0x07fb242045610cbef1df5de723331653.ttf
from %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-bold-webfont.ttf_0x86e3e34dc6d3fdca55ec97030717dfcc.ttf.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-bold-webfont.ttf_0x86e3e34dc6d3fdca55ec97030717dfcc.ttf
from %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-light-webfont.ttf_0x44b3f6c24f56f8748a253c96ad437d4c.ttf.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-light-webfont.ttf_0x44b3f6c24f56f8748a253c96ad437d4c.ttf
from %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-regular-webfont.ttf_0x1db429db8bb535bb03d4cb1188d2fa72.ttf.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\shallow\proximanova-regular-webfont.ttf_0x1db429db8bb535bb03d4cb1188d2fa72.ttf
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\setup\setup.ini to <Current directory>\data\roaming\modified\@programfilesx86@\avast software\avast cleanup\setup\setup.ini
from <Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\setup.ini.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\setup.ini.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\setup\config.def to <Current directory>\data\roaming\modified\@programfilesx86@\avast software\avast cleanup\setup\config.def
from <Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\config.def.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\config.def.__meta__
from <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\event_manager.log.tmp.e95249b4-be1a-46c0-a6a9-674ee43523a3 to \event_manager.log
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-private-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-private-l1-1-0.dll
from <Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe.__tmp__ to <Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupui.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupui.exe.__meta__
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\ffl2.dat.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\ffl2.dat.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tulogcollector.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\tulogcollector.exe
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tulogcollector.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tulogcollector.exe.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupdate.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\tuneupdate.exe
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupdate.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupdate.exe.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupuninst.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\tuneupuninst.exe
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupuninst.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupuninst.exe.__meta__
from <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\tuneupui.log.tmp.24d7f00d-a386-4a11-9b0a-cbc6b13eb76d to \tuneupui.log
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\icudtl.dat to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\icudtl.dat
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\icudtl.dat.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\icudtl.dat.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\cef.pak to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\cef.pak
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a} to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\cef.pak.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\cef.pak.__meta__
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\cef_extensions.pak.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\cef_extensions.pak.__meta__
from <Current directory>\data\local\temp\@appdata@\avast software\cleanup\cache\chromedwritefontcache to <Current directory>\data\local\modified\@appdata@\avast software\cleanup\cache\chromedwritefontcache
from <Current directory>\data\local\meta\@appdata@\avast software\cleanup\cache\chromedwritefontcache.__meta__.__tmp__ to <Current directory>\data\local\meta\@appdata@\avast software\cleanup\cache\chromedwritefontcache.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\resources\dist\app-build.js to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\resources\dist\app-build.js
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\resources\dist\app-build.js.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\resources\dist\app-build.js.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\gf2engine\gf2engine.ini.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\log\bcuengine.log to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\bcuengine.log
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\log\bcuengine.log.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\log\bcuengine.log.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\ffl2.dat to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\ffl2.dat
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\gf2hlp.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\gf2hlp.exe
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\gf2hlp.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\gf2hlp.exe.__meta__
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\avbugreport.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\avbugreport.exe.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\avbugreport.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\avbugreport.exe
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\autoreactivator.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\autoreactivator.exe.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\oracle vm virtualbox guest additions.__meta__
from <Current directory>\data\local\temp\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log to <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\log\bcuengine-trace.log.__meta__
from <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\gf2engine.log.tmp.36ddc699-f672-4cad-940f-a81ca7ae6ac1 to \gf2engine.log
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\swhealthex2.dll to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\swhealthex2.dll
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\swhealthex2.dll.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\swhealthex2.dll.__meta__
from <Current directory>\data\roaming\modified\@appdatacommon@\avast software\tuneup\log\opm.log.tmp.535c8ac2-484d-406d-aa11-6fdd73059def to \opm.log
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\setup\servers.def to <Current directory>\data\roaming\modified\@programfilesx86@\avast software\avast cleanup\setup\servers.def
from <Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\servers.def.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@programfilesx86@\avast software\avast cleanup\setup\servers.def.__meta__
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}.__meta__
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-multibyte-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-multibyte-l1-1-0.dll
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupui.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\tuneupui.exe
from <Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe.manifest.__tmp__ to <Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe.manifest
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\avchrome.dll to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\avchrome.dll
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\avchrome.dll.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\avchrome.dll.__meta__
from <Current directory>\data\local\meta\@appdatacommon@\avast software\tuneup.__meta__.__tmp__ to <Current directory>\data\local\meta\@appdatacommon@\avast software\tuneup.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\libcef.dll to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\libcef.dll
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\libcef.dll.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\libcef.dll.__meta__
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\setup.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\setup.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\libcrypto-1_1.dll to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\libcrypto-1_1.dll
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\libcrypto-1_1.dll.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\libcrypto-1_1.dll.__meta__
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\autoreactivator.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\autoreactivator.exe
from <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}.__meta__.__tmp__ to <Current directory>\data\roaming\meta\@appdatacommon@\avast software\tuneup\cache\installlocation\{f0c3e5d1-1ade-321e-8167-68ef0de699a5}.__meta__
from <Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe.__tmp__ to <Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\cef_extensions.pak to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\cef_extensions.pak
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-math-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-math-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-rtlsupport-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-rtlsupport-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnis.dll_0x2dc9cec3617a7e73d6bce6776991ece5.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnis.dll_0x2dc9cec3617a7e73d6bce6776991ece5.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnos.dll_0x7ed4a596620251efc58545e874abce4f.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnos.dll_0x7ed4a596620251efc58545e874abce4f.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswip.dll_0x843bbf23d47e890d29c2f70cb11546a7.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswip.dll_0x843bbf23d47e890d29c2f70cb11546a7.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswproperty.dll_0xdca4691981c2ff16e79ab6f81aa7283c.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswproperty.dll_0xdca4691981c2ff16e79ab6f81aa7283c.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\autoreactivator.exe_0xbfa2117b1b2a3e8419bc628745944fe8.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\autoreactivator.exe_0xbfa2117b1b2a3e8419bc628745944fe8.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avbugreport.exe_0x480ab8f2ac2e2205c1f752c0f546301d.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avbugreport.exe_0x480ab8f2ac2e2205c1f752c0f546301d.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avchrome.dll_0x55e673faee7c7bc6032d55fa006c9ff7.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avchrome.dll_0x55e673faee7c7bc6032d55fa006c9ff7.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avdump.exe_0x4278a5466b82e0ea76bbd8a840d839e2.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\avdump.exe_0x4278a5466b82e0ea76bbd8a840d839e2.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\burger_client.dll_0x0387270646f5f9c12a4b60a80e2d06f3.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\burger_client.dll_0x0387270646f5f9c12a4b60a80e2d06f3.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\commchannel.dll_0xd9d693c1f5b9173a0f06b9f81130059d.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\commchannel.dll_0xd9d693c1f5b9173a0f06b9f81130059d.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\burger_client.dll\burger_client.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\burger_client.dll\burger_client.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\commonui.dll_0x765013656fa95e8001fe113fbff5aa5a.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\commonui.dll_0x765013656fa95e8001fe113fbff5aa5a.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_manager.dll_0x050b8523e9ebd74baa2ecbb027479267.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_manager.dll_0x050b8523e9ebd74baa2ecbb027479267.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_manager_burger.dll_0xca82d7cc1de20021ac64a45262a90ab1.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_manager_burger.dll_0xca82d7cc1de20021ac64a45262a90ab1.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_routing.dll_0x90f3d6197856a745ce4480a4a6a02e7d.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_routing.dll_0x90f3d6197856a745ce4480a4a6a02e7d.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_routing_rpc.dll_0x006bab3b6fa35873780ede2915851123.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\event_routing_rpc.dll_0x006bab3b6fa35873780ede2915851123.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\ffl2.dll_0xf21840243e82ea0184cb293bdd57b6e7.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\ffl2.dll_0xf21840243e82ea0184cb293bdd57b6e7.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\gf2hlp.exe_0x2e3b393085a0c34f0565f4fdcaab744c.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\gf2hlp.exe_0x2e3b393085a0c34f0565f4fdcaab744c.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\gf2hlp.exe_0x313303924e07645e250c28efdb8bf298.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\gf2hlp.exe_0x313303924e07645e250c28efdb8bf298.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libcef.dll_0xfd2510710349cabe33c19ed95fb56cf9.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libcef.dll_0xfd2510710349cabe33c19ed95fb56cf9.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libcrypto-1_1.dll_0x2d8063c4fd27b47506119d3383b9bc80.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libcrypto-1_1.dll_0x2d8063c4fd27b47506119d3383b9bc80.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libegl.dll_0x644bf0c5c7aa753f2d2061f963fc7eb8.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libegl.dll_0x644bf0c5c7aa753f2d2061f963fc7eb8.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\asulaunch.exe_0xe02e241751b789f124ac84521a918722.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\asulaunch.exe_0xe02e241751b789f124ac84521a918722.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnbs.dll_0x290d795e0a9e2e2ad9ed042398b8ce00.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\aswcmnbs.dll_0x290d795e0a9e2e2ad9ed042398b8ce00.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\log.dll\log.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\log.dll\log.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libglesv2.dll\libglesv2.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libglesv2.dll\libglesv2.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libegl.dll\libegl.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libegl.dll\libegl.dll.manifest
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupsvc.exe.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup\tuneupsvc.exe.__meta__
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\asulaunch.exe\asulaunch.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\asulaunch.exe\asulaunch.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnbs.dll\aswcmnbs.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnbs.dll\aswcmnbs.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnis.dll\aswcmnis.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnis.dll\aswcmnis.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnos.dll\aswcmnos.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswcmnos.dll\aswcmnos.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswip.dll\aswip.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswip.dll\aswip.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswproperty.dll\aswproperty.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\aswproperty.dll\aswproperty.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\autoreactivator.exe\autoreactivator.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\autoreactivator.exe\autoreactivator.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avbugreport.exe\avbugreport.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avbugreport.exe\avbugreport.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avchrome.dll\avchrome.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avchrome.dll\avchrome.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libglesv2.dll_0x569469e75c387aaadc67cf68e402a590.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\libglesv2.dll_0x569469e75c387aaadc67cf68e402a590.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\dll_loader.dll_0x6ad0ebec41f577aa96b173057c1ae550.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\dll_loader.dll_0x6ad0ebec41f577aa96b173057c1ae550.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avdump.exe\avdump.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\avdump.exe\avdump.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\commonui.dll\commonui.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\commonui.dll\commonui.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\dll_loader.dll\dll_loader.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\dll_loader.dll\dll_loader.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_manager.dll\event_manager.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_manager.dll\event_manager.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_manager_burger.dll\event_manager_burger.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_manager_burger.dll\event_manager_burger.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_routing.dll\event_routing.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_routing.dll\event_routing.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_routing_rpc.dll\event_routing_rpc.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\event_routing_rpc.dll\event_routing_rpc.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\ffl2.dll\ffl2.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\ffl2.dll\ffl2.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\gf2hlp.exe\gf2hlp.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\gf2hlp.exe\gf2hlp.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libcef.dll\libcef.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libcef.dll\libcef.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libcrypto-1_1.dll\libcrypto-1_1.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\libcrypto-1_1.dll\libcrypto-1_1.dll.manifest
from <Current directory>\data\local\temp\@programfilesx86@\avast software\avast cleanup\tuneupsvc.exe to <Current directory>\data\local\modified\@programfilesx86@\avast software\avast cleanup\tuneupsvc.exe
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\commchannel.dll\commchannel.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\commchannel.dll\commchannel.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\swhealthex2.dll\swhealthex2.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\swhealthex2.dll\swhealthex2.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-heap-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-heap-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\network_notifications.dll_0x5d2bb70e7291d9f88a8d861e76bcc3b0.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\network_notifications.dll_0x5d2bb70e7291d9f88a8d861e76bcc3b0.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-handle-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-handle-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-heap-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-heap-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-interlocked-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-interlocked-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-libraryloader-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-libraryloader-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-localization-l1-2-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-localization-l1-2-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-memory-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-memory-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-namedpipe-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-namedpipe-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processenvironment-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processenvironment-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processthreads-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processthreads-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processthreads-l1-1-1.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-processthreads-l1-1-1.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\log.dll_0x03b96b88f380d1b3f520bc9e88612cc8.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\log.dll_0x03b96b88f380d1b3f520bc9e88612cc8.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-profile-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-profile-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-string-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-string-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-synch-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-synch-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-synch-l1-2-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-synch-l1-2-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-sysinfo-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-sysinfo-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-timezone-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-timezone-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-util-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-util-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-conio-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-conio-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-convert-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-convert-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-environment-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-environment-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-filesystem-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-filesystem-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l1-2-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l1-2-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l2-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l2-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-file-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-errorhandling-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-errorhandling-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-debug-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-debug-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tasks_core.dll_0x090b0c91ef9f77ff05054ed4daa6092b.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tasks_core.dll_0x090b0c91ef9f77ff05054ed4daa6092b.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tulogcollector.exe_0x1e7dece77701d5d20c195be941f6aa19.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tulogcollector.exe_0x1e7dece77701d5d20c195be941f6aa19.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupdate.exe_0xc34dd7294bed10b8aa9efa83e4298151.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupdate.exe_0xc34dd7294bed10b8aa9efa83e4298151.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupsvc.exe_0xb1451a6a52e15717d7f39d63c1ad4c86.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupsvc.exe_0xb1451a6a52e15717d7f39d63c1ad4c86.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupui.exe_0xfea3d494996a4a94be1c62a700878f55.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupui.exe_0xfea3d494996a4a94be1c62a700878f55.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupuninst.exe_0x6658415c907e51c6515bccd63dcd87be.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupuninst.exe_0x6658415c907e51c6515bccd63dcd87be.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupuninstdeleter.exe_0x5b1760ac0126ef1f98ec09e7202fe5d2.1.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\tuneupuninstdeleter.exe_0x5b1760ac0126ef1f98ec09e7202fe5d2.1.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\vaarclient.dll_0x0dc1513afe70210ff735f238430c4bee.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\vaarclient.dll_0x0dc1513afe70210ff735f238430c4bee.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\widevinecdmadapter.dll_0x079f7bd7ae3e309bf7cd893e43be70c8.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\widevinecdmadapter.dll_0x079f7bd7ae3e309bf7cd893e43be70c8.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\module_lifetime.dll\module_lifetime.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\module_lifetime.dll\module_lifetime.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\module_lifetime.dll_0xc48a6f593e6090463dcf461a6b67b765.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\module_lifetime.dll_0xc48a6f593e6090463dcf461a6b67b765.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-locale-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-crt-locale-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\network_notifications.dll\network_notifications.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\network_notifications.dll\network_notifications.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tulogcollector.exe\tulogcollector.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tulogcollector.exe\tulogcollector.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupdate.exe\tuneupdate.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupdate.exe\tuneupdate.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupsvc.exe\tuneupsvc.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupsvc.exe\tuneupsvc.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupui.exe\tuneupui.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupui.exe\tuneupui.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupuninst.exe\tuneupuninst.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupuninst.exe\tuneupuninst.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupuninstdeleter.exe\tuneupuninstdeleter.exe.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tuneupuninstdeleter.exe\tuneupuninstdeleter.exe.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\vaarclient.dll\vaarclient.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\vaarclient.dll\vaarclient.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\widevinecdmadapter.dll\widevinecdmadapter.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\widevinecdmadapter.dll\widevinecdmadapter.dll.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-console-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-console-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-datetime-l1-1-0.dll.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\x86_avast.vc140.crt@14.0.24210.0\api-ms-win-core-datetime-l1-1-0.dll
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\swhealthex2.dll_0xb4b136a998c77a9e5679183bf665155c.2.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\manifests\swhealthex2.dll_0xb4b136a998c77a9e5679183bf665155c.2.manifest
from %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tasks_core.dll\tasks_core.dll.manifest.__tmp__ to %TEMP%\spoon\cache\0x1d46794054ed389d\sxs\tasks_core.dll\tasks_core.dll.manifest
from <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup.__meta__.__tmp__ to <Current directory>\data\local\meta\@programfilesx86@\avast software\avast cleanup.__meta__

Substitutes the following files

%TEMP%\bcltmp\firefox\default\places.sqlite-shm

Network activity

Connects to

'an#####cs.ff.avast.com':80
'au##.#f.avast.com':443
'ss#.####le-analytics.com':443
'al#####qs.ff.avast.com':80
'microsoft.com':80

TCP

HTTP POST requests

http://an#####cs.ff.avast.com/receive3
http://al#####qs.ff.avast.com/inifile

Other

'au##.#f.avast.com':443
'ss#.####le-analytics.com':443

UDP

DNS ASK an#####cs.ff.avast.com
DNS ASK au##.#f.avast.com
DNS ASK ss#.####le-analytics.com
DNS ASK al#####qs.ff.avast.com
DNS ASK microsoft.com

Miscellaneous

Searches for the following windows

ClassName: 'Chrome_WidgetWin_0' WindowName: ''
ClassName: '' WindowName: 'Chrome Legacy Window'

Creates and executes the following

'<Current directory>\data\local\stubexe\0x162f846179c6643f\tuneupsvc.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8
'<Current directory>\data\local\stubexe\0x8807a64ca6d58712\tuneupui.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial