Remove a trojan win32\Adload!rfn

I add the Farbar Recovery Scan tool results:

Edit: Solved. The issue was a file that was somehow stuck in megasync downloads, that's the reason why it kept appearing again and again in defender.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23-09-2017 02

Ran by Ismael (administrator) on DESKTOP-FKS8UBF (23-09-2017 15:36:04)

Running from C:\Users\Ismael\Desktop

Loaded Profiles: Ismael (Available Profiles: defaultuser0 & Ismael)

Platform: Windows 10 Home Version 1703 (X64) Language: Español (España, internacional)

Internet Explorer Version 11 (Default browser: Chrome)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxCUIService.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe

(Microsoft Corporation) C:\Windows\System32\wlanext.exe

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHDCPSvc.exe

(Intel® Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe

(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe

() C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

() C:\Program Files\CyberLink\Shared files\RichVideo64.exe

(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\IntelCpHeciSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxEM.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe

(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe

(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe

(ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe

(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe

(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_YATIHTE.EXE

(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe

(Spotify Ltd) C:\Users\Ismael\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Mega Limited) C:\Users\Ismael\AppData\Local\MEGAsync\MEGAsync.exe

(Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe

(Intel® Corporation) C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\XtuService.exe

(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation)

HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3481912 2017-09-20] (Dropbox, Inc.)

HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [EPLTarget\P0000000000000001] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2017-07-26] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIHTE.EXE [241280 2017-07-26] (SEIKO EPSON CORPORATION)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Run: [Spotify Web Helper] => C:\Users\Ismael\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1580144 2017-08-05] (Spotify Ltd)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe [1049608 2017-07-03] (ASUSTek Computer Inc)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\MountPoints2: {c5a47316-2d46-11e7-88c9-c8215828a739} - "F:\setup_observer_1.0_(14198).exe"

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\MountPoints2: {dcaeac6e-8406-11e7-88d8-c8215828a739} - "G:\setup.exe"

Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-03-28]

ShortcutTarget: MEGAsync.lnk -> C:\Users\Ismael\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)

Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MultiSkypeLauncher.lnk [2017-06-18]

ShortcutTarget: MultiSkypeLauncher.lnk -> C:\Program Files (x86)\MultiSkypeLauncher\MultiSkypeLauncher.exe (IM-history)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

Tcpip\Parameters: [DhcpNameServer] 212.166.211.4 62.81.16.164

Tcpip\..\Interfaces\{635ec534-7883-4116-b0d7-86660645c924}: [DhcpNameServer] 147.156.200.250

Tcpip\..\Interfaces\{bf0983bd-6838-463c-a5e5-07f2c50a8c5c}: [DhcpNameServer] 212.166.211.4 62.81.16.164

Tcpip\..\Interfaces\{ddd55ed5-bad7-4eeb-b42f-917fa280a2b8}: [DhcpNameServer] 147.156.200.250

Tcpip\..\Interfaces\{fb79ae9e-5616-4872-b030-18f2fbba66f2}: [DhcpNameServer] 212.166.211.4 62.81.16.164

Internet Explorer:

==================

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus17win10.msn.com/?pc=ASTE

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE

SearchScopes: HKU\S-1-5-21-2544269325-2574649414-738075177-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

SearchScopes: HKU\S-1-5-21-2544269325-2574649414-738075177-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2017-09-05] (Oracle Corporation)

BHO: Easy Photo Print -> {9421DD08-935F-4701-A9CA-22DF90AC4EA6} -> C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)

BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2017-09-05] (Oracle Corporation)

BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2017-09-19] (Microsoft Corporation)

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\GROOVEEX.DLL [2017-09-19] (Microsoft Corporation)

Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [2011-01-26] (SEIKO EPSON CORPORATION)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2017-09-19] (Microsoft Corporation)

FireFox:

========

FF DefaultProfile: qtyby6wo.default

FF ProfilePath: C:\Users\Ismael\AppData\Roaming\Mozilla\Firefox\Profiles\qtyby6wo.default [2017-09-22]

FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2017-09-05] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2017-09-05] (Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2017-09-19] (Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)

Chrome:

=======

CHR HomePage: Default -> hxxp://www.google.es/

CHR StartupUrls: Default -> "hxxp://www.google.es/"

CHR Profile: C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default [2017-09-23]

CHR Extension: (Presentaciones de Google) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-03-28]

CHR Extension: (Google Docs) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-03-28]

CHR Extension: (Google Drive) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-03-28]

CHR Extension: (YouTube) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-03-28]

CHR Extension: (Adobe Acrobat) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-29]

CHR Extension: (Hojas de cálculo de Google) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-03-28]

CHR Extension: (Documentos de Google sin conexión) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-03-28]

CHR Extension: (Google Mail Checker) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2017-03-28]

CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-22]

CHR Extension: (Gmail) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-03-28]

CHR Extension: (Chrome Media Router) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-08]

CHR HKU\S-1-5-21-2544269325-2574649414-738075177-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)

R2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTek Computer Inc.)

S2 ASUS Rog Aura Core; C:\Program Files (x86)\ASUS\ROG Aura Core\AuraCoreSrv.exe [552600 2016-10-14] (ASUS)

S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [4424392 2017-09-08] (Microsoft Corporation)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [49992 2017-09-20] (Dropbox, Inc.)

R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)

R2 FBAgent; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe [73032 2014-08-13] ()

S3 Intel® Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [987432 2016-07-26] (Intel® Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel® Management Engine Components\DAL\jhi_service.exe [177440 2016-10-05] (Intel Corporation)

S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\wtoolex\wpsupdatesvr.exe [133376 2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes)

S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268704 2016-11-29] ()

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)

R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-26] (NVIDIA Corporation)

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv.exe [38200 2015-03-19] (The OpenVPN Project)

R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] ()

S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [42680 2016-10-21] (ASUSTeK COMPUTER INC.)

S3 Soda PDF Desktop; C:\Program Files\Soda PDF Desktop\ws.exe [2581864 2017-01-25] (LULU Software)

S3 Soda PDF Desktop CrashHandler; C:\Program Files\Soda PDF Desktop\crash-handler-ws.exe [931176 2017-01-25] (LULU Software)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer GmbH)

R2 Tran_Process_Proc; C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe [71024 2014-03-25] ()

R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)

R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-11] (Microsoft Corporation)

S3 wpscloudsvr; C:\Program Files (x86)\Kingsoft\WPS Office\wpscloudsvr.exe [162048 2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\XtuService.exe [18232 2016-08-25] (Intel® Corporation)

R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3732896 2016-11-29] (Intel® Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AsusHFilter; C:\WINDOWS\System32\drivers\AsusHFilter.sys [30200 2016-12-22] ()

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [99320 2016-10-11] (ASUS Corporation)

S3 bsitf; C:\WINDOWS\system32\DRIVERS\bsitf.sys [37208 2017-03-28] (ASUSTek Computer Inc.)

R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30352 2017-04-09] (Disc Soft Ltd)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77440 2017-08-24] ()

S3 farmntio; C:\Windows\system32\drivers\farmntio.sys [25144 2014-03-25] () [File not signed]

R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [249104 2016-10-06] (Intel Corporation)

R2 iocbios2; C:\Program Files (x86)\Intel\Intel® Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [37064 2016-08-24] (Intel Corporation)

R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [192960 2017-09-23] (Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt.sys [101824 2017-09-23] (Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [45472 2017-09-23] (Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253888 2017-09-23] (Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [94144 2017-09-23] (Malwarebytes)

R1 netfilter2; C:\WINDOWS\System32\drivers\netfilter2.sys [79504 2016-09-18] (Windows ® Win 7 DDK provider)

R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [7918840 2016-12-19] (Intel Corporation)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-26] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation)

R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-07-26] (NVIDIA Corporation)

R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [329184 2016-08-15] (Realtek Semiconductor Corp.)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [943112 2016-10-18] (Realtek )

R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions)

S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()

S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)

S3 GENERICDRV; \??\C:\Program Files (x86)\ASUS\ASUS Live Update\Temp\3\amifldrv64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-23 15:36 - 2017-09-23 15:36 - 000024073 _____ C:\Users\Ismael\Desktop\FRST.txt

2017-09-23 15:35 - 2017-09-23 15:36 - 000000000 ____D C:\FRST

2017-09-23 15:34 - 2017-09-23 15:34 - 002399744 _____ (Farbar) C:\Users\Ismael\Desktop\FRST64.exe

2017-09-23 15:17 - 2017-09-23 15:17 - 000101824 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2017-09-23 14:45 - 2017-09-23 14:45 - 000001121 _____ C:\Users\Ismael\Desktop\adwcleaner_7.0.2.1 - Acceso directo.lnk

2017-09-23 14:42 - 2017-09-23 15:17 - 000000000 ____D C:\AdwCleaner

2017-09-23 14:41 - 2017-09-23 14:41 - 008182736 _____ (Malwarebytes) C:\Users\Ismael\Downloads\adwcleaner_7.0.2.1.exe

2017-09-23 04:15 - 2017-09-23 04:15 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Mirillis

2017-09-23 04:14 - 2017-09-23 05:58 - 000000000 ____D C:\Users\Ismael\AppData\Local\Mirillis

2017-09-23 00:03 - 2017-09-23 00:03 - 000000000 ____D C:\ProgramData\Wondershare

2017-09-22 23:59 - 2017-09-22 23:59 - 000001172 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk

2017-09-22 23:59 - 2017-09-22 23:59 - 000000000 ____D C:\Users\Ismael\AppData\Local\Wondershare

2017-09-22 23:59 - 2017-09-22 23:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare

2017-09-22 23:58 - 2017-09-23 00:46 - 000000000 ____D C:\Users\Ismael\Documents\Wondershare Filmora

2017-09-22 23:58 - 2017-09-22 23:58 - 000000000 ____D C:\ProgramData\Wondershare Video Editor

2017-09-22 23:58 - 2017-09-22 23:58 - 000000000 ____D C:\Program Files\Wondershare

2017-09-22 23:58 - 2017-03-17 11:43 - 001250304 _____ (CineForm Inc.) C:\WINDOWS\system32\CFDecode64.ax

2017-09-22 23:56 - 2017-09-22 23:59 - 000000000 ____D C:\Users\Public\Documents\Wondershare

2017-09-22 23:56 - 2017-09-22 23:56 - 001213152 _____ C:\Users\Ismael\Downloads\filmora_setup_full1081.exe

2017-09-22 14:06 - 2017-09-22 14:06 - 000000222 _____ C:\Users\Ismael\Desktop\Fight of Gods.url

2017-09-22 01:02 - 2017-09-22 01:02 - 000003658 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask

2017-09-22 01:02 - 2017-09-22 01:02 - 000000746 _____ C:\DelFix.txt

2017-09-21 20:43 - 2017-09-21 20:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2017-09-21 15:32 - 2017-09-23 15:17 - 000253888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys

2017-09-21 15:32 - 2017-09-23 15:17 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys

2017-09-21 15:32 - 2017-09-23 15:17 - 000094144 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2017-09-21 15:32 - 2017-09-23 15:17 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2017-09-21 15:32 - 2017-09-21 15:32 - 000001914 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2017-09-21 15:32 - 2017-09-21 15:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2017-09-21 15:32 - 2017-09-21 15:32 - 000000000 ____D C:\ProgramData\Malwarebytes

2017-09-21 15:32 - 2017-09-21 15:32 - 000000000 ____D C:\Program Files\Malwarebytes

2017-09-21 15:32 - 2017-08-24 11:27 - 000077440 _____ C:\WINDOWS\system32\Drivers\mbae64.sys

2017-09-21 15:23 - 2017-09-21 15:24 - 068408664 _____ (Malwarebytes ) C:\Users\Ismael\Downloads\mb3-setup-35891.35891-3.2.2.2029 (1).exe

2017-09-21 15:16 - 2017-09-21 15:16 - 068408664 _____ (Malwarebytes ) C:\Users\Ismael\Downloads\mb3-setup-35891.35891-3.2.2.2029.exe

2017-09-20 18:48 - 2017-09-20 18:48 - 000049992 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2017-09-20 18:48 - 2017-09-20 18:48 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys

2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys

2017-09-20 18:48 - 2017-09-20 18:48 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys

2017-09-19 23:34 - 2017-09-20 00:02 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\CDisplayEx

2017-09-19 23:34 - 2017-09-19 23:34 - 000001102 _____ C:\Users\Ismael\Desktop\CDisplayEx.lnk

2017-09-19 23:34 - 2017-09-19 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx

2017-09-19 23:34 - 2017-09-19 23:34 - 000000000 ____D C:\Program Files (x86)\CDisplayEx

2017-09-19 23:33 - 2017-09-19 23:34 - 007319720 _____ (Progdigy Software S.A.R.L. ) C:\Users\Ismael\Downloads\CDisplayExWin32v1.10.29.exe

2017-09-18 19:51 - 2017-09-18 19:51 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

2017-09-15 18:44 - 2017-09-15 18:48 - 000000000 ____D C:\Users\Ismael\AppData\Local\latexdraw

2017-09-15 18:43 - 2017-09-15 18:43 - 000000746 _____ C:\Users\Ismael\Desktop\LaTeXDraw.LNK

2017-09-15 18:43 - 2017-09-15 18:43 - 000000746 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LaTeXDraw.LNK

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\usr

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\Users\Ismael\.latexdraw

2017-09-15 18:43 - 2017-09-15 18:43 - 000000000 ____D C:\Program Files\latexdraw

2017-09-15 18:42 - 2017-09-15 18:42 - 010155931 _____ C:\Users\Ismael\Downloads\LaTeXDraw-3.3.6-bin.zip

2017-09-15 18:42 - 2017-09-15 18:42 - 000000000 ____D C:\Users\Ismael\Downloads\LaTeXDraw-3.3.6-bin

2017-09-12 20:20 - 2017-09-05 07:30 - 000287648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys

2017-09-12 20:20 - 2017-09-05 07:27 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2017-09-12 20:20 - 2017-09-05 07:24 - 000519584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys

2017-09-12 20:20 - 2017-09-05 07:23 - 001242528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2017-09-12 20:20 - 2017-09-05 07:21 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys

2017-09-12 20:20 - 2017-09-05 07:18 - 000820128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe

2017-09-12 20:20 - 2017-09-05 07:16 - 000546208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys

2017-09-12 20:20 - 2017-09-05 07:14 - 004708504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2017-09-12 20:20 - 2017-09-05 07:14 - 000094624 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 001409048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 001292880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2017-09-12 20:20 - 2017-09-05 07:12 - 000627080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe

2017-09-12 20:20 - 2017-09-05 07:12 - 000081176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2017-09-12 20:20 - 2017-09-05 07:11 - 002675104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys

2017-09-12 20:20 - 2017-09-05 06:53 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2017-09-12 20:20 - 2017-09-05 06:52 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll

2017-09-12 20:20 - 2017-09-05 06:50 - 004330920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll

2017-09-12 20:20 - 2017-09-05 06:46 - 004471888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2017-09-12 20:20 - 2017-09-05 06:45 - 023679488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 005821496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 002476712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 002166808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2017-09-12 20:20 - 2017-09-05 06:45 - 000750496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe

2017-09-12 20:20 - 2017-09-05 06:45 - 000085784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialUIBroker.exe

2017-09-12 20:20 - 2017-09-05 06:44 - 000569264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000611096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000359560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2017-09-12 20:20 - 2017-09-05 06:43 - 000280480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2017-09-12 20:20 - 2017-09-05 06:43 - 000169376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2017-09-12 20:20 - 2017-09-05 06:43 - 000042456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbs.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 002330520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000703056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000291904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll

2017-09-12 20:20 - 2017-09-05 06:42 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 006761560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 004671832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 001106904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll

2017-09-12 20:20 - 2017-09-05 06:41 - 001013912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2017-09-12 20:20 - 2017-09-05 06:40 - 000052768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appidapi.dll

2017-09-12 20:20 - 2017-09-05 06:37 - 000583160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll

2017-09-12 20:20 - 2017-09-05 06:28 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbser.sys

2017-09-12 20:20 - 2017-09-05 06:28 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\buttonconverter.sys

2017-09-12 20:20 - 2017-09-05 06:27 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll

2017-09-12 20:20 - 2017-09-05 06:27 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000404480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2017-09-12 20:20 - 2017-09-05 06:26 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidbth.sys

2017-09-12 20:20 - 2017-09-05 06:26 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 013844480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 001448960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll

2017-09-12 20:20 - 2017-09-05 06:25 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2017-09-12 20:20 - 2017-09-05 06:25 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2017-09-12 20:20 - 2017-09-05 06:24 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcrecovery.dll

2017-09-12 20:20 - 2017-09-05 06:24 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 020509184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\iepeers.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll

2017-09-12 20:20 - 2017-09-05 06:23 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\odbcconf.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 023684608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll

2017-09-12 20:20 - 2017-09-05 06:22 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 006728704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 001178624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Phoneutil.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll

2017-09-12 20:20 - 2017-09-05 06:21 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.exe

2017-09-12 20:20 - 2017-09-05 06:20 - 000805888 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll

2017-09-12 20:20 - 2017-09-05 06:20 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv

2017-09-12 20:20 - 2017-09-05 06:20 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 019336192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000311296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntprint.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000134656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iepeers.dll

2017-09-12 20:20 - 2017-09-05 06:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000524288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ngccredprov.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dinput8.dll

2017-09-12 20:20 - 2017-09-05 06:18 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 008207872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000852480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll

2017-09-12 20:20 - 2017-09-05 06:17 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 005961728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000844288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2017-09-12 20:20 - 2017-09-05 06:16 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Phoneutil.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 001248768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 001143296 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000657408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000636416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll

2017-09-12 20:20 - 2017-09-05 06:15 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv

2017-09-12 20:20 - 2017-09-05 06:15 - 000223744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shdocvw.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 002516480 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 001583616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 001046016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll

2017-09-12 20:20 - 2017-09-05 06:14 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll

2017-09-12 20:20 - 2017-09-05 06:13 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2017-09-12 20:20 - 2017-09-05 06:13 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 006265856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 005225984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2017-09-12 20:20 - 2017-09-05 06:12 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 003667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001463296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001355264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001060352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 001019904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll

2017-09-12 20:20 - 2017-09-05 06:11 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 000761344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2017-09-12 20:20 - 2017-09-05 06:10 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthHFSrv.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll

2017-09-12 20:20 - 2017-09-05 06:06 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll

2017-09-12 20:20 - 2017-09-05 06:04 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RstrtMgr.dll

2017-09-12 20:20 - 2017-09-05 06:04 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001596592 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2017-09-12 20:19 - 2017-09-05 07:31 - 001147296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 001024928 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000750560 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe

2017-09-12 20:19 - 2017-09-05 07:31 - 000115792 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2017-09-12 20:19 - 2017-09-05 07:27 - 000136096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys

2017-09-12 20:19 - 2017-09-05 07:26 - 008319904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2017-09-12 20:19 - 2017-09-05 07:26 - 001930840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2017-09-12 20:19 - 2017-09-05 07:25 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll

2017-09-12 20:19 - 2017-09-05 07:25 - 000159648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys

2017-09-12 20:19 - 2017-09-05 07:24 - 000923040 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll

2017-09-12 20:19 - 2017-09-05 07:23 - 004462120 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll

2017-09-12 20:19 - 2017-09-05 07:20 - 001057824 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll

2017-09-12 20:19 - 2017-09-05 07:19 - 004848960 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2017-09-12 20:19 - 2017-09-05 07:19 - 002443168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2017-09-12 20:19 - 2017-09-05 07:18 - 007326128 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 005477096 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 002972552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 002647224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 001668344 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 000685512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll

2017-09-12 20:19 - 2017-09-05 07:18 - 000212384 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll

2017-09-12 20:19 - 2017-09-05 07:17 - 000316320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2017-09-12 20:19 - 2017-09-05 07:16 - 001320344 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000872472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000724200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000715168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys

2017-09-12 20:19 - 2017-09-05 07:16 - 000410168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2017-09-12 20:19 - 2017-09-05 07:16 - 000228256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys

2017-09-12 20:19 - 2017-09-05 07:16 - 000182688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2017-09-12 20:19 - 2017-09-05 07:16 - 000049720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbs.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 003116184 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000871448 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000381824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll

2017-09-12 20:19 - 2017-09-05 07:15 - 000257440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 021352656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 007907344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 001146176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 000958664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2017-09-12 20:19 - 2017-09-05 07:14 - 000254176 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll

2017-09-12 20:19 - 2017-09-05 07:13 - 001619816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2017-09-12 20:19 - 2017-09-05 07:13 - 000064680 _____ (Microsoft Corporation) C:\WINDOWS\system32\appidapi.dll

2017-09-12 20:19 - 2017-09-05 07:11 - 000610720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys

2017-09-12 20:19 - 2017-09-05 07:11 - 000387936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2017-09-12 20:19 - 2017-09-05 06:53 - 001620880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2017-09-12 20:19 - 2017-09-05 06:31 - 003668992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2017-09-12 20:19 - 2017-09-05 06:30 - 001639936 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 001275904 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIRibbonRes.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2017-09-12 20:19 - 2017-09-05 06:30 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2017-09-12 20:19 - 2017-09-05 06:30 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrvext.dll

2017-09-12 20:19 - 2017-09-05 06:30 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2017-09-12 20:19 - 2017-09-05 06:29 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrPS.dll

2017-09-12 20:19 - 2017-09-05 06:28 - 017371136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2017-09-12 20:19 - 2017-09-05 06:28 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CfgSPCellular.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAPNCsp.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000095232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\datamarketsvc.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2017-09-12 20:19 - 2017-09-05 06:27 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\odbcconf.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe

2017-09-12 20:19 - 2017-09-05 06:26 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\csplte.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2017-09-12 20:19 - 2017-09-05 06:26 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.exe

2017-09-12 20:19 - 2017-09-05 06:26 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnpinst.exe

2017-09-12 20:19 - 2017-09-05 06:25 - 000584192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIRibbonRes.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2017-09-12 20:19 - 2017-09-05 06:25 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nsiproxy.sys

2017-09-12 20:19 - 2017-09-05 06:24 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\tpmvsc.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntprint.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput.dll

2017-09-12 20:19 - 2017-09-05 06:24 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe

2017-09-12 20:19 - 2017-09-05 06:23 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000305152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys

2017-09-12 20:19 - 2017-09-05 06:23 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll

2017-09-12 20:19 - 2017-09-05 06:23 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000413184 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe

2017-09-12 20:19 - 2017-09-05 06:22 - 000213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dinput8.dll

2017-09-12 20:19 - 2017-09-05 06:22 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000946688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll

2017-09-12 20:19 - 2017-09-05 06:21 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 007337472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 001878016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000925696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll

2017-09-12 20:19 - 2017-09-05 06:20 - 000229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe

2017-09-12 20:19 - 2017-09-05 06:19 - 001260544 _____ (Microsoft Corporation) C:\WINDOWS\system32\GamePanel.exe

2017-09-12 20:19 - 2017-09-05 06:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 001028608 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000996864 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll

2017-09-12 20:19 - 2017-09-05 06:19 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\shdocvw.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 012801536 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 002078720 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2017-09-12 20:19 - 2017-09-05 06:18 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000921600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000832000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printfilterpipelinesvc.exe

2017-09-12 20:19 - 2017-09-05 06:18 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000752640 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\webcheck.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2017-09-12 20:19 - 2017-09-05 06:18 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 002765824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 001397760 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll

2017-09-12 20:19 - 2017-09-05 06:17 - 000757760 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe

2017-09-12 20:19 - 2017-09-05 06:16 - 002805248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 002680320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 000440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll

2017-09-12 20:19 - 2017-09-05 06:16 - 000397312 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 004396032 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 003059200 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2017-09-12 20:19 - 2017-09-05 06:15 - 001736704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001293824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 001077248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 000706560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2017-09-12 20:19 - 2017-09-05 06:15 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll

2017-09-12 20:19 - 2017-09-05 06:15 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webcheck.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 011887104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002445824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002177024 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 002006528 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 001657344 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2017-09-12 20:19 - 2017-09-05 06:14 - 000810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2017-09-12 20:19 - 2017-09-05 06:13 - 002009600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2017-09-12 20:19 - 2017-09-05 06:13 - 001802752 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2017-09-12 20:19 - 2017-09-05 06:13 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll

2017-09-12 20:19 - 2017-09-05 06:12 - 002153984 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll

2017-09-12 20:19 - 2017-09-05 06:11 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys

2017-09-12 20:19 - 2017-09-05 06:09 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll

2017-09-12 20:19 - 2017-09-05 06:07 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\RstrtMgr.dll

2017-09-12 20:19 - 2017-09-05 06:07 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\vss_ps.dll

2017-09-12 20:19 - 2017-09-01 07:55 - 000031932 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin

2017-09-11 20:06 - 2017-09-11 20:06 - 000001972 _____ C:\Users\Ismael\Desktop\PDFsam Basic.lnk

2017-09-10 21:01 - 2017-09-10 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)

2017-09-05 22:02 - 2017-09-05 22:02 - 000038011 _____ C:\Users\Ismael\.sambox.cache

2017-09-05 21:02 - 2017-09-05 21:02 - 000110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Sun

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Sun

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Users\Ismael\.oracle_jre_usage

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFsam Basic

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2017-09-05 21:02 - 2017-09-05 21:02 - 000000000 ____D C:\Program Files (x86)\PDFsam Basic

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Oracle

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\ProgramData\Oracle

2017-09-05 21:01 - 2017-09-05 21:01 - 000000000 ____D C:\Program Files\Java

2017-09-05 21:00 - 2017-09-05 21:00 - 009597704 _____ (PDFsam) C:\Users\Ismael\Downloads\PDFsam_Basic3_Installer.exe

2017-09-05 21:00 - 2017-09-05 21:00 - 000000000 ____D C:\ProgramData\PDFsam Enhanced 4

2017-09-04 20:10 - 2017-09-04 20:10 - 000001034 _____ C:\Users\Ismael\Desktop\Veusz.lnk

2017-09-04 20:10 - 2017-09-04 20:10 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Veusz

2017-09-04 20:10 - 2017-09-04 20:10 - 000000000 ____D C:\Program Files (x86)\Veusz

2017-09-04 20:09 - 2017-09-04 20:09 - 015420136 _____ C:\Users\Ismael\Downloads\veusz-1.27-windows-setup.exe

2017-08-29 10:51 - 2017-08-29 10:51 - 000001338 _____ C:\Users\Ismael\Desktop\queja amazon.txt

2017-08-29 03:36 - 2017-08-29 03:36 - 000000858 _____ C:\Users\Ismael\Desktop\Redout Enhanced Edition.lnk

2017-08-29 03:36 - 2017-08-29 03:36 - 000000000 ____D C:\Users\Ismael\AppData\Local\redout

2017-08-29 03:36 - 2017-08-29 03:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Redout Enhanced Edition

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-09-23 15:11 - 2017-07-30 18:43 - 002304656 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2017-09-23 15:11 - 2017-03-20 07:11 - 001066486 _____ C:\WINDOWS\system32\perfh00A.dat

2017-09-23 15:11 - 2017-03-20 07:11 - 000232312 _____ C:\WINDOWS\system32\perfc00A.dat

2017-09-23 15:08 - 2017-03-28 18:44 - 000000200 _____ C:\Users\Ismael\AppData\Roaming\sp_data.sys

2017-09-23 15:07 - 2017-01-07 21:06 - 000000000 ____D C:\ProgramData\NVIDIA

2017-09-23 15:05 - 2017-07-30 18:35 - 000000000 ____D C:\Users\Ismael

2017-09-23 15:05 - 2017-03-28 18:41 - 000000000 __SHD C:\Users\Ismael\IntelGraphicsProfiles

2017-09-23 15:04 - 2017-07-30 18:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2017-09-23 15:04 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI

2017-09-23 15:04 - 2017-01-07 21:33 - 000005693 ___RH C:\farstone_pe.letter

2017-09-23 14:58 - 2017-07-30 18:33 - 000429152 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2017-09-23 14:29 - 2017-07-30 18:39 - 000004220 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5DFBF38B-69CB-428C-A7C2-45449661EC73}

2017-09-23 14:29 - 2017-07-30 18:39 - 000003550 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update1

2017-09-23 14:29 - 2017-07-30 18:39 - 000003540 _____ C:\WINDOWS\System32\Tasks\ASUS Live Update2

2017-09-23 06:08 - 2017-03-28 23:05 - 000000000 ____D C:\Program Files (x86)\Steam

2017-09-23 05:06 - 2017-03-28 18:43 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Skype

2017-09-23 04:18 - 2017-03-29 00:27 - 000000000 ____D C:\Users\Ismael\AppData\Local\CrashDumps

2017-09-23 04:04 - 2017-07-30 18:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2017-09-23 01:15 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\FxsTmp

2017-09-22 20:15 - 2017-04-08 22:24 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\BitComet

2017-09-22 19:16 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps

2017-09-22 19:16 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness

2017-09-22 14:06 - 2017-03-28 23:30 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2017-09-22 01:29 - 2017-03-28 18:41 - 000000000 ____D C:\Users\Ismael\AppData\Local\Packages

2017-09-22 00:57 - 2017-06-27 21:20 - 000000000 ____D C:\Users\Ismael\AppData\Local\JDownloader 2.0

2017-09-22 00:35 - 2017-04-03 16:50 - 000000000 ____D C:\Users\Ismael\AppData\LocalLow\Temp

2017-09-21 20:43 - 2017-03-28 18:45 - 000000000 ____D C:\Program Files (x86)\Dropbox

2017-09-21 01:51 - 2017-07-04 21:14 - 000000000 ____D C:\Users\Ismael\Desktop\Juegos

2017-09-21 00:20 - 2017-07-30 18:39 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2544269325-2574649414-738075177-1001

2017-09-21 00:20 - 2017-03-28 18:43 - 000002400 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2017-09-21 00:20 - 2017-03-28 18:43 - 000000000 ___RD C:\Users\Ismael\OneDrive

2017-09-19 19:37 - 2017-01-07 21:41 - 000000000 ____D C:\Program Files\Microsoft Office

2017-09-19 19:36 - 2017-03-28 19:22 - 000000000 ___RD C:\Users\Ismael\Documents\MEGAsync

2017-09-19 00:02 - 2017-03-28 21:25 - 000001747 _____ C:\Users\Ismael\Desktop\MPC-HC x64.lnk

2017-09-19 00:02 - 2017-03-28 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64

2017-09-19 00:02 - 2017-03-28 21:25 - 000000000 ____D C:\Program Files\MPC-HC

2017-09-18 19:51 - 2017-03-18 23:03 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2017-09-18 19:51 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2017-09-13 22:10 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache

2017-09-13 18:43 - 2017-03-28 22:57 - 000000000 ___RD C:\Program Files (x86)\Skype

2017-09-13 18:43 - 2017-03-28 22:57 - 000000000 ____D C:\ProgramData\Skype

2017-09-13 18:13 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF

2017-09-12 23:40 - 2017-01-07 20:54 - 000000000 __RHD C:\Users\Public\AccountPictures

2017-09-12 21:14 - 2017-03-20 07:11 - 000000000 ____D C:\WINDOWS\system32\es

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ___SD C:\WINDOWS\system32\F12

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\setup

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2017-09-12 21:14 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2017-09-12 20:23 - 2017-03-29 21:29 - 000000000 ____D C:\WINDOWS\system32\MRT

2017-09-12 20:22 - 2017-03-29 21:29 - 138202976 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2017-09-12 20:22 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp

2017-09-10 21:01 - 2017-04-08 22:24 - 000000855 _____ C:\Users\Public\Desktop\BitComet.lnk

2017-09-05 01:15 - 2016-11-14 08:32 - 000000000 ____D C:\Program Files (x86)\TeamViewer

2017-09-02 17:15 - 2017-03-18 23:06 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe

2017-09-02 17:15 - 2017-03-18 23:06 - 000177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

2017-08-31 23:35 - 2017-03-29 18:57 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2017-08-29 02:31 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2017-08-28 22:43 - 2017-03-28 19:05 - 000002272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2017-08-28 22:43 - 2017-03-28 19:05 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk

==================== Files in the root of some directories =======

2017-03-28 18:44 - 2017-09-23 15:08 - 000000200 _____ () C:\Users\Ismael\AppData\Roaming\sp_data.sys

2017-07-30 18:34 - 2017-07-30 18:34 - 000000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:

====================

2017-09-22 00:49 - 2017-09-22 00:49 - 000043520 ____N () C:\Users\Ismael\AppData\Local\Temp\proxy_vole3785758171070237976.dll

2017-09-22 00:49 - 2017-09-22 00:49 - 000043520 ____N () C:\Users\Ismael\AppData\Local\Temp\proxy_vole4106965950843562039.dll

2017-09-22 00:46 - 2017-09-22 00:46 - 000043520 ____N () C:\Users\Ismael\AppData\Local\Temp\proxy_vole4927466466526966898.dll

2017-09-22 00:50 - 2017-09-22 00:50 - 000043520 ____N () C:\Users\Ismael\AppData\Local\Temp\proxy_vole850932843028936879.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed

C:\WINDOWS\system32\wininit.exe => File is digitally signed

C:\WINDOWS\explorer.exe => File is digitally signed

C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed

C:\WINDOWS\system32\svchost.exe => File is digitally signed

C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed

C:\WINDOWS\system32\services.exe => File is digitally signed

C:\WINDOWS\system32\User32.dll => File is digitally signed

C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed

C:\WINDOWS\system32\userinit.exe => File is digitally signed

C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed

C:\WINDOWS\system32\rpcss.dll => File is digitally signed

C:\WINDOWS\system32\dnsapi.dll => File is digitally signed

C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed

C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2017-09-15 21:48

==================== End of FRST.txt ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 23-09-2017 02

Ran by Ismael (23-09-2017 15:36:34)

Running from C:\Users\Ismael\Desktop

Windows 10 Home Version 1703 (X64) (2017-07-30 16:41:50)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrador (S-1-5-21-2544269325-2574649414-738075177-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-2544269325-2574649414-738075177-503 - Limited - Disabled)

defaultuser0 (S-1-5-21-2544269325-2574649414-738075177-1000 - Limited - Disabled) => C:\Users\defaultuser0

Invitado (S-1-5-21-2544269325-2574649414-738075177-501 - Limited - Disabled)

Ismael (S-1-5-21-2544269325-2574649414-738075177-1001 - Administrator - Enabled) => C:\Users\Ismael

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\{F9000000-0018-0000-0000-074957833700}) (Version: 9.01.513.58212 - ABBYY) Hidden

ABBYY FineReader 9.0 Sprint (HKLM-x32\...\ABBYY FineReader 9.0 Sprint) (Version: 9.01.513.58212 - ABBYY)

ABZÛ (HKLM\...\Steam App 384190) (Version: - Giant Squid)

Action! (HKLM-x32\...\Mirillis Action!) (Version: 2.4.1 - Mirillis)

Actualización de NVIDIA 27.1.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 27.1.0.0 - NVIDIA Corporation) Hidden

Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)

Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)

ASUS GIFTBOX (HKLM-x32\...\ASUS GIFTBOX) (Version: 7.5.24 - ASUSTek Computer Inc)

ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS)

ASUS Input Configuration (HKLM-x32\...\{7DDF7571-64BD-4232-9729-20FF10CE6C62}) (Version: 1.0.3 - ASUS)

ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)

ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.14 - ASUS)

ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.19.0004 - ASUS)

ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.8 - ASUS)

ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0049 - ASUS)

AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.2.9 - ICEpower a/s)

BitComet 1.47 (HKLM-x32\...\BitComet_x64) (Version: 1.47 - CometNetwork)

Castle of Illusion (HKLM-x32\...\Q2FzdGxlb2ZJbGx1c2lvbg==_is1) (Version: 1 - )

CCleaner (HKLM\...\CCleaner) (Version: 5.30 - Piriform)

CDisplayEx 1.10.29 (HKLM-x32\...\CDisplayEx_is1) (Version: - Progdigy Software S.A.R.L.)

CyberLink PhotoDirector 5 (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.) Hidden

CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.)

CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.) Hidden

CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.)

DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 5.0.1.0406 - Disc Soft Ltd)

Dead Rising (HKLM-x32\...\Dead Rising_is1) (Version: - )

Dead Rising 2 (HKLM-x32\...\Dead Rising 2_is1) (Version: - )

Depth (HKLM\...\Steam App 274940) (Version: - Digital Confectioners)

Desinstalar impresora EPSON SX535WD Series (HKLM\...\EPSON SX535WD Series) (Version: - SEIKO EPSON Corporation)

Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.2.5 - ASUSTek COMPUTER INC.)

Discord (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)

Dolphin (HKLM-x32\...\Dolphin) (Version: 5.0 - Dolphin Team)

Dropbox (HKLM-x32\...\Dropbox) (Version: 35.4.20 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden

Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation)

Epson Download Navigator (HKLM-x32\...\{10F63395-157F-4B93-AB4D-702A2FF11942}) (Version: 1.0.1 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print 2 (HKLM-x32\...\{FFF841F3-9A15-4F61-BD16-C19F132E5A27}) (Version: 2.3.0.0 - SEIKO EPSON CORPORATION)

Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)

Epson Event Manager (HKLM-x32\...\{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}) (Version: 2.50.0001 - SEIKO EPSON CORPORATION)

EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation)

Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION)

EpsonNet Print (HKLM-x32\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.4j - SEIKO EPSON CORPORATION)

Fight of Gods (HKLM\...\Steam App 612930) (Version: - Digital Crafter)

Firewatch (HKLM-x32\...\Firewatch_is1) (Version: - )

GameFirst IV (HKLM-x32\...\{370651DD-8ABF-4807-9533-0869FDF79BFA}) (Version: 1.5.31 - ASUSTeK COMPUTER INC.) Hidden

GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.31) (Version: 1.5.31 - ASUSTeK COMPUTER INC.)

GoldWave v6.28 (HKLM\...\GoldWave v6.28) (Version: 6.28 - GoldWave Inc.)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden

GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.09) (Version: 9.09 - Artifex Software Inc.)

GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)

Hellblade: Senua's Sacrifice (HKLM-x32\...\1573355755_is1) (Version: 1.0 - GOG.com)

Hitman (HKLM-x32\...\{793F01BF-93D6-4135-B0E9-156D6D752FFA}_is1) (Version: - Square Enix)

Injustice: Gods Among Us Ultimate Edition (HKLM\...\Steam App 242700) (Version: - NetherRealm Studios)

InputMapper (HKLM-x32\...\{026D2025-A7FA-4F5C-AF8C-A6F7A9B917FC}) (Version: 1.6.10.19991 - DSDCS)

Inside (HKLM-x32\...\{9BD4503F-F711-491D-984A-AB4ABD66B8C2}_is1) (Version: - Playdead)

Intel® Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel® Corporation) Hidden

Intel® Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1035 - Intel Corporation)

Intel® Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4550 - Intel Corporation)

Intel® Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1633.3 - Intel Corporation)

Intel® Wireless Bluetooth® (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)

Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)

JDownloader 2 (HKLM-x32\...\jdownloader2) (Version: 2.0 - AppWork GmbH)

Killing Floor (HKLM\...\Steam App 1250) (Version: - Tripwire Interactive)

Left 4 Dead (HKLM\...\Steam App 500) (Version: - Valve)

Little Nightmares - Scarecrow sack (HKLM-x32\...\1268928435_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Little Nightmares - Upside-down teapot (HKLM-x32\...\1352220891_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Little Nightmares (HKLM-x32\...\1433377508_is1) (Version: 1.0.10.1_gog-1 - GOG.com)

Malwarebytes versión 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)

Manual de red EPSON SX535WD Series (HKLM-x32\...\EPSON SX535WD Series Netg) (Version: - )

Manual de usuario EPSON SX535WD Series (HKLM-x32\...\EPSON SX535WD Series Useg) (Version: - )

Maxima (sbcl) 5.38.1 (HKLM-x32\...\Maxima-sbcl-5.38.1_is1) (Version: 5.38.1 - The Maxima Development Team)

MegaDownloader 1.7 (HKLM\...\{C12C2297-65A4-4E64-9AE1-29F0D947FDA0}}_is1) (Version: 1.7 - AppsForMega.info)

MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)

Micro Machines World Series (HKLM-x32\...\Micro Machines World Series_is1) (Version: - )

Microsoft Office 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.8326.2107 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)

MiKTeX 2.9 (HKLM\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)

Mortal Kombat Komplete Edition (HKLM\...\Steam App 237110) (Version: - NetherRealm Studios)

Mortal Kombat X (HKLM\...\Steam App 307780) (Version: - NetherRealm Studios)

Mozilla Firefox 54.0.1 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 en-US)) (Version: 54.0.1 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)

MPC-HC 1.7.13 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.13 - MPC-HC Team)

MultiSkypeLauncher (remove only) (HKLM-x32\...\MultiSkypeLauncher) (Version: 1.8 - MultiSkypeLauncher)

No Mans Sky (HKLM-x32\...\No Mans Sky_is1) (Version: - )

NVIDIA Controlador de 3D Vision 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.54 - NVIDIA Corporation)

NVIDIA Controlador de gráficos 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.8.0.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.8.0.89 - NVIDIA Corporation)

NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)

Observer (HKLM-x32\...\1449856523_is1) (Version: 1.0 - GOG.com)

Oddworld: Abe's Oddysee (HKLM\...\Steam App 15700) (Version: - Oddworld Inhabitants)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden

OpenVPN 2.3.6-I003 (HKLM\...\OpenVPN) (Version: 2.3.6-I003 - )

Panel de control de NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden

PDFsam Basic (HKLM-x32\...\{0F7F1493-D16D-4C7B-A271-17A12168CCC4}) (Version: 3.30.2.0 - Andrea Vacondio)

Pneuma Breath of Life (HKLM-x32\...\Pneuma Breath of Life_is1) (Version: - )

Rake (HKLM\...\Steam App 386880) (Version: - Konsordo)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.29093 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.10.714.2016 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7926 - Realtek Semiconductor Corp.)

Redout Enhanced Edition (HKLM-x32\...\Redout Enhanced Edition_is1) (Version: - )

Resident Evil 7 Biohazard (HKLM-x32\...\{1ECBF8F3-7079-44CA-AD32-B2AECBCF636F}_is1) (Version: - Capcom)

ROG Aura Core (HKLM-x32\...\{24D10379-1ED5-4949-A024-991131A992D9}) (Version: 1.0.1 - ASUS)

ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 2.0.2 - ASUS)

Shadow Warrior (HKLM\...\Steam App 233130) (Version: - Flying Wild Hog)

Shadow Warrior 2 (HKLM\...\Steam App 324800) (Version: - Flying Wild Hog)

Shadow Warrior Classic Redux (HKLM\...\Steam App 225160) (Version: - General Arcade)

Sine Mora EX (HKLM\...\SKIDROW - Sine Mora EX) (Version: - SKIDROW)

Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)

Soda PDF Desktop (HKLM-x32\...\SodaDesktop) (Version: 9.0.38.31816 - LULU Software)

Soda PDF Desktop View Module (HKLM\...\{CAF75E2A-9CD6-49CC-962D-BFF08DBE5EEB}) (Version: 9.0.38.31757 - LULU Software) Hidden

Software Intel® PROSet/Wireless (HKLM-x32\...\{5853172b-5520-4089-9ef4-e26c594382b3}) (Version: 19.30.0 - Intel Corporation)

Split Second - Velocity (HKLM-x32\...\{E4D2641A-E3A1-447A-AACA-A7493AAF87E5}_is1) (Version: - )

Spotify (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\Spotify) (Version: 1.0.60.492.gbb40dab8 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)

Telegram Desktop versión 1.1.7 (HKU\S-1-5-21-2544269325-2574649414-738075177-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.1.7 - Telegram Messenger LLP)

Texmaker (HKLM-x32\...\Texmaker) (Version: - )

TotalRecovery Pro (HKLM-x32\...\TotalRecovery) (Version: 10.0.11.2 - FarStone Inc.)

UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden

UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden

Veusz 1.27 (HKLM-x32\...\Veusz) (Version: 1.27 - Jeremy Sanders)

Viscera Cleanup Detail: Shadow Warrior (HKLM\...\Steam App 255520) (Version: - RuneStorm)

Viscera Cleanup Detail: Shadow Warrior

(HKLM\...\UDK-2b0b0d9f-be25-4056-9ea9-e4f443e0219a) (Version: - RuneStorm

)

Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)

WinDjView 2.1 (HKLM\...\WinDjView) (Version: 2.1 - Andrew Zhezherun)

Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)

Windows Driver Package - ASUS (AsusHFilter) HIDClass (12/19/2016 1.0.0.2) (HKLM\...\EEDD19DDF3F0CA7CFA2F4C500D442DD1FEB434F6) (Version: 12/19/2016 1.0.0.2 - ASUS)

Windows Driver Package - ASUS (AsusPTPDrv) HIDClass (09/23/2016 11.0.0.14) (HKLM\...\F95583A62AB902A3FC263F668380483F9E0113CD) (Version: 09/23/2016 11.0.0.14 - ASUS)

WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.)

WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

Wondershare Filmora(Build 8.3.5) (HKLM\...\Wondershare Filmora_is1) (Version: - Wondershare Software)

Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 10.1.0.5644 - Kingsoft Corp.)

XSplit Gamecaster (HKLM-x32\...\{9E8A3821-032E-4230-9C12-C14D3FC8685E}) (Version: 2.8.1605.2342 - SplitmediaLabs)

Yooka-Laylee (HKLM-x32\...\1445853962_is1) (Version: 1.0 - GOG.com)

Yooka-Laylee Toybox (HKLM-x32\...\1825770152_is1) (Version: 2.0.0.2 - GOG.com)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File

ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)

ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-23] ()

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-20] (Dropbox, Inc.)

ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_463164d40c3d26ce\igfxDTCM.dll [2016-11-30] (Intel Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {05CC614C-C27C-4F7B-BCB1-931C302B1F87} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {1244B6CA-A359-48B6-994F-0AF65727C0E8} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {174687BA-3C5F-4FB4-9A9B-A1A651714A39} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)

Task: {1A557AA9-B6CA-4D12-B252-E64AA901E402} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)

Task: {25518B65-3FC9-44B5-8BD1-7707FF67A356} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()

Task: {2CA87A53-DB17-44F1-857D-847419652912} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-07-26] (NVIDIA Corporation)

Task: {2D9A4C75-5E3D-4730-9EA2-A3EDBE0BD293} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {424D6FB9-3AC7-498B-96C2-145DCF37F660} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-28] (Dropbox, Inc.)

Task: {4577A715-6039-49AF-A54B-93F9D096D702} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)

Task: {501CC9B8-D8E1-4647-88C8-4FA7016B5DC9} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2016-08-24] (ASUSTek Computer Inc.)

Task: {552DEC7A-903A-40B8-99AD-3480E4C49D89} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-07-26] (NVIDIA Corporation)

Task: {57FE4697-58D6-4906-8A87-4099455D8994} - System32\Tasks\WpsKtpcntrQingTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exe [2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

Task: {5835961F-C9B5-4063-9C52-3750B7A7BCCD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-07-26] (NVIDIA Corporation)

Task: {59BC8EFE-6075-4E75-8EE8-1639D1248095} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()

Task: {63D6153F-16E2-4D94-B333-EB484CB2794C} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-03-28] (Dropbox, Inc.)

Task: {68A66FD4-C532-447F-AB59-C7320AF42EB2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-28] (Google Inc.)

Task: {77834291-24AC-4FED-98C1-375D0764AD6A} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-09] (Adobe Systems Incorporated)

Task: {80DCE593-E592-4669-B6DF-85287B767929} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-09-22] (ASUSTek Computer Inc.)

Task: {89E7F8FD-3D5E-4E75-8022-A50A86BC5F40} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)

Task: {9160A357-1C01-4C3B-8057-8C58157278BB} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-09-02] (Realtek Semiconductor)

Task: {94DCF102-8C69-483E-B961-A788E4BBAA88} - System32\Tasks\ASUSTek Computer Inc\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [2017-07-03] (ASUSTek Computer Inc)

Task: {9DAA6C32-BDEF-4838-9575-1600A8E7F27A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-07-26] (NVIDIA Corporation)

Task: {9E853A78-0369-4B18-B1EA-9DCBCC3C8048} - System32\Tasks\ExclusiveTool => C:\Program Files (x86)\DSDCS\InputMapper\ExclusiveModeTool.exe [2016-10-04] (InputMapper)

Task: {A0118620-FA91-4750-9CD5-782F228ABD0B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()

Task: {AC866D5A-8083-405E-80A9-FB35C37D495D} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [2016-10-21] (ASUSTek Computer Inc.)

Task: {B03A5B78-3922-44F0-9E06-5D4BEBA0231D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-18] (Microsoft Corporation)

Task: {B21DE624-ED90-448C-83A8-63BB29B17B09} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2016-10-13] (ASUS)

Task: {B473F457-40B7-409C-BFFF-6E01E4D78235} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [2016-07-26] (Intel® Corporation)

Task: {B85232F3-1DC4-4945-ABD6-278746096C35} - System32\Tasks\WpsExternal_20161114063247 => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe [2016-11-14] (Zhuhai Kingsoft Office Software Co.,Ltd)

Task: {B8746397-DB43-4D67-A867-C75176CA71FD} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)

Task: {BB7E5E97-6F43-4D17-A76E-FE16A6C1A196} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-07-26] (NVIDIA Corporation)

Task: {C7897FD6-7FAF-45F4-B700-2FB318A1EEFE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-07-26] (NVIDIA Corporation)

Task: {CF2FBE55-E2BF-47C1-8134-E7529FCB06D9} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

Task: {CF94EA3E-AD8B-430A-AB17-095C6D8C1620} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2016-09-02] (Realtek Semiconductor)

Task: {D0696DD3-D469-4DAE-AF6E-78F858CB11BF} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-07-07] (ASUSTek COMPUTER INC.)

Task: {EAB47ED5-928D-4FB9-BA2E-E8EC68D194B6} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-05-19] (Piriform Ltd)

Task: {F0201AB8-05FB-4721-AB01-705F5ADEC3A2} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK

Task: {F6677235-E936-4A39-BC92-EEF06CE74CF5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-28] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\WpsExternal_20161114063247.job => C:\Program Files (x86)\Kingsoft\WPS Office\ksolaunch.exe

Task: C:\WINDOWS\Tasks\WpsKtpcntrQingTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\10.1.0.5644\office6\ktpcntr.exeÃqing 10.1.0.5644 xxx server_url=hxxp:/kdl1.cache.wps.com/ksodl/wpscfg/client/____client____html____service____bubble.html ic_server_url=hxxp:/info.kingsoftstore.com/wpsv6internet/infos.ads

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

Shortcut: C:\Users\Ismael\Desktop\Action!.lnk -> C:\Program Files (x86)\Mirillis\Action!\Action!.bat ()

==================== Loaded Modules (Whitelisted) ==============

2014-08-13 08:30 - 2014-08-13 08:30 - 000073032 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

2014-03-25 11:14 - 2014-03-25 11:14 - 000071024 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DCNTranProc.exe

2017-04-28 16:46 - 2017-07-26 19:09 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll

2017-01-07 21:39 - 2014-04-14 20:59 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe

2017-07-30 18:34 - 2016-12-29 15:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll

2016-10-31 21:45 - 2017-06-23 21:42 - 000598528 _____ () C:\Users\Ismael\AppData\Local\MEGAsync\ShellExtX64.dll

2017-03-18 22:59 - 2017-03-20 07:13 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

2017-08-23 21:47 - 2017-08-23 21:47 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe

2017-08-23 21:47 - 2017-08-23 21:47 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll

2017-09-21 15:32 - 2017-08-24 11:27 - 002264528 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll

2017-09-15 10:16 - 2017-09-15 10:16 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll

2017-08-28 22:43 - 2017-08-23 10:48 - 003824472 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll

2017-08-28 22:43 - 2017-08-23 10:48 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000088576 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\zlibwapi.dll

2015-08-18 09:18 - 2015-08-18 09:18 - 000332800 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBCmdDsp.dll

2015-08-18 06:30 - 2015-08-18 06:30 - 000085504 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FlBckpBk.dll

2014-11-25 05:22 - 2014-11-25 05:22 - 000089088 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EfbCheckImg.dll

2015-08-18 06:28 - 2015-08-18 06:28 - 000323584 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FlBckpRt.dll

2015-08-18 06:26 - 2015-08-18 06:26 - 000223232 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskClone.dll

2014-09-22 04:40 - 2014-09-22 04:40 - 000194560 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EFBSearchTool.dll

2015-07-27 07:50 - 2015-07-27 07:50 - 000224256 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskMgr.dll

2014-09-22 04:40 - 2014-09-22 04:40 - 000022528 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBEventMgr.dll

2015-08-18 07:23 - 2015-08-18 07:23 - 000114176 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\EasyFuncs.dll

2015-08-18 09:17 - 2015-08-18 09:17 - 000104448 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\BootConfig.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000012288 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FSFat32.dll

2014-05-21 05:04 - 2014-05-21 05:04 - 000018432 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FSToken.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000201216 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\NtfsLib.dll

2014-03-14 09:04 - 2014-03-14 09:04 - 000013312 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\VssNew.dll

2014-09-22 04:41 - 2014-09-22 04:41 - 000239104 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\diskpart.dll

2014-11-05 02:44 - 2014-11-05 02:44 - 000017408 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\VDiskConvert.dll

2014-09-04 04:41 - 2014-09-04 04:41 - 000037888 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\RapidClone.dll

2014-08-20 03:23 - 2014-08-20 03:23 - 000075264 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\DiskInterface.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000194048 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\NetTool.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000157552 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FtpPipeModule.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000091584 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\TransferManager.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000062832 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\CommonFun.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000054712 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FTPFunModule.dll

2014-03-25 11:14 - 2014-03-25 11:14 - 000617952 _____ () C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\XpIcfOpt.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 001937408 _____ () C:\Program Files (x86)\ASUS\Giftbox\ffmpeg.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 002177536 _____ () C:\Program Files (x86)\ASUS\Giftbox\libglesv2.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 000079360 _____ () C:\Program Files (x86)\ASUS\Giftbox\libegl.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 003561984 _____ () C:\Program Files (x86)\ASUS\Giftbox\node.dll

2017-07-03 11:51 - 2017-07-03 11:51 - 000292352 _____ () \\?\C:\Program Files (x86)\ASUS\Giftbox\node_modules\appcloud-native-utils\anu.node

2016-04-13 10:38 - 2016-04-13 10:38 - 000482304 _____ () C:\Users\Ismael\AppData\Local\MEGAsync\libsodium.dll

2017-09-21 20:43 - 2017-09-20 18:48 - 000771904 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll

2017-09-21 20:43 - 2017-09-20 18:48 - 001804608 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll

2017-09-21 20:43 - 2017-09-20 18:49 - 000023872 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_bootstrap.dll

2017-03-28 18:46 - 2017-09-20 18:48 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000125904 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 001862992 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll

2017-03-28 18:46 - 2017-09-20 18:48 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll

2017-03-28 18:46 - 2017-09-20 18:50 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000022336 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd

2017-09-07 20:19 - 2017-09-20 18:50 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd

2017-05-17 19:32 - 2017-09-20 18:50 - 000082264 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 001796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 001956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 003859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000154440 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000045888 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000069968 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000022872 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd

2017-03-28 18:46 - 2017-09-20 18:48 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd

2017-03-28 18:46 - 2017-09-20 18:50 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000025936 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll

2017-09-21 20:43 - 2017-09-20 18:49 - 000033112 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd

2017-09-21 20:43 - 2017-09-20 18:48 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll

2017-09-21 20:43 - 2017-09-20 18:49 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL

2017-03-28 18:46 - 2017-09-20 18:50 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd

2017-09-21 20:43 - 2017-09-20 18:49 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL

2017-09-21 20:43 - 2017-09-20 18:49 - 001638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll

2017-03-28 18:46 - 2017-09-20 18:50 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd

2017-09-21 20:43 - 2017-09-20 18:50 - 000038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd

2017-09-22 23:59 - 2016-07-21 10:54 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll

2017-09-22 23:59 - 2016-10-08 16:48 - 001506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll

2016-10-05 23:17 - 2016-10-05 23:17 - 001243936 _____ () C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\ACE.dll

2017-04-28 16:46 - 2017-07-26 19:09 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000033280 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000125440 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll

2016-10-13 00:17 - 2016-10-13 00:17 - 000029184 _____ () C:\Program Files (x86)\ASUS\Splendid\VideoEnhance.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2016-07-16 13:47 - 2017-09-23 01:38 - 000001093 ____R C:\WINDOWS\system32\Drivers\etc\hosts

0.0.0.0 telemetry.malwarebytes.com

127.0.0.1 thislineskipsanyemptylines

127.0.0.1 mirillis.com

127.0.0.1 www.mirillis.com

127.0.0.1 serwer2.paka-service.com

127.0.0.1 ns386119.ovh.net

127.0.0.1 mirillis.pl

127.0.0.1 platform.wondershare.com

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2544269325-2574649414-738075177-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\asus\wallpapers\asus.jpg

DNS Servers: 212.166.211.4 - 62.81.16.164

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{24AF7FF9-1142-4A6D-9EDC-D2E043A4976D}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{97B03430-85EF-427D-A355-1F1961519AA0}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [UDP Query User{4C993024-DEDC-4E53-AD0E-DCBE5104EE4B}D:\juegos instalados\micro machines world series\micromachines.exe] => (Allow) D:\juegos instalados\micro machines world series\micromachines.exe

FirewallRules: [TCP Query User{4DA9B378-7CF2-49ED-835D-7E931EA240E7}D:\juegos instalados\micro machines world series\micromachines.exe] => (Allow) D:\juegos instalados\micro machines world series\micromachines.exe

FirewallRules: [UDP Query User{0A958A93-2E59-460D-8720-F1338962AA41}D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe

FirewallRules: [TCP Query User{83A00532-FD31-46D0-BDA9-0968935BF01E}D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe

FirewallRules: [{DCF788BA-9249-4962-84E2-4243221FA532}] => (Allow) D:\SteamLibrary\steamapps\common\ABZU\AbzuGame.exe

FirewallRules: [{D9897DA2-8681-4D01-AFB7-61B58B58149E}] => (Allow) D:\SteamLibrary\steamapps\common\ABZU\AbzuGame.exe

FirewallRules: [UDP Query User{9F1DE3D8-2322-4E6B-8214-C1B7B0D037AE}D:\juegos instalados\yooka-laylee\yookalaylee64.exe] => (Allow) D:\juegos instalados\yooka-laylee\yookalaylee64.exe

FirewallRules: [TCP Query User{AF50BF08-EA02-4B6B-8B1C-1FDCE0C78C01}D:\juegos instalados\yooka-laylee\yookalaylee64.exe] => (Allow) D:\juegos instalados\yooka-laylee\yookalaylee64.exe

FirewallRules: [{3F21CCD0-EA10-43EF-BD9B-4D13DE8611B4}] => (Allow) D:\SteamLibrary\steamapps\common\Rake\Rake.exe

FirewallRules: [{495FD532-D966-4AF0-8904-1BEE5E40618B}] => (Allow) D:\SteamLibrary\steamapps\common\Rake\Rake.exe

FirewallRules: [{560AE2E5-23B3-48DB-86DB-5E6F877CFD10}] => (Allow) D:\SteamLibrary\steamapps\common\KillingFloor\System\KillingFloor.exe

FirewallRules: [{42D9E62A-C8BE-4CEB-8DD4-E9B5117FED6D}] => (Allow) D:\SteamLibrary\steamapps\common\KillingFloor\System\KillingFloor.exe

FirewallRules: [{777126B0-E1B0-4EE0-9F0F-F367CA13BDFE}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{155706D1-34D5-4D8A-9FD0-7DCB2895337B}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\sw.exe

FirewallRules: [{FF5A2059-F4FA-448B-A1FC-BAF26EDB749F}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{1B77943B-C8D2-492B-8BD8-120AB9269DB0}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior\dx11\launcher.exe

FirewallRules: [{DD63FAD2-42C9-47DE-95C2-3B5CA35E8EBA}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{4E62EE29-6C60-446D-A7F6-E731D3DC7C24}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe

FirewallRules: [{9E65A72E-581B-4AAC-94D5-5E560000A074}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{C2F7F067-E8B8-4F43-959D-CECC2285D009}] => (Allow) D:\SteamLibrary\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe

FirewallRules: [{4465A162-ABD1-4FE0-BF0D-42DA74C95C0F}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior 2\ShadowWarrior2.exe

FirewallRules: [{117C8D93-E117-4F9D-ACE9-F2AEEF560E81}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior 2\ShadowWarrior2.exe

FirewallRules: [{1CEA11CB-5218-4842-B209-7188C3C5CBD8}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe

FirewallRules: [{98AB843A-4BE1-4FBD-ACE0-C5AA017C5B70}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\build.exe

FirewallRules: [{FA58302E-9C12-44B2-B9B9-1B563CEED999}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe

FirewallRules: [{6DEDEA1D-5871-4E76-B512-B953148F70BF}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\dosbox\DOSBox.exe

FirewallRules: [{E6157457-09DA-434E-882E-81FF56A2A24E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe

FirewallRules: [{1671D9F3-5AF6-4A73-89CD-79E4BBA4E17A}] => (Allow) D:\SteamLibrary\steamapps\common\Shadow Warrior Classic\bin\sw.exe

FirewallRules: [UDP Query User{216617EC-3D71-4AD9-9496-FE2F0BE896BC}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe

FirewallRules: [TCP Query User{ACD405AE-E1D0-4DB5-BE0F-6567EB78138D}C:\program files\openvpn\bin\openvpn.exe] => (Allow) C:\program files\openvpn\bin\openvpn.exe

FirewallRules: [UDP Query User{DC3A5585-3933-419E-BBE6-195537FB8EAF}D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe] => (Allow) D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe

FirewallRules: [TCP Query User{7F14D793-85CD-491F-8C36-F56A649E65C3}D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe] => (Allow) D:\descargas mega\friday.the.13th.build.6363\summercamp\binaries\win64\summercamp.exe

FirewallRules: [UDP Query User{D273ABA4-C67D-40FD-B9BD-31598890AC84}C:\users\ismael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ismael\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{E4BC42D4-2531-4D0F-B12A-B7BF8FCB5B38}C:\users\ismael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\ismael\appdata\roaming\spotify\spotify.exe

FirewallRules: [{9B812719-58BD-4906-8E7F-CFD74873587B}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{7A2A31DF-054D-4521-9D81-48F3896AFA7A}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [UDP Query User{55DC705A-C44E-4F5C-AE60-2AB2706B9CE5}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe

FirewallRules: [TCP Query User{DE7AF6BC-57B8-4645-AA27-33782892297C}C:\windows\explorer.exe] => (Allow) C:\windows\explorer.exe

FirewallRules: [{A01EEEF1-E062-4943-A894-70123D6B6E2F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{A9071D44-C6B7-4B61-9019-8CF38769FAAE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{DD0C6685-B9F3-4F67-A07F-D64A69D7D20F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe

FirewallRules: [{92CB640C-BC67-4CBC-92E1-47C09DDCB98A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{CCACCAF6-0598-46A4-B8A3-F58E314D8018}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{83B23928-D278-42D2-A6A9-8DC35D1DE2CD}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [{E9DA2AB0-85FF-4780-A427-9F558A3CBE33}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe

FirewallRules: [UDP Query User{1FFD7B9B-4BCA-4056-BCB3-76A1CC4B9D16}C:\windows\system32\rundll32.exe] => (Allow) C:\windows\system32\rundll32.exe

FirewallRules: [TCP Query User{858240D9-C077-4F3A-A1A8-9631193EE1FB}C:\windows\system32\rundll32.exe] => (Allow) C:\windows\system32\rundll32.exe

FirewallRules: [UDP Query User{47D2999E-93B1-451B-91F7-AB2BA0800C09}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [TCP Query User{A1C946FE-A708-4FC6-A4F3-E2E36465D85F}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe

FirewallRules: [{B2F38807-69DC-4C16-9BCA-1C38D85535C1}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{585F8D37-79CC-4CBD-98BA-F5773CBADE08}] => (Allow) E:\Network\EpsonNetSetup\ENEasyApp.exe

FirewallRules: [{E6162598-03AF-4D4E-9F5F-47B23CA1D538}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\InjusticeLauncher.exe

FirewallRules: [{DA1D8AE9-4418-479B-96E5-660F1FF41EF7}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\InjusticeLauncher.exe

FirewallRules: [{FF507275-1D84-4957-A275-6D4BB48B26F2}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\Injustice.exe

FirewallRules: [{F3FF2B49-FC6D-4FF2-B43C-10EE407F5812}] => (Allow) D:\SteamLibrary\steamapps\common\InjusticeGodsAmongUs_UltimateEdition\DiscContentPCG\Injustice.exe

FirewallRules: [{0478A16B-E00C-452E-B456-B99760C28565}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe

FirewallRules: [{9D0A86DB-4A6B-4F62-BD41-CD3BAB394ADD}] => (Allow) D:\SteamLibrary\steamapps\common\left 4 dead\left4dead.exe

FirewallRules: [{79B80B8B-56A1-4B7D-8767-E2C4AB1F688C}] => (Allow) D:\SteamLibrary\steamapps\common\left 4 dead\left4dead.exe

FirewallRules: [{AD59E318-7AFD-4A26-B602-DF7E70E90644}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\BETA\Binaries\Win32\DepthGame.exe

FirewallRules: [{7F3000EB-7423-418A-BFB5-05157F35476B}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\BETA\Binaries\Win32\DepthGame.exe

FirewallRules: [{87A42877-2B15-49A5-940A-56885678E7E9}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\Binaries\Win32\DepthGame.exe

FirewallRules: [{B6AD0089-4942-4D14-9CBE-06E4F10C60C5}] => (Allow) D:\SteamLibrary\steamapps\common\Depth\Binaries\Win32\DepthGame.exe

FirewallRules: [{2DBE3B9D-98D4-4221-9917-28FC9A7A34CE}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{5529ADB4-CCC8-40C3-AAAB-A71FEFBC5EF3}] => (Allow) C:\Program Files\BitComet\BitComet.exe

FirewallRules: [{8B6419C9-88E5-4FBB-95F8-4CAB1D6D0630}] => (Block) %ProgramFiles% (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{B951F6E2-CC74-432B-8EFD-B67CC42C4630}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{14039CD7-C4E3-4CF9-9482-67102ACB2487}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{91BC3E03-392C-4FA2-9D45-053DA950AB6E}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{B0614C48-0F48-42FD-A53E-49929047D9F4}] => (Block) C:\Program Files (x86)\Mirillis\Action!\Action.exe

FirewallRules: [{736834C1-557F-4C1E-8939-D8BDBC7AC9E0}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe

FirewallRules: [{B9F01390-70E1-481A-B4CA-D3962A1D3183}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe

FirewallRules: [{E9F4554D-40DE-4CA3-A4E3-D787B8482E86}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MK10.exe

FirewallRules: [{B07990C0-A84B-429D-9698-F85D4F88F8F5}] => (Allow) D:\SteamLibrary\steamapps\common\MK10\Binaries\Retail\MK10.exe

FirewallRules: [{CAD6C235-1E79-4AEE-B8A0-D80FAF7AD2A3}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe

FirewallRules: [{075ED27C-B60B-4997-9187-279971698975}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKLauncher.exe

FirewallRules: [{7A8676F0-B3B0-432F-B470-217EB177FB9D}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe

FirewallRules: [{3958400F-D0DB-497C-BC4F-E17F38767C5E}] => (Allow) D:\SteamLibrary\steamapps\common\MortalKombat_KompleteEdition\DiscContentPC\MKKE.exe

FirewallRules: [{22DF73B1-5E29-4892-9D05-07F5417C4599}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{F8783DC9-0428-4341-B98E-1E547B97B3C5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe

FirewallRules: [{84168C14-DD44-4704-989C-62C1358EED28}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{D7BA9AE6-0DAC-4C01-895F-1395ACD15196}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{EB3D26FD-553E-4E56-AF1D-F226B1B74B56}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{E2E622B6-E05A-42D3-975F-3F26C3080800}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{D8A6F047-7EAC-4BBA-9EDE-F9D8A96B6CF3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{039837CE-9766-41DC-8E6E-AE28D5EA2D22}] => (Allow) C:\Program Files\CyberLink\PowerDirector12\PDR10.EXE

FirewallRules: [{1B548329-A068-49FD-ACD3-C09962D518DA}] => (Allow) C:\Program Files (x86)\FarStone\TotalRecovery Pro\EFB\FBAgent.exe

FirewallRules: [{8E79F8CD-2AF7-4E33-A6AA-F07A92235177}] => (Allow) C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGCAndroidService.exe

FirewallRules: [{50701328-9775-4EDC-B3F8-CFD144D95189}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{E2AF9A95-3E87-4373-A60E-1191CA62ACBF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{05626D91-E3F0-4582-92FF-A84B5BE4A700}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{B8BD8360-8194-4552-85E5-2F6024AF6132}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{C62B34EE-C570-4A2C-84D9-85B70113B7F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{D6FD987C-1D37-452F-A6E2-E79D26FA57DD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{D8D58316-4F8E-46F4-916A-3035A2BDC20E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

FirewallRules: [{26C2C6E2-6395-491C-8E0D-1A6F87B45201}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{DCA8623D-F01D-439C-9F07-9389D0E02147}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{2FFA9325-363A-4E0B-8A8B-940C97AD8251}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe

FirewallRules: [TCP Query User{012CBF4C-C6EC-4AE3-82B6-C2FE62C61108}D:\juegos instalados\firewatch\firewatch.exe] => (Allow) D:\juegos instalados\firewatch\firewatch.exe

FirewallRules: [UDP Query User{9D41905F-88A8-4632-9F40-D3101C6535BF}D:\juegos instalados\firewatch\firewatch.exe] => (Allow) D:\juegos instalados\firewatch\firewatch.exe

FirewallRules: [{0386644F-75FC-4809-993E-E171CAA7693E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{5477C8E0-1644-4207-A560-5266B8EB573E}] => (Allow) D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

FirewallRules: [{E1506107-3E2F-430A-8A99-73A44B5F5185}] => (Allow) D:\SteamLibrary\steamapps\common\Oddworld Abes Oddysee\AbeWin.exe

FirewallRules: [{8FD9F37E-88C9-4FB6-9893-A904BE488DC7}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

FirewallRules: [{ED196C6D-3F4E-4176-9359-162C19FF517C}] => (Allow) D:\SteamLibrary\steamapps\common\Fight of Gods\FOG.exe

FirewallRules: [{EEE90789-A236-44BF-B26B-BBC07932A8BB}] => (Allow) D:\SteamLibrary\steamapps\common\Fight of Gods\FOG.exe

FirewallRules: [{B31C076E-8765-4B17-8C47-B2CA1F74F195}] => (Block) %ProgramFiles%\Wondershare\Wondershare Filmora (Spanish ES)\Filmora.exe

FirewallRules: [{A52885B3-1D66-425E-93E0-AC65BDB4A6E8}] => (Block) %ProgramFiles%\Wondershare\Wondershare Filmora (Spanish ES)\Filmora.exe

==================== Restore Points =========================

22-09-2017 01:02:28 End of disinfection

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (09/23/2017 04:38:12 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (09/23/2017 04:38:12 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (09/23/2017 04:25:20 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ICEsoundAPO64.dll, versión: 1.0.0.20, marca de tiempo: 0x56e94d73

Código de excepción: 0xc0000409

Desplazamiento de errores: 0x000000000002571c

Identificador del proceso con errores: 0x22e4

Hora de inicio de la aplicación con errores: 0x01d334107fde1c99

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\system32\ICEsoundAPO64.dll

Identificador del informe: 70084534-6dd2-49b8-b386-567e1ea0ba3a

Nombre completo del paquete con errores:

Identificador de aplicación relativa del paquete con errores:

Error: (09/23/2017 04:25:09 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ntdll.dll, versión: 10.0.15063.608, marca de tiempo: 0x8274fd8b

Código de excepción: 0xc0000005

Desplazamiento de errores: 0x00000000000a8e3d

Identificador del proceso con errores: 0x22e4

Hora de inicio de la aplicación con errores: 0x01d334107fde1c99

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\SYSTEM32\ntdll.dll

Identificador del informe: 05f37cae-df12-4197-b92e-0e7528cf1959

Nombre completo del paquete con errores:

Identificador de aplicación relativa del paquete con errores:

Error: (09/23/2017 04:24:58 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ntdll.dll, versión: 10.0.15063.608, marca de tiempo: 0x8274fd8b

Código de excepción: 0xc0000005

Desplazamiento de errores: 0x00000000000a8e3d

Identificador del proceso con errores: 0x22e4

Hora de inicio de la aplicación con errores: 0x01d334107fde1c99

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\SYSTEM32\ntdll.dll

Identificador del informe: d5a0e7b4-08cf-42c2-af62-47a631db864d

Nombre completo del paquete con errores:

Identificador de aplicación relativa del paquete con errores:

Error: (09/23/2017 04:18:06 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: MicrosoftEdgeCP.exe, versión: 11.0.15063.608, marca de tiempo: 0x59ae240c

Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000

Código de excepción: 0xc0000604

Desplazamiento de errores: 0x0000000000000000

Identificador del proceso con errores: 0x11a4

Hora de inicio de la aplicación con errores: 0x01d334121ac192a0

Ruta de acceso de la aplicación con errores: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Ruta de acceso del módulo con errores: unknown

Identificador del informe: 235d5678-be6d-456d-95a3-47f987b1bfa5

Nombre completo del paquete con errores: Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe

Identificador de aplicación relativa del paquete con errores: ContentProcess

Error: (09/23/2017 01:29:10 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ICEsoundAPO64.dll, versión: 1.0.0.20, marca de tiempo: 0x56e94d73

Código de excepción: 0xc0000409

Desplazamiento de errores: 0x000000000002571c

Identificador del proceso con errores: 0x1a60

Hora de inicio de la aplicación con errores: 0x01d333e67e4dacc4

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\system32\ICEsoundAPO64.dll

Identificador del informe: efea1d2e-b488-4f5e-bd6e-95ce09eccb65

Nombre completo del paquete con errores:

Identificador de aplicación relativa del paquete con errores:

Error: (09/23/2017 01:28:59 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Nombre de la aplicación con errores: AUDIODG.EXE, versión: 10.0.15063.447, marca de tiempo: 0xe365c782

Nombre del módulo con errores: ntdll.dll, versión: 10.0.15063.608, marca de tiempo: 0x8274fd8b

Código de excepción: 0xc0000005

Desplazamiento de errores: 0x00000000000a8e3d

Identificador del proceso con errores: 0x1a60

Hora de inicio de la aplicación con errores: 0x01d333e67e4dacc4

Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\AUDIODG.EXE

Ruta de acceso del módulo con errores: C:\WINDOWS\SYSTEM32\ntdll.dll

Identificador del informe: 49d88950-94f5-4d23-9c61-2b266287f42d

Nombre completo del paquete con errores:

Identificador de aplicación relativa del paquete con errores:

Error: (09/23/2017 01:08:13 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_AudioCacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (09/23/2017 01:08:13 AM) (Source: SideBySide) (EventID: 33) (User: )

Description: Error al generar el contexto de activación para "C:\Program Files\CyberLink\PhotoDirector5\Kernel\CES\CES_CacheAgent.exe.Manifest".

No se encontró el ensamblado dependiente PDR.X,type="win32",version="1.0.0.0".

Use sxstrace.exe para obtener un diagnóstico detallado.

System errors:

=============

Error: (09/23/2017 03:05:03 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

Error: (09/23/2017 03:05:03 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

Error: (09/23/2017 03:05:03 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

Error: (09/23/2017 03:05:03 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

Error: (09/23/2017 03:04:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: El servicio Kingsoft_WPS_UpdateService no pudo iniciarse debido al siguiente error:

El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (09/23/2017 03:04:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Kingsoft_WPS_UpdateService.

Error: (09/23/2017 03:04:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: El servicio CldFlt no pudo iniciarse debido al siguiente error:

Solicitud no compatible.

Error: (09/23/2017 02:58:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

Error: (09/23/2017 02:58:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

Error: (09/23/2017 02:58:19 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)

Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID

{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}

y APPID

{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}

CodeIntegrity:

===================================

Date: 2017-09-23 04:17:32.004

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Mirillis\Action!\action_x64.dll that did not meet the Store signing level requirements.

Date: 2017-09-22 21:27:30.264

Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\nvamwu.inf_amd64_e81efc139459a03d\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-21 19:35:05.816

Date: 2017-09-13 22:10:02.387

Date: 2017-08-31 02:10:27.998

Date: 2017-08-31 02:10:23.975

Date: 2017-08-31 02:08:15.875

Date: 2017-08-29 11:18:10.328

Date: 2017-08-29 11:18:06.304

Date: 2017-08-29 11:17:57.214

==================== Memory info ===========================

Processor: Intel® Core™ i7-7700HQ CPU @ 2.80GHz

Percentage of memory in use: 27%

Total physical RAM: 16234.32 MB

Available physical RAM: 11831.61 MB

Total Virtual: 18666.32 MB

Available Virtual: 14320.5 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:237.36 GB) (Free:127.5 GB) NTFS ==>[system with boot components (obtained from drive)]

Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:391.2 GB) NTFS

==================== MBR & Partition Table ==================

========================================================

Disk: 0 (Size: 238.5 GB) (Disk ID: 87D15391)

Partition: GPT.

========================================================

Disk: 1 (Size: 931.5 GB) (Disk ID: 47CEC1FB)

Partition: GPT.

==================== End of Addition.txt ============================

Edited by ismael4790, 23 September 2017 - 09:15 AM.

#1 $Remove a trojan win32\Adload!rfn: post #1$
ismael4790

Posted 23 September 2017 - 06:55 AM

Advertisements

#2 $Remove a trojan win32\Adload!rfn: post #2$
ismael4790

Posted 23 September 2017 - 07:38 AM

#3 $Remove a trojan win32\Adload!rfn: post #3$
zep516

Posted 23 September 2017 - 01:38 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Remove a trojan win32\Adload!rfn

#1 ismael4790 Posted 23 September 2017 - 06:55 AM

Advertisements

#2 ismael4790 Posted 23 September 2017 - 07:38 AM

#3 zep516 Posted 23 September 2017 - 01:38 PM

Similar Topics

0 user(s) are reading this topic

As Featured On:

Forums

Downloads

Members

Connect With Us

Sign In

#1 $Remove a trojan win32\Adload!rfn: post #1$
ismael4790

Posted 23 September 2017 - 06:55 AM

#2 $Remove a trojan win32\Adload!rfn: post #2$
ismael4790

Posted 23 September 2017 - 07:38 AM

#3 $Remove a trojan win32\Adload!rfn: post #3$
zep516

Posted 23 September 2017 - 01:38 PM