[ismael4790]

Hi guys, new to this site,

 

I hope some of you can help me with this.

 

My windows defender, after a scan, has detected this troyan. It doesn't seem to be able to remove it. After having been stolen my ebay account, I think this might be related.

 

What can i do to remove it? I'm no expert at all in these subjects. I have Windows 10.

 

Thanks in advance!!

Edited by ismael4790, 21 September 2017 - 06:49 AM.

[Advertisements]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!


Next

Download AdwCleaner from here. Save the file to the desktop.
NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.
Close all open windows and browsers.

• XP users: Double click the AdwCleaner icon to start the program.
• Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
  You will see the following console:

• Click the Scan button and wait for the scan to finish.
• After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
• Click the Clean button.
• Everything checked will be moved to Quarantine.
• When the program has finished cleaning a report appears.Once done it will ask to reboot, allow this

• On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C0].txt

Next

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zep516]

Hi! My name is zep516 and Welcome to Geekstogo!
I'll do the best I can to resolve your computer issue
Please make sure to carefully read any instruction that I give you. If you're not sure, or if something unexpected happens, don't continue Stop and ask! Never be afraid to ask questions!


Next

Download AdwCleaner from here. Save the file to the desktop.
NOTE: If you are using IE 8 or above you may get a warning that stops the program from downloading. Just click on the warning and allow the download to complete.
Close all open windows and browsers.

• XP users: Double click the AdwCleaner icon to start the program.
• Vista/7/8 users: Right click the AdwCleaner icon on the desktop, click Run as administrator and accept the UAC prompt to run AdwCleaner.
  You will see the following console:

• Click the Scan button and wait for the scan to finish.
• After the Scan has finished the window may or may not show what it found and above, in the progress bar, you will see: Pending. Please uncheck elements you don't want to remove.
• Click the Clean button.
• Everything checked will be moved to Quarantine.
• When the program has finished cleaning a report appears.Once done it will ask to reboot, allow this

• On reboot a log will be produced please copy / paste that in your next reply. This report is also saved to C:\AdwCleaner\AdwCleaner[C0].txt

Next

Everything gets download to the desktop and tools are "Run as administrator."

Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zep516]

I'll review the log reports not until later today.

Thanks
Joe

[ismael4790]

Here they are. 

 

 

 

LOGS:

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-09-2017

Ran by Ismael (administrator) on DESKTOP-FKS8UBF (21-09-2017 15:00:37)

Running from C:\Users\Ismael\Downloads

Loaded Profiles: Ismael (Available Profiles: defaultuser0 & Ismael)

Platform: Windows 10 Home Version 1703 (X64) Language: Español (España, internacional)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe

(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

() C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe

(Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHDCPSvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHeciSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHTE.EXE

(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe

(Spotify Ltd) C:\Users\Ismael\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Mega Limited) C:\Users\Ismael\AppData\Local\MEGAsync\MEGAsync.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel® Corporation) C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\XtuService.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe

() C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-09-14] (Dropbox, Inc.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2017-07-26] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2017-07-26] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [Spotify Web Helper] => C:\Users\Ismael\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1580144 2017-08-05] (Spotify Ltd)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe [1049608 2017-07-03] (ASUSTek Computer Inc)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\MountPoints2: {c5a47316-2d46-11e7-88c9-c8215828a739} - "F:\setup_observer_1.0_(14198).exe" 

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\MountPoints2: {dcaeac6e-8406-11e7-88d8-c8215828a739} - "G:\setup.exe" 

Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-03-28]

ShortcutTarget: MEGAsync.lnk -> C:\Users\Ismael\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MultiSkypeLauncher.lnk [2017-06-18]

ShortcutTarget: MultiSkypeLauncher.lnk -> C:\Program Files (x86)\MultiSkypeLauncher\MultiSkypeLauncher.exe (IM-history)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 212.166.211.4 62.81.16.164

Tcpip\..\Interfaces\{635ec534-7883-4116-b0d7-86660645c924}: [DhcpNameServer] 147.156.200.250

Tcpip\..\Interfaces\{bf0983bd-6838-463c-a5e5-07f2c50a8c5c}: [DhcpNameServer] 212.166.211.4 62.81.16.164

Tcpip\..\Interfaces\{ddd55ed5-bad7-4eeb-b42f-917fa280a2b8}: [DhcpNameServer] 147.156.200.250

Tcpip\..\Interfaces\{fb79ae9e-5616-4872-b030-18f2fbba66f2}: [DhcpNameServer] 212.166.211.4 62.81.16.164

 

Internet Explorer:

==================

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus17win10.msn.com/?pc=ASTE

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE

SearchScopes: HKU\S-1-5-21-2544269325-2574649414-738075177-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-2544269325-2574649414-738075177-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2017-09-05] (Oracle Corporation)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2017-09-05] (Oracle Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

 

FireFox:

========

FF DefaultProfile: qtyby6wo.default

FF ProfilePath: C:\Users\Ismael\AppData\Roaming\Mozilla\Firefox\Profiles\qtyby6wo.default [2017-08-09]

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2017-09-05] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2017-09-05] (Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)

 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.es/

CHR StartupUrls: Default -> "hxxp://www.google.es/"

CHR Profile: C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default [2017-09-21]

CHR Extension: (Presentaciones de Google) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-28]

CHR Extension: (Google Docs) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-28]

CHR Extension: (Google Drive) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-28]

CHR Extension: (YouTube) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-28]

CHR Extension: (Adobe Acrobat) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-29]

CHR Extension: (Hojas de cálculo de Google) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-28]

CHR Extension: (Documentos de Google sin conexión) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-28]

CHR Extension: (Google Mail Checker) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2017-03-28]

CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]

CHR Extension: (Gmail) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-28]

CHR Extension: (Chrome Media Router) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]

CHR HKU\S-1-5-21-2544269325-2574649414-738075177-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)

S2 ASUS Rog Aura Core; C:\Program Files (x86)\ASUS\ROG Aura Core\AuraCoreSrv.exe [552600 2016-10-14] (ASUS)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [49992 2017-09-14] (Dropbox, Inc.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)

R2 FBAgent; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe [73032 2014-08-13] ()

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel® Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [177440 2016-10-05] (Intel Corporation)

S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\wtoolex\wpsupdatesvr.exe [133376 2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-11-29] ()

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)

R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-26] (NVIDIA Corporation)

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2015-03-19] (The OpenVPN Project)

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()

S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [42680 2016-10-21] (ASUSTeK COMPUTER INC.)

S3 Soda PDF Desktop; C:\Program Files\Soda PDF Desktop\ws.exe [2581864 2017-01-25] (LULU Software)

S3 Soda PDF Desktop CrashHandler; C:\Program Files\Soda PDF Desktop\crash-handler-ws.exe [931176 2017-01-25] (LULU Software)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)

R2 Tran_Process_Proc; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe [71024 2014-03-25] ()

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-11] (Microsoft Corporation)

S3 wpscloudsvr; C:\Program Files (x86)\Kingsoft\WPS Office\wpscloudsvr.exe [162048 2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\XtuService.exe [18232 2016-08-25] (Intel® Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-11-29] (Intel® Corporation)

R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 AsusHFilter; C:\WINDOWS\System32\drivers\AsusHFilter.sys [30200 2016-12-22] ()

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [99320 2016-10-11] (ASUS Corporation)

S3 bsitf; C:\WINDOWS\system32\DRIVERS\bsitf.sys [37208 2017-03-28] (ASUSTek Computer Inc.)

R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30352 2017-04-09] (Disc Soft Ltd)

S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] () [File not signed]

S3 GENERICDRV; C:\Program Files (x86)\ASUS\ASUS Live Update\Temp\3\amifldrv64.sys [17896 2017-01-05] ()

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [249104 2016-10-06] (Intel Corporation)

R2 iocbios2; C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation)

R1 MpKsl128595a9; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BFFC6767-3FA1-4D5D-8C6D-F2D61160E1A7}\MpKsl128595a9.sys [44928 2017-09-21] (Microsoft Corporation)

R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [79504 2016-09-18] (Windows ® Win 7 DDK provider)

R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [7918840 2016-12-19] (Intel Corporation)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-26] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)

R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-07-26] (NVIDIA Corporation)

R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [329184 2016-08-15] (Realtek Semiconductor Corp.)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-10-18] (Realtek )

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2017-09-21 15:00 - 2017-09-21 15:00 - 000023792 _____ C:\Users\Ismael\Downloads\FRST.txt

2017-09-21 15:00 - 2017-09-21 15:00 - 000000000 ____D C:\FRST

2017-09-21 14:59 - 2017-09-21 14:59 - 002399744 _____ (Farbar) C:\Users\Ismael\Downloads\FRST64.exe

2017-09-19 23:34 - 2017-09-20 00:02 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\CDisplayEx

2017-09-19 23:34 - 2017-09-19 23:34 - 000001102 _____ C:\Users\Ismael\Desktop\CDisplayEx.lnk

2017-09-19 23:34 - 2017-09-19 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx

2017-09-19 23:34 - 2017-09-19 23:34 - 000000000 ____D C:\Program Files (x86)\CDisplayEx

2017-09-19 23:33 - 2017-09-19 23:34 - 007319720 _____ (Progdigy Software S.A.R.L. ) C:\Users\Ismael\Downloads\CDisplayExWin32v1.10.29.exe

2017-09-18 19:51 - 2017-09-18 19:51 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

2017-09-15 21:14 - 2017-09-15 21:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2017-09-15 18:44 - 2017-09-15 18:48 - 000000000 ____D C:\Users\Ismael\AppData\Local\latexdraw

2017-09-15 18:43 - 2017-09-15 18:43 - 000000746 _____ C:\Users\Ismael\Desktop\LaTeXDraw.LNK

2017-09-15 18:43 - 2017-09-15 18:43 - 000000746 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LaTeXDraw.LNK

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\usr

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\Users\Ismael\.latexdraw

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\Program Files\latexdraw

2017-09-15 18:42 - 2017-09-15 18:42 - 010155931 _____ C:\Users\Ismael\Downloads\LaTeXDraw-3.3.6-bin.zip

2017-09-15 18:42 - 2017-09-15 18:42 - 000000000 ____D C:\Users\Ismael\Downloads\LaTeXDraw-3.3.6-bin

2017-09-14 23:41 - 2017-09-14 23:41 - 000049992 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2017-09-14 23:41 - 2017-09-14 23:41 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys

2017-09-14 23:41 - 2017-09-14 23:41 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys

2017-09-14 23:41 - 2017-09-14 23:41 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys

2017-09-12 20:20 - 2017-09-05 07:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2017-09-12 20:20 - 2017-09-05 07:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2017-09-12 20:20 - 2017-09-05 07:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2017-09-12 20:20 - 2017-09-05 07:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2017-09-12 20:20 - 2017-09-05 07:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2017-09-12 20:20 - 2017-09-05 07:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2017-09-12 20:20 - 2017-09-05 07:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2017-09-12 20:20 - 2017-09-05 07:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2017-09-12 20:20 - 2017-09-05 07:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2017-09-12 20:20 - 2017-09-05 07:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2017-09-12 20:20 - 2017-09-05 07:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2017-09-12 20:20 - 2017-09-05 06:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2017-09-12 20:20 - 2017-09-05 06:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2017-09-12 20:20 - 2017-09-05 06:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll

2017-09-12 20:20 - 2017-09-05 06:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2017-09-12 20:20 - 2017-09-05 06:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2017-09-12 20:20 - 2017-09-05 06:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe

2017-09-12 20:20 - 2017-09-05 06:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2017-09-12 20:20 - 2017-09-05 06:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2017-09-12 20:20 - 2017-09-05 06:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2017-09-12 20:20 - 2017-09-05 06:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll

2017-09-12 20:20 - 2017-09-05 06:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2017-09-12 20:20 - 2017-09-05 06:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys

2017-09-12 20:20 - 2017-09-05 06:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2017-09-12 20:20 - 2017-09-05 06:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2017-09-12 20:20 - 2017-09-05 06:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2017-09-12 20:20 - 2017-09-05 06:26 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2017-09-12 20:20 - 2017-09-05 06:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2017-09-12 20:20 - 2017-09-05 06:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe

2017-09-12 20:20 - 2017-09-05 06:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2017-09-12 20:20 - 2017-09-05 06:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2017-09-12 20:20 - 2017-09-05 06:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2017-09-12 20:20 - 2017-09-05 06:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll

2017-09-12 20:20 - 2017-09-05 06:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2017-09-12 20:20 - 2017-09-05 06:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2017-09-12 20:20 - 2017-09-05 06:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll

2017-09-12 20:20 - 2017-09-05 06:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2017-09-12 20:19 - 2017-09-05 07:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys

2017-09-12 20:19 - 2017-09-05 07:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-09-12 20:19 - 2017-09-05 07:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2017-09-12 20:19 - 2017-09-05 07:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2017-09-12 20:19 - 2017-09-05 07:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2017-09-12 20:19 - 2017-09-05 07:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2017-09-12 20:19 - 2017-09-05 07:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2017-09-12 20:19 - 2017-09-05 07:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2017-09-12 20:19 - 2017-09-05 07:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2017-09-12 20:19 - 2017-09-05 07:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-09-12 20:19 - 2017-09-05 07:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-09-12 20:19 - 2017-09-05 07:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2017-09-12 20:19 - 2017-09-05 07:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys

2017-09-12 20:19 - 2017-09-05 07:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2017-09-12 20:19 - 2017-09-05 07:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2017-09-12 20:19 - 2017-09-05 07:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2017-09-12 20:19 - 2017-09-05 07:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-09-12 20:19 - 2017-09-05 07:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll

2017-09-12 20:19 - 2017-09-05 07:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2017-09-12 20:19 - 2017-09-05 07:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2017-09-12 20:19 - 2017-09-05 06:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2017-09-12 20:19 - 2017-09-05 06:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-09-12 20:19 - 2017-09-05 06:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2017-09-12 20:19 - 2017-09-05 06:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2017-09-12 20:19 - 2017-09-05 06:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2017-09-12 20:19 - 2017-09-05 06:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll

2017-09-12 20:19 - 2017-09-05 06:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2017-09-12 20:19 - 2017-09-05 06:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2017-09-12 20:19 - 2017-09-05 06:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe

2017-09-12 20:19 - 2017-09-05 06:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe

2017-09-12 20:19 - 2017-09-05 06:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys

2017-09-12 20:19 - 2017-09-05 06:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2017-09-12 20:19 - 2017-09-05 06:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys

2017-09-12 20:19 - 2017-09-05 06:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2017-09-12 20:19 - 2017-09-05 06:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2017-09-12 20:19 - 2017-09-05 06:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2017-09-12 20:19 - 2017-09-05 06:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2017-09-12 20:19 - 2017-09-05 06:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe

2017-09-12 20:19 - 2017-09-05 06:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe

2017-09-12 20:19 - 2017-09-05 06:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-09-12 20:19 - 2017-09-05 06:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2017-09-12 20:19 - 2017-09-05 06:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2017-09-12 20:19 - 2017-09-05 06:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2017-09-12 20:19 - 2017-09-05 06:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2017-09-12 20:19 - 2017-09-05 06:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2017-09-12 20:19 - 2017-09-05 06:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2017-09-12 20:19 - 2017-09-05 06:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2017-09-12 20:19 - 2017-09-05 06:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll

2017-09-12 20:19 - 2017-09-05 06:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll

2017-09-12 20:19 - 2017-09-05 06:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll

2017-09-12 20:19 - 2017-09-01 07:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin

2017-09-11 20:06 - 2017-09-11 20:06 - 000001972 _____ C:\Users\Ismael\Desktop\PDFsam Basic.lnk

2017-09-10 21:01 - 2017-09-10 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)

2017-09-05 22:02 - 2017-09-05 22:02 - 000038011 _____ C:\Users\Ismael\.sambox.cache

2017-09-05 21:02 - 2017-09-05 21:02 - 000110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Sun

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Sun

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\.oracle_jre_usage

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFsam Basic

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Program Files (x86)\PDFsam Basic

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Oracle

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\ProgramData\Oracle

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\Program Files\Java

2017-09-05 21:00 - 2017-09-05 21:00 - 009597704 _____ (PDFsam) C:\Users\Ismael\Downloads\PDFsam_Basic3_Installer.exe

2017-09-05 21:00 - 2017-09-05 21:00 - 000000000 ____D C:\ProgramData\PDFsam Enhanced 4

2017-09-04 20:10 - 2017-09-04 20:10 - 000001034 _____ C:\Users\Ismael\Desktop\Veusz.lnk

2017-09-04 20:10 - 2017-09-04 20:10 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veusz

2017-09-04 20:10 - 2017-09-04 20:10 - 000000000 ____D C:\Program Files (x86)\Veusz

2017-09-04 20:09 - 2017-09-04 20:09 - 015420136 _____ C:\Users\Ismael\Downloads\veusz-1.27-windows-setup.exe

2017-08-31 02:07 - 2017-08-31 02:54 - 000000000 ____D C:\Users\Ismael\AppData\Local\Mirillis

2017-08-31 02:07 - 2017-08-31 02:07 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Mirillis

2017-08-29 10:51 - 2017-08-29 10:51 - 000001338 _____ C:\Users\Ismael\Desktop\queja amazon.txt

2017-08-29 03:36 - 2017-08-29 03:36 - 000000858 _____ C:\Users\Ismael\Desktop\Redout Enhanced Edition.lnk

2017-08-29 03:36 - 2017-08-29 03:36 - 000000000 ____D C:\Users\Ismael\AppData\Local\redout

2017-08-29 03:36 - 2017-08-29 03:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Redout Enhanced Edition

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2017-09-21 13:50 - 2017-07-30 18:43 - 002147826 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-09-21 13:50 - 2017-03-20 07:11 - 000981776 _____ C:\WINDOWS\system32\perfh00A.dat

2017-09-21 13:50 - 2017-03-20 07:11 - 000207452 _____ C:\WINDOWS\system32\perfc00A.dat

2017-09-21 13:46 - 2017-07-30 18:35 - 000000000 ____D C:\Users\Ismael

2017-09-21 13:46 - 2017-03-28 18:44 - 000000200 _____ C:\Users\Ismael\AppData\Roaming\sp_data.sys

2017-09-21 13:46 - 2017-01-07 21:06 - 000000000 ____D C:\ProgramData\NVIDIA

2017-09-21 13:43 - 2017-07-30 18:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-09-21 13:43 - 2017-07-30 18:33 - 000419976 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-09-21 13:43 - 2017-03-28 18:41 - 000000000 __SHD C:\Users\Ismael\IntelGraphicsProfiles

2017-09-21 13:43 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI

2017-09-21 13:43 - 2017-01-07 21:33 - 000005693 ___RH C:\farstone_pe.letter

2017-09-21 13:29 - 2017-03-28 18:43 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Skype

2017-09-21 12:12 - 2017-07-30 18:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2017-09-21 12:00 - 2017-07-30 18:39 - 000003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1

2017-09-21 12:00 - 2017-07-30 18:39 - 000003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2

2017-09-21 10:09 - 2017-03-29 00:27 - 000000000 ____D C:\Users\Ismael\AppData\Local\CrashDumps

2017-09-21 08:58 - 2017-07-30 18:39 - 000004220 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5DFBF38B-69CB-428C-A7C2-45449661EC73}

2017-09-21 01:52 - 2017-03-28 23:05 - 000000000 ____D C:\Program Files (x86)\Steam

2017-09-21 01:51 - 2017-07-04 21:14 - 000000000 ____D C:\Users\Ismael\Desktop\Juegos

2017-09-21 00:23 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps

2017-09-21 00:23 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\FxsTmp

2017-09-21 00:23 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness

2017-09-21 00:22 - 2017-03-28 23:30 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2017-09-21 00:20 - 2017-07-30 18:39 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2544269325-2574649414-738075177-1001

2017-09-21 00:20 - 2017-03-28 18:43 - 000002400 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-09-21 00:20 - 2017-03-28 18:43 - 000000000 ___RD C:\Users\Ismael\OneDrive

2017-09-19 19:37 - 2017-01-07 21:41 - 000000000 ____D C:\Program Files\Microsoft Office

2017-09-19 19:36 - 2017-03-28 19:22 - 000000000 ___RD C:\Users\Ismael\Documents\MEGAsync

2017-09-19 00:02 - 2017-03-28 21:25 - 000001747 _____ C:\Users\Ismael\Desktop\MPC-HC x64.lnk

2017-09-19 00:02 - 2017-03-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64

2017-09-19 00:02 - 2017-03-28 21:25 - 000000000 ____D C:\Program Files\MPC-HC

2017-09-19 00:01 - 2017-04-08 22:24 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\BitComet

2017-09-18 19:51 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-09-18 19:51 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2017-09-15 21:14 - 2017-03-28 18:45 - 000000000 ____D C:\Program Files (x86)\Dropbox

2017-09-13 22:10 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache

2017-09-13 18:43 - 2017-03-28 22:57 - 000000000 ___RD C:\Program Files (x86)\Skype

2017-09-13 18:43 - 2017-03-28 22:57 - 000000000 ____D C:\ProgramData\Skype

2017-09-13 18:13 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF

2017-09-12 23:40 - 2017-01-07 20:54 - 000000000 __RHD C:\Users\Public\AccountPictures

2017-09-12 21:14 - 2017-03-20 07:11 - 000000000 ____D C:\WINDOWS\system32\es

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\system32\F12

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\setup

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-09-12 20:23 - 2017-03-29 21:29 - 000000000 ____D C:\WINDOWS\system32\MRT

2017-09-12 20:22 - 2017-03-29 21:29 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-09-12 20:22 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp

2017-09-10 21:01 - 2017-04-08 22:24 - 000000855 _____ C:\Users\Public\Desktop\BitComet.lnk

2017-09-05 01:15 - 2016-11-14 08:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2017-09-02 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2017-09-02 17:15 - 2017-03-18 23:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2017-08-31 23:35 - 2017-03-29 18:57 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2017-08-29 02:31 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2017-08-28 22:43 - 2017-03-28 19:05 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-08-28 22:43 - 2017-03-28 19:05 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk

 

==================== Files in the root of some directories =======

 

2017-03-28 18:44 - 2017-09-21 13:46 - 000000200 _____ () C:\Users\Ismael\AppData\Roaming\sp_data.sys

2017-07-30 18:34 - 2017-07-30 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

 

Some files in TEMP:

====================

2017-08-16 02:13 - 2017-08-16 02:13 - 016742904 _____ () C:\Users\Ismael\AppData\Local\Temp\Bit830B.tmp.exe

2017-09-10 21:00 - 2017-09-10 21:00 - 016739360 _____ () C:\Users\Ismael\AppData\Local\Temp\BitE047.tmp.exe

2017-09-05 21:00 - 2017-09-05 21:01 - 056501344 _____ (Oracle Corporation) C:\Users\Ismael\AppData\Local\Temp\cceab7b1-7cc3-4e18-be6a-076670329d9b.exe

 

==================== Bamital & volsnap ======================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2017-09-15 21:48

 

==================== End of FRST.txt ============================

 

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-09-2017

Ran by Ismael (21-09-2017 15:01:20)

Running from C:\Users\Ismael\Downloads

Windows 10 Home Version 1703 (X64) (2017-07-30 16:41:50)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrador (S-1-5-21-2544269325-2574649414-738075177-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2544269325-2574649414-738075177-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-2544269325-2574649414-738075177-1000 - Limited - Disabled) => C:\Users\defaultuser0

Invitado (S-1-5-21-2544269325-2574649414-738075177-501 - Limited - Disabled)

Ismael (S-1-5-21-2544269325-2574649414-738075177-1001 - Administrator - Enabled) => C:\Users\Ismael

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)

ABZÛ (HKLM\...\Steam App 384190) (Version:  - Giant Squid)

Action! (HKLM-x32\...\Mirillis Action!) (Version: 2.4.1 - Mirillis)

Actualización de NVIDIA 27.1.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 27.1.0.0 - NVIDIA Corporation) Hidden

Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)

Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)

ASUS GIFTBOX (HKLM-x32\...\ASUS GIFTBOX) (Version: 7.5.24 - ASUSTek Computer Inc)

ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS)

ASUS Input Configuration (HKLM-x32\...\{7DDF7571-64BD-4232-9729-20FF10CE6C62}) (Version: 1.0.3 - ASUS)

ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)

ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.14 - ASUS)

ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.19.0004 - ASUS)

ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.8 - ASUS)

ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0049 - ASUS)

AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.2.9 - ICEpower a/s)

BitComet 1.47 (HKLM-x32\...\BitComet_x64) (Version: 1.47 - CometNetwork)

Castle of Illusion (HKLM-x32\...\Q2FzdGxlb2ZJbGx1c2lvbg==_is1) (Version: 1 - )

CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)

CDisplayEx 1.10.29 (HKLM-x32\...\CDisplayEx_is1) (Version:  - Progdigy Software S.A.R.L.)

CyberLink PhotoDirector 5 (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.) Hidden

CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.)

CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.) Hidden

CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.)

DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd)

Dead Rising (HKLM-x32\...\Dead Rising_is1) (Version:  - )

Dead Rising 2 (HKLM-x32\...\Dead Rising 2_is1) (Version:  - )

Depth (HKLM\...\Steam App 274940) (Version:  - Digital Confectioners)

Desinstalar impresora EPSON SX535WD Series (HKLM\...\EPSON SX535WD Series) (Version:  - SEIKO EPSON Corporation)

Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.2.5 - ASUSTek COMPUTER INC.)

Discord (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

Dropbox (HKLM-x32\...\Dropbox) (Version: 34.4.22 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)

Epson Download Navigator (HKLM-x32\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print 2 (HKLM-x32\...\{FFF841F3-9A15-4F61-BD16-C19F132E5A27}) (Version: 2.3.0.0 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)

Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)

Firewatch (HKLM-x32\...\Firewatch_is1) (Version:  - )

GameFirst IV (HKLM-x32\...\{370651DD-8ABF-4807-9533-0869FDF79BFA}) (Version: 1.5.31 - ASUSTeK COMPUTER INC.) Hidden

GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.31) (Version: 1.5.31 - ASUSTeK COMPUTER INC.)

GoldWave v6.28 (HKLM\...\GoldWave v6.28) (Version: 6.28 - GoldWave Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.09) (Version: 9.09 - Artifex Software Inc.)

GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)

Hellblade: Senua's Sacrifice (HKLM-x32\...\1573355755_is1) (Version: 1.0 - GOG.com)

Hitman (HKLM-x32\...\{793F01BF-93D6-4135-B0E9-156D6D752FFA}_is1) (Version:  - Square Enix)

Injustice: Gods Among Us Ultimate Edition (HKLM\...\Steam App 242700) (Version:  - NetherRealm Studios)

InputMapper (HKLM-x32\...\{026D2025-A7FA-4F5C-AF8C-A6F7A9B917FC}) (Version: 1.6.10.19991 - DSDCS)

Inside (HKLM-x32\...\{9BD4503F-F711-491D-984A-AB4ABD66B8C2}_is1) (Version:  - Playdead)

Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1035 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4550 - Intel Corporation)

Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)

Intel® Wireless Bluetooth® (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)

Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)

Killing Floor (HKLM\...\Steam App 1250) (Version:  - Tripwire Interactive)

Left 4 Dead (HKLM\...\Steam App 500) (Version:  - Valve)

Little Nightmares - Scarecrow sack (HKLM-x32\...\1268928435_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Little Nightmares - Upside-down teapot (HKLM-x32\...\1352220891_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Little Nightmares (HKLM-x32\...\1433377508_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Malwarebytes Anti-Malware versione 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Manual de red EPSON SX535WD Series (HKLM-x32\...\EPSON SX535WD Series Netg) (Version:  - )

Manual de usuario EPSON SX535WD Series (HKLM-x32\...\EPSON SX535WD Series Useg) (Version:  - )

Maxima (sbcl) 5.38.1 (HKLM-x32\...\Maxima-sbcl-5.38.1_is1) (Version: 5.38.1 - The Maxima Development Team)

MegaDownloader 1.7 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 1.7 - AppsForMega.info)

MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)

Micro Machines World Series (HKLM-x32\...\Micro Machines World Series_is1) (Version:  - )

Microsoft Office 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.8326.2107 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

Mortal Kombat Komplete Edition (HKLM\...\Steam App 237110) (Version:  - NetherRealm Studios)

Mortal Kombat X (HKLM\...\Steam App 307780) (Version:  - NetherRealm Studios)

Mozilla Firefox 54.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 en-US)) (Version: 54.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)

MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)

MultiSkypeLauncher (remove only) (HKLM-x32\...\MultiSkypeLauncher) (Version: 1.8 - MultiSkypeLauncher)

No Mans Sky (HKLM-x32\...\No Mans Sky_is1) (Version:  - )

NVIDIA Controlador de 3D Vision 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.54 - NVIDIA Corporation)

NVIDIA Controlador de gráficos 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.8.0.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.8.0.89 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Observer (HKLM-x32\...\1449856523_is1) (Version: 1.0 - GOG.com)

Oddworld: Abe's Oddysee (HKLM\...\Steam App 15700) (Version:  - Oddworld Inhabitants)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

OpenVPN 2.3.6-I003  (HKLM\...\OpenVPN) (Version: 2.3.6-I003 - )

Panel de control de NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden

PDFsam Basic (HKLM-x32\...\{0F7F1493-D16D-4C7B-A271-17A12168CCC4}) (Version: 3.30.2.0 - Andrea Vacondio)

Pneuma Breath of Life (HKLM-x32\...\Pneuma Breath of Life_is1) (Version:  - )

Rake (HKLM\...\Steam App 386880) (Version:  - Konsordo)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.29093 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7926 - Realtek Semiconductor Corp.)

Redout Enhanced Edition (HKLM-x32\...\Redout Enhanced Edition_is1) (Version:  - )

Resident Evil 7 Biohazard (HKLM-x32\...\{1ECBF8F3-7079-44CA-AD32-B2AECBCF636F}_is1) (Version:  - Capcom)

ROG Aura Core (HKLM-x32\...\{24D10379-1ED5-4949-A024-991131A992D9}) (Version: 1.0.1 - ASUS)

ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 2.0.2 - ASUS)

Shadow Warrior (HKLM\...\Steam App 233130) (Version:  - Flying Wild Hog)

Shadow Warrior 2 (HKLM\...\Steam App 324800) (Version:  - Flying Wild Hog)

Shadow Warrior Classic Redux (HKLM\...\Steam App 225160) (Version:  - General Arcade)

Sine Mora EX (HKLM\...\SKIDROW - Sine Mora EX) (Version:  - SKIDROW)

Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)

Soda PDF Desktop (HKLM-x32\...\SodaDesktop) (Version: 9.0.38.31816 - LULU Software)

Soda PDF Desktop View Module (HKLM\...\{CAF75E2A-9CD6-49CC-962D-BFF08DBE5EEB}) (Version: 9.0.38.31757 - LULU Software) Hidden

Software Intel® PROSet/Wireless (HKLM-x32\...\{5853172b-5520-4089-9ef4-e26c594382b3}) (Version: 19.30.0 - Intel Corporation)

Split Second - Velocity (HKLM-x32\...\{E4D2641A-E3A1-447A-AACA-A7493AAF87E5}_is1) (Version:  - )

Spotify (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Spotify) (Version: 1.0.60.492.gbb40dab8 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)

Telegram Desktop versión 1.1.7 (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.7 - Telegram Messenger LLP)

Texmaker (HKLM-x32\...\Texmaker) (Version:  - )

TotalRecovery Pro (HKLM-x32\...\TotalRecovery) (Version: 10.0.11.2 - FarStone Inc.)

UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden

UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden

Veusz 1.27 (HKLM-x32\...\Veusz) (Version: 1.27 - Jeremy Sanders)

Viscera Cleanup Detail: Shadow Warrior (HKLM\...\Steam App 255520) (Version:  - RuneStorm)

Viscera Cleanup Detail: Shadow Warrior

 (HKLM\...\UDK-2b0b0d9f-be25-4056-9ea9-e4f443e0219a) (Version:  - RuneStorm

)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)

WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun)

Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)

Windows Driver Package - ASUS (AsusHFilter) HIDClass  (12/19/2016 1.0.0.2) (HKLM\...\EEDD19DDF3F0CA7CFA2F4C500D442DD1FEB434F6) (Version: 12/19/2016 1.0.0.2 - ASUS)

Windows Driver Package - ASUS (AsusPTPDrv) HIDClass  (09/23/2016 11.0.0.14) (HKLM\...\F95583A62AB902A3FC263F668380483F9E0113CD) (Version: 09/23/2016 11.0.0.14 - ASUS)

WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.)

WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 10.1.0.5644 - Kingsoft Corp.)

XSplit Gamecaster (HKLM-x32\...\{9E8A3821-032E-4230-9C12-C14D3FC8685E}) (Version: 2.8.1605.2342 - SplitmediaLabs)

Yooka-Laylee (HKLM-x32\...\1445853962_is1) (Version: 1.0 - GOG.com)

Yooka-Laylee Toybox (HKLM-x32\...\1825770152_is1) (Version: 2.0.0.2 - GOG.com)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxDTCM.dll [2016-11-30] (Intel Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {1244B6CA-A359-48B6-994F-0AF65727C0E8} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {174687BA-3C5F-4FB4-9A9B-A1A651714A39} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)

Task: {1A557AA9-B6CA-4D12-B252-E64AA901E402} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)

Task: {25518B65-3FC9-44B5-8BD1-7707FF67A356} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()

Task: {2CA87A53-DB17-44F1-857D-847419652912} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)

Task: {424D6FB9-3AC7-498B-96C2-145DCF37F660} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-28] (Dropbox, Inc.)

Task: {4577A715-6039-49AF-A54B-93F9D096D702} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)

Task: {501CC9B8-D8E1-4647-88C8-4FA7016B5DC9} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-08-24] (ASUSTek Computer Inc.)

Task: {552DEC7A-903A-40B8-99AD-3480E4C49D89} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-07-26] (NVIDIA Corporation)

Task: {57FE4697-58D6-4906-8A87-4099455D8994} - System32\Tasks\WpsKtpcntrQingTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exe [2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

Task: {5835961F-C9B5-4063-9C52-3750B7A7BCCD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-07-26] (NVIDIA Corporation)

Task: {59BC8EFE-6075-4E75-8EE8-1639D1248095} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {63D6153F-16E2-4D94-B333-EB484CB2794C} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-28] (Dropbox, Inc.)

Task: {68A66FD4-C532-447F-AB59-C7320AF42EB2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-28] (Google Inc.)

Task: {77834291-24AC-4FED-98C1-375D0764AD6A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-09] (Adobe Systems Incorporated)

Task: {80DCE593-E592-4669-B6DF-85287B767929} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {89E7F8FD-3D5E-4E75-8022-A50A86BC5F40} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {9160A357-1C01-4C3B-8057-8C58157278BB} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-09-02] (Realtek Semiconductor)

Task: {94DCF102-8C69-483E-B961-A788E4BBAA88} - System32\Tasks\ASUSTek Computer Inc\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [2017-07-03] (ASUSTek Computer Inc)

Task: {9DAA6C32-BDEF-4838-9575-1600A8E7F27A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-07-26] (NVIDIA Corporation)

Task: {9E853A78-0369-4B18-B1EA-9DCBCC3C8048} - System32\Tasks\ExclusiveTool => C:\Program Files (x86)\DSDCS\InputMapper\ExclusiveModeTool.exe [2016-10-04] (InputMapper)

Task: {A0118620-FA91-4750-9CD5-782F228ABD0B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()

Task: {AC866D5A-8083-405E-80A9-FB35C37D495D} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [2016-10-21] (ASUSTek Computer Inc.)

Task: {B03A5B78-3922-44F0-9E06-5D4BEBA0231D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-18] (Microsoft Corporation)

Task: {B21DE624-ED90-448C-83A8-63BB29B17B09} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-10-13] (ASUS)

Task: {B473F457-40B7-409C-BFFF-6E01E4D78235} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel® Corporation)

Task: {B85232F3-1DC4-4945-ABD6-278746096C35} - System32\Tasks\WpsExternal_20161114063247 => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe [2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

Task: {B8746397-DB43-4D67-A867-C75176CA71FD} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)

Task: {BB7E5E97-6F43-4D17-A76E-FE16A6C1A196} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)

Task: {BF0C59D3-AA44-4D5E-9DB2-71FBE9907CE7} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {C36F87BF-095C-4A1E-87B0-2AEC0345A1A0} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {C7897FD6-7FAF-45F4-B700-2FB318A1EEFE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-26] (NVIDIA Corporation)

Task: {CF2FBE55-E2BF-47C1-8134-E7529FCB06D9} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

Task: {CF94EA3E-AD8B-430A-AB17-095C6D8C1620} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-09-02] (Realtek Semiconductor)

Task: {D0696DD3-D469-4DAE-AF6E-78F858CB11BF} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-07-07] (ASUSTek COMPUTER INC.)

Task: {EAB47ED5-928D-4FB9-BA2E-E8EC68D194B6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)

Task: {F6677235-E936-4A39-BC92-EEF06CE74CF5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-28] (Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\WpsExternal_20161114063247.job => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe

Task: C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exeÃqing 10.1.0.5644 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

 

Shortcut: C:\Users\Ismael\Desktop\Action!.lnk -> C:\Program Files (x86)\Mirillis\Action!\Action!.bat ()

 

==================== Loaded Modules (Whitelisted) ==============

 

2014-08-13 08:30 - 2014-08-13 08:30 - 000073032 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

2017-04-28 16:46 - 2017-07-26 19:09 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000071024 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe

2017-01-07 21:39 - 2014-04-14 20:59 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2017-07-30 18:34 - 2016-12-29 15:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-10-31 21:45 - 2017-06-23 21:42 - 000598528 _____ () C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll

2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-03-18 22:59 - 2017-03-20 07:13 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-08-23 21:47 - 2017-08-23 21:47 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2017-03-18 22:58 - 2017-03-18 22:58 - 000047616 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUITelemetry.dll

2017-07-11 02:37 - 2017-07-11 02:37 - 002331136 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIViewModels.dll

2017-07-11 02:37 - 2017-07-11 02:37 - 002836480 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIDataModel.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 000020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

2017-09-12 20:04 - 2017-09-12 20:04 - 029621760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 000358912 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 002536448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 020305920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 002415104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngine.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 003028992 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 003139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-06-16 02:45 - 2017-06-16 02:45 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 001370112 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 024502272 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe

2017-08-23 21:47 - 2017-08-23 21:47 - 009145344 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\EntCommon.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 003544488 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-07-26 23:17 - 2017-07-26 23:17 - 032960512 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe

2017-07-26 23:17 - 2017-07-26 23:17 - 009161728 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\EntCommon.dll

2017-07-16 21:08 - 2017-07-16 21:09 - 003500456 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-07-26 23:17 - 2017-07-26 23:17 - 013154304 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.Visuals.dll

2017-08-28 22:43 - 2017-08-23 10:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll

2017-08-28 22:43 - 2017-08-23 10:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000088576 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\zlibwapi.dll

2015-08-18 09:18 - 2015-08-18 09:18 - 000332800 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBCmdDsp.dll

2015-08-18 06:30 - 2015-08-18 06:30 - 000085504 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FlBckpBk.dll

2014-11-25 05:22 - 2014-11-25 05:22 - 000089088 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EfbCheckImg.dll

2015-08-18 06:28 - 2015-08-18 06:28 - 000323584 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FlBckpRt.dll

2015-08-18 06:26 - 2015-08-18 06:26 - 000223232 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskClone.dll

2015-07-27 07:50 - 2015-07-27 07:50 - 000224256 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskMgr.dll

2014-09-22 04:40 - 2014-09-22 04:40 - 000022528 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBEventMgr.dll

2015-08-18 07:23 - 2015-08-18 07:23 - 000114176 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EasyFuncs.dll

2014-09-22 04:40 - 2014-09-22 04:40 - 000194560 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EFBSearchTool.dll

2014-05-21 05:04 - 2014-05-21 05:04 - 000018432 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FSToken.dll

2015-08-18 09:17 - 2015-08-18 09:17 - 000104448 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\BootConfig.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000012288 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FSFat32.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000201216 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\NtfsLib.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000013312 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\VssNew.dll

2014-09-22 04:41 - 2014-09-22 04:41 - 000239104 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\diskpart.dll

2014-11-05 02:44 - 2014-11-05 02:44 - 000017408 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\VDiskConvert.dll

2014-09-04 04:41 - 2014-09-04 04:41 - 000037888 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\RapidClone.dll

2014-08-20 03:23 - 2014-08-20 03:23 - 000075264 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskInterface.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000194048 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\NetTool.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000157552 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FtpPipeModule.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000091584 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\TransferManager.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000054712 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FTPFunModule.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000062832 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\CommonFun.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000617952 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\XpIcfOpt.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 001937408 _____ () C:\Program Files (x86)\ASUS\Giftbox\ffmpeg.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 002177536 _____ () C:\Program Files (x86)\ASUS\Giftbox\libglesv2.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 000079360 _____ () C:\Program Files (x86)\ASUS\Giftbox\libegl.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 003561984 _____ () C:\Program Files (x86)\ASUS\Giftbox\node.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 000292352 _____ () \\?\C:\Program Files (x86)\ASUS\Giftbox\node_modules\appcloud-native-utils\anu.node

2016-04-13 10:38 - 2016-04-13 10:38 - 000482304 _____ () C:\Users\Ismael\AppData\Local\MEGAsync\libsodium.dll

2017-09-15 21:14 - 2017-09-14 23:41 - 000771392 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll

2017-09-15 21:14 - 2017-09-14 23:41 - 001804608 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll

2017-03-28 18:46 - 2017-09-14 23:40 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000125904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 001862992 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd

2017-09-15 21:14 - 2017-09-14 23:40 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll

2017-03-28 18:46 - 2017-09-14 23:40 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd

2017-09-15 21:14 - 2017-09-14 23:40 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll

2017-03-28 18:46 - 2017-09-14 23:43 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd

2017-09-07 20:19 - 2017-09-14 23:43 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd

2017-05-17 19:32 - 2017-09-14 23:43 - 000082264 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 001826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 001972024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 003928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000103232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll

2017-09-15 21:14 - 2017-09-14 23:42 - 000033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll

2017-09-15 21:14 - 2017-09-14 23:42 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL

2017-03-28 18:46 - 2017-09-14 23:43 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll

2017-09-15 21:14 - 2017-09-14 23:42 - 001637688 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll

2017-03-28 18:46 - 2017-09-14 23:43 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd

2017-04-08 19:57 - 2017-09-14 23:43 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\wincrashpad.compiled._Crashpad.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd

2016-10-05 23:17 - 2016-10-05 23:17 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

2017-04-28 16:46 - 2017-07-26 19:09 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000033280 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2016-07-16 13:47 - 2017-06-25 03:01 - 000001102 ____R C:\WINDOWS\system32\Drivers\etc\hosts

 

0.0.0.0                   keystone.mwbsys.com

0.0.0.0                   telemetry.malwarebytes.com

127.0.0.1 thislineskipsanyemptylines

127.0.0.1 mirillis.com

127.0.0.1 www.mirillis.com

127.0.0.1 serwer2.paka-service.com

127.0.0.1 ns386119.ovh.net

127.0.0.1 mirillis.pl

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\asus\wallpapers\asus.jpg

DNS Servers: 212.166.211.4 - 62.81.16.164

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [UDP Query User{24AF7FF9-1142-4A6D-9EDC-D2E043A4976D}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{97B03430-85EF-427D-A355-1F1961519AA0}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [UDP Query User{4C993024-DEDC-4E53-AD0E-DCBE5104EE4B}D:\juegos instalados\micro machines world series\micromachines.exe] => (Allow) D:\juegos instalados\micro machines world series\micromachines.exe

FirewallRules: [TCP Query User{4DA9B378-7CF2-49ED-835D-7E931EA240E7}D:\juegos instalados\micro machines world series\micromachines.exe] => (Allow) D:\juegos instalados\micro machines world series\micromachines.exe

FirewallRules: [UDP Query User{0A958A93-2E59-460D-8720-F1338962AA41}D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe

FirewallRules: [TCP Query User{83A00532-FD31-46D0-BDA9-0968935BF01E}D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe

FirewallRules: [{DCF788BA-9249-4962-84E2-4243221FA532}] => (Allow) D:\SteamLibrary\steamapps\common\ABZU\AbzuGame.exe

FirewallRules: [{D9897DA2-8681-4D01-AFB7-61B58B58149E}] => (Allow) D:\SteamLibrary\steamapps\common\ABZU\AbzuGame.exe

FirewallRules: [UDP Query User{9F1DE3D8-2322-4E6B-8214-C1B7B0D037AE}D:\juegos instalados\yooka-laylee\yookalaylee64.exe] => (Allow) D:\juegos instalados\yooka-laylee\yookalaylee64.exe

FirewallRules: [TCP Query User{AF50BF08-EA02-4B6B-8B1C-1FDCE0C78C01}D:\juegos instalados\yooka-laylee\yookalaylee64.exe] => (Allow) D:\juegos instalados\yooka-laylee\yookalaylee64.exe

FirewallRules: [{3F21CCD0-EA10-43EF-BD9B-4D13DE8611B4}] => (Allow) D:\SteamLibrary\steamapps\common\Rake\Rake.exe

FirewallRules: [{495FD532-D966-4AF0-8904-1BEE5E40618B}] => (Allow) D:\SteamLibrary\steamapps\common\Rake\Rake.exe

FirewallRules: [{560AE2E5-23B3-48DB-86DB-5E6F877CFD10}] => (Allow) D:\SteamLibrary\steamapps\common\KillingFloor\System\KillingFloor.exe

FirewallRules: [{42D9E62A-C8BE-4CEB-8DD4-E9B5117FED6D}] => (Allow) D:\SteamLibrary\steamapps\common\KillingFloor\System\KillingFloor.exe

FirewallRules: [{777126B0-E1B0-4EE0-9F0F-F367CA13BDFE}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{155706D1-34D5-4D8A-9FD0-7DCB2895337B}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{FF5A2059-F4FA-448B-A1FC-BAF26EDB749F}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{1B77943B-C8D2-492B-8BD8-120AB9269DB0}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{DD63FAD2-42C9-47DE-95C2-3B5CA35E8EBA}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{4E62EE29-6C60-446D-A7F6-E731D3DC7C24}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{9E65A72E-581B-4AAC-94D5-5E560000A074}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{C2F7F067-E8B8-4F43-959D-CECC2285D009}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{4465A162-ABD1-4FE0-BF0D-42DA74C95C0F}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior 2\ShadowWarrior2.exe

FirewallRules: [{117C8D93-E117-4F9D-ACE9-F2AEEF560E81}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior 2\ShadowWarrior2.exe

FirewallRules: [{1CEA11CB-5218-4842-B209-7188C3C5CBD8}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe

FirewallRules: [{98AB843A-4BE1-4FBD-ACE0-C5AA017C5B70}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe

FirewallRules: [{FA58302E-9C12-44B2-B9B9-1B563CEED999}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe

FirewallRules: [{6DEDEA1D-5871-4E76-B512-B953148F70BF}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe

FirewallRules: [{E6157457-09DA-434E-882E-81FF56A2A24E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe

FirewallRules: [{1671D9F3-5AF6-4A73-89CD-79E4BBA4E17A}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe

FirewallRules: [UDP Query User{216617EC-3D71-4AD9-9496-FE2F0BE896BC}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe

FirewallRules: [TCP Query User{ACD405AE-E1D0-4DB5-BE0F-6567EB78138D}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe

FirewallRules: [UDP Query User{DC3A5585-3933-419E-BBE6-195537FB8EAF}D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe] => (Allow) D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe

FirewallRules: [TCP Query User{7F14D793-85CD-491F-8C36-F56A649E65C3}D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe] => (Allow) D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe

FirewallRules: [UDP Query User{D273ABA4-C67D-40FD-B9BD-31598890AC84}C:\users\ismael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ismael\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{E4BC42D4-2531-4D0F-B12A-B7BF8FCB5B38}C:\users\ismael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ismael\appdata\roaming\spotify\spotify.exe

FirewallRules: [{9B812719-58BD-4906-8E7F-CFD74873587B}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{7A2A31DF-054D-4521-9D81-48F3896AFA7A}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [UDP Query User{55DC705A-C44E-4F5C-AE60-2AB2706B9CE5}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe

FirewallRules: [TCP Query User{DE7AF6BC-57B8-4645-AA27-33782892297C}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe

FirewallRules: [{A01EEEF1-E062-4943-A894-70123D6B6E2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{A9071D44-C6B7-4B61-9019-8CF38769FAAE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{DD0C6685-B9F3-4F67-A07F-D64A69D7D20F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{92CB640C-BC67-4CBC-92E1-47C09DDCB98A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{CCACCAF6-0598-46A4-B8A3-F58E314D8018}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{83B23928-D278-42D2-A6A9-8DC35D1DE2CD}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [{E9DA2AB0-85FF-4780-A427-9F558A3CBE33}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [UDP Query User{1FFD7B9B-4BCA-4056-BCB3-76A1CC4B9D16}C:\windows\system32\rundll32.exe] => (Allow) C:\windows\system32\rundll32.exe

FirewallRules: [TCP Query User{858240D9-C077-4F3A-A1A8-9631193EE1FB}C:\windows\system32\rundll32.exe] => (Allow) C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{47D2999E-93B1-451B-91F7-AB2BA0800C09}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{A1C946FE-A708-4FC6-A4F3-E2E36465D85F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [{B2F38807-69DC-4C16-9BCA-1C38D85535C1}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{585F8D37-79CC-4CBD-98BA-F5773CBADE08}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{E6162598-03AF-4D4E-9F5F-47B23CA1D538}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\InjusticeLauncher.exe

FirewallRules: [{DA1D8AE9-4418-479B-96E5-660F1FF41EF7}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\InjusticeLauncher.exe

FirewallRules: [{FF507275-1D84-4957-A275-6D4BB48B26F2}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\Injustice.exe

FirewallRules: [{F3FF2B49-FC6D-4FF2-B43C-10EE407F5812}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\Injustice.exe

FirewallRules: [{0478A16B-E00C-452E-B456-B99760C28565}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{9D0A86DB-4A6B-4F62-BD41-CD3BAB394ADD}] => (Allow) D:\SteamLibrary\steamapps\common\left 4 dead\left4dead.exe

FirewallRules: [{79B80B8B-56A1-4B7D-8767-E2C4AB1F688C}] => (Allow) D:\SteamLibrary\steamapps\common\left 4 dead\left4dead.exe

FirewallRules: [{AD59E318-7AFD-4A26-B602-DF7E70E90644}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\BETA\Binaries\Win32\DepthGame.exe

FirewallRules: [{7F3000EB-7423-418A-BFB5-05157F35476B}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\BETA\Binaries\Win32\DepthGame.exe

FirewallRules: [{87A42877-2B15-49A5-940A-56885678E7E9}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\Binaries\Win32\DepthGame.exe

FirewallRules: [{B6AD0089-4942-4D14-9CBE-06E4F10C60C5}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\Binaries\Win32\DepthGame.exe

FirewallRules: [{2DBE3B9D-98D4-4221-9917-28FC9A7A34CE}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{5529ADB4-CCC8-40C3-AAAB-A71FEFBC5EF3}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{8B6419C9-88E5-4FBB-95F8-4CAB1D6D0630}] => (Block) %ProgramFiles% (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{B951F6E2-CC74-432B-8EFD-B67CC42C4630}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{14039CD7-C4E3-4CF9-9482-67102ACB2487}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{91BC3E03-392C-4FA2-9D45-053DA950AB6E}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{B0614C48-0F48-42FD-A53E-49929047D9F4}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{736834C1-557F-4C1E-8939-D8BDBC7AC9E0}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe

FirewallRules: [{B9F01390-70E1-481A-B4CA-D3962A1D3183}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe

FirewallRules: [{E9F4554D-40DE-4CA3-A4E3-D787B8482E86}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MK10.exe

FirewallRules: [{B07990C0-A84B-429D-9698-F85D4F88F8F5}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MK10.exe

FirewallRules: [{CAD6C235-1E79-4AEE-B8A0-D80FAF7AD2A3}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe

FirewallRules: [{075ED27C-B60B-4997-9187-279971698975}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe

FirewallRules: [{7A8676F0-B3B0-432F-B470-217EB177FB9D}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe

FirewallRules: [{3958400F-D0DB-497C-BC4F-E17F38767C5E}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe

FirewallRules: [{22DF73B1-5E29-4892-9D05-07F5417C4599}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F8783DC9-0428-4341-B98E-1E547B97B3C5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{84168C14-DD44-4704-989C-62C1358EED28}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{D7BA9AE6-0DAC-4C01-895F-1395ACD15196}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{EB3D26FD-553E-4E56-AF1D-F226B1B74B56}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{E2E622B6-E05A-42D3-975F-3F26C3080800}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{D8A6F047-7EAC-4BBA-9EDE-F9D8A96B6CF3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{039837CE-9766-41DC-8E6E-AE28D5EA2D22}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE

FirewallRules: [{1B548329-A068-49FD-ACD3-C09962D518DA}] => (Allow) C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

FirewallRules: [{8E79F8CD-2AF7-4E33-A6AA-F07A92235177}] => (Allow) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGCAndroidService.exe

FirewallRules: [{50701328-9775-4EDC-B3F8-CFD144D95189}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{E2AF9A95-3E87-4373-A60E-1191CA62ACBF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{05626D91-E3F0-4582-92FF-A84B5BE4A700}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{B8BD8360-8194-4552-85E5-2F6024AF6132}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{C62B34EE-C570-4A2C-84D9-85B70113B7F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{D6FD987C-1D37-452F-A6E2-E79D26FA57DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{D8D58316-4F8E-46F4-916A-3035A2BDC20E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{26C2C6E2-6395-491C-8E0D-1A6F87B45201}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{DCA8623D-F01D-439C-9F07-9389D0E02147}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{2FFA9325-363A-4E0B-8A8B-940C97AD8251}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [TCP Query User{012CBF4C-C6EC-4AE3-82B6-C2FE62C61108}D:\juegos instalados\firewatch\firewatch.exe] => (Allow) D:\juegos instalados\firewatch\firewatch.exe

FirewallRules: [UDP Query User{9D41905F-88A8-4632-9F40-D3101C6535BF}D:\juegos instalados\firewatch\firewatch.exe] => (Allow) D:\juegos instalados\firewatch\firewatch.exe

FirewallRules: [{0386644F-75FC-4809-993E-E171CAA7693E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{0007544E-3EAA-4B92-8FD7-4E265F83C497}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

FirewallRules: [{5477C8E0-1644-4207-A560-5266B8EB573E}] => (Allow) D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

FirewallRules: [{E1506107-3E2F-430A-8A99-73A44B5F5185}] => (Allow) D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

 

==================== Restore Points =========================

 

17-09-2017 10:38:34 Punto de control programado

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (09/21/2017 10:16:16 AM) (Source: Perflib) (EventID: 1023) (User: )

Description: Windows no puede cargar el archivo DLL del contador extensible rdyboost. Los primeros cuatro bytes (DWORD) de la sección de datos contienen el código de error de Windows.

 

Error: (09/21/2017 10:09:03 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: MicrosoftEdgeCP.exe, versión: 11.0.15063.608, marca de tiempo: 0x59ae240c

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000604

Desplazamiento de errores: 0x0000000000000000

Identificador del proceso con errores: 0x3f7c

Hora de inicio de la aplicación con errores: 0x01d332a79f95cb01

Ruta de acceso de la aplicación con errores: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 294daa33-70d4-42d9-b23b-9e617aee5489

Nombre completo del paquete con errores: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe

Identificador de aplicación relativa del paquete con errores: ContentProcess

 

Error: (09/21/2017 09:01:36 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: MicrosoftEdgeCP.exe, versión: 11.0.15063.608, marca de tiempo: 0x59ae240c

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000604

Desplazamiento de errores: 0x0000000000000000

Identificador del proceso con errores: 0x2924

Hora de inicio de la aplicación con errores: 0x01d332a77605d345

Ruta de acceso de la aplicación con errores: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 0be6bacb-6f54-4fa6-910f-3d2b2619aa77

Nombre completo del paquete con errores: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe

Identificador de aplicación relativa del paquete con errores: ContentProcess

 

Error: (09/21/2017 08:59:23 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/21/2017 08:59:23 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/21/2017 01:52:10 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AbeWin.exe, versión: 2.0.0.0, marca de tiempo: 0x3474f98b

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc000041d

Desplazamiento de errores: 0x52524544

Identificador del proceso con errores: 0x3e00

Hora de inicio de la aplicación con errores: 0x01d3326b3454ffd6

Ruta de acceso de la aplicación con errores: D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 79ccf9ff-7d52-4da0-b01e-36e5700d9420

Nombre completo del paquete con errores: 

Identificador de aplicación relativa del paquete con errores:

 

Error: (09/21/2017 01:52:08 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AbeWin.exe, versión: 2.0.0.0, marca de tiempo: 0x3474f98b

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000005

Desplazamiento de errores: 0x52524544

Identificador del proceso con errores: 0x3e00

Hora de inicio de la aplicación con errores: 0x01d3326b3454ffd6

Ruta de acceso de la aplicación con errores: D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: fc70f2d6-930e-4499-a106-14bbd8fb6f16

Nombre completo del paquete con errores: 

Identificador de aplicación relativa del paquete con errores:

 

Error: (09/21/2017 12:23:31 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/21/2017 12:23:31 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/20/2017 12:52:40 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ICEsoundAPO64.dll, versión: 1.0.0.20, marca de tiempo: 0x56e94d73

Código de excepción: 0xc0000409

Desplazamiento de errores: 0x000000000002571c

Identificador del proceso con errores: 0x4250

Hora de inicio de la aplicación con errores: 0x01d3319336472e61

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\system32\ICEsoundAPO64.dll

Identificador del informe: 99ee333a-18bc-43bb-9b21-16207b3b482a

Nombre completo del paquete con errores: 

Identificador de aplicación relativa del paquete con errores:

 

 

System errors:

=============

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: El servicio Kingsoft_WPS_UpdateService no pudo iniciarse debido al siguiente error: 

El servicio no respondió a tiempo a la solicitud de inicio o de control.

 

Error: (09/21/2017 01:43:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Kingsoft_WPS_UpdateService.

 

Error: (09/21/2017 01:43:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: El servicio CldFlt no pudo iniciarse debido al siguiente error: 

Solicitud no compatible.

 

Error: (09/21/2017 12:12:41 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 y APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 11:14:43 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 y APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 08:57:02 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

 

CodeIntegrity:

===================================

  Date: 2017-09-13 22:10:02.387

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

 

  Date: 2017-08-31 02:10:27.998

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-31 02:10:23.975

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-31 02:08:15.875

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-29 11:18:10.328

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-29 11:18:06.304

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-29 11:17:57.214

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-24 18:52:49.949

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

 

  Date: 2017-08-24 01:35:36.495

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-24 01:35:32.469

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™ i7-7700HQ CPU @ 2.80GHz

Percentage of memory in use: 36%

Total physical RAM: 16234.32 MB

Available physical RAM: 10344.41 MB

Total Virtual: 18666.32 MB

Available Virtual: 12454.25 MB

 

==================== Drives ================================

 

Drive c: (OS) (Fixed) (Total:237.36 GB) (Free:128.79 GB) NTFS ==>[system with boot components (obtained from drive)]

Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:395.07 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: 87D15391)

 

Partition: GPT.

 

========================================================

Disk: 1 (Size: 931.5 GB) (Disk ID: 47CEC1FB)

 

Partition: GPT.

 

==================== End of Addition.txt ============================

[ismael4790]

Here they are. 

 

 

 

LOGS:

 

 

 

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 20-09-2017

Ran by Ismael (administrator) on DESKTOP-FKS8UBF (21-09-2017 15:00:37)

Running from C:\Users\Ismael\Downloads

Loaded Profiles: Ismael (Available Profiles: defaultuser0 & Ismael)

Platform: Windows 10 Home Version 1703 (X64) Language: Español (España, internacional)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

 

==================== Processes (Whitelisted) =================

 

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

 

() C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe

(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

() C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe

(Intel Corporation) C:\Windows\System32\ibtsiva.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHDCPSvc.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHeciSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHTE.EXE

(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe

(Spotify Ltd) C:\Users\Ismael\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Mega Limited) C:\Users\Ismael\AppData\Local\MEGAsync\MEGAsync.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel® Corporation) C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\XtuService.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe

() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe

() C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

 

==================== Registry (Whitelisted) ===========================

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

 

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-09-14] (Dropbox, Inc.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2017-07-26] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2017-07-26] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [Spotify Web Helper] => C:\Users\Ismael\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1580144 2017-08-05] (Spotify Ltd)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe [1049608 2017-07-03] (ASUSTek Computer Inc)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\MountPoints2: {c5a47316-2d46-11e7-88c9-c8215828a739} - "F:\setup_observer_1.0_(14198).exe" 

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\MountPoints2: {dcaeac6e-8406-11e7-88d8-c8215828a739} - "G:\setup.exe" 

Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-03-28]

ShortcutTarget: MEGAsync.lnk -> C:\Users\Ismael\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MultiSkypeLauncher.lnk [2017-06-18]

ShortcutTarget: MultiSkypeLauncher.lnk -> C:\Program Files (x86)\MultiSkypeLauncher\MultiSkypeLauncher.exe (IM-history)

 

==================== Internet (Whitelisted) ====================

 

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

 

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 212.166.211.4 62.81.16.164

Tcpip\..\Interfaces\{635ec534-7883-4116-b0d7-86660645c924}: [DhcpNameServer] 147.156.200.250

Tcpip\..\Interfaces\{bf0983bd-6838-463c-a5e5-07f2c50a8c5c}: [DhcpNameServer] 212.166.211.4 62.81.16.164

Tcpip\..\Interfaces\{ddd55ed5-bad7-4eeb-b42f-917fa280a2b8}: [DhcpNameServer] 147.156.200.250

Tcpip\..\Interfaces\{fb79ae9e-5616-4872-b030-18f2fbba66f2}: [DhcpNameServer] 212.166.211.4 62.81.16.164

 

Internet Explorer:

==================

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus17win10.msn.com/?pc=ASTE

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE

SearchScopes: HKU\S-1-5-21-2544269325-2574649414-738075177-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

SearchScopes: HKU\S-1-5-21-2544269325-2574649414-738075177-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2017-09-05] (Oracle Corporation)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2017-09-05] (Oracle Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

 

FireFox:

========

FF DefaultProfile: qtyby6wo.default

FF ProfilePath: C:\Users\Ismael\AppData\Roaming\Mozilla\Firefox\Profiles\qtyby6wo.default [2017-08-09]

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2017-09-05] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2017-09-05] (Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)

 

Chrome: 

=======

CHR HomePage: Default -> hxxp://www.google.es/

CHR StartupUrls: Default -> "hxxp://www.google.es/"

CHR Profile: C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default [2017-09-21]

CHR Extension: (Presentaciones de Google) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-28]

CHR Extension: (Google Docs) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-28]

CHR Extension: (Google Drive) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-28]

CHR Extension: (YouTube) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-28]

CHR Extension: (Adobe Acrobat) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-29]

CHR Extension: (Hojas de cálculo de Google) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-28]

CHR Extension: (Documentos de Google sin conexión) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-28]

CHR Extension: (Google Mail Checker) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2017-03-28]

CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]

CHR Extension: (Gmail) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-28]

CHR Extension: (Chrome Media Router) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]

CHR HKU\S-1-5-21-2544269325-2574649414-738075177-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

 

==================== Services (Whitelisted) ====================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)

S2 ASUS Rog Aura Core; C:\Program Files (x86)\ASUS\ROG Aura Core\AuraCoreSrv.exe [552600 2016-10-14] (ASUS)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [49992 2017-09-14] (Dropbox, Inc.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)

R2 FBAgent; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe [73032 2014-08-13] ()

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel® Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [177440 2016-10-05] (Intel Corporation)

S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\wtoolex\wpsupdatesvr.exe [133376 2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-11-29] ()

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)

R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-26] (NVIDIA Corporation)

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2015-03-19] (The OpenVPN Project)

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()

S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [42680 2016-10-21] (ASUSTeK COMPUTER INC.)

S3 Soda PDF Desktop; C:\Program Files\Soda PDF Desktop\ws.exe [2581864 2017-01-25] (LULU Software)

S3 Soda PDF Desktop CrashHandler; C:\Program Files\Soda PDF Desktop\crash-handler-ws.exe [931176 2017-01-25] (LULU Software)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)

R2 Tran_Process_Proc; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe [71024 2014-03-25] ()

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-11] (Microsoft Corporation)

S3 wpscloudsvr; C:\Program Files (x86)\Kingsoft\WPS Office\wpscloudsvr.exe [162048 2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\XtuService.exe [18232 2016-08-25] (Intel® Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-11-29] (Intel® Corporation)

R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

 

===================== Drivers (Whitelisted) ======================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

R3 AsusHFilter; C:\WINDOWS\System32\drivers\AsusHFilter.sys [30200 2016-12-22] ()

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [99320 2016-10-11] (ASUS Corporation)

S3 bsitf; C:\WINDOWS\system32\DRIVERS\bsitf.sys [37208 2017-03-28] (ASUSTek Computer Inc.)

R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30352 2017-04-09] (Disc Soft Ltd)

S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] () [File not signed]

S3 GENERICDRV; C:\Program Files (x86)\ASUS\ASUS Live Update\Temp\3\amifldrv64.sys [17896 2017-01-05] ()

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [249104 2016-10-06] (Intel Corporation)

R2 iocbios2; C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation)

R1 MpKsl128595a9; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{BFFC6767-3FA1-4D5D-8C6D-F2D61160E1A7}\MpKsl128595a9.sys [44928 2017-09-21] (Microsoft Corporation)

R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [79504 2016-09-18] (Windows ® Win 7 DDK provider)

R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [7918840 2016-12-19] (Intel Corporation)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-26] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)

R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-07-26] (NVIDIA Corporation)

R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [329184 2016-08-15] (Realtek Semiconductor Corp.)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-10-18] (Realtek )

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

 

==================== NetSvcs (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

 

==================== One Month Created files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2017-09-21 15:00 - 2017-09-21 15:00 - 000023792 _____ C:\Users\Ismael\Downloads\FRST.txt

2017-09-21 15:00 - 2017-09-21 15:00 - 000000000 ____D C:\FRST

2017-09-21 14:59 - 2017-09-21 14:59 - 002399744 _____ (Farbar) C:\Users\Ismael\Downloads\FRST64.exe

2017-09-19 23:34 - 2017-09-20 00:02 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\CDisplayEx

2017-09-19 23:34 - 2017-09-19 23:34 - 000001102 _____ C:\Users\Ismael\Desktop\CDisplayEx.lnk

2017-09-19 23:34 - 2017-09-19 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx

2017-09-19 23:34 - 2017-09-19 23:34 - 000000000 ____D C:\Program Files (x86)\CDisplayEx

2017-09-19 23:33 - 2017-09-19 23:34 - 007319720 _____ (Progdigy Software S.A.R.L. ) C:\Users\Ismael\Downloads\CDisplayExWin32v1.10.29.exe

2017-09-18 19:51 - 2017-09-18 19:51 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

2017-09-15 21:14 - 2017-09-15 21:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2017-09-15 18:44 - 2017-09-15 18:48 - 000000000 ____D C:\Users\Ismael\AppData\Local\latexdraw

2017-09-15 18:43 - 2017-09-15 18:43 - 000000746 _____ C:\Users\Ismael\Desktop\LaTeXDraw.LNK

2017-09-15 18:43 - 2017-09-15 18:43 - 000000746 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LaTeXDraw.LNK

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\usr

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\Users\Ismael\.latexdraw

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\Program Files\latexdraw

2017-09-15 18:42 - 2017-09-15 18:42 - 010155931 _____ C:\Users\Ismael\Downloads\LaTeXDraw-3.3.6-bin.zip

2017-09-15 18:42 - 2017-09-15 18:42 - 000000000 ____D C:\Users\Ismael\Downloads\LaTeXDraw-3.3.6-bin

2017-09-14 23:41 - 2017-09-14 23:41 - 000049992 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2017-09-14 23:41 - 2017-09-14 23:41 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys

2017-09-14 23:41 - 2017-09-14 23:41 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys

2017-09-14 23:41 - 2017-09-14 23:41 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys

2017-09-12 20:20 - 2017-09-05 07:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2017-09-12 20:20 - 2017-09-05 07:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2017-09-12 20:20 - 2017-09-05 07:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2017-09-12 20:20 - 2017-09-05 07:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2017-09-12 20:20 - 2017-09-05 07:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2017-09-12 20:20 - 2017-09-05 07:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2017-09-12 20:20 - 2017-09-05 07:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2017-09-12 20:20 - 2017-09-05 07:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2017-09-12 20:20 - 2017-09-05 07:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2017-09-12 20:20 - 2017-09-05 07:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2017-09-12 20:20 - 2017-09-05 07:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2017-09-12 20:20 - 2017-09-05 06:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2017-09-12 20:20 - 2017-09-05 06:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2017-09-12 20:20 - 2017-09-05 06:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll

2017-09-12 20:20 - 2017-09-05 06:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2017-09-12 20:20 - 2017-09-05 06:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2017-09-12 20:20 - 2017-09-05 06:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe

2017-09-12 20:20 - 2017-09-05 06:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2017-09-12 20:20 - 2017-09-05 06:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2017-09-12 20:20 - 2017-09-05 06:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2017-09-12 20:20 - 2017-09-05 06:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll

2017-09-12 20:20 - 2017-09-05 06:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2017-09-12 20:20 - 2017-09-05 06:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys

2017-09-12 20:20 - 2017-09-05 06:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2017-09-12 20:20 - 2017-09-05 06:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2017-09-12 20:20 - 2017-09-05 06:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2017-09-12 20:20 - 2017-09-05 06:26 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2017-09-12 20:20 - 2017-09-05 06:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2017-09-12 20:20 - 2017-09-05 06:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe

2017-09-12 20:20 - 2017-09-05 06:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2017-09-12 20:20 - 2017-09-05 06:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2017-09-12 20:20 - 2017-09-05 06:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2017-09-12 20:20 - 2017-09-05 06:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll

2017-09-12 20:20 - 2017-09-05 06:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2017-09-12 20:20 - 2017-09-05 06:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2017-09-12 20:20 - 2017-09-05 06:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll

2017-09-12 20:20 - 2017-09-05 06:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2017-09-12 20:19 - 2017-09-05 07:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys

2017-09-12 20:19 - 2017-09-05 07:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-09-12 20:19 - 2017-09-05 07:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2017-09-12 20:19 - 2017-09-05 07:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2017-09-12 20:19 - 2017-09-05 07:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2017-09-12 20:19 - 2017-09-05 07:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2017-09-12 20:19 - 2017-09-05 07:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2017-09-12 20:19 - 2017-09-05 07:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2017-09-12 20:19 - 2017-09-05 07:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2017-09-12 20:19 - 2017-09-05 07:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-09-12 20:19 - 2017-09-05 07:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-09-12 20:19 - 2017-09-05 07:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2017-09-12 20:19 - 2017-09-05 07:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys

2017-09-12 20:19 - 2017-09-05 07:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2017-09-12 20:19 - 2017-09-05 07:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2017-09-12 20:19 - 2017-09-05 07:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2017-09-12 20:19 - 2017-09-05 07:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-09-12 20:19 - 2017-09-05 07:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll

2017-09-12 20:19 - 2017-09-05 07:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2017-09-12 20:19 - 2017-09-05 07:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2017-09-12 20:19 - 2017-09-05 06:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2017-09-12 20:19 - 2017-09-05 06:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-09-12 20:19 - 2017-09-05 06:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2017-09-12 20:19 - 2017-09-05 06:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2017-09-12 20:19 - 2017-09-05 06:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2017-09-12 20:19 - 2017-09-05 06:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll

2017-09-12 20:19 - 2017-09-05 06:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2017-09-12 20:19 - 2017-09-05 06:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2017-09-12 20:19 - 2017-09-05 06:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe

2017-09-12 20:19 - 2017-09-05 06:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe

2017-09-12 20:19 - 2017-09-05 06:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys

2017-09-12 20:19 - 2017-09-05 06:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2017-09-12 20:19 - 2017-09-05 06:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys

2017-09-12 20:19 - 2017-09-05 06:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2017-09-12 20:19 - 2017-09-05 06:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2017-09-12 20:19 - 2017-09-05 06:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2017-09-12 20:19 - 2017-09-05 06:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2017-09-12 20:19 - 2017-09-05 06:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe

2017-09-12 20:19 - 2017-09-05 06:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe

2017-09-12 20:19 - 2017-09-05 06:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-09-12 20:19 - 2017-09-05 06:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2017-09-12 20:19 - 2017-09-05 06:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2017-09-12 20:19 - 2017-09-05 06:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2017-09-12 20:19 - 2017-09-05 06:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2017-09-12 20:19 - 2017-09-05 06:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2017-09-12 20:19 - 2017-09-05 06:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2017-09-12 20:19 - 2017-09-05 06:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2017-09-12 20:19 - 2017-09-05 06:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll

2017-09-12 20:19 - 2017-09-05 06:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll

2017-09-12 20:19 - 2017-09-05 06:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll

2017-09-12 20:19 - 2017-09-01 07:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin

2017-09-11 20:06 - 2017-09-11 20:06 - 000001972 _____ C:\Users\Ismael\Desktop\PDFsam Basic.lnk

2017-09-10 21:01 - 2017-09-10 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)

2017-09-05 22:02 - 2017-09-05 22:02 - 000038011 _____ C:\Users\Ismael\.sambox.cache

2017-09-05 21:02 - 2017-09-05 21:02 - 000110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Sun

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Sun

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\.oracle_jre_usage

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFsam Basic

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Program Files (x86)\PDFsam Basic

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Oracle

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\ProgramData\Oracle

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\Program Files\Java

2017-09-05 21:00 - 2017-09-05 21:00 - 009597704 _____ (PDFsam) C:\Users\Ismael\Downloads\PDFsam_Basic3_Installer.exe

2017-09-05 21:00 - 2017-09-05 21:00 - 000000000 ____D C:\ProgramData\PDFsam Enhanced 4

2017-09-04 20:10 - 2017-09-04 20:10 - 000001034 _____ C:\Users\Ismael\Desktop\Veusz.lnk

2017-09-04 20:10 - 2017-09-04 20:10 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veusz

2017-09-04 20:10 - 2017-09-04 20:10 - 000000000 ____D C:\Program Files (x86)\Veusz

2017-09-04 20:09 - 2017-09-04 20:09 - 015420136 _____ C:\Users\Ismael\Downloads\veusz-1.27-windows-setup.exe

2017-08-31 02:07 - 2017-08-31 02:54 - 000000000 ____D C:\Users\Ismael\AppData\Local\Mirillis

2017-08-31 02:07 - 2017-08-31 02:07 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Mirillis

2017-08-29 10:51 - 2017-08-29 10:51 - 000001338 _____ C:\Users\Ismael\Desktop\queja amazon.txt

2017-08-29 03:36 - 2017-08-29 03:36 - 000000858 _____ C:\Users\Ismael\Desktop\Redout Enhanced Edition.lnk

2017-08-29 03:36 - 2017-08-29 03:36 - 000000000 ____D C:\Users\Ismael\AppData\Local\redout

2017-08-29 03:36 - 2017-08-29 03:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Redout Enhanced Edition

 

==================== One Month Modified files and folders ========

 

(If an entry is included in the fixlist, the file/folder will be moved.)

 

2017-09-21 13:50 - 2017-07-30 18:43 - 002147826 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-09-21 13:50 - 2017-03-20 07:11 - 000981776 _____ C:\WINDOWS\system32\perfh00A.dat

2017-09-21 13:50 - 2017-03-20 07:11 - 000207452 _____ C:\WINDOWS\system32\perfc00A.dat

2017-09-21 13:46 - 2017-07-30 18:35 - 000000000 ____D C:\Users\Ismael

2017-09-21 13:46 - 2017-03-28 18:44 - 000000200 _____ C:\Users\Ismael\AppData\Roaming\sp_data.sys

2017-09-21 13:46 - 2017-01-07 21:06 - 000000000 ____D C:\ProgramData\NVIDIA

2017-09-21 13:43 - 2017-07-30 18:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-09-21 13:43 - 2017-07-30 18:33 - 000419976 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-09-21 13:43 - 2017-03-28 18:41 - 000000000 __SHD C:\Users\Ismael\IntelGraphicsProfiles

2017-09-21 13:43 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI

2017-09-21 13:43 - 2017-01-07 21:33 - 000005693 ___RH C:\farstone_pe.letter

2017-09-21 13:29 - 2017-03-28 18:43 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Skype

2017-09-21 12:12 - 2017-07-30 18:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2017-09-21 12:00 - 2017-07-30 18:39 - 000003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1

2017-09-21 12:00 - 2017-07-30 18:39 - 000003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2

2017-09-21 10:09 - 2017-03-29 00:27 - 000000000 ____D C:\Users\Ismael\AppData\Local\CrashDumps

2017-09-21 08:58 - 2017-07-30 18:39 - 000004220 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5DFBF38B-69CB-428C-A7C2-45449661EC73}

2017-09-21 01:52 - 2017-03-28 23:05 - 000000000 ____D C:\Program Files (x86)\Steam

2017-09-21 01:51 - 2017-07-04 21:14 - 000000000 ____D C:\Users\Ismael\Desktop\Juegos

2017-09-21 00:23 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps

2017-09-21 00:23 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\FxsTmp

2017-09-21 00:23 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness

2017-09-21 00:22 - 2017-03-28 23:30 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2017-09-21 00:20 - 2017-07-30 18:39 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2544269325-2574649414-738075177-1001

2017-09-21 00:20 - 2017-03-28 18:43 - 000002400 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-09-21 00:20 - 2017-03-28 18:43 - 000000000 ___RD C:\Users\Ismael\OneDrive

2017-09-19 19:37 - 2017-01-07 21:41 - 000000000 ____D C:\Program Files\Microsoft Office

2017-09-19 19:36 - 2017-03-28 19:22 - 000000000 ___RD C:\Users\Ismael\Documents\MEGAsync

2017-09-19 00:02 - 2017-03-28 21:25 - 000001747 _____ C:\Users\Ismael\Desktop\MPC-HC x64.lnk

2017-09-19 00:02 - 2017-03-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64

2017-09-19 00:02 - 2017-03-28 21:25 - 000000000 ____D C:\Program Files\MPC-HC

2017-09-19 00:01 - 2017-04-08 22:24 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\BitComet

2017-09-18 19:51 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-09-18 19:51 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2017-09-15 21:14 - 2017-03-28 18:45 - 000000000 ____D C:\Program Files (x86)\Dropbox

2017-09-13 22:10 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache

2017-09-13 18:43 - 2017-03-28 22:57 - 000000000 ___RD C:\Program Files (x86)\Skype

2017-09-13 18:43 - 2017-03-28 22:57 - 000000000 ____D C:\ProgramData\Skype

2017-09-13 18:13 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF

2017-09-12 23:40 - 2017-01-07 20:54 - 000000000 __RHD C:\Users\Public\AccountPictures

2017-09-12 21:14 - 2017-03-20 07:11 - 000000000 ____D C:\WINDOWS\system32\es

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\system32\F12

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\setup

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-09-12 20:23 - 2017-03-29 21:29 - 000000000 ____D C:\WINDOWS\system32\MRT

2017-09-12 20:22 - 2017-03-29 21:29 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-09-12 20:22 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp

2017-09-10 21:01 - 2017-04-08 22:24 - 000000855 _____ C:\Users\Public\Desktop\BitComet.lnk

2017-09-05 01:15 - 2016-11-14 08:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2017-09-02 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2017-09-02 17:15 - 2017-03-18 23:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2017-08-31 23:35 - 2017-03-29 18:57 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2017-08-29 02:31 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2017-08-28 22:43 - 2017-03-28 19:05 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-08-28 22:43 - 2017-03-28 19:05 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk

 

==================== Files in the root of some directories =======

 

2017-03-28 18:44 - 2017-09-21 13:46 - 000000200 _____ () C:\Users\Ismael\AppData\Roaming\sp_data.sys

2017-07-30 18:34 - 2017-07-30 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

 

Some files in TEMP:

====================

2017-08-16 02:13 - 2017-08-16 02:13 - 016742904 _____ () C:\Users\Ismael\AppData\Local\Temp\Bit830B.tmp.exe

2017-09-10 21:00 - 2017-09-10 21:00 - 016739360 _____ () C:\Users\Ismael\AppData\Local\Temp\BitE047.tmp.exe

2017-09-05 21:00 - 2017-09-05 21:01 - 056501344 _____ (Oracle Corporation) C:\Users\Ismael\AppData\Local\Temp\cceab7b1-7cc3-4e18-be6a-076670329d9b.exe

 

==================== Bamital & volsnap ======================

 

(There is no automatic fix for files that do not pass verification.)

 

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

 

LastRegBack: 2017-09-15 21:48

 

==================== End of FRST.txt ============================

 

 

 

 

 

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-09-2017

Ran by Ismael (21-09-2017 15:01:20)

Running from C:\Users\Ismael\Downloads

Windows 10 Home Version 1703 (X64) (2017-07-30 16:41:50)

Boot Mode: Normal

==========================================================

 

 

==================== Accounts: =============================

 

Administrador (S-1-5-21-2544269325-2574649414-738075177-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2544269325-2574649414-738075177-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-2544269325-2574649414-738075177-1000 - Limited - Disabled) => C:\Users\defaultuser0

Invitado (S-1-5-21-2544269325-2574649414-738075177-501 - Limited - Disabled)

Ismael (S-1-5-21-2544269325-2574649414-738075177-1001 - Administrator - Enabled) => C:\Users\Ismael

 

==================== Security Center ========================

 

(If an entry is included in the fixlist, it will be removed.)

 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 

==================== Installed Programs ======================

 

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

 

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)

ABZÛ (HKLM\...\Steam App 384190) (Version:  - Giant Squid)

Action! (HKLM-x32\...\Mirillis Action!) (Version: 2.4.1 - Mirillis)

Actualización de NVIDIA 27.1.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 27.1.0.0 - NVIDIA Corporation) Hidden

Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)

Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)

ASUS GIFTBOX (HKLM-x32\...\ASUS GIFTBOX) (Version: 7.5.24 - ASUSTek Computer Inc)

ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS)

ASUS Input Configuration (HKLM-x32\...\{7DDF7571-64BD-4232-9729-20FF10CE6C62}) (Version: 1.0.3 - ASUS)

ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)

ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.14 - ASUS)

ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.19.0004 - ASUS)

ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.8 - ASUS)

ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0049 - ASUS)

AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.2.9 - ICEpower a/s)

BitComet 1.47 (HKLM-x32\...\BitComet_x64) (Version: 1.47 - CometNetwork)

Castle of Illusion (HKLM-x32\...\Q2FzdGxlb2ZJbGx1c2lvbg==_is1) (Version: 1 - )

CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)

CDisplayEx 1.10.29 (HKLM-x32\...\CDisplayEx_is1) (Version:  - Progdigy Software S.A.R.L.)

CyberLink PhotoDirector 5 (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.) Hidden

CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.)

CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.) Hidden

CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.)

DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd)

Dead Rising (HKLM-x32\...\Dead Rising_is1) (Version:  - )

Dead Rising 2 (HKLM-x32\...\Dead Rising 2_is1) (Version:  - )

Depth (HKLM\...\Steam App 274940) (Version:  - Digital Confectioners)

Desinstalar impresora EPSON SX535WD Series (HKLM\...\EPSON SX535WD Series) (Version:  - SEIKO EPSON Corporation)

Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.2.5 - ASUSTek COMPUTER INC.)

Discord (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

Dropbox (HKLM-x32\...\Dropbox) (Version: 34.4.22 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)

Epson Download Navigator (HKLM-x32\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print 2 (HKLM-x32\...\{FFF841F3-9A15-4F61-BD16-C19F132E5A27}) (Version: 2.3.0.0 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)

Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version:  - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)

Firewatch (HKLM-x32\...\Firewatch_is1) (Version:  - )

GameFirst IV (HKLM-x32\...\{370651DD-8ABF-4807-9533-0869FDF79BFA}) (Version: 1.5.31 - ASUSTeK COMPUTER INC.) Hidden

GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.31) (Version: 1.5.31 - ASUSTeK COMPUTER INC.)

GoldWave v6.28 (HKLM\...\GoldWave v6.28) (Version: 6.28 - GoldWave Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.09) (Version: 9.09 - Artifex Software Inc.)

GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)

Hellblade: Senua's Sacrifice (HKLM-x32\...\1573355755_is1) (Version: 1.0 - GOG.com)

Hitman (HKLM-x32\...\{793F01BF-93D6-4135-B0E9-156D6D752FFA}_is1) (Version:  - Square Enix)

Injustice: Gods Among Us Ultimate Edition (HKLM\...\Steam App 242700) (Version:  - NetherRealm Studios)

InputMapper (HKLM-x32\...\{026D2025-A7FA-4F5C-AF8C-A6F7A9B917FC}) (Version: 1.6.10.19991 - DSDCS)

Inside (HKLM-x32\...\{9BD4503F-F711-491D-984A-AB4ABD66B8C2}_is1) (Version:  - Playdead)

Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1035 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4550 - Intel Corporation)

Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)

Intel® Wireless Bluetooth® (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)

Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)

Killing Floor (HKLM\...\Steam App 1250) (Version:  - Tripwire Interactive)

Left 4 Dead (HKLM\...\Steam App 500) (Version:  - Valve)

Little Nightmares - Scarecrow sack (HKLM-x32\...\1268928435_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Little Nightmares - Upside-down teapot (HKLM-x32\...\1352220891_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Little Nightmares (HKLM-x32\...\1433377508_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Malwarebytes Anti-Malware versione 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)

Manual de red EPSON SX535WD Series (HKLM-x32\...\EPSON SX535WD Series Netg) (Version:  - )

Manual de usuario EPSON SX535WD Series (HKLM-x32\...\EPSON SX535WD Series Useg) (Version:  - )

Maxima (sbcl) 5.38.1 (HKLM-x32\...\Maxima-sbcl-5.38.1_is1) (Version: 5.38.1 - The Maxima Development Team)

MegaDownloader 1.7 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 1.7 - AppsForMega.info)

MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)

Micro Machines World Series (HKLM-x32\...\Micro Machines World Series_is1) (Version:  - )

Microsoft Office 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.8326.2107 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

Mortal Kombat Komplete Edition (HKLM\...\Steam App 237110) (Version:  - NetherRealm Studios)

Mortal Kombat X (HKLM\...\Steam App 307780) (Version:  - NetherRealm Studios)

Mozilla Firefox 54.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 en-US)) (Version: 54.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)

MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)

MultiSkypeLauncher (remove only) (HKLM-x32\...\MultiSkypeLauncher) (Version: 1.8 - MultiSkypeLauncher)

No Mans Sky (HKLM-x32\...\No Mans Sky_is1) (Version:  - )

NVIDIA Controlador de 3D Vision 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.54 - NVIDIA Corporation)

NVIDIA Controlador de gráficos 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.8.0.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.8.0.89 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Observer (HKLM-x32\...\1449856523_is1) (Version: 1.0 - GOG.com)

Oddworld: Abe's Oddysee (HKLM\...\Steam App 15700) (Version:  - Oddworld Inhabitants)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

OpenVPN 2.3.6-I003  (HKLM\...\OpenVPN) (Version: 2.3.6-I003 - )

Panel de control de NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden

PDFsam Basic (HKLM-x32\...\{0F7F1493-D16D-4C7B-A271-17A12168CCC4}) (Version: 3.30.2.0 - Andrea Vacondio)

Pneuma Breath of Life (HKLM-x32\...\Pneuma Breath of Life_is1) (Version:  - )

Rake (HKLM\...\Steam App 386880) (Version:  - Konsordo)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.29093 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7926 - Realtek Semiconductor Corp.)

Redout Enhanced Edition (HKLM-x32\...\Redout Enhanced Edition_is1) (Version:  - )

Resident Evil 7 Biohazard (HKLM-x32\...\{1ECBF8F3-7079-44CA-AD32-B2AECBCF636F}_is1) (Version:  - Capcom)

ROG Aura Core (HKLM-x32\...\{24D10379-1ED5-4949-A024-991131A992D9}) (Version: 1.0.1 - ASUS)

ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 2.0.2 - ASUS)

Shadow Warrior (HKLM\...\Steam App 233130) (Version:  - Flying Wild Hog)

Shadow Warrior 2 (HKLM\...\Steam App 324800) (Version:  - Flying Wild Hog)

Shadow Warrior Classic Redux (HKLM\...\Steam App 225160) (Version:  - General Arcade)

Sine Mora EX (HKLM\...\SKIDROW - Sine Mora EX) (Version:  - SKIDROW)

Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)

Soda PDF Desktop (HKLM-x32\...\SodaDesktop) (Version: 9.0.38.31816 - LULU Software)

Soda PDF Desktop View Module (HKLM\...\{CAF75E2A-9CD6-49CC-962D-BFF08DBE5EEB}) (Version: 9.0.38.31757 - LULU Software) Hidden

Software Intel® PROSet/Wireless (HKLM-x32\...\{5853172b-5520-4089-9ef4-e26c594382b3}) (Version: 19.30.0 - Intel Corporation)

Split Second - Velocity (HKLM-x32\...\{E4D2641A-E3A1-447A-AACA-A7493AAF87E5}_is1) (Version:  - )

Spotify (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Spotify) (Version: 1.0.60.492.gbb40dab8 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)

Telegram Desktop versión 1.1.7 (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.7 - Telegram Messenger LLP)

Texmaker (HKLM-x32\...\Texmaker) (Version:  - )

TotalRecovery Pro (HKLM-x32\...\TotalRecovery) (Version: 10.0.11.2 - FarStone Inc.)

UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden

UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden

Veusz 1.27 (HKLM-x32\...\Veusz) (Version: 1.27 - Jeremy Sanders)

Viscera Cleanup Detail: Shadow Warrior (HKLM\...\Steam App 255520) (Version:  - RuneStorm)

Viscera Cleanup Detail: Shadow Warrior

 (HKLM\...\UDK-2b0b0d9f-be25-4056-9ea9-e4f443e0219a) (Version:  - RuneStorm

)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)

WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun)

Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)

Windows Driver Package - ASUS (AsusHFilter) HIDClass  (12/19/2016 1.0.0.2) (HKLM\...\EEDD19DDF3F0CA7CFA2F4C500D442DD1FEB434F6) (Version: 12/19/2016 1.0.0.2 - ASUS)

Windows Driver Package - ASUS (AsusPTPDrv) HIDClass  (09/23/2016 11.0.0.14) (HKLM\...\F95583A62AB902A3FC263F668380483F9E0113CD) (Version: 09/23/2016 11.0.0.14 - ASUS)

WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.)

WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 10.1.0.5644 - Kingsoft Corp.)

XSplit Gamecaster (HKLM-x32\...\{9E8A3821-032E-4230-9C12-C14D3FC8685E}) (Version: 2.8.1605.2342 - SplitmediaLabs)

Yooka-Laylee (HKLM-x32\...\1445853962_is1) (Version: 1.0 - GOG.com)

Yooka-Laylee Toybox (HKLM-x32\...\1825770152_is1) (Version: 2.0.0.2 - GOG.com)

 

==================== Custom CLSID (Whitelisted): ==========================

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File

ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.)

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxDTCM.dll [2016-11-30] (Intel Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

 

==================== Scheduled Tasks (Whitelisted) =============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

Task: {1244B6CA-A359-48B6-994F-0AF65727C0E8} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {174687BA-3C5F-4FB4-9A9B-A1A651714A39} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)

Task: {1A557AA9-B6CA-4D12-B252-E64AA901E402} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)

Task: {25518B65-3FC9-44B5-8BD1-7707FF67A356} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()

Task: {2CA87A53-DB17-44F1-857D-847419652912} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)

Task: {424D6FB9-3AC7-498B-96C2-145DCF37F660} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-28] (Dropbox, Inc.)

Task: {4577A715-6039-49AF-A54B-93F9D096D702} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)

Task: {501CC9B8-D8E1-4647-88C8-4FA7016B5DC9} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-08-24] (ASUSTek Computer Inc.)

Task: {552DEC7A-903A-40B8-99AD-3480E4C49D89} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-07-26] (NVIDIA Corporation)

Task: {57FE4697-58D6-4906-8A87-4099455D8994} - System32\Tasks\WpsKtpcntrQingTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exe [2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

Task: {5835961F-C9B5-4063-9C52-3750B7A7BCCD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-07-26] (NVIDIA Corporation)

Task: {59BC8EFE-6075-4E75-8EE8-1639D1248095} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {63D6153F-16E2-4D94-B333-EB484CB2794C} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-28] (Dropbox, Inc.)

Task: {68A66FD4-C532-447F-AB59-C7320AF42EB2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-28] (Google Inc.)

Task: {77834291-24AC-4FED-98C1-375D0764AD6A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-09] (Adobe Systems Incorporated)

Task: {80DCE593-E592-4669-B6DF-85287B767929} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {89E7F8FD-3D5E-4E75-8022-A50A86BC5F40} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {9160A357-1C01-4C3B-8057-8C58157278BB} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-09-02] (Realtek Semiconductor)

Task: {94DCF102-8C69-483E-B961-A788E4BBAA88} - System32\Tasks\ASUSTek Computer Inc\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [2017-07-03] (ASUSTek Computer Inc)

Task: {9DAA6C32-BDEF-4838-9575-1600A8E7F27A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-07-26] (NVIDIA Corporation)

Task: {9E853A78-0369-4B18-B1EA-9DCBCC3C8048} - System32\Tasks\ExclusiveTool => C:\Program Files (x86)\DSDCS\InputMapper\ExclusiveModeTool.exe [2016-10-04] (InputMapper)

Task: {A0118620-FA91-4750-9CD5-782F228ABD0B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()

Task: {AC866D5A-8083-405E-80A9-FB35C37D495D} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [2016-10-21] (ASUSTek Computer Inc.)

Task: {B03A5B78-3922-44F0-9E06-5D4BEBA0231D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-18] (Microsoft Corporation)

Task: {B21DE624-ED90-448C-83A8-63BB29B17B09} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-10-13] (ASUS)

Task: {B473F457-40B7-409C-BFFF-6E01E4D78235} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel® Corporation)

Task: {B85232F3-1DC4-4945-ABD6-278746096C35} - System32\Tasks\WpsExternal_20161114063247 => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe [2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

Task: {B8746397-DB43-4D67-A867-C75176CA71FD} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)

Task: {BB7E5E97-6F43-4D17-A76E-FE16A6C1A196} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)

Task: {BF0C59D3-AA44-4D5E-9DB2-71FBE9907CE7} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {C36F87BF-095C-4A1E-87B0-2AEC0345A1A0} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {C7897FD6-7FAF-45F4-B700-2FB318A1EEFE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-26] (NVIDIA Corporation)

Task: {CF2FBE55-E2BF-47C1-8134-E7529FCB06D9} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

Task: {CF94EA3E-AD8B-430A-AB17-095C6D8C1620} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-09-02] (Realtek Semiconductor)

Task: {D0696DD3-D469-4DAE-AF6E-78F858CB11BF} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-07-07] (ASUSTek COMPUTER INC.)

Task: {EAB47ED5-928D-4FB9-BA2E-E8EC68D194B6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)

Task: {F6677235-E936-4A39-BC92-EEF06CE74CF5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-28] (Google Inc.)

 

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

 

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\WpsExternal_20161114063247.job => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe

Task: C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exeÃqing 10.1.0.5644 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads

 

==================== Shortcuts & WMI ========================

 

(The entries could be listed to be restored or removed.)

 

 

Shortcut: C:\Users\Ismael\Desktop\Action!.lnk -> C:\Program Files (x86)\Mirillis\Action!\Action!.bat ()

 

==================== Loaded Modules (Whitelisted) ==============

 

2014-08-13 08:30 - 2014-08-13 08:30 - 000073032 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

2017-04-28 16:46 - 2017-07-26 19:09 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000071024 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe

2017-01-07 21:39 - 2014-04-14 20:59 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2017-07-30 18:34 - 2016-12-29 15:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2016-10-31 21:45 - 2017-06-23 21:42 - 000598528 _____ () C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll

2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2017-03-18 22:59 - 2017-03-20 07:13 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-08-23 21:47 - 2017-08-23 21:47 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2017-03-18 22:58 - 2017-03-18 22:58 - 000047616 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUITelemetry.dll

2017-07-11 02:37 - 2017-07-11 02:37 - 002331136 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIViewModels.dll

2017-07-11 02:37 - 2017-07-11 02:37 - 002836480 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIDataModel.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 000020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe

2017-09-12 20:04 - 2017-09-12 20:04 - 029621760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 000358912 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 002536448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 020305920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 002415104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngine.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 003028992 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll

2017-09-12 20:04 - 2017-09-12 20:04 - 003139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-06-16 02:45 - 2017-06-16 02:45 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll

2017-08-17 00:11 - 2017-08-17 00:11 - 001370112 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 024502272 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Video.UI.exe

2017-08-23 21:47 - 2017-08-23 21:47 - 009145344 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\EntCommon.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 003544488 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17072.13111.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-07-26 23:17 - 2017-07-26 23:17 - 032960512 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe

2017-07-26 23:17 - 2017-07-26 23:17 - 009161728 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\EntCommon.dll

2017-07-16 21:08 - 2017-07-16 21:09 - 003500456 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-07-26 23:17 - 2017-07-26 23:17 - 013154304 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.Visuals.dll

2017-08-28 22:43 - 2017-08-23 10:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll

2017-08-28 22:43 - 2017-08-23 10:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000088576 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\zlibwapi.dll

2015-08-18 09:18 - 2015-08-18 09:18 - 000332800 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBCmdDsp.dll

2015-08-18 06:30 - 2015-08-18 06:30 - 000085504 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FlBckpBk.dll

2014-11-25 05:22 - 2014-11-25 05:22 - 000089088 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EfbCheckImg.dll

2015-08-18 06:28 - 2015-08-18 06:28 - 000323584 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FlBckpRt.dll

2015-08-18 06:26 - 2015-08-18 06:26 - 000223232 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskClone.dll

2015-07-27 07:50 - 2015-07-27 07:50 - 000224256 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskMgr.dll

2014-09-22 04:40 - 2014-09-22 04:40 - 000022528 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBEventMgr.dll

2015-08-18 07:23 - 2015-08-18 07:23 - 000114176 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EasyFuncs.dll

2014-09-22 04:40 - 2014-09-22 04:40 - 000194560 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EFBSearchTool.dll

2014-05-21 05:04 - 2014-05-21 05:04 - 000018432 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FSToken.dll

2015-08-18 09:17 - 2015-08-18 09:17 - 000104448 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\BootConfig.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000012288 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FSFat32.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000201216 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\NtfsLib.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000013312 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\VssNew.dll

2014-09-22 04:41 - 2014-09-22 04:41 - 000239104 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\diskpart.dll

2014-11-05 02:44 - 2014-11-05 02:44 - 000017408 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\VDiskConvert.dll

2014-09-04 04:41 - 2014-09-04 04:41 - 000037888 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\RapidClone.dll

2014-08-20 03:23 - 2014-08-20 03:23 - 000075264 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskInterface.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000194048 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\NetTool.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000157552 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FtpPipeModule.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000091584 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\TransferManager.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000054712 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FTPFunModule.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000062832 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\CommonFun.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000617952 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\XpIcfOpt.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 001937408 _____ () C:\Program Files (x86)\ASUS\Giftbox\ffmpeg.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 002177536 _____ () C:\Program Files (x86)\ASUS\Giftbox\libglesv2.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 000079360 _____ () C:\Program Files (x86)\ASUS\Giftbox\libegl.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 003561984 _____ () C:\Program Files (x86)\ASUS\Giftbox\node.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 000292352 _____ () \\?\C:\Program Files (x86)\ASUS\Giftbox\node_modules\appcloud-native-utils\anu.node

2016-04-13 10:38 - 2016-04-13 10:38 - 000482304 _____ () C:\Users\Ismael\AppData\Local\MEGAsync\libsodium.dll

2017-09-15 21:14 - 2017-09-14 23:41 - 000771392 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll

2017-09-15 21:14 - 2017-09-14 23:41 - 001804608 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll

2017-03-28 18:46 - 2017-09-14 23:40 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000125904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 001862992 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd

2017-09-15 21:14 - 2017-09-14 23:40 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll

2017-03-28 18:46 - 2017-09-14 23:40 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd

2017-09-15 21:14 - 2017-09-14 23:40 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll

2017-03-28 18:46 - 2017-09-14 23:43 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd

2017-09-07 20:19 - 2017-09-14 23:43 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd

2017-05-17 19:32 - 2017-09-14 23:43 - 000082264 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 001826104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000083912 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 001972024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 003928896 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000171336 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000042816 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000531264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000133432 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000224064 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000207680 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd

2017-03-28 18:46 - 2017-09-14 23:40 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000103232 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd

2017-03-28 18:46 - 2017-09-14 23:43 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll

2017-09-15 21:14 - 2017-09-14 23:42 - 000033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd

2017-09-15 21:14 - 2017-09-14 23:41 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll

2017-09-15 21:14 - 2017-09-14 23:42 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL

2017-03-28 18:46 - 2017-09-14 23:43 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.dll

2017-09-15 21:14 - 2017-09-14 23:42 - 001637688 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll

2017-03-28 18:46 - 2017-09-14 23:43 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd

2017-04-08 19:57 - 2017-09-14 23:43 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\wincrashpad.compiled._Crashpad.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000546104 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd

2017-09-15 21:14 - 2017-09-14 23:42 - 000357688 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd

2016-10-05 23:17 - 2016-10-05 23:17 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

2017-04-28 16:46 - 2017-07-26 19:09 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000033280 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll

 

==================== Alternate Data Streams (Whitelisted) =========

 

(If an entry is included in the fixlist, only the ADS will be removed.)

 

 

==================== Safe Mode (Whitelisted) ===================

 

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

 

 

==================== Association (Whitelisted) ===============

 

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

 

 

==================== Internet Explorer trusted/restricted ===============

 

(If an entry is included in the fixlist, it will be removed from the registry.)

 

 

==================== Hosts content: ==========================

 

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

 

2016-07-16 13:47 - 2017-06-25 03:01 - 000001102 ____R C:\WINDOWS\system32\Drivers\etc\hosts

 

0.0.0.0                   keystone.mwbsys.com

0.0.0.0                   telemetry.malwarebytes.com

127.0.0.1 thislineskipsanyemptylines

127.0.0.1 mirillis.com

127.0.0.1 www.mirillis.com

127.0.0.1 serwer2.paka-service.com

127.0.0.1 ns386119.ovh.net

127.0.0.1 mirillis.pl

 

==================== Other Areas ============================

 

(Currently there is no automatic fix for this section.)

 

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\asus\wallpapers\asus.jpg

DNS Servers: 212.166.211.4 - 62.81.16.164

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

Windows Firewall is enabled.

 

==================== MSCONFIG/TASK MANAGER disabled items ==

 

 

==================== FirewallRules (Whitelisted) ===============

 

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

 

FirewallRules: [UDP Query User{24AF7FF9-1142-4A6D-9EDC-D2E043A4976D}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{97B03430-85EF-427D-A355-1F1961519AA0}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [UDP Query User{4C993024-DEDC-4E53-AD0E-DCBE5104EE4B}D:\juegos instalados\micro machines world series\micromachines.exe] => (Allow) D:\juegos instalados\micro machines world series\micromachines.exe

FirewallRules: [TCP Query User{4DA9B378-7CF2-49ED-835D-7E931EA240E7}D:\juegos instalados\micro machines world series\micromachines.exe] => (Allow) D:\juegos instalados\micro machines world series\micromachines.exe

FirewallRules: [UDP Query User{0A958A93-2E59-460D-8720-F1338962AA41}D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe

FirewallRules: [TCP Query User{83A00532-FD31-46D0-BDA9-0968935BF01E}D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe

FirewallRules: [{DCF788BA-9249-4962-84E2-4243221FA532}] => (Allow) D:\SteamLibrary\steamapps\common\ABZU\AbzuGame.exe

FirewallRules: [{D9897DA2-8681-4D01-AFB7-61B58B58149E}] => (Allow) D:\SteamLibrary\steamapps\common\ABZU\AbzuGame.exe

FirewallRules: [UDP Query User{9F1DE3D8-2322-4E6B-8214-C1B7B0D037AE}D:\juegos instalados\yooka-laylee\yookalaylee64.exe] => (Allow) D:\juegos instalados\yooka-laylee\yookalaylee64.exe

FirewallRules: [TCP Query User{AF50BF08-EA02-4B6B-8B1C-1FDCE0C78C01}D:\juegos instalados\yooka-laylee\yookalaylee64.exe] => (Allow) D:\juegos instalados\yooka-laylee\yookalaylee64.exe

FirewallRules: [{3F21CCD0-EA10-43EF-BD9B-4D13DE8611B4}] => (Allow) D:\SteamLibrary\steamapps\common\Rake\Rake.exe

FirewallRules: [{495FD532-D966-4AF0-8904-1BEE5E40618B}] => (Allow) D:\SteamLibrary\steamapps\common\Rake\Rake.exe

FirewallRules: [{560AE2E5-23B3-48DB-86DB-5E6F877CFD10}] => (Allow) D:\SteamLibrary\steamapps\common\KillingFloor\System\KillingFloor.exe

FirewallRules: [{42D9E62A-C8BE-4CEB-8DD4-E9B5117FED6D}] => (Allow) D:\SteamLibrary\steamapps\common\KillingFloor\System\KillingFloor.exe

FirewallRules: [{777126B0-E1B0-4EE0-9F0F-F367CA13BDFE}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{155706D1-34D5-4D8A-9FD0-7DCB2895337B}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{FF5A2059-F4FA-448B-A1FC-BAF26EDB749F}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{1B77943B-C8D2-492B-8BD8-120AB9269DB0}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{DD63FAD2-42C9-47DE-95C2-3B5CA35E8EBA}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{4E62EE29-6C60-446D-A7F6-E731D3DC7C24}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{9E65A72E-581B-4AAC-94D5-5E560000A074}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{C2F7F067-E8B8-4F43-959D-CECC2285D009}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{4465A162-ABD1-4FE0-BF0D-42DA74C95C0F}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior 2\ShadowWarrior2.exe

FirewallRules: [{117C8D93-E117-4F9D-ACE9-F2AEEF560E81}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior 2\ShadowWarrior2.exe

FirewallRules: [{1CEA11CB-5218-4842-B209-7188C3C5CBD8}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe

FirewallRules: [{98AB843A-4BE1-4FBD-ACE0-C5AA017C5B70}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe

FirewallRules: [{FA58302E-9C12-44B2-B9B9-1B563CEED999}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe

FirewallRules: [{6DEDEA1D-5871-4E76-B512-B953148F70BF}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe

FirewallRules: [{E6157457-09DA-434E-882E-81FF56A2A24E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe

FirewallRules: [{1671D9F3-5AF6-4A73-89CD-79E4BBA4E17A}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe

FirewallRules: [UDP Query User{216617EC-3D71-4AD9-9496-FE2F0BE896BC}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe

FirewallRules: [TCP Query User{ACD405AE-E1D0-4DB5-BE0F-6567EB78138D}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe

FirewallRules: [UDP Query User{DC3A5585-3933-419E-BBE6-195537FB8EAF}D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe] => (Allow) D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe

FirewallRules: [TCP Query User{7F14D793-85CD-491F-8C36-F56A649E65C3}D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe] => (Allow) D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe

FirewallRules: [UDP Query User{D273ABA4-C67D-40FD-B9BD-31598890AC84}C:\users\ismael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ismael\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{E4BC42D4-2531-4D0F-B12A-B7BF8FCB5B38}C:\users\ismael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ismael\appdata\roaming\spotify\spotify.exe

FirewallRules: [{9B812719-58BD-4906-8E7F-CFD74873587B}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{7A2A31DF-054D-4521-9D81-48F3896AFA7A}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [UDP Query User{55DC705A-C44E-4F5C-AE60-2AB2706B9CE5}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe

FirewallRules: [TCP Query User{DE7AF6BC-57B8-4645-AA27-33782892297C}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe

FirewallRules: [{A01EEEF1-E062-4943-A894-70123D6B6E2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{A9071D44-C6B7-4B61-9019-8CF38769FAAE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{DD0C6685-B9F3-4F67-A07F-D64A69D7D20F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{92CB640C-BC67-4CBC-92E1-47C09DDCB98A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{CCACCAF6-0598-46A4-B8A3-F58E314D8018}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{83B23928-D278-42D2-A6A9-8DC35D1DE2CD}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [{E9DA2AB0-85FF-4780-A427-9F558A3CBE33}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [UDP Query User{1FFD7B9B-4BCA-4056-BCB3-76A1CC4B9D16}C:\windows\system32\rundll32.exe] => (Allow) C:\windows\system32\rundll32.exe

FirewallRules: [TCP Query User{858240D9-C077-4F3A-A1A8-9631193EE1FB}C:\windows\system32\rundll32.exe] => (Allow) C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{47D2999E-93B1-451B-91F7-AB2BA0800C09}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{A1C946FE-A708-4FC6-A4F3-E2E36465D85F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [{B2F38807-69DC-4C16-9BCA-1C38D85535C1}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{585F8D37-79CC-4CBD-98BA-F5773CBADE08}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{E6162598-03AF-4D4E-9F5F-47B23CA1D538}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\InjusticeLauncher.exe

FirewallRules: [{DA1D8AE9-4418-479B-96E5-660F1FF41EF7}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\InjusticeLauncher.exe

FirewallRules: [{FF507275-1D84-4957-A275-6D4BB48B26F2}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\Injustice.exe

FirewallRules: [{F3FF2B49-FC6D-4FF2-B43C-10EE407F5812}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\Injustice.exe

FirewallRules: [{0478A16B-E00C-452E-B456-B99760C28565}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{9D0A86DB-4A6B-4F62-BD41-CD3BAB394ADD}] => (Allow) D:\SteamLibrary\steamapps\common\left 4 dead\left4dead.exe

FirewallRules: [{79B80B8B-56A1-4B7D-8767-E2C4AB1F688C}] => (Allow) D:\SteamLibrary\steamapps\common\left 4 dead\left4dead.exe

FirewallRules: [{AD59E318-7AFD-4A26-B602-DF7E70E90644}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\BETA\Binaries\Win32\DepthGame.exe

FirewallRules: [{7F3000EB-7423-418A-BFB5-05157F35476B}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\BETA\Binaries\Win32\DepthGame.exe

FirewallRules: [{87A42877-2B15-49A5-940A-56885678E7E9}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\Binaries\Win32\DepthGame.exe

FirewallRules: [{B6AD0089-4942-4D14-9CBE-06E4F10C60C5}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\Binaries\Win32\DepthGame.exe

FirewallRules: [{2DBE3B9D-98D4-4221-9917-28FC9A7A34CE}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{5529ADB4-CCC8-40C3-AAAB-A71FEFBC5EF3}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{8B6419C9-88E5-4FBB-95F8-4CAB1D6D0630}] => (Block) %ProgramFiles% (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{B951F6E2-CC74-432B-8EFD-B67CC42C4630}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{14039CD7-C4E3-4CF9-9482-67102ACB2487}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{91BC3E03-392C-4FA2-9D45-053DA950AB6E}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{B0614C48-0F48-42FD-A53E-49929047D9F4}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{736834C1-557F-4C1E-8939-D8BDBC7AC9E0}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe

FirewallRules: [{B9F01390-70E1-481A-B4CA-D3962A1D3183}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe

FirewallRules: [{E9F4554D-40DE-4CA3-A4E3-D787B8482E86}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MK10.exe

FirewallRules: [{B07990C0-A84B-429D-9698-F85D4F88F8F5}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MK10.exe

FirewallRules: [{CAD6C235-1E79-4AEE-B8A0-D80FAF7AD2A3}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe

FirewallRules: [{075ED27C-B60B-4997-9187-279971698975}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe

FirewallRules: [{7A8676F0-B3B0-432F-B470-217EB177FB9D}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe

FirewallRules: [{3958400F-D0DB-497C-BC4F-E17F38767C5E}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe

FirewallRules: [{22DF73B1-5E29-4892-9D05-07F5417C4599}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F8783DC9-0428-4341-B98E-1E547B97B3C5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{84168C14-DD44-4704-989C-62C1358EED28}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{D7BA9AE6-0DAC-4C01-895F-1395ACD15196}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{EB3D26FD-553E-4E56-AF1D-F226B1B74B56}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{E2E622B6-E05A-42D3-975F-3F26C3080800}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{D8A6F047-7EAC-4BBA-9EDE-F9D8A96B6CF3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{039837CE-9766-41DC-8E6E-AE28D5EA2D22}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE

FirewallRules: [{1B548329-A068-49FD-ACD3-C09962D518DA}] => (Allow) C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

FirewallRules: [{8E79F8CD-2AF7-4E33-A6AA-F07A92235177}] => (Allow) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGCAndroidService.exe

FirewallRules: [{50701328-9775-4EDC-B3F8-CFD144D95189}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{E2AF9A95-3E87-4373-A60E-1191CA62ACBF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{05626D91-E3F0-4582-92FF-A84B5BE4A700}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{B8BD8360-8194-4552-85E5-2F6024AF6132}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{C62B34EE-C570-4A2C-84D9-85B70113B7F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{D6FD987C-1D37-452F-A6E2-E79D26FA57DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{D8D58316-4F8E-46F4-916A-3035A2BDC20E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{26C2C6E2-6395-491C-8E0D-1A6F87B45201}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{DCA8623D-F01D-439C-9F07-9389D0E02147}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{2FFA9325-363A-4E0B-8A8B-940C97AD8251}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [TCP Query User{012CBF4C-C6EC-4AE3-82B6-C2FE62C61108}D:\juegos instalados\firewatch\firewatch.exe] => (Allow) D:\juegos instalados\firewatch\firewatch.exe

FirewallRules: [UDP Query User{9D41905F-88A8-4632-9F40-D3101C6535BF}D:\juegos instalados\firewatch\firewatch.exe] => (Allow) D:\juegos instalados\firewatch\firewatch.exe

FirewallRules: [{0386644F-75FC-4809-993E-E171CAA7693E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{0007544E-3EAA-4B92-8FD7-4E265F83C497}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

FirewallRules: [{5477C8E0-1644-4207-A560-5266B8EB573E}] => (Allow) D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

FirewallRules: [{E1506107-3E2F-430A-8A99-73A44B5F5185}] => (Allow) D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

 

==================== Restore Points =========================

 

17-09-2017 10:38:34 Punto de control programado

 

==================== Faulty Device Manager Devices =============

 

 

==================== Event log errors: =========================

 

Application errors:

==================

Error: (09/21/2017 10:16:16 AM) (Source: Perflib) (EventID: 1023) (User: )

Description: Windows no puede cargar el archivo DLL del contador extensible rdyboost. Los primeros cuatro bytes (DWORD) de la sección de datos contienen el código de error de Windows.

 

Error: (09/21/2017 10:09:03 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: MicrosoftEdgeCP.exe, versión: 11.0.15063.608, marca de tiempo: 0x59ae240c

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000604

Desplazamiento de errores: 0x0000000000000000

Identificador del proceso con errores: 0x3f7c

Hora de inicio de la aplicación con errores: 0x01d332a79f95cb01

Ruta de acceso de la aplicación con errores: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 294daa33-70d4-42d9-b23b-9e617aee5489

Nombre completo del paquete con errores: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe

Identificador de aplicación relativa del paquete con errores: ContentProcess

 

Error: (09/21/2017 09:01:36 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: MicrosoftEdgeCP.exe, versión: 11.0.15063.608, marca de tiempo: 0x59ae240c

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000604

Desplazamiento de errores: 0x0000000000000000

Identificador del proceso con errores: 0x2924

Hora de inicio de la aplicación con errores: 0x01d332a77605d345

Ruta de acceso de la aplicación con errores: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 0be6bacb-6f54-4fa6-910f-3d2b2619aa77

Nombre completo del paquete con errores: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe

Identificador de aplicación relativa del paquete con errores: ContentProcess

 

Error: (09/21/2017 08:59:23 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/21/2017 08:59:23 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/21/2017 01:52:10 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AbeWin.exe, versión: 2.0.0.0, marca de tiempo: 0x3474f98b

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc000041d

Desplazamiento de errores: 0x52524544

Identificador del proceso con errores: 0x3e00

Hora de inicio de la aplicación con errores: 0x01d3326b3454ffd6

Ruta de acceso de la aplicación con errores: D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 79ccf9ff-7d52-4da0-b01e-36e5700d9420

Nombre completo del paquete con errores: 

Identificador de aplicación relativa del paquete con errores:

 

Error: (09/21/2017 01:52:08 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AbeWin.exe, versión: 2.0.0.0, marca de tiempo: 0x3474f98b

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000005

Desplazamiento de errores: 0x52524544

Identificador del proceso con errores: 0x3e00

Hora de inicio de la aplicación con errores: 0x01d3326b3454ffd6

Ruta de acceso de la aplicación con errores: D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: fc70f2d6-930e-4499-a106-14bbd8fb6f16

Nombre completo del paquete con errores: 

Identificador de aplicación relativa del paquete con errores:

 

Error: (09/21/2017 12:23:31 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/21/2017 12:23:31 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

 

Error: (09/20/2017 12:52:40 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ICEsoundAPO64.dll, versión: 1.0.0.20, marca de tiempo: 0x56e94d73

Código de excepción: 0xc0000409

Desplazamiento de errores: 0x000000000002571c

Identificador del proceso con errores: 0x4250

Hora de inicio de la aplicación con errores: 0x01d3319336472e61

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\system32\ICEsoundAPO64.dll

Identificador del informe: 99ee333a-18bc-43bb-9b21-16207b3b482a

Nombre completo del paquete con errores: 

Identificador de aplicación relativa del paquete con errores:

 

 

System errors:

=============

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:53 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 01:43:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: El servicio Kingsoft_WPS_UpdateService no pudo iniciarse debido al siguiente error: 

El servicio no respondió a tiempo a la solicitud de inicio o de control.

 

Error: (09/21/2017 01:43:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Kingsoft_WPS_UpdateService.

 

Error: (09/21/2017 01:43:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: El servicio CldFlt no pudo iniciarse debido al siguiente error: 

Solicitud no compatible.

 

Error: (09/21/2017 12:12:41 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 y APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 11:14:43 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{D63B10C5-BB46-4990-A94F-E40B9D520160}

 y APPID 

{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}

 al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

Error: (09/21/2017 08:57:02 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

 y APPID 

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

 al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

 

 

CodeIntegrity:

===================================

  Date: 2017-09-13 22:10:02.387

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

 

  Date: 2017-08-31 02:10:27.998

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-31 02:10:23.975

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-31 02:08:15.875

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-29 11:18:10.328

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-29 11:18:06.304

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-29 11:17:57.214

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-24 18:52:49.949

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

 

  Date: 2017-08-24 01:35:36.495

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

  Date: 2017-08-24 01:35:32.469

  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

 

 

==================== Memory info =========================== 

 

Processor: Intel® Core™ i7-7700HQ CPU @ 2.80GHz

Percentage of memory in use: 36%

Total physical RAM: 16234.32 MB

Available physical RAM: 10344.41 MB

Total Virtual: 18666.32 MB

Available Virtual: 12454.25 MB

 

==================== Drives ================================

 

Drive c: (OS) (Fixed) (Total:237.36 GB) (Free:128.79 GB) NTFS ==>[system with boot components (obtained from drive)]

Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:395.07 GB) NTFS

 

==================== MBR & Partition Table ==================

 

========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: 87D15391)

 

Partition: GPT.

 

========================================================

Disk: 1 (Size: 931.5 GB) (Disk ID: 47CEC1FB)

 

Partition: GPT.

 

==================== End of Addition.txt ============================

[zep516]

Hello,

Can you run a Malwarebytes scan. Skip the download part of the instructions since you have it installed, make sure you up date malwarebytes before scanning with it.

• Please download Malwarebytes Anti-Malware to your desktop.
• Double-click mbam-setup-version.exe and follow the prompts to install the program.
• Launch Malwarebytes Anti-Malware
• Then click Finish.
• If an update is found, you will be prompted to download and install the latest version.
• Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
• When the scan is complete , make sure that that all Threats are selected, and click Remove Selected.
• Reboot your computer if prompted.
  
  
  Posting the Malwarebytes log.
  
  [list]
• After the restart once you are back at your desktop, open MBAM once more.
• Click on the History tab > Application Logs.
• Double click on the Scan Log which shows the Date and time of the scan just performed.
• Click 'Export'.
• Click 'Text file (*.txt)'
• In the Save File dialog box which appears, click on Desktop.
• In the File name: box type a name for your scan log.
• A message box named 'File Saved' should appear stating "Your file has been successfully exported".
• Click Ok
• post that saved log to your next reply.
  
  I'll be back a bit later

[ismael4790]

I don't have malwarebytes installed anymore. I will do it later.

 

By the way, this is where Windows defender located the trojan:

 

containerfile: D:\Descargas Mega\Dead Rising 2 Off The Record MILTi6-PROPHET\ppt-2otr.iso

 

file: D:\Descargas Mega\Dead Rising 2 Off The Record MULTi6-PROPHET\ppt-2otr-iso -> PROPHET\steam_api.dll

 

Apparently it was inside the iso file of a game. I deleted that iso. 

 

Thanks for the super quick answers

 

I will scan with malwarebytes after work if you think it's still needed.

Edited by ismael4790, 21 September 2017 - 07:23 AM.

[ismael4790]

Log of malwarebytes after eliminating some stuff

 

Malwarebytes

www.malwarebytes.com

 

-Detalles del registro-

Fecha del análisis: 21/9/17

Hora del análisis: 15:35

Archivo de registro: cd9b67f8-9ed1-11e7-b4b1-2c4d54c611b9.json

Administrador: Sí

 

-Información del software-

Versión: 3.2.2.2029

Versión de los componentes: 1.0.188

Versión del paquete de actualización: 1.0.2855

Licencia: Prueba

 

-Información del sistema-

SO: Windows 10 (Build 15063.608)

CPU: x64

Sistema de archivos: NTFS

Usuario: DESKTOP-FKS8UBF\Ismael

 

-Resumen del análisis-

Tipo de análisis: Análisis de amenazas

Resultado: Completado

Objetos analizados: 396976

Amenazas detectadas: 1

Amenazas en cuarentena: 0

(No hay elementos maliciosos detectados)

Tiempo transcurrido: 1 min, 4 seg

 

-Opciones de análisis-

Memoria: Activado

Inicio: Activado

Sistema de archivos: Activado

Archivo: Activado

Rootkits: Desactivado

Heurística: Activado

PUP: Detectar

PUM: Detectar

 

-Detalles del análisis-

Proceso: 0

(No hay elementos maliciosos detectados)

 

Módulo: 0

(No hay elementos maliciosos detectados)

 

Clave del registro: 0

(No hay elementos maliciosos detectados)

 

Valor del registro: 0

(No hay elementos maliciosos detectados)

 

Datos del registro: 0

(No hay elementos maliciosos detectados)

 

Secuencia de datos: 0

(No hay elementos maliciosos detectados)

 

Carpeta: 0

(No hay elementos maliciosos detectados)

 

Archivo: 1

PUP.Optional.FusionCore, C:\USERS\ISMAEL\DOWNLOADS\BITCOMET_1.45_SETUP.EXE, Sin acciones por parte del usuario, [947], [392537],1.0.2855

 

Sector físico: 0

(No hay elementos maliciosos detectados)

 

 

(end)

[zep516]

Hello,


A few items to fix not malware related, everything looks good.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system
Open notepad (Start =>All Programs => Accessories => Notepad).
Copy/Paste the contents of the code box below into Notepad.

start
CloseProcesses:
CreateRestorePoint:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]
Emptytemp:

• Click Format and ensure Wordwrap is unchecked.
• Save as Fixlist.txt to your Desktop (Must be in this location)
• Run FRST/FRST64 and press the Fix button just once and wait.
• If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
• The tool will make a log on the Desktop (Fixlog.txt). Please post it to your reply.

Note: If the tool warns you about the version you're using being an outdated version please download and run the updated version.

[ismael4790]

Here it is. It's all ok?

 

 

 

 

 

Fix result of Farbar Recovery Scan Tool (x64) Version: 20-09-2017

Ran by Ismael (22-09-2017 00:35:19) Run:1

Running from C:\Users\Ismael\Desktop

Loaded Profiles: Ismael (Available Profiles: defaultuser0 & Ismael)

Boot Mode: Normal

==============================================

 

fixlist content:

*****************

start

CloseProcesses:

CreateRestorePoint:

ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File

R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X]

Emptytemp:

*****************

 

Processes closed successfully.

Restore point was successfully created.

HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => key removed successfully

HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => key not found. 

HKLM\System\CurrentControlSet\Services\ibtsiva => key removed successfully

ibtsiva => service removed successfully

 

=========== EmptyTemp: ==========

 

BITS transfer queue => 7364608 B

DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 46670393 B

Java, Flash, Steam htmlcache => 357595054 B

Windows/system/drivers => 270411826 B

Edge => 86640150 B

Chrome => 1070295559 B

Firefox => 46828107 B

Opera => 0 B

 

Temp, IE cache, history, cookies, recent:

Default => 6656 B

Users => 0 B

ProgramData => 0 B

Public => 0 B

systemprofile => 0 B

systemprofile32 => 128 B

LocalService => 0 B

NetworkService => 370964 B

defaultuser0 => 0 B

Ismael => 565047148 B

 

RecycleBin => 0 B

EmptyTemp: => 2.3 GB temporary data Removed.

 

================================

 

 

The system needed a reboot.

 

==== End of Fixlog 00:36:27 ====

Edited by ismael4790, 21 September 2017 - 04:41 PM.

[zep516]

Hello,

We need to remove the tools we used and then close the topic.

The following procedures will implement some cleanup procedures to remove these tools. It will also reset your System Restore by flushing out previous restore points and create a new restore point. It will also remove all the backups our tools may have made.
Any leftover logs, files, folders or tools remaining on your Desktop which were not removed can be deleted manually (right-click the file + delete).

Why we need to remove some of our tools:
Some of the tools we have used to clean your computer were made by fellow malware fighters and are very powerful and if used incorrectly or at the wronge time can make the computer an expensive paper weight. They are updated all the time and some of them more than once a day so by the time you are ready to use them again they will already be outdated.


Download DelFix by Xplode and save it to your desktop.

• Run the tool by right click on the icon and Run as administrator option.
• Make sure that these ones are checked:
  • Remove disinfection tools
  • Purge system restore
  • Reset system settings
• Push Run.
• The program will run for a few seconds and display a notepad report.
  Paste it for my review.

[ismael4790]

Aaaand here it is!

 

# DelFix v1.010 - Logfile created 22/09/2017 at 01:02:27

# Updated 26/04/2015 by Xplode

# Username : Ismael - DESKTOP-FKS8UBF

# Operating System : Windows 10 Home  (64 bits)

 

~ Removing disinfection tools ...

 

Deleted : C:\FRST

Deleted : C:\Users\Ismael\Desktop\Fixlog.txt

Deleted : C:\Users\Ismael\Desktop\FRST64.exe

Deleted : C:\Users\Ismael\Desktop\log.txt

Deleted : C:\Users\Ismael\Downloads\Addition.txt

Deleted : C:\Users\Ismael\Downloads\FRST.txt

 

~ Cleaning system restore ...

 

Deleted : RP #10 [Punto de control programado | 09/17/2017 08:38:34]

Deleted : RP #12 [Restore Point Created by FRST | 09/21/2017 22:35:22]

 

New restore point created !

 

~ Resetting system settings ... OK

 

########## - EOF - ##########

[zep516]

I see no signs of malware on your computer, and feel satisfied that our work here is done.


You usually get infected because your security settings are too low.

Here are a number of recommendations that will help tighten them, and which will contribute to making you a less likely victim:

Safe Computing Practices please read Here


Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.

Thanks
Joe