Mantenimiento de equipo

[selohu]

Hola, buenas

Llevo tiempo viendo en ifs.log que tengo instalado software o algo, diciendo me que tengo herramientas de seguridad persistentes (Protección residente activa y actualizada). Como por ej 360 Security entre otros… Los desinstale y les pasé revounistaller y eliminé registros. Pero aún sigue ahí al pasarlo con IFS. También con Sysinspector de eset me salen en desconocidos más de 1880 registros. Están en Nivel 5 Desconocido.

saludos

[DarkGhost]

Hola @selohu.

Por favor, sube el Log de IFS.

Aunque si hablas de InfoSpyware First Steps (IFS) ya ha quedado obsoleto y no tiene una utilidad en este momento, solo sirve para dar alguna información.

[selohu]

Lo sé , aunque lo tengo por ver algunos datos tambien. Estaría genial una actualización.

[CODE][B]~~~~~~~~~~~| Inicio: [/B]

*IFS (InfoSpyware First Steps) v 1.3
*www.InfoSpyware.com | www.ForoSpyware.com
*Iniciado: 08/11/2020 a las 11h.20m.26s

[B]~~~~~~~~~~~|  Información del Sistema:[/B]

OS: Microsoft Windows 10 Pro x64 
Idioma: Spanish (Spain, International Sort) (España|es-ES)
Permisos de Administrador / ON
Windows se Inició en   Modo Normal
Drive: C:\WINDOWS (Install: \Device\HarddiskVolume5)

[B]~~~~~~~~~~~| Arquitectura Fisica:[/B]

CPU: To be filled by O.E.M.
CPU Modelo: To be filled by O.E.M.
Procesador: AMD FX(tm)-4300 Quad-Core Processor             (x64-BasedPC)
Memoria RAM: 8 Gb. En Uso: 31 %
Video: NVIDIA GeForce GTX 750 Ti
Chip: GeForce GTX 750 Ti Capacidad video:-2048 MB (Integrated RAMDAC)

[B]~~~~~~~~~~~| Unidades[/B]

C: [FIXED|NTFS|] - [111.2 Gb][18.8 Gb][92.3 Gb]
D: [FIXED|NTFS|] - [149.0 Gb][54.0 Gb][94.7 Gb]
E: [FIXED|NTFS|] - [465.7 Gb][93.9 Gb][371.8 Gb]
L: [FIXED|NTFS|WD My Passport] - [931.5 Gb][188.6 Gb][742.8 Gb]
M: [FIXED|NTFS|My Passport] - [931.5 Gb][142.8 Gb][788.6 Gb]
H: [REMOVABLE||] - [0 Gb][0 Gb][0 Gb]
I: [REMOVABLE||] - [0 Gb][0 Gb][0 Gb]
J: [REMOVABLE||] - [0 Gb][0 Gb][0 Gb]
K: [REMOVABLE||] - [0 Gb][0 Gb][0 Gb]
F: [CDROM]
G: [CDROM]
[COLOR=#FF0000][B]C:\ Fragmentación total 53.67% - Desfragmentar unidad [/B][/COLOR]
D:\ Fragmentación total 0.00% - Correcto
E:\ Fragmentación total 8.04% - Correcto
L:\ Fragmentación total 2.19% - Correcto
[COLOR=#FF0000][B]M:\ Fragmentación total 10.72% - Desfragmentar unidad [/B][/COLOR]

[B]~~~~~~~~~~~| Seguridad del SO[/B]

SafeBoot: Inicio en Modo seguro Correcto
Security Center: Correcto (Servicio Activo)
Windows Update: [COLOR=#FF0000][B]El servicio no está activo[/B][/COLOR] 
AV: Spybot - Search and Destroy *Protección Residente [ON] / Actualizado*
AV: Trend Micro Maximum Security *Protección Residente [ON] / Actualizado*
AV: Emsisoft Anti-Malware *[COLOR=#FF0000][B]Protección Residente [OFF][/B][/COLOR] / Actualizado*
AV: Windows Defender *Protección Residente [ON] / Actualizado*
AV: COMODO Antivirus *[COLOR=#FF0000][B]Protección Residente [OFF][/B][/COLOR] / [COLOR=#FF0000][B]Actualizar[/B][/COLOR]*
AV: Malwarebytes *Protección Residente [ON] / Actualizado*
AV: 360 Total Security *Protección Residente [ON] / Actualizado*
FW: Windows Firewall *Habilitado*

[B]~~~~~~~~~~~|  Update Check[/B]

Google Chrome Versión Instalada 86.0.4240.111

[B]~~~~~~~~~~~| Process List[/B] 

MsMpEng.exe (Windows Defender)

[B]~~~~~~~~~~~| Install Check[/B] 


Revo Uninstaller Pro 4.3.7 [4.3.7]
SUPERAntiSpyware [8.0.1058]

[B]~~~~~~~~~~~| Registry Check[/B]

HKLM\Run(x64): [SecurityHealth] %windir%\system32\SecurityHealthSystray.exe
HKLM\Run(x64): [AppCheck Tray] "C:\Program Files\CheckMAL\AppCheck\AppCheck.exe" /Tray
HKLM\Run: [vmware-tray.exe] "C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe"
HKLM\Run: [ConnectDetector] "C:\Users\selohu\AppData\Roaming\Adobe\Connect\connectdetector.exe"
Winlogon(x64): Shell = explorer.exe
Winlogon: Shell = explorer.exe
Userinit(x64): Userinit = C:\WINDOWS\system32\userinit.exe,
Userinit: Userinit = C:\WINDOWS\system32\userinit.exe,

[HKCR\.\.open\command] -> No se pudo obtener la información. 

[B]~~~~~~~~~~~| PUPs Check[/B]

HKLM64\SOFTWARE\Partner


[B]~~~~~~~~~~~| Listado 7 Días (Predeterminado)[/B]

[01/11/2020 23:36] - C:\WINDOWS\NvContainerRecovery.bat
[08/11/2020 01:45] - C:\WINDOWS\Panther
[04/11/2020 20:14] - C:\360SANDBOX
[04/11/2020 18:50] - C:\drivers.html
[08/11/2020 11:20] - C:\IFS.log

[B]~~~~~~~~~~~| C:\WINDOWS\Tasks:[/B]

[08/11/2020 01:00] - C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job

[B]~~~~~~~~~~~| End Report[/B]
*Finalizado 11:25:28
*Se limpiaron los archivos temporales
*[1599815] E:\Varios\IFS.exe
*Herramienta de Análisis e investigación [/CODE]

[selohu]

y bien…?-

[frica]

Hola @selohu:

Vete a esta guia

Herramientas de desinstalación de Antivirus, AntiSpyware y Firewall

Herramientas de desinstalación de Antivirus, AntiSpyware y Firewall. Actualizado: 25 de Abril de 2020. En muchos casos hay antivirus, antimalware o firewall que se resisten a ser desinstalados, o también que pese a haberlos desinstalado al ir a instalar otro, nos dice que no se puede porque ya hay otro programa en nuestro PC (en este caso solo serian restos del mismo) instalado. Para desinstalarlos del todo y eliminar prácticamente todos sus rastros, disponemos de utilidades específicas d…

y usa la aplicación AppRemover. Y en caso de que no te resuelva el problema, usa ESET AV Remover. En caso de que ninguna de las dos herramientas solucione tu problema con el software de 360, me comentas y usaremos una herramienta más avanzada.

Tienes un buen batallón de programas de seguridad. Quizá sea una mala forma de proceder. Tendremos que verlo. De momento desinstala:

Spybot - Search and Destroy

que es un software más que obsoleto. Para ello, te recomiendo usar Revo Uninstaller. En este enlace tienes el Manual de RevoUninstaller donde tendrás adicionalmente un ejemplo de cómo desinstalar adecuadamente un programa.

Ejecuta RevoUninstaller según el manual anteriormente dado y escoge, cuando el programa lo habilite, el Modo Avanzado.

[selohu]

Hola lo he descargado …

El de eset me dice que necesita permisos, el de appremove no consigo descargar sin que me quiera instalar otras cosas que no me interesan. Revounistaller no detecta nada ni en la lista ni en forzado.

[selohu]

Por fin he conseguido ejecutar cualquiera de los que no me dejaba, pero no me ha detectado nada. Yo creo que tiene que ser alguna herramienta de registros que entre más de lleno para eliminarlos…

[frica]

Vamos a usar una herramienta más potente.

Realiza lo siguiente:

1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

2.- Descarga Farbar Recovery Scan Tool. en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de su equipo. >> Como saber si mi Windows es de 32 o 64 bits.?

• Ejecuta FRST.exe.
• En el mensaje de la ventana del Disclaimer, pulsamos Yes
• En la ventana principal pulsamos en el botón Analizar y esperamos a que concluya el proceso.
• Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Guía: Como Ejecutar FRST

3.- En tu próxima respuesta, pega los reportes generados.

Guía : ¿Como Pegar reportes en el Foro?

Esperamos esos reporte.

[selohu]

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 11-11-2020
Ejecutado por selohu (14-11-2020 14:07:48)
Ejecutado desde C:\Users\selohu\Desktop
Windows 10 Pro Versión 2009 19042.630 (X64) (2020-05-28 08:09:57)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-991384485-3360299836-4042273512-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-991384485-3360299836-4042273512-503 - Limited - Disabled)
Invitado (S-1-5-21-991384485-3360299836-4042273512-501 - Limited - Enabled)
selohu (S-1-5-21-991384485-3360299836-4042273512-1001 - Administrator - Enabled) => C:\Users\selohu
WDAGUtilityAccount (S-1-5-21-991384485-3360299836-4042273512-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Spybot - Search and Destroy (Enabled - Up to date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
AV: Trend Micro Maximum Security (Enabled - Up to date) {AFEE279F-FAE7-BAEE-3A88-4BF7277B8551}
AV: Sophos Home (Enabled - Up to date) {8E0623B8-CF1C-DFFE-CEA3-AA41BDA4B8EE}
AV: Emsisoft Anti-Malware (Disabled - Up to date) {5FD8BF8F-F242-6153-61B5-8FF333E8736B}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: COMODO Antivirus (Disabled - Out of date) {05BC7AB5-FF0E-71EC-1054-15DA19B62DC7}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: 360 Total Security (Enabled - Up to date) {FFDC234A-CE9B-08F9-406B-F876951CE066}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

4K Video Downloader 4.12 (HKLM-x32\...\{A490FDCE-03DF-4B63-92D9-9C9ADC4246C3}) (Version: 4.12.0.3570 - Open Media LLC)
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
AccessData FTK Imager (HKLM-x32\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.2.0 - AccessData)
Acronis Disk Director 12.5 (HKLM-x32\...\{AE5BBAA8-5AF2-40DB-A13D-F015439EC7C7}) (Version: 12.5.163 - Acronis)
Actualización de NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden
Adobe Connect (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Adobe Connect App) (Version: 2020.9.21.64 - Adobe Systems Inc.)
Adobe Photoshop 2021 (HKLM-x32\...\PHSP_22_0) (Version: 22.0.0.35 - Adobe Inc.)
Air Live Drive (HKLM\...\Air Live Drive) (Version: 1.7.0 - hxxp://www.airlivedrive.com)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.40.01.18 - Advanced Micro Devices, Inc.)
Apowersoft Online Launcher version 1.7.8 (HKLM-x32\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.8 - APOWERSOFT LIMITED)
Apowersoft Online Launcher version 1.8.0 (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.8.0 - APOWERSOFT LIMITED)
Apple Application Support (32 bits) (HKLM-x32\...\{CCA8C50D-785B-4896-8675-FFE0C4ECCBC3}) (Version: 8.7 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{75BEF7E8-4370-4D42-94F3-B5AA77057965}) (Version: 8.7 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{DF6C3726-7E53-4772-9763-E9F147769F51}) (Version: 3.2.3.0000 - Asmedia Technology)
Asoftech Data Recovery (HKLM-x32\...\{1AED6EB7-8FEA-4021-B8FD-EBAA6B21679F}) (Version: 2.00 - )
Audacity 2.4.2 (HKLM-x32\...\Audacity_is1) (Version: 2.4.2 - Audacity Team)
Autopsy (HKLM\...\{9F0FC65E-2169-49ED-A2CA-14F8C4D50115}) (Version: 4.14.0 - The Sleuth Kit)
AVerMedia A706 PCI Pure DVB-S 3.6.64.2 (HKLM-x32\...\AVerMedia A706 PCI Pure DVB-S) (Version: 3.6.64.2 - AVerMedia TECHNOLOGIES, Inc.)
AviSynth (HKLM-x32\...\AviSynth) (Version: 2.6.0 MT - )
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 86.1.16.76 - Los creadores de Brave)
BS.Player PRO (HKLM-x32\...\BSPlayerp) (Version: 2.75.1089 - AB Team, d.o.o.)
Camtasia 2019 (HKLM\...\{FF10C4F0-9186-405F-809D-D2E8D5E39448}) (Version: 19.0.10.17662 - TechSmith Corporation) Hidden
Camtasia 2019 (HKLM-x32\...\{03e048a7-3690-409c-b9c4-27612f78bd68}) (Version: 19.0.10.17662 - TechSmith Corporation)
CrystalDiskInfo 8.8.9 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.8.9 - Crystal Dew World)
Cuadro de mensaje de excepción de Microsoft (HKLM\...\{847CE738-909B-4A98-9CF5-230EB23CA92D}) (Version: 9.00.5000.00 - Microsoft Corporation) Hidden
Discord (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Discord) (Version: 0.0.308 - Discord Inc.)
dr.fone (Version 10.4.2) (HKLM-x32\...\{E8F86DA8-B8E4-42C7-AFD4-EBB692AC43FD}_is1) (Version: 10.4.2.304 - Wondershare Technology Co.,Ltd.)
DVBViewer Pro (HKLM-x32\...\DVBViewer Pro_is1) (Version: 6.1.7.2 - CM&V)
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version:  - EaseUS)
eMule (HKLM-x32\...\eMule) (Version:  - )
FinalData Standard 2.0 (HKLM-x32\...\FinalData Standard 2.0) (Version:  - )
GetDataBack Pro version 5.55 (HKLM\...\GetDataBack Pro Install_is1) (Version: 5.55 - Runtime Software, LLC)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 86.0.4240.111 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden
Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: 5.61 - Janos Mathe)
iCloud (HKLM\...\{8808B208-87D1-4725-8192-76D257E9DEAE}) (Version: 7.21.0.23 - Apple Inc.)
IPTViewr para movistar+ 1.5 “Kruger 60” beta 1 SP1 (HKLM-x32\...\{525CDE99-1EB0-4E7D-8C36-A4F148E82463}) (Version: 1.5.1105.0 - hxxp://www.alphacentaury.org)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
Java(TM) SE Development Kit 13.0.2 (64-bit) (HKLM\...\{606493F9-D1F1-5355-BB8A-F0E30F1AFFED}) (Version: 13.0.2.0 - Oracle Corporation)
K-Lite Codec Pack 15.4.8 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.4.8 - KLCP)
LAV Filters 0.74.1 (HKLM-x32\...\lavfilters_is1) (Version: 0.74.1 - Hendrik Leppkes)
LibreOffice 7.0.3.1 (HKLM\...\{3C4801FF-3D7B-4804-877E-3A322C00524C}) (Version: 7.0.3.1 - The Document Foundation)
Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version:  - )
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft OneDrive (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation)
Microsoft SQL Server Compact 4.0 SP1 x64 ESN (HKLM\...\{D7126FFC-90BA-4120-8FFB-3688C9931A09}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29016 (HKLM-x32\...\{40d3fee2-b257-46c2-bdc0-cb1088d97327}) (Version: 14.27.29016.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.50.1 - Microsoft Corporation)
Npcap (HKLM-x32\...\NpcapInst) (Version: 0.9997 - Nmap Project)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA Controlador de audio HD 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation)
NVIDIA Controlador de gráficos 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Software del sistema PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
Paquete de controladores de Windows - Amazon.com (WinUSB) FireDevicesUsbDeviceClass  (10/27/2014 1.4.0000.00000) (HKLM\...\70D74CAD18BB165614511A2A67DB9EBF036D06A9) (Version: 10/27/2014 1.4.0000.00000 - Amazon.com)
Paquete de controladores de Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass  (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
Python 3.9.0rc2 (64-bit) (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{3009660a-1c70-4778-ac12-cafb00544300}) (Version: 3.9.122.0 - Python Software Foundation)
Python 3.9.0rc2 Add to Path (64-bit) (HKLM\...\{C3B8D7EB-3186-4E3D-811B-62DF0BBE3584}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Development Libraries (64-bit) (HKLM\...\{35F06110-EA33-4C2D-8CD2-0EE4D69A2019}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Documentation (64-bit) (HKLM\...\{EBAC1B62-5C6A-4AD0-9E58-DC4D61F73D32}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Executables (64-bit) (HKLM\...\{DF3B8503-03DA-4629-B6A3-E7B2A612D494}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 pip Bootstrap (64-bit) (HKLM\...\{E89DB909-7A92-4455-A46D-CFFDB65C72E2}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Standard Library (64-bit) (HKLM\...\{B83A4122-545F-4C71-B909-AB9CB74BE447}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Tcl/Tk Support (64-bit) (HKLM\...\{3323526F-5630-4E45-B692-DBAEC43DCF63}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Test Suite (64-bit) (HKLM\...\{A494CC91-CE2D-485C-B069-53B4A190D322}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Python 3.9.0rc2 Utility Scripts (64-bit) (HKLM\...\{49B43873-6F38-4D2D-A8F5-1B17B5243BC4}) (Version: 3.9.122.0 - Python Software Foundation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
Revo Uninstaller Pro 4.3.7 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.7 - VS Revo Group, Ltd.)
R-Studio 8.3 (HKLM-x32\...\R-Studio 8.3NSIS) (Version: 8.3.168075 - R-Tools Technology Inc.)
Sublime Text 3 (HKLM\...\Sublime Text 3_is1) (Version:  - Sublime HQ Pty Ltd)
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 8.0.1058 - SUPERAntiSpyware.com)
Telegram Desktop version 2.4.7 (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.4.7 - Telegram FZ-LLC)
VdhCoApp 1.5.0 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)
VMware Workstation (HKLM\...\{D51F496C-D02A-4AFA-AB43-F61B94462C9E}) (Version: 16.0.0 - VMware, Inc.)
WhatsApp (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\WhatsApp) (Version: 2.2045.19 - WhatsApp)
Winamp (HKLM-x32\...\Winamp) (Version: 5.8  - Winamp SA)
Wireshark 3.2.7 64-bit (HKLM-x32\...\Wireshark) (Version: 3.2.7 - The Wireshark developer community, hxxps://www.wireshark.org)

Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2020-05-10] (Adobe Systems Incorporated)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-05-10] (Canon Inc.)
Linux Cheatsheet -> C:\Program Files\WindowsApps\51231akshay2000.LinuxCheatsheet_1.2.0.0_neutral__1y7n7bzn5h0zw [2020-05-27] (akshay2000)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-05-10] (Microsoft Corporation) [MS Ad]
Microsoft Defender Application Guard Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsDefenderApplicationGuard_1.0.11.0_x64__8wekyb3d8bbwe [2020-11-02] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-10-26] (Microsoft Studios) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.958.0_x64__56jybvy8sckqj [2020-06-25] (NVIDIA Corp.)
Python 3.8 -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.8_3.8.1776.0_x64__qbz5n2kfra8p0 [2020-09-24] (Python Software Foundation)
Ubuntu -> C:\Program Files\WindowsApps\CanonicalGroupLimited.UbuntuonWindows_2004.2020.812.0_x64__79rhkp1fndgsc [2020-08-20] (Canonical Group Limited)
Windows Terminal -> C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.4.3141.0_x64__8wekyb3d8bbwe [2020-11-13] (Microsoft Corporation) [Startup Task]
WinGet Source -> C:\Program Files\WindowsApps\Microsoft.Winget.Source_2020.529.552.462_neutral__8wekyb3d8bbwe [2020-05-29] (Microsoft Corporation)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe (TechSmith Corporation -> TechSmith Corporation)
CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{D592DDB5-1CFF-4CE2-A3A5-3C061503251E} -> [MEGA] => C:\Users\selohu\Documents\MEGA [2020-03-30 17:05]
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ShellIconOverlayIdentifiers: [    FSOverlayIcon] -> {C0829D19-E5A0-44F5-B56E-D15030C53BB9} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado]
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers1: [BthSendToContextMenuExt] -> {CF373149-C3D9-4AEB-9CE8-BDD1D2FFFA5B} => C:\WINDOWS\system32\BSAppShlExt.dll [2012-09-19] (IVT CORPORATION -> TODO: <公司名>)
ContextMenuHandlers1: [CloudContextMenu] -> {f16ff8b9-0db7-39ef-b2ef-68ab9c2951c1} => C:\Program Files\AirLiveDrive\AirLiveDriveShellEx.DLL [2020-11-05] (INICIATIVAS INFORMATICAS Y DE COMUNICACION SL -> www.airlivedrive.com)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-09-08] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Ningún archivo
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2020-09-14] (VMware, Inc. -> VMware, Inc.)
ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2020-09-14] (VMware, Inc. -> VMware, Inc.)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado]
ContextMenuHandlers4: [CloudContextMenu] -> {f16ff8b9-0db7-39ef-b2ef-68ab9c2951c1} => C:\Program Files\AirLiveDrive\AirLiveDriveShellEx.DLL [2020-11-05] (INICIATIVAS INFORMATICAS Y DE COMUNICACION SL -> www.airlivedrive.com)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> )
ContextMenuHandlers4: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Ningún archivo
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} =>  -> Ningún archivo
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feed726c6560f7a7\nvshext.dll [2020-10-02] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado]
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2020-09-28] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Ningún archivo

==================== Codecs (Lista blanca) ====================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [475672 2007-10-12] (Logitech Inc -> Logitech Inc.)
HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [416280 2007-10-12] (Logitech Inc -> Logitech Inc.)

[selohu]

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\Google Maps.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=gmkjkfepcibbjemdifjlfanjdedgklmj
ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\YouTube Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod
ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\A (Mama) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1"
ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\YouTube Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod

==================== Módulos cargados (Lista blanca) =============

==================== Alternate Data Streams (Lista blanca) ========

(Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.)

AlternateDataStreams: C:\Windows:CM_36faabd924501fcd2f743302621d89eb425ec11f74fef19a5e0fe69c3f0b5201 [74]
AlternateDataStreams: C:\Windows:CM_e0501b65315a77c6cde279a3a8d62a1a6c48bf2c2e353a3654218165115f1673 [74]
AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [119]
AlternateDataStreams: C:\ProgramData\TEMP:B755D674 [180]

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\10589338.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\16990891.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\19648080.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\24697462.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\37238653.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\39326786.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\41645524.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\56281002.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\56866735.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\92292752.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\96003709.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMInstallerService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\10589338.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\16990891.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\19648080.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\24697462.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\37238653.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\39326786.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\41645524.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\56281002.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\56866735.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\92292752.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\96003709.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MB3Service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMInstallerService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR523 => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR523.SYS => ""="Driver"

==================== Asociación (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado.)

HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Classes\exefile: "%1" %* <==== ATENCIÓN
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Classes\.exe: exefile => "%1" %* <==== ATENCIÓN

==================== Internet Explorer (Lista blanca) ==========

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKU\S-1-5-21-991384485-3360299836-4042273512-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-04-27] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-27] (Oracle America, Inc. -> Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\SysWow64\skype4com.dll [2012-09-19] (IVT CORPORATION -> Skype Technologies)

(Si una entrada es incluida en el fixlist, será eliminada del registro.)

IE trusted site: HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\trendmicro.com -> hxxps://pwm.trendmicro.com

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2020-11-06 01:38 - 2020-11-06 01:38 - 000001412 _____ C:\WINDOWS\system32\drivers\etc\hosts

2020-03-28 02:57 - 2020-10-11 12:54 - 000000621 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.1.33 selohu.mshome.net # 2025 10 5 10 11 54 57 473
17.209.65 selohu.mshome.net # 2025 4 5 18 3 20 5 366
172.18.44.1 selohu.mshome.net # 2025 4 3 16 9 6 42 330
84

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Users\selohu\AppData\Local\Microsoft\WindowsApps;C:\Users\selohu\AppData\Local\Android\Sdk;\platform-tools;C:\adb;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\WindowsPowerShell\Scripts;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Livestreamer
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\selohu\Desktop\fondos\U00pxXu_Nlk.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Firewall de Windows está habilitado.

Network Binding:
=============
VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 
VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 
VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
Npcap Loopback Adapter: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Npcap Loopback Adapter: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
Npcap Loopback Adapter: VMware Bridge Protocol -> vmware_bridge (enabled) 
Ethernet: VMware Bridge Protocol -> vmware_bridge (enabled) 
Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
Conexión de área local: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Conexión de área local: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
Conexión de área local: VMware Bridge Protocol -> vmware_bridge (enabled) 
Ethernet 3: VMware Bridge Protocol -> vmware_bridge (enabled) 
Ethernet 3: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 
Ethernet 3: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

HKLM\...\StartupApproved\StartupFolder: => "WSAppHelper.lnk"
HKLM\...\StartupApproved\StartupFolder: => "WSAndroidAppHelper.lnk"
HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Avira SystrayStartTrigger"
HKLM\...\StartupApproved\Run32: => "Avira System Speedup User Starter"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "BtTray"
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "SUPERAntiSpyware"
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "CCXProcess"
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [TCP Query User{3219306F-76B4-4224-B856-618B7AE1EB59}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{198D6E3B-81E7-40FB-B249-355B21C6449B}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{C410C972-2362-4FDB-8605-815369E15F85}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{7FE1FA95-5504-4E7A-8D11-718EFB43797F}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{911A79D6-F265-4663-ADEB-ADD6DE31A8D7}] => (Allow) LPort=8320
FirewallRules: [TCP Query User{B543AF2C-44D4-4F17-95DF-15BB75B8216E}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart)
FirewallRules: [UDP Query User{A2507F17-5206-4DC6-AC64-3211156E9F99}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart)
FirewallRules: [TCP Query User{C6DC78D7-02D4-400B-A601-E5C315D0D4F0}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart)
FirewallRules: [UDP Query User{A7903533-81B5-49E7-A935-53BF24395432}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart)
FirewallRules: [TCP Query User{B9FE262A-6C96-4173-8515-5B52A1DF09CB}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{B5961D29-D1B8-4796-82B6-2E06B1C4731C}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{21E4328C-101F-4CF5-8C5E-BBEE23B0D9DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9A396AC8-8B15-4BC5-8B4A-EB2EBC77BC9B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{7C5BF8D2-C5F9-4249-BB95-B7C73BEC74E1}C:\program files (x86)\r-studio\rstudio64.exe] => (Allow) C:\program files (x86)\r-studio\rstudio64.exe (R-Tools Technology Inc. -> R-Tools Technology Inc.) [Archivo no firmado]
FirewallRules: [UDP Query User{52A58814-B39A-4C51-91BF-0456F5578D2D}C:\program files (x86)\r-studio\rstudio64.exe] => (Allow) C:\program files (x86)\r-studio\rstudio64.exe (R-Tools Technology Inc. -> R-Tools Technology Inc.) [Archivo no firmado]
FirewallRules: [TCP Query User{F16E7ED1-F280-4688-A9E2-CBF8375362C5}C:\program files\nitroshare\nitroshare.exe] => (Allow) C:\program files\nitroshare\nitroshare.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{5BF40D90-A811-4E99-B015-FC9C826A803C}C:\program files\nitroshare\nitroshare.exe] => (Allow) C:\program files\nitroshare\nitroshare.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{58706BB8-EF4A-4667-8133-4DE99A6A73D7}C:\users\selohu\desktop\64-bit\netscan.exe] => (Allow) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [UDP Query User{BFED9728-438C-4C4A-8CDB-CAA9C14D03E8}C:\users\selohu\desktop\64-bit\netscan.exe] => (Allow) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [{07D3D8A4-3BA5-46F9-A2DB-3E990E27BE42}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
FirewallRules: [{ACD31D30-0641-46F1-B445-585C00D64C67}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
FirewallRules: [TCP Query User{D613ADFD-61E3-40B4-B62A-FCDC9E2E0881}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [UDP Query User{3F2E7080-34D8-4D1E-A838-08A4E7C2F855}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [{F4A50093-65BA-4E5E-93AE-70C233D0E915}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
FirewallRules: [{31C51F5A-DDA0-45CB-8A5C-CCE15D244734}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
FirewallRules: [TCP Query User{C9F222B1-6AC0-4868-AD9B-8FE082BC7369}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{38B056DA-80C8-4B3B-AC2E-288282A5BF7E}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{54CE11A0-B9AB-4713-B54E-C44CA40CB235}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{66B0B702-3AEA-476D-80EF-C4D82E9A93C1}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [UDP Query User{4E14BA86-6A57-44C6-8D8F-608BB298A69F}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [{56FA7FBC-6E6F-48B1-A82D-EB3DE0A1F766}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)
FirewallRules: [{F7D244BC-1650-4F1F-B239-5ABCA67250E5}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)
FirewallRules: [{0163B273-969B-426C-AE3A-F9737CE89FCA}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )
FirewallRules: [{0C483C00-91DA-4CDE-A21F-8229EA4172E2}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )
FirewallRules: [{EAEBCA00-641E-4785-9AF8-47756A62115B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E0B11049-1274-440E-99C4-E6E95163601E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1C79C80C-7BE5-4A6D-9591-4D79F7886F2C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{42FBE6BF-D2C1-4CD2-9DD1-09DC72E4191E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{27C5930F-BF1A-43B2-8A75-F1250718D417}] => (Allow) C:\Program Files (x86)\DVBViewer\DVBViewer.exe (Christian Hackbart -> CM&V Hackbart)
FirewallRules: [TCP Query User{AE771EF1-E8DE-4C12-8913-FFB509C2BDBA}C:\users\selohu\desktop\64-bit\netscan.exe] => (Block) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [UDP Query User{AE211898-EF59-4CC8-B0EE-BE5E301CDFCE}C:\users\selohu\desktop\64-bit\netscan.exe] => (Block) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [{A830D660-519C-4938-96E8-31E76DCB4D88}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DE04D42A-8A4A-4FCE-B0FB-41A477FFA7F0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B6A7D130-379F-4F58-9AC0-7F0A67D8BA2B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EBC73CB3-84CF-4832-A409-18129BD4A25C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{84EA7E37-A4BB-45C2-84E9-BEB6A66CD7E0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6A45486F-99A1-4E66-9BE8-E3EEA33A7DBC}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{E8E3C460-5291-498F-8463-4CFB373C2444}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{1A3E656E-37E8-4288-BC38-CF6620649AD7}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{57CEA9BE-0C0B-4A7C-A08E-001463B6A195}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{02F2B4D4-7FC4-4BFB-9807-527BB4B5E2A2}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{20425747-8AF9-4894-A289-D4320235A884}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{E006E420-5215-4E68-8E98-5D61B2B44F4A}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{629AD580-2476-4A10-9C45-DBB769610E78}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{B7E7705F-5407-4073-8000-0FB386F49F4A}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{DAFC85B5-FBBB-4DEF-A0D1-815F71038485}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{0CF1B341-EFDD-413C-91C7-B5EF156F783E}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{53A6C469-BA2B-4C20-88CA-2E9BDD420F40}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{A0206E39-DD27-40DB-B93C-FD5B33C7ED37}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{9BB93895-6DB0-46B3-A3FC-6D7086CA21D4}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{A46D6667-A1AD-481A-84C9-E84EC7C37A7C}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{3DF8C97F-EAA5-45E8-9666-901E306356F3}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{C397644A-E7D4-49B2-A32D-50E36A768625}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{E97F505F-655C-4BB3-A2FE-BE84E301AC96}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{A6FD7EA2-6298-4C20-96A9-48D89ECB1D59}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{FB016D7F-D7B8-4B16-A0C0-6E5C35226322}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{D23EAE32-4497-495F-B3BA-02A5C51C6C62}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{D0B4FF1B-864F-4B64-BB63-CCBBD159FFBC}C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe] => (Allow) C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [UDP Query User{BD307DBD-801F-4BCA-A2A2-BD9453BC32A0}C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe] => (Allow) C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org)
FirewallRules: [{64FADE6F-05D5-4081-9F36-798A4568A9D5}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)
FirewallRules: [{CB93F031-D9A8-4616-843E-5A35E61505C2}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA)

[selohu]

==================== Puntos de Restauración =========================

ATENCIÓN: Restaurar Sistema está deshabilitado (Total:111.16 GB) (Free:7.43 GB) (7%)

==================== Dispositivos defectuosos en el Administrador de dispositivos ============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: Npcap Loopback Adapter
Description: Adaptador de bucle invertido KM-TEST de Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: kmloop
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet1
Description: VMware Virtual Ethernet Adapter for VMnet1
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet8
Description: VMware Virtual Ethernet Adapter for VMnet8
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VSP de integración de kernel de Microsoft Hyper-V NT
Description: VSP de integración de kernel de Microsoft Hyper-V NT
Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vkrnlintvsp
Problem: : Windows cannot initialize the device driver for this hardware. (Code 37)
Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver.

Name: Realtek RTL8139/810x Family Fast Ethernet NIC
Description: NIC de Fast Ethernet de la familia Realtek RTL8139/810x
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RTL8023x64
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (11/14/2020 04:10:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: IPTViewr.exe, versión: 1.5.1105.0, marca de tiempo: 0x5e824efa
Nombre del módulo con errores: KERNELBASE.dll, versión: 10.0.19041.572, marca de tiempo: 0x1183946c
Código de excepción: 0xe0434352
Desplazamiento de errores: 0x0000000000023e49
Identificador del proceso con errores: 0x2868
Hora de inicio de la aplicación con errores: 0x01d6ba339597bc3d
Ruta de acceso de la aplicación con errores: C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe
Ruta de acceso del módulo con errores: C:\WINDOWS\System32\KERNELBASE.dll
Identificador del informe: 5a3e1989-b8ad-4427-a2e0-68403546d5c5
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (11/14/2020 04:10:02 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: IPTViewr.exe
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: System.IO.FileNotFoundException
   en System.IO.__Error.WinIOError(Int32, System.String)
   en System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   en System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32)
   en IpTviewr.UiServices.Configuration.Settings.JsonSettingsStore.CreateEmptyStore()
   en IpTviewr.UiServices.Configuration.Settings.JsonSettingsProvider.Initialize(System.String, System.Collections.Specialized.NameValueCollection)
   en System.Configuration.ApplicationSettingsBase.get_Initializer()
   en System.Configuration.ApplicationSettingsBase.CreateSetting(System.Reflection.PropertyInfo)
   en System.Configuration.ApplicationSettingsBase.EnsureInitialized()
   en System.Configuration.ApplicationSettingsBase.get_Properties()
   en System.Configuration.SettingsBase.GetPropertyValueByName(System.String)
   en System.Configuration.SettingsBase.get_Item(System.String)
   en System.Configuration.ApplicationSettingsBase.GetPropertyValue(System.String)
   en System.Configuration.ApplicationSettingsBase.get_Item(System.String)
   en IpTviewr.ChannelList.Properties.Settings.get_SetCulture()
   en IpTviewr.ChannelList.MyApplication.SetApplicationCulture(System.String[])
   en IpTviewr.ChannelList.Program.Main(System.String[])

Error: (11/13/2020 09:03:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: MsiExec.exe, versión: 5.0.19041.1, marca de tiempo: 0x25d5450e
Nombre del módulo con errores: MSI5027.tmp, versión: 17.3.0.0, marca de tiempo: 0x5f212613
Código de excepción: 0xc0000409
Desplazamiento de errores: 0x0005b689
Identificador del proceso con errores: 0x534
Hora de inicio de la aplicación con errores: 0x01d6b9f81ed1151a
Ruta de acceso de la aplicación con errores: C:\Windows\syswow64\MsiExec.exe
Ruta de acceso del módulo con errores: C:\Users\selohu\AppData\Local\Temp\MSI5027.tmp
Identificador del informe: c7944e11-4b4a-42d9-85da-cfdc29e76fbc
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (11/13/2020 02:03:34 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (E:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A)

Error: (11/13/2020 02:01:32 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A)

Error: (11/13/2020 12:36:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A)

Error: (11/13/2020 11:47:27 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A)

Error: (11/13/2020 11:35:29 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A)


Errores del sistema:
=============
Error: (11/14/2020 11:39:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio swi_service no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar la ruta especificada.

Error: (11/14/2020 11:39:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio SAVAdminService no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar la ruta especificada.

Error: (11/14/2020 11:39:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio MBAMInstallerService no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar el archivo especificado.

Error: (11/14/2020 11:39:51 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio EsgShKernel no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar el archivo especificado.

Error: (11/14/2020 11:39:50 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio hvsics depende del servicio CmService, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (11/14/2020 11:39:50 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio CmService depende del servicio HvHost, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (11/14/2020 11:39:50 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio HvHost depende del servicio hvservice, el cual no pudo iniciarse debido al siguiente error: 
No se ha encontrado el elemento.

Error: (11/14/2020 11:39:50 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio hvservice no pudo iniciarse debido al siguiente error: 
No se ha encontrado el elemento.


Windows Defender:
===================================
Date: 2020-11-14 04:09:43.6170000Z
Description: 
El acceso controlado a carpetas bloqueó C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe para que no pueda modificar %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\.
Hora de detección: 2020-11-14T03:09:43.616Z
Usuario: SELOHU\selohu
Ruta de acceso: %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\
Nombre del proceso: C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe
Versión de inteligencia de seguridad: 1.327.840.0
Versión del motor: 1.1.17600.5
Versión del producto: 4.18.2010.7

Date: 2020-11-14 04:07:07.2260000Z
Description: 
El acceso controlado a carpetas bloqueó C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\FirstTimeConfig.exe para que no pueda modificar %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\.
Hora de detección: 2020-11-14T03:07:07.225Z
Usuario: SELOHU\selohu
Ruta de acceso: %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\
Nombre del proceso: C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\FirstTimeConfig.exe
Versión de inteligencia de seguridad: 1.327.840.0
Versión del motor: 1.1.17600.5
Versión del producto: 4.18.2010.7

Date: 2020-11-13 21:15:28.4490000Z
Description: 
El acceso controlado a carpetas impidió que C:\Program Files\AirLiveDrive\AirLiveDrive.exe realizara cambios en la memoria.
Tiempo de detección: 2020-11-13T20:15:28.448Z
Usuario: SELOHU\selohu
Ruta de acceso: \Device\Volume{d6cc17c5-1734-4085-bce7-964f1e9f5de9}
Nombre del proceso: C:\Program Files\AirLiveDrive\AirLiveDrive.exe
Versión de inteligencia de seguridad: 1.327.840.0
Versión del motor: 1.1.17600.5
Versión del producto: 4.18.2010.7

Date: 2020-11-13 03:49:08.9780000Z
Description: 
El examen de Antivirus de Microsoft Defender se detuvo antes de completarse.
Id. de examen: {7C3A0529-ADBE-4BC4-89AD-D81262C582A5}
Tipo de examen: Antimalware
Parámetros de examen: Examen completo
Usuario: SELOHU\selohu

Date: 2020-11-13 00:30:03.6110000Z
Description: 
El examen de Antivirus de Microsoft Defender se detuvo antes de completarse.
Id. de examen: {CA5924C7-52D3-4832-824B-2535A9C07BF2}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2020-11-08 16:21:09.7040000Z
Description: 
La característica Protección en tiempo real de Antivirus de Microsoft Defender encontró un error:
Característica: Durante el acceso
Código de error: 0x8007043c
Descripción del error: El servicio no puede iniciarse en modo a prueba de errores 
Motivo: La inteligencia de seguridad antimalware dejó de funcionar por motivos desconocidos. En algunos casos, reiniciar el servicio puede que resuelva el problema.

CodeIntegrity:
===================================

Date: 2020-11-14 13:54:58.7370000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:54:58.7350000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:44:10.7900000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:44:10.7880000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:27:34.2830000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:27:34.2820000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:14:10.4770000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2020-11-14 13:14:10.4760000Z
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

[selohu]

==================== Información de la memoria =========================== 

BIOS: American Megatrends Inc. 2501 04/09/2014
Placa base: ASUSTeK COMPUTER INC. M5A97 EVO R2.0
Procesador: AMD FX(tm)-4300 Quad-Core Processor 
Porcentaje de memoria en uso: 41%
RAM física total: 7927.12 MB
RAM física disponible: 4642.61 MB
Virtual total: 9207.12 MB
Virtual disponible: 5781.25 MB

==================== Unidades ================================

Drive c: () (Fixed) (Total:111.16 GB) (Free:7.43 GB) NTFS
Drive d: () (Fixed) (Total:149.04 GB) (Free:54.29 GB) NTFS
Drive e: () (Fixed) (Total:465.76 GB) (Free:94.08 GB) NTFS
Drive l: (WD My Passport) (Fixed) (Total:931.48 GB) (Free:183.4 GB) NTFS
Drive m: (My Passport) (Fixed) (Total:931.48 GB) (Free:142.87 GB) NTFS

\\?\Volume{508dd2cc-8f05-4d4b-8c2b-a314a6be81e2}\ () (Fixed) (Total:0.52 GB) (Free:0.07 GB) NTFS
\\?\Volume{4dd25713-7527-4ff0-804b-573d5300eb55}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: F2638184)
Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (Size: 111.8 GB) (Disk ID: 6582A299)

Partition: GPT.

==========================================================
Disk: 2 (Size: 465.8 GB) (Disk ID: 217A6D10)
No partition Table on disk 2.

==========================================================
Disk: 3 (Size: 931.5 GB) (Disk ID: E64B7ED8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 4 (Size: 931.5 GB) (Disk ID: 16F2A91F)

Partition: GPT.

==================== Final de Addition.txt =======================

[selohu]

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 11-11-2020
Ejecutado por selohu (administrador) sobre SELOHU (14-11-2020 14:05:47)
Ejecutado desde C:\Users\selohu\Desktop
Perfiles cargados: selohu
Platform: Windows 10 Pro Versión 2009 19042.630 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: "C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe" --single-argument %1
Modo de Inicio: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Adobe Inc. -> Adobe Systems Incorporated) C:\Users\selohu\AppData\Roaming\Adobe\Connect\connectdetector.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.101.0\BraveCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feed726c6560f7a7\Display.NvContainer\NVDisplay.Container.exe <2>
(SUPERAntiSpyware.com -> SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Winamp SA -> Winamp SA) C:\Program Files (x86)\Winamp\winampa.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\DriverInstall.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [119344 2020-09-14] (VMware, Inc. -> VMware, Inc.)
HKLM-x32\...\Run: [WinampAgent] => C:\Program Files (x86)\Winamp\winampa.exe [86696 2018-10-18] (Winamp SA -> Winamp SA)
HKLM\...\Policies\Explorer: [NoViewOnDrive] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKLM\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKLM\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKLM\...\Policies\Explorer: [NoShellSearchButton] 0
HKLM\...\Policies\Explorer: [NoFile] 0
HKLM\...\Policies\Explorer: [HideClock] 0
HKLM\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKLM\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKLM\...\Policies\Explorer: [NoDeletePrinter] 0
HKLM\...\Policies\Explorer: [NoDFSTab] 0
HKLM\...\Policies\Explorer: [NoChangeStartMenu] 0
HKLM\...\Policies\Explorer: [NoLogoff] 0
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 0
HKLM\...\Policies\Explorer: [NoEncryptOnMove] 0
HKLM\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKLM\...\Policies\Explorer: [NoResolveSearch] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [NoHardwareTab] 0
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Run: [ConnectDetector] => C:\Users\selohu\AppData\Roaming\Adobe\Connect\connectdetector.exe [635960 2020-10-06] (Adobe Inc. -> Adobe Systems Incorporated) <==== ATENCIÓN
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-09-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Run: [AirLiveDriveAutoRun] => C:\Program Files\AirLiveDrive\AirLiveDrive.exe [4986264 2020-11-05] (INICIATIVAS INFORMATICAS Y DE COMUNICACION SL -> www.airlivedrive.com)
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --flag-switches-begin --enable-gpu-rasterization --enable-oop-rasterization --enable-features=GlobalMediaControls,GlobalMediaControlsForCas (la entrada de datos tiene 234 más caracteres).
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\RunOnce: [Application Restart #1] => C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe [2095272 2020-11-12] (Brave Software, Inc. -> Brave Software, Inc.)
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\system: [DisableCMD] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\system: [NoDispAppearancePage] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\system: [NoDispBackgroundPage] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\system: [NoDispSettingsPage] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoViewOnDrive] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [DisableLocalMachineRun] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [DisableLocalMachineRunOnce] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [DisableCurrentUserRun] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [DisableCurrentUserRunOnce] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoShellSearchButton] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoFile] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [HideClock] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoTrayItemsDisplay] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoDevMgrUpdate] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoDeletePrinter] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoDFSTab] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoChangeStartMenu] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoLogoff] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoWindowsUpdate] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoEncryptOnMove] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoRunasInstallPrompt] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoResolveSearch] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoHardwareTab] 0
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Policies\Explorer: [NoComputersNearMe] 1
HKLM\...\Windows x64\Print Processors\Canon MG3500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBV.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3500 series: C:\Windows\system32\CNMLMBV.DLL [391168 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\86.0.4240.111\Installer\chrmstp.exe [2020-10-21] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\86.1.16.76\Installer\chrmstp.exe [2020-11-12] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WSAndroidAppHelper.lnk [2020-06-04]
ShortcutTarget: WSAndroidAppHelper.lnk -> C:\Program Files (x86)\Wondershare\drfone\Addins\SocialApps\WSAndroidAppHelper.exe (Wondershare Technology Co.,Ltd -> Microsoft)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WSAppHelper.lnk [2020-06-04]
ShortcutTarget: WSAppHelper.lnk -> C:\Program Files (x86)\Wondershare\drfone\Addins\SocialApps\WSAppHelper.exe (Wondershare Technology Co.,Ltd -> Microsoft)
Startup: C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2020-10-06]
ShortcutTarget: MEGAsync.lnk -> C:\Users\selohu\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)
GroupPolicy: Restricción ? <==== ATENCIÓN
GroupPolicy\User: Restricción ? <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {017F7B94-B7CD-49DD-86E7-B2F0F31EF655} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0E5AD84F-2DC6-42C3-9E32-280D17A392D6} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {186CDDC9-E1ED-47EB-BF0E-76F0DCA2B01B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1FFDF58B-36FB-435D-A031-490E784AC2E3} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {2E9EAF03-7684-4270-8685-9E5A7AFCF838} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: {3F496341-F30E-45C2-9C61-ECD90C3CFE22} - \Adobe Flash Player PPAPI Notifier -> Ningún archivo <==== ATENCIÓN
Task: {455C91EF-BD23-407E-8773-E0DCCD051F69} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\RadeonInstaller.exe [34286264 2020-05-18] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {64540051-6D09-4D15-95C7-E226B056588F} - no ruta de acceso de archivo
Task: {662D79B6-F5E2-4108-A401-25E44C57F814} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [862 2020-06-09] () [Archivo no firmado]
Task: {6AF39008-FDB5-4E7D-BA4A-2420D7EC9D16} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {789FE7E7-E85B-4727-95EB-AD3D7954E98F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {81B663CF-0F2B-471C-A60B-3152A3706506} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8C675202-7FC2-4D38-83F5-D4B93BC71C8A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {95258213-1E40-40B6-A5D0-E3DD6C1C6356} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9C6DD2FC-6EDC-4F03-832C-1C6A7541419F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9F128FF7-23BB-41B9-9259-A061318BD9A7} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A351E836-A11D-4587-B0E0-7961222376FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A3E74B8F-E34F-420E-A8E8-45725EF7699F} - no ruta de acceso de archivo
Task: {B22DFAAB-948F-43D6-9C5D-51C8848162AE} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [163528 2020-11-01] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {B43FD9D8-DB54-4182-80F7-EA4A1EF96C55} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [163528 2020-11-01] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {BB23519F-B669-4666-BCCA-7065627BDE22} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E409EA6A-A56F-4333-BDDF-EFCA1CF46116} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EC3B44B9-FC6C-454C-8BC6-03F54209CFF1} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1706496 2020-05-15] () [Archivo no firmado]
Task: {F86CD580-1703-4823-A6B9-70273F72B471} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

[selohu]

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 80.58.61.250 80.58.61.254
Tcpip\..\Interfaces\{8ae7e996-d9e6-4ca8-a372-ac5cf1c5e946}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
Tcpip\..\Interfaces\{8ae7e996-d9e6-4ca8-a372-ac5cf1c5e946}: [DhcpNameServer] 80.58.61.250 80.58.61.254

Edge: 
======
DownloadDir: C:\Users\selohu\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\selohu\AppData\Local\Microsoft\Edge\User Data\Default [2020-10-16]
Edge DownloadDir: C:\Users\selohu\Downloads
Edge Extension: (Outlook) - C:\Users\selohu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2020-10-16]
Edge Extension: (Word) - C:\Users\selohu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2020-10-16]
Edge Extension: (Excel) - C:\Users\selohu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2020-10-16]
Edge Extension: (PowerPoint) - C:\Users\selohu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2020-10-16]

FireFox:
========
FF HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Firefox\Extensions: [[email protected]] - C:\Users\selohu\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => no encontrado
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-04-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-04-27] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin HKU\S-1-5-21-991384485-3360299836-4042273512-1001: @acestream.net/acestreamplugin,version=3.1.1 -> C:\Users\selohu\AppData\Roaming\ACEStream\player\npace_plugin.dll [Ningún archivo]
FF Plugin HKU\S-1-5-21-991384485-3360299836-4042273512-1001: @acestream.net/acestreamplugin,version=3.1.32 -> C:\Users\selohu\AppData\Roaming\ACEStream\player\npace_plugin.dll [Ningún archivo]

Chrome: 
=======
CHR Profile: C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default [2020-11-13]
CHR HomePage: Default -> hxxps://www.google.es/
CHR DefaultSearchURL: Default -> hxxps://www.gstatic.com/youtube/media/ytm/images/applauncher/music_icon_48x48.png
CHR DefaultSearchKeyword: Default -> ecosia
CHR DefaultSuggestURL: Default -> hxxps://ac.ecosia.org/?q={searchTerms}&type=list&mkt=es
CHR Extension: (Presentaciones) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-11-08]
CHR Extension: (Duolingo en la web) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2020-11-08]
CHR Extension: (Video Downloader professional) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bacakpdjpomjaelpkpkabmedhkoongbi [2020-11-08]
CHR Extension: (Audiense) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bagknoiagpifjfbempgignagkejmkljm [2020-11-08]
CHR Extension: (Grupos de Google) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk [2020-11-08]
CHR Extension: (FacturaDirecta) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfnolnpaocpnjlfciikkkanlkhoognpb [2020-11-08]
CHR Extension: (AdGuard AdBlocker) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2020-11-08]
CHR Extension: (Microsoft Defender Browser Protection) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkbeeeffjjeopflfhgeknacdieedcoml [2020-11-08]
CHR Extension: (Tab Muter) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnclejfcblondkjliiblkojdeloomadd [2020-11-08]
CHR Extension: (Forecastfox (fix version)) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\boljdehmejbffnfiiicckjhafabdepnd [2020-11-08]
CHR Extension: (Nimbus Screenshot & Screen Video Recorder) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpconcjcammlapcogcnnelfmaeghhagj [2020-11-08]
CHR Extension: (MetricSpot) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbinkmboldcdcegndkhnbkdbljadmfjm [2020-11-08]
CHR Extension: (Business Hangouts - Webinars for G Suite) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbjchepdbjeemagnjpoihpkjghelnge [2020-11-08]
CHR Extension: (Avira Safe Shopping) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2020-11-08]
CHR Extension: (Audio Bloqueador de Anuncios para VK™) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgagopbklncgpdeihfdiaebofebhnhen [2020-11-08]
CHR Extension: (Descargador de vídeos) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cgmpmfilbdlmohglaobhngamnglfkgeb [2020-11-08]
CHR Extension: (YouTube Music) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cinhimbnkkaeohfgghhklpknlkffjgod [2020-11-08]
CHR Extension: (uBlock Origin) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-11-08]
CHR Extension: (Spotify - Music for every moment) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkjkdjlofllcpbemipjbcpfnglbgieh [2020-11-08]
CHR Extension: (WGT Golf Challenge) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcilimldmomiaihcfkmaldanopfejefg [2020-11-08]
CHR Extension: (Television) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhldnekicgefkglimkhjnldknpmljece [2020-11-08]
CHR Extension: (Telegram for Chrome) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\djjkifoefibfoodilnhkmbhmadbgacni [2020-11-08]
CHR Extension: (VK Music Player) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ealjjeaapaifdfmlgglpkkjdgkpniaeg [2020-11-08]
CHR Extension: (Ecosia Search) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2020-11-08]
CHR Extension: (Full Screen Weather) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg [2020-11-08]
CHR Extension: (Protección de Internet 360) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\glcimepnljoholdmjchkloafkggfoijh [2020-11-13]
CHR Extension: (TweetDeck by Twitter) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbdpomandigafcibbmofojjchbcdagbl [2020-11-08]
CHR Extension: (PDF Mergy - Merge PDF files) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgecghmkcdefnknohcimkoemhaofpoha [2020-11-08]
CHR Extension: (OSI: Servicio AntiBotnet) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhljghnmjahiaofikeljkjnhbeoiclbh [2020-11-08]
CHR Extension: (Screen Recorder - Grabador de pantalla) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\hniebljpgcogalllopnjokppmgbhaden [2020-11-08]
CHR Extension: (Google Play Music) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg [2020-11-08]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2020-11-08]
CHR Extension: (Player para ver Movistar+) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\kenfcfndncbbggmafjjeihkdclggbojn [2020-11-11]
CHR Extension: (Skyload - Descargador de música y video) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmjjckahdlkcknbgpkdmmobhchpedlck [2020-11-08]
CHR Extension: (Google Play) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2020-11-08]
CHR Extension: (AudioSauna) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkgfemnodkdnenmfkblebnkjpckkjcae [2020-11-08]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-11-08]
CHR Extension: (EliteTorrent | Series y Peliculas Torrent) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\manehhapnafpfkdimecoldieghdojakh [2020-11-08]
CHR Extension: (Extensión Protección de aplicaciones) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mfjnknhkkiafjajicegabkbimfhplplj [2020-11-08]
CHR Extension: (Quick SEO - PageRank, Backlinks & Alexa Tool) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mimhmidgldhoghjoehfigallmmndjkef [2020-11-08]
CHR Extension: (Ace Script) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2020-11-08]
CHR Extension: (Cesta de aparcamiento del centro comercial) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjfoehokglnmbbnncflhhgapdfkhahle [2020-11-08]
CHR Extension: (UltraSurf Security, Privacy & Unblock VPN) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjnbclmflcpookeapghfhapeffmpodij [2020-11-08]
CHR Extension: (SEO Webpage Analysis Tool) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkfhheamcohgngngnmpckfgcfmdabmno [2020-11-08]
CHR Extension: (30 Seconds of Knowledge) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmgplondnjekobonklacmemikcnhklla [2020-11-08]
CHR Extension: (WGT Golf Game) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpedbpkelbhcbkdaglillalioeeekbpb [2020-11-08]
CHR Extension: (Reading Time) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nccohhimobidpghgpnejnbkpoichbbml [2020-11-08]
CHR Extension: (Tracking de correo para Gmail - Mailtrack) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndnaehgpjlnokgebbaldlmgkapkpjkkb [2020-11-12]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-11-08]
CHR Extension: (Trend Micro Toolbar) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohhcpmplhhiiaoiddkfboafbhiknefdf [2020-11-08]
CHR Extension: (Video Downloader) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbbjnobglkpbfmpabbgogbnlffkmgbii [2020-11-08]
CHR Extension: (Chrome Media Router) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-08]
CHR Extension: (SEO Competitor Analysis) - C:\Users\selohu\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnpafbknegcefgoojplahellhohoklbj [2020-11-08]
CHR HKU\S-1-5-21-991384485-3360299836-4042273512-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\selohu\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx <no encontrado>
CHR HKU\S-1-5-21-991384485-3360299836-4042273512-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKU\S-1-5-21-991384485-3360299836-4042273512-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [egkgkjcdnnfpnnmgfeopbmajnbhjmnpp]
CHR HKLM-x32\...\Chrome\Extension: [glcimepnljoholdmjchkloafkggfoijh]
CHR HKLM-x32\...\Chrome\Extension: [ohhcpmplhhiiaoiddkfboafbhiknefdf]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-01-31] (SUPERAntiSpyware.com -> SUPERAntiSpyware.com)
S3 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [950040 2018-11-14] (Acronis International GmbH -> Acronis)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [163528 2020-11-01] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [163528 2020-11-01] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5101992 2020-11-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15228976 2020-09-14] (VMware, Inc. -> )
S3 WDelMgr20; C:\WINDOWS\SysWOW64\drivers\WDelMgr20.exe [57344 2002-05-29] () [Archivo no firmado]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WsDrvInst; C:\Program Files (x86)\Wondershare\drfone\Addins\Transfer\DriverInstall.exe [122768 2020-05-19] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 EsgShKernel; "C:\Program Files\EnigmaSoft\SpyHunter\ShKernel.exe" [X]
S2 MBAMInstallerService; "C:\Users\selohu\AppData\Local\Temp\MBAMInstallerService.exe" [X] <==== ATENCIÓN
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feed726c6560f7a7\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feed726c6560f7a7\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S2 SAVAdminService; no ImagePath
S2 SAVService; no ImagePath
S2 swi_service; no ImagePath

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S3 360AntiHacker; C:\WINDOWS\System32\Drivers\360AntiHacker64.sys [199304 2020-10-21] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
S3 360AvFlt; C:\WINDOWS\System32\DRIVERS\360AvFlt.sys [95232 2020-10-21] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [95232 2020-04-21] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R1 360Box64; C:\WINDOWS\System32\DRIVERS\360Box64.sys [345896 2020-10-21] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
R1 360Camera; C:\WINDOWS\System32\Drivers\360Camera64.sys [57848 2020-10-21] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S0 360elam64; C:\WINDOWS\System32\DRIVERS\360elam64.sys [17192 2020-10-21] (Microsoft Windows Early Launch Anti-malware Publisher -> 360.cn)
R1 360FsFlt; C:\WINDOWS\System32\DRIVERS\360FsFlt.sys [470152 2020-10-21] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
R1 360Hvm; C:\WINDOWS\System32\Drivers\360Hvm64.sys [331560 2020-10-21] (Beijing Qihu Technology Co., Ltd. -> 360安全中心)
R1 360netmon; C:\WINDOWS\System32\DRIVERS\360netmon.sys [96424 2020-10-21] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2017-11-16] (AnchorFree Inc -> The OpenVPN Project)
R3 AVerA706_x64; C:\WINDOWS\system32\DRIVERS\AVerA706_x64.sys [1414528 2008-08-18] (Microsoft Windows Hardware Compatibility Publisher -> AVerMedia TECHNOLOGIES, Inc.)
R3 AVerAF15DMBTH64; C:\WINDOWS\System32\Drivers\AVerAF15DMBTH64.sys [592256 2009-07-27] (Microsoft Windows Hardware Compatibility Publisher -> AVerMedia TECHNOLOGIES, Inc.)
R3 BtAudioBusSrv; C:\WINDOWS\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (Ralink Technology Corporation -> IVT Corporation)
S1 ElRawDisk; no ImagePath
S3 EnigmaFileMonDriver; C:\WINDOWS\System32\drivers\EnigmaFileMonDriver.sys [76744 2020-11-08] (EnigmaSoft Limited -> EnigmaSoft Limited)
S3 esihdrv; C:\Users\selohu\AppData\Local\Temp\esihdrv.sys [205464 2020-11-12] (ESET, spol. s r.o. -> ESET) <==== ATENCIÓN
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 HWHandSet; C:\WINDOWS\system32\DRIVERS\hw_quusbmdm.sys [226560 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-04-20] (Martin Malik - REALiX -> REALiX(tm))
S3 hwusb_cdcacm; C:\WINDOWS\system32\DRIVERS\hw_cdcacm.sys [127360 2019-12-27] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 hw_ctrlfakedev; C:\WINDOWS\system32\DRIVERS\hw_ctrlfakedev.sys [115712 2015-03-10] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 iriunv0; C:\WINDOWS\System32\DriverStore\FileRepository\iriunvid.inf_amd64_58518cc843573ae0\iriunv0.sys [38272 2020-09-21] (Iriun Oy -> Windows (R) Win 7 DDK provider)
S3 jakstaVA; C:\WINDOWS\System32\drivers\jaksta_va.sys [103816 2017-02-23] (Jaksta Technologies Pty Ltd -> e2eSoft)
S3 kmloop; C:\WINDOWS\System32\drivers\loop.sys [17408 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-11-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-11-06] (Malwarebytes Inc -> Malwarebytes)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [83728 2020-08-25] (Insecure.Com LLC -> Insecure.Com LLC.)
S4 npcap_wifi; C:\WINDOWS\system32\DRIVERS\npcap.sys [83728 2020-08-25] (Insecure.Com LLC -> Insecure.Com LLC.)
S1 NtFsLdf20; C:\Windows\SysWow64\Drivers\NtFsLdf20.sys [77824 2002-08-09] () [Archivo no firmado]
R1 Null; no ImagePath
U5 PROCMON24; C:\Windows\System32\Drivers\PROCMON24.sys [90168 2020-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals - www.sysinternals.com)
S3 RTL8023x64; C:\WINDOWS\System32\drivers\Rtnic64.sys [51712 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (Support.com, Inc. -> SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SAVOnAccess; C:\WINDOWS\System32\DRIVERS\savonaccess.sys [216280 2020-09-25] (Sophos Ltd -> Sophos Limited)
S3 sdcfilter; C:\WINDOWS\system32\DRIVERS\sdcfilter.sys [38144 2020-09-25] (Sophos Limited -> Sophos Limited)
R1 swi_callout; C:\WINDOWS\system32\DRIVERS\swi_callout.sys [47760 2020-09-25] (Sophos Limited -> Sophos Limited)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2020-08-31] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R0 TMEBC; C:\WINDOWS\System32\DRIVERS\TMEBC64.sys [74760 2019-06-04] (Trend Micro, Inc. -> Trend Micro Inc.)
R2 tmeevw; C:\WINDOWS\system32\DRIVERS\tmeevw.sys [147672 2017-05-10] (Trend Micro, Inc. -> Trend Micro Inc.)
S0 tmel; C:\WINDOWS\System32\DRIVERS\tmel.sys [37552 2019-06-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Trend Micro Inc.)
R1 tmeyes; C:\WINDOWS\system32\DRIVERS\tmeyes.sys [684856 2020-03-24] (Trend Micro, Inc. -> Trend Micro Inc.)
R2 tmnciesc; C:\WINDOWS\system32\DRIVERS\tmnciesc.sys [562296 2018-03-07] (Trend Micro, Inc. -> Trend Micro Inc.)
S1 tmumh; C:\WINDOWS\system32\DRIVERS\TMUMH.sys [160544 2020-03-27] (Trend Micro, Inc. -> Trend Micro Inc.)
R2 tmusa; C:\WINDOWS\system32\DRIVERS\tmusa.sys [137776 2019-05-04] (Trend Micro, Inc. -> Trend Micro Inc.)
R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [68544 2020-09-14] (VMware, Inc. -> VMware, Inc.)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [105912 2020-08-11] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [54592 2020-08-11] (VMware, Inc. -> VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-11-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429288 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-06] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz148; \??\C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [X]
S3 efavdrv; \??\C:\WINDOWS\system32\drivers\efavdrv.sys [X]
S3 WinRing0_1_2_0; \??\C:\Users\selohu\AppData\Local\Temp\tmp2827.tmp [X] <==== ATENCIÓN

[selohu]

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) ===================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-11-14 14:05 - 2020-11-14 14:06 - 000039038 _____ C:\Users\selohu\Desktop\FRST.txt
2020-11-14 13:46 - 2020-11-14 13:46 - 002298368 _____ (Farbar) C:\Users\selohu\Desktop\FRST64.exe
2020-11-14 13:38 - 2020-11-14 13:38 - 000000068 __RSH C:\WINDOWS\system32\Drivers\WUDFRd.winsecurity
2020-11-14 13:09 - 2020-11-14 13:09 - 000000068 __RSH C:\WINDOWS\system32\Drivers\xboxgip.winsecurity
2020-11-14 13:02 - 2020-11-14 13:02 - 000018766 _____ C:\Users\selohu\Desktop\Lista.m3u8
2020-11-14 12:55 - 2020-11-14 13:01 - 000000000 ____D C:\Users\selohu\AppData\Roaming\BSplayer PRO
2020-11-14 12:55 - 2020-11-14 12:55 - 000001258 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
2020-11-14 12:55 - 2020-11-14 12:55 - 000001252 _____ C:\Users\Public\Desktop\BS.Player PRO.lnk
2020-11-14 12:55 - 2020-11-14 12:55 - 000000000 ____D C:\Users\selohu\Desktop\2.75.B.1089
2020-11-14 12:55 - 2020-11-14 12:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2020-11-14 12:55 - 2020-11-14 12:55 - 000000000 ____D C:\Program Files (x86)\Webteh
2020-11-14 12:54 - 2020-11-14 12:54 - 011463934 _____ C:\Users\selohu\Desktop\2.75.B.1089.rar
2020-11-14 12:50 - 2020-11-14 12:50 - 000018920 _____ C:\Users\selohu\Desktop\Lista.m3u
2020-11-14 12:44 - 2020-11-14 12:52 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Winamp
2020-11-14 12:44 - 2020-11-14 12:44 - 000001082 _____ C:\Users\Public\Desktop\Winamp.lnk
2020-11-14 12:44 - 2020-11-14 12:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winamp
2020-11-14 12:44 - 2020-11-14 12:44 - 000000000 ____D C:\Program Files (x86)\Winamp
2020-11-14 12:43 - 2020-11-14 12:44 - 008201952 _____ (Nullsoft, Inc.) C:\Users\selohu\Desktop\winamp58_3660_beta_full_en-us.exe
2020-11-14 11:41 - 2020-11-14 11:41 - 000000004 ____H C:\ProgramData\cm-lock
2020-11-14 05:13 - 2020-11-14 05:13 - 000000000 ____D C:\Users\selohu\Documents\IPTViewr
2020-11-14 05:13 - 2020-11-14 05:13 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IPTVievr para movistar+ v1.5 “Kruger 60” beta 1 SP1
2020-11-14 05:04 - 2020-11-14 05:04 - 000000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2020-11-14 05:03 - 2020-11-14 05:03 - 030265344 _____ C:\Users\selohu\Desktop\IPTViewr_Movistar+_1-5_beta-1-sp1a_es-es.msi
2020-11-14 04:16 - 2020-11-14 04:16 - 000000000 ____D C:\Users\selohu\AppData\Local\www.alphacentaury.org
2020-11-14 04:08 - 2020-11-14 05:04 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2020-11-14 04:08 - 2020-11-14 04:08 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2020-11-14 04:08 - 2020-11-14 04:08 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2020-11-14 01:55 - 2020-11-14 01:55 - 000501546 _____ C:\Users\selohu\Desktop\Dependenciasformasnormales.pdf
2020-11-14 01:50 - 2020-11-14 01:50 - 000000000 ____D C:\Users\selohu\Desktop\Cuaderno_VLSM (2)
2020-11-14 01:48 - 2020-11-14 01:47 - 001886439 _____ C:\Users\selohu\Desktop\Cuaderno_VLSM (2).rar
2020-11-13 21:06 - 2020-11-13 21:19 - 000000000 ____D C:\Users\selohu\AppData\Roaming\AirLiveDrive
2020-11-13 21:06 - 2020-11-13 21:06 - 000000943 _____ C:\Users\selohu\Desktop\AirLiveDrive.lnk
2020-11-13 21:06 - 2020-11-13 21:06 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AirLiveDrive
2020-11-13 21:05 - 2020-11-13 21:06 - 000000000 ____D C:\Program Files\AirLiveDrive
2020-11-13 20:30 - 2020-11-13 20:30 - 000000000 ____D C:\Users\selohu\Desktop\piwigo-2.10.2
2020-11-13 20:21 - 2020-11-13 20:22 - 017391322 _____ C:\Users\selohu\Desktop\piwigo-2.10.2.zip
2020-11-13 14:33 - 2020-11-13 14:34 - 000000000 ____D C:\Users\selohu\Documents\ip
2020-11-12 22:51 - 2020-11-12 22:52 - 000000000 ____D C:\Users\selohu\Documents\2020-11-12
2020-11-12 22:50 - 2020-11-13 15:36 - 003701850 _____ C:\Users\selohu\Documents\IMG_001.bmp
2020-11-12 22:48 - 2020-11-13 15:35 - 003788154 _____ C:\Users\selohu\Documents\IMG.bmp
2020-11-12 22:45 - 2020-11-12 22:45 - 000000000 ____D C:\Users\selohu\Documents\Adobe
2020-11-12 21:36 - 2020-11-12 21:36 - 000001000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2021.lnk
2020-11-12 21:36 - 2020-11-12 21:36 - 000000988 _____ C:\Users\selohu\Desktop\Adobe Photoshop 2021.lnk
2020-11-12 20:08 - 2020-11-12 22:28 - 000000000 ___RD C:\Program Files\Adobe Photoshop 2021
2020-11-12 19:48 - 2020-11-12 19:48 - 000000000 ___HD C:\temp
2020-11-12 19:42 - 2020-11-12 20:09 - 000000000 ____D C:\Users\selohu\Desktop\ADOBE
2020-11-12 19:08 - 2020-11-12 19:08 - 001055448 _____ C:\Users\selohu\Desktop\39.pdf
2020-11-12 19:04 - 2020-11-12 19:04 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Imagenomic
2020-11-12 16:39 - 2020-11-12 16:39 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Everything
2020-11-12 16:11 - 2020-11-12 16:11 - 001029415 _____ C:\Users\selohu\Desktop\regseeker-4-7.zip
2020-11-12 16:11 - 2020-11-12 16:11 - 000000000 ____D C:\Users\selohu\Desktop\regseeker-4-7
2020-11-12 15:28 - 2020-11-12 15:28 - 000036408 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2020-11-12 13:40 - 2020-11-12 13:40 - 000528872 _____ C:\Users\selohu\Desktop\crystal_security_3.7.0.40.zip
2020-11-11 23:57 - 2020-11-11 23:57 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\32D5B694.sys
2020-11-11 23:57 - 2020-11-11 23:57 - 000192952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2020-11-11 23:56 - 2020-11-11 23:57 - 000111382 _____ C:\TDSSKiller.3.1.0.28_11.11.2020_23.56.20_log.txt
2020-11-11 23:54 - 2020-11-11 23:55 - 000010026 _____ C:\TDSSKiller.3.1.0.28_11.11.2020_23.54.53_log.txt
2020-11-11 23:45 - 2020-11-14 04:10 - 000000000 ____D C:\Users\selohu\AppData\Local\CrashDumps
2020-11-11 22:59 - 2020-11-11 22:59 - 000055232 _____ C:\WINDOWS\system32\Drivers\hitmanpro37.sys
2020-11-11 21:54 - 2020-11-11 23:55 - 000000000 ____D C:\WINDOWS\CryptoGuard
2020-11-11 21:53 - 2020-11-11 21:53 - 000000000 ____D C:\WINDOWS\SysWOW64\SophosAV
2020-11-11 21:53 - 2020-11-11 21:53 - 000000000 ____D C:\WINDOWS\system32\SophosAV
2020-11-11 21:53 - 2020-09-25 12:14 - 000047760 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\swi_callout.sys
2020-11-11 21:53 - 2020-09-25 12:14 - 000037376 _____ (Sophos Limited) C:\WINDOWS\system32\SophosBootTasks.exe
2020-11-11 21:50 - 2020-09-25 12:14 - 000216280 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\savonaccess.sys
2020-11-11 21:50 - 2020-09-25 12:14 - 000176120 _____ (Sophos Limited) C:\WINDOWS\system32\sdccoinstaller.dll
2020-11-11 21:50 - 2020-09-25 12:14 - 000045840 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\SophosBootDriver.sys
2020-11-11 21:50 - 2020-09-25 12:14 - 000038144 _____ (Sophos Limited) C:\WINDOWS\system32\Drivers\sdcfilter.sys
2020-11-11 21:46 - 2020-11-11 23:56 - 000000000 ____D C:\ProgramData\Sophos
2020-11-11 21:46 - 2020-11-11 23:47 - 000000000 ____D C:\Program Files (x86)\Sophos
2020-11-11 21:09 - 2020-11-11 21:09 - 000090168 ____H (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCMON24.SYS
2020-11-11 12:11 - 2020-11-11 12:11 - 024265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 010840904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 010336904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 008895680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 008235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 007783936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 007107584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 005833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 004902400 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 004783840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 004629328 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 003893248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 003869184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 003851776 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 003815936 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 003811840 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 003779392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 003362304 _____ (Microsoft Corporation) C:\WINDOWS\system32\HostNetSvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 002942976 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 002809776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 002749952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 002648576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 002485560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmswitch.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 002426168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 002268456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 002250240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001827648 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001819640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001751944 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001590584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001557816 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 001523712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MoUsoCoreWorker.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001478464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 001449984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001414656 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 001352240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001278464 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001255736 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 001210136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 001192096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001128520 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 001056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000980992 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000926720 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000904008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000885248 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000866304 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000860672 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000859400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000805168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000802304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000787968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2013CustomActions.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000763344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000732448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000713728 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000700376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000628224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtrmgr.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000616448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000567296 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000553472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000535040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2013CustomActions.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000521088 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprdim.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtrmgr.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000488056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000482120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000454968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000441856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000429712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000423224 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000413208 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000410072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000409408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprdim.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000382712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000378880 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysFxUI.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\RasMediaManager.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000344000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000305472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000291656 _____ (Microsoft Corporation) C:\WINDOWS\system32\nvspinfo.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000288680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000253016 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000252928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000250176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasplap.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-11-11 12:11 - 2020-11-11 12:11 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000228680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000218936 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000209408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000201536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasplap.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000195400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000195144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000189440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-11-11 12:11 - 2020-11-11 12:11 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtm.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtm.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000153912 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcl.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rpcxdr.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000133448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcl.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000132744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdSSDP.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000104760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PktMon.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmk.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000092960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdSSDP.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000070968 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000061760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000051016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VmsProxy.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000047616 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000042824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000039240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\VmsProxyHNic.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\FaxPrinterInstaller.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000020280 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2020-11-11 12:11 - 2020-11-11 12:11 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000016136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\drmkaud.sys
2020-11-11 12:11 - 2020-11-11 12:11 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iprtprio.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000009265 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-11-11 12:11 - 2020-11-11 12:11 - 000009216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iprtprio.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2020-11-11 12:11 - 2020-11-11 12:11 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2020-11-11 12:03 - 2020-10-15 04:22 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-11-11 12:03 - 2020-10-15 04:14 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-11-10 12:12 - 2020-11-11 16:17 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Apple Computer
2020-11-10 12:12 - 2020-11-10 12:14 - 000000000 ____D C:\Users\selohu\AppData\Local\Apple Computer
2020-11-10 12:12 - 2020-11-10 12:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2020-11-10 12:11 - 2020-11-10 12:11 - 000002579 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2020-11-10 12:11 - 2020-11-10 12:11 - 000000000 ____D C:\WINDOWS\system32\Tasks\Apple
2020-11-10 12:11 - 2020-11-10 12:11 - 000000000 ____D C:\Users\selohu\AppData\Local\Apple
2020-11-10 12:11 - 2020-11-10 12:11 - 000000000 ____D C:\Program Files\Common Files\Apple
2020-11-10 12:11 - 2020-11-10 12:11 - 000000000 ____D C:\Program Files\Bonjour

[selohu]

000000 ____D C:\Program Files (x86)\Bonjour
2020-11-10 12:11 - 2020-11-10 12:11 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2020-11-09 16:28 - 2020-11-09 16:28 - 000022925 _____ C:\Users\selohu\Documents\comandos Mageia.odt
2020-11-08 16:21 - 2020-11-08 16:21 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2020-11-08 15:45 - 2020-11-08 15:45 - 000000000 ____D C:\ProgramData\Apple Computer
2020-11-08 15:37 - 2020-11-10 12:10 - 000000000 ____D C:\ProgramData\Apple
2020-11-08 15:37 - 2020-11-08 15:37 - 000000000 ____D C:\ProgramData\Apple Inc
2020-11-08 14:28 - 2020-11-08 14:28 - 000002364 _____ C:\Users\selohu\Desktop\Google Chrome.lnk
2020-11-08 01:27 - 2020-11-08 01:27 - 000001140 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2020-11-08 01:27 - 2020-11-08 01:27 - 000000000 ____D C:\Users\selohu\AppData\Local\VS Revo Group
2020-11-08 01:27 - 2020-11-08 01:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2020-11-08 01:27 - 2020-09-29 09:54 - 000047280 _____ (VS Revo Group) C:\WINDOWS\system32\Drivers\revoflt.sys
2020-11-08 01:26 - 2020-11-08 01:27 - 000000000 ____D C:\Users\selohu\Desktop\4.3.7-PVP
2020-11-08 01:25 - 2020-11-08 01:25 - 017187694 _____ C:\Users\selohu\Desktop\4.3.7-PVP.rar
2020-11-07 20:20 - 2020-09-11 14:31 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2dp.sys
2020-11-07 16:15 - 2020-11-07 16:17 - 000000000 ____D C:\Users\selohu\Desktop\RevoUninstaller_Portable
2020-11-07 00:27 - 2020-11-07 00:27 - 000570741 _____ C:\Users\selohu\Desktop\RAID.odt
2020-11-06 19:14 - 2020-11-13 16:35 - 000000000 ____D C:\Users\selohu\Desktop\Clase Hangaus Compañeros 2018
2020-11-06 04:36 - 2020-11-06 04:36 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-11-06 04:36 - 2020-11-06 04:36 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-11-06 00:20 - 2020-11-06 00:20 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\653622EE.sys
2020-11-05 23:41 - 2020-11-05 23:41 - 000000602 __RSH C:\ProgramData\ntuser.pol
2020-11-05 03:11 - 2020-11-05 03:11 - 011957376 _____ C:\Users\selohu\Desktop\RansomwareFileDecryptor 1.0.1668 MUI.zip
2020-11-05 03:02 - 2020-11-05 03:02 - 002492226 _____ C:\Users\selohu\Desktop\CryptoSearch.zip
2020-11-05 03:02 - 2020-11-05 03:02 - 000000000 ____D C:\Users\selohu\Desktop\CryptoSearch
2020-11-05 00:01 - 2020-11-05 11:54 - 000000000 ____D C:\Users\selohu\Desktop\odbg201
2020-11-04 23:29 - 2020-11-04 23:29 - 006965278 _____ C:\Users\selohu\Desktop\odbg201.zip
2020-11-04 23:29 - 2020-11-04 23:29 - 000115034 _____ C:\Users\selohu\Desktop\Disasm201.zip
2020-11-04 20:24 - 2020-11-04 20:24 - 000000000 ____D C:\ProgramData\360sd
2020-11-04 20:14 - 2020-11-14 11:39 - 000000001 _____ C:\WINDOWS\system32\Drivers\360Hvm64.dat
2020-11-04 20:14 - 2020-11-06 04:32 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\360 Security Center
2020-11-04 20:14 - 2020-11-05 23:51 - 000000000 ____D C:\Users\selohu\AppData\LocalLow\360WD
2020-11-04 20:14 - 2020-11-04 20:14 - 000000000 _RSHD C:\360SANDBOX
2020-11-04 20:14 - 2020-10-21 07:47 - 000470152 _____ (360.cn) C:\WINDOWS\system32\Drivers\360FsFlt.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000345896 _____ (360.cn) C:\WINDOWS\system32\Drivers\360Box64.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000331560 _____ (360安全中心) C:\WINDOWS\system32\Drivers\360Hvm64.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000199304 _____ (360.cn) C:\WINDOWS\system32\Drivers\360AntiHacker64.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000096424 _____ (360.cn) C:\WINDOWS\system32\Drivers\360netmon.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000095232 _____ (360.cn) C:\WINDOWS\system32\Drivers\360AvFlt.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000057848 _____ (360.cn) C:\WINDOWS\system32\Drivers\360Camera64.sys
2020-11-04 20:14 - 2020-10-21 07:47 - 000017192 _____ (360.cn) C:\WINDOWS\system32\Drivers\360elam64.sys
2020-11-04 19:22 - 2020-11-04 19:22 - 000000000 ____D C:\Program Files (x86)\Labtec
2020-11-04 19:10 - 2020-11-04 19:10 - 000000807 _____ C:\Users\selohu\Desktop\Documentos.lnk
2020-11-04 18:50 - 2020-11-04 18:50 - 000193133 _____ C:\drivers.html
2020-11-04 17:03 - 2020-11-04 17:04 - 000000000 ____D C:\Users\selohu\Desktop\Roll20
2020-11-03 15:48 - 2020-11-03 15:48 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Macromedia
2020-11-03 15:40 - 2020-11-03 15:41 - 540574528 _____ (TechSmith Corporation) C:\Users\selohu\Desktop\camtasia.exe
2020-11-02 16:52 - 2020-11-02 16:52 - 000182120 _____ C:\Users\selohu\Documents\Firewire USB.odt
2020-11-02 00:24 - 2020-11-07 16:12 - 000000000 ____D C:\Users\selohu\Desktop\AnalisisMalware
2020-11-02 00:10 - 2020-11-02 00:14 - 000018367 _____ C:\Users\selohu\Documents\Análisis de Malware Platzi.odt
2020-11-01 23:36 - 2020-11-01 23:36 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-11-01 23:36 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2020-11-01 23:36 - 2020-10-20 13:56 - 002797552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2020-11-01 23:36 - 2020-10-17 16:01 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2020-11-01 21:57 - 2020-11-01 21:57 - 000001292 _____ C:\Users\selohu\Downloads\index.m3u8
2020-11-01 21:02 - 2020-11-12 21:09 - 000002406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2020-11-01 21:01 - 2020-11-01 21:02 - 000000000 ____D C:\Users\selohu\AppData\Local\BraveSoftware
2020-11-01 21:01 - 2020-11-01 21:01 - 000003640 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
2020-11-01 21:01 - 2020-11-01 21:01 - 000003516 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
2020-11-01 21:01 - 2020-11-01 21:01 - 000000000 ____D C:\Program Files\BraveSoftware
2020-11-01 21:01 - 2020-11-01 21:01 - 000000000 ____D C:\Program Files (x86)\BraveSoftware
2020-11-01 02:53 - 2020-11-01 02:53 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0
2020-11-01 02:52 - 2020-11-01 02:53 - 000000000 ____D C:\Program Files\LibreOffice
2020-11-01 02:33 - 2020-11-01 02:33 - 026936888 _____ C:\Users\selohu\Desktop\UCheck64.exe
2020-10-31 05:32 - 2020-10-31 05:32 - 012792104 _____ (ESET) C:\Users\selohu\Desktop\avremover_nt64_enu.exe
2020-10-31 05:31 - 2020-10-31 05:31 - 002272888 _____ (ESET) C:\Users\selohu\Desktop\ESETLogCollector_esn.exe
2020-10-31 05:30 - 2020-10-31 05:30 - 007538784 _____ (ESET) C:\Users\selohu\Desktop\SysInspector.exe
2020-10-31 02:22 - 2020-10-31 02:22 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Psiphon3
2020-10-31 00:03 - 2020-11-04 20:20 - 000000000 ____D C:\Users\selohu\AppData\Local\VMware
2020-10-31 00:03 - 2020-11-04 15:42 - 000000000 ____D C:\Users\selohu\AppData\Roaming\VMware
2020-10-31 00:02 - 2020-09-14 05:56 - 000110696 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys
2020-10-31 00:02 - 2020-08-11 00:25 - 000048224 _____ (VMware, Inc.) C:\WINDOWS\system32\vsocklib.dll
2020-10-31 00:02 - 2020-08-11 00:25 - 000044128 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vsocklib.dll
2020-10-31 00:02 - 2020-08-11 00:24 - 000105912 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vsock.sys
2020-10-31 00:01 - 2020-10-31 00:01 - 001802482 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2020-10-31 00:01 - 2020-10-31 00:01 - 000001024 _____ C:\WINDOWS\SysWOW64\%TMP%
2020-10-31 00:01 - 2020-09-14 06:04 - 001305648 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll
2020-10-31 00:01 - 2020-09-14 06:02 - 000422448 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe
2020-10-31 00:01 - 2020-09-14 06:02 - 000379440 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe
2020-10-31 00:01 - 2020-09-14 06:02 - 000119736 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetinst.dll
2020-10-31 00:01 - 2020-09-14 06:02 - 000045664 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmnetuserif.sys
2020-10-31 00:01 - 2020-08-13 01:19 - 000085448 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\hcmon.sys
2020-10-31 00:00 - 2020-10-31 00:00 - 000000000 ____D C:\Users\Public\Documents\Shared Virtual Machines
2020-10-31 00:00 - 2020-10-31 00:00 - 000000000 ____D C:\Program Files\Common Files\VMware
2020-10-31 00:00 - 2020-10-31 00:00 - 000000000 ____D C:\Program Files (x86)\VMware
2020-10-30 23:54 - 2020-10-31 05:27 - 000023761 _____ C:\Users\selohu\Documents\Malware Platzi Apuntes.odt
2020-10-30 23:52 - 2020-10-30 23:53 - 000000000 ____D C:\Users\selohu\VirtualBox VMs
2020-10-30 23:34 - 2020-11-04 20:20 - 000000000 ____D C:\Users\selohu\.VirtualBox
2020-10-30 23:34 - 2020-10-30 23:53 - 000000000 ____D C:\ProgramData\VirtualBox
2020-10-30 23:26 - 2020-11-14 11:39 - 000000000 ____D C:\ProgramData\VMware
2020-10-30 13:57 - 2020-10-31 01:23 - 000000000 ____D C:\Program Files\Common Files\WebM Project
2020-10-30 13:57 - 2020-10-30 13:57 - 000000000 ____D C:\Users\selohu\log
2020-10-30 13:57 - 2020-10-30 13:57 - 000000000 ____D C:\Users\selohu\AppData\Local\Icecream
2020-10-30 13:57 - 2020-10-30 13:57 - 000000000 ____D C:\Users\selohu\.Icecream Screen Recorder
2020-10-30 13:52 - 2016-11-18 07:18 - 001457312 _____ (Sysinternals - www.sysinternals.com) C:\Users\selohu\Desktop\procexp64.exe
2020-10-30 13:29 - 2020-10-30 13:29 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\455527CD.sys
2020-10-30 12:47 - 2020-10-30 12:47 - 000000000 ____D C:\Users\selohu\AppData\Roaming\livestreamer
2020-10-30 12:47 - 2020-10-30 12:47 - 000000000 ____D C:\Program Files (x86)\Livestreamer
2020-10-30 11:52 - 2020-10-30 11:52 - 000000000 ____D C:\Users\Public\Documents\sun
2020-10-30 11:18 - 2020-10-30 12:15 - 000000000 ____D C:\Users\selohu\dwhelper
2020-10-30 11:17 - 2020-10-30 11:18 - 000000000 ____D C:\Program Files\net.downloadhelper.coapp
2020-10-30 00:42 - 2020-10-30 00:42 - 000000971 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 3.lnk
2020-10-30 00:42 - 2020-10-30 00:42 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Sublime Text 3
2020-10-30 00:42 - 2020-10-30 00:42 - 000000000 ____D C:\Users\selohu\AppData\Local\Sublime Text 3
2020-10-30 00:42 - 2020-10-30 00:42 - 000000000 ____D C:\Program Files\Sublime Text 3
2020-10-29 18:20 - 2020-10-29 18:20 - 026274304 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 023452160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 019870720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 018083840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 007636448 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 007621632 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 006422016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 006368392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 006001208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 005430992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 004830720 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 004752896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 004281856 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 004277248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 004069992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 003933696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 003821064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 003230024 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 003157816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002983736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 002760704 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002607104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002520056 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002477384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002384696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.AppAgent.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002318848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 002012672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001953792 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001695728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001683456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001664160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001632056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.AppAgent.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001499136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vfpext.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 001391616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001287496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmComputeAgent.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 001272320 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 001255424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001239040 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_IME.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001238528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001117328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001031496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CmService.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 001017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsreg.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000947712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000928256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000894776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000873272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000867328 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\adtschema.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000845312 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 000756680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000659456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000648712 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000645632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\agentactivationruntimewindows.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000628736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\agentactivationruntime.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000627200 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.ConversationalAgent.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_9.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\gns.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000546968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\IESettingSync.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000534536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000502584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2020-10-29 18:20 - 2020-10-29 18:20 - 000501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000491520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000489128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000442168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000413696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000357888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000340992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000339456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AarSvc.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfpctrl.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 000303104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardSvr.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nfsrdr.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.Ngc.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000218112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000218112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctfp.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskpart.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\system32\netid.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000176128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaudite.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000153600 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertPolEng.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netid.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbnetlib.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 000117064 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000114176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssitlb.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000109056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbnetlib.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\system32\nfsclnt.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManagerApi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000095048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcXtrnal.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardDlg.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msobjs.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\amsi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SCardBi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msscntrs.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Uev.Office2010CustomActions.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scfilter.sys
2020-10-29 18:20 - 2020-10-29 18:20 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\gmsaclient.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\vfpapi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Uev.Office2010CustomActions.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-10-29 18:20 - 2020-10-29 18:20 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gmsaclient.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000024792 _____ (Microsoft Corporation) C:\WINDOWS\system32\nsi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000021320 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000020144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nsi.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsregtask.dll
2020-10-29 18:20 - 2020-10-29 18:20 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcXtrnal.dll
2020-10-29 18:19 - 2020-10-29 18:20 - 000603448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 008009872 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 007990232 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 006231040 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 006196736 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 004732928 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 004651032 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 004008448 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 003750400 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 003388928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 003305984 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 003089920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 003070464 _____ (Microsoft Corporation) C:\WINDOWS\system32\FluencyDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 002979840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 002850616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 002048000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 002024248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001828352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001715200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001649664 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001590784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001515520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001481216 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001361920 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsf3gip.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001245280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001228800 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001097216 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001094656 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskbarcpl.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001070392 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001036288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 001025768 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000988000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000983408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\adtschema.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000849920 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000828432 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000820552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000781312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000763392 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000754176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000712296 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000705008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000677888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000635840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_9.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000598016 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxAPDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000538952 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

[selohu]

2020-11-10 12:11 - 2020-11-10 12:11 - 000
2020-10-29 18:19 - 2020-10-29 18:19 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000515072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxHAPDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000509792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000493056 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtCangjieDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000463872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtBopomofoDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtHkStrokeDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChsStrokeDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000459264 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadauthhelper.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtQuickDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000423224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SpeechPrivacy.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000381952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpndecoder.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChxDecoder.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000376120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\chxinputrouter.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.Ngc.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000320512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsbas.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000319488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtfDecoder.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000298808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000297472 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpnranker.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000260800 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\XamlTileRender.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskpart.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_InkingTypingPrivacy.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000180040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\trie.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFFuzzyDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000175416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsp.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertPolEng.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdvancedEmojiDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaudite.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000152576 _____ C:\WINDOWS\system32\EoAExperiences.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BrowserDeclutter.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000145408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000134968 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\VocabRoamingHandler.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerApi.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssitlb.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSAssessment.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\chxranker.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000118600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFSpellcheckDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\HashtagDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ChtAdvancedDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTFAppServiceDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\RuleBasedDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000098120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\jpninputrouter.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsi.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msobjs.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000062976 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransliterationRanker.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\EmojiDS.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\devauthe.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-10-29 18:19 - 2020-10-29 18:19 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2020-10-29 18:19 - 2020-10-29 18:19 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregtask.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsilog.dll
2020-10-29 18:19 - 2020-10-29 18:19 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\amsiproxy.dll
2020-10-29 18:09 - 2020-10-29 18:09 - 000002436 _____ C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-10-29 17:50 - 2020-10-29 17:51 - 030913080 _____ C:\Users\selohu\Desktop\RogueKiller64.exe
2020-10-29 15:37 - 2020-10-29 17:40 - 009167384 _____ C:\Users\selohu\Downloads\MB-SupportTool.exe
2020-10-29 15:37 - 2020-10-29 17:40 - 002299904 _____ (Farbar) C:\Users\selohu\Downloads\FRSTEnglish.exe
2020-10-29 02:30 - 2020-10-30 10:46 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2020-10-29 02:30 - 2020-10-29 02:50 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2020-10-29 02:30 - 2020-10-29 02:30 - 000000000 ____D C:\Users\selohu\AppData\Roaming\SUPERAntiSpyware.com
2020-10-29 02:30 - 2020-10-29 02:30 - 000000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2020-10-29 02:17 - 2020-10-29 02:17 - 000000000 ____D C:\Users\selohu\Desktop\SUPERAntiSpyware Professional TutorialesF.O
2020-10-29 02:07 - 2020-10-29 02:07 - 001150168 _____ (CheckMAL Inc.) C:\WINDOWS\system32\AppCheck64.dll.old.1
2020-10-29 02:07 - 2020-10-29 02:07 - 001150168 _____ (CheckMAL Inc.) C:\WINDOWS\system32\AppCheck64.dll
2020-10-29 01:55 - 2020-10-29 01:55 - 001111880 _____ (CheckMAL Inc.) C:\WINDOWS\SysWOW64\AppCheck32.dll.old.1
2020-10-29 01:55 - 2020-10-29 01:55 - 001111880 _____ (CheckMAL Inc.) C:\WINDOWS\SysWOW64\AppCheck32.dll
2020-10-28 23:38 - 2020-11-08 02:59 - 000076744 _____ (EnigmaSoft Limited) C:\WINDOWS\system32\Drivers\EnigmaFileMonDriver.sys
2020-10-28 23:34 - 2020-11-08 02:58 - 000000000 ____D C:\Program Files\EnigmaSoft
2020-10-28 18:54 - 2020-10-28 18:54 - 000000000 ____D C:\sh5ldr
2020-10-28 18:54 - 2020-10-28 18:54 - 000000000 ____D C:\ProgramData\EnigmaSoft Limited
2020-10-28 11:18 - 2020-11-06 00:32 - 000000000 ____D C:\KVRT_Data
2020-10-28 10:57 - 2020-10-28 11:07 - 000000000 ____D C:\ProgramData\RogueKiller
2020-10-28 03:14 - 2020-10-28 03:18 - 000000000 ____D C:\ProgramData\HitmanPro
2020-10-28 02:52 - 2020-10-28 02:52 - 000000000 ____D C:\NoBot
2020-10-27 23:15 - 2020-11-11 23:58 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-10-27 13:48 - 2020-10-27 13:59 - 000000000 ____D C:\Users\selohu\AppData\Roaming\audacity
2020-10-27 13:48 - 2020-10-27 13:48 - 000001122 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2020-10-27 13:48 - 2020-10-27 13:48 - 000000000 ____D C:\Users\selohu\AppData\Local\Audacity
2020-10-27 13:48 - 2020-10-27 13:48 - 000000000 ____D C:\Program Files (x86)\Audacity
2020-10-27 01:11 - 2020-10-27 01:11 - 000001141 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GetDataBack Pro.lnk
2020-10-27 01:11 - 2020-10-27 01:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software
2020-10-27 01:11 - 2020-10-27 01:11 - 000000000 ____D C:\Program Files\Runtime Software
2020-10-27 00:15 - 2020-10-27 00:43 - 000000000 ____D C:\Program Files\CrystalDiskInfo
2020-10-27 00:15 - 2020-10-27 00:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2020-10-26 20:43 - 2020-11-08 01:27 - 000000000 ____D C:\Program Files\VS Revo Group
2020-10-26 20:43 - 2020-10-26 20:43 - 000000000 ____D C:\ProgramData\VS Revo Group
2020-10-26 20:31 - 2020-10-26 20:31 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\2771F39B.sys
2020-10-26 20:29 - 2020-10-26 20:29 - 000000000 ___HD C:\Users\selohu\MicrosoftEdgeBackups
2020-10-26 20:12 - 2020-11-14 11:39 - 000008192 ___SH C:\DumpStack.log.tmp
2020-10-26 20:08 - 2020-10-26 20:08 - 000000000 ____D C:\Program Files (x86)\PackageManagement
2020-10-26 12:17 - 2020-10-26 12:17 - 000000000 ____D C:\Users\selohu\AppData\Roaming\asoftech
2020-10-26 12:17 - 2020-10-26 12:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asoftech Data Recovery
2020-10-26 12:17 - 2020-10-26 12:17 - 000000000 ____D C:\Program Files (x86)\Asoftech
2020-10-22 14:29 - 2020-11-04 20:20 - 000000000 ____D C:\WINDOWS\Minidump
2020-10-22 01:43 - 2020-10-22 01:43 - 000788633 _____ C:\Users\selohu\Documents\Cables Ethernet.odt
2020-10-22 01:04 - 2020-10-22 01:04 - 000000000 ____D C:\Users\selohu\AppData\Roaming\NVIDIA
2020-10-21 13:04 - 2020-10-21 13:04 - 000000000 ____D C:\Users\selohu\AppData\Local\mbarw
2020-10-21 12:51 - 2020-11-06 04:36 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-10-21 12:27 - 2020-10-21 12:27 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2020-10-21 12:22 - 2020-10-01 08:14 - 000222112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2020-10-21 12:22 - 2020-10-01 08:14 - 000038632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2020-10-21 12:21 - 2020-10-02 00:48 - 001769688 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-10-21 12:21 - 2020-10-02 00:48 - 001769688 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-10-21 12:21 - 2020-10-02 00:48 - 001370328 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-10-21 12:21 - 2020-10-02 00:48 - 001370328 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-10-21 12:21 - 2020-10-02 00:48 - 001054944 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-10-21 12:21 - 2020-10-02 00:48 - 001054944 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-10-21 12:21 - 2020-10-02 00:48 - 000917728 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-10-21 12:21 - 2020-10-02 00:48 - 000917728 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-10-21 12:21 - 2020-10-02 00:48 - 000455408 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-10-21 12:21 - 2020-10-02 00:48 - 000351128 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-10-21 12:21 - 2020-10-02 00:46 - 001023216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-10-21 12:21 - 2020-10-02 00:46 - 000816368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-10-21 12:21 - 2020-10-02 00:46 - 000673520 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-10-21 12:21 - 2020-10-02 00:46 - 000543128 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 002098072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 001585560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 001507224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 001161112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 000813464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 000670616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 000657304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-10-21 12:21 - 2020-10-02 00:45 - 000589208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-10-21 12:21 - 2020-10-02 00:45 - 000555248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-10-21 12:21 - 2020-10-02 00:44 - 007707544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-10-21 12:21 - 2020-10-02 00:44 - 006860184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-10-21 12:21 - 2020-10-02 00:44 - 005519600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2020-10-21 12:21 - 2020-10-02 00:44 - 004174064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-10-21 12:21 - 2020-10-02 00:44 - 002508528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-10-21 12:21 - 2020-10-02 00:44 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-10-21 12:21 - 2020-10-02 00:44 - 000445848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-10-21 12:21 - 2020-10-02 00:43 - 007001536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

[selohu]

2020-10-21 12:21 - 2020-10-02 00:43 - 005972824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-10-21 12:21 - 2020-10-01 08:14 - 000080930 _____ C:\WINDOWS\system32\nvinfo.pb
2020-10-19 17:33 - 2020-10-19 18:47 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Code
2020-10-19 17:33 - 2020-10-19 17:33 - 000000000 ____D C:\Users\selohu\.vscode
2020-10-19 17:31 - 2020-10-19 17:31 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2020-10-19 02:40 - 2020-10-19 02:40 - 001153592 _____ (Akeo Consulting) C:\Users\selohu\Desktop\rufus-3.12.exe
2020-10-19 02:18 - 2020-10-19 17:22 - 000000000 ____D C:\Users\selohu\Desktop\rufus_files
2020-10-18 18:45 - 2020-10-18 18:45 - 000228104 _____ C:\Users\selohu\Documents\Permisos linux.odt
2020-10-16 23:29 - 2002-08-09 10:02 - 000077824 _____ () C:\WINDOWS\SysWOW64\Drivers\NtFsLdf20.sys
2020-10-16 23:29 - 2002-05-29 17:34 - 000057344 _____ C:\WINDOWS\SysWOW64\Drivers\WDelMgr20.exe
2020-10-16 23:25 - 2020-10-16 23:25 - 000001269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalData Standard 2.0.lnk
2020-10-16 23:25 - 2020-10-16 23:25 - 000000000 __SHD C:\Drive Information
2020-10-16 23:25 - 2020-10-16 23:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FinalData
2020-10-16 23:25 - 2020-10-16 23:25 - 000000000 ____D C:\Program Files (x86)\FinalData
2020-10-16 23:24 - 1998-10-29 15:45 - 000306688 _____ (InstallShield Software Corporation) C:\WINDOWS\IsUninst.exe
2020-10-16 22:33 - 2020-10-16 22:33 - 000000000 ____D C:\Users\selohu\Downloads\eMule
2020-10-16 22:33 - 2020-10-16 22:33 - 000000000 ____D C:\ProgramData\eMule
2020-10-16 22:29 - 2020-10-29 00:49 - 000000000 ____D C:\Users\selohu\AppData\Local\eMule
2020-10-16 22:29 - 2020-10-16 22:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMule
2020-10-16 22:29 - 2020-10-16 22:29 - 000000000 ____D C:\Program Files (x86)\eMule
2020-10-16 22:07 - 2020-10-27 15:50 - 000000000 ____D C:\Users\selohu\AppData\Local\MicrosoftEdge
2020-10-16 21:58 - 2020-05-30 21:06 - 061819320 _____ (Malwarebytes ) C:\Users\selohu\Desktop\mbarw-setup-consumer-0.9.18.807.exe
2020-10-16 21:50 - 2020-11-12 00:14 - 000000000 ____D C:\Users\selohu\Desktop\mbar
2020-10-16 21:50 - 2020-10-16 21:50 - 000255928 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\21642349.sys
2020-10-16 21:39 - 2010-08-25 15:20 - 000892928 _____ (Free Software Foundation) C:\WINDOWS\SysWOW64\iconv.dll
2020-10-16 21:39 - 2010-08-25 15:20 - 000675840 _____ () C:\WINDOWS\SysWOW64\ac3filter.ax
2020-10-16 21:39 - 2010-08-25 15:20 - 000496640 _____ C:\WINDOWS\SysWOW64\xvid.ax
2020-10-16 20:46 - 2020-10-16 20:46 - 000003028 _____ C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2020-10-16 20:46 - 2020-10-16 20:46 - 000003008 _____ C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2020-10-16 20:46 - 2020-10-16 20:46 - 000003004 _____ C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk
2020-10-16 20:46 - 2020-10-16 20:46 - 000003002 _____ C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2020-10-16 20:03 - 2020-10-16 20:03 - 000000000 ____D C:\Program Files\CodeMeter
2020-10-16 20:03 - 2020-10-16 20:03 - 000000000 ____D C:\Program Files (x86)\CodeMeter
2020-10-16 20:03 - 2018-07-02 22:42 - 001013624 _____ (WIBU-SYSTEMS AG) C:\WINDOWS\system32\WibuCm64.dll
2020-10-16 20:03 - 2018-07-02 22:42 - 000838520 _____ (WIBU-SYSTEMS AG) C:\WINDOWS\SysWOW64\WibuCm32.dll
2020-10-16 20:00 - 2020-10-16 20:00 - 000000000 ____D C:\ProgramData\CodeMeter
2020-10-16 15:46 - 2020-10-24 20:55 - 000000000 ____D C:\Users\selohu\Desktop\testdisk-7.2-WIP
2020-10-16 12:41 - 2020-11-14 01:55 - 000000000 ____D C:\Users\selohu\Downloads\Telegram Desktop
2020-10-16 12:35 - 2020-11-14 12:09 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Telegram Desktop
2020-10-16 12:35 - 2020-10-16 12:35 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2020-10-16 12:33 - 2020-11-13 03:37 - 000000000 ____D C:\Users\selohu\AppData\Roaming\WhatsApp
2020-10-16 12:33 - 2020-11-12 18:05 - 000000000 ____D C:\Users\selohu\AppData\Local\WhatsApp
2020-10-16 12:33 - 2020-10-16 12:33 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2020-10-16 10:04 - 2020-10-16 10:04 - 000249344 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxNetLwf.sys
2020-10-16 10:04 - 2020-10-16 10:04 - 000239432 _____ (Oracle Corporation) C:\WINDOWS\system32\Drivers\VBoxNetAdp6.sys
2020-10-15 19:08 - 2020-11-11 01:49 - 000000000 ____D C:\Users\selohu\Desktop\64-bit
2020-10-15 19:08 - 2020-10-15 19:08 - 000000000 ____D C:\Users\selohu\Desktop\netscan_portable
2020-10-15 17:55 - 2020-10-15 17:55 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2020-10-15 17:55 - 2020-10-15 17:55 - 000020908 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2020-10-15 17:52 - 2020-10-15 17:52 - 032612336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecsRaw.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 031598928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecsRaw.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 018767360 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 011498496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 009499136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 007534680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 006555960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmchipset.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 005337504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 004523008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 004433640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 004363840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 004314624 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 003664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 003376840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 003335680 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-10-15 17:52 - 2020-10-15 17:52 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-10-15 17:52 - 2020-10-15 17:52 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 002407928 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwp.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 002398720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 002022200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001970176 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistSvc.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001812872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001721856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001618152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001545848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001541224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001502536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001418752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dui70.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpcServices.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001342976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001259848 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001243976 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvsicontainerservice.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001234432 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001185864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001062400 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001006592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 001003336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000977920 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000961704 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000942592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000933376 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000920888 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000884736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000863744 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000837120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000819200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000800072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
2020-10-15 17:52 - 2020-10-15 17:52 - 000788168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000773712 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000760640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000750592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000747312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000688960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000688128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000684832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000672568 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmcompute.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000660800 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmuidevices.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000627712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000615424 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000607336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000606880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys
2020-10-15 17:52 - 2020-10-15 17:52 - 000579584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000578424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrptadm.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000547328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AdmTmpl.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000535552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000514560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000507192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmusrv.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmdial32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000488448 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000482304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\duser.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000465920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrptadm.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000459264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmrdvcore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000457728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000428544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AdmTmpl.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdechangepin.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000416864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000413232 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000407872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmSynthNic.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmprox.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000402744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsynthstor.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000381240 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsmb.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000377344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000376320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000370400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationVdev.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000363008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wldap32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000329528 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000329504 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000318464 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000311104 _____ (Microsoft Corporation) C:\WINDOWS\system32\HvsiSettingsProvider.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000303288 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll

[selohu]

2020-10-15 17:52 - 2020-10-15 17:52 - 000294712 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmiccore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmdynmem.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000286008 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsif.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tscfgwmi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.FileExplorer.Common.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000275288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shlwapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000268080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powrprof.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\VmCrashDump.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pdh.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDist.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistCleaner.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000225088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000224576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Profile.HardwareId.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AnalogShell.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000211776 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbusvdev.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgmts.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mlang.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\net1.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000185912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000185344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistWSDDiscoProv.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000183296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Profile.HardwareId.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000182592 _____ (Microsoft Corporation) C:\WINDOWS\system32\mavinject.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PeerDist.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000175944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmickrnl.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000171568 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000171440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000166280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\omadmapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000164352 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000164152 _____ C:\WINDOWS\system32\cmdiag.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000161608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntasn1.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgmts.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000152904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntmarta.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000151864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000147272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mavinject.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000145736 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\net1.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000143056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000142008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000141008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000138936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgcore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000135496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxlib.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptnet.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\raschap.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000130128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncrypt.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvEmulation.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000122168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifcore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\logman.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000119296 _____ C:\WINDOWS\system32\hvsiproxyapp.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000118584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\migisol.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000117216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptsslp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000115008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000111024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\provmigrate.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000103936 _____ C:\WINDOWS\system32\cmimageworker.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-10-15 17:52 - 2020-10-15 17:52 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logman.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000095552 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000093488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000093112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2020-10-15 17:52 - 2020-10-15 17:52 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpnsp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbssysprep.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MuiUnattend.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spinf.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpolcore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000079168 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmwpctrl.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\dggpext.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usp10.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provmigrate.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000076952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pnrpnsp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MitigationConfiguration.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samcli.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000068192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptsp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmproxyd.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmclient.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptext.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpolcore.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000058856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000058848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000057144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmLpac.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistHttpTrans.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000056312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptdll.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\relog.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000050616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msasn1.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\typeperf.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.SecurityMitigationsBroker.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpscript.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\relog.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\eapprovp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeerDistAD.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\typeperf.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\auditpol.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000041280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVClientPS.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.SecurityMitigationsBroker.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpscript.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tokenbinding.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000039720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iri.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpscript.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000037688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininitext.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netutils.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Websocket.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dusmapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winrnr.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\auditpol.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpupdate.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000027960 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmsifproxystub.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000027848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltLib.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000027320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\version.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000026944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hvsicontainerservice.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000026944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVClientPS.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\drprov.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\httpapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hid.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000025600 _____ (Microsoft Corporation) C:\WINDOWS\system32\diskperf.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiougc.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpupdate.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fltMC.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000024288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsrole.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\linkinfo.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secur32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsparse.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\diskperf.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davhlpr.dll

[selohu]

2020-10-15 17:52 - 2020-10-15 17:52 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ktmw32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000020640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerEnc.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmproxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000020480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drprov.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000019768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVTerminator.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000018232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVTerminator.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EsdSip.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlmsprep.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000015672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVSentinel.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wowreg32.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmsgapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasautou.exe
2020-10-15 17:52 - 2020-10-15 17:52 - 000014848 _____ C:\WINDOWS\system32\hnsproxy.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft.Management.Infrastructure.Native.Unmanaged.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000013624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVSentinel.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpapi.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasadhlp.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSErrRedir.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmiso8601utils.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\normaliz.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2020-10-15 17:52 - 2020-10-15 17:52 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 014758400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 007266128 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 006070904 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 005998616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 005871560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 005371544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 005057024 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 004645368 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 004517376 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003858944 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003706880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003587072 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003537520 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003506480 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003493888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Controls.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003282944 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 003232056 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 003134464 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002920304 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002827776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002757120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002634112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002621720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002592056 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002568704 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002541568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002503520 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002485928 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002451968 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002428416 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002322304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002206208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002189824 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpcServices.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002179584 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002178600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002104320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 002007352 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001978664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001963752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001963712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001883696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001871272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001836544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001822256 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-10-15 17:51 - 2020-10-15 17:51 - 001784480 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001765888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001730048 _____ (Microsoft Corporation) C:\WINDOWS\system32\dui70.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001710080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001695760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001673728 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001641960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001598032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001554624 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 001522176 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001509728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001488896 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001450304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001434624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001411552 _____ (Microsoft Corporation) C:\WINDOWS\system32\crypt32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001400208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001393472 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-10-15 17:51 - 2020-10-15 17:51 - 001389352 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001379064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001360936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001337696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001333248 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001330688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001324032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001315640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001306624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001280312 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001276928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001253624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001240064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001212696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 001212232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001198296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 001182520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001181208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001162240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2020-10-15 17:51 - 2020-10-15 17:51 - 001160192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001140736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001137472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001125888 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001104896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001068640 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001068352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001051136 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2020-10-15 17:51 - 2020-10-15 17:51 - 001047432 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001044880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001042432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001033496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\crypt32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001021096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001009216 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001001984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 001000408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000995128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Facilitator.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000994256 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000979768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000979272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000966864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000964264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000956216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000942408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000924528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000913776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000909312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000907448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000891472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000887296 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2020-10-15 17:51 - 2020-10-15 17:51 - 000872776 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000857088 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000852288 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000843896 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000843264 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000831032 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000809272 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000797448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000783992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000782656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000779360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000775480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000775256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcrt.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000763192 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000759296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000756656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000753664 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000751496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000748360 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000725600 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000721024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000708088 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000707544 _____ C:\WINDOWS\system32\TextShaping.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000688128 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000676096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000672976 _____ (Microsoft Corporation) C:\WINDOWS\system32\clbcatq.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000672064 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000660592 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxs.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000654336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certca.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000645120 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000637440 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000637360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcrt.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000634760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000634696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000632544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000630096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000624480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000623616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000613376 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000605696 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000603448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000602432 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000602192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000598336 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000594464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mscms.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\duser.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000586048 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000583616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000583608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000581632 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmdial32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000578376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000569344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000548544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sxs.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000537696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\directmanipulation.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000529208 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidprov.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000525824 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000523712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000521016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000520704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000518552 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UiaManager.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000512512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000504552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clbcatq.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000501248 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2020-10-15 17:51 - 2020-10-15 17:51 - 000495840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000488104 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrv.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000477512 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000475696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000474424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000469920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000455168 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000454016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000436736 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000430080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000427200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000424448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2020-10-15 17:51 - 2020-10-15 17:51 - 000420936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000419432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000418416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000414200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000411448 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ninput.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000408000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp110_win.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000403456 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000403384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wbemcomn.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000397728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000395592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShellCommonCommonProxyStub.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000390144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000389432 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrv.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.FileExplorer.Common.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000376032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000374496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000374080 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000371376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000361040 _____ (Microsoft Corporation) C:\WINDOWS\system32\BCP47Langs.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000352784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\BootMenuUX.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HrtfApo.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000342424 _____ (Microsoft Corporation) C:\WINDOWS\system32\shlwapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000342016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
2020-10-15 17:51 - 2020-10-15 17:51 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netbt.sys
2020-10-15 17:51 - 2020-10-15 17:51 - 000337768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000337408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000333144 _____ (Microsoft Corporation) C:\WINDOWS\system32\biwinrt.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000332600 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wldap32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000325632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ninput.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000324416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000311920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000305272 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000295464 _____ (Microsoft Corporation) C:\WINDOWS\system32\powrprof.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000293864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000293184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000287680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BCP47Langs.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000287544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000286016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe
2020-10-15 17:51 - 2020-10-15 17:51 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\system32\pdh.dll
2020-10-15 17:51 - 2020-10-15 17:51 - 000281088 _____ (Microsoft Corporation) C:\WINDOWS\system32\PushToInstall.dll