Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

unable to enter antivirus homepages and use malwarebytes on normal [So

Started by mavol6 , Dec 28 2015 10:26 AM

This topic is locked

#1
mavol6

Posted 28 December 2015 - 10:26 AM

New Member

Member
4 posts

good day, im currently having this problem for months, i realized my avast stopped working (it used to show on the notification area but it didnt respond or provide with anything) so i decided to uninstall and try it again but im unable to enter the avast page to download the new version. i tried passing the file to install it but it didnt work.

i tried malwarebytes but it only works on safe mode without networking. other programs i used while checking this forum were adwcleaner, mcshield and rkill, they removed a good amount of malware but im still unable to get a new AV or use malwarebytes on normal.

so i need help to get this fixed, and atleast get some protection on my computer.

here is frst logs:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:28-12-2015

Ran by jcvielma (administrator) on JCVIELMA-LAPTOP (28-12-2015 11:31:17)

Running from C:\Users\jcvielma\Desktop

Loaded Profiles: jcvielma (Available Profiles: jcvielma)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: English (United States)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

() C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe

(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UDSA.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

() C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.1\GoogleCrashHandler64.exe

(TOSHIBA Corporation) C:\Windows\System32\ThpSrv.exe

(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE

() C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE

(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe

(Intel Corporation) C:\Windows\System32\igfxtray.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe

() C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Microsoft Corporation) C:\Windows\SysWOW64\MDM.EXE

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Oracle Corporation) C:\Program Files\Java\jre1.8.0_25\bin\jp2launcher.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11663976 2010-12-09] (Realtek Semiconductor)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2186856 2010-12-10] (Realtek Semiconductor)

HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1933584 2010-12-07] (Intel® Corporation)

HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)

HKLM-x32\...\Run: [] => [X]

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)

Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\Portable\DAEMON Tools Pro Advanced v5.2.0.0348\DTAgent.exe [3108480 2012-10-23] (DT Soft Ltd)

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [Dropbox Update] => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-19] (Dropbox, Inc.)

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {08bedcc6-5cb8-11e2-87e9-b870f44c5e26} - E:\LGAutoRun.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {50b69cad-06ce-11e1-b145-b870f44c5e26} - E:\EMP_UDSe.exe /autorun

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {5e0cab59-4595-11e5-b7df-b870f44c5e26} - V:\autoplay.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {8a07fcb5-8c66-11e5-84bb-b870f44c5e26} - V:\setup.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {90df7b31-8ec3-11e5-b6bd-b870f44c5e26} - V:\setup.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {a95f117e-0b7f-11e5-9342-b870f44c5e26} - V:\setup.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {a95f1186-0b7f-11e5-9342-b870f44c5e26} - V:\setup.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {baeb06dc-aa48-11e5-9d52-8ca9822f79e2} - V:\Setup.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {deb65990-7663-11e5-bb9b-b870f44c5e26} - V:\setup.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\MountPoints2: {f6c627c8-4674-11e5-8b46-b870f44c5e26} - V:\autoplay.exe

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\windows\system32\Bubbles.scr [899584 2010-11-20] (Microsoft Corporation)

ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)

ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2015-11-04] (Google)

ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File

ShellIconOverlayIdentifiers: [ExplorerEx] -> {E056AFDD-03E9-4D73-8D33-8FCCBCA73438} => No File

ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File

ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File

ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File

ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File

ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File

ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-12-08] (Dropbox, Inc.)

Startup: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PdaNet Desktop.lnk [2015-02-26]

ShortcutTarget: PdaNet Desktop.lnk -> C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe ()

GroupPolicy: Restriction - Chrome <======= ATTENTION

CHR HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 10 C:\ProgramData\System32\SafeGuard32.dll No File

Winsock: Catalog5-x64 10 C:\ProgramData\System32\SafeGuard64.dll [3387320 2015-11-17] ()

Hosts: 127.0.0.1 activate.adobe.com

Tcpip\..\Interfaces\{7AA7BC47-E692-4EA9-8A62-B108E1BB8086}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{D3E7F3A2-905B-468D-A652-10412DE6A0D6}: [NameServer] 208.67.222.222,208.67.220.220

Tcpip\..\Interfaces\{D3E7F3A2-905B-468D-A652-10412DE6A0D6}: [DhcpNameServer] 192.168.0.1

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Window Title = Visita www.landerextremo.s5.com

SearchScopes: HKLM -> DefaultScope {E921F400-D383-4B1B-9DE6-FCFCACFC1173} URL =

SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM -> {DFB425F9-040B-4296-85BE-7FA4BA584D99} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF

SearchScopes: HKLM-x32 -> DefaultScope {E921F400-D383-4B1B-9DE6-FCFCACFC1173} URL =

SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKLM-x32 -> {69CE00C5-1258-482B-8912-2F3C293105A6} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF

SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> DefaultScope {E921F400-D383-4B1B-9DE6-FCFCACFC1173} URL =

SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {69CE00C5-1258-482B-8912-2F3C293105A6} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF

SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {798AAF5F-D83E-42F9-BAA0-9F3CCAD8B1FF} URL = hxxps://www.google.com/search?q={searchTerms}

SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {CE5AAAF0-AC26-4525-8294-504FD8BF0BE2} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TSNF_en

SearchScopes: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> {DFB425F9-040B-4296-85BE-7FA4BA584D99} URL =

BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2015-09-19] (Oracle Corporation)

BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)

BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2015-09-19] (Oracle Corporation)

BHO-x32: HP Print Enhancer -> {0347C33E-8762-4905-BF09-768834316C61} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll [2009-05-21] (Hewlett-Packard Co.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll => No File

BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)

BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)

BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)

BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll => No File

BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)

BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-11-09] (<TOSHIBA>)

BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll => No File

BHO-x32: HP Smart BHO Class -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll [2009-05-21] (Hewlett-Packard Co.)

Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File

Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)

Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll No File

Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-12-22] (Google Inc.)

Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-12-22] (Google Inc.)

Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-10-12] (Microsoft Corporation)

Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-10-12] (Microsoft Corporation)

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_11_6_602_168.dll [2013-02-24] ()

FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2015-09-19] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2015-09-19] (Oracle Corporation)

FF Plugin: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)

FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_6_602_168.dll [2013-02-24] ()

FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)

FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2012-08-08] ()

FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)

FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)

FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)

FF Plugin-x32: @raidcall.en/RCplugin -> C:\Users\jcvielma\AppData\Roaming\raidcall\plugins\nprcplugin.dll [2014-05-27] (Raidcall)

FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2012-12-13] ()

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)

FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-07-27] (Adobe Systems Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll [2012-07-30] (Adobe Systems Inc.)

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

FF Extension: HP Smart Web Printing - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-07-18] [not signed]

FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn

FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2012-10-22] [not signed]

FF HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3

Chrome:

=======

CHR Profile: C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (YouTube) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-03]

CHR Extension: (Búsqueda de Google) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-28]

CHR Extension: (Bookmark Manager) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-22]

CHR Extension: (Avast Online Security) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-03-13]

CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2012-11-09] [UpdateUrl: hxxp://www.interoperabilitybridges.com/ChromeWMP/wmpChromeupdates.xml] <==== ATTENTION

CHR Extension: (Chrome Hotword Shared Module) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-04-16]

CHR Extension: (Skype Click to Call) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-07-22]

CHR Extension: (Google Wallet) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-07]

CHR Extension: (Gmail) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]

CHR Profile: C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Extension: (Presentaciones de Google) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-22]

CHR Extension: (Google Docs) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-22]

CHR Extension: (Google Drive) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-20]

CHR Extension: (YouTube) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]

CHR Extension: (Búsqueda de Google) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]

CHR Extension: (Mouse Drag) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eddldcghfdhmdcfmjolaefkjglmeobpf [2015-12-28]

CHR Extension: (SoundCloud Download Finder) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fggklngmkhplepnjhhnenbgfbeagdfil [2015-04-22]

CHR Extension: (Documentos de Google sin conexión) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-16]

CHR Extension: (AdBlock) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-12-03]

CHR Extension: (SoundCloud Downloader Ad-Free) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gpbageahapehhjckpkipehfkphhneahf [2015-04-22]

CHR Extension: (Skype) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18]

CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-22]

CHR Extension: (Gmail) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-22]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-10-12]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()

S3 Blackberry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [577536 2013-01-18] (Research In Motion Limited) [File not signed]

R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-12] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-12] (Microsoft Corporation)

R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2139328 2014-05-27] (Comodo Security Solutions, Inc.)

R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UDSA.exe [104424 2010-06-09] (SEIKO EPSON CORPORATION)

S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [166112 2013-09-05] (Futuremark)

R3 hpqcxs08; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcxs08.dll [248832 2009-05-21] (Hewlett-Packard Co.) [File not signed]

R2 hpqddsvc; C:\Program Files (x86)\HP\Digital Imaging\bin\hpqddsvc.dll [133120 2009-05-21] (Hewlett-Packard Co.) [File not signed]

S2 KMService; C:\windows\SysWOW64\srvany.exe [8192 2012-10-22] () [File not signed]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)

S4 msvsmon90; C:\Program Files\Microsoft Visual Studio 9.0\Common7\IDE\Remote Debugger\x64\msvsmon.exe [4737024 2008-07-29] (Microsoft Corporation)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-07] ()

R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]

R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]

R2 SkypeUpdateEx; C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe [193456 2015-12-10] ()

S3 Visual Studio Analyzer RPC bridge; C:\Program Files (x86)\Microsoft Visual Studio\Common\Tools\VS-Ent98\Vanalyzr\varpc.exe [34036 1998-06-06] (Microsoft Corporation) [File not signed]

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

R2 XBox; C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe [7142328 2015-12-08] ()

S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]

S2 PCCUJobMgr; "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\ccSvcHst.exe" /s "PCCUJobMgr" /m "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\diMaster.dll" /prefetch:1

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 6077757b; C:\windows\system32\drivers\regi.sys [14112 2007-04-17] (InterVideo)

S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2011-09-06] (LG Electronics Inc.)

S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [35840 2011-09-06] (LG Electronics Inc.)

S3 andnetndis; C:\Windows\System32\DRIVERS\lgandnetndis64.sys [93184 2011-09-16] (LG Electronics Inc.)

S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [40584 2015-08-27] (ThreatTrack Security)

S3 gfiutil; C:\Windows\System32\drivers\gfiutil.sys [31264 2013-09-04] (ThreatTrack Security)

U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2011-10-23] (Huawei Technologies Co., Ltd.)

S3 PlantronicsGC; C:\Windows\System32\drivers\PLTGC.sys [1328128 2013-02-07] (C-Media Electronics Inc)

S3 pwdrvio; C:\windows\system32\pwdrvio.sys [19152 2013-09-30] ()

S3 pwdspio; C:\windows\system32\pwdspio.sys [12504 2013-09-30] ()

S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [78336 2013-01-03] (Research In Motion Limited)

R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)

S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)

S3 cpuz135; \??\C:\windows\TEMP\cpuz135\cpuz135_x64.sys [X]

S3 cpuz136; \??\C:\windows\TEMP\cpuz136\cpuz136_x64.sys [X]

S3 smhwser; system32\DRIVERS\smhwser.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-28 11:31 - 2015-12-28 11:31 - 00034862 _____ C:\Users\jcvielma\Desktop\FRST.txt

2015-12-28 11:30 - 2015-12-28 11:31 - 00000000 ____D C:\FRST

2015-12-28 11:29 - 2015-12-28 11:29 - 02370560 _____ (Farbar) C:\Users\jcvielma\Desktop\FRST64.exe

2015-12-28 10:00 - 2015-12-28 10:00 - 01000416 _____ C:\Users\jcvielma\Desktop\backup.reg

2015-12-28 00:40 - 2015-12-28 00:41 - 00038346 _____ C:\Program Files\20151227185434.xml

2015-12-27 18:54 - 2015-12-28 00:42 - 03058084 _____ C:\Program Files\20151227185434.csv

2015-12-27 18:54 - 2015-12-28 00:41 - 00000000 ____D C:\Program Files\Quarantine

2015-12-27 18:54 - 2015-12-28 00:11 - 10486086 _____ C:\Program Files\20151227185434_3.csv

2015-12-27 18:54 - 2015-12-27 22:17 - 10486086 _____ C:\Program Files\20151227185434_2.csv

2015-12-27 18:54 - 2015-12-27 20:38 - 10486082 _____ C:\Program Files\20151227185434_1.csv

2015-12-27 18:54 - 2015-12-27 18:54 - 00000012 _____ C:\Program Files\FSSC.dat

2015-12-27 18:54 - 2015-08-27 06:32 - 00069600 _____ (ThreatTrack Security) C:\Program Files\gfiarkup.dll

2015-12-27 18:54 - 2015-08-27 06:31 - 00070112 _____ (ThreatTrack Security) C:\Program Files\gfiark.dll

2015-12-27 18:54 - 2015-08-27 06:31 - 00043176 _____ (ThreatTrack Security) C:\Program Files\gfiark32.sys

2015-12-27 18:54 - 2015-08-27 06:31 - 00040584 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiark.sys

2015-12-27 18:54 - 2015-08-27 06:31 - 00040584 _____ (ThreatTrack Security) C:\Program Files\gfiark64.sys

2015-12-27 18:54 - 2013-09-04 13:57 - 00031264 _____ (ThreatTrack Security) C:\windows\system32\Drivers\gfiutil.sys

2015-12-27 18:54 - 2013-09-04 13:57 - 00031264 _____ (ThreatTrack Security) C:\Program Files\gfiutl64.sys

2015-12-27 18:54 - 2013-09-04 13:57 - 00024040 _____ (ThreatTrack Security) C:\Program Files\gfiutl32.sys

2015-12-27 18:54 - 2013-09-04 13:57 - 00014656 _____ (ThreatTrack Security) C:\Program Files\gfiutil.dll

2015-12-27 18:51 - 2015-12-28 00:41 - 00000000 ____D C:\Program Files\Definitions

2015-12-27 18:51 - 2015-12-27 18:51 - 00000000 ____D C:\Program Files\x64

2015-12-27 18:13 - 2015-12-27 18:51 - 258727936 _____ C:\Users\jcvielma\Desktop\VIPRERescue46100.exe

2015-12-27 18:03 - 2015-12-27 18:16 - 00000000 ____D C:\Users\jcvielma\Desktop\rescate

2015-12-27 18:02 - 2015-12-27 18:05 - 00002128 _____ C:\Users\jcvielma\Desktop\Rkill.txt

2015-12-27 17:40 - 2015-12-28 11:15 - 00000000 ____D C:\ProgramData\MCShield

2015-12-27 17:40 - 2015-12-27 17:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield

2015-12-27 17:40 - 2015-12-27 17:40 - 00000000 ____D C:\Program Files (x86)\MCShield

2015-12-27 17:27 - 2015-12-27 17:56 - 00000000 ____D C:\AdwCleaner

2015-12-27 16:36 - 2015-12-28 10:40 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys

2015-12-27 16:33 - 2015-12-28 11:13 - 00856452 _____ C:\windows\ntbtlog.txt

2015-12-27 16:29 - 2015-12-28 10:12 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware

2015-12-27 16:29 - 2015-12-27 16:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-12-27 16:29 - 2015-12-27 16:29 - 00000000 ____D C:\ProgramData\Malwarebytes

2015-12-27 16:29 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys

2015-12-27 16:29 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys

2015-12-27 16:29 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys

2015-12-27 16:26 - 2015-12-27 16:28 - 22908888 _____ (Malwarebytes ) C:\Users\jcvielma\Desktop\mbam-setup-org-2.2.0.1024.exe

2015-12-27 15:40 - 2015-12-27 16:10 - 00000000 ____D C:\ProgramData\AVAST Software

2015-12-26 12:11 - 2015-12-26 12:41 - 00011066 _____ C:\Users\jcvielma\Desktop\monedas.xlsx

2015-12-24 19:18 - 2015-12-24 18:14 - 05762544 _____ (AVAST Software) C:\Users\jcvielma\Desktop\avastclear.exe

2015-12-24 14:05 - 2015-12-24 14:05 - 00000000 ____D C:\Users\jcvielma\AppData\Local\Introversion

2015-12-24 14:05 - 2015-12-24 14:05 - 00000000 ____D C:\ProgramData\SkidRow

2015-12-24 14:01 - 2015-12-24 14:01 - 00001460 _____ C:\Users\Public\Desktop\Prison Architect.lnk

2015-12-24 14:00 - 2015-12-24 14:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Introversion Software

2015-12-24 14:00 - 2015-12-24 14:00 - 00000000 ____D C:\Program Files (x86)\Introversion Software

2015-12-24 13:59 - 2015-12-24 13:59 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\ImgBurn

2015-12-24 13:18 - 2015-12-24 13:52 - 00000000 ____D C:\Users\jcvielma\Downloads\Prison Architect-SKIDROW

2015-12-21 11:06 - 2015-12-21 11:07 - 02498304 _____ C:\Users\jcvielma\Desktop\CvGameCore_Expansion2.zip

2015-12-19 14:42 - 2015-12-27 18:56 - 00000000 ____D C:\Program Files (x86)\WTFast

2015-12-19 14:42 - 2015-12-19 14:42 - 00000000 ____D C:\Users\jcvielma\AppData\Local\AAA_Internet_Publishing,_

2015-12-19 14:42 - 2015-04-08 15:15 - 00011264 _____ (Microsoft Corporation) C:\windows\SysWOW64\SPORDER.DLL

2015-12-19 14:40 - 2015-12-19 14:41 - 07016240 _____ (Initex & AAA Internet Publishing ) C:\Users\jcvielma\Desktop\WTFastSetup.3.5.9.511.exe

2015-12-18 00:14 - 2015-12-18 09:32 - 00000000 ____D C:\081b2767b9c21126b0

2015-12-11 19:47 - 2015-12-11 19:48 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox

2015-12-09 23:42 - 2015-12-09 23:42 - 00000000 ____D C:\windows\7

2015-12-09 10:31 - 2015-11-11 16:42 - 00387792 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll

2015-12-09 10:31 - 2015-11-11 16:22 - 00341192 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll

2015-12-09 10:31 - 2015-11-11 11:51 - 25837568 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll

2015-12-09 10:31 - 2015-11-11 11:30 - 12856832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll

2015-12-09 10:31 - 2015-11-11 11:14 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll

2015-12-09 10:31 - 2015-11-11 11:14 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll

2015-12-09 10:31 - 2015-11-11 11:11 - 20366848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll

2015-12-09 10:31 - 2015-11-11 10:42 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll

2015-12-09 10:31 - 2015-11-11 10:27 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll

2015-12-09 10:31 - 2015-11-09 19:54 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb

2015-12-09 10:31 - 2015-11-09 19:43 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll

2015-12-09 10:31 - 2015-11-09 19:43 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll

2015-12-09 10:31 - 2015-11-09 19:42 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec

2015-12-09 10:31 - 2015-11-09 19:42 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll

2015-12-09 10:31 - 2015-11-09 19:41 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll

2015-12-09 10:31 - 2015-11-09 19:38 - 02280448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll

2015-12-09 10:31 - 2015-11-09 19:36 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll

2015-12-09 10:31 - 2015-11-09 19:36 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll

2015-12-09 10:31 - 2015-11-09 19:34 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll

2015-12-09 10:31 - 2015-11-09 19:33 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe

2015-12-09 10:31 - 2015-11-09 19:32 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll

2015-12-09 10:31 - 2015-11-09 19:32 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll

2015-12-09 10:31 - 2015-11-09 19:20 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-12-09 10:31 - 2015-11-09 19:17 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll

2015-12-09 10:31 - 2015-11-09 19:16 - 04514816 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll

2015-12-09 10:31 - 2015-11-09 19:14 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll

2015-12-09 10:31 - 2015-11-09 19:07 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll

2015-12-09 10:31 - 2015-11-09 19:06 - 02050560 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl

2015-12-09 10:31 - 2015-11-09 19:06 - 00687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll

2015-12-09 10:31 - 2015-11-09 19:05 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll

2015-12-09 10:31 - 2015-11-09 18:47 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll

2015-12-09 10:31 - 2015-11-09 18:44 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll

2015-12-09 10:31 - 2015-11-09 18:42 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll

2015-12-09 10:31 - 2015-11-08 18:03 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb

2015-12-09 10:31 - 2015-11-08 18:02 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll

2015-12-09 10:31 - 2015-11-08 17:46 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll

2015-12-09 10:31 - 2015-11-08 17:45 - 02887168 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll

2015-12-09 10:31 - 2015-11-08 17:45 - 00571392 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll

2015-12-09 10:31 - 2015-11-08 17:45 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec

2015-12-09 10:31 - 2015-11-08 17:45 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll

2015-12-09 10:31 - 2015-11-08 17:44 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll

2015-12-09 10:31 - 2015-11-08 17:37 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll

2015-12-09 10:31 - 2015-11-08 17:36 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll

2015-12-09 10:31 - 2015-11-08 17:34 - 05923840 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll

2015-12-09 10:31 - 2015-11-08 17:32 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll

2015-12-09 10:31 - 2015-11-08 17:31 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll

2015-12-09 10:31 - 2015-11-08 17:31 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll

2015-12-09 10:31 - 2015-11-08 17:31 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe

2015-12-09 10:31 - 2015-11-08 17:31 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe

2015-12-09 10:31 - 2015-11-08 17:22 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe

2015-12-09 10:31 - 2015-11-08 17:18 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll

2015-12-09 10:31 - 2015-11-08 17:10 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll

2015-12-09 10:31 - 2015-11-08 17:05 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll

2015-12-09 10:31 - 2015-11-08 17:02 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll

2015-12-09 10:31 - 2015-11-08 16:59 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll

2015-12-09 10:31 - 2015-11-08 16:48 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll

2015-12-09 10:31 - 2015-11-08 16:45 - 00798208 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll

2015-12-09 10:31 - 2015-11-08 16:45 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe

2015-12-09 10:31 - 2015-11-08 16:44 - 14456832 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll

2015-12-09 10:31 - 2015-11-08 16:44 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll

2015-12-09 10:31 - 2015-11-08 16:43 - 02123264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl

2015-12-09 10:31 - 2015-11-08 16:23 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll

2015-12-09 10:31 - 2015-11-08 16:11 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll

2015-12-09 10:31 - 2015-11-08 16:00 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 03170304 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 02609152 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00709632 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe

2015-12-09 10:28 - 2015-11-20 14:24 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe

2015-12-09 10:28 - 2015-11-20 14:24 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll

2015-12-09 10:28 - 2015-11-20 14:24 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll

2015-12-09 10:28 - 2015-11-20 14:04 - 00573440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll

2015-12-09 10:28 - 2015-11-20 14:04 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll

2015-12-09 10:28 - 2015-11-20 14:04 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll

2015-12-09 10:28 - 2015-11-20 14:04 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll

2015-12-09 10:28 - 2015-11-20 14:03 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe

2015-12-09 10:28 - 2015-11-10 14:25 - 01648128 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll

2015-12-09 10:28 - 2015-11-10 14:25 - 01180160 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll

2015-12-09 10:28 - 2015-11-10 14:25 - 01008640 _____ (Microsoft Corporation) C:\windows\system32\user32.dll

2015-12-09 10:28 - 2015-11-10 14:09 - 01251328 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll

2015-12-09 10:28 - 2015-11-10 14:07 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll

2015-12-09 10:28 - 2015-11-10 13:17 - 03211264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys

2015-12-09 10:28 - 2015-11-05 14:32 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll

2015-12-09 10:28 - 2015-11-05 14:30 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll

2015-12-09 10:28 - 2015-11-03 14:34 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll

2015-12-09 10:28 - 2015-11-03 14:26 - 00627712 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll

2015-12-09 10:28 - 2015-10-08 18:52 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll

2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZE.DLL

2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\kbdgeoqw.dll

2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZEL.DLL

2015-12-09 10:28 - 2015-10-08 18:48 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZE.DLL

2015-12-09 10:28 - 2015-10-08 18:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\kbdgeoqw.dll

2015-12-09 10:28 - 2015-10-08 18:48 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZEL.DLL

2015-12-09 10:28 - 2015-10-08 18:47 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll

2015-12-09 10:28 - 2015-10-08 14:43 - 00419928 _____ C:\windows\SysWOW64\locale.nls

2015-12-09 10:28 - 2015-10-08 14:22 - 00419928 _____ C:\windows\system32\locale.nls

2015-12-09 10:27 - 2015-11-11 14:23 - 01735680 _____ (Microsoft Corporation) C:\windows\system32\comsvcs.dll

2015-12-09 10:27 - 2015-11-11 14:23 - 00525312 _____ (Microsoft Corporation) C:\windows\system32\catsrvut.dll

2015-12-09 10:27 - 2015-11-11 14:09 - 01242624 _____ (Microsoft Corporation) C:\windows\SysWOW64\comsvcs.dll

2015-12-09 10:27 - 2015-11-11 14:09 - 00487936 _____ (Microsoft Corporation) C:\windows\SysWOW64\catsrvut.dll

2015-12-09 10:27 - 2015-11-05 14:35 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wshrm.dll

2015-12-09 10:27 - 2015-11-05 14:32 - 00014848 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshrm.dll

2015-12-09 10:27 - 2015-11-05 05:23 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys

2015-12-09 10:22 - 2015-11-03 14:34 - 00241664 _____ (Microsoft Corporation) C:\windows\system32\els.dll

2015-12-09 10:22 - 2015-11-03 14:25 - 00179712 _____ (Microsoft Corporation) C:\windows\SysWOW64\els.dll

2015-12-08 09:31 - 2015-12-08 09:31 - 00000000 ___HD C:\windows\system32\GroupPolicy

2015-11-30 23:31 - 2015-11-30 23:31 - 00015464 _____ C:\windows\DelYac64.sys

2015-11-29 15:28 - 2015-11-29 18:27 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Duelyst

2015-11-29 15:06 - 2015-11-30 22:27 - 00000000 ____D C:\Users\jcvielma\.counterplay

2015-11-29 15:06 - 2015-11-29 15:06 - 00002237 _____ C:\Users\jcvielma\Desktop\DuelystLauncher.lnk

2015-11-29 15:06 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counterplay Games Inc

2015-11-29 15:06 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\DuelystLauncher

2015-11-29 15:06 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Local\launcher

2015-11-29 15:05 - 2015-11-29 15:06 - 00000000 ____D C:\Users\jcvielma\AppData\Local\SquirrelTemp

2015-11-29 15:01 - 2015-11-29 15:05 - 56090880 _____ (Counterplay Games Inc.) C:\Users\jcvielma\Desktop\DuelystLauncher-v0.0.5.exe

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-12-28 11:30 - 2009-07-13 22:50 - 00000000 ____D C:\Windows

2015-12-28 11:22 - 2009-07-14 00:15 - 00019568 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-12-28 11:22 - 2009-07-14 00:15 - 00019568 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-12-28 11:19 - 2009-07-14 00:43 - 00788664 _____ C:\windows\system32\PerfStringBackup.INI

2015-12-28 11:19 - 2009-07-13 22:50 - 00000000 ____D C:\windows\inf

2015-12-28 11:14 - 2015-09-24 09:56 - 00000000 ____D C:\Program Files (x86)\SkypeUpdateEx

2015-12-28 11:14 - 2015-01-20 15:20 - 00000000 ____D C:\Users\jcvielma\AppData\Local\LogMeIn Hamachi

2015-12-28 11:14 - 2012-07-18 19:43 - 00000000 ____D C:\windows\hpoj4500g510a-f

2015-12-28 11:14 - 2010-12-28 20:22 - 00001032 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-12-28 11:14 - 2009-07-14 00:38 - 00000006 ____H C:\windows\Tasks\SA.DAT

2015-12-28 01:10 - 2010-12-28 20:22 - 00001036 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-12-28 00:42 - 2011-07-15 19:58 - 00000000 ____D C:\Users\jcvielma\AppData\Local\CrashDumps

2015-12-28 00:41 - 2015-10-17 10:15 - 00000000 ____D C:\Program Files (x86)\Sid Meiers Civilization Beyond Earth

2015-12-28 00:41 - 2015-05-23 09:25 - 00000000 ____D C:\Program Files (x86)\Age of Mythology Extended Edition

2015-12-28 00:41 - 2014-10-03 18:02 - 00000000 ____D C:\Program Files (x86)\RaidCall

2015-12-28 00:41 - 2014-05-09 11:36 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dungeon Crawl Stone Soup

2015-12-28 00:41 - 2014-05-09 11:36 - 00000000 ____D C:\Users\jcvielma\AppData\Local\Crawl

2015-12-28 00:39 - 2015-06-19 06:28 - 00001014 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000UA.job

2015-12-27 23:55 - 2015-02-14 16:29 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\TS3Client

2015-12-27 23:39 - 2015-06-19 06:28 - 00000962 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000Core.job

2015-12-27 19:08 - 2015-04-22 10:10 - 00000000 ____D C:\Users\jcvielma\AppData\Local\JDownloader v2.0

2015-12-27 18:37 - 2013-12-19 15:23 - 00000000 ____D C:\Users\jcvielma\AppData\Local\ElevatedDiagnostics

2015-12-27 17:54 - 2015-04-22 09:41 - 00000258 __RSH C:\ProgramData\ntuser.pol

2015-12-27 17:33 - 2012-07-18 19:49 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Yahoo!

2015-12-27 17:32 - 2012-07-18 19:49 - 00000000 ____D C:\Program Files (x86)\Yahoo!

2015-12-27 17:22 - 2012-12-19 10:24 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\uTorrent

2015-12-27 17:08 - 2015-08-05 21:52 - 00000000 ____D C:\windows\msapps

2015-12-27 15:27 - 2012-08-27 17:53 - 00004182 _____ C:\windows\System32\Tasks\avast! Emergency Update

2015-12-25 10:26 - 2015-07-02 08:42 - 00000000 ____D C:\windows\SysWOW64\vbox

2015-12-25 10:26 - 2015-07-02 08:42 - 00000000 ____D C:\windows\system32\vbox

2015-12-24 16:19 - 2013-07-21 16:57 - 00000000 ____D C:\Program Files (x86)\Steam

2015-12-24 11:01 - 2015-09-09 22:40 - 00000000 ____D C:\Program Files (x86)\Civilization V 1.0.3.279

2015-12-22 16:14 - 2010-12-28 20:22 - 00002268 _____ C:\Users\jcvielma\Desktop\Google Chrome.lnk

2015-12-22 11:09 - 2011-07-05 10:06 - 00001562 _____ C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2015-12-19 14:55 - 2015-06-12 12:31 - 00001391 _____ C:\Users\jcvielma\Desktop\Wow - Shortcut.lnk

2015-12-19 14:53 - 2015-02-12 16:59 - 00000000 ____D C:\Program Files\World of Warcraft

2015-12-19 01:21 - 2011-07-05 15:57 - 00772974 _____ C:\windows\SysWOW64\PerfStringBackup.INI

2015-12-19 01:15 - 2015-04-04 23:56 - 00000000 ___SD C:\windows\SysWOW64\GWX

2015-12-19 01:15 - 2015-04-04 23:56 - 00000000 ___SD C:\windows\system32\GWX

2015-12-12 13:03 - 2009-07-13 22:50 - 00000000 ____D C:\windows\rescache

2015-12-11 19:48 - 2015-02-06 10:57 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\Dropbox

2015-12-11 12:21 - 2009-07-14 00:15 - 00492992 _____ C:\windows\system32\FNTCACHE.DAT

2015-12-11 08:49 - 2015-10-28 22:52 - 00000000 ____D C:\ProgramData\System32

2015-12-10 09:50 - 2012-05-15 20:26 - 00000000 ____D C:\Program Files\Microsoft Silverlight

2015-12-10 09:50 - 2012-05-15 20:26 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight

2015-12-10 09:28 - 2012-05-15 20:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

2015-12-10 09:25 - 2011-09-18 13:17 - 00000000 ____D C:\ProgramData\Microsoft Help

2015-12-09 23:47 - 2011-03-16 05:24 - 00000000 ____D C:\ProgramData\Intel

2015-12-09 23:42 - 2015-09-18 09:56 - 00000000 ____D C:\Users\jcvielma\AppData\Roaming\XBox

2015-12-04 11:05 - 2010-12-28 20:22 - 00004032 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA

2015-12-04 11:05 - 2010-12-28 20:22 - 00003780 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

2015-12-02 13:18 - 2011-07-12 15:36 - 00301728 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe

2015-12-01 01:13 - 2012-05-31 20:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive

2015-11-29 15:06 - 2011-07-05 10:05 - 00000000 ____D C:\Users\jcvielma

==================== Files in the root of some directories =======

2015-12-27 18:54 - 2015-12-28 00:42 - 3058084 _____ () C:\Program Files\20151227185434.csv

2015-12-28 00:40 - 2015-12-28 00:41 - 0038346 _____ () C:\Program Files\20151227185434.xml

2015-12-27 18:54 - 2015-12-27 20:38 - 10486082 _____ () C:\Program Files\20151227185434_1.csv

2015-12-27 18:54 - 2015-12-27 22:17 - 10486086 _____ () C:\Program Files\20151227185434_2.csv

2015-12-27 18:54 - 2015-12-28 00:11 - 10486086 _____ () C:\Program Files\20151227185434_3.csv

2015-12-27 18:54 - 2015-12-27 18:54 - 0000012 _____ () C:\Program Files\FSSC.dat

2015-12-27 18:54 - 2015-08-27 06:31 - 0070112 _____ (ThreatTrack Security) C:\Program Files\gfiark.dll

2015-12-27 18:54 - 2015-08-27 06:31 - 0043176 _____ (ThreatTrack Security) C:\Program Files\gfiark32.sys

2015-12-27 18:54 - 2015-08-27 06:31 - 0040584 _____ (ThreatTrack Security) C:\Program Files\gfiark64.sys

2013-09-30 20:33 - 2013-09-30 20:33 - 0063896 _____ (ThreatTrack Security) C:\Program Files\gfiarksh.dll

2015-12-27 18:54 - 2015-08-27 06:32 - 0069600 _____ (ThreatTrack Security) C:\Program Files\gfiarkup.dll

2015-12-27 18:54 - 2013-09-04 13:57 - 0014656 _____ (ThreatTrack Security) C:\Program Files\gfiutil.dll

2015-12-27 18:54 - 2013-09-04 13:57 - 0024040 _____ (ThreatTrack Security) C:\Program Files\gfiutl32.sys

2015-12-27 18:54 - 2013-09-04 13:57 - 0031264 _____ (ThreatTrack Security) C:\Program Files\gfiutl64.sys

2013-09-30 20:33 - 2013-09-30 20:33 - 0044944 _____ (ThreatTrack Security, Inc.) C:\Program Files\sbbd.exe

2013-09-30 20:33 - 2013-09-30 20:33 - 0202128 _____ (ThreatTrack Security, Inc.) C:\Program Files\SBRC.exe

2013-09-30 20:33 - 2013-09-30 20:33 - 1059728 _____ (ThreatTrack Security, Inc.) C:\Program Files\SBTE.dll

2013-09-30 20:33 - 2013-09-30 20:33 - 0333704 _____ (GFI Software) C:\Program Files\vipre.dll

2013-09-30 20:33 - 2013-09-30 20:33 - 0541584 _____ (ThreatTrack Security, Inc.) C:\Program Files\VipreRescueScanner.exe

2014-05-08 14:05 - 2014-10-25 11:19 - 0000693 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.Desktop.Exception.log

2014-05-08 13:55 - 2014-05-08 19:02 - 0002257 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.Desktop.HttpServerSetup.log

2014-05-08 19:04 - 2014-10-25 12:43 - 0000231 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.DesktopHelper.Exception.log

2014-05-08 19:09 - 2014-10-25 12:43 - 0000231 _____ () C:\Users\jcvielma\AppData\Roaming\Rim.Transcoder.Exception.log

2012-10-31 22:41 - 2012-10-31 22:41 - 0582661 _____ () C:\Users\jcvielma\AppData\Roaming\technic-launcher.jar

2014-05-08 14:05 - 2014-10-25 10:16 - 0018432 _____ () C:\Users\jcvielma\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-10-22 19:54 - 2014-10-22 19:54 - 0000001 _____ () C:\Users\jcvielma\AppData\Local\llftool.4.12.agreement

2014-09-28 16:14 - 2015-06-14 13:48 - 0007602 _____ () C:\Users\jcvielma\AppData\Local\Resmon.ResmonCfg

2012-07-18 19:41 - 2012-08-22 08:05 - 0001291 _____ () C:\ProgramData\hpzinstall.log

2012-09-22 18:57 - 2015-09-26 14:12 - 0000952 ___SH () C:\ProgramData\KGyGaAvL.sys

2011-07-06 14:39 - 2011-07-06 14:39 - 0000153 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc

Some files in TEMP:

====================

C:\Users\jcvielma\AppData\Local\Temp\proxy_vole1533515238743272440.dll

C:\Users\jcvielma\AppData\Local\Temp\proxy_vole5593007764641275202.dll

C:\Users\jcvielma\AppData\Local\Temp\proxy_vole6935337405942467074.dll

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\windows\system32\winlogon.exe => File is digitally signed

C:\windows\system32\wininit.exe => File is digitally signed

C:\windows\SysWOW64\wininit.exe => File is digitally signed

C:\windows\explorer.exe => File is digitally signed

C:\windows\SysWOW64\explorer.exe => File is digitally signed

C:\windows\system32\svchost.exe => File is digitally signed

C:\windows\SysWOW64\svchost.exe => File is digitally signed

C:\windows\system32\services.exe => File is digitally signed

C:\windows\system32\User32.dll => File is digitally signed

C:\windows\SysWOW64\User32.dll => File is digitally signed

C:\windows\system32\userinit.exe => File is digitally signed

C:\windows\SysWOW64\userinit.exe => File is digitally signed

C:\windows\system32\rpcss.dll => File is digitally signed

C:\windows\system32\dnsapi.dll => File is digitally signed

C:\windows\SysWOW64\dnsapi.dll => File is digitally signed

C:\windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-12-20 13:04

==================== End of FRST.txt ============================

and the addition:

Additional scan result of Farbar Recovery Scan Tool (x64) Version:28-12-2015

Ran by jcvielma (2015-12-28 11:32:14)

Running from C:\Users\jcvielma\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2011-07-05 14:35:13)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-1080308731-2573736826-3272458361-500 - Administrator - Disabled)

Guest (S-1-5-21-1080308731-2573736826-3272458361-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1080308731-2573736826-3272458361-1002 - Limited - Enabled)

jcvielma (S-1-5-21-1080308731-2573736826-3272458361-1000 - Administrator - Enabled) => C:\Users\jcvielma

VUSR_JCVIELMA-LAPTOP (S-1-5-21-1080308731-2573736826-3272458361-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

4500_G510af_Help (x32 Version: 000.0.439.000 - Hewlett-Packard) Hidden

4500G510af (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden

4500G510af_Software_Min (x32 Version: 000.0.423.000 - Hewlett-Packard) Hidden

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden

7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )

Adobe Acrobat X Pro - Italiano, Español, Nederlands, Português (HKLM-x32\...\{AC76BA86-1040-7D70-7760-000000000005}) (Version: 10.1.4 - Adobe Systems)

Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.6.602.168 - Adobe Systems Incorporated)

Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.206 - Adobe Systems Incorporated)

Adobe Reader 9.5.2 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A95000000001}) (Version: 9.5.2 - Adobe Systems Incorporated)

Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.)

Age of Empires II HD The African Kingdoms (HKLM-x32\...\Age of Empires II HD The African Kingdoms_is1) (Version: - )

Age of Mythology: Extended Edition (HKLM-x32\...\QWdlb2ZNeXRob2xvZ3lFeHRlbmRlZEVkaXRpb24=_is1) (Version: 1 - )

Akamai NetSession Interface (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Akamai) (Version: - Akamai Technologies, Inc)

Amazon Links (HKLM-x32\...\{3135D885-9D9A-4B4D-8D45-9DB05DA115CA}) (Version: 2.02 - TOSHIBA Corporation)

Apple Mobile Device Support (HKLM\...\{7446FE8D-C1F9-4D42-AAAE-5DBCE58605A6}) (Version: 6.0.0.59 - Apple Inc.)

Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)

Asistente para la publicación en Web 1.53 de Microsoft (HKLM-x32\...\WebPost) (Version: - )

aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7955 - DsNET Corp)

aTube Catcher versión 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)

Autodesk Content Service (HKLM-x32\...\{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}) (Version: 2.0.90 - Autodesk)

Autodesk Design Review 2012 (HKLM-x32\...\Autodesk Design Review 2012) (Version: 12.0.0.93 - Autodesk, Inc.)

Autodesk Design Review 2012 (x32 Version: 12.0.0.93 - Autodesk, Inc.) Hidden

Autodesk Inventor Fusion 2012 (HKLM\...\Autodesk Inventor Fusion 2012) (Version: 1.0.0.79 - Autodesk, Inc.)

Autodesk Inventor Fusion 2012 (Version: 1.0.0.79 - Autodesk, Inc.) Hidden

Autodesk Inventor Fusion 2012 Language Pack (Version: 1.0.0.79 - Autodesk, Inc.) Hidden

Autodesk Inventor Fusion plug-in for AutoCAD 2012 (HKLM\...\Autodesk Inventor Fusion plug-in for AutoCAD 2012) (Version: 0.0.1.138 - Autodesk)

Autodesk Inventor Fusion plug-in for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden

Autodesk Inventor Fusion plug-in language pack for AutoCAD 2012 (Version: 0.0.1.138 - Autodesk) Hidden

Autodesk Material Library 2012 (HKLM-x32\...\{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}) (Version: 2.5.0.8 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2012 (HKLM-x32\...\{65420DC9-306E-4371-905F-F4DC3B418E52}) (Version: 2.5.0.8 - Autodesk)

Autodesk Material Library Low Resolution Image Library 2012 (HKLM-x32\...\{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}) (Version: 2.5.0.8 - Autodesk)

Autodesk Material Library Medium Resolution Image Library 2012 (HKLM-x32\...\{B5751715-EC10-43D9-8C95-62E1368433EF}) (Version: 2.5.0.8 - Autodesk)

Autodesk Revit DB Link 2012 (HKLM-x32\...\{7920BC7D-5D86-42B4-A6E0-2ADCBC38A76A}) (Version: 11.03.23131 - Autodesk)

Autodesk Revit Model Review 2012 (HKLM-x32\...\{DD616E6B-78A6-4F50-83F0-9BB754BEE5BE}) (Version: 11.01.07101 - Autodesk)

Autodesk Revit Structure 2012 (HKLM\...\Autodesk Revit Structure 2012) (Version: 11.03.09231 - Autodesk)

Autodesk Robot Structural Analysis Professional 2011 - Spanish regional settings (x32 Version: 2011.0.0.3481 - Autodesk) Hidden

Autodesk Robot Structural Analysis Professional 2011 (HKLM-x32\...\Autodesk Robot Structural Analysis Professional 2011) (Version: 2011.0.0.3481 - Autodesk)

Autodesk Robot Structural Analysis Professional 2011 (x32 Version: 2011.0.0.3481 - Autodesk) Hidden

Autodesk Robot Structural Analysis Professional 2012 - Spanish regional settings (Version: 2012.0.0.3774 - Autodesk) Hidden

Autodesk Robot Structural Analysis Professional 2012 (HKLM\...\Autodesk Robot Structural Analysis Professional 2012) (Version: 2012.0.0.3774 - Autodesk)

Autodesk Robot Structural Analysis Professional 2012 (Version: 2012.0.0.3774 - Autodesk) Hidden

Banished (HKLM-x32\...\1207660783_is1) (Version: 2.3.0.7 - GOG.com)

Banished 1.0.4 (HKLM-x32\...\Banished_is1) (Version: - )

Batch Print for Autodesk Revit 2012 (HKLM-x32\...\{22255C78-9E67-4D4E-A73F-DCA621724363}) (Version: 11.03.23162 - Autodesk)

Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)

BlackBerry Desktop Software 7.1 (HKLM-x32\...\BlackBerry_Desktop) (Version: 7.1.0.41 - Research In Motion Ltd.)

BlackBerry Desktop Software 7.1 (x32 Version: 7.1.0.41 - Research In Motion Ltd.) Hidden

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.64.1073 - AB Team, d.o.o.)

BufferChm (x32 Version: 130.0.331.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.04 - Piriform)

CDisplay 1.8 (HKLM-x32\...\CDisplay_is1) (Version: - dvd8n)

Civilization V Game of the Year Edition version 1.0.3.144 (HKLM-x32\...\Civilization V Game of the Year Edition_is1) (Version: 1.0.3.144 - Mr DJ)

Comodo Dragon (HKLM-x32\...\Comodo Dragon) (Version: 33.1.0.1 - Comodo)

Compatibilidad con Aplicaciones de Apple (HKLM-x32\...\{63EC2120-1742-4625-AA47-C6A8AEC9C64C}) (Version: 2.2.2 - Apple Inc.)

Corel WinDVD (HKLM-x32\...\{5C1F18D2-F6B7-4242-B803-B5A78648185D}) (Version: 10.0.5.773 - Corel Inc.)

Corneroids (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\7027eb15f9eaa407) (Version: 1.0.1.2 - Microsoft)

Cuevana Storm versión 0.1b (HKLM-x32\...\{CB7BA2E8-323E-4684-8D96-4A5EAF481D9A}_is1) (Version: 0.1b - Cuevana)

Cuevana Storm versión 0.3b (HKLM-x32\...\{2AFB4518-E1D7-4D74-B4FC-C65AE00E531D}_is1) (Version: 0.3b - Cuevana)

D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden

DAEMON Tools Pro Advanced v5.2.0.0348 (HKLM-x32\...\DAEMON Tools Pro Advanced v5.2.0.03485.2.0.0348) (Version: 5.2.0.0348 - Friends in War)

Design Spreadsheets for Autodesk Robot Structural Analysis 2012 (HKLM-x32\...\{34841200-77DB-4BE5-A185-B6F187B3A05D}) (Version: 2012 - Autodesk, Inc.)

Destinations (x32 Version: 130.0.0.0 - Hewlett-Packard) Hidden

Dev-C++ 5 beta 9 release (4.9.9.2) (HKLM-x32\...\Dev-C++) (Version: - )

DeviceDiscovery (x32 Version: 130.0.372.000 - Hewlett-Packard) Hidden

DocMgr (x32 Version: 130.0.000.000 - Nombre de su organización) Hidden

DocProc (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Dolby Axon - 1.5.1.1 (HKLM-x32\...\{17936630-5344-4F18-9970-616129E2A114}_is1) (Version: 1.5.1.1 - Dolby Laboratories)

Don't Starve 9 Apr 2013 (HKLM-x32\...\Don't Starve 9 Apr 20139 Apr 2013) (Version: 9 Apr 2013 - Friends in War)

DPlot Graph Software version 2.3.3.0 (HKLM-x32\...\DPlot_is1) (Version: 2.3.3.0 - HydeSoft Computing, LLC)

Dropbox (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.)

DuelystLauncher (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\launcher) (Version: 0.05 - Counterplay Games Inc.)

Endless Legend Shadows (HKLM-x32\...\Endless Legend Shadows_is1) (Version: - )

EPSON USB Display (HKLM-x32\...\{7650F538-6274-44EA-8F50-843479073333}) (Version: 1.45.000 - SEIKO EPSON CORPORATION)

Europa Universalis III (HKLM-x32\...\{59C80C5E-8C92-40FF-B910-2BB5C7281F61}) (Version: - )

FARO LS 1.1.406.58 (HKLM-x32\...\{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}) (Version: 4.6.58.2 - FARO Scanner Production)

Fax (x32 Version: 130.0.418.000 - Hewlett-Packard) Hidden

Five Nights at Freddy's (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\Five Nights at Freddy's) (Version: - )

Fraps (HKLM-x32\...\Fraps) (Version: - )

Futuremark SystemInfo (HKLM-x32\...\{A72D5E68-8168-4B0F-AA78-163FF36F6D66}) (Version: 4.20.168 - Futuremark Corporation)

Globe Link for Autodesk Revit 2012 (HKLM-x32\...\{D49FFF70-9F9A-4598-9F4A-1312E9485F29}) (Version: 11.03.22150 - Autodesk)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)

Google Drive (HKLM-x32\...\{1C3D2F92-D25E-4D98-B810-3F3B0857BF26}) (Version: 1.26.0707.2863 - Google, Inc.)

Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)

Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7210.1528 - Google Inc.)

Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden

GPBaseService2 (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

Handset WinDriver 1.02.02.00 (HKLM-x32\...\Handset WinDriver) (Version: 1.02.02.00 - Huawei technologies Co., Ltd.)

Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)

Herramienta de descarga USB/DVD de Windows 7 (HKLM-x32\...\{266F443F-A296-406F-9EE8-DF4A1061C6CE}) (Version: 1.0.30 - Microsoft Corporation)

HP Customer Participation Program 13.0 (HKLM\...\HPExtendedCapabilities) (Version: 13.0 - HP)

HP Document Manager 2.0 (HKLM\...\HP Document Manager) (Version: 2.0 - HP)

HP Imaging Device Functions 13.0 (HKLM\...\HP Imaging Device Functions) (Version: 13.0 - HP)

HP Officejet 4500 G510a-f (HKLM\...\{C98517B6-DCE9-49B7-B19E-E384178D3986}) (Version: 13.0 - HP)

HP Smart Web Printing 4.5 (HKLM\...\HP Smart Web Printing) (Version: 4.5 - HP)

HP Solution Center 13.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 13.0 - HP)

HP Update (HKLM-x32\...\{2EFA4E4C-7B5F-48F7-A1C0-1AA882B7A9C3}) (Version: 5.003.001.001 - Hewlett-Packard)

HPProductAssistant (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

HPSSupply (x32 Version: 130.0.371.000 - Hewlett-Packard) Hidden

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.7.0 - LIGHTNING UK!)

Intel® Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2291 - Intel Corporation)

Intel® PROSet/Wireless WiFi Software (HKLM\...\{290D4DB2-F1B4-4B8E-918D-D71EF29A001B}) (Version: 14.00.1000 - Intel Corporation)

Intel® Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.0.0.1046 - Intel Corporation)

Intel® Wireless Display (HKLM-x32\...\{B3926E82-9294-4D22-A8FF-9B3EA8F16840}) (Version: 1.3.9.7 - Intel Corporation)

Intel® Wireless Display (HKLM\...\{28EF7372-9087-4AC3-9B9F-D9751FCDF830}) (Version: - )

iTunes (HKLM\...\{1493B2AE-0261-47D2-B1AA-F4DAD0F6C48B}) (Version: 10.7.0.21 - Apple Inc.)

Java 8 Update 25 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418025F0}) (Version: 8.0.250 - Oracle Corporation)

JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)

JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)

JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.53.5 - JMicron Technology Corp.)

Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden

Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version: - )

Label@Once 1.0 (HKLM-x32\...\{0D795777-9D60-4692-8386-F2B3F2B5E5BF}) (Version: 1.0 - Corel)

LG United Mobile Drivers (HKLM-x32\...\{C2944BE7-9BFF-4EF0-A362-CB3281B7C50D}) (Version: 3.6.0.0 - LG Electronics)

LibreOffice 4.3.2.2 (HKLM-x32\...\{9C13F99C-6E1A-4126-AE91-EAA2DADE08D6}) (Version: 4.3.2.2 - The Document Foundation)

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden

Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)

MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden

MATLAB R2008a (HKLM-x32\...\MatlabR2008a) (Version: 7.6 - The MathWorks, Inc.)

MCShield ::Anti-Malware Tool:: (HKLM-x32\...\MCShield) (Version: 3.0.5.28 - MyCity)

Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Mouse and Keyboard Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 1.1.500.0 - Microsoft Corporation)

Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)

Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)

Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation)

Microsoft Visual Studio 2008 Remote Debugger Light (x64) - ENU Service Pack 1 (KB945140) (HKLM-x32\...\{90A80D89-A0E4-33C1-B13D-B93CB3496867}.KB945140) (Version: 1 - Microsoft Corporation)

Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)

Microsoft Visual Studio 6.0 Edición empresarial (Español) (HKLM-x32\...\Visual Studio 6.0 Edición empresarial (esp)) (Version: - )

Microsoft Visual Studio Tools for Applications 2.0 Runtime (HKLM-x32\...\{299C0434-4F4E-341F-A916-4E07AEB35E79}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)

Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)

Minecraft1.7.10 (HKLM-x32\...\Minecraft1.7.10) (Version: - )

Mp3tag v2.39 (HKLM-x32\...\Mp3tag) (Version: v2.39 - Florian Heidenreich)

MPC-HC 1.7.7 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.7 - MPC-HC Team)

MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)

MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)

Mumble 1.2.8 (HKLM-x32\...\{734E6684-582C-4940-9301-54A3E30F46CA}) (Version: 1.2.8 - Thorvald Natvig)

OCR Software by I.R.I.S. 13.0 (HKLM\...\HPOCR) (Version: 13.0 - HP)

ONE TOUCH Upgrade S 2.8.0 (HKLM-x32\...\{C9A7E6A6-110D-4DBC-A8E2-F634613B5A8C}_is1) (Version: - TCL Communication Technology Holdings Limited)

PdaNet+ for Android 4.12 (HKLM-x32\...\PdaNet_is1) (Version: - June Fabrics Technology Inc)

Planescape Torment (HKLM-x32\...\Planescape Torment_is1) (Version: - GOG.com)

Plantronics® GameCom 780 Software for Dolby® Headphone (HKLM-x32\...\{EB3C9064-9140-4279-9E51-965119402151}) (Version: 3.10.0001 - Plantronics)

PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)

PlayReady PC Runtime x86 (HKLM-x32\...\{CCA5EAAD-92F4-4B7A-B5EE-14294C66AB61}) (Version: 1.3.0 - Microsoft Corporation)

Prison Architect (HKLM-x32\...\Prison Architect_is1) (Version: - )

Quick OS Installer v5.0 (HKLM-x32\...\Quick OS Installer v5.0) (Version: - )

QuickTime (HKLM-x32\...\{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}) (Version: 7.60.92.0 - Apple Inc.)

RaidCall (HKLM-x32\...\RaidCall) (Version: 7.3.6-1.0.12972.94 - raidcall.com)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.34.1130.2010 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6265 - Realtek Semiconductor Corp.)

Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)

Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden

Revit Structure 2012 (Version: 11.03.09231 - Autodesk) Hidden

Revit Structure 2012 Language Pack - English (Version: 11.03.09231 - Autodesk) Hidden

RIFT (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\RIFT) (Version: - Trion Worlds, Inc.)

Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.)

Samsung Kies (x32 Version: 2.5.2.13021_10 - Samsung Electronics Co., Ltd.) Hidden

SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.22.0 - SAMSUNG Electronics Co., Ltd.)

Scan (x32 Version: 13.0.0.0 - Hewlett-Packard) Hidden

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)

Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 13.0 - HP)

Sid Meiers Civilization Beyond Earth (HKLM-x32\...\U2lkTWVpZXJzQ2l2aWxpemF0aW9uQmV5b25kRWFydGg=_is1) (Version: 1 - )

Sid Meier's Civilization: Beyond Earth Rising Tide Addon (HKLM\...\U2lkTWVpZXJzQ2l2aWxpemF0aW9uQmV5b25kRWFydGg=_is1) (Version: 1 - )

Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.5.0.9082 - Microsoft Corporation)

Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)

SmartWebPrinting (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

SolutionCenter (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Status (x32 Version: 130.0.373.000 - Hewlett-Packard) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden

sXe Injected (HKLM-x32\...\sXe Injected) (Version: 15.2.4.0 - Alejandro Cortés)

Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.0.12.0 - Synaptics Incorporated)

System Requirements Lab (HKLM-x32\...\{0C976EC5-842F-4313-B2AB-EDDBCCD3A222}) (Version: 4.5.1.0 - Husdawg, LLC)

System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC)

System Requirements Lab Detection (HKLM-x32\...\{A0745AAC-4BFA-4B6C-99FD-C8AEF54B5B78}) (Version: 6.1.6.0 - Husdawg, LLC)

TeamSpeak 3 Client (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH)

Terrafirma (HKLM-x32\...\{C462702B-BFDA-494F-9B2A-821470CAD19C}) (Version: 2.1.0.0 - Sean Kasun)

The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.6.0.85 - KMP Media co., Ltd)

To the Moon (HKLM-x32\...\To the Moon) (Version: 1.0 - Freebird Games)

Toolbox (x32 Version: 130.0.648.000 - Hewlett-Packard) Hidden

Toshiba App Place (HKLM-x32\...\{ED3CBA78-488F-4E8C-B33F-8E3BF4DDB4D2}) (Version: 1.0.6.3 - Toshiba)

TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.1 - TOSHIBA)

TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.01.00 - TOSHIBA CORPORATION)

Toshiba Book Place (HKLM-x32\...\{A14962A7-2B7D-456E-BFCD-F54E3A88D41F}) (Version: 2.2.7530 - Nombre de su organización)

TOSHIBA Bulletin Board (HKLM-x32\...\InstallShield_{229C190B-7690-40B7-8680-42530179F3E9}) (Version: 2.0.10.64 - TOSHIBA Corporation)

TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.4 for x64 - TOSHIBA Corporation)

TOSHIBA eco Utility (HKLM-x32\...\InstallShield_{B3FF1CD9-B2F0-4D71-BB55-5F580401C48E}) (Version: 1.2.20.64 - TOSHIBA Corporation)

TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.3.64 - TOSHIBA Corporation)

TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.1.3C - TOSHIBA CORPORATION)

TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.0.32C - TOSHIBA CORPORATION)

TOSHIBA HDD Protection (HKLM\...\{94A90C69-71C1-470A-88F5-AA47ECC96B40}) (Version: 2.2.0.8 - TOSHIBA Corporation)

TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.6 - TOSHIBA Corporation)

Toshiba Laptop Checkup (HKLM-x32\...\NortonPCCheckup) (Version: 2.0.6.22 - Symantec Corporation)

TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.85.4 - TOSHIBA CORPORATION)

TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.5.13 - TOSHIBA CORPORATION)

Toshiba Online Backup (HKLM-x32\...\{C57BCDE1-7CB9-467D-B3BA-7E119916CDC1}) (Version: 2.0.0.25 - Toshiba)

TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.3.64 - TOSHIBA Corporation)

TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.3 - TOSHIBA)

TOSHIBA Recovery Media Creator (HKLM\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.0.5 for x64 - TOSHIBA Corporation)

TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.16.64 - TOSHIBA Corporation)

TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.1.45 - TOSHIBA)

TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.1.6 - TOSHIBA Corporation)

TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.51.2C - TOSHIBA CORPORATION)

TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.3.23.64 - TOSHIBA Corporation)

TOSHIBA VIDEO PLAYER (HKLM-x32\...\{6C5F3BDC-0A1B-4436-A696-5939629D5C31}) (Version: 4.00.5.07-A - TOSHIBA Corporation)

TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 1.1.5.7 - TOSHIBA Corporation)

ToshibaRegistration (HKLM-x32\...\{5AF550B4-BB67-4E7E-82F1-2C4300279050}) (Version: 1.0.4 - Toshiba)

TrayApp (x32 Version: 130.0.376.000 - Hewlett-Packard) Hidden

Utility Common Driver (x32 Version: 1.0.52.1C - TOSHIBA) Hidden

Vegas Pro 11.0 (HKLM-x32\...\{09771440-269F-11E1-89B1-F04DA23A5C58}) (Version: 11.0.510 - Sony)

Ventrilo Client (HKLM-x32\...\{789289CA-F73A-4A16-A331-54D498CE069F}) (Version: 3.0.8 - Flagship Industries, Inc.)

Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WebEx (HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC)

WebReg (x32 Version: 130.0.132.017 - Hewlett-Packard) Hidden

WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.0 - Sysprogs)

Windows Driver Package - Google, Inc. (WinUSB) AndroidUsbDeviceClass (12/06/2010 4.0.0000.00000) (HKLM\...\76F6B4A696B8C9A7ACFF01D4E1D6EF2D974C3E67) (Version: 12/06/2010 4.0.0000.00000 - Google, Inc.)

Windows Driver Package - MediaTek Inc. (usbser) Ports (09/01/2011 2.0.1136.0) (HKLM\...\32DC281B7E359EA3D16ECC7D98609F6A592B981D) (Version: 09/01/2011 2.0.1136.0 - MediaTek Inc.)

Windows Driver Package - MediaTek Inc. Net (07/14/2011 1.1129.00) (HKLM\...\8BC3CF920AF63C7AEF78B82D1C60D94704FB95CD) (Version: 07/14/2011 1.1129.00 - MediaTek Inc.)

Windows Driver Package - Microsoft (WUDFRd) WPD (02/22/2006 5.2.5326.4762) (HKLM\...\B77DDB8A5697AAF5DA4E4859E53C301B877DD206) (Version: 02/22/2006 5.2.5326.4762 - Microsoft)

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)

Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)

WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{083C82AE-568E-45dd-A92C-01422CA45760}\InprocServer32 -> C:\Program Files\Autodesk\Revit Structure 2012\Program\APIContext.dll => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{0F22A205-CFB0-4679-8499-A6F44A80A208}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.25.5\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{6D7AE628-FF41-4CD3-91DD-34825BB1A251}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe /Automation => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{B77E471C-FBF3-4CB5-880F-D7528AD4B349}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe /Automation => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{C92FB640-AD4D-498A-9979-A51A2540C977}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe /Automation => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{D0336C0B-7919-4C04-8CCE-2EBAE2ECE8C9}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.25.11\psuser_64.dll => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{D70E31AD-2614-49F2-B0FC-ACA781D81F3E}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acad.exe => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2012 - English\acadficn.dll => No File

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

CustomCLSID: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\jcvielma\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0547A3A3-549D-4875-A54E-0849694C3499} - System32\Tasks\Symantec\Norton Error Processor 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe

Task: {080574B0-6EEC-48CE-9769-F5844BE34C2C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {0C003953-AD2A-47F2-83F7-06A7EAF9EAF5} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

Task: {101038CA-147C-43B8-8F59-10251FCFBE21} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Device Center\itype.exe [2012-06-26] (Microsoft Corporation)

Task: {115DDDB5-D492-46AD-B0B9-8B2136B81FB4} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => C:\Windows\system32\GWX\GWXUXWorker.exe [2015-12-05] (Microsoft Corporation)

Task: {3E347D25-08CC-4277-A094-0CD4B2B1AE11} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)

Task: {40A11EDA-4EA5-4B00-A106-6DCE193C035D} - System32\Tasks\WINshell Event Logging => C:\Users\jcvielma\AppData\Local\Temp\Dscp1.exe <==== ATTENTION

Task: {428E1C1E-8271-40A4-A342-C365F24EFE8A} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000UA => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

Task: {58F4E9C9-2D30-4498-96BA-1287C698EB4B} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

Task: {6BEB87FF-749D-4460-983E-505BE53DF5F9} - System32\Tasks\{ADD031BB-9EAD-4A0C-BB89-2D6E967BE691} => pcalua.exe -a C:\Users\jcvielma\Desktop\Autodesk_Robot_Structural_Analysis_Professional_2012_Multilingual_Win_32-64bit.exe -d C:\Users\jcvielma\Desktop

Task: {925186D3-6858-4CC1-8179-27D755C30D3E} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe

Task: {92FDED0C-35FC-4911-B804-E5324D3B6FCF} - System32\Tasks\WINshell Event Notification => C:\Users\jcvielma\AppData\Local\Temp\SBCint2.exe <==== ATTENTION

Task: {9CD74AEB-C398-4DB3-B485-082E90B6E5D1} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000Core => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-19] (Dropbox, Inc.)

Task: {B0397A3F-243A-4A2A-BD0A-A7B0714ADBD7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)

Task: {D20F1A08-0002-4147-803A-ADE9EFC249F2} - System32\Tasks\Microsoft_Hardware_Launch_devicecenter_exe => c:\Program Files\Microsoft Device Center\devicecenter.exe [2012-06-26] (Microsoft)

Task: {E2F573D4-C41E-4D64-82F8-E52D19F0ACFC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-03-13] (Piriform Ltd)

Task: {F5832AD8-BE95-442C-84CF-128EC4AF452F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)

Task: {F8B3D7EC-10CA-4DF6-8A4B-2B47450D5B25} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Device Center\ipoint.exe [2012-06-26] (Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000Core.job => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-1080308731-2573736826-3272458361-1000UA.job => C:\Users\jcvielma\AppData\Local\Dropbox\Update\DropboxUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg

==================== Loaded Modules (Whitelisted) ==============

2015-11-17 18:21 - 2015-11-17 18:21 - 03387320 _____ () C:\ProgramData\System32\SafeGuard64.dll

2010-12-07 15:02 - 2010-12-07 15:02 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

2011-10-26 12:42 - 2011-02-17 19:13 - 00136704 _____ () C:\windows\System32\zlhp2600.dll

2011-02-02 14:08 - 2011-02-02 14:08 - 00018656 _____ () C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe

2013-09-05 00:17 - 2013-09-05 00:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF

2015-09-24 08:39 - 2015-12-10 10:56 - 00193456 _____ () C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe

2015-11-05 04:51 - 2015-12-08 10:24 - 07142328 _____ () C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe

2010-12-07 15:02 - 2010-12-07 15:02 - 01501696 _____ () C:\Program Files\Common Files\Intel\WirelessCommon\LIBEAY32.dll

2011-01-27 10:41 - 2011-01-27 10:41 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll

2015-02-26 13:02 - 2013-04-22 10:46 - 01054320 _____ () C:\Program Files (x86)\PdaNet for Android\PdaNetPC.exe

2012-02-20 21:29 - 2012-02-20 21:29 - 00087912 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

2012-02-20 21:28 - 2012-02-20 21:28 - 01242472 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

2015-11-17 18:21 - 2015-11-17 18:21 - 02601400 _____ () C:\ProgramData\System32\SafeGuard32.dll

2015-12-10 10:01 - 2015-12-08 11:12 - 00126896 _____ () C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdate.dll

2015-10-27 06:10 - 2015-11-30 10:08 - 00256440 _____ () C:\Users\jcvielma\AppData\Roaming\XBox\Xbox.Live.dll

2013-09-05 00:14 - 2013-09-05 00:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF

2015-12-16 15:16 - 2015-12-10 23:24 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll

2015-12-16 15:16 - 2015-12-10 23:24 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll

2015-12-24 17:17 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\jcvielma\Desktop\semestre II:com.dropbox.attributes

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2012-08-16 12:36 - 2012-08-16 12:36 - 00000852 ____A C:\windows\system32\Drivers\etc\hosts

127.0.0.1 activate.adobe.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 192.168.0.1 - 208.67.222.222

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk => C:\windows\pss\HP Digital Imaging Monitor.lnk.CommonStartup

MSCONFIG\startupfolder: C:^Users^jcvielma^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Quick OS Installer v5.0.lnk => C:\windows\pss\Quick OS Installer v5.0.lnk.Startup

MSCONFIG\startupreg: 00TCrdMain => %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe

MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe"

MSCONFIG\startupreg: Adobe Acrobat Speed Launcher => "C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe"

MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"

MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\jcvielma\AppData\Local\Akamai\netsession_win.exe"

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

MSCONFIG\startupreg: BCSSync => "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices

MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Users\jcvielma\Desktop\New folder (2)\Daemon.Tools.v.4.41.Portable\Daemon Tools Portable\DTLite.exe" -autorun

MSCONFIG\startupreg: DAEMON Tools Pro Agent => "C:\Program Files (x86)\Portable\DAEMON Tools Pro Advanced v5.2.0.0348\DTAgent.exe" -autorun

MSCONFIG\startupreg: dcrunwvfev => wscript.exe //B "C:\Users\jcvielma\AppData\Local\Temp\dcrunwvfev..vbs"

MSCONFIG\startupreg: EPSON_UD_START => "C:\Program Files (x86)\EPSON Projector\EPSON USB Display V1.4\EMP_UD.exe" -UDCONNECT

MSCONFIG\startupreg: GamecomSound => C:\Program Files\Plantronics\GameCom780\GameCom780.exe

MSCONFIG\startupreg: Google Update => "C:\Users\jcvielma\AppData\Local\Google\Update\GoogleUpdate.exe" /c

MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe

MSCONFIG\startupreg: HSON => %ProgramFiles%\TOSHIBA\TBS\HSON.exe

MSCONFIG\startupreg: HWSetup => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe hwSetUP

MSCONFIG\startupreg: IntelliPoint => "c:\Program Files\Microsoft Device Center\ipoint.exe"

MSCONFIG\startupreg: IntelliType Pro => "c:\Program Files\Microsoft Device Center\itype.exe"

MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

MSCONFIG\startupreg: KeNotify => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe

MSCONFIG\startupreg: KiesAirMessage => C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup

MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload

MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

MSCONFIG\startupreg: NortonOnlineBackupReminder => "C:\Program Files (x86)\Toshiba\Toshiba Online Backup\Activation\TOBuActivation.exe" UNATTENDED

MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

MSCONFIG\startupreg: RIMBBLaunchAgent.exe => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe

MSCONFIG\startupreg: SmoothView => %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe

MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\Steam.exe" -silent

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: SVPWUTIL => C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe SVPwUTIL

MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe

MSCONFIG\startupreg: Teco => "%ProgramFiles%\TOSHIBA\TECO\Teco.exe" /r

MSCONFIG\startupreg: ThpSrv => C:\windows\system32\thpsrv /logon

MSCONFIG\startupreg: ToshibaAppPlace => "C:\Program Files (x86)\Toshiba\Toshiba App Place\ToshibaAppPlace.exe"

MSCONFIG\startupreg: ToshibaServiceStation => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe" /hide:60

MSCONFIG\startupreg: TosNC => %ProgramFiles%\Toshiba\BulletinBoard\TosNcCore.exe

MSCONFIG\startupreg: TosReelTimeMonitor => %ProgramFiles%\TOSHIBA\ReelTime\TosReelTimeMonitor.exe

MSCONFIG\startupreg: TosSENotify => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe

MSCONFIG\startupreg: TosWaitSrv => %ProgramFiles%\TOSHIBA\TPHM\TosWaitSrv.exe

MSCONFIG\startupreg: TPwrMain => %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE

MSCONFIG\startupreg: TSleepSrv => %ProgramFiles(x86)%\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe

MSCONFIG\startupreg: TWebCamera => "C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe" autorun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{DB593A6B-FC72-4281-B398-C200D7322EF2}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe

FirewallRules: [{5627231E-46BE-44D7-96BD-18709AB9AE18}] => (Allow) LPort=2869

FirewallRules: [{167AA444-58BE-4A46-8505-DF480768A899}] => (Allow) LPort=1900

FirewallRules: [{344CD3B2-601F-460C-8812-12EF13E2C85E}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe

FirewallRules: [{0F30AB74-059B-429D-B225-6F2448A7BDE9}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe

FirewallRules: [{9EB361BA-9203-404B-8620-13334F4CFC31}] => (Allow) C:\Program Files (x86)\Intel Corporation\Intel Wireless Display\WiDiApp.exe

FirewallRules: [TCP Query User{FF57190C-1164-42F9-B7B8-12C050E6F403}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{E69C9610-7605-4E08-86EB-F413037E9A21}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{8E527AE4-264F-4833-B2B6-E38234A1142B}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe

FirewallRules: [UDP Query User{BE6457FA-105A-49E3-8F8A-51427962DA30}C:\users\jcvielma\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\jcvielma\appdata\local\akamai\netsession_win.exe

FirewallRules: [TCP Query User{3D9FE449-ED25-4A63-9BD6-A72D64E7D9A3}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [UDP Query User{0D080FCA-C1FB-4373-9AAA-860E8293772D}C:\program files (x86)\java\jre6\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre6\bin\javaw.exe

FirewallRules: [TCP Query User{F694C9F6-5CC5-470E-B069-B26275E71F31}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe

FirewallRules: [UDP Query User{C2B7857B-9054-4479-844E-D6A4DBD6A338}C:\windows\syswow64\java.exe] => (Allow) C:\windows\syswow64\java.exe

FirewallRules: [{16D9E866-89DA-40A0-A350-359462331E1F}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe

FirewallRules: [{60FA704F-F291-41E1-86F4-4FC4E88A2634}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{FB9ABB77-8A9B-4653-BC74-9217C6B6D373}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe

FirewallRules: [{E20C1253-DBF1-405D-9D10-D209E16CFE7E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{DA16F645-B4F8-40BA-9499-67187EF5D7D1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe

FirewallRules: [{084A5D4F-270A-4168-993B-8FFB2EEBF4C9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe

FirewallRules: [{ADF1A2B3-DF6B-4977-A258-35B5184BA98C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe

FirewallRules: [{40C07950-DEA9-41F1-ADA9-755F34C78083}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe

FirewallRules: [{9FA214C4-C1E1-4FFE-B270-9F6E13493265}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe

FirewallRules: [{98DC209D-96CC-4257-B3E8-9FB0DF26357F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe

FirewallRules: [{82F91A3A-B9C7-4A43-81DC-F09C664EC422}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe

FirewallRules: [{2A0323C5-A636-4116-B9A6-88FA0E2CF8C5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe

FirewallRules: [{E5D091E3-F27E-4FA8-974B-ECEFD1186CFA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe

FirewallRules: [{8FEA7337-9A1A-41D0-81A3-A6605A805210}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe

FirewallRules: [{DC91113E-1CAB-4FD9-A8B0-C5DA0F6E50EF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe

FirewallRules: [{F42D6EF0-E4AA-4172-A38C-B44141D78BD1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe

FirewallRules: [{FB88D54B-3756-4410-901C-99C7873FAE6A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe

FirewallRules: [{CD357F75-5921-4574-848D-02E12E26CBDD}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe

FirewallRules: [{BB610DD2-2A77-4EE5-8A14-B70BF8303B78}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe

FirewallRules: [{B00575D6-4BDE-4B7C-9166-BE4A2D908773}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe

FirewallRules: [{8DC0652A-26CF-4B8C-A6A2-16AAA813C332}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe

FirewallRules: [{E6610926-6538-4A00-9756-CC3E583B0D64}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe

FirewallRules: [{606A6972-4D2B-4E4C-AB9F-24CAA274744B}] => (Allow) C:\Program Files (x86)\HP\digital imaging\smart web printing\smartwebprintexe.exe

FirewallRules: [{DE71F21B-246C-4754-9F38-17A2CDB7EE83}] => (Allow) C:\Program Files (x86)\iTunes\iTunes.exe

FirewallRules: [TCP Query User{25C5A92E-FD54-4261-B9DB-C0ED4BCD3786}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe

FirewallRules: [UDP Query User{934D58B8-0335-4BEB-8686-1A821D621183}C:\windows\syswow64\javaw.exe] => (Block) C:\windows\syswow64\javaw.exe

FirewallRules: [TCP Query User{7E7BAA4E-FB8C-4427-AA9B-1D57BDE6FEC0}C:\users\jcvielma\downloads\utorrent.exe] => (Allow) C:\users\jcvielma\downloads\utorrent.exe

FirewallRules: [UDP Query User{94BEBFAA-3C3F-4965-A12E-B158556A57BA}C:\users\jcvielma\downloads\utorrent.exe] => (Allow) C:\users\jcvielma\downloads\utorrent.exe

FirewallRules: [{B5E70E8D-5AC8-4853-ADCB-89B8969CA96B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{B723F0F4-C2DF-43D8-81E4-149E792B1E70}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [TCP Query User{75640885-259D-4F0F-A82B-FB8F6034F10D}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{FBD5385F-51A0-4451-B41E-E4580B18DAB2}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [TCP Query User{7B969689-C4F7-4808-8F69-E053BCD2FB9B}C:\users\jcvielma\downloads\utorrent.exe] => (Block) C:\users\jcvielma\downloads\utorrent.exe

FirewallRules: [UDP Query User{5B52D4D3-7382-4B94-A6B9-74CDB87F5708}C:\users\jcvielma\downloads\utorrent.exe] => (Block) C:\users\jcvielma\downloads\utorrent.exe

FirewallRules: [{3EDE4C83-2361-4EEF-A116-CFEB8DA754FB}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe

FirewallRules: [{F856CBD8-6992-4AFA-99B3-2B71D09F63B5}] => (Allow) C:\Program Files (x86)\Ventrilo\Ventrilo.exe

FirewallRules: [{ADBB9D6F-9EA5-43A0-81E2-F174E13B135A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{E41FC52E-65E4-487F-9A31-6955CCCBB3FB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{F05A6DDC-52A7-416A-B167-20EE2B0CF3BE}] => (Allow) LPort=4481

FirewallRules: [{8E59ECB7-9F41-4F00-A0EB-864CF97522F8}] => (Allow) LPort=4481

FirewallRules: [{968B81C6-9C7A-4536-85F5-25E75BB9CDF3}] => (Allow) LPort=4482

FirewallRules: [{D6C03AD3-6DCA-4447-ACF9-492C1DC91433}] => (Allow) LPort=4482

FirewallRules: [{479C2D31-F057-45D7-BCF3-8EA3AB4361B6}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe

FirewallRules: [{C1D28DEB-1B38-497F-A086-8BF8948FCCB9}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe

FirewallRules: [TCP Query User{09C1D70F-4FD5-4B7E-9369-C9D0B7C27298}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe

FirewallRules: [UDP Query User{19013303-3CD4-4326-952C-7324DB38B615}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe

FirewallRules: [{4E4F124C-EF6F-4B03-B0DF-6341723B8D29}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{75DB97B9-3AAF-4E1B-AD93-0CF7816EB9DF}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe

FirewallRules: [UDP Query User{AE02FEDE-5780-41F3-A725-60D7F533E49D}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe

FirewallRules: [{30A053A2-1721-4D24-8598-29E0924E9B30}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{1146B9B3-CEFE-4937-80E9-5562DB262C9B}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{794739B6-0E50-4594-A884-31CE7023D500}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [TCP Query User{B1BBE1D3-8060-4B72-8DA1-4E179D04AF4D}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin

FirewallRules: [UDP Query User{64574412-3EFA-4786-826D-D3029795F307}C:\program files (x86)\libreoffice 4\program\soffice.bin] => (Allow) C:\program files (x86)\libreoffice 4\program\soffice.bin

FirewallRules: [TCP Query User{57A91034-15E9-4784-9947-1D2DDA217015}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{76BDE749-1112-4C9C-BA07-5E22067BE756}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{0E1E31CE-DF8D-481F-A219-48BC6D360913}] => (Allow) C:\Program Files (x86)\DolbyAxon\Axon.exe

FirewallRules: [{47A7DF5C-1E23-4618-B23D-372C43047CD8}] => (Allow) C:\Program Files (x86)\DolbyAxon\Axon.exe

FirewallRules: [TCP Query User{3769D4BF-ED3F-48CA-A43A-72C73F711213}C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe] => (Allow) C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe

FirewallRules: [UDP Query User{437458A5-153D-4E7F-A502-D7EAFAB7BD61}C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe] => (Allow) C:\users\jcvielma\desktop\survivors\survivers_beta_3.exe

FirewallRules: [{AF3FA491-0764-4F13-AAD8-C092876F12A4}] => (Allow) C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{BEC2C7FA-0039-4704-A83D-20C9DE6E09A4}] => (Allow) C:\Users\jcvielma\AppData\Roaming\Dropbox\bin\Dropbox.exe

FirewallRules: [{1C3183CB-D447-405A-9D40-D9367ABDD82B}] => (Allow) C:\Users\jcvielma\Downloads\uTorrent.exe

FirewallRules: [{C2AE1FF2-BD63-48F3-9B5A-D771D6992D76}] => (Allow) C:\Users\jcvielma\Downloads\uTorrent.exe

FirewallRules: [TCP Query User{9C31AD2E-9316-4C9D-BB22-975388B167F9}C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [UDP Query User{107AD921-5417-4F9A-ABD6-15934F89B916}C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\jcvielma\appdata\roaming\dropbox\bin\dropbox.exe

FirewallRules: [{DBCAF668-4EBB-4065-83E3-C304C5F9601C}] => (Allow) C:\Users\jcvielma\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{B1AE468B-41C2-460B-93A6-F75EBC20BFA4}] => (Allow) C:\Users\jcvielma\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [TCP Query User{6DFE88E2-6124-4B36-B6DC-CE4E16B831EF}C:\program files (x86)\age of mythology extended edition\aomx.exe] => (Block) C:\program files (x86)\age of mythology extended edition\aomx.exe

FirewallRules: [UDP Query User{1D1B51CB-68F6-4B03-B8C8-20B01CBD211F}C:\program files (x86)\age of mythology extended edition\aomx.exe] => (Block) C:\program files (x86)\age of mythology extended edition\aomx.exe

FirewallRules: [TCP Query User{166BD864-56AD-4542-A80F-ABB5DBF1B857}C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe] => (Block) C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe

FirewallRules: [UDP Query User{8F2BF7ED-B87B-4EBA-92AD-04994379D91D}C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe] => (Block) C:\Program Files (x86)\MATLAB\R2008a\bin\win32\MATLAB.exe

FirewallRules: [TCP Query User{83C1A7EB-1F96-493B-B848-2A0B0E268AD6}C:\program files\terraria.v1.3.0.1\terraria.exe] => (Allow) C:\program files\terraria.v1.3.0.1\terraria.exe

FirewallRules: [UDP Query User{C5D70187-8E48-4AC5-B2A1-2E31733C121C}C:\program files\terraria.v1.3.0.1\terraria.exe] => (Allow) C:\program files\terraria.v1.3.0.1\terraria.exe

FirewallRules: [{90D4A6E6-7C50-4C14-A986-FE163A3637F1}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{E16B2FC2-A0A9-46BC-B444-C93D0BAA670B}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{D65791CC-1A73-4329-8E2D-3FF4DCB30F1B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{619E2111-DC43-49F5-A53E-D3D307BF7A0C}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [TCP Query User{FB719E1A-3018-42BE-8132-9186B85B88A6}C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe] => (Allow) C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe

FirewallRules: [UDP Query User{6B2BCBDD-FB11-41DE-B893-2A13147B2AB6}C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe] => (Allow) C:\program files (x86)\microsoft visual studio\common\tools\vs-ent98\vanalyzr\varpc.exe

FirewallRules: [{9207F7CB-21F1-4D45-B98E-21D11EDE0DDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic Duels\MagicDuels.exe

FirewallRules: [{F6496104-6BFE-46A3-9C18-E9D49DA29796}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Magic Duels\MagicDuels.exe

FirewallRules: [TCP Query User{A8EAB89A-080E-4A25-BB67-E36D75DA5149}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{2C5D4C97-FA25-4B52-B896-7B7B9E0E04EA}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [{562AEDF3-829D-4414-9313-913E7E80B5C5}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe

FirewallRules: [{29D40B23-5276-486D-901F-20EE01E317B8}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe

FirewallRules: [{CA3DD689-DF58-4ECB-9C04-AB24E703839E}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe

FirewallRules: [{ED6ADEFE-FFC6-4196-9C60-62904F1754DF}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe

FirewallRules: [{29F962B8-2315-4593-85A7-B2A5CB9DBF71}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe

FirewallRules: [{44496BFD-116D-4210-9C40-DF8A371F251C}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe

FirewallRules: [{63261FBA-F56E-40E7-BF31-CE921FBEB848}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe

FirewallRules: [{B4AD1024-DB07-4E6A-A88C-1D3F4D2051AA}] => (Allow) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe

FirewallRules: [{F7926C01-FAC6-4A37-8EE5-C1D3B6699EE2}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

25-12-2015 15:25:21 Windows Update

27-12-2015 15:03:46 avast! antivirus system restore point

27-12-2015 15:54:48 avast! antivirus system restore point

27-12-2015 16:05:17 avast! antivirus system restore point

==================== Faulty Device Manager Devices =============

Name: regi

Description: regi

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer:

Service: regi

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.

==================== Event log errors: =========================

Application errors:

==================

Error: (12/28/2015 10:13:14 AM) (Source: System Restore) (EventID: 8193) (User: )

Description: Failed to create restore point (Process = C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe Files\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\Setup.exe" -Embedding; Description = Configured Microsoft Office Professional Plus 2010; Error = 0x8007043c).

Error: (12/28/2015 09:49:46 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: SkypeUpdateEx.exe, version: 0.0.0.0, time stamp: 0x5668e9c7

Faulting module name: SafeGuard32.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeca

Exception code: 0xc0000005

Fault offset: 0x6eb2e6a2

Faulting process id: 0x954

Faulting application start time: 0xSkypeUpdateEx.exe0

Faulting application path: SkypeUpdateEx.exe1

Faulting module path: SkypeUpdateEx.exe2

Report Id: SkypeUpdateEx.exe3

Error: (12/28/2015 12:57:00 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program IEXPLORE.EXE version 11.0.9600.18123 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 374

Start Time: 01d1413054bb2593

Termination Time: 9

Application Path: C:\Program Files\Internet Explorer\IEXPLORE.EXE

Report Id: 9c3ab200-ad23-11e5-8a4b-b870f44c5e26

Error: (12/28/2015 12:42:04 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: VipreRescueScanner.exe, version: 7.0.7.8, time stamp: 0x524a234f

Faulting module name: SafeGuard32.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeca

Exception code: 0xc0000005

Fault offset: 0x6e3ee6a2

Faulting process id: 0x418

Faulting application start time: 0xVipreRescueScanner.exe0

Faulting application path: VipreRescueScanner.exe1

Faulting module path: VipreRescueScanner.exe2

Report Id: VipreRescueScanner.exe3

Error: (12/27/2015 10:57:45 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )

Description: 80004005

Error: (12/27/2015 08:42:42 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: WerFault.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc607

Faulting module name: SafeGuard64.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeb1

Exception code: 0xc0000005

Fault offset: 0x000007fef9322b2b

Faulting process id: 0x17bc

Faulting application start time: 0xWerFault.exe0

Faulting application path: WerFault.exe1

Faulting module path: WerFault.exe2

Report Id: WerFault.exe3

Error: (12/27/2015 08:41:18 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: taskhost.exe, version: 6.1.7601.18010, time stamp: 0x50aee9f3

Faulting module name: SafeGuard64.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeb1

Exception code: 0xc0000005

Fault offset: 0x000007fef9322b2b

Faulting process id: 0x14f4

Faulting application start time: 0xtaskhost.exe0

Faulting application path: taskhost.exe1

Faulting module path: taskhost.exe2

Report Id: taskhost.exe3

Error: (12/27/2015 07:02:23 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 664

Start Time: 01d140f55e13700c

Termination Time: 521

Application Path: C:\windows\Explorer.EXE

Report Id: 0f8c861d-acf2-11e5-8a4b-b870f44c5e26

Error: (12/27/2015 07:00:41 PM) (Source: Windows Backup) (EventID: 4103) (User: )

Description: The backup did not complete because of an error writing to the backup location D:\. The error is: The backup location cannot be found or is not valid. Review your backup settings and check the backup location. (0x81000006).

Error: (12/27/2015 06:38:35 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Faulting application name: sdiagnhost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3d4

Faulting module name: SafeGuard64.dll_unloaded, version: 0.0.0.0, time stamp: 0x564afeb1

Exception code: 0xc0000005

Fault offset: 0x000007fef9322b2b

Faulting process id: 0x55c

Faulting application start time: 0xsdiagnhost.exe0

Faulting application path: sdiagnhost.exe1

Faulting module path: sdiagnhost.exe2

Report Id: sdiagnhost.exe3

System errors:

=============

Error: (12/28/2015 11:14:28 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The regi service failed to start due to the following error:

%%2

Error: (12/28/2015 11:14:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: The Common Client Job Manager Service service failed to start due to the following error:

%%2

Error: (12/28/2015 10:40:13 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:55 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

Error: (12/28/2015 10:39:54 AM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: The Network List Service service depends on the Network Location Awareness service which failed to start because of the following error:

%%1068

CodeIntegrity:

===================================

Date: 2015-09-26 14:14:01.212

Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-09-26 14:14:01.012

Date: 2015-09-26 14:14:00.731

Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\certsentry.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-09-26 14:14:00.468

Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\gpapi.dll because the set of per-page image hashes could not be found on the system.

Date: 2015-09-26 14:14:00.208

Date: 2015-01-16 18:23:28.972

Date: 2015-01-16 18:23:28.812

Date: 2015-01-16 18:23:28.657

Date: 2015-01-16 18:23:28.463

Date: 2015-01-16 18:23:28.230

==================== Memory info ===========================

Processor: Intel® Core™ i3-2310M CPU @ 2.10GHz

Percentage of memory in use: 58%

Total physical RAM: 4002.69 MB

Available physical RAM: 1658.62 MB

Total Virtual: 8003.59 MB

Available Virtual: 5489.2 MB

==================== Drives ================================

Drive c: (TI106051W0J) (Fixed) (Total:451.3 GB) (Free:237.85 GB) NTFS ==>[system with boot components (obtained from drive)]

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 465.8 GB) (Disk ID: D82D6D2D)

Partition 1: (Active) - (Size=1.5 GB) - (Type=27)

Partition 2: (Not Active) - (Size=451.3 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=13 GB) - (Type=17)

==================== End of Addition.txt ============================

thanks for your time

#2
Essexboy

Posted 28 December 2015 - 12:16 PM

GeekU Moderator

Retired Staff
69,964 posts

After this run could you try an AV web site and let me know the result

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
ShellIconOverlayIdentifiers: [ExplorerEx] -> {E056AFDD-03E9-4D73-8D33-8FCCBCA73438} => No File
ShellIconOverlayIdentifiers: [GDriveSharedOverlay] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => No File
ShellIconOverlayIdentifiers: [SugarSyncBackedUp] -> {0C4A258A-3F3B-4FFF-80A7-9B3BEC139472} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncPending] -> {62CCD8E3-9C21-41E1-B55E-1E26DFC68511} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncRoot] -> {A759AFF6-5851-457D-A540-F4ECED148351} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
ShellIconOverlayIdentifiers: [SugarSyncShared] -> {1574C9EF-7D58-488F-B358-8B78C1538F51} => C:\Program Files (x86)\SugarSync\SugarSyncShellExt_x64.dll No File
Winsock: Catalog5 10 C:\ProgramData\System32\SafeGuard32.dll No File
Winsock: Catalog5-x64 10 C:\ProgramData\System32\SafeGuard64.dll [3387320 2015-11-17] ()
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
HKU\S-1-5-21-1080308731-2573736826-3272458361-1000\Software\Microsoft\Internet Explorer\Main,Window Title = Visita www.landerextremo.s5.com
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll No File
Toolbar: HKU\S-1-5-21-1080308731-2573736826-3272458361-1000 -> No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\jcvielma\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2012-11-09] [UpdateUrl: hxxp://www.interoperabilitybridges.com/ChromeWMP/wmpChromeupdates.xml] <==== ATTENTION
R2 SkypeUpdateEx; C:\Program Files (x86)\SkypeUpdateEx\SkypeUpdateEx.exe [193456 2015-12-10] ()
R2 XBox; C:\Users\jcvielma\AppData\Roaming\XBox\XBLive.exe [7142328 2015-12-08] ()
S2 PCCUJobMgr; "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\ccSvcHst.exe" /s "PCCUJobMgr" /m "C:\Program Files (x86)\Norton PC Checkup\Engine\2.0.6.22\diMaster.dll" /prefetch:1
2015-11-30 23:31 - 2015-11-30 23:31 - 00015464 _____ C:\windows\DelYac64.sys
2015-12-28 11:14 - 2015-09-24 09:56 - 00000000 ____D C:\Program Files (x86)\SkypeUpdateEx
Task: {3E347D25-08CC-4277-A094-0CD4B2B1AE11} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2015-08-06] (Symantec Corporation)
Task: {40A11EDA-4EA5-4B00-A106-6DCE193C035D} - System32\Tasks\WINshell Event Logging => C:\Users\jcvielma\AppData\Local\Temp\Dscp1.exe <==== ATTENTION
Task: {925186D3-6858-4CC1-8179-27D755C30D3E} - System32\Tasks\Symantec\Norton Error Analyzer 18.7.2.3 => C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\SymErr.exe
Task: {92FDED0C-35FC-4911-B804-E5324D3B6FCF} - System32\Tasks\WINshell Event Notification => C:\Users\jcvielma\AppData\Local\Temp\SBCint2.exe <==== ATTENTION
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk -> C:\Program Files (x86)\Internet Explorer\iexplore.exe (Microsoft Corporation) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
ShortcutWithArgument: C:\Users\jcvielma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> hxxp://nav.brotlab.net?uid={a488cd19a49d439997197f5077097076}&r=eg
C:\Users\jcvielma\AppData\Roaming\XBox
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh int ip reset c:\resetlog.txt
CMD: ipconfig /release
CMD: ipconfig /renew
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

#3
mavol6

Posted 28 December 2015 - 12:46 PM

New Member

Topic Starter
Member
4 posts

now i can enter the websites and use malwarebytes normally, is there any other step i have to follow?.

here is the log

Fix result of Farbar Recovery Scan Tool (x64) Version:28-12-2015

Ran by jcvielma (2015-12-28 14:04:56) Run:1

Running from C:\Users\jcvielma\Desktop

Loaded Profiles: jcvielma (Available Profiles: jcvielma)

Boot Mode: Normal

==============================================

fixlist content:

*****************

CreateRestorePoint: