Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22.04.2019
Ran by jjap5 (administrator) on DESKTOP-Q6IDI0J (Micro-Star International Co., Ltd. MS-7A34) (23-04-2019 11:26:00)
Running from C:\Users\jjap5\Desktop\Scannear
Loaded Profiles: jjap5 (Available Profiles: jjap5)
Platform: Windows 10 Home Version 1809 17763.437 (X64) Language: Español (España, internacional)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Code Sector -> Code Sector) C:\Program Files\TeraCopy\TeraCopyService.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(SUPERAntiSpyware.com -> SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Advanced Micro Devices, Inc.) [File not signed] C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1904.1-0\MsMpEng.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19032.731.0_x64__8wekyb3d8bbwe\YourPhone.exe
() [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.42.60.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Lanzhou Itanium Software Technology Co., Ltd. -> Zbshareware Lab) C:\Program Files (x86)\USB Disk Security\USBGuard.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235936 2017-11-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [585336 2019-02-01] (Acronis International GmbH -> )
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [4426560 2019-04-03] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26254008 2019-02-14] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2019-02-01] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4848280 2019-02-01] (Acronis International GmbH -> )
HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [695528 2015-01-31] (Lanzhou Itanium Software Technology Co., Ltd. -> Zbshareware Lab)
HKU\S-1-5-21-1819132632-2593063688-1292532904-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1819132632-2593063688-1292532904-1001\...\Run: [Spotify] => C:\Users\jjap5\AppData\Roaming\Spotify\Spotify.exe [25901288 2019-04-16] (Spotify AB -> Spotify Ltd)
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-19] (Fox Magic Software) [File not signed]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\73.0.62.51\Installer\chrmstp.exe [2019-04-16] (Brave Software, Inc.) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
CHR HKU\S-1-5-21-1819132632-2593063688-1292532904-1001\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {056E4A8C-977F-4CB9-8B18-78194FB75DDC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {15FF5E75-4A8C-4B95-B0F6-1D0A094BEC20} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-04-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {16C32D7E-C1DE-4318-963C-F68A6378B52A} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1179648 2019-03-22] () [File not signed]
Task: {34443FAF-B79B-4A18-AA4F-1BE362F2C806} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [154056 2019-04-16] (Brave Software, Inc. -> BraveSoftware Inc.) <==== ATTENTION
Task: {40B7E046-D2A2-44D7-A5A5-B6C1AE0630CA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {51481FAF-A96C-44AD-9765-2A38369AEF55} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16509040 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5D1C83FA-F7CA-4C91-B0CE-BB552D2A1537} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\RadeonInstaller.exe [29305736 2018-10-12] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {6CB403A8-026E-45ED-9C3B-B7F9378B1A45} - System32\Tasks\AMHelper => C:\Program Files (x86)\Zemana\AntiMalware\AntiMalware.exe
Task: {7A9CF946-A10A-4EAB-AA10-AE0342E92611} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [1146048 2018-10-05] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co. Ltd.)
Task: {99102FA6-0A49-4D0C-88E3-42E500665A3F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1CC1538-481A-4730-8312-FEBA1D18B32A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MpCmdRun.exe [480352 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {B116774F-3D64-4B17-AE16-8FB92A2C7912} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <==== ATTENTION
Task: {BDFA3744-60A2-42F4-B4A9-D7C06E037AD4} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [154056 2019-04-16] (Brave Software, Inc. -> BraveSoftware Inc.) <==== ATTENTION
Task: {C7F1C1DF-DDF7-446A-81AF-2ADB5D036004} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {E44078EA-F6E8-4C7C-BAB2-4A88118C96B0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-04-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {F1E47C07-BA06-473E-AAA9-8122181767E2} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe <==== ATTENTION
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\..\Interfaces\{10372de3-b85a-4485-95e4-5c68f3c2a721}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{5ef195ef-1513-43ac-b7e7-ed9ed2910979}: [DhcpNameServer] 80.58.61.250 80.58.61.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1819132632-2593063688-1292532904-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-1819132632-2593063688-1292532904-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-1819132632-2593063688-1292532904-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FireFox:
========
FF DefaultProfile: epj57wvx.default
FF ProfilePath: C:\Users\jjap5\AppData\Roaming\Mozilla\Firefox\Profiles\epj57wvx.default [2019-04-23]
FF user.js: detected! => C:\Users\jjap5\AppData\Roaming\Mozilla\Firefox\Profiles\epj57wvx.default\user.js [2019-04-16]
FF Homepage: Mozilla\Firefox\Profiles\epj57wvx.default -> hxxp://www.adslzone.net/
FF Extension: (uBlock Origin) - C:\Users\jjap5\AppData\Roaming\Mozilla\Firefox\Profiles\epj57wvx.default\Extensions\[email protected] [2019-04-16]
FF Extension: (Malwarebytes Browser Extension) - C:\Users\jjap5\AppData\Roaming\Mozilla\Firefox\Profiles\epj57wvx.default\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2019-04-16]
FF Extension: (Video DownloadHelper) - C:\Users\jjap5\AppData\Roaming\Mozilla\Firefox\Profiles\epj57wvx.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2019-04-16]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2019-03-28] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-04-16] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2019-04-16] (Brave Software, Inc. -> BraveSoftware Inc.)
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-31] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2725920 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [255512 2015-08-09] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-04] (Advanced Micro Devices, Inc.) [File not signed]
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [154056 2019-04-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [154056 2019-04-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-04-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-04-16] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\Windows\System32\DbxSvc.exe [51024 2019-04-03] (Dropbox, Inc -> Dropbox, Inc.)
S3 HauppaugeTVServer; C:\Program Files (x86)\WinTV\HCWTVServer.exe [823296 2008-06-02] (Hauppauge Computer Works) [File not signed]
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-02-01] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1745344 2019-02-01] (Acronis International GmbH -> )
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2191032 2018-12-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [110416 2017-05-05] (Code Sector -> Code Sector)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [692992 2019-04-16] (Oracle Corporation -> Oracle Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\NisSrv.exe [3851264 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1904.1-0\MsMpEng.exe [118144 2019-04-23] (Microsoft Corporation -> Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 amdgpio2; C:\Windows\System32\drivers\amdgpio2.sys [34568 2018-10-03] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [24288 2018-10-02] (AMD PMP-PE CB Code Signer v20160415 -> Advanced Micro Devices, Inc)
S0 amdkmafd; C:\Windows\System32\drivers\amdkmafd.sys [31992 2015-06-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [21631512 2015-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [673816 2015-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 AMDPCIDev; C:\Windows\System32\drivers\AMDPCIDev.sys [31704 2018-10-03] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R0 amdpsp; C:\Windows\System32\DRIVERS\amdpsp.sys [137688 2018-10-02] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc. )
R3 AtiHDAudioService; C:\Windows\system32\drivers\AtihdWT6.sys [102912 2015-07-22] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [34496 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [30416 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R2 file_protector; C:\Windows\System32\DRIVERS\file_protector.sys [569392 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [379664 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R1 HCW88AUD; C:\Windows\system32\drivers\hcw88aud.sys [15744 2008-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Hauppauge Computer Works, Inc)
R3 HCW88BDA; C:\Windows\system32\drivers\hcw88bda.sys [214528 2008-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Hauppauge Computer Works, Inc)
R3 HCW88TSE; C:\Windows\system32\drivers\hcw88tse.sys [338304 2008-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Hauppauge Computer Works, Inc)
R3 HCW88TUNE; C:\Windows\system32\drivers\hcw88tun.sys [107392 2008-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Hauppauge Computer Works, Inc.)
R3 hcw88vid; C:\Windows\system32\drivers\hcw88vid.sys [437888 2008-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Hauppauge Computer Works, Inc)
R3 HCW88XBAR; C:\Windows\system32\drivers\HCW88BAR.sys [21120 2008-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Hauppauge Computer Works, Inc.)
S3 NPF; C:\Windows\System32\drivers\NPF.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1122200 2019-04-16] (Realtek Semiconductor Corp. -> Realtek )
S3 RtlWlanu_OldIC; C:\Windows\System32\drivers\rtwlanu_oldIC.sys [3814400 2018-09-15] (Microsoft Windows -> Realtek Semiconductor Corporation )
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 secnvme; C:\Windows\System32\drivers\secnvme.sys [134120 2018-02-13] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [1310552 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\system32\DRIVERS\tib_mounter.sys [213336 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\Windows\system32\DRIVERS\tnd.sys [690520 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [236560 2019-04-16] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [247952 2019-04-16] (Oracle Corporation -> Oracle Corporation)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331976 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [243472 2019-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-04-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [344544 2019-04-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [60896 2019-04-23] (Microsoft Windows -> Microsoft Corporation)
S1 amsdk; \??\C:\Windows\system32\drivers\amsdk.sys [X]
S3 EuGdiDrv; \SystemRoot\system32\EuGdiDrv.sys [X]
S3 NTIOLib_DVDSetup; \??\G:\NTIOLib_X64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-04-23 11:25 - 2019-04-23 11:26 - 000000000 ____D C:\FRST
2019-04-23 11:20 - 2019-04-23 11:20 - 000000515 _____ C:\DelFix.txt
2019-04-22 18:11 - 2019-04-22 18:11 - 000008241 _____ C:\Users\jjap5\Desktop\CRISTAL SECURITY.xml
2019-04-22 17:28 - 2019-04-22 17:28 - 000000266 _____ C:\Users\jjap5\Desktop\ESED.txt
2019-04-22 17:06 - 2019-04-22 17:06 - 000000000 ____D C:\Users\jjap5\AppData\Local\ElevatedDiagnostics
2019-04-22 16:03 - 2019-04-22 16:03 - 000002124 _____ C:\Users\jjap5\Desktop\mbar-log-2019-04-22 (15-56-41).txt
2019-04-22 15:55 - 2019-04-22 15:55 - 000001549 _____ C:\Users\jjap5\Desktop\Malwarebytes.txt
2019-04-22 15:38 - 2019-04-22 15:38 - 000000000 ____D C:\Users\jjap5\AppData\Local\mbamtray
2019-04-22 15:38 - 2019-04-22 15:38 - 000000000 ____D C:\Users\jjap5\AppData\Local\mbam
2019-04-22 15:24 - 2019-04-22 15:56 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\46469569.sys
2019-04-22 14:50 - 2019-04-23 10:46 - 000000000 ____D C:\Program Files\TMeter
2019-04-22 14:50 - 2018-03-04 11:24 - 000054376 _____ (Trafficreg Software) C:\Windows\system32\Drivers\tmeter.sys
2019-04-21 16:23 - 2019-04-21 16:28 - 000000282 __RSH C:\ProgramData\ntuser.pol
2019-04-21 12:44 - 2019-04-21 12:45 - 000000000 ____D C:\ProgramData\TEMP
2019-04-20 20:33 - 2019-04-20 20:34 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\TeraCopy
2019-04-20 20:33 - 2019-04-20 20:33 - 000000000 ___HD C:\Users\jjap5\AppData\Roaming\Obsidium
2019-04-20 20:33 - 2019-04-20 20:33 - 000000000 ___HD C:\Users\jjap5\.obs32
2019-04-20 19:09 - 2019-04-20 19:09 - 000000000 ____D C:\Users\jjap5\AppData\Local\ESET
2019-04-20 18:57 - 2019-04-20 18:33 - 000004788 _____ C:\Windows\system32\Drivers\etc\Hosts(2019-04-20 165746)
2019-04-20 18:55 - 2019-04-23 10:45 - 000462450 _____ C:\Windows\ntbtlog.txt
2019-04-20 18:55 - 2019-04-23 10:41 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-04-20 18:38 - 2019-04-23 10:45 - 000027985 _____ C:\Windows\ZAM.krnl.trace
2019-04-20 18:38 - 2019-04-23 10:45 - 000000000 ____D C:\Users\jjap5\AppData\Local\AMSDK
2019-04-20 18:38 - 2019-04-20 18:38 - 000003558 _____ C:\Windows\System32\Tasks\AMHelper
2019-04-20 18:38 - 2019-04-20 18:38 - 000000000 ____D C:\Users\jjap5\AppData\Local\Zemana
2019-04-20 18:38 - 2019-04-20 18:38 - 000000000 ____D C:\Program Files (x86)\Zemana
2019-04-20 18:28 - 2019-04-20 18:37 - 000000000 ____D C:\ProgramData\RogueKiller
2019-04-20 16:58 - 2019-04-20 16:58 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Crystal Security
2019-04-20 16:57 - 2019-04-20 16:57 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Zbshareware Lab
2019-04-20 16:48 - 2019-04-23 10:43 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-04-20 16:48 - 2019-04-22 16:01 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2019-04-20 16:48 - 2019-04-20 16:48 - 000255928 _____ (Malwarebytes) C:\Windows\system32\Drivers\7143829D.sys
2019-04-20 14:46 - 2019-04-20 14:46 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\ImgBurn
2019-04-20 14:44 - 2019-04-20 14:44 - 000000000 ____D C:\Users\jjap5\AppData\Local\FreemakeVideoConverter
2019-04-19 14:09 - 2019-04-19 14:09 - 000003480 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2019-04-19 14:09 - 2019-04-19 14:09 - 000003356 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2019-04-18 13:09 - 2019-04-18 13:09 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Brave Giant
2019-04-18 13:02 - 2019-04-18 13:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2019-04-18 12:42 - 2019-04-18 12:42 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2019-04-18 12:42 - 2019-04-18 12:42 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-04-18 12:42 - 2019-04-18 12:42 - 000000000 ____D C:\Program Files\MSBuild
2019-04-18 12:42 - 2019-04-18 12:42 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-04-18 12:42 - 2019-04-18 12:42 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-04-18 12:42 - 2018-09-09 17:17 - 001167960 _____ (Microsoft Corporation) C:\Windows\system32\PresentationNative_v0300.dll
2019-04-18 12:42 - 2018-09-09 17:16 - 000126064 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2019-04-18 12:42 - 2018-09-09 17:16 - 000035440 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2019-04-18 12:42 - 2018-08-29 17:56 - 000780376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationNative_v0300.dll
2019-04-18 12:42 - 2018-08-29 17:56 - 000104560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-04-18 12:42 - 2018-08-29 17:56 - 000036896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2019-04-18 12:34 - 2019-04-18 12:34 - 000001116 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCEnhancer.lnk
2019-04-18 12:34 - 2019-04-18 12:34 - 000000000 ____D C:\Program Files (x86)\CCEnhancer
2019-04-18 11:54 - 2019-04-18 11:54 - 000000000 ____D C:\Windows\System32\Tasks\WPD
2019-04-18 11:54 - 2019-04-18 11:54 - 000000000 ____D C:\Windows\System32\Tasks\Lenovo
2019-04-18 11:54 - 2019-04-18 11:54 - 000000000 ____D C:\Users\jjap5\AppData\Local\Safer-Networking Ltd
2019-04-17 18:52 - 2019-04-17 18:52 - 000000000 ____D C:\Users\jjap5\AppData\Local\cache
2019-04-17 13:10 - 2019-04-17 13:22 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\WhatsApp
2019-04-17 13:10 - 2019-04-17 13:10 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2019-04-17 13:09 - 2019-04-17 13:10 - 000000000 ____D C:\Users\jjap5\AppData\Local\WhatsApp
2019-04-17 10:32 - 2019-04-23 11:26 - 000000000 ___RD C:\Users\jjap5\Desktop\Scannear
2019-04-17 10:30 - 2019-04-17 10:30 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\SUPERAntiSpyware.com
2019-04-17 10:25 - 2019-04-17 10:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Motorola Driver Installer
2019-04-17 10:25 - 2019-04-17 10:25 - 000000000 ____D C:\Program Files\Motorola Inc
2019-04-17 10:25 - 2019-04-17 10:25 - 000000000 ____D C:\Program Files\Common Files\Motorola Shared
2019-04-17 10:25 - 2019-04-17 10:25 - 000000000 ____D C:\Program Files (x86)\Motorola
2019-04-17 10:15 - 2019-04-17 10:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2019-04-16 19:53 - 2019-04-16 19:53 - 000466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2019-04-16 19:53 - 2019-04-16 19:53 - 000444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2019-04-16 19:53 - 2019-04-16 19:53 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2019-04-16 19:53 - 2019-04-16 19:53 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2019-04-16 19:53 - 2019-04-16 19:53 - 000000000 ____D C:\Program Files (x86)\OpenAL
2019-04-16 19:17 - 2019-04-16 19:18 - 000000000 ____D C:\MyVideos
2019-04-16 19:17 - 2019-04-16 19:17 - 000001986 _____ C:\Windows\HCWPNP.INI
2019-04-16 19:17 - 2019-04-16 19:17 - 000000209 _____ C:\Windows\ODBCINST.INI
2019-04-16 19:17 - 2019-04-16 19:17 - 000000135 _____ C:\Windows\ODBC.INI
2019-04-16 19:17 - 2019-04-16 19:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hauppauge WinTV
2019-04-16 19:17 - 2019-04-16 19:17 - 000000000 ____D C:\Program Files (x86)\WinTV
2019-04-16 19:17 - 2008-06-06 11:24 - 000413696 _____ () C:\Windows\SysWOW64\HCWChMgr.ocx
2019-04-16 19:17 - 2008-06-02 15:55 - 000046680 _____ C:\Windows\SysWOW64\HCWTVServer.tlb
2019-04-16 19:17 - 2008-05-29 17:00 - 000806985 ____N (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwtvwnd.dll
2019-04-16 19:17 - 2008-04-29 10:36 - 000204871 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\HCWPsiParser.ax
2019-04-16 19:17 - 2008-04-22 14:53 - 000163840 _____ () C:\Windows\SysWOW64\hcwChDB.dll
2019-04-16 19:17 - 2008-03-26 14:54 - 000030720 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwWinTVCI.dll
2019-04-16 19:17 - 2008-03-20 17:50 - 000282680 ____N (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwpnp32.dll
2019-04-16 19:17 - 2008-03-11 18:36 - 000106552 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwi2c32.dll
2019-04-16 19:17 - 2008-02-26 15:32 - 000118851 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwNowNext.ax
2019-04-16 19:17 - 2007-12-04 11:13 - 000073728 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwSnap.ax
2019-04-16 19:17 - 2007-12-04 10:05 - 000053248 _____ (DScaler Project, see hxxp://www.dscaler.org/) C:\Windows\SysWOW64\HCWdlace.ax
2019-04-16 19:17 - 2007-09-18 18:24 - 000213066 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwdvbsubtitles.ax
2019-04-16 19:17 - 2006-10-10 17:47 - 000036921 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwutl32.dll
2019-04-16 19:17 - 2006-09-13 11:13 - 000023304 _____ C:\Windows\SysWOW64\HcwChDB.tlb
2019-04-16 19:17 - 2006-08-23 10:26 - 000081920 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwSplit.ax
2019-04-16 19:17 - 2006-07-21 15:07 - 000176197 _____ (Hauppauge Computer Works Inc.) C:\Windows\SysWOW64\hcwmux.ax
2019-04-16 19:17 - 2006-05-25 08:59 - 000073728 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwFRead.ax
2019-04-16 19:17 - 2006-05-08 09:55 - 000118784 _____ (Hauppauge Computer Works Inc) C:\Windows\SysWOW64\HCWSched.ocx
2019-04-16 19:17 - 2006-05-08 09:55 - 000040960 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\HcwTvTvOCX.ocx
2019-04-16 19:17 - 2006-05-08 09:55 - 000028672 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwsched.dll
2019-04-16 19:17 - 2006-05-08 09:54 - 000647872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSComCt2.ocx
2019-04-16 19:17 - 2006-05-08 09:54 - 000244232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsFlxGrd.ocx
2019-04-16 19:17 - 2006-05-08 09:54 - 000204800 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\Mdcustoms.ocx
2019-04-16 19:17 - 2006-05-08 09:54 - 000132880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Msinet.ocx
2019-04-16 19:17 - 2006-05-08 09:54 - 000089600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCAL.OCX
2019-04-16 19:17 - 2006-05-08 09:54 - 000073792 _____ (Hauppauge Computer Works, Inc) C:\Windows\SysWOW64\CHSUITE.OCX
2019-04-16 19:17 - 2006-05-08 09:54 - 000065536 _____ C:\Windows\SysWOW64\dmcrypto.dll
2019-04-16 19:17 - 2006-05-08 09:54 - 000053248 _____ (Hauppauge) C:\Windows\SysWOW64\MDCustomPanels.ocx
2019-04-16 19:17 - 2006-02-13 15:02 - 000057344 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwFWrit.ax
2019-04-16 19:17 - 2006-01-25 17:38 - 000069632 _____ (Hauppauge Computer Works ) C:\Windows\SysWOW64\3DES.dll
2019-04-16 19:17 - 2005-03-30 14:16 - 000069632 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwPP2PP.ocx
2019-04-16 19:17 - 2004-12-20 12:11 - 000213050 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwChan.dll
2019-04-16 19:17 - 2004-09-10 15:58 - 000094208 _____ (Hauppuage Computer Works) C:\Windows\SysWOW64\hcwsstereo.ax
2019-04-16 19:17 - 2004-02-13 15:58 - 000065536 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwDlg.ocx
2019-04-16 19:17 - 2004-01-26 14:49 - 000090190 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\Bt848WST.DLL
2019-04-16 19:17 - 2003-11-07 12:45 - 000106559 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwTVDlg.dll
2019-04-16 19:17 - 2003-05-06 13:13 - 000081920 _____ (Hauppauge Computer Works, Inc.) C:\Windows\SysWOW64\hcwNull.ax
2019-04-16 19:17 - 2001-07-19 08:44 - 000393216 _____ (Snowbound Software Corporation (www.Snowbnd.com)) C:\Windows\SysWOW64\hcwsnbd9.dll
2019-04-16 19:17 - 1999-04-27 16:26 - 000011264 _____ (Hauppauge Computer Works) C:\Windows\SysWOW64\hcwhook.dll
2019-04-16 19:17 - 1998-05-22 00:00 - 000137736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\COMDLG32.OCX
2019-04-16 19:16 - 2019-04-16 19:16 - 000000000 ____D C:\Hauppauge
2019-04-16 19:16 - 2008-04-18 19:27 - 000338304 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88tse.sys
2019-04-16 19:16 - 2008-04-18 19:27 - 000214528 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88bda.sys
2019-04-16 19:16 - 2008-04-18 19:27 - 000133632 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88prx.ax
2019-04-16 19:16 - 2008-04-18 19:27 - 000107392 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88tun.sys
2019-04-16 19:16 - 2008-04-18 19:27 - 000015872 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88rc5.sys
2019-04-16 19:16 - 2008-04-18 19:26 - 000437888 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88vid.sys
2019-04-16 19:16 - 2008-04-18 19:26 - 000021120 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\Drivers\hcw88bar.sys
2019-04-16 19:16 - 2008-04-18 19:26 - 000015744 _____ (Hauppauge Computer Works, Inc) C:\Windows\system32\Drivers\hcw88aud.sys
2019-04-16 19:16 - 2006-09-08 12:37 - 000147456 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwecppp.ax
2019-04-16 19:16 - 2006-09-08 12:36 - 000099328 _____ (Hauppauge Computer Works, Inc.) C:\Windows\system32\hcwcp.ax
2019-04-16 19:13 - 2019-04-16 19:13 - 000000000 ____D C:\Program Files\FolderPainter
2019-04-16 19:04 - 2019-04-20 14:52 - 000000000 ___RD C:\Users\jjap5\Desktop\Mantenimiento
2019-04-16 18:52 - 2019-04-16 18:52 - 000002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2019-04-16 18:38 - 2019-04-16 18:52 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2019-04-16 18:38 - 2019-04-16 18:39 - 000000000 ____D C:\Users\jjap5\AppData\Local\BraveSoftware
2019-04-16 18:38 - 2019-04-16 18:38 - 000003436 _____ C:\Windows\System32\Tasks\BraveSoftwareUpdateTaskMachineUA
2019-04-16 18:38 - 2019-04-16 18:38 - 000003312 _____ C:\Windows\System32\Tasks\BraveSoftwareUpdateTaskMachineCore
2019-04-16 18:35 - 2019-04-16 18:35 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave Software
2019-04-16 18:30 - 2019-04-18 12:49 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\brave
2019-04-16 18:30 - 2019-04-17 13:10 - 000000000 ____D C:\Users\jjap5\AppData\Local\SquirrelTemp
2019-04-16 18:30 - 2019-04-16 18:35 - 000000000 ____D C:\Users\jjap5\AppData\Local\Brave
2019-04-16 18:30 - 2019-04-16 18:30 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave Inc
2019-04-16 18:28 - 2019-04-16 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2019-04-16 18:28 - 2019-04-16 18:28 - 000000000 ____D C:\Program Files (x86)\GameTop.com
2019-04-16 17:49 - 2019-04-16 17:49 - 000001342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Update Pro.lnk
2019-04-16 17:49 - 2019-04-16 17:49 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\GlarySoft
2019-04-16 17:49 - 2019-04-16 17:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft
2019-04-16 17:49 - 2019-04-16 17:49 - 000000000 ____D C:\Program Files (x86)\Glarysoft
2019-04-16 17:38 - 2019-04-16 17:38 - 000001836 _____ C:\Users\jjap5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2019-04-16 17:38 - 2019-04-16 17:38 - 000000000 ____D C:\Users\jjap5\AppData\Local\Spotify
2019-04-16 17:37 - 2019-04-16 17:38 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Spotify
2019-04-16 17:35 - 2019-04-21 12:44 - 000000000 ____D C:\Program Files (x86)\SpywareBlaster
2019-04-16 17:35 - 2019-04-16 17:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster
2019-04-16 17:35 - 2012-05-02 12:17 - 001070152 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCTL.OCX
2019-04-16 17:35 - 2009-03-24 13:52 - 000129872 ____N (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2019-04-16 17:31 - 2019-04-20 19:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Disk Security
2019-04-16 17:31 - 2019-04-20 19:16 - 000000000 ____D C:\Program Files (x86)\USB Disk Security
2019-04-16 17:28 - 2019-04-20 16:13 - 000000000 ____D C:\Users\jjap5\.VirtualBox
2019-04-16 17:28 - 2019-04-18 13:02 - 000000000 ____D C:\ProgramData\VirtualBox
2019-04-16 17:28 - 2019-04-16 17:28 - 000000000 ____D C:\Program Files\Oracle
2019-04-16 17:28 - 2019-04-16 09:22 - 001023528 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2019-04-16 17:28 - 2019-04-16 09:22 - 000186696 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2019-04-16 17:24 - 2019-04-20 19:44 - 000000000 ____D C:\ProgramData\Freemake
2019-04-16 17:24 - 2019-04-20 19:44 - 000000000 ____D C:\Program Files (x86)\Freemake
2019-04-16 17:24 - 2019-04-20 14:44 - 000000000 ____D C:\Users\jjap5\Documents\Freemake
2019-04-16 17:21 - 2019-04-16 17:21 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2019-04-16 17:16 - 2019-04-16 17:16 - 000000000 ____D C:\Program Files (x86)\SmartDefender
2019-04-16 17:15 - 2019-04-16 17:15 - 000000000 ____D C:\Users\jjap5\AppData\Local\fontconfig
2019-04-16 17:14 - 2019-04-16 17:14 - 000000000 ____D C:\FFOutput
2019-04-16 17:13 - 2019-04-16 17:21 - 000000000 ____D C:\Program Files (x86)\FormatFactory
2019-04-16 17:03 - 2019-04-16 17:03 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-04-16 17:03 - 2019-04-16 17:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Partition Master 13.0
2019-04-16 17:03 - 2018-11-29 00:49 - 005247120 _____ C:\Windows\system32\BootMan.exe
2019-04-16 17:03 - 2018-11-29 00:49 - 003551376 _____ C:\Windows\SysWOW64\BootMan.exe
2019-04-16 17:03 - 2018-11-29 00:49 - 000022160 _____ C:\Windows\SysWOW64\EuEpmGdi.dll
2019-04-16 17:03 - 2018-11-29 00:49 - 000018576 _____ C:\Windows\system32\EuEpmGdi.dll
2019-04-16 17:03 - 2018-10-18 13:05 - 000132240 _____ C:\Windows\system32\setupempdrvx64.exe
2019-04-16 17:03 - 2018-10-18 04:35 - 000034496 _____ C:\Windows\system32\epmntdrv.sys
2019-04-16 17:03 - 2018-10-18 01:38 - 000030416 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\EPMVolFlt.sys
2019-04-16 17:03 - 2018-10-18 01:38 - 000030416 _____ (Windows (R) Codename Longhorn DDK provider) C:\Windows\system32\Drivers\EPMVolFlt.sys
2019-04-16 17:02 - 2019-04-16 17:02 - 000000000 ____D C:\Program Files (x86)\EaseUS
2019-04-16 17:01 - 2019-04-16 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2019-04-16 17:01 - 2019-04-16 17:01 - 000000000 ____D C:\Program Files (x86)\CrystalDiskInfo
2019-04-16 17:00 - 2019-04-16 17:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark6
2019-04-16 17:00 - 2019-04-16 17:00 - 000000000 ____D C:\Program Files\CrystalDiskMark6
2019-04-16 16:53 - 2019-04-20 16:53 - 000000000 ____D C:\Program Files\CCleaner
2019-04-16 16:53 - 2019-04-16 16:53 - 000003936 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-04-16 16:53 - 2019-04-16 16:53 - 000002888 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-04-16 16:53 - 2019-04-16 16:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-04-16 16:51 - 2019-04-20 18:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2019-04-16 16:41 - 2019-04-18 12:51 - 000002594 _____ C:\Windows\System32\Tasks\SamsungMagician
2019-04-16 16:41 - 2019-04-16 16:41 - 000000000 ____D C:\ProgramData\Samsung
2019-04-16 16:41 - 2019-04-16 16:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2019-04-16 16:41 - 2019-04-16 16:41 - 000000000 ____D C:\Program Files (x86)\Samsung
2019-04-16 16:39 - 2019-04-16 16:39 - 000000000 ____D C:\Program Files\Samsung
2019-04-16 16:34 - 2019-04-16 16:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2019-04-16 16:34 - 2019-04-16 16:34 - 000000000 ____D C:\Program Files\Speccy
2019-04-16 16:22 - 2019-04-18 16:26 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Acronis
2019-04-16 16:09 - 2019-04-16 16:20 - 000000000 ____D C:\Users\jjap5\AppData\Local\Thunderbird
2019-04-16 16:09 - 2019-04-16 16:09 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\Thunderbird
2019-04-16 15:42 - 2019-04-16 15:42 - 000000000 ____D C:\Users\jjap5\AppData\Roaming\AMD
2019-04-16 15:40 - 2019-04-16 15:40 - 001310552 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000690520 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tnd.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000569392 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\file_protector.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000379664 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\file_tracker.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000373808 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\snapman.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000331976 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\virtual_file.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000243472 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\volume_tracker.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000213336 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\tib_mounter.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000182832 _____ (Acronis International GmbH) C:\Windows\system32\Drivers\fltsrv.sys
2019-04-16 15:40 - 2019-04-16 15:40 - 000001286 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis True Image.lnk
2019-04-16 15:40 - 2019-04-16 15:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acronis
2019-04-16 15:40 - 2019-04-16 15:40 - 000000000 ____D C:\ProgramData\Apple
2019-04-16 15:40 - 2019-04-16 15:40 - 000000000 ____D C:\ProgramData\Acronis Mobile Backup Data
2019-04-16 15:40 - 2019-04-16 15:40 - 000000000 ____D C:\Program Files (x86)\Acronis
2019-04-16 15:34 - 2019-04-18 18:48 - 000000000 ____D C:\ProgramData\Acronis
2019-04-16 15:28 - 2019-04-16 15:28 - 000000000 ____D C:\ProgramData\ATI
2019-04-16 15:27 - 2019-04-16 15:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2019-04-16 15:19 - 2019-04-16 15:19 - 000004292 _____ C:\Windows\System32\Tasks\AMD Updater
2019-04-16 15:18 - 2019-04-16 15:18 - 000000000 ____D C:\Users\jjap5\AppData\Local\RadeonInstaller
2019-04-16 15:12 - 2019-04-16 15:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2019-04-16 15:12 - 2019-04-16 15:12 - 000000000 ____D C:\Program Files\CPUID
2019-04-16 15:12 - 2014-04-30 16:23 - 000011248 _____ (Windows (R) Win 7 DDK provider) C:\Windows\acpimof.dll
2019-04-16 15:08 - 2019-04-16 15:08 - 000000000 ____H C:\ProgramData\DP45977C.lfl
2019-04-16 15:08 - 2019-04-16 15:08 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2019-04-16 15:08 - 2019-04-16 15:08 - 000000000 ____D C:\Windows\system32\DAX3