No me estás entendiendo, eso ya lo hice y en el orden que me indicaste, pero no me pediste infirme… Lo que te decía es un residuo; ya ahora abro el navegador reparado por el ZHPCleaner y las ventanas cmd ya no abren, porque eso no es un virus pero permanecían en el Menú Inicio. Pero dime qué hago 
Los informes siempre hay que ponerlo… en los manuales también siempre pone que hay que pegarlos en los foros…
Eso que tenías en el menú inicio son infección es…
Vaa a sacarme los informes con el programa siguiente de nuevo
-
Desactiva Temporalmente tu antivirus y cualquier programa de seguridad.
-
Descarga a Tu Escritorio >> Esto es muy importante<<.,Fabar Recovery Scan Tool, considerando la versión adecuada para tu equipo. (32 o 64 bits)
¿Cómo saber si mi Windows es de 32 o 64 bits? -
Doble clic para ejecutar Frst.exe. En la ventana del Disclaimer, presiona Yes.
-
En la nueva ventana que se abre, presiona el botón Scan y espera a que concluya el análisis.
-
Se abrirán dos (2) archivos (Logs), Frst.txt y Addition.txt, que estarán grabados en Tu escritorio.
En Tu próxima respuesta, copias y pegas los dos reportes Frst.txt y Addition.txt de FRST
Nota: Si el/los reportes solicitados no entraran en una sola respuesta porque superan la cantidad de caracteres permitidos, puedes utilizar dos o mas respuestas para pegarlos completamente.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-05.2019
Ran by Gustavo (administrator) on GUSTAVO-PC (BIOSTAR Group P4M90-M7) (04-05-2019 12:08:18)
Running from C:\Users\Gustavo\Desktop
Loaded Profiles: Gustavo (Available Profiles: Gustavo)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Español (España, internacional)
Internet Explorer Version 11 (Default browser: "C:\Program Files (x86)\Google\Chrome\Application\1556743531318.exe" -- "%1")
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-919363791-4254976807-2822247002-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [43984 2018-06-25] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-919363791-4254976807-2822247002-1001\...\Policies\Explorer: [NoInternetIcon] 0
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\system32\vorbis.acm [1562432 2016-11-02] (Image Line -> HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1456448 2016-11-02] (Image Line -> HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-03] (Google LLC -> Google Inc.)
BootExecute: autocheck autochk *
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {12F90414-7BC9-4910-8D1B-D9956C02345F} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\\MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {59FB9F9B-C832-4CF9-8B98-D8E5F037952E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-25] (Google Inc -> Google LLC)
Task: {A89F0F56-95E2-4C61-9B73-57925F25B0EB} - System32\Tasks\GlaryUpdate 5 => C:\Program Files (x86)\Glary Utilities 5\CheckUpdate.exe [43472 2018-06-25] (Glarysoft LTD -> Glarysoft Ltd)
Task: {BEE0C3F6-AEB4-4247-9656-BC44F04A9F4A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [14679256 2019-04-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CAE1B4EF-289B-46F6-BD61-B497ACE0FFD3} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-04-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {CEA4699A-2492-4D26-A037-14EC878376BB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-25] (Google Inc -> Google LLC)
Task: {DF9366F7-5EB3-4ECF-8145-12DAA78931E1} - System32\Tasks\Games\UpdateCheck_S-1-5-21-919363791-4254976807-2822247002-1001
Task: {FC7062C6-262A-48C7-B09D-98225CD2BD99} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\AdwCleaner_onReboot.job => C:\Users\Gustavo\Desktop\LIMPIEZA\adwcleaner_7.3.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{0344798E-D869-4E78-83E9-3E51E8AC8CE5}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
SearchScopes: HKLM-x32 -> DefaultScope value is missing
FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-22] (VideoLAN) [File not signed]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-04-25] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-04-25] (Google Inc -> Google LLC)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com.ar/
CHR StartupUrls: Default -> "hxxps://www.google.com.ar/"
CHR Profile: C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default [2019-05-04]
CHR Extension: (Presentaciones) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-04-25]
CHR Extension: (Documentos) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-04-25]
CHR Extension: (Google Drive) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-04-25]
CHR Extension: (YouTube) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-04-25]
CHR Extension: (Hojas de cálculo) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-04-25]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-04-26]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-04-25]
CHR Extension: (Gmail) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-25]
CHR Extension: (Chrome Media Router) - C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-25]
CHR Profile: C:\Users\Gustavo\AppData\Local\Google\Chrome\User Data\System Profile [2019-05-02]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\1556743531318.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION
S2 AdobeARMservice; "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe" [X]
S2 rcdll; C:\Users\Gustavo\AppData\Local\Temp\rcdll.exe [X] <==== ATTENTION
S2 symsrv; C:\Program Files\windows nt\symsrv.exe [X] <==== ATTENTION
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 FETNDIS; C:\Windows\System32\DRIVERS\fet6x64.sys [47872 2009-06-10] (Microsoft Windows -> VIA Technologies, Inc. )
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [28424 2018-11-11] (Glarysoft LTD -> Glarysoft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S1 OTNlMDM4Njk4ZD; \??\C:\Windows\system32\drivers\OTNlMDM4Njk4ZD [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-04 11:46 - 2019-05-04 11:50 - 000019135 _____ C:\Users\Gustavo\Desktop\Addition.txt
2019-05-04 11:41 - 2019-05-04 12:10 - 000009930 _____ C:\Users\Gustavo\Desktop\FRST.txt
2019-05-04 11:39 - 2019-05-04 11:39 - 000000000 ____D C:\Users\Gustavo\Desktop\FRST-OlderVersion
2019-05-04 06:55 - 2019-05-04 06:55 - 000038259 _____ C:\Users\Gustavo\Documents\soja.html
2019-05-03 16:41 - 2019-05-03 16:41 - 000167376 _____ C:\Users\Gustavo\Downloads\fileassassin-setup-1.06.esp.exe
2019-05-03 12:43 - 2019-05-03 12:43 - 000000581 _____ C:\Users\Gustavo\Documents\aiwcudv.txt
2019-05-03 00:20 - 2019-05-03 00:20 - 000002722 _____ C:\Users\Gustavo\Documents\ZHPCleaner.txt
2019-05-02 23:36 - 2019-05-02 23:36 - 003139968 _____ C:\Users\Gustavo\ZHPCleaner.exe
2019-05-02 22:45 - 2019-05-02 22:45 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\547216F0.sys
2019-05-02 18:05 - 2019-05-02 18:05 - 000019084 _____ C:\Users\Gustavo\Desktop\ZHPCleanerInforme.txt
2019-05-02 17:59 - 2019-05-03 00:10 - 000002719 _____ C:\Users\Gustavo\Desktop\ZHPCleaner (R).txt
2019-05-02 17:53 - 2019-05-03 00:08 - 000002535 _____ C:\Users\Gustavo\Desktop\ZHPCleaner (S).txt
2019-05-02 17:37 - 2019-05-03 00:10 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\ZHP
2019-05-02 17:37 - 2019-05-02 23:36 - 000000677 _____ C:\Users\Gustavo\Desktop\ZHPCleaner.lnk
2019-05-02 17:37 - 2019-05-02 17:37 - 000000000 ____D C:\Users\Gustavo\AppData\Local\ZHP
2019-05-02 17:36 - 2019-05-02 17:36 - 003139456 _____ C:\Users\Gustavo\Downloads\ZHPCleaner.exe
2019-05-02 17:23 - 2019-05-02 17:23 - 000000000 ____D C:\Users\Gustavo\Downloads\Manuales 19
2019-05-02 15:41 - 2019-05-02 15:41 - 063153192 _____ (Malwarebytes ) C:\Users\Gustavo\Downloads\mb3-setup-consumer-3.7.1.2839-1.0.586-1.0.10412.exe
2019-05-02 15:40 - 2019-05-02 15:40 - 002555104 _____ (Kaspersky Lab) C:\Users\Gustavo\Downloads\startup_14809 (4).exe
2019-05-02 15:40 - 2019-05-02 15:40 - 002555104 _____ (Kaspersky Lab) C:\Users\Gustavo\Downloads\startup_14809 (3).exe
2019-05-02 15:40 - 2019-05-02 15:40 - 002555104 _____ (Kaspersky Lab) C:\Users\Gustavo\Downloads\startup_14809 (2).exe
2019-05-02 15:40 - 2019-05-02 15:40 - 002555104 _____ (Kaspersky Lab) C:\Users\Gustavo\Downloads\startup_14809 (1).exe
2019-05-02 15:35 - 2019-05-02 15:40 - 002555104 _____ (Kaspersky Lab) C:\Users\Gustavo\Downloads\startup_14809.exe
2019-05-02 15:24 - 2019-05-02 15:24 - 000000000 ____D C:\Program Files (x86)\Panda Security
2019-05-02 15:21 - 2019-05-02 15:26 - 000000000 ____D C:\ProgramData\Panda Security
2019-05-02 15:19 - 2019-05-02 15:20 - 067805224 _____ (Panda Security, S.L.) C:\Users\Gustavo\Downloads\FREEAV.exe
2019-05-02 15:00 - 2019-05-02 15:00 - 000000105 _____ C:\Users\Gustavo\Documents\troyano electrumx.txt
2019-05-02 09:06 - 2019-05-02 09:06 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\3367D702.sys
2019-05-02 07:30 - 2019-05-03 11:52 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2019-05-02 07:30 - 2019-05-02 23:34 - 000000000 ____D C:\Users\Gustavo\Desktop\mbar
2019-05-02 07:09 - 2019-05-02 07:10 - 014178840 _____ (Malwarebytes Corp.) C:\Users\Gustavo\Downloads\mbar-1.10.3.1001.exe
2019-05-02 07:05 - 2019-05-02 09:44 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-05-02 07:05 - 2019-05-02 09:43 - 000001147 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-05-02 07:05 - 2019-05-02 09:43 - 000001141 _____ C:\Users\Public\Desktop\Firefox.lnk
2019-05-02 07:04 - 2019-05-02 07:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-05-02 07:04 - 2019-05-02 07:04 - 000000000 ____D C:\ProgramData\Mozilla
2019-05-02 07:01 - 2019-05-02 07:01 - 000322352 _____ (Mozilla) C:\Users\Gustavo\Downloads\Firefox Installer (5).exe
2019-05-02 06:45 - 2019-05-02 07:01 - 000322352 _____ (Mozilla) C:\Users\Gustavo\Downloads\Firefox Installer (4).exe
2019-05-02 06:45 - 2019-05-02 07:01 - 000322352 _____ (Mozilla) C:\Users\Gustavo\Downloads\Firefox Installer (3).exe
2019-05-02 06:45 - 2019-05-02 07:01 - 000322352 _____ (Mozilla) C:\Users\Gustavo\Downloads\Firefox Installer (2).exe
2019-05-02 06:45 - 2019-05-02 07:00 - 000322352 _____ (Mozilla) C:\Users\Gustavo\Downloads\Firefox Installer.exe
2019-05-02 06:45 - 2019-05-02 06:51 - 000322352 _____ (Mozilla) C:\Users\Gustavo\Downloads\Firefox Installer (1).exe
2019-05-02 06:43 - 2019-05-02 06:43 - 000009953 _____ C:\Users\Gustavo\Documents\cagadon2.txt
2019-05-01 19:40 - 2019-05-01 19:40 - 000000680 _____ C:\Users\Gustavo\Documents\clave.reg
2019-05-01 19:24 - 2019-05-03 13:36 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-05-01 19:08 - 2019-05-01 19:08 - 001895382 _____ C:\Users\Gustavo\AppData\Local\Touchex.bin
2019-05-01 18:48 - 2019-05-01 18:48 - 000000302 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
2019-05-01 18:47 - 2019-05-01 18:47 - 000009609 _____ C:\Users\Gustavo\Documents\cagadon.txt
2019-05-01 18:29 - 2019-05-01 18:29 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Mozilla
2019-05-01 17:54 - 2019-05-01 17:55 - 000000000 ____D C:\ProgramData\{2945144D-D6D5-0D47-ADCB-C481AD2C9DD0}
2019-05-01 17:53 - 2019-05-01 17:53 - 001895382 _____ C:\Users\Gustavo\AppData\Local\Freshlab.bin
2019-05-01 17:53 - 2019-05-01 17:53 - 000000000 ____D C:\ProgramData\{13174CBB-8E23-3715-5B93-96BB5B74CFEA}
2019-05-01 17:51 - 2019-05-01 19:06 - 000126464 _____ C:\Users\Gustavo\AppData\Local\lobby.dat
2019-05-01 17:48 - 2019-05-01 17:48 - 000000000 ____D C:\Windows\SysWOW64\vvouqizo
2019-05-01 17:44 - 2019-05-02 09:40 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\rurizotz3p1
2019-05-01 17:44 - 2019-05-01 18:54 - 000722944 _____ C:\Users\Gustavo\AppData\Local\sha.db
2019-05-01 17:44 - 2019-05-01 17:44 - 000140800 _____ C:\Users\Gustavo\AppData\Local\installer.dat
2019-05-01 17:44 - 2019-05-01 17:44 - 000000000 ____D C:\ProgramData\fb
2019-05-01 17:44 - 2019-05-01 17:44 - 000000000 ____D C:\Program Files (x86)\Seed Trade
2019-05-01 17:43 - 2019-05-02 09:40 - 000000000 ____D C:\Program Files (x86)\Kyo
2019-05-01 17:43 - 2019-05-01 17:43 - 000000000 ____D C:\Program Files (x86)\foldershare
2019-04-30 20:09 - 2019-04-30 20:09 - 000108477 _____ C:\Windows\uninstaller.dat
2019-04-26 17:44 - 2019-04-26 17:44 - 000128105 _____ C:\Users\Gustavo\Desktop\CBU.pdf
2019-04-26 13:09 - 2019-04-26 13:09 - 000000040 _____ C:\Users\Gustavo\Desktop\zzz.txt
2019-04-25 18:55 - 2019-05-03 00:13 - 000000000 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-04-25 18:55 - 2019-05-02 09:43 - 000002282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-04-25 18:53 - 2019-04-25 18:53 - 000003532 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-04-25 18:53 - 2019-04-25 18:53 - 000003404 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-04-25 18:02 - 2019-05-02 09:43 - 000001072 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2019-04-25 07:52 - 2019-04-26 13:10 - 000001504 _____ C:\Users\Gustavo\Desktop\seguir.txt
2019-04-25 07:45 - 2019-04-25 07:45 - 000477710 _____ C:\Users\Gustavo\Documents\bookmarks_25_4_19.html
2019-04-25 07:37 - 2019-04-25 07:37 - 007127416 _____ (VS Revo Group ) C:\Users\Gustavo\Desktop\revosetup.exe
2019-04-24 19:13 - 2019-04-25 18:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
2019-04-24 19:12 - 2019-04-24 19:12 - 008806944 _____ (Anvisoft) C:\Users\Gustavo\Downloads\anvi-browser-repair-tool-2-0-en-win.exe
2019-04-23 20:15 - 2019-04-23 21:21 - 000002988 _____ C:\Users\Gustavo\Desktop\TRABAJO.txt
2019-04-23 17:51 - 2019-04-23 17:51 - 000000265 _____ C:\Users\Gustavo\Desktop\DelFix.txt
2019-04-23 08:45 - 2019-05-04 07:34 - 000000000 ____D C:\temp
2019-04-23 08:44 - 2019-05-02 09:43 - 000001053 _____ C:\Users\Public\Desktop\WaveLab 6.lnk
2019-04-23 08:44 - 2019-04-23 08:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WaveLab 6
2019-04-23 08:44 - 2009-10-11 21:58 - 001177600 _____ (AD) C:\Windows\SysWOW64\SYNSOEMU.DLL
2019-04-23 08:43 - 2019-04-23 08:43 - 000000000 ____D C:\Program Files (x86)\Steinberg
2019-04-22 15:39 - 2019-04-23 17:53 - 000004748 _____ C:\Users\Gustavo\Desktop\Fixlog.txt
2019-04-22 15:35 - 2019-04-22 15:35 - 000000000 ____D C:\Windows\pss
2019-04-22 15:07 - 2019-04-22 15:07 - 000000000 ____D C:\Users\Gustavo\Desktop\sm
2019-04-22 14:43 - 2019-04-22 14:43 - 000005070 _____ C:\Users\Gustavo\Desktop\Safemode Repair.rar
2019-04-22 14:34 - 2019-04-22 14:34 - 000000532 _____ C:\Users\Gustavo\Desktop\DelFixbackuorecistro.txt
2019-04-22 14:33 - 2019-04-23 17:51 - 000000265 _____ C:\DelFix.txt
2019-04-22 14:33 - 2019-04-22 14:33 - 000000000 ____D C:\Windows\ERUNT
2019-04-22 14:28 - 2019-04-22 14:28 - 000797760 _____ C:\Users\Gustavo\Desktop\delfix.exe
2019-04-22 14:20 - 2019-05-04 11:39 - 002430464 _____ (Farbar) C:\Users\Gustavo\Desktop\FRST64.exe
2019-04-21 19:32 - 2019-05-03 13:36 - 000000000 ____D C:\Program Files\Malwarebytes
2019-04-21 10:32 - 2019-05-04 12:08 - 000000000 ____D C:\FRST
2019-04-21 05:33 - 2019-05-01 18:47 - 000000000 ____D C:\AdwCleaner
2019-04-20 20:49 - 2019-04-20 20:49 - 000000000 ____D C:\Users\Gustavo\AppData\Local\mbamtray
2019-04-20 20:27 - 2019-04-23 18:43 - 000000000 ____D C:\Users\Gustavo\Desktop\LIMPIEZA
2019-04-18 19:31 - 2019-05-01 17:28 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Maize Sampler Player
2019-04-17 12:43 - 2019-05-02 09:43 - 000000860 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-04-17 12:43 - 2019-05-01 18:09 - 000000000 ____D C:\Program Files\CCleaner
2019-04-17 12:43 - 2019-04-29 16:21 - 000004132 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-04-17 12:43 - 2019-04-29 16:21 - 000002800 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-04-17 12:43 - 2019-04-17 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-04-16 16:22 - 2019-04-16 16:22 - 000000000 ____D C:\Users\Gustavo\AppData\Local\VS Revo Group
2019-04-16 16:21 - 2019-04-16 16:21 - 000000000 ____D C:\ProgramData\VS Revo Group
2019-04-16 16:18 - 2015-07-12 20:57 - 000000000 ____D C:\Users\Gustavo\Desktop\Revo Uninstaller Pro 3.1.1
2019-04-16 15:36 - 2019-04-16 15:36 - 000249856 _____ C:\Windows\system32\config\default.gu
2019-04-16 15:36 - 2019-04-16 15:36 - 000032768 _____ C:\Windows\system32\config\sam.gu
2019-04-16 15:36 - 2019-04-16 15:36 - 000024576 _____ C:\Windows\system32\config\security.gu
2019-04-09 19:03 - 2019-03-26 03:14 - 025736704 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-04-09 19:03 - 2019-03-26 02:12 - 020280832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-04-09 19:03 - 2019-03-26 02:05 - 015284736 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-04-09 19:02 - 2019-04-01 22:57 - 003229696 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-04-09 19:02 - 2019-03-28 22:36 - 000114688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys
2019-04-09 19:02 - 2019-03-28 00:35 - 000348776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2019-04-09 19:02 - 2019-03-27 22:55 - 000397120 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2019-04-09 19:02 - 2019-03-26 21:40 - 003181568 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2019-04-09 19:02 - 2019-03-26 03:03 - 002724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2019-04-09 19:02 - 2019-03-26 03:03 - 000004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2019-04-09 19:02 - 2019-03-26 02:52 - 002902528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-04-09 19:02 - 2019-03-26 02:51 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2019-04-09 19:02 - 2019-03-26 02:51 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2019-04-09 19:02 - 2019-03-26 02:50 - 000577024 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2019-04-09 19:02 - 2019-03-26 02:50 - 000417280 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2019-04-09 19:02 - 2019-03-26 02:50 - 000088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2019-04-09 19:02 - 2019-03-26 02:44 - 000054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2019-04-09 19:02 - 2019-03-26 02:43 - 000034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2019-04-09 19:02 - 2019-03-26 02:41 - 000615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2019-04-09 19:02 - 2019-03-26 02:40 - 005777920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-04-09 19:02 - 2019-03-26 02:40 - 000814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2019-04-09 19:02 - 2019-03-26 02:40 - 000790528 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2019-04-09 19:02 - 2019-03-26 02:40 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2019-04-09 19:02 - 2019-03-26 02:40 - 000116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2019-04-09 19:02 - 2019-03-26 02:35 - 000969216 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2019-04-09 19:02 - 2019-03-26 02:31 - 000489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2019-04-09 19:02 - 2019-03-26 02:26 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2019-04-09 19:02 - 2019-03-26 02:26 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2019-04-09 19:02 - 2019-03-26 02:25 - 000107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2019-04-09 19:02 - 2019-03-26 02:22 - 000199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2019-04-09 19:02 - 2019-03-26 02:22 - 000092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2019-04-09 19:02 - 2019-03-26 02:20 - 000315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2019-04-09 19:02 - 2019-03-26 02:18 - 000152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2019-04-09 19:02 - 2019-03-26 02:10 - 000262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2019-04-09 19:02 - 2019-03-26 02:08 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2019-04-09 19:02 - 2019-03-26 02:08 - 000728064 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2019-04-09 19:02 - 2019-03-26 02:07 - 001359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2019-04-09 19:02 - 2019-03-26 02:06 - 002135552 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2019-04-09 19:02 - 2019-03-26 02:01 - 002724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2019-04-09 19:02 - 2019-03-26 02:00 - 004858880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-04-09 19:02 - 2019-03-26 01:51 - 000498688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2019-04-09 19:02 - 2019-03-26 01:51 - 000062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2019-04-09 19:02 - 2019-03-26 01:50 - 000341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2019-04-09 19:02 - 2019-03-26 01:50 - 000064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2019-04-09 19:02 - 2019-03-26 01:50 - 000047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2019-04-09 19:02 - 2019-03-26 01:48 - 002295808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-04-09 19:02 - 2019-03-26 01:48 - 001556992 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-04-09 19:02 - 2019-03-26 01:46 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2019-04-09 19:02 - 2019-03-26 01:45 - 000030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2019-04-09 19:02 - 2019-03-26 01:44 - 000476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2019-04-09 19:02 - 2019-03-26 01:43 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2019-04-09 19:02 - 2019-03-26 01:43 - 000620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2019-04-09 19:02 - 2019-03-26 01:43 - 000115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2019-04-09 19:02 - 2019-03-26 01:36 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2019-04-09 19:02 - 2019-03-26 01:36 - 000416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2019-04-09 19:02 - 2019-03-26 01:33 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2019-04-09 19:02 - 2019-03-26 01:33 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2019-04-09 19:02 - 2019-03-26 01:32 - 000091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2019-04-09 19:02 - 2019-03-26 01:31 - 000168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2019-04-09 19:02 - 2019-03-26 01:29 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-04-09 19:02 - 2019-03-26 01:29 - 000279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2019-04-09 19:02 - 2019-03-26 01:29 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2019-04-09 19:02 - 2019-03-26 01:28 - 000130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2019-04-09 19:02 - 2019-03-26 01:24 - 013682176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-04-09 19:02 - 2019-03-26 01:23 - 000230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2019-04-09 19:02 - 2019-03-26 01:22 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2019-04-09 19:02 - 2019-03-26 01:21 - 002059776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2019-04-09 19:02 - 2019-03-26 01:21 - 001155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2019-04-09 19:02 - 2019-03-26 01:08 - 004386304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-04-09 19:02 - 2019-03-26 01:04 - 001332224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-04-09 19:02 - 2019-03-26 01:02 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2019-04-09 19:02 - 2019-03-20 23:13 - 005552872 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-04-09 19:02 - 2019-03-20 23:13 - 000708328 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2019-04-09 19:02 - 2019-03-20 23:13 - 000631680 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2019-04-09 19:02 - 2019-03-20 23:13 - 000262376 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll
2019-04-09 19:02 - 2019-03-20 23:13 - 000095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2019-04-09 19:02 - 2019-03-20 23:12 - 001664352 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2019-04-09 19:02 - 2019-03-20 23:12 - 000154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-04-09 19:02 - 2019-03-20 23:10 - 001472512 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 001211392 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 001162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000733184 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000361984 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000236032 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000094208 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000032768 _____ (Microsoft Corporation) C:\Windows\system32\sxssrv.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2019-04-09 19:02 - 2019-03-20 23:10 - 000013312 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000007168 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:09 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:03 - 003961576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2019-04-09 19:02 - 2019-03-20 23:02 - 004056296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2019-04-09 19:02 - 2019-03-20 23:02 - 001314104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 001114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000556032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000275968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000070144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 23:00 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 22:45 - 000148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2019-04-09 19:02 - 2019-03-20 22:45 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2019-04-09 19:02 - 2019-03-20 22:45 - 000017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2019-04-09 19:02 - 2019-03-20 22:44 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2019-04-09 19:02 - 2019-03-20 22:41 - 000338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2019-04-09 19:02 - 2019-03-20 22:41 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2019-04-09 19:02 - 2019-03-20 22:41 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\videoprt.sys
2019-04-09 19:02 - 2019-03-20 22:40 - 000050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2019-04-09 19:02 - 2019-03-20 22:40 - 000009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2019-04-09 19:02 - 2019-03-20 22:38 - 000464384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2019-04-09 19:02 - 2019-03-20 22:38 - 000406016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-04-09 19:02 - 2019-03-20 22:38 - 000291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2019-04-09 19:02 - 2019-03-20 22:38 - 000169984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-04-09 19:02 - 2019-03-20 22:38 - 000161280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2019-04-09 19:02 - 2019-03-20 22:38 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2019-04-09 19:02 - 2019-03-20 22:37 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2019-04-09 19:02 - 2019-03-20 22:37 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdk8.sys
2019-04-09 19:02 - 2019-03-20 22:37 - 000062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\intelppm.sys
2019-04-09 19:02 - 2019-03-20 22:37 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\processr.sys
2019-04-09 19:02 - 2019-03-20 22:37 - 000060928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\amdppm.sys
2019-04-09 19:02 - 2019-03-20 22:37 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\npfs.sys
2019-04-09 19:02 - 2019-03-20 22:37 - 000030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2019-04-09 19:02 - 2019-03-20 22:36 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2019-04-09 19:02 - 2019-03-20 22:36 - 000014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2019-04-09 19:02 - 2019-03-20 22:36 - 000007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2019-04-09 19:02 - 2019-03-20 22:36 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2019-04-09 19:02 - 2019-03-20 22:35 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2019-04-09 19:02 - 2019-03-20 22:35 - 000006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 22:35 - 000004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 22:35 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2019-04-09 19:02 - 2019-03-20 22:35 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2019-04-09 19:02 - 2019-03-16 01:11 - 000114408 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2019-04-09 19:02 - 2019-03-16 01:09 - 003247616 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 002072576 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000878080 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000516608 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000026112 _____ (Microsoft Corporation) C:\Windows\system32\oleres.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000025600 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000008704 _____ (Microsoft Corporation) C:\Windows\system32\comcat.dll
2019-04-09 19:02 - 2019-03-16 01:09 - 000008192 _____ (Microsoft Corporation) C:\Windows\system32\msimg32.dll
2019-04-09 19:02 - 2019-03-16 01:08 - 001942016 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2019-04-09 19:02 - 2019-03-16 01:08 - 000070144 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 002368000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 001806848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 001425920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 000583680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 000337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleres.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2019-04-09 19:02 - 2019-03-16 00:58 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimg32.dll
2019-04-09 19:02 - 2019-03-16 00:42 - 000128512 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2019-04-09 19:02 - 2019-03-16 00:40 - 000007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comcat.dll
2019-04-09 19:02 - 2019-03-16 00:38 - 000073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2019-04-09 19:02 - 2019-03-13 12:09 - 000405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2019-04-09 19:02 - 2019-03-13 12:02 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2019-04-09 19:02 - 2019-03-13 11:35 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2019-04-09 19:02 - 2019-03-13 11:35 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2019-04-09 19:02 - 2019-03-12 11:34 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-04-09 19:02 - 2019-03-12 11:34 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-04-09 19:02 - 2019-03-12 11:34 - 000340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 002009600 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 001894912 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 001032192 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 000688128 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 000129536 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2019-04-09 19:02 - 2019-03-11 18:41 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2019-04-09 19:02 - 2019-03-11 18:33 - 001391616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-04-09 19:02 - 2019-03-11 18:33 - 001241088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2019-04-09 19:02 - 2019-03-11 18:33 - 000827904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2019-04-09 19:02 - 2019-03-11 18:33 - 000107520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleprn.dll
2019-04-09 19:02 - 2019-03-11 18:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2019-04-09 19:02 - 2019-03-11 18:33 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2019-04-09 19:02 - 2019-02-21 12:48 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2019-04-09 19:02 - 2019-02-21 12:43 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netbtugc.exe
2019-04-09 19:02 - 2019-02-21 12:37 - 000262656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2019-04-09 19:02 - 2019-02-12 13:08 - 014184448 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2019-04-09 19:02 - 2019-02-12 13:08 - 001867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2019-04-09 19:02 - 2019-02-12 12:58 - 012880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2019-04-09 19:02 - 2019-02-12 12:58 - 001499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2019-04-09 19:02 - 2019-02-08 13:08 - 000002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2019-04-09 19:02 - 2019-02-08 13:00 - 000002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-04 08:37 - 2018-11-15 08:12 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\vlc
2019-05-04 03:43 - 2009-07-14 01:45 - 000020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-05-04 03:43 - 2009-07-14 01:45 - 000020720 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-05-03 14:15 - 2009-07-14 02:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-05-02 23:36 - 2018-11-01 16:32 - 000000000 ____D C:\Users\Gustavo
2019-05-02 18:02 - 2009-07-14 01:45 - 000269640 _____ C:\Windows\system32\FNTCACHE.DAT
2019-05-02 18:02 - 2009-07-14 00:20 - 000000000 ____D C:\Program Files\Windows NT
2019-05-02 18:01 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\inf
2019-05-02 15:51 - 2018-11-01 18:01 - 000058824 _____ C:\Users\Gustavo\AppData\Local\GDIPFONTCACHEV1.DAT
2019-05-02 09:43 - 2018-11-01 16:34 - 000001397 _____ C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2019-04-29 18:00 - 2018-11-11 00:24 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\GlarySoft
2019-04-29 16:21 - 2019-01-18 16:20 - 000004478 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-04-25 18:59 - 2018-11-07 14:00 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Google
2019-04-25 18:55 - 2018-11-02 20:48 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Google
2019-04-25 18:54 - 2018-11-02 20:49 - 000000000 ____D C:\Program Files (x86)\Google
2019-04-25 18:53 - 2018-11-02 20:46 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Deployment
2019-04-25 18:02 - 2018-11-09 01:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2019-04-25 07:50 - 2018-11-09 01:11 - 000000000 ____D C:\Program Files\VS Revo Group
2019-04-22 15:41 - 2018-11-19 11:26 - 000000000 ____D C:\Users\Gustavo\AppData\LocalLow\Temp
2019-04-21 05:21 - 2018-11-09 14:24 - 000000000 ____D C:\Users\Gustavo\Downloads\DESATENDIDOS
2019-04-20 09:41 - 2018-11-01 16:33 - 000000000 ____D C:\Users\Gustavo\AppData\Local\VirtualStore
2019-04-17 12:50 - 2018-11-01 11:25 - 000000000 ____D C:\Windows\Panther
2019-04-16 17:06 - 2018-11-09 14:40 - 000000000 ____D C:\ProgramData\Adobe
2019-04-16 16:53 - 2018-11-02 15:27 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\Adobe
2019-04-16 16:48 - 2018-11-14 15:32 - 000000000 ____D C:\Program Files\Common Files\Adobe
2019-04-16 16:37 - 2018-11-14 15:50 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2019-04-16 15:36 - 2009-07-13 23:34 - 069730304 _____ C:\Windows\system32\config\software.gu.bak
2019-04-16 15:36 - 2009-07-13 23:34 - 012845056 _____ C:\Windows\system32\config\system.gu.bak
2019-04-15 02:03 - 2018-11-09 15:00 - 000000000 ____D C:\Users\Gustavo\AppData\Local\Adobe
2019-04-10 13:42 - 2009-07-14 00:20 - 000000000 ____D C:\Windows\rescache
2019-04-10 13:09 - 2009-07-14 06:31 - 000747396 _____ C:\Windows\system32\perfh00A.dat
2019-04-10 13:09 - 2009-07-14 06:31 - 000158868 _____ C:\Windows\system32\perfc00A.dat
2019-04-10 13:09 - 2009-07-14 02:13 - 001676890 _____ C:\Windows\system32\PerfStringBackup.INI
2019-04-10 03:49 - 2018-11-01 16:34 - 000000383 _____ C:\Users\Gustavo\Desktop\RecentPlaces.lnk
2019-04-10 03:12 - 2018-11-01 16:49 - 000000000 ____D C:\Windows\system32\MRT
2019-04-10 03:03 - 2018-11-01 16:48 - 131129288 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
==================== Files in the root of some directories =======
2019-05-02 23:36 - 2019-05-02 23:36 - 003139968 _____ () C:\Users\Gustavo\ZHPCleaner.exe
2019-05-01 17:53 - 2019-05-01 17:53 - 001895382 _____ () C:\Users\Gustavo\AppData\Local\Freshlab.bin
2019-05-01 17:44 - 2019-05-01 17:44 - 000140800 _____ () C:\Users\Gustavo\AppData\Local\installer.dat
2019-05-01 17:51 - 2019-05-01 19:06 - 000126464 _____ () C:\Users\Gustavo\AppData\Local\lobby.dat
2019-05-01 17:44 - 2019-05-01 18:54 - 000722944 _____ () C:\Users\Gustavo\AppData\Local\sha.db
2019-05-01 19:08 - 2019-05-01 19:08 - 001895382 _____ () C:\Users\Gustavo\AppData\Local\Touchex.bin
==================== SigCheck ===============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2019-05-03 15:29
==================== End of FRST.txt ============================Additional scan result of Farbar Recovery Scan Tool (x64) Version: 04-05.2019
Ran by Gustavo (04-05-2019 12:11:29)
Running from C:\Users\Gustavo\Desktop
Windows 7 Professional Service Pack 1 (X64) (2018-11-01 19:32:40)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrador (S-1-5-21-919363791-4254976807-2822247002-500 - Administrator - Disabled)
Gustavo (S-1-5-21-919363791-4254976807-2822247002-1001 - Administrator - Enabled) => C:\Users\Gustavo
HomeGroupUser$ (S-1-5-21-919363791-4254976807-2822247002-1002 - Limited - Enabled)
Invitado (S-1-5-21-919363791-4254976807-2822247002-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Microsoft Security Essentials (Disabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Microsoft Security Essentials (Disabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Balabolka (HKLM-x32\...\Balabolka) (Version: 2.11.0.591 - Ilya Morozov)
CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version: - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version: - Image-Line)
Glary Utilities PRO 5.100 (HKLM-x32\...\Glary Utilities 5) (Version: 5.100.0.122 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.131 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: - HDS)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version: - Image-Line)
Loquendo TTS: Jorge (Spanish) (HKLM-x32\...\LoqTTS-Jorge_is1) (Version: - )
Microsoft .NET Framework 4.7.2 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mozilla Firefox 66.0.3 (x86 es-ES) (HKLM-x32\...\Mozilla Firefox 66.0.3 (x86 es-ES)) (Version: 66.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 66.0.3 - Mozilla)
Revo Uninstaller 2.0.6 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.6 - VS Revo Group, Ltd.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Swift 3D v6.00 (HKLM-x32\...\{65EEA363-8D47-4268-BBCE-85CD54ACDC15}) (Version: 6.00.0000 - Electric Rain, Inc.)
TTS Enginge - SAPI 5.1 (HKLM-x32\...\{9E7BA2E1-D2FE-427B-8498-3046C40B1770}) (Version: 1.0.0.0 - Beiley Software)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WaveLab 6 (HKLM-x32\...\WaveLabPro) (Version: 6.1.0.340 - Steinberg)
WinRAR 5.60 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.60.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => C:\Program Files (x86)\Balabolka\BFileExt.dll [2013-02-28] (Ilya Morozov) [File not signed]
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2018-03-02] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2018-03-02] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => c:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2018-03-02] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-06-24] (win.rar GmbH -> Alexander Roshal)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2013-02-28 18:31 - 2013-02-28 18:31 - 000360960 _____ (Ilya Morozov) [File not signed] C:\Program Files (x86)\Balabolka\BFileExt.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\Gustavo:.repos [6040026]
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
HKU\S-1-5-21-919363791-4254976807-2822247002-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATTENTION
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-13 23:34 - 2019-05-01 17:45 - 000000202 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 www.sblinfo.pw
127.0.0.1 www.sjjscenter.pw
127.0.0.1 www.eodeysua.com
127.0.0.1 eodeysua.com
127.0.0.1 sjjscenter.pw
127.0.0.1 sblinfo.pw
127.0.0.1 www.redaceivete.pw
127.0.0.1 redaceivete.pw
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-919363791-4254976807-2822247002-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gustavo\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{BAC745AE-F500-44AF-A86F-84C62B660739}C:\program files (x86)\electric rain\swift 3d\version 6.00\program\swift3d.exe] => (Allow) C:\program files (x86)\electric rain\swift 3d\version 6.00\program\swift3d.exe (Electric Rain, Inc.) [File not signed]
FirewallRules: [UDP Query User{3D676BFD-6A1D-497A-9BB3-AB34F2784AFC}C:\program files (x86)\electric rain\swift 3d\version 6.00\program\swift3d.exe] => (Allow) C:\program files (x86)\electric rain\swift 3d\version 6.00\program\swift3d.exe (Electric Rain, Inc.) [File not signed]
FirewallRules: [{02B731AF-6478-4944-A337-24000D1330C9}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
==================== Restore Points =========================
27-04-2019 01:03:17 Windows Update
30-04-2019 10:51:44 Windows Update
02-05-2019 23:33:50 Malwarebytes Anti-Rootkit Restore Point
03-05-2019 12:53:19 Windows Update
03-05-2019 13:33:56 Revo Uninstaller's restore point - Malwarebytes versión 3.7.1.2839
03-05-2019 14:54:17 Microsoft Antimalware Checkpoint
==================== Faulty Device Manager Devices =============
Name: OTNlMDM4Njk4ZD
Description: OTNlMDM4Njk4ZD
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: OTNlMDM4Njk4ZD
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Teredo Tunneling Pseudo-Interface
Description: Adaptador de tunelización Teredo de Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (05/03/2019 02:54:16 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Error del Servicio de instantáneas de volumen: error inesperado al consultar la interfaz IVssWriterCallback. HR = 0x80070005, Acceso denegado.
.
A menudo ocurre por una configuración de seguridad incorrecta en el proceso de escritura o de solicitud.
Operación:
Recopilando datos del escritor
Contexto:
Id. de clase del escritor: {e8132975-6f93-4464-a53e-1050253ae220}
Nombre del escritor: System Writer
Id. de instancia del escritor: {95f7e4b8-90c2-49d6-91d2-1ab38dfd3555}
Error: (05/03/2019 12:49:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: mbamservice.exe, versión: 3.2.0.765, marca de tiempo: 0x5c508d96
Nombre del módulo con errores: ntdll.dll, versión: 6.1.7601.24408, marca de tiempo: 0x5c92f30c
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x0000000000032b04
Id. del proceso con errores: 0x790
Hora de inicio de la aplicación con errores: 0x01d5015e5af2e3de
Ruta de acceso de la aplicación con errores: C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe
Ruta de acceso del módulo con errores: C:\Windows\SYSTEM32\ntdll.dll
Id. del informe: 6f14e2f9-6d56-11e9-b72a-00e04d33834c
Error: (05/02/2019 06:29:21 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa FL.exe, versión 1.1.37.0, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.
Identificador de proceso: 620
Hora de inicio: 01d5012b823d3467
Hora de finalización: 38
Ruta de acceso de la aplicación: C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
Identificador de informe: 113484c8-6d21-11e9-b069-00e04d33834c
Error: (05/02/2019 06:25:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: FL.exe, versión: 1.1.37.0, marca de tiempo: 0x5819c01b
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.1.7601.24408, marca de tiempo: 0x5c92f101
Código de excepción: 0x0eedfade
Desplazamiento de errores: 0x0000c5af
Id. del proceso con errores: 0x5c4
Hora de inicio de la aplicación con errores: 0x01d5012b1cb6bf94
Ruta de acceso de la aplicación con errores: C:\Program Files (x86)\Image-Line\FL Studio 12\FL.exe
Ruta de acceso del módulo con errores: C:\Windows\syswow64\KERNELBASE.dll
Id. del informe: c4e2dc76-6d20-11e9-b069-00e04d33834c
Error: (05/02/2019 06:07:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: mbamtray.exe, versión: 3.1.0.1807, marca de tiempo: 0x5cc0b4e2
Nombre del módulo con errores: Qt5Core.dll, versión: 5.11.1.0, marca de tiempo: 0x5cba0161
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x0018dc19
Id. del proceso con errores: 0x974
Hora de inicio de la aplicación con errores: 0x01d5012abf69610a
Ruta de acceso de la aplicación con errores: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Ruta de acceso del módulo con errores: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
Id. del informe: 50bd4736-6d1e-11e9-b069-00e04d33834c
Error: (05/02/2019 06:06:37 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: The catalog is corrupt.
Detalles:
El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)
Error: (05/02/2019 06:06:36 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: No se puede inicializar el índice.
Detalles:
El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)
Error: (05/02/2019 06:06:36 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: No se puede inicializar la aplicación.
Contexto: aplicación Windows
Detalles:
El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)
System errors:
=============
Error: (05/03/2019 02:16:09 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: El siguiente controlador de inicio del sistema o de inicio del arranque no se cargó correctamente:
OTNlMDM4Njk4ZD
Error: (05/03/2019 02:16:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio symsrv service no pudo iniciarse debido al siguiente error:
El sistema no puede encontrar el archivo especificado.
Error: (05/03/2019 02:16:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio rcdll service no pudo iniciarse debido al siguiente error:
El sistema no puede encontrar el archivo especificado.
Error: (05/03/2019 11:53:29 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: El siguiente controlador de inicio del sistema o de inicio del arranque no se cargó correctamente:
OTNlMDM4Njk4ZD
Error: (05/03/2019 11:53:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio symsrv service no pudo iniciarse debido al siguiente error:
El sistema no puede encontrar el archivo especificado.
Error: (05/03/2019 11:53:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio rcdll service no pudo iniciarse debido al siguiente error:
El sistema no puede encontrar el archivo especificado.
Error: (05/03/2019 12:59:15 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Malwarebytes Service terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 5000 milisegundos: Reiniciar el servicio.
Error: (05/03/2019 12:19:01 AM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)
Description: Se recibió la siguiente alerta irrecuperable: 70.
==================== Memory info ===========================
BIOS: Phoenix Technologies, LTD 6.00 PG 06/14/2007
Motherboard: BIOSTAR Group P4M90-M7
Processor: Intel(R) Pentium(R) 4 CPU 2.80GHz
Percentage of memory in use: 95%
Total physical RAM: 1982.49 MB
Available physical RAM: 84.46 MB
Total Virtual: 4307.98 MB
Available Virtual: 346.77 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:148.95 GB) (Free:96.46 GB) NTFS
Drive e: (Nuevo vol) (Fixed) (Total:465.76 GB) (Free:338.91 GB) NTFS
\\?\Volume{07707019-ddfd-11e8-8cdd-806e6f6e6963}\ (Reservado para el sistema) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: B20A1251)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=42)
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 149 GB) (Disk ID: 1C1230CE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=148.9 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================Bien… y ahora sigue estos pasos, MUY Importante ~ Realiza una copia de seguridad del registro :
-
Para hacerlo descarga Delfix en tu escritorio.
-
Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona "Ejecutar como Administrador.")
-
Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO
-
Pulsar en Run.
Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.
En el equipo con los demas programas cerrados:
Inicio >>> Ejecutar >>>Escribes notepad.exe.
Ahora copia y pega estos archivos dentro del Notepad:
Start
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
S2 rcdll; C:\Users\Gustavo\AppData\Local\Temp\rcdll.exe [X] <==== ATTENTION
S2 symsrv; C:\Program Files\windows nt\symsrv.exe [X] <==== ATTENTION
S1 OTNlMDM4Njk4ZD; \??\C:\Windows\system32\drivers\OTNlMDM4Njk4ZD [X]
2019-05-01 17:54 - 2019-05-01 17:55 - 000000000 ____D C:\ProgramData\{2945144D-D6D5-0D47-ADCB-C481AD2C9DD0}
2019-05-01 17:53 - 2019-05-01 17:53 - 000000000 ____D C:\ProgramData\{13174CBB-8E23-3715-5B93-96BB5B74CFEA}
2019-05-01 17:51 - 2019-05-01 19:06 - 000126464 _____ C:\Users\Gustavo\AppData\Local\lobby.dat
2019-05-01 17:48 - 2019-05-01 17:48 - 000000000 ____D C:\Windows\SysWOW64\vvouqizo
2019-05-01 17:44 - 2019-05-02 09:40 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\rurizotz3p1
2019-05-01 17:44 - 2019-05-01 17:44 - 000140800 _____ C:\Users\Gustavo\AppData\Local\installer.dat
2019-05-01 17:44 - 2019-05-01 17:44 - 000000000 ____D C:\ProgramData\fb
2019-05-01 17:44 - 2019-05-01 17:44 - 000000000 ____D C:\Program Files (x86)\Seed Trade
2019-05-01 17:43 - 2019-05-02 09:40 - 000000000 ____D C:\Program Files (x86)\Kyo
2019-05-01 17:43 - 2019-05-01 17:43 - 000000000 ____D C:\Program Files (x86)\foldershare
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
Lo guardas bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.<<
Nota: Es importante que la Hta Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no no trabajara.
-
Y ahora usa esta Faq de Windows ¿Cómo iniciar Windows en Modo Seguro?, para trabajar desde ese modo de windows. (Usa el Metodo 1 y si no puedes, usa el Metodo 2)
-
Ejecutas Frst.exe.
-
Presionas el botón Fix y aguardas a que termine.
-
La Herramienta guardara el reporte en tu escritorio (Fixlog.txt).
Lo pegas en tu próxima respuesta, comentado como va el pc
Fix result of Farbar Recovery Scan Tool (x64) Version: 04-05.2019 01
Ran by Gustavo (04-05-2019 18:09:42) Run:3
Running from C:\Users\Gustavo\Desktop
Loaded Profiles: Gustavo (Available Profiles: Gustavo)
Boot Mode: Safe Mode (with Networking)
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
SearchScopes: HKLM-x32 -> DefaultScope value is missing
S2 rcdll; C:\Users\Gustavo\AppData\Local\Temp\rcdll.exe [X] <==== ATTENTION
S2 symsrv; C:\Program Files\windows nt\symsrv.exe [X] <==== ATTENTION
S1 OTNlMDM4Njk4ZD; \??\C:\Windows\system32\drivers\OTNlMDM4Njk4ZD [X]
2019-05-01 17:54 - 2019-05-01 17:55 - 000000000 ____D C:\ProgramData\{2945144D-D6D5-0D47-ADCB-C481AD2C9DD0}
2019-05-01 17:53 - 2019-05-01 17:53 - 000000000 ____D C:\ProgramData\{13174CBB-8E23-3715-5B93-96BB5B74CFEA}
2019-05-01 17:51 - 2019-05-01 19:06 - 000126464 _____ C:\Users\Gustavo\AppData\Local\lobby.dat
2019-05-01 17:48 - 2019-05-01 17:48 - 000000000 ____D C:\Windows\SysWOW64\vvouqizo
2019-05-01 17:44 - 2019-05-02 09:40 - 000000000 ____D C:\Users\Gustavo\AppData\Roaming\rurizotz3p1
2019-05-01 17:44 - 2019-05-01 17:44 - 000140800 _____ C:\Users\Gustavo\AppData\Local\installer.dat
2019-05-01 17:44 - 2019-05-01 17:44 - 000000000 ____D C:\ProgramData\fb
2019-05-01 17:44 - 2019-05-01 17:44 - 000000000 ____D C:\Program Files (x86)\Seed Trade
2019-05-01 17:43 - 2019-05-02 09:40 - 000000000 ____D C:\Program Files (x86)\Kyo
2019-05-01 17:43 - 2019-05-01 17:43 - 000000000 ____D C:\Program Files (x86)\foldershare
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************
Error: Restore point can only be created in normal mode.
Processes closed successfully.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => removed successfully
HKLM\SOFTWARE\Policies\Google => removed successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\System\CurrentControlSet\Services\rcdll => removed successfully
rcdll => service removed successfully
HKLM\System\CurrentControlSet\Services\symsrv => removed successfully
symsrv => service removed successfully
HKLM\System\CurrentControlSet\Services\OTNlMDM4Njk4ZD => removed successfully
OTNlMDM4Njk4ZD => service removed successfully
C:\ProgramData\{2945144D-D6D5-0D47-ADCB-C481AD2C9DD0} => moved successfully
C:\ProgramData\{13174CBB-8E23-3715-5B93-96BB5B74CFEA} => moved successfully
C:\Users\Gustavo\AppData\Local\lobby.dat => moved successfully
C:\Windows\SysWOW64\vvouqizo => moved successfully
C:\Users\Gustavo\AppData\Roaming\rurizotz3p1 => moved successfully
C:\Users\Gustavo\AppData\Local\installer.dat => moved successfully
C:\ProgramData\fb => moved successfully
C:\Program Files (x86)\Seed Trade => moved successfully
C:\Program Files (x86)\Kyo => moved successfully
C:\Program Files (x86)\foldershare => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
========= RemoveProxy: =========
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
HKU\S-1-5-21-919363791-4254976807-2822247002-1001\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\S-1-5-21-919363791-4254976807-2822247002-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-919363791-4254976807-2822247002-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
========= End of RemoveProxy: =========
========= netsh winsock reset =========
El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.
========= End of CMD: =========
========= ipconfig /renew =========
Configuraci¢n IP de Windows
Adaptador de Ethernet Conexi¢n de rea local:
Sufijo DNS espec¡fico para la conexi¢n. . : utopia.net
V¡nculo: direcci¢n IPv6 local. . . : fe80::1598:ff32:35cf:4ae0%10
Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.0.94
M scara de subred . . . . . . . . . . . . : 255.255.255.0
Puerta de enlace predeterminada . . . . . : 192.168.0.1
Adaptador de t£nel isatap.utopia.net:
Estado de los medios. . . . . . . . . . . : medios desconectados
Sufijo DNS espec¡fico para la conexi¢n. . :
========= End of CMD: =========
========= ipconfig /flushdns =========
Configuraci¢n IP de Windows
Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.
========= End of CMD: =========
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
Unable to connect to BITS - 0x8007042c
========= End of CMD: =========
========= netsh advfirewall reset =========
Aceptar
========= End of CMD: =========
========= netsh advfirewall set allprofiles state ON =========
Aceptar
========= End of CMD: =========
========= netsh int ipv4 reset =========
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.
========= End of CMD: =========
========= netsh int ipv6 reset =========
No hay valores configurados por el usuario para restablecer.
========= End of CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 15846498 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 1621948542 B
Edge => 0 B
Chrome => 25250223 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 9802 B
Gustavo => 58741279 B
RecycleBin => 5292 B
EmptyTemp: => 1.6 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 18:10:28 ====Ahora comentar como va todo
Hasta ahora perfecto Miguel, solo que luego de que el FRST me pidió que reiniciase, a poco de cargar el sistema aparece un aviso del Security Essentials alertando de que las amenazas han sido eliminadas… como queriendo llevarse las palmas por el trabajo que hicieron los otros programas
Pruébalo 24 o 48 horas y me dices
OK. Que sean 48 entonces, pero pinta bien.
Me doy por altamente satisfecho; este PC es muy pobre, pero es lo que hay hoy día. Por lo demás, creo que ya está limpio y voy a poder entregar el trabajo. Te agradezco muchísimo <3
Para eliminar las herramientas usadas en la desinfección, realizas:
-
Descargas y Ejecutas >> Delfix, en tu escritorio.
-
Doble clic para ejecutarlo.(Si usas Windows Vista/7 /8 /10,presiona clic derecho y selecciona >>;Ejecutar como Administrador.)
-
Marca solamente la casilla Remove disinfection tools
-
Pulsar en Run.
Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.
Si queda alguna herramienta, la desinstalas desde panel de Windows y aquellas que no estén listadas, se eliminan directamente.
Me alegro de haberte podido ayudar! 
TEMA SOLUCIONADO
Este tema se cerró automáticamente 2 días después del último post. No se permiten nuevas respuestas.