Moyp.fastsearch.me

Ayuda General Software
1

En Google Chrome casi siempre que abro una pagina, me abre otra ventana con moyp.fastsearch.me ha enviado una respuesta no válida… Parece que me ha secuestrado Google Chrome y no veo forma de eliminarlo. ¿Me pueden ayudar? GRACIAS

2

Hola @Jose_Salvador

Realiza los siguientes pasos, aunque hayas hecho alguno, sin cambiar el orden:

1) Descarga, actualiza y ejecuta Malwarebytes’ Anti-Malware, revisa en detalle el manual, para que sepas usarlo y configurarlo.

  • Realiza un Análisis personalizado, actualizando si te lo pide.
  • Pulsar en “Cuarentena seleccionado” para enviarlo a la cuarentena y Reinicias el sistema.
  • En el apartado del manual Historial de detecciones encontrarás el reporte de MBAM, clic en Exportar >> Copiar al portapapeles.

2) Descarga AdwCleaner | InfoSpyware en el escritorio.

  • Desactiva temporalmente el Antivirus >> Cómo deshabilitar temporalmente su Antivirus.
  • Cierra también todos los programas que tengas abiertos.
  • Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona "Ejecutar como Administrador".)
  • Pulsar en el botón Escanear, y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Limpiar.
  • Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
  • Guardas el reporte que te aparecerá, para copiarlo y pegarlo en tu próxima respuesta.
  • El informe también se puede encontrar en C:\AdwCleaner\AdwCleaner[C1].txt

3) Descarga CCleaner

  • Instala Ccleaner
  • Abres Ccleaner en la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine >> clic en ejecutar limpiador
  • Clic en la pestaña Registro >> clic en buscar problemas esperas que termine >> clic en Reparar Seleccionadas y haces una copia de seguridad
  • Vuelves a darle clic en buscar problemas hasta que no encuentre ninguno.

Pega los reportes de Malwarebytes y AdwCleaner y comentas como va el problema.

¿Cómo pegar reportes en el foro?

Un saludo

3 
 -------------------------------
# Malwarebytes AdwCleaner 8.0.5.0
# -------------------------------
# Build:    05-25-2020
# Database: 2020-05-26.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    06-11-2020
# Duration: 00:00:04
# OS:       Windows 10 Pro
# Cleaned:  31
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
Deleted       C:\Program Files (x86)\IObit\Advanced SystemCare
Deleted       C:\ProgramData\IObit\Advanced SystemCare
Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
Deleted       C:\Users\jmsal\AppData\LocalLow\IObit\Advanced SystemCare
Deleted       C:\Users\jmsal\AppData\Roaming\IObit\Advanced SystemCare
Deleted       C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted       C:\Windows\System32\Tasks\DRIVER BOOSTER SCHEDULER

***** [ Registry ] *****

Deleted       HKCU\Software\IObit\Advanced SystemCare
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Advanced SystemCare 12
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted       HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
Deleted       HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
Deleted       HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
Deleted       HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Advanced SystemCare
Deleted       HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\Advanced SystemCare
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E840C400-040E-4E2D-87FD-109227FA08EB} 
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scheduler
Deleted       HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D}
Deleted       HKLM\Software\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
Deleted       HKLM\Software\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
Deleted       HKLM\Software\Wow6432Node\IOBIT\ASC
Deleted       HKLM\Software\Wow6432Node\IObit\Advanced SystemCare
Deleted       HKLM\Software\Wow6432Node\IObit\RealTimeProtector
Deleted       HKLM\Software\Wow6432Node\\Classes\CLSID\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted       HKLM\Software\Wow6432Node\\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
Deleted       HKLM\Software\Wow6432Node\\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
Deleted       HKLM\Software\Wow6432Node\\Google\Chrome\NativeMessagingHosts\com.ascplugin.protect
Deleted       HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BA0C978D-D909-49B6-AFE2-8BDE245DC7E6}
Deleted       HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4563 octets] - [18/02/2020 10:03:34]
AdwCleaner[S01].txt - [5659 octets] - [19/02/2020 16:32:57]
AdwCleaner[C01].txt - [2550 octets] - [19/02/2020 16:35:13]
AdwCleaner[S02].txt - [5740 octets] - [11/06/2020 21:55:37]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
4

Parece que lo has arreglado. Nuevamente (dado que no es la primera vez) me has resuelto el problema GRACIAS MIL

5

Hola @Jose_Salvador

Me alegro que se haya resuelto :grinning:

Podrías poner el reporte de Malwarebytes para ver si detectó algo y lo mandó a cuarentena?

Deberías desinstalar todo lo que tengas de Iobit.

Cómo siempre, es un placer :slightly_smiling_face:

Un saludo

6

Espero sea este. Me ponías que lo exportase y lo copiase al portapapeles y también lo copie en formato txt que es el que te pongo Malwarebytes 

-Detalles del registro-
Fecha del análisis: 11/6/20
Hora del análisis: 17:14
Archivo de registro: 32a6b8a8-abf6-11ea-a99e-6cf049e81acb.json

-Información del software-
Versión: 4.1.0.56
Versión de los componentes: 1.0.931
Versión del paquete de actualización: 1.0.25374
Licencia: Premium

-Información del sistema-
SO: Windows 10 (Build 18362.900)
CPU: x64
Sistema de archivos: NTFS
Usuario: ANTEC-P182\jmsal

-Resumen del análisis-
Tipo de análisis: Análisis personalizado
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 877301
Amenazas detectadas: 10
Amenazas en cuarentena: 10
Tiempo transcurrido: 4 hr, 27 min, 30 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Activado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 1
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IOBIT_MONITOR_SERVER, En cuarentena, 3832, 580520, 1.0.25374, , ame, 

Valor del registro: 1
PUP.Optional.AdvancedSystemCare, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\IOBIT_MONITOR_SERVER|IMAGEPATH, En cuarentena, 3832, 580520, 1.0.25374, , ame, 

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 0
(No hay elementos maliciosos detectados)

Archivo: 8
HackTool.FilePatch, C:\PROGRAM FILES\ACD SYSTEMS\ACDSEE PRO\10.0\ACDSEE.PRO.10.X.[32-64BIT].UNIPATCH.EXE, En cuarentena, 7524, 281135, 1.0.25374, , ame, 
HackTool.FilePatch, C:\PROGRAM FILES\ACD SYSTEMS\ACDSEE PRO\10.0\ACDSEE.PRO.10.X._32-64BIT_.UNIPATCH.ZIP, En cuarentena, 7524, 281135, 1.0.25374, , ame, 
Trojan.Downloader.AHK.Themida, C:\PROGRAM FILES (X86)\LASTPASS\BUR\TRONFILES\VANS.EXE, En cuarentena, 7691, 749231, 1.0.25374, 000000000000000000000003, dds, 00759726
Malware.Generic.4177194417, C:\SOFTWARE BASE PC\INFOSPYWARE\AT-DESTROYER\AT-DESTROYER.EXE, En cuarentena, 1000000, 0, 1.0.25374, 3627569779940148F8FAEDB1, dds, 00759726
Trojan.Dropper.Themida, C:\SOFTWARE BASE PC\FILEMENUTOOLS-PORTABLE 7.7\FILEMENUTOOLS7.7.0.0.ZIP, En cuarentena, 7627, 762003, 1.0.25374, 1F97C2DD7AF0208AFE3B8FD2, dds, 00759726
HackTool.FilePatch, C:\SOFTWARE BASE PC\TRATAMIENTO VIDEO-HD\DVD AUDIO EXTRACTOR 7.5.0\VSDFGHJKLKJHG.RAR, En cuarentena, 7524, 281135, 1.0.25374, , ame, 
HackTool.FilePatch, C:\SOFTWARE BASE PC\TRATAMIENTO VIDEO-HD\DVD AUDIO EXTRACTOR 7.5.0\DVD.AUDIO.EXTRACTOR.7.X-PATCH.RAR, En cuarentena, 7524, 281135, 1.0.25374, , ame, 
Malware.Generic.4137447034, C:\SOFTWARE BASE PC\TRATAMIENTO VIDEO-HD\WONDERSHARE VIDEO CONVERTER ULTIMATE V8.8.0.3\WOVIDEOC.8.0.3\PATCH.EXE, En cuarentena, 1000000, 0, 1.0.25374, 8F89B9CE2C666EC2F69C6E7A, dds, 00759726

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)
7

Hola

Sigue todo bien? Ya no volvió el problema?

Un saludo

8

Siento comunicarte que nuevamente volvió el problema. Mañana volveré a hacer lo mismo y veré si hay mas suerte

9

Hola

No vuelvas a realizar los pasos que ya hiciste.

Desactiva temporalmente el Antivirus >> Cómo deshabilitar temporalmente su Antivirus

Descarga Farbar Recovery Scan Tool en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de tu equipo. :arrow_right: Como saber si Mi Windows es de 32 o 64 Bits ?.

  • Ejecuta FRST.exe.
  • En el mensaje de la ventana del Disclaimer, pulsamos Yes
  • En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.
  • Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Pon los dos reportes generados.

Debes copiarlos y pegarlos con todo su contenido y usaras varios mensajes si recibes un mensaje de error indicando que es muy largo(mas de 50.000 caracteres aprox.).

Un saludo

10 
Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 06-06-2020
Ejecutado por jmsal (administrador) sobre ANTEC-P182 (Gigabyte Technology Co., Ltd. GA-890GPA-UD3H) (13-06-2020 11:47:53)
Ejecutado desde C:\Users\jmsal\Desktop
Perfiles cargados: jmsal
Platform: Windows 10 Pro Versión 1909 18363.900 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Chrome
Modo de Inicio: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(ACD Systems International -> ) [Archivo no firmado] C:\Program Files\ACD Systems\ACDSee Pro\10.0\ACDSeeCommanderPro10.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe
(Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe <4>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(Advanced Micro Devices, Inc. -> AMD) C:\WINDOWS\System32\DriverStore\FileRepository\c0353065.inf_amd64_536cb9e978acbc9b\B353014\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\WINDOWS\System32\DriverStore\FileRepository\c0353065.inf_amd64_536cb9e978acbc9b\B353014\atiesrxx.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\iCloudChrome.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\iCloudDrive.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\iCloudPhotos.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\iCloudServices.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa\iCloud\secd.exe
(Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Autodesk, Inc. -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AcWebBrowser\AcWebBrowser.exe <3>
(Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\9.0.1.1462\AdskLicensingService\AdskLicensingService.exe
(Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe
(CONDUSIV TECHNOLOGIES -> Condusiv Technologies) C:\Program Files\Condusiv Technologies\Diskeeper\DkService.exe
(Crystal Rich Ltd -> Crystal Rich Ltd) C:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe
(Crystal Rich Ltd -> Crystal Rich Ltd) C:\Program Files (x86)\USB Safely Remove\USBSRService.exe
(Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <56>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\Pub\PubMonitor.exe
(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Language Engineering Company, LLC -> Language Engineering Corporation, LLC) C:\Program Files (x86)\Power Translator 15\LogoMedia TranslateDotNet Server.exe
(Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\cropAssistAPI\CropAssistService.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <12>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\WINDOWS\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.5-0\MsMpEng.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Nero 2020\Nero BackItUp\NBService.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(Node.js Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\WINDOWS\System32\RAPID\SamsungRapidSvc.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TomTom International BV -> TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(TomTom) [Archivo no firmado] C:\Program Files\TomTom HOME\TTHOMEService.exe
(VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe
(VMware, Inc. -> VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe
(VMware, Inc. -> VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe
(Wondershare software CO., LIMITED -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18390904 2020-05-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SamsungRapidApp] => C:\Program Files (x86)\Samsung\RAPID\CacheFilter\SamsungRapidApp.exe [124000 2018-06-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [824240 2019-09-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [303928 2018-08-27] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [664872 2020-03-04] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2042424 2020-03-16] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5048456 2019-11-19] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [441448 2019-08-26] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [117720 2020-03-07] (VMware, Inc. -> VMware, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare software CO., LIMITED -> Wondershare)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Run: [ACDSeeCommanderPro10] => C:\Program Files\ACD Systems\ACDSee Pro\10.0\ACDSeeCommanderPro10.exe [3415496 2017-05-06] (ACD Systems International -> ) [Archivo no firmado]
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-04-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [45488 2020-05-29] (Glarysoft LTD -> Glarysoft Ltd)
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Run: [USB Safely Remove] => C:\Program Files (x86)\USB Safely Remove\USBSafelyRemove.exe [6560864 2019-12-27] (Crystal Rich Ltd -> Crystal Rich Ltd)
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Run: [Advanced SystemCare] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3637008 2020-05-22] (IObit Information Technology -> IObit)
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\RunOnce: [Application Restart #3] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --flag-switches-begin --flag-switches-end --enable-audio-service-sandbox --restore-last-session -- hxxp://www.filepuma.com/updates3v2/44070 (la entrada de datos tiene 90 más caracteres).
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [4624880 2020-05-12] (Microsoft Windows -> Microsoft Corporation) <==== ATENCIÓN
HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109288 2018-10-12] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\System32\AdobePDF.dll [55432 2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.97\Installer\chrmstp.exe [2020-06-09] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{9459C573-B17A-45AE-9F64-1857B5D58CEE}] -> C:\Program Files (x86)\Microsoft\Edge\Application\83.0.478.45\Installer\setup.exe [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SafeEraser Service.lnk [2020-04-28]
ShortcutTarget: SafeEraser Service.lnk -> C:\Program Files (x86)\Wondershare\SafeEraser\SafeEraserNotifier.exe (Wondershare software CO., LIMITED -> Wondershare)
BootExecute: autocheck autochk *  

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {025E7038-5F78-4358-9E0B-699C7BA57F26} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [171344 2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {0FE4E7E7-0516-48FD-8A15-498A95776FF0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [662872 2020-04-30] (HP Inc. -> HP Inc.)
Task: {177C40AC-8200-4AA5-A47A-1A2835A6B704} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [3183888 2020-05-22] (IObit Information Technology -> IObit)
Task: {1A69D8CE-D48D-45E8-9629-B67BAE80D3D2} - System32\Tasks\HPCustParticipation HP LaserJet Pro M148-M149 => C:\Program Files\HP\HP LaserJet Pro M148-M149\Bin\HPCustPartic.exe [6659488 2019-06-11] (HP Inc -> HP Inc.)
Task: {1F597C66-08DB-4C1C-8F3B-D733DD605785} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)
Task: {26114190-D0EA-4BCF-822D-34D27112C5C3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {3342A4A8-4646-44C3-95B1-5EF0405F1D42} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-05-05] (Google Inc -> Google LLC)
Task: {352363A3-BCF7-47BB-8793-D1F643FA2D13} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1505624 2020-05-20] (HP Inc. -> HP Inc.)
Task: {425A03B8-8B51-478F-9E76-C2A255DBC8E0} - System32\Tasks\Apple Diagnostics => C:\Users\jmsal\AppData\Local\Microsoft\WindowsApps\eReporter-AppX.exe [0 2020-06-01] ()
Task: {501FABD4-4788-4409-B216-6A15229DD7A2} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3517295722-778573365-4120609608-1001UA => C:\Users\jmsal\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {5726FE90-4210-496B-84FE-72249FF89158} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23755640 2020-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {59CE2532-F5BA-466F-981A-3985EEBCA6D4} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\AutoUpdate.exe [2369808 2020-03-06] (IObit Information Technology -> IObit)
Task: {5D787C62-FC6A-49D5-B0FF-7EE7B1687663} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [918960 2020-05-29] (Glarysoft LTD -> Glarysoft Ltd)
Task: {6681B3E7-7235-426C-AA70-6CC9BD03ACE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-05-05] (Google Inc -> Google LLC)
Task: {685C732C-7BFB-4E34-A26C-FA6A8A2C6774} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [7071000 2019-08-29] (Nero AG -> Nero AG)
Task: {70278D9A-F69E-4268-8A50-95FE6756FAB2} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {75D9C9A3-3FAB-49B3-AC2D-9BC476E53E3A} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [1146000 2019-03-14] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co. Ltd.)
Task: {8D6B814C-5411-4890-8FCB-E8EC1468142A} - System32\Tasks\WiseCleaner\WDCSkipUAC => C:\Program Files (x86)\Wise\Wise Disk Cleaner\WiseDiskCleaner.exe [7027368 2018-12-18] (Lespeed Technology Ltd. -> WiseCleaner.com)
Task: {A3398E0C-E114-4FF5-8E93-4DD11E3DC2CC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [320856 2020-04-23] (HP Inc. -> HP Inc.)
Task: {A39A4B39-DED6-4EC7-966A-9FB912509B44} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23755640 2020-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {A56A059F-2E5D-4DBF-84EA-2F01C3230E2E} - System32\Tasks\Driver Booster SkipUAC (jmsal) => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe [7892240 2020-03-06] (IObit Information Technology -> IObit)
Task: {B621B959-C710-47BF-B918-F29E6EED3A3B} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe [314128 2018-05-02] (IObit Information Technology -> IObit)
Task: {B65B7034-513E-44C9-99A1-BA91779D525E} - System32\Tasks\ASC_SkipUac_jmsal => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [8955664 2020-05-22] (IObit Information Technology -> IObit)
Task: {BB429717-657C-4FB3-9863-89DDE4028993} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223336 2020-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0A0AABF-059A-44AC-A6F6-BD9E63E2D605} - System32\Tasks\Uninstaller_SkipUac_jmsal => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5963536 2020-02-18] (IObit Information Technology -> IObit)
Task: {C9E6B434-61A5-46E5-A8DC-CB1AC63FC8E5} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3517295722-778573365-4120609608-1001Core => C:\Users\jmsal\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {CA559E55-F7C9-4AF3-A25A-FAA085B6F1EE} - System32\Tasks\HPCeeScheduleForjmsal => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: {D1E20A12-A8B9-4710-8134-31C351C05665} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {DF86E77C-A57A-4B32-A5E0-60F30062EDAF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1505624 2020-05-20] (HP Inc. -> HP Inc.)
Task: {E067F15A-25D6-4910-8FE8-6328B63259DB} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [171344 2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {E08F0D7B-E328-47D4-AEAE-A4E9EAC4BAE2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [662872 2020-04-30] (HP Inc. -> HP Inc.)
Task: {EDFA7ABE-F084-4F7A-AD40-A800225479BA} - System32\Tasks\SmartDefrag_Update => C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe [3005200 2019-12-23] (IObit Information Technology -> IObit)
Task: {F1EEFC05-B75A-4729-B1D0-64C44BDEFDCA} - System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA => C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223336 2020-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {F42E83C1-CD04-4131-AF5B-DA7090ADC265} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [52104 2017-04-24] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {FAB68E0E-A494-4D4B-8AF5-8074203786B8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1133400 2020-06-03] (HP Inc. -> HP Inc.)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\HPCeeScheduleForjmsal.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.142.144.66
Tcpip\..\Interfaces\{c964d555-29c0-4629-ae26-45182e51311a}: [DhcpNameServer] 212.142.144.66

Internet Explorer:
==================
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.es/
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/es-es/?ocid=iehp
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2020-01-31] (IObit Information Technology -> IObit)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-01-19] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: LEC -> {4A241D35-F7EB-401b-8C5B-A904A50F280E} -> C:\Program Files (x86)\Power Translator 15\Applications\LEC IE Translation Extension.dll [2011-07-20] (Language Engineering Company, LLC -> Language Engineering Corporation, LLC)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-04-16] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-16] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2017-03-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-06-06] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
======
DownloadDir: D:\Descargas
Edge Session Restore: HKU\S-1-5-21-3517295722-778573365-4120609608-1001 -> está habilitado.
Edge Notifications: HKU\S-1-5-21-3517295722-778573365-4120609608-1001 -> hxxps://badorno.xxx; hxxps://www.abc.es; hxxps://www.nuvid.com; hxxps://xxxdan.com; hxxps://www.porngem.com; hxxps://jizzbunker.com; hxxps://porn.es; hxxps://www.stileproject.com
Edge Extension: (AdBlock — best ad blocker) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2020-01-11]
Edge Extension: (Traductor para Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.51.0_neutral__8wekyb3d8bbwe [2019-08-04]
Edge DefaultProfile: Default
Edge Profile: C:\Users\jmsal\AppData\Local\Microsoft\Edge\User Data\Default [2020-06-13]
Edge Notifications: Default -> hxxps://amomama.es; hxxps://es.windows10updater.com; hxxps://exe.io; hxxps://www.milanuncios.com; hxxps://www.soolide.com; hxxps://www.xvideos.com; hxxps://www.youtube.com; hxxps://www1a.debrahinton.pro; hxxps://www1a.lucienmann.pro; hxxps://www1a.ramirocampos.pro; hxxps://www1p.debrahinton.pro; hxxps://www1p.sherwoodsutton.pro
Edge HomePage: Default -> hxxp://www.google.es/
Edge Session Restore: Default -> está habilitado.
Edge Extension: (Adblock Plus - bloqueador de anuncios gratis) - C:\Users\jmsal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-05-16]
Edge Extension: (Panic Button) - C:\Users\jmsal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2020-05-16]
Edge Extension: (AdBlock: el mejor bloqueador de anuncios) - C:\Users\jmsal\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2020-06-10]

FireFox:
========
FF ProfilePath: C:\Users\jmsal\AppData\Roaming\TomTom\HOME\Profiles\xexae4v9.default [2020-06-03]
FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\[email protected] [2020-06-03] [Heredado] [no firmado]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-01]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-04-23] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-04-16] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-04-16] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-01-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2017-11-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\S-1-5-21-3517295722-778573365-4120609608-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\jmsal\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-05-10] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

Chrome: 
=======
CHR Profile: C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default [2020-06-13]
CHR Notifications: Default -> hxxps://1v.to; hxxps://anonfile.com; hxxps://buybtcasset.com; hxxps://bywhats.app; hxxps://calleyscrisi.pro; hxxps://cashconverters.es; hxxps://ckk.ai; hxxps://click-now-on-this.online; hxxps://clk.ink; hxxps://columnacero.com; hxxps://elcallejonmusical.com; hxxps://epu.sh; hxxps://es.inviptus.com; hxxps://es.onlinefreshdeals.com; hxxps://eu.winnernotification.com; hxxps://exe.io; hxxps://fc.lc; hxxps://forospyware.com; hxxps://free-message.services; hxxps://free4pc.org; hxxps://gretaith.com; hxxps://hardzone.es; hxxps://hnogm.special-promotions.online; hxxps://intercambiosos.org; hxxps://intimepoint.com; hxxps://jyra.online; hxxps://lamallorquina.es; hxxps://landd.xyz; hxxps://lectuepubgratis.com; hxxps://leonsitheckrew.info; hxxps://loadcutikala.com; hxxps://maranhesduve.club; hxxps://mediasource.online; hxxps://microsofters.com; hxxps://ms-75.seenotifyfriends.info; hxxps://ms-98.seenotifyfriends.info; hxxps://ocul.to; hxxps://ouo.io; hxxps://personal-video.live; hxxps://psaimoodriy.com; hxxps://read-this-hot-stuff.today; hxxps://recompensasprincipales.com; hxxps://seenotifyfriends.info; hxxps://special-promotions.online; hxxps://telocusyzywi.cf; hxxps://ventajasdecompra.com; hxxps://vu6mi.special-promotions.online; hxxps://win-shoppingvouchers-es.com; hxxps://winanticipation.com; hxxps://www.adslzone.net; hxxps://www.algsistemas.com; hxxps://www.aliexpresschollos.com; hxxps://www.cnet.com; hxxps://www.descargatelocorp.com; hxxps://www.drtuber.com; hxxps://www.elcorreo.com; hxxps://www.elmueble.com; hxxps://www.elperiodico.com; hxxps://www.facebook.com; hxxps://www.familias.com; hxxps://www.iceporn.com; hxxps://www.lainformacion.com; hxxps://www.lg.com; hxxps://www.miarevista.es; hxxps://www.milanuncios.com; hxxps://www.movilzona.es; hxxps://www.passionmature.com; hxxps://www.pccomponentes.com; hxxps://www.quierorollo.es; hxxps://www.redeszone.net; hxxps://www.semana.es; hxxps://www.softzone.es; hxxps://www.soy502.com; hxxps://www.wish.com; hxxps://www.worten.es; hxxps://www.youtube.com; hxxps://www.youtubeconverter.io; hxxps://www1a.lucienmann.pro; hxxps://www1a.ramirocampos.pro; hxxps://www1a.sherwoodsutton.pro
CHR HomePage: Default -> hxxp://www.google.es/
CHR StartupUrls: Default -> "hxxps://www.google.es/","hxxp://searchhxxps://www.google.com//?f=1&a=nv1&ir=nv1&cd=2XzuyEtN2Y1L1QzuyC0C0FtDyEzy0EzztC0A0C0BzytB0EtCtN0D0Tzu0CtAyEzytN1L2XzutBtFtBtFtCtFyEtDyB&cr=1891065566","hxxps://www.google.com/","hxxp://www.google.com/","hxxp://www.google.com","hxxp://www.buscador.me?id=73345","hxxp://es.msn.com/?pc=UP97&ocid=UP97DHP","hxxp://www.msn.com/?pc=AV01","hxxp://www.bing.com/search?FORM=INCOH1&PC=IC03&PTAG=ICO-ccbde407"
CHR Session Restore: Default -> está habilitado.
CHR Extension: (Traductor de Google) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2020-03-18]
CHR Extension: (hxxps://news.google.com/) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\anjmejjmjfpcopbhgibcmbockpnelmhf [2019-05-29]
CHR Extension: (Save to Google Photos™) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\aoanickgmocpddnppajakfcafbkncdab [2020-06-01]
CHR Extension: (Google Drive) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-05-05]
CHR Extension: (YouTube) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-05-05]
CHR Extension: (Adblock Plus - bloqueador de anuncios gratis) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-06]
CHR Extension: (Panic Button) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\faminaibgiklngmfpfbhmokfmnglamcm [2020-04-28]
CHR Extension: (Favoritos de iCloud) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2019-05-05]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-29]
CHR Extension: (LastPass: Free Password Manager) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2020-06-05]
CHR Extension: (Flatbook) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\kadbillinepbjlgenaliokdhejdmmlgp [2019-09-23]
CHR Extension: (Google Maps) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2019-05-05]
CHR Extension: (Scouter) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpkphfeaecagcgeomfbcdoijhcpejjh [2019-05-05]
CHR Extension: (MOYP - Mantle of your privacy) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\njlfilmphhegcagelpopaggogepfpeio [2020-05-04]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]
CHR Extension: (Gmail) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-05]
CHR Extension: (Chrome Media Router) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-06-01]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S4 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [10316304 2019-08-26] (Acronis International GmbH -> )
R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1046904 2020-03-04] (Autodesk, Inc. -> Autodesk Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [820280 2020-03-16] (Adobe Inc. -> Adobe Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [16939312 2019-01-09] (Autodesk, Inc. -> Autodesk)
R2 AdvancedSystemCareService13; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1290000 2020-05-22] (IObit Information Technology -> IObit)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-06-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\WINDOWS\System32\DriverStore\FileRepository\c0353065.inf_amd64_536cb9e978acbc9b\B353014\atiesrxx.exe [524712 2020-05-16] (Advanced Micro Devices, Inc. -> AMD)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-03-12] (Apple Inc. -> Apple Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10637168 2020-05-29] (Microsoft Corporation -> Microsoft Corporation)
R2 Diskeeper; C:\Program Files\Condusiv Technologies\Diskeeper\DkService.exe [2721656 2012-06-29] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
S2 edgeupdate; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223336 2020-01-22] (Microsoft Corporation -> Microsoft Corporation)
S3 edgeupdatem; C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [223336 2020-01-22] (Microsoft Corporation -> Microsoft Corporation)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379224 2020-05-20] (HP Inc. -> HP Inc.)
S2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2020-01-31] (IObit Information Technology -> IObit)
R2 LEC TranslateDotNet Server; C:\Program Files (x86)\Power Translator 15\LogoMedia TranslateDotNet Server.exe [1955520 2011-07-25] (Language Engineering Company, LLC -> Language Engineering Corporation, LLC)
R2 LogiFacecamService; C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe [446600 2020-01-08] (Logitech Inc -> Logitech)
S3 Macromedia Licensing Service; C:\Program Files (x86)\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe [68096 2019-05-06] () [Archivo no firmado]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-19] (Malwarebytes Inc -> Malwarebytes)
S3 MicrosoftEdgeElevationService; C:\Program Files (x86)\Microsoft\Edge\Application\83.0.478.45\elevation_service.exe [1507208 2020-06-04] (Microsoft Corporation -> Microsoft Corporation)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2019-08-26] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2019-08-26] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1916824 2019-11-19] (Acronis International GmbH -> )
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4477576 2018-06-19] (Logitech Inc -> Logitech)
R2 NeroBackItUpBackgroundService2021; C:\Program Files (x86)\Nero\Nero 2020\Nero BackItUp\NBService.exe [287000 2019-07-26] (Nero AG -> Nero AG)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 SamsungRapidSvc; C:\WINDOWS\System32\RAPID\SamsungRapidSvc.exe [29280 2018-06-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP4c\RpcAgentSrv.exe [136200 2019-04-25] (SiSoftware SPC -> SiSoftware) [Archivo no firmado]
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5930136 2020-04-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13088784 2020-05-25] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [7095824 2019-08-26] (Acronis International GmbH -> Acronis International GmbH)
R2 TTHOMEService; C:\Program Files\TomTom HOME\TTHOMEService.exe [97792 2019-04-17] (TomTom) [Archivo no firmado]
R2 USBSafelyRemoveService; C:\Program Files (x86)\USB Safely Remove\USBSRService.exe [1745504 2019-12-27] (Crystal Rich Ltd -> Crystal Rich Ltd)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15477208 2020-03-07] (VMware, Inc. -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\NisSrv.exe [2484256 2020-06-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.5-0\MsMpEng.exe [103168 2020-06-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\SafeEraser\DriverInstall.exe [115344 2016-10-20] (Wondershare software CO., LIMITED -> Wondershare)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S3 A38CCID; C:\WINDOWS\system32\DRIVERS\a38ccid.sys [78344 2019-10-06] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Card Systems Ltd.)
R0 amdide64; C:\WINDOWS\System32\drivers\amdide64.sys [13848 2019-05-05] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices Inc.)
R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0353065.inf_amd64_536cb9e978acbc9b\B353014\atikmdag.sys [65752488 2020-05-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0353065.inf_amd64_536cb9e978acbc9b\B353014\atikmpag.sys [592296 2020-05-16] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 AnyDVD; C:\WINDOWS\System32\Drivers\AnyDVD.sys [150440 2015-12-28] (SlySoft, Inc. -> SlySoft, Inc.)
R3 AnyDVD; C:\Windows\SysWOW64\Drivers\AnyDVD.sys [150440 2015-12-28] (SlySoft, Inc. -> SlySoft, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [45432 2019-07-15] (IObit Information Technology -> IObit)
R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [46008 2019-07-15] (IObit Information Technology -> IObit)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [108152 2019-10-06] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [231936 2019-09-11] (Microsoft Corporation) [Archivo no firmado]
R3 cpuz145; C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [49968 2020-06-13] (CPUID -> CPUID)
R0 DKDFM; C:\WINDOWS\System32\drivers\DKDFM.sys [40752 2012-04-05] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R3 DKRtWrt; C:\WINDOWS\System32\DRIVERS\DKRtWrt.sys [52048 2012-06-18] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R0 DKTLFSMF; C:\WINDOWS\System32\drivers\DKTLFSMF.sys [106832 2012-06-07] (CONDUSIV TECHNOLOGIES -> Condusiv Technologies)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [687768 2019-12-27] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [390592 2019-12-27] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [28936 2020-04-16] (Glarysoft LTD -> Glarysoft Ltd)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-05-05] (Martin Malik - REALiX -> REALiX(tm))
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [66824 2017-06-15] (IObit Information Technology -> IObit)
R3 iobit_monitor_server; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [32520 2018-07-04] (IObit Information Technology -> IObit)
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44104 2019-11-18] (IObit Information Technology -> IObit)
R3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2019-07-30] (IObit Information Technology -> IObit)
R3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2019-11-18] (IObit Information Technology -> IObit)
S3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2016-06-25] (Logitech Inc -> Logitech Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-06-04] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-06-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-06-04] (Malwarebytes Inc -> Malwarebytes)
R2 PfFilter; C:\Program Files (x86)\IObit\Protected Folder\pffilter.sys [48480 2017-03-21] (IObit Information Technology -> IObit Information Technology)
R0 SamsungRapidDiskFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidDiskFltr.sys [288864 2018-06-28] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R0 SamsungRapidFSFltr; C:\WINDOWS\System32\DRIVERS\SamsungRapidFSFltr.sys [119400 2018-06-28] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP4c\WNt600x64\Sandra.sys [23112 2009-08-07] (SiSoftware Ltd -> SiSoftware)
R0 SmartDefragDriver; C:\WINDOWS\System32\Drivers\SmartDefragDriver.sys [30744 2017-03-09] (IObit Information Technology -> IObit)
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tib; C:\WINDOWS\system32\DRIVERS\tib.sys [883256 2019-12-27] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [171968 2019-12-27] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [693768 2019-12-27] (Acronis International GmbH -> Acronis International GmbH)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [330176 2019-12-27] (Acronis International GmbH -> Acronis International GmbH)
R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [52288 2020-03-07] (VMware, Inc. -> VMware, Inc.)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2019-12-27] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [103224 2019-08-14] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [52576 2018-02-28] (VMware, Inc. -> VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [45960 2020-06-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [401120 2020-06-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-06-10] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) ===================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-06-13 11:47 - 2020-06-13 11:49 - 000052176 _____ C:\Users\jmsal\Desktop\FRST.txt
2020-06-13 11:43 - 2020-06-13 11:44 - 002289152 _____ (Farbar) C:\Users\jmsal\Desktop\FRST64.exe
2020-06-13 11:41 - 2020-06-13 11:41 - 000000000 ___SH C:\DkHyperbootSync
2020-06-11 23:44 - 2020-06-11 23:44 - 000002894 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_jmsal
2020-06-11 23:44 - 2020-06-11 23:44 - 000001315 _____ C:\Users\Public\Desktop\Advanced SystemCare.lnk
2020-06-11 23:44 - 2020-06-11 23:44 - 000001315 _____ C:\ProgramData\Desktop\Advanced SystemCare.lnk
2020-06-11 23:44 - 2020-06-11 23:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2020-06-11 23:44 - 2020-06-11 23:44 - 000000000 ____D C:\ProgramData\{F86B0233-9A85-4589-8AAF-524CC4F8211B}
2020-06-11 21:46 - 2020-02-18 11:37 - 000001468 _____ C:\Users\jmsal\Desktop\AdwCleaner_8.0.2.lnk
2020-06-10 15:25 - 2020-06-10 18:32 - 000008192 ___SH C:\DumpStack.log.tmp
2020-06-10 12:32 - 2020-06-10 12:32 - 000000000 ___HD C:\$WinREAgent
2020-06-10 01:17 - 2020-06-05 23:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-10 01:17 - 2020-06-05 23:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-09 20:48 - 2020-06-09 20:48 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 019851776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 018029056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 011608064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 009712640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 008015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 007268864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 006292480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 005909504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 004610560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 004129416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 003525608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 003515392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 003398656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-06-09 20:48 - 2020-06-09 20:48 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 002281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 002230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 002204160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 002190648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 002184504 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 001704448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 001497400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001316352 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmclient.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001151824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 001012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000932352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmclient.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000739840 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscsvc.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpprefcl.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
11 
2020-06-09 20:48 - 2020-06-09 20:48 - 000688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\srmscan.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000575488 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000571904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-06-09 20:48 - 2020-06-09 20:48 - 000564736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpprefcl.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-06-09 20:48 - 2020-06-09 20:48 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000478208 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000466944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000464896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srmscan.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-09 20:48 - 2020-06-09 20:48 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-09 20:48 - 2020-06-09 20:48 - 000204008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000093448 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000083600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-09 20:48 - 2020-06-09 20:48 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-06-09 20:48 - 2020-06-09 20:48 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000028368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-06-09 20:48 - 2020-06-09 20:48 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-06-09 20:47 - 2020-06-09 20:48 - 004858880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 025902080 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 009931576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 007911176 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 007760384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 007604592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 007266080 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 006526448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 006435840 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 006091048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 006066808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 005765144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 005283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 005195432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 005111808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 005004344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 004565248 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 004012032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 003726848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 003368104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 003187200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 002831872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 002798592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-06-09 20:47 - 2020-06-09 20:47 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 002656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 002289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 002235520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001919488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001683968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001654960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001649152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001583104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001486336 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 001416224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001397560 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001260744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 001193984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001158144 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001100288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001055184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001007104 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 001003832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000994304 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000932256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000929280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000892048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000826368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000797464 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000783496 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000782336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000760296 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000736768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000716320 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000684856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000651776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000650752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000628408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000614400 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000593424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000548984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-06-09 20:47 - 2020-06-09 20:47 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000518456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000498176 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000467952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000451864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000425056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000405936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000380728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000357176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000287232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000280376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000264192 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000221496 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000199992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-06-09 20:47 - 2020-06-09 20:47 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000165296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000165192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000132424 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000129600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000090952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000089344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-09 20:47 - 2020-06-09 20:47 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-06-09 20:47 - 2020-06-09 20:47 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-06-09 20:47 - 2020-06-09 20:47 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-06-09 20:36 - 2020-05-15 06:29 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-06-09 20:36 - 2020-05-15 06:10 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-06-09 13:04 - 2020-06-09 13:04 - 000000000 __SHD C:\found.003
2020-06-05 15:04 - 2020-06-05 15:04 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-06-04 21:03 - 2020-06-04 21:03 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-06-04 21:03 - 2020-06-04 21:03 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-06-04 21:03 - 2020-06-04 21:03 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-06-04 18:10 - 2020-06-04 18:10 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3517295722-778573365-4120609608-1001
2020-06-04 18:10 - 2020-06-04 18:10 - 000002404 _____ C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-03 14:46 - 2020-06-03 14:46 - 000000000 __SHD C:\found.002
2020-06-03 14:46 - 2020-06-03 14:46 - 000000000 __SHD C:\found.001
2020-06-03 14:46 - 2020-06-03 14:46 - 000000000 __SHD C:\found.000
2020-06-03 14:38 - 2020-06-10 22:36 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TomTom Intl
2020-06-03 14:38 - 2020-06-03 14:38 - 000000000 ____D C:\Users\jmsal\TomTomUpgrade
2020-06-03 14:38 - 2020-06-03 14:38 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\TomTomUpgrade
2020-06-03 14:38 - 2020-06-03 14:38 - 000000000 ____D C:\Users\jmsal\AppData\Local\TomTomUpgrade
2020-06-03 14:37 - 2020-06-03 14:38 - 000000000 ____D C:\Program Files\TomTom HOME
2020-06-03 14:37 - 2020-06-03 14:37 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\H2CU_VCR
2020-06-03 14:23 - 2020-06-10 22:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TomTom
2020-06-02 20:37 - 2020-06-02 20:37 - 000003032 _____ C:\WINDOWS\system32\Tasks\GU5SkipUAC
2020-06-02 20:33 - 2020-06-02 20:33 - 000003882 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-3517295722-778573365-4120609608-1001UA
2020-06-02 20:33 - 2020-06-02 20:33 - 000003614 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-3517295722-778573365-4120609608-1001Core
2020-06-02 20:33 - 2020-06-02 20:33 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2020-05-21 11:39 - 2020-06-01 10:05 - 000000000 ___HD C:\adobeTemp
2020-05-16 12:25 - 2020-05-16 12:25 - 002830336 _____ C:\WINDOWS\system32\config\DEFAULT.iobit
2020-05-16 12:25 - 2020-05-16 12:25 - 000086016 _____ C:\WINDOWS\system32\config\SAM.iobit
2020-05-16 12:25 - 2020-05-16 12:25 - 000049152 _____ C:\WINDOWS\system32\config\SECURITY.iobit
2020-05-16 12:24 - 2020-05-16 12:25 - 116592640 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit
2020-05-16 12:11 - 2020-05-16 12:11 - 052403624 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 004585920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 004095400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 001730984 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 001594280 _____ (AMD) C:\WINDOWS\system32\coinst_19.50.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 001243560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 001243560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 001086184 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 001086184 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000945032 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000945032 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000574888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000491944 _____ C:\WINDOWS\system32\GameManager64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000485800 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000469416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000374696 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000242088 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000209320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000184744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantle64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000179080 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000163240 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\mantleaxl64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000159680 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000158432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000153512 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantle32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000138664 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\mantleaxl32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000136616 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000136616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000135592 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000128976 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000124840 _____ C:\WINDOWS\system32\atidxx64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000121768 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000108048 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000107432 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000071104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000047528 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000044456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000020632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\detoured.dll
2020-05-16 12:11 - 2020-05-16 12:11 - 000020608 _____ (Microsoft Corporation) C:\WINDOWS\system32\detoured.dll
2020-05-16 12:10 - 2020-05-16 12:11 - 062867880 _____ C:\WINDOWS\system32\amd_comgr.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 003471376 _____ C:\WINDOWS\SysWOW64\atiumdva.cap
2020-05-16 12:10 - 2020-05-16 12:10 - 003437632 _____ C:\WINDOWS\system32\atiumd6a.cap
2020-05-16 12:10 - 2020-05-16 12:10 - 001784744 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 001784744 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 001375144 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 001375144 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 000941992 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000769448 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
12 
2020-05-16 12:10 - 2020-05-16 12:10 - 000761256 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 000554408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000546568 _____ C:\WINDOWS\system32\amdmiracast.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000543136 _____ C:\WINDOWS\SysWOW64\atiapfxx.blb
2020-05-16 12:10 - 2020-05-16 12:10 - 000543136 _____ C:\WINDOWS\system32\atiapfxx.blb
2020-05-16 12:10 - 2020-05-16 12:10 - 000493992 _____ C:\WINDOWS\system32\dgtrayicon.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 000484776 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000452008 _____ C:\WINDOWS\system32\atieah64.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 000384424 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000374184 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000346024 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 000345000 _____ C:\WINDOWS\system32\clinfo.exe
2020-05-16 12:10 - 2020-05-16 12:10 - 000198112 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000167720 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000135160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000128952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000121256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdxc64.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000120064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000108056 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2020-05-16 12:10 - 2020-05-16 12:10 - 000106408 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdxc32.dll
2020-05-16 12:07 - 2020-05-16 12:07 - 001162832 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2020-05-16 12:06 - 2020-05-16 12:06 - 015218512 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE3.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 007178360 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 006886992 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2020-05-16 12:06 - 2020-05-16 12:06 - 003753024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPO64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 003445632 _____ (DTS, Inc.) C:\WINDOWS\system32\slcnt64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 003340296 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 003306704 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE2.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 003266984 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RltkAPO.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 003168280 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 003159664 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 002930040 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 002197872 _____ (Yamaha Corporation) C:\WINDOWS\system32\YamahaAE.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001435032 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRRPTR64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001396840 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SECOMN64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001386680 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDHF64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001382128 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001353208 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001337528 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaeapo64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001294184 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEAPO64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001180792 _____ (Sound Research, Corp.) C:\WINDOWS\system32\SEHDRA64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001110064 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001078576 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SEHDHF32.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 001061464 _____ (Sound Research, Corp.) C:\WINDOWS\SysWOW64\SECOMN32.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000964912 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000873352 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000852024 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tosasfapo64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000692056 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000604688 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\tossaemaxapo64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000541008 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000467048 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRAPO64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000453168 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000447072 _____ (Toshiba Client Solutions Co., Ltd.) C:\WINDOWS\system32\toseaeapo64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000392760 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000381296 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000343600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000341040 _____ (Synopsys, Inc.) C:\WINDOWS\SysWOW64\SRCOM.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000341040 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SRCOM.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000327160 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000327160 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000266440 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000231808 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000230592 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000220280 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000218160 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000192872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000174832 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000158584 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000157232 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000139648 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000116432 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000093792 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000090808 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000090064 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000088208 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000083512 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000075432 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
2020-05-16 12:06 - 2020-05-16 12:06 - 000023584 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 072520600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
2020-05-16 12:05 - 2020-05-16 12:05 - 033399859 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2020-05-16 12:05 - 2020-05-16 12:05 - 007101632 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 006463760 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV3apo.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 006270080 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64AF3.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 005938800 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICV2apo.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 005593504 _____ (Nahimic Inc) C:\WINDOWS\system32\NAHIMICAPOlfx.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 005347096 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv211.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 003676960 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2020-05-16 12:05 - 2020-05-16 12:05 - 002992288 _____ (Audyssey Labs) C:\WINDOWS\system32\AudysseyEfx.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 002444792 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOv201.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001971472 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001965264 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64AF3.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001788064 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001611064 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOv251gm.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001598504 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001544360 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOProp.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001516376 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001372496 _____ (Dolby Laboratories) C:\WINDOWS\system32\DAX3APOv251.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001287704 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyAPOvlldpgm.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001259832 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOvlldp.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001159072 _____ (Dolby Laboratories) C:\WINDOWS\system32\DolbyDAX2APOProp.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 001003744 _____ (Nahimic Inc) C:\WINDOWS\system32\NahimicAPONSControl.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000934848 _____ (ICEpower A/S) C:\WINDOWS\system32\ICEsoundAPO64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000751408 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000734880 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000715752 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000511776 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000452840 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000448712 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000416400 _____ (Harman) C:\WINDOWS\system32\HMUI.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000406560 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2APIPCLL.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000378272 _____ (Dolby Laboratories) C:\WINDOWS\system32\HiFiDAX2API.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000367712 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64AF3.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000366224 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\HMAPO.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000360448 _____ (Harman) C:\WINDOWS\system32\HMClariFi.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000333112 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000316080 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64F3.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000278376 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000261336 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000261304 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000260320 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000203944 _____ (Harman) C:\WINDOWS\system32\HMHVS.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000191040 _____ (Harman) C:\WINDOWS\system32\HMEQ_Voice.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000191040 _____ (Harman) C:\WINDOWS\system32\HMEQ.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000179728 _____ (Harman) C:\WINDOWS\system32\HMLimiter.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000167224 _____ (ASUSTeK COMPUTER INC.) C:\WINDOWS\system32\ATKWMI.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000154256 _____ (Harman) C:\WINDOWS\system32\HarmanAudioInterface.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000122208 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000118480 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
2020-05-16 12:05 - 2020-05-16 12:05 - 000105200 _____ C:\WINDOWS\system32\audioLibVc.dll

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-06-13 11:48 - 2020-02-18 11:52 - 000000000 ____D C:\FRST
2020-06-13 11:44 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-06-13 11:40 - 2019-05-09 20:54 - 000000000 ____D C:\ProgramData\Autodesk
2020-06-13 11:35 - 2019-07-02 14:11 - 001812070 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-06-13 11:35 - 2019-03-19 13:59 - 000807208 _____ C:\WINDOWS\system32\perfh00A.dat
2020-06-13 11:35 - 2019-03-19 13:59 - 000162090 _____ C:\WINDOWS\system32\perfc00A.dat
2020-06-13 11:35 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-06-13 11:33 - 2019-07-02 14:11 - 000004208 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{A6A8C73A-48F2-40B0-BDBA-96B9886CC635}
2020-06-13 11:32 - 2019-05-19 19:26 - 000000000 ___RD C:\Users\jmsal\Creative Cloud Files
2020-06-13 11:32 - 2019-05-05 18:34 - 000000000 ____D C:\Users\jmsal\AppData\Local\Adobe
2020-06-13 11:30 - 2020-05-05 11:17 - 000000000 __RDL C:\Users\jmsal\iCloudDrive
2020-06-13 11:30 - 2019-05-09 08:19 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\USBSafelyRemove
2020-06-13 11:30 - 2019-05-05 19:29 - 000000000 ____D C:\ProgramData\ProductData
2020-06-13 11:29 - 2019-07-02 14:11 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-06-13 11:29 - 2019-06-09 21:29 - 000000000 ____D C:\ProgramData\VMware
2020-06-13 11:29 - 2019-05-05 22:21 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-06-12 23:08 - 2019-05-05 15:40 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2020-06-12 23:08 - 2019-03-19 06:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-06-12 22:40 - 2019-07-02 14:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-06-12 14:03 - 2019-05-05 20:34 - 000000000 ____D C:\Users\jmsal\AppData\Local\CrashDumps
2020-06-11 23:55 - 2019-03-19 06:37 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-06-11 23:44 - 2019-05-05 19:29 - 000000000 ____D C:\Users\jmsal\AppData\LocalLow\IObit
2020-06-11 23:44 - 2019-05-05 19:28 - 000000000 ____D C:\Program Files (x86)\IObit
2020-06-11 22:43 - 2019-05-05 19:29 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\IObit
2020-06-11 22:43 - 2019-05-05 19:28 - 000000000 ____D C:\ProgramData\IObit
2020-06-11 22:41 - 2019-05-05 19:45 - 000000000 ____D C:\Users\jmsal\AppData\Local\D3DSCache
2020-06-11 21:43 - 2019-07-02 13:35 - 000000000 ____D C:\Users\jmsal
2020-06-11 17:25 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-06-11 17:08 - 2019-05-05 15:38 - 000000000 ____D C:\Users\jmsal\AppData\Local\PlaceholderTileLogoFolder
2020-06-11 17:03 - 2020-05-05 09:26 - 000000000 ____D C:\Program Files (x86)\USB Safely Remove
2020-06-10 22:36 - 2020-05-10 11:29 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2020-06-10 22:36 - 2020-04-27 07:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tenorshare ReiBoot
2020-06-10 22:36 - 2020-04-18 14:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2020-06-10 22:36 - 2020-04-16 16:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2020-06-10 22:36 - 2020-04-14 09:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kodi
2020-06-10 22:36 - 2020-04-13 20:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Condusiv Technologies
2020-06-10 22:36 - 2020-04-10 11:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
2020-06-10 22:36 - 2020-03-20 13:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag
2020-06-10 22:36 - 2020-03-20 13:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 7
2020-06-10 22:36 - 2020-03-18 11:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 2020
2020-06-10 22:36 - 2020-03-18 11:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero
2020-06-10 22:36 - 2020-03-17 18:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-06-10 22:36 - 2020-02-19 17:40 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVDFab 11 (x64)
2020-06-10 22:36 - 2020-02-19 17:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDFab 11 (x64)
2020-06-10 22:36 - 2020-02-18 20:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark7
2020-06-10 22:36 - 2020-02-16 18:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-06-10 22:36 - 2020-01-19 19:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office
2020-06-10 22:36 - 2019-08-18 09:16 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpeedFan
2020-06-10 22:36 - 2019-08-07 23:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
2020-06-10 22:36 - 2019-08-04 10:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Vitamin D Video
2020-06-10 22:36 - 2019-07-25 11:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Disk Cleaner
2020-06-10 22:36 - 2019-07-25 09:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BleachBit
2020-06-10 22:36 - 2019-07-15 12:33 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MP3Gain
2020-06-10 22:36 - 2019-06-19 14:38 - 000000000 ____D C:\Program Files\UNP
2020-06-10 22:36 - 2019-06-02 08:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Disk Security
2020-06-10 22:36 - 2019-05-28 10:17 - 000000000 ____D C:\WINDOWS\system32\RAPID
2020-06-10 22:36 - 2019-05-25 09:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2020-06-10 22:36 - 2019-05-19 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SSDFresh
2020-06-10 22:36 - 2019-05-17 17:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\i-Funbox DevTeam
2020-06-10 22:36 - 2019-05-15 11:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Duplicate Cleaner Pro
2020-06-10 22:36 - 2019-05-09 20:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2020 - Español (Spanish)
2020-06-10 22:36 - 2019-05-09 20:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2020-06-10 22:36 - 2019-05-08 22:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2020-06-10 22:36 - 2019-05-06 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2020-06-10 22:36 - 2019-05-06 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
2020-06-10 22:36 - 2019-05-06 08:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rainbow Folders
2020-06-10 22:36 - 2019-05-06 07:22 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirtualDJ
2020-06-10 22:36 - 2019-05-06 07:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightworks
2020-06-10 22:36 - 2019-05-06 06:57 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2020-06-10 22:36 - 2019-05-06 06:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macromedia
2020-06-10 22:36 - 2019-05-05 22:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KaraFun Player 2
2020-06-10 22:36 - 2019-05-05 22:48 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AtomixMP3
2020-06-10 22:36 - 2019-05-05 22:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-10 22:36 - 2019-05-05 22:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SiSoftware
2020-06-10 22:36 - 2019-05-05 22:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2020-06-10 22:36 - 2019-05-05 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Configuración de cámara Logitech
2020-06-10 22:36 - 2019-05-05 21:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-06-10 22:36 - 2019-05-05 20:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LEC Power Translator 15
2020-06-10 22:36 - 2019-05-05 20:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2020-06-10 22:36 - 2019-05-05 20:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker
2020-06-10 22:36 - 2019-05-05 20:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2020-06-10 22:36 - 2019-05-05 20:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder
2020-06-10 22:36 - 2019-05-05 19:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2020-06-10 22:36 - 2019-05-05 18:34 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2020-06-10 22:36 - 2019-05-05 18:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HDD Regenerator
2020-06-10 22:36 - 2019-05-05 18:19 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z
2020-06-10 22:36 - 2019-05-05 17:57 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-10 22:36 - 2019-05-05 17:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2020-06-10 22:36 - 2019-05-05 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings
2020-06-10 22:36 - 2019-05-05 15:40 - 000000000 ____D C:\Program Files\AMD
2020-06-10 22:36 - 2019-05-05 15:36 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\ta-in
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\spool
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\System
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ServiceState
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\Help
2020-06-10 22:36 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-06-10 22:36 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2020-06-10 22:14 - 2019-05-05 22:08 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\Kodi
2020-06-10 22:12 - 2019-07-18 10:57 - 000000000 ____D C:\WINDOWS\Minidump
2020-06-10 22:11 - 2020-04-16 16:55 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2020-06-10 21:40 - 2019-12-07 17:53 - 000000000 ___HD C:\$WINDOWS.~BT
2020-06-10 18:41 - 2019-05-05 15:45 - 000002306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-10 18:40 - 2020-01-22 08:28 - 000002432 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-06-10 18:40 - 2020-01-22 08:28 - 000002270 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-06-10 18:40 - 2020-01-22 08:28 - 000002270 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2020-06-10 18:06 - 2019-07-02 12:33 - 000000000 ___DC C:\WINDOWS\Panther
2020-06-10 17:58 - 2019-07-02 14:11 - 000064773 _____ C:\WINDOWS\diagwrn.xml
2020-06-10 17:58 - 2019-07-02 14:11 - 000064773 _____ C:\WINDOWS\diagerr.xml
2020-06-10 15:12 - 2019-06-12 10:34 - 000000000 ____D C:\Users\jmsal\AppData\Local\ElevatedDiagnostics
2020-06-10 14:02 - 2019-05-05 15:36 - 000000000 ____D C:\Users\jmsal\AppData\Local\Packages
2020-06-10 13:31 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-06-10 12:29 - 2019-05-05 15:29 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-06-10 01:17 - 2019-07-02 14:02 - 000676872 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-06-10 01:17 - 2019-05-05 15:36 - 000000000 ___RD C:\Users\jmsal\3D Objects
2020-06-10 01:15 - 2019-03-19 14:01 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-06-10 01:15 - 2019-03-19 14:01 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\Com
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-06-10 01:15 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-06-09 20:51 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-06-09 20:47 - 2019-07-02 14:07 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2020-06-09 20:34 - 2020-03-25 13:00 - 000001542 _____ C:\Users\jmsal\Desktop\360m.mp4.lnk
2020-06-09 20:34 - 2019-05-05 22:40 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\vlc
2020-06-09 13:29 - 2019-05-05 17:06 - 000000000 ___RD C:\Users\jmsal\Desktop\Utilidades Antec
2020-06-06 18:46 - 2019-05-05 16:36 - 000000000 ____D C:\Program Files\Microsoft Office
2020-06-04 18:10 - 2019-05-05 15:38 - 000000000 __RDL C:\Users\jmsal\OneDrive
2020-06-03 20:38 - 2019-05-05 15:43 - 000000000 ____D C:\Users\jmsal\AppData\Local\Google
2020-06-03 14:23 - 2019-07-02 18:38 - 000000000 ____D C:\Program Files (x86)\TomTom HOME 2
2020-06-03 14:21 - 2019-05-05 18:26 - 000000000 ____D C:\Users\jmsal\AppData\Local\Downloaded Installations
2020-06-03 14:13 - 2019-05-05 22:44 - 000001123 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2020-06-03 14:13 - 2019-05-05 22:44 - 000000000 ____D C:\Program Files\paint.net
2020-06-02 20:37 - 2020-04-16 16:56 - 000001178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2020-06-02 20:32 - 2019-05-05 20:47 - 000000000 ____D C:\Program Files\Google
2020-06-02 13:39 - 2019-08-07 23:12 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2020-06-02 13:29 - 2020-04-02 19:34 - 000000354 _____ C:\WINDOWS\Tasks\HPCeeScheduleForjmsal.job
2020-06-01 13:34 - 2020-04-02 19:34 - 000003246 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForjmsal
2020-05-26 13:51 - 2020-01-22 08:27 - 000003652 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-05-26 13:51 - 2020-01-22 08:27 - 000003528 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-05-21 11:39 - 2019-05-11 20:11 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-05-16 12:06 - 2019-05-05 19:43 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-05-16 12:06 - 2019-05-05 19:43 - 000000000 ____D C:\WINDOWS\system32\DAX3
2020-05-16 12:06 - 2019-05-05 19:43 - 000000000 ____D C:\WINDOWS\system32\DAX2

==================== Archivos en la raíz de algunos directorios ========

2019-05-05 20:59 - 2010-01-15 10:36 - 000075040 _____ () C:\Program Files (x86)\Common Files\SpeechUninstall.exe
2019-05-08 09:39 - 2019-05-08 09:39 - 000000171 _____ () C:\Users\jmsal\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2020-04-23 16:12 - 2020-04-23 16:12 - 000000033 _____ () C:\Users\jmsal\AppData\Roaming\AdobeWLCMCache.dat
2019-05-05 22:20 - 2019-04-24 21:18 - 017432576 _____ () C:\Users\jmsal\AppData\Roaming\Sandra.mdb
2019-09-05 17:45 - 2019-09-05 17:45 - 000000000 _____ () C:\Users\jmsal\AppData\Local\AcronisTrueImage2017_8058.exe
2019-05-08 22:28 - 2019-05-08 22:28 - 000000000 _____ () C:\Users\jmsal\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================
13 
Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 06-06-2020
Ejecutado por jmsal (13-06-2020 11:49:41)
Ejecutado desde C:\Users\jmsal\Desktop
Windows 10 Pro Versión 1909 18363.900 (X64) (2019-07-02 12:11:47)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-3517295722-778573365-4120609608-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3517295722-778573365-4120609608-503 - Limited - Disabled)
Invitado (S-1-5-21-3517295722-778573365-4120609608-501 - Limited - Disabled)
jmsal (S-1-5-21-3517295722-778573365-4120609608-1001 - Administrator - Enabled) => C:\Users\jmsal
WDAGUtilityAccount (S-1-5-21-3517295722-778573365-4120609608-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.0.4 - )
ACA & MEP 2020 Object Enabler (HKLM\...\{28B89EEF-3004-0000-5102-CF3F3A09B77D}) (Version: 8.2.45.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{28B89EEF-3001-0000-3102-CF3F3A09B77D}) (Version: 23.1.47.0 - Autodesk) Hidden
ACDSee Pro 10 (64-bit) (HKLM\...\{13E67D9D-8F6F-4709-B380-A04EC12343E7}) (Version: 10.4.0.686 - ACD Systems International Inc.)
Acronis True Image (HKLM-x32\...\{7731CFE5-70AE-4EFD-9989-0B97986B6FA9}) (Version: 24.5.22510 - Acronis) Hidden
Acronis True Image (HKLM-x32\...\{7731CFE5-70AE-4EFD-9989-0B97986B6FA9}Visible) (Version: 24.5.22510 - Acronis)
Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.23 - Adobe Systems)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.1.0.407 - Adobe Systems Incorporated)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_1) (Version: 20.0.1 - Adobe Systems Incorporated)
Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 13.5.0 - IObit)
AnyDVD (HKLM-x32\...\AnyDVD) (Version: 7.6.9.5 - RedFox)
Aplicación de escritorio de Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 8.0.0.46 - Autodesk)
Aplicaciones destacadas de Autodesk 2020 (HKLM-x32\...\{D0194D24-57D6-4FC8-9B80-3B60BFEBA23A}) (Version: 3.0.0 - Autodesk)
Apple Application Support (32 bits) (HKLM-x32\...\{6CF0CAEE-54B6-4D84-A055-3AF110F189D3}) (Version: 8.4 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{8B127943-89E7-4691-A7A4-D05807920A84}) (Version: 8.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6E93B248-22B6-48B2-A568-2E49C65B2EA4}) (Version: 13.5.0.20 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
AtomixMP3 v2.3 Trial (HKLM-x32\...\AtomixMP3 v2.3 Trial) (Version:  - )
aTube Catcher versión 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
AutoCAD 2020 - Español (Spanish) (HKLM\...\{28B89EEF-3001-040A-2102-CF3F3A09B77D}) (Version: 23.1.47.0 - Autodesk) Hidden
AutoCAD 2020  Language Pack - Español (Spanish) (HKLM\...\{28B89EEF-3001-040A-1102-CF3F3A09B77D}) (Version: 23.1.47.0 - Autodesk) Hidden
AutoCAD 2020 (HKLM\...\{28B89EEF-3001-0000-0102-CF3F3A09B77D}) (Version: 23.1.47.0 - Autodesk) Hidden
Autodesk App Manager 2020 (HKLM-x32\...\{093769E2-0281-4626-88B1-43180365CCDF}) (Version: 3.0.0 - Autodesk)
Autodesk AutoCAD 2020 - Español (Spanish) (HKLM\...\AutoCAD 2020 - Español (Spanish)) (Version: 23.1.47.0 - Autodesk)
Autodesk Genuine Service (HKLM-x32\...\{317D67F2-9027-4E85-9ED1-ADF4D765AE02}) (Version: 3.0.11 - Autodesk)
Autodesk Material Library 2020 (HKLM-x32\...\{B9312A51-41B5-479D-9F72-E7448A2D89AF}) (Version: 18.11.1.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2020 (HKLM-x32\...\{0E976988-E753-4C81-BD96-434CE305B176}) (Version: 18.11.1.0 - Autodesk)
Autodesk Single Sign On Component (HKLM\...\{43D6A09F-C6C9-426A-8651-9EF8990B0A65}) (Version: 11.0.0.1800 - Autodesk)
Backup and Sync from Google (HKLM\...\{FE296942-D2D3-4149-8895-60655FE4CFDE}) (Version: 3.49.9800.0000 - Google, Inc.)
BleachBit 2.2 (HKLM-x32\...\BleachBit) (Version: 2.2 - BleachBit)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Configuración de cámara Logitech (HKLM-x32\...\LogiUCDPP) (Version: 2.5.17.0 - Logitech Europe S.A.)
Corel Update Manager (HKLM\...\{2945B729-98C9-4A18-A24E-AD5D84BB9A8E}) (Version: 2.10.442 - Corel corporation) Hidden
CPUID CPU-Z 1.92 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.92 - CPUID, Inc.)
CrystalDiskMark 7.0.0g (HKLM\...\CrystalDiskMark7_is1) (Version: 7.0.0g - Crystal Dew World)
Diskeeper 12  (HKLM\...\{07FE9A03-73B7-492B-9CF4-BF145AF61BD7}) (Version: 16.0.1016.64 - Condusiv Technologies)
Driver Booster 7 (HKLM-x32\...\Driver Booster_is1) (Version: 7.3.0 - IObit)
Duplicate Cleaner Pro 4.1.1 (HKLM-x32\...\Duplicate Cleaner Pro) (Version: 4.1.1 - DigitalVolcano Software Ltd)
DVDFab (x64) 11.0.7.4 (18/02/2020) (HKLM-x32\...\DVDFab 11(x64)) (Version: 11.0.7.4 - DVDFab Software Inc.)
Estudio para la mejora del producto HP LaserJet Pro M148-M149 (HKLM\...\{A083FAF3-354C-47FB-90FA-118035D6594D}) (Version: 44.5.2693.19162 - HP Inc.)
foobar2000 v1.5.3 (HKLM-x32\...\foobar2000) (Version: 1.5.3 - Peter Pawlowski)
FormatFactory 4.6.1.0 (HKLM-x32\...\FormatFactory) (Version: 4.6.1.0 - Free Time)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Glary Utilities PRO 5.143 (HKLM-x32\...\Glary Utilities 5) (Version: 5.143.0.169 - Glarysoft Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.97 - Google LLC)
Google Earth Pro (HKLM\...\{7E57D9AD-0F6E-45BD-9CBB-CDA35343510E}) (Version: 7.3.3.7721 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Guardar en la versión web y para dispositivos móviles de Autodesk (HKLM\...\{26FB18F7-B553-430D-94F6-C2389A91235F}) (Version: 3.0.21 - Autodesk)
HDD Regenerator (HKLM-x32\...\{2445981B-A23B-4A0E-AD15-3D391BDAEC3E}) (Version: 1.71.0012 - Abstradrome)
HP Dropbox Plugin (HKLM-x32\...\{55C2D199-02CD-4F04-BE6D-F202A1F5D862}) (Version: 44.5.501.81934 - HP)
HP EmailSMTP Plugin (HKLM-x32\...\{B72B1013-45A1-4E3D-A4F1-ABDC034815C0}) (Version: 44.5.0.0 - HP)
HP FTP Plugin (HKLM-x32\...\{E374E94C-9D8E-407C-AF20-25F0083567EF}) (Version: 44.5.0.0 - HP)
HP Google Drive Plugin (HKLM-x32\...\{C15E834D-72CC-427B-8BF3-8A3C7BA42794}) (Version: 44.5.501.81934 - HP)
HP LaserJet Pro M148-M149 Ayuda (HKLM-x32\...\{F74A9639-9913-4A9B-9A7D-4BF0D8CE26DE}) (Version: 1.00.0000 - HP)
HP LaserJet Pro M148-M149 Software básico del dispositivo (HKLM\...\{07A18E8D-5EF1-43A2-874A-7F98AD0AF549}) (Version: 44.5.2693.19162 - HP Inc.)
HP OneDrive Plugin (HKLM-x32\...\{C8ADAA7D-280B-40B3-9374-91FFC15DAB16}) (Version: 44.5.0.0 - HP)
HP SharePoint Plugin (HKLM-x32\...\{C0D62E8B-38C0-495D-BC58-97CF979EE3EC}) (Version: 44.5.0.0 - HP)
HP Support Assistant (HKLM-x32\...\{33A0B67A-CF04-4F31-B3D0-EEEEDEF7078E}) (Version: 8.8.26.13 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{699BD389-9AC2-4DDC-8CFF-316ED33F72CE}) (Version: 12.16.22.11 - HP Inc.)
I.R.I.S OCR (HKLM-x32\...\{0E0D0459-0565-4490-8D96-A5355D56C243}) (Version: 15.2.10.1114 - HP Inc.)
iCloud Outlook (HKLM\...\{CD1AA9AE-DE07-443C-914B-6ABFF79A603E}) (Version: 11.1.0.71 - Apple Inc.)
iFunbox (v4.0.4106.1352) (HKLM-x32\...\iFunbox_is1) (Version: v4.0.4106.1352 - iFunbox DevTeam)
IObit Uninstaller 9 (HKLM-x32\...\IObitUninstall) (Version: 9.3.0.10 - IObit)
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1.2.1 - IObit)
IrfanView 4.54 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.54 - Irfan Skiljan)
IsoBuster 2.8.5 (HKLM-x32\...\IsoBuster_is1) (Version: 2.8.5 - Smart Projects)
iTunes (HKLM\...\{51E78C79-92F0-48B2-8A9A-3A5C0A7DD3F2}) (Version: 12.6.5.3 - Apple Inc.)
Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation)
KaraFun Player 2 (HKLM-x32\...\KaraFun Player 2_is1) (Version: 2.6.1.1 - Recisio)
Kodi (HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Kodi) (Version:  - XBMC Foundation)
LEC Translate (HKLM-x32\...\{B593248E-8CD9-4C54-AD3C-F6848C6A4209}) (Version: 1.00.0004 - Nombre de su organización)
Lightworks (HKLM-x32\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 14.5.0.0 - EditShare)
Logitech Capture (HKLM\...\Capture) (Version: 2.00.226 - Logitech)
Macromedia FreeHand MXa (HKLM-x32\...\{939740B5-0064-4779-854A-8C1086181C05}) (Version: 11.0.2 - Macromedia)
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
MediaInfo 19.09 (HKLM\...\MediaInfo) (Version: 19.09 - MediaArea.net)
Microsoft 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.12827.20268 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 83.0.478.45 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.129.31 - )
Microsoft OneDrive (HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\OneDriveSetup.exe) (Version: 20.064.0329.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.23.27820 (HKLM-x32\...\{852adda4-4c78-4a38-b583-c0b360a329d6}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.23.27820 (HKLM-x32\...\{45231ab4-69fd-486a-859d-7a59fcd11013}) (Version: 14.23.27820.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2017 (HKLM-x32\...\{5a7dc0ad-cdb2-43b5-8b82-f81065fe6092}) (Version: 15.0.26717 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Nero 2020 (HKLM-x32\...\{C123715D-F79F-47AE-8486-16FAC0C276E1}) (Version: 22.0.00900 - Nero AG)
Nero Content Pack 1 (HKLM-x32\...\{A108C91D-8367-4014-A5EF-A22716B27533}) (Version: 22.0.00001 - Nero AG)
Nero Content Pack 2 (HKLM-x32\...\{4D0F0063-F62A-48C7-AD48-6D1770BA0D00}) (Version: 22.0.00002 - Nero AG)
Nero Core (HKLM-x32\...\{E522C6B9-F714-49E9-915D-BC8918E071A5}) (Version: 2.0.04400 - Nero AG)
Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 21.0.1006 - Nero AG)
Nero LifeThemes PRO (HKLM-x32\...\{35C53CE5-88F5-4ED1-8644-40BA6829036A}) (Version: 20.0.02000 - Nero AG)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.8.6 - Notepad++ Team)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12827.20160 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12827.20268 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.12827.20160 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
paint.net (HKLM\...\{7ADB1B05-39DE-4888-A72D-D1F3A791D45F}) (Version: 4.2.12 - dotPDN LLC)
Prerequisite installer (HKLM-x32\...\{2A67013F-16C4-47A0-A6F0-0D172B983134}) (Version: 22.0.0002 - Nero AG) Hidden
Prerequisite installer (HKLM-x32\...\{37E15A76-F310-4C62-9D32-EE96C83BBD2C}) (Version: 20.2.0001 - Nero AG) Hidden
Protected Folder (HKLM-x32\...\Protected Folder_is1) (Version:  - IObit)
Rainbow Folders (HKLM-x32\...\{2AEA17BA-FAB3-49D2-BB85-0669D14DC9BC}_is1) (Version: 2.05 - Piotr Chodzinski)
RAPID Mode (HKLM\...\{0EBB0FA7-1DBA-4B97-9B44-BD5CC451EEF2}) (Version: 1.0.0.103 - Samsung Electronics Co., Ltd.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8746.1 - Realtek Semiconductor Corp.)
Revo Uninstaller Pro 4.3.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.1 - VS Revo Group, Ltd.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.3.1.2010 - Samsung Electronics)
SiSoftware Sandra Lite Titanium.SP4c (HKLM\...\{C3113E55-7BCB-4de3-8EBF-60E6CE6B2596}_is1) (Version: 28.69.2018.12 - SiSoftware)
Smart Defrag 6 (HKLM-x32\...\Smart Defrag_is1) (Version: 6.4.5 - IObit)
Speech Support (HKLM-x32\...\Speech Support) (Version:  - LEC)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
SSDFresh 2019 (HKLM-x32\...\{71149886-0AA3-4F31-81F9-CC90EA0D55EF}_is1) (Version: 8 - Abelssoft)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.6.7 - TeamViewer)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Tenorshare ReiBoot 7.3.8.3 (HKLM-x32\...\{Tenorshare ReiBoot}_is1) (Version: 7.3.8.3 - Tenorshare, Inc.)
TomTom HOME 2.20.11.41 (HKLM\...\TomTom HOME) (Version: 2.20.11.41 - TomTom)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 9.22a - Ghisler Software GmbH)
USB Disk Security (HKLM-x32\...\USB Disk Security_is1) (Version:  - Zbshareware Lab)
USB Safely Remove 6.2 (HKLM-x32\...\USB Safely Remove_is1) (Version:  - SafelyRemove.com)
VirtualDJ 2018 (HKLM-x32\...\{25D968FB-BFC5-4772-9E10-3D9C468FE289}) (Version: 8.3.4848.0 - Atomix Productions)
Vitamin D Video 1.4.2 (HKLM-x32\...\Vitamin D Video_is1) (Version:  - Vitamin D Video, LLC)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.10 - VideoLAN)
WiFi+Transfer (HKLM-x32\...\{9E363AFB-7AA6-49AF-8911-505761B75DC0}) (Version: 1.0.3078 - Nero AG)
WinRAR 5.90 beta 2 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.90.2 - win.rar GmbH)
Wise Disk Cleaner 10.1.4 (HKLM-x32\...\Wise Disk Cleaner_is1) (Version: 10.1.4 - WiseCleaner.com, Inc.)
Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)
Wondershare SafeEraser ( Version 4.9.0 ) (HKLM-x32\...\{1FD4D6F6-5A95-44EF-855F-02746470397C}_is1) (Version: 4.9.0 - Wondershare)
WordPerfect Office X7 - Setup Files (HKLM-x32\...\{64A329FC-D1B2-4354-922D-21F7EC777E10}) (Version: 17.1 - Corel Corporation) Hidden
Zoom (HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.)

Packages:
=========
AdBlock -> C:\Program Files\WindowsApps\BetaFish.AdBlock_2.13.0.0_neutral__c1wakc4j0nefm [2020-01-11] (BetaFish)
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2019-07-17] (Adobe Systems Incorporated)
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.37.4.0_x86__kgqvnymyfvs32 [2020-05-14] (king.com)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.1781.1.0_x86__kgqvnymyfvs32 [2020-06-10] (king.com)
Complemento de motor del medio de Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-09-19] (Microsoft Corporation)
DTS Sound Unbound -> C:\Program Files\WindowsApps\DTSInc.DTSSoundUnbound_2020.1.45.0_x64__t5j2fzbtdg37r [2020-05-10] (DTS, Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_115.1.152.0_x64__v10z8vjag6ke6 [2020-05-28] (HP Inc.)
iCloud -> C:\Program Files\WindowsApps\AppleInc.iCloud_11.2.18.0_x86__nzyj5cx40ttqa [2020-05-30] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-06-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-06-29] (Microsoft Corporation) [MS Ad]
Microsoft News: Noticias destacadas en español -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.40.21551.0_x64__8wekyb3d8bbwe [2020-06-10] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad]
MSN El Tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
PicsArt - Photo Studio -> C:\Program Files\WindowsApps\2FE3CB00.PicsArt-PhotoStudio_8.9.0.0_x86__crhqpqs3x1ygc [2020-06-04] (PicsArt Inc.) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0 [2020-06-01] (Spotify AB) [Startup Task]

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{869C14C8-1830-491F-B575-5F9AB40D2B42}\InprocServer32 -> C:\Program Files\MediaInfo\MediaInfo_InfoTip.dll (MediaArea.net -> MediaArea.net)
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{AB1D0550-8BBD-45C1-BD9C-8BB23DC3C749} -> [iCloud Photos] => D:\Imágenes\iCloud Photos\Photos [2020-05-05 11:17]
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{CD919ED1-B479-4D78-83F4-CADAE08DCCF2} -> [iCloud Drive] => C:\Users\jmsal\iCloudDrive [2020-05-05 11:17]
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{D1DE6864-2236-48B7-99C3-D29C757903A4}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2020\es-ES\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3517295722-778573365-4120609608-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64_24_5_22510.dll [2019-11-18] (Acronis International GmbH -> )
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2020-04-06] (Google LLC -> Google)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\System32\AcSignIcon.dll [2019-01-30] (Autodesk, Inc. -> Autodesk, Inc.)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Ningún archivo
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2019-01-30] (Autodesk, Inc. -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-05-22] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2020-04-21] (Notepad++ -> )
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_105.dll [2019-04-22] (Free Time) [Archivo no firmado]
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-04-06] (Google LLC -> Google)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2020-04-10] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-01-31] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [PfMenu] -> {2F844462-7CB8-489C-828C-32A6422506AF} => C:\Program Files (x86)\IObit\Protected Folder\PfShellExtension.dll [2015-03-10] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2017-05-06] (ACD Systems International -> ACD Systems International Inc.) [Archivo no firmado]
ContextMenuHandlers1: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\WINDOWS\System32\IObitSmartDefragExtension.dll [2019-09-12] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-02-04] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-02-04] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-05-22] (IObit Information Technology -> IObit)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2020-04-10] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2020-03-07] (VMware, Inc. -> VMware, Inc.)
ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2020-03-07] (VMware, Inc. -> VMware, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-05-22] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_105.dll [2019-04-22] (Free Time) [Archivo no firmado]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2020-04-06] (Google LLC -> Google)
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-01-31] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [PfMenu] -> {2F844462-7CB8-489C-828C-32A6422506AF} => C:\Program Files (x86)\IObit\Protected Folder\PfShellExtension.dll [2015-03-10] (IObit Information Technology -> IObit)
ContextMenuHandlers4: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-04-24] (Advanced Micro Devices, Inc.) [Archivo no firmado]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2020-04-10] (Glarysoft LTD -> Glarysoft Ltd)
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-01-31] (IObit Information Technology -> IObit)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-16] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [PfMenu] -> {2F844462-7CB8-489C-828C-32A6422506AF} => C:\Program Files (x86)\IObit\Protected Folder\PfShellExtension.dll [2015-03-10] (IObit Information Technology -> IObit)
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group)
ContextMenuHandlers6: [SmartDefragExtension] -> {189F1E63-33A7-404B-B2F6-8C76A452CC54} => C:\WINDOWS\System32\IObitSmartDefragExtension.dll [2019-09-12] (IObit Information Technology -> IObit)
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-02-04] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-02-04] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [Archivo no firmado]

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

Shortcut: C:\Users\jmsal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVDFab 11 (x64)\Visitar o site do DVDFab.lnk -> hxxp://www.dvdfab.cn/?s=dvdfab11&p=x64&v=11.0.7.
ShortcutWithArgument: C:\Users\jmsal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default

==================== Módulos cargados (Lista blanca) =============

2020-04-28 10:58 - 2016-07-21 10:54 - 000137728 _____ () [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2020-04-28 10:58 - 2016-10-08 16:48 - 001506304 _____ () [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 000011776 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\libEGL.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 002013696 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000014336 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000739840 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000191488 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000071168 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000014336 _____ () [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll
2017-05-06 21:21 - 2017-05-06 21:21 - 006105608 _____ (ACD Systems International -> ACD Systems International Inc.) [Archivo no firmado] C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll
2012-09-23 20:44 - 2012-09-23 20:44 - 000010240 _____ (Adobe Systems Inc.) [Archivo no firmado] C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\locale\es_es\Acrobat Elements\ContextMenuShim64.esp
2017-04-24 21:17 - 2017-04-24 21:17 - 000851456 _____ (Advanced Micro Devices, Inc.) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\atiacm64.dll
2017-04-24 21:17 - 2017-04-24 21:17 - 000005120 _____ (Advanced Micro Devices, Inc.) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\atiamesp.dll
2019-04-22 09:31 - 2019-04-22 09:31 - 000300544 _____ (Free Time) [Archivo no firmado] C:\Program Files (x86)\FormatFactory\ShellEx64_105.dll
2019-08-26 21:40 - 2019-08-26 21:40 - 025338368 _____ (The ICU Project) [Archivo no firmado] C:\Program Files (x86)\Acronis\TrueImageHome\icudt54.dll
2019-08-26 21:40 - 2019-08-26 21:40 - 002056704 _____ (The ICU Project) [Archivo no firmado] C:\Program Files (x86)\Acronis\TrueImageHome\icuin54.dll
2019-08-26 21:40 - 2019-08-26 21:40 - 001425408 _____ (The ICU Project) [Archivo no firmado] C:\Program Files (x86)\Acronis\TrueImageHome\icuuc54.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000049664 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qdds.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000029696 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qgif.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000037376 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qicns.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000030208 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qico.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000459776 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qjp2.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000236544 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qjpeg.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000275456 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qmng.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000023552 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qsvg.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000022528 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qtga.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000351744 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qtiff.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000021504 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qwbmp.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 000374784 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\imageformats\qwebp.dll
2016-09-14 03:00 - 2016-09-14 03:00 - 001212416 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\platforms\qwindows.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 000912384 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Charts.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 005496320 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 005804544 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 001061376 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 003187712 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 002924544 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 000310784 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 005444608 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 000277504 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2016-09-14 02:59 - 2016-09-14 02:59 - 000193024 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
2020-04-28 10:58 - 2016-10-08 16:49 - 000708608 _____ (Wondershare) [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado.)

HKU\S-1-5-21-3517295722-778573365-4120609608-1001\Software\Classes\.scr: AutoCADScriptFile => 

==================== Internet Explorer sitios de confianza/restringidos ==========

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2018-09-15 09:31 - 2020-04-13 14:53 - 000000881 _____ C:\WINDOWS\system32\drivers\etc\hosts
0.0.0.0  esm.condusiv.com
0.0.0.0  esm.diskeeper.com

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)
14 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\System32;C:\Windows;C:\Windows\System32\wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\Condusiv Technologies\Diskeeper\;C:\Program Files (x86)\Smart Projects\IsoBuster;C:\Program Files (x86)\HP\IdrsOCR_15.2.10.1114\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\PROGRA~1\Condusiv Technologies\Diskeeper\
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\jmsal\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\39000000000241930_1920x1080.jpg
DNS Servers: 212.142.144.66
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Firewall de Windows está habilitado.

Network Binding:
=============
Ethernet: VMware Bridge Protocol -> vmware_bridge (enabled) 
VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 
VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 
Ethernet 2: VMware Bridge Protocol -> vmware_bridge (enabled) 

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [UDP Query User{6C011CBB-EC8D-4A83-8413-6BF141C4C06B}C:\program files (x86)\acronis\trueimagehome\systemreport.exe] => (Block) C:\program files (x86)\acronis\trueimagehome\systemreport.exe (Acronis International GmbH -> )
FirewallRules: [TCP Query User{CD34CAE8-9580-45B7-8DEE-97387987A5DB}C:\program files (x86)\acronis\trueimagehome\systemreport.exe] => (Block) C:\program files (x86)\acronis\trueimagehome\systemreport.exe (Acronis International GmbH -> )
FirewallRules: [UDP Query User{BA8D0470-FC35-4702-97A2-2BD6F1D64AB0}C:\software base pc\nas - lian-li ex-40n\cd-ex-40n\setup utility\setuputil.exe] => (Allow) C:\software base pc\nas - lian-li ex-40n\cd-ex-40n\setup utility\setuputil.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{AEAF4547-FAAD-43D5-9674-7F61169AD65A}C:\software base pc\nas - lian-li ex-40n\cd-ex-40n\setup utility\setuputil.exe] => (Allow) C:\software base pc\nas - lian-li ex-40n\cd-ex-40n\setup utility\setuputil.exe () [Archivo no firmado]
FirewallRules: [{589F4AFF-90B8-4501-81C1-57BEFD759824}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe (EditShare EMEA (X-Edit Limited) -> Editshare EMEA)
FirewallRules: [{AB767741-7754-4216-BBDE-5314A7A61E5E}] => (Allow) C:\Program Files\Lightworks\ntcardvt.exe (EditShare EMEA (X-Edit Limited) -> Editshare EMEA)
FirewallRules: [{266A28D6-644A-450D-A390-01F48CAC2B77}] => (Allow) C:\Program Files\Lightworks\lightworks.exe (EditShare EMEA (X-Edit Limited) -> )
FirewallRules: [{830C6585-A402-4091-9D18-6DA41B30C9E7}] => (Allow) C:\Program Files\Lightworks\lightworks.exe (EditShare EMEA (X-Edit Limited) -> )
FirewallRules: [{3CBB70C5-73ED-43F5-8C9C-5A7517FABE7C}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{F30CD9B5-DA9D-438C-A501-D8E0EDD098FE}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{E1A06734-EB85-4F9B-A010-51DE0D06CE11}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{6609BE29-ED30-4349-AF67-3A3BD0D7AB5D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{43ECD161-D843-4BF1-9E50-7623FD16BEF5}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{62FD365E-4DDE-4C3F-86AF-FABB9EA8C2CD}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)
FirewallRules: [{3F78237E-9B16-47B7-A425-0471F07E8557}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP4c\WNt600x64\RpcSandraSrv.exe (SiSoftware SPC -> SiSoftware) [Archivo no firmado]
FirewallRules: [{AC48D268-26AD-4104-8B4B-C16B9D429258}] => (Allow) C:\Program Files\SiSoftware\SiSoftware Sandra Lite Titanium.SP4c\RpcAgentSrv.exe (SiSoftware SPC -> SiSoftware) [Archivo no firmado]
FirewallRules: [{C60E8BE0-4D26-4E40-BCA0-2FE6BDA7FE7C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CEE538FA-6BD3-40F6-8B65-A35F5AFDCB1A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{92C9EEB6-3873-428E-93AE-0FD25C80421C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7E6D8347-11D4-46C5-A021-4C41816470C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{8B4E3E5D-13D4-4A68-B24D-F1773597CC68}C:\program files (x86)\vitamin d video\vitamin d agent.exe] => (Allow) C:\program files (x86)\vitamin d video\vitamin d agent.exe (Vitamin D Video, LLC) [Archivo no firmado]
FirewallRules: [UDP Query User{67A3E179-EA58-46F3-BD70-57F438255FC6}C:\program files (x86)\vitamin d video\vitamin d agent.exe] => (Allow) C:\program files (x86)\vitamin d video\vitamin d agent.exe (Vitamin D Video, LLC) [Archivo no firmado]
FirewallRules: [{E18140BA-DFFF-4228-855F-7D00AB748C71}] => (Allow) C:\Program Files\HP\HP LaserJet Pro M148-M149\bin\EWSProxy.exe (HP Inc -> HP Inc.)
FirewallRules: [{3C283201-179A-4031-8232-5D4137C48905}] => (Allow) C:\Program Files\HP\HP LaserJet Pro M148-M149\bin\DigitalWizards.exe (HP Inc -> HP Inc.)
FirewallRules: [{E3E8DDB1-39CF-4A2C-8B6A-B20E4ADBD779}] => (Allow) C:\Program Files\HP\HP LaserJet Pro M148-M149\Bin\DeviceSetup.exe (HP Inc -> HP Inc.)
FirewallRules: [{6BD1FE6A-8B73-419C-A49A-F5F2BB3B94AC}] => (Allow) LPort=5357
FirewallRules: [{403B58A2-1458-43EA-B967-F6CDA0535A12}] => (Allow) C:\Program Files\HP\HP LaserJet Pro M148-M149\Bin\HPNetworkCommunicatorCom.exe (HP Inc -> HP Inc.)
FirewallRules: [TCP Query User{0AAFB9DB-4D91-494C-9C34-59ADFE6F94BE}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{B1F68400-3C4D-4C74-B1C3-BD0FE5BF99BC}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{CEFD1786-C6FB-4048-BBB9-334AAA7A80FA}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe (Acronis International GmbH -> )
FirewallRules: [{A214C512-D580-4F87-9E6C-78D47AE344DF}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{495D06D0-E20B-4EF1-803A-5C23A8447B31}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImage.exe (Acronis International GmbH -> )
FirewallRules: [{8F5CC369-F2B7-4F79-81E9-69190879D26B}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis International GmbH -> )
FirewallRules: [{F5E7BC37-05AA-4B2D-9657-363E9DFA6FAB}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageTools.exe (Acronis International GmbH -> )
FirewallRules: [{66255356-8AA6-45AF-BFD1-613E461D2665}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\TrueImageHome\TrueImageHomeService.exe (Acronis International GmbH -> )
FirewallRules: [{3117337C-7F56-4A7A-BEFD-0DBB6AA11FD2}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\MediaBuilder.exe (Acronis International GmbH -> )
FirewallRules: [{C1585B73-061D-4AAD-B1A2-A1344D6A1E00}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\SystemReport.exe (Acronis International GmbH -> )
FirewallRules: [{2690ACCF-9B40-4415-9EAE-94D55C809A54}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\acronis_drive.exe (Acronis International GmbH -> )
FirewallRules: [{0A0AF877-2845-4181-A0CE-2090E1F86B1F}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe (Acronis International GmbH -> Acronis International GmbH)
FirewallRules: [{B93355C8-8871-4F28-80DE-97C76B65BBBB}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe (Acronis International GmbH -> )
FirewallRules: [{532228D1-6CA7-4567-85C4-42C495D82969}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\ga_service.exe (Acronis International GmbH -> )
FirewallRules: [{2713EF42-E949-4A96-82CD-5A979FC7F668}] => (Allow) C:\Program Files (x86)\Acronis\TrueImageHome\LicenseActivator.exe (Acronis International GmbH -> )
FirewallRules: [{9BF9D268-E7A5-47BF-9B48-76296666A46A}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\Home\report_sender.exe (Acronis International GmbH -> )
FirewallRules: [{843433E4-85C4-4B20-8B21-632E2DA4AB58}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe (Acronis International GmbH -> )
FirewallRules: [{76F3B5AB-409A-4D5F-9885-47CE447B6DB5}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{686AD1B8-2694-4E61-98F7-014CA4EDBEAD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C515081B-9CD2-4340-8DA4-0F21AAC161E3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{22BAA9BC-7EC0-423A-9732-19B01CFB9FC9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{18C827BE-F23C-402C-BF3E-7D599BAE4A7D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{4430BF5F-EC70-4587-8386-DBA4DF476120}C:\program files\dvdfab 11\dvdfab64.exe] => (Allow) C:\program files\dvdfab 11\dvdfab64.exe (DVDFab Software Inc. -> DVDFab.cn)
FirewallRules: [UDP Query User{144F815F-0C6B-4156-BD6A-D3EE9BB7B797}C:\program files\dvdfab 11\dvdfab64.exe] => (Allow) C:\program files\dvdfab 11\dvdfab64.exe (DVDFab Software Inc. -> DVDFab.cn)
FirewallRules: [{299CFB1D-6599-40E6-BCA7-F6A50D3668AB}] => (Allow) C:\Program Files (x86)\Nero\Nero 2020\Nero Burning ROM\StartNBR.exe (Nero AG -> Nero AG)
FirewallRules: [{FFBF28DF-CF58-48C0-A7E7-122180B38400}] => (Allow) C:\Program Files (x86)\Nero\Nero 2020\Nero MediaHome\NMDllHost.exe (Nero AG -> Nero AG)
FirewallRules: [{362A78D7-A920-4749-8CCE-D5507CFD1B87}] => (Allow) C:\Program Files (x86)\Nero\Nero 2020\Nero MediaHome\MediaHome.exe (Nero AG -> Nero AG)
FirewallRules: [{4AA76225-11F5-49AA-9B87-CD95A1199E69}] => (Allow) C:\Program Files (x86)\Nero\Nero 2020\Nero Burning ROM\nero.exe (Nero AG -> Nero AG)
FirewallRules: [{ABA90A78-BF34-4030-83A5-96F6CB003FBD}] => (Allow) C:\Program Files (x86)\Nero\Transfer\Transfer.exe (Nero AG -> Nero AG)
FirewallRules: [TCP Query User{5892BDC6-7CF7-40EC-9859-3D4C850C8F85}C:\program files (x86)\vitamin d video\vitamin d agent.exe] => (Block) C:\program files (x86)\vitamin d video\vitamin d agent.exe (Vitamin D Video, LLC) [Archivo no firmado]
FirewallRules: [UDP Query User{95D8FB43-1618-4E56-9503-7CAA08C26968}C:\program files (x86)\vitamin d video\vitamin d agent.exe] => (Block) C:\program files (x86)\vitamin d video\vitamin d agent.exe (Vitamin D Video, LLC) [Archivo no firmado]
FirewallRules: [{0620C51C-BF50-4C22-AE1F-83032CA46A0C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D7A9C579-5817-418D-B8C3-3FFC3B81E8AC}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)
FirewallRules: [{C33171B9-3F6E-4FB5-8052-FEF082B61838}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)
FirewallRules: [{1753D690-FBC4-471B-BB33-11D5ACFC1EE6}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )
FirewallRules: [{22DADB23-8C72-432E-BD03-E3D94CD32AEF}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )
FirewallRules: [{963576F8-EDFF-49DD-A822-D215F08224D1}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F89D907A-CEEC-4B27-8A1E-5CBFB709A2D6}] => (Allow) C:\Users\jmsal\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{3CCDE0DB-0C0D-4B2C-A2AC-7405CA4404F1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{517D5DAC-BA31-403B-B9FB-8FA985957DD8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{352B94AC-D2D3-491E-BF66-EE4CC838D0F9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DEC335E2-1A33-48FE-B14C-9509D0EA2BEF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{47CAA7E1-E179-46C1-A308-D52FF3463B1F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DE25475-A002-4192-AE84-0C00AEC9905F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ABD8A0F7-6B8D-48BE-B54E-60C75A73742F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7BE87B1D-6EE6-4A40-877A-69F4DE95E17F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.134.694.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7EF7D79D-21D1-4343-9F1F-EEFE83096362}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{4A1AB7A9-B129-4BAB-9A74-AAA2F59BFA46}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{390AF73F-564D-4166-9308-F3AC176E7263}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{511AEFFB-6B65-47FC-AD51-4EE40E5C6E11}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{D8A5153F-65EB-4E42-A177-42DFF8093E14}] => (Allow) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{363B15DC-4767-416E-97E9-BB9D0CBB5A01}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Puntos de Restauración =========================

11-06-2020 19:08:54 Punto de control programado

==================== Dispositivos defectuosos en el Administrador de dispositivos ============


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (06/13/2020 11:39:52 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4432,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/12/2020 10:46:17 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (30548,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/12/2020 10:08:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (6204,D,23) SRUJet: Base de datos C:\WINDOWS\system32\SRU\SRUDB.dat: el índice UserIdTimeStamp de la tabla {5C8CF1C7-7257-4F13-B223-970EF5939312} está dañado (0).

Error: (06/12/2020 09:07:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (6204,D,23) SRUJet: Base de datos C:\WINDOWS\system32\SRU\SRUDB.dat: el índice UserIdTimeStamp de la tabla {5C8CF1C7-7257-4F13-B223-970EF5939312} está dañado (0).

Error: (06/12/2020 08:35:33 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (26492,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/12/2020 08:06:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (6204,D,23) SRUJet: Base de datos C:\WINDOWS\system32\SRU\SRUDB.dat: el índice UserIdTimeStamp de la tabla {5C8CF1C7-7257-4F13-B223-970EF5939312} está dañado (0).

Error: (06/12/2020 08:05:56 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (26044,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (06/12/2020 07:05:00 PM) (Source: ESENT) (EventID: 467) (User: )
Description: svchost (6204,D,23) SRUJet: Base de datos C:\WINDOWS\system32\SRU\SRUDB.dat: el índice UserIdTimeStamp de la tabla {5C8CF1C7-7257-4F13-B223-970EF5939312} está dañado (0).


Errores del sistema:
=============
Error: (06/12/2020 11:08:32 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio VMware Workstation Server terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 60000 milisegundos: Reiniciar el servicio.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {1EF75F33-893B-4E8F-9655-C3D602BA4897} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {1EF75F33-893B-4E8F-9655-C3D602BA4897} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {1EF75F33-893B-4E8F-9655-C3D602BA4897} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {1EF75F33-893B-4E8F-9655-C3D602BA4897} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {9BA05972-F6A8-11CF-A442-00A0C90A8F39} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {1EF75F33-893B-4E8F-9655-C3D602BA4897} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (06/12/2020 11:08:31 PM) (Source: DCOM) (EventID: 10010) (User: ANTEC-P182)
Description: El servidor {1EF75F33-893B-4E8F-9655-C3D602BA4897} no se registró con DCOM dentro del tiempo de espera requerido.


Windows Defender:
===================================
Date: 2020-05-10 18:00:10.406
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {F6828F5C-791D-4AA7-B377-1BCD706C1696}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2020-05-08 14:54:34.755
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {97ACA3FE-0797-4BB5-AD31-041BC7311524}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2020-05-07 13:43:02.495
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {466C462C-82A7-4F74-8C00-5F04755CEE9C}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2020-05-07 13:31:56.781
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {2A54E258-2FB1-455C-9B3A-0B833B412CBD}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2020-05-06 12:19:44.027
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {70E6F8BD-7A98-437E-82F0-2043BA7241E0}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2020-05-23 17:52:35.593
Description: 
La característica Protección en tiempo real de Antivirus de Windows Defender encontró un error:
Característica: Sistema de inspección de red
Código de error: 0x8007045b
Descripción del error: Se está cerrando el sistema. 
Motivo: El sistema no tiene las actualizaciones necesarias para ejecutar el Sistema de inspección de red. Instala las actualizaciones requeridas y reinicia el dispositivo.

Date: 2020-05-05 07:37:43.351
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.313.2474.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión actual del motor: 
Versión anterior del motor: 1.1.16900.4
Código de error: 0x80070645
Descripción del error: Esta acción solo es válida para productos que están instalados actualmente. 

Date: 2020-05-05 07:37:43.351
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.313.2474.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión actual del motor: 
Versión anterior del motor: 1.1.16900.4
Código de error: 0x80070645
Descripción del error: Esta acción solo es válida para productos que están instalados actualmente. 

Date: 2020-05-05 07:37:43.351
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.313.2474.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión actual del motor: 
Versión anterior del motor: 1.1.16900.4
Código de error: 0x80070645
Descripción del error: Esta acción solo es válida para productos que están instalados actualmente. 

CodeIntegrity:
===================================

Date: 2020-06-13 11:32:51.714
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:32:19.173
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:32:05.805
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:31:54.193
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:31:52.991
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:31:52.377
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:31:52.080
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-06-13 11:31:51.425
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

==================== Información de la memoria =========================== 

BIOS: Award Software International, Inc. FA 04/07/2010
Placa base: Gigabyte Technology Co., Ltd. GA-890GPA-UD3H
Procesador: AMD Phenom(tm) II X6 1090T Processor
Porcentaje de memoria en uso: 50%
RAM física total: 16380.52 MB
RAM física disponible: 8032.15 MB
Virtual total: 32764.52 MB
Virtual disponible: 23397.34 MB

==================== Unidades ================================

Drive c: (Sistema) (Fixed) (Total:499.46 GB) (Free:180.61 GB) NTFS
Drive d: (Almacen) (Fixed) (Total:338.36 GB) (Free:68.41 GB) NTFS
Drive e: (1-1 Cine) (Fixed) (Total:931.51 GB) (Free:47.32 GB) NTFS
Drive f: (2-1 HDCity) (Fixed) (Total:931.51 GB) (Free:24.79 GB) NTFS
Drive g: (Disco 3-1) (Fixed) (Total:931.51 GB) (Free:320.15 GB) NTFS ==>[sistema con componentes de arranque (obtenido de unidad)]
Drive h: (Disco 4-1) (Fixed) (Total:931.51 GB) (Free:22.62 GB) NTFS
Drive i: (Disco 5-1) (Fixed) (Total:292.97 GB) (Free:25.25 GB) NTFS
Drive j: (Disco 5-2) (Fixed) (Total:292.97 GB) (Free:23.58 GB) NTFS
Drive k: (Disco 5-3) (Fixed) (Total:345.57 GB) (Free:13.43 GB) NTFS
Drive n: (My Passport) (Fixed) (Total:1860.99 GB) (Free:74.31 GB) NTFS
Drive y: (Software JMS) (Removable) (Total:114.56 GB) (Free:5.45 GB) NTFS

\\?\Volume{94b3fc16-0000-0000-0000-100000000000}\ (Reservado para el sistema) (Fixed) (Total:0.54 GB) (Free:0.11 GB) NTFS

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2FBD1753)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2FBD1754)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 94B3FC16)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=499.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=338.4 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2FBD1752)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 4 (Size: 931.5 GB) (Disk ID: B65EB65E)
Partition 1: (Not Active) - (Size=293 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=293 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=345.6 GB) - (Type=07 NTFS)

==========================================================
Disk: 5 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: EE86C281)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 6 (Size: 114.6 GB) (Disk ID: E215C607)
Partition 1: (Not Active) - (Size=114.6 GB) - (Type=07 NTFS)

==========================================================
Disk: 7 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 41784306)
Partition 1: (Active) - (Size=2 GB) - (Type=1B)
Partition 2: (Not Active) - (Size=1861 GB) - (Type=07 NTFS)

==================== Final de Addition.txt =======================
15

Hola

Descarga, instala y ejecuta Revo Uninstaller

  • Desinstala todo lo que veas de Iobit. Elige el modo avanzado de desinstalación.

:arrow_forward: MUY Importante :arrow_backward: Realiza una copia de seguridad del registro :

  • Para hacerlo descarga :arrow_forward: DelFix.exe( en tu escritorio).

  • Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).

  • Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO.

  • Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

A continuación :warning: con los demás programas cerrados ve a :arrow_forward: Inicio :arrow_forward: Ejecutar :arrow_forward: y escribe Notepad.exe.

  • Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [4624880 2020-05-12] (Microsoft Windows -> Microsoft Corporation) <==== ATENCIÓN
Task: {177C40AC-8200-4AA5-A47A-1A2835A6B704} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [3183888 2020-05-22] (IObit Information Technology -> IObit)
Task: {59CE2532-F5BA-466F-981A-3985EEBCA6D4} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\AutoUpdate.exe [2369808 2020-03-06] (IObit Information Technology -> IObit)
Task: {A56A059F-2E5D-4DBF-84EA-2F01C3230E2E} - System32\Tasks\Driver Booster SkipUAC (jmsal) => C:\Program Files (x86)\IObit\Driver Booster\7.3.0\DriverBooster.exe [7892240 2020-03-06] (IObit Information Technology -> IObit)
Task: {B621B959-C710-47BF-B918-F29E6EED3A3B} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe [314128 2018-05-02] (IObit Information Technology -> IObit)
Task: {B65B7034-513E-44C9-99A1-BA91779D525E} - System32\Tasks\ASC_SkipUac_jmsal => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [8955664 2020-05-22] (IObit Information Technology -> IObit)
Task: {C0A0AABF-059A-44AC-A6F6-BD9E63E2D605} - System32\Tasks\Uninstaller_SkipUac_jmsal => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5963536 2020-02-18] (IObit Information Technology -> IObit)
Task: {EDFA7ABE-F084-4F7A-AD40-A800225479BA} - System32\Tasks\SmartDefrag_Update => C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe [3005200 2019-12-23] (IObit Information Technology -> IObit)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2020-01-31] (IObit Information Technology -> IObit)
CHR Extension: (hxxps://news.google.com/) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\anjmejjmjfpcopbhgibcmbockpnelmhf [2019-05-29]
CHR Extension: (Scouter) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpkphfeaecagcgeomfbcdoijhcpejjh [2019-05-05]
CHR Extension: (MOYP - Mantle of your privacy) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\njlfilmphhegcagelpopaggogepfpeio [2020-05-04]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]
2020-06-11 23:44 - 2019-05-05 19:29 - 000000000 ____D C:\Users\jmsal\AppData\LocalLow\IObit
2020-06-11 23:44 - 2019-05-05 19:28 - 000000000 ____D C:\Program Files (x86)\IObit
2020-06-11 22:43 - 2019-05-05 19:29 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\IObit
2020-06-11 22:43 - 2019-05-05 19:28 - 000000000 ____D C:\ProgramData\IObit
2019-05-08 09:39 - 2019-05-08 09:39 - 000000171 _____ () C:\Users\jmsal\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2019-05-08 22:28 - 2019-05-08 22:28 - 000000000 _____ () C:\Users\jmsal\AppData\Local\oobelibMkey.log
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo

HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Guárdalo bajo el nombre de FIXLIST.TXT en el escritorio :arrow_backward: Esto es muy importante.

:o: Nota :o: Es importante que la herramienta FRST.exe (Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.


Y ahora usa el 2º MÉTODO: de esta Faq de Windows 8(aplicable a Windows 10) :arrow_forward: ¿Cómo iniciar Windows 8/8.1 en Modo Seguro?, para trabajar desde ese modo de windows.

  • Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).
  • Presionar el botón FIX/Corregir y aguardar a que termine.
  • La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).

Pega el contenido de este fichero en tu próxima respuesta.

Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.

Un saludo

16 

Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 06-06-2020
Ejecutado por jmsal (15-06-2020 11:42:45) Run:1
Ejecutado desde C:\Users\jmsal\Desktop
Perfiles cargados: jmsal
Modo de Inicio: Normal
==============================================

fixlist contenido:
*****************
START

CREATERESTOREPOINT:

CLOSEPROCESSES:

HKU\S-1-5-21-3517295722-778573365-4120609608-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [4624880 2020-05-12] (Microsoft Windows -> Microsoft Corporation) <==== ATENCIÓN

Task: {177C40AC-8200-4AA5-A47A-1A2835A6B704} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [3183888 2020-05-22] (IObit Information Technology -> IObit)

Task: {59CE2532-F5BA-466F-981A-3985EEBCA6D4} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster.3.0\AutoUpdate.exe [2369808 2020-03-06] (IObit Information Technology -> IObit)

Task: {A56A059F-2E5D-4DBF-84EA-2F01C3230E2E} - System32\Tasks\Driver Booster SkipUAC (jmsal) => C:\Program Files (x86)\IObit\Driver Booster.3.0\DriverBooster.exe [7892240 2020-03-06] (IObit Information Technology -> IObit)

Task: {B621B959-C710-47BF-B918-F29E6EED3A3B} - System32\Tasks\SmartDefrag_AutoAnalyze => C:\Program Files (x86)\IObit\Smart Defrag\AutoDefrag.exe [314128 2018-05-02] (IObit Information Technology -> IObit)

Task: {B65B7034-513E-44C9-99A1-BA91779D525E} - System32\Tasks\ASC_SkipUac_jmsal => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [8955664 2020-05-22] (IObit Information Technology -> IObit)

Task: {C0A0AABF-059A-44AC-A6F6-BD9E63E2D605} - System32\Tasks\Uninstaller_SkipUac_jmsal => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [5963536 2020-02-18] (IObit Information Technology -> IObit)

Task: {EDFA7ABE-F084-4F7A-AD40-A800225479BA} - System32\Tasks\SmartDefrag_Update => C:\Program Files (x86)\IObit\Smart Defrag\AutoUpdate.exe [3005200 2019-12-23] (IObit Information Technology -> IObit)

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2020-01-31] (IObit Information Technology -> IObit)

CHR Extension: (hxxps://news.google.com/) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\anjmejjmjfpcopbhgibcmbockpnelmhf [2019-05-29]

CHR Extension: (Scouter) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpkphfeaecagcgeomfbcdoijhcpejjh [2019-05-05]

CHR Extension: (MOYP - Mantle of your privacy) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\njlfilmphhegcagelpopaggogepfpeio [2020-05-04]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2017-11-01]

2020-06-11 23:44 - 2019-05-05 19:29 - 000000000 ____D C:\Users\jmsal\AppData\LocalLow\IObit

2020-06-11 23:44 - 2019-05-05 19:28 - 000000000 ____D C:\Program Files (x86)\IObit

2020-06-11 22:43 - 2019-05-05 19:29 - 000000000 ____D C:\Users\jmsal\AppData\Roaming\IObit

2020-06-11 22:43 - 2019-05-05 19:28 - 000000000 ____D C:\ProgramData\IObit

2019-05-08 09:39 - 2019-05-08 09:39 - 000000171 _____ () C:\Users\jmsal\AppData\Roaming22f02e4-9e9a-4077-a765-71edfca16ad0

2019-05-08 22:28 - 2019-05-08 22:28 - 000000000 _____ () C:\Users\jmsal\AppData\Local\oobelibMkey.log

ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo

ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo



HOSTS:

REMOVEPROXY:

EMPTYTEMP:

CMD: netsh winsock reset

CMD: ipconfig /renew

CMD: ipconfig /flushdns

CMD: bitsadmin /reset /allusers

CMD: netsh advfirewall reset

CMD: netsh advfirewall set allprofiles state ON

CMD: netsh int ipv4 reset

CMD: netsh int ipv6 reset

END
*****************

El punto de restauración fue creado correctamente.
Procesos cerrados correctamente.
"HKU\S-1-5-21-3517295722-778573365-4120609608-1001\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{177C40AC-8200-4AA5-A47A-1A2835A6B704}" => no encontrado
"C:\WINDOWS\System32\Tasks\ASC_PerformanceMonitor" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_PerformanceMonitor" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{59CE2532-F5BA-466F-981A-3985EEBCA6D4}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59CE2532-F5BA-466F-981A-3985EEBCA6D4}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Driver Booster Update => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A56A059F-2E5D-4DBF-84EA-2F01C3230E2E}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A56A059F-2E5D-4DBF-84EA-2F01C3230E2E}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Driver Booster SkipUAC (jmsal) => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (jmsal)" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B621B959-C710-47BF-B918-F29E6EED3A3B}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B621B959-C710-47BF-B918-F29E6EED3A3B}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\SmartDefrag_AutoAnalyze => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_AutoAnalyze" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B65B7034-513E-44C9-99A1-BA91779D525E}" => no encontrado
"C:\WINDOWS\System32\Tasks\ASC_SkipUac_jmsal" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASC_SkipUac_jmsal" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C0A0AABF-059A-44AC-A6F6-BD9E63E2D605}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C0A0AABF-059A-44AC-A6F6-BD9E63E2D605}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Uninstaller_SkipUac_jmsal => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Uninstaller_SkipUac_jmsal" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EDFA7ABE-F084-4F7A-AD40-A800225479BA}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDFA7ABE-F084-4F7A-AD40-A800225479BA}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\SmartDefrag_Update => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SmartDefrag_Update" => eliminado correctamente
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} => eliminado correctamente
HKLM\Software\Classes\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814} => eliminado correctamente
CHR Extension: (hxxps://news.google.com/) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\anjmejjmjfpcopbhgibcmbockpnelmhf [2019-05-29] => Error: Ninguna corrección automática encontrada para esta entrada.
CHR Extension: (Scouter) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpkphfeaecagcgeomfbcdoijhcpejjh [2019-05-05] => Error: Ninguna corrección automática encontrada para esta entrada.
CHR Extension: (MOYP - Mantle of your privacy) - C:\Users\jmsal\AppData\Local\Google\Chrome\User Data\Default\Extensions\njlfilmphhegcagelpopaggogepfpeio [2020-05-04] => Error: Ninguna corrección automática encontrada para esta entrada.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\efaidnbmnnnibpcajpcglclefindmkaj => eliminado correctamente
C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx => movido correctamente
C:\Users\jmsal\AppData\LocalLow\IObit => movido correctamente
C:\Program Files (x86)\IObit => movido correctamente
C:\Users\jmsal\AppData\Roaming\IObit => movido correctamente
C:\ProgramData\IObit => movido correctamente
"C:\Users\jmsal\AppData\Roaming22f02e4-9e9a-4077-a765-71edfca16ad0" => no encontrado
C:\Users\jmsal\AppData\Local\oobelibMkey.log => movido correctamente
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => eliminado correctamente
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => eliminado correctamente
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => eliminado correctamente
C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.

========= RemoveProxy: =========

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-3517295722-778573365-4120609608-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-3517295722-778573365-4120609608-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= Final de CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

No se puede realizar ninguna operaci¢n en Ethernet 2 mientras los medios
est‚n desconectados.

Adaptador de Ethernet Ethernet 2:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de Ethernet Ethernet:

   Sufijo DNS espec¡fico para la conexi¢n. . : euskaltel.es
   V¡nculo: direcci¢n IPv6 local. . . : fe80::b5cc:b312:ddd7:d29%14
   Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.0.17
   M scara de subred . . . . . . . . . . . . : 255.255.255.0
   Puerta de enlace predeterminada . . . . . : 192.168.0.1

Adaptador de Ethernet VMware Network Adapter VMnet1:

   Sufijo DNS espec¡fico para la conexi¢n. . : 
   V¡nculo: direcci¢n IPv6 local. . . : fe80::7861:6595:a7ae:73a4%13
   Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.49.1
   M scara de subred . . . . . . . . . . . . : 255.255.255.0
   Puerta de enlace predeterminada . . . . . : 

Adaptador de Ethernet VMware Network Adapter VMnet8:

   Sufijo DNS espec¡fico para la conexi¢n. . : 
   V¡nculo: direcci¢n IPv6 local. . . : fe80::ccd2:fd03:5d87:a1ce%7
   Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.142.1
   M scara de subred . . . . . . . . . . . . : 255.255.255.0
   Puerta de enlace predeterminada . . . . . : 

========= Final de CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

0 out of 0 jobs canceled.

========= Final de CMD: =========


========= netsh advfirewall reset =========

Aceptar


========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar


========= Final de CMD: =========


========= netsh int ipv4 reset =========

Reenv¡o de compartimiento se restableci¢ correctamente.
Compartimiento se restableci¢ correctamente.
Protocolo de control se restableci¢ correctamente.
Solicitud de secuencia eco se restableci¢ correctamente.
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente.
Direcciones de multidifusi¢n se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Posible se restableci¢ correctamente.
Directiva de prefijo se restableci¢ correctamente.
Vecino de proxy se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Prefijo de sitio se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Patr¢n de reactivaci¢n se restableci¢ correctamente.
Resolver vecino se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


========= netsh int ipv6 reset =========

Reenv¡o de compartimiento se restableci¢ correctamente.
Compartimiento se restableci¢ correctamente.
Protocolo de control se restableci¢ correctamente.
Solicitud de secuencia eco se restableci¢ correctamente.
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente.
Direcciones de multidifusi¢n se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Posible se restableci¢ correctamente.
Directiva de prefijo se restableci¢ correctamente.
Vecino de proxy se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Prefijo de sitio se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Patr¢n de reactivaci¢n se restableci¢ correctamente.
Resolver vecino se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 6578176 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 65863637 B
Java, Flash, Steam htmlcache => 343 B
Windows/system/drivers => 19729650 B
Edge => 47677 B
Chrome => 145134454 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 62784 B
NetworkService => 80154 B
jmsal => 108358614 B

RecycleBin => 9085782604 B
EmptyTemp: => 8.8 GB datos temporales eliminados.

================================


El sistema necesita reiniciarse.

==== Final de Fixlog 11:44:58 ====
17

Hola

Como sigue el problema?

Un saludo

18

sigue saliendo diria que menos veces pero sigue

19

Realizas lo siguiente:

Análisis del PC con Eset Online Scaner : Manual de Uso lee las instrucciones para salvar el reporte.

Análisis del PC con Kasperky Virus Removal Tool: Manual de Uso

  • Este no da reporte cuando te encuentres al finalizar, si es que lo hace con alguna infección, tomas una imagen y la subes.

Como subir imágenes al Foro ?

No olvides comentar como sigue el problema.

Un saludo

20 

ESET Online Scanner
17/06/2020 5:15:22
Archivos explorados: 912544
Archivos detectados: 82
Archivos desinfectados: 82
Tiempo total de exploración 03:35:15
Estado de la exploración: Finalizado
C:\Program Files (x86)\Nero\Nero 2020\Nero Burning ROM\OnlineServices\NOSProductRegistration.dll	Win32/HackTool.Crack.JV aplicación potencialmente no segura	desinfectado por eliminación

C:\Program Files (x86)\Nero\Nero Launcher\Patch.exe	Win32/HackTool.Crack.JV aplicación potencialmente no segura	desinfectado por eliminación

C:\Program Files (x86)\uTorrent\uTorrent.exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

C:\Software Base PC\Piriform\CCleaner.v5.66.7716\CCleaner.v5.66.7716.FREE.PRO.BUSINESS.TECH.Multilingual.With.Portable.Incl.Serial\disable_activation.cmd	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

C:\Software Base PC\Piriform\Defraggler 2.20.989\dfsetup220.exe	Win32/Bundled.Toolbar.Google.D aplicación potencialmente no segura	desinfectado por eliminación

C:\Software Base PC\Piriform\Recuva 1.52.1086\rcsetup152.exe	Win32/Bundled.Toolbar.Google.D aplicación potencialmente no segura	desinfectado por eliminación

C:\Users\jmsal\AppData\Local\Packages\microsoft.windowscommunicationsapps_8wekyb3d8bbwe\LocalState\Files\S0\10\Attachments\utorrent[1597].eml	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

D:\Descargas\CCleaner.v5.66.7716\CCleaner.v5.66.7716.FREE.PRO.BUSINESS.TECH.Multilingual.With.Portable.Incl.Serial\disable_activation.cmd	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

D:\Descargas\Nero 2020 Platinum\Nero.Platinum.2020.Suite.v22.0.00900.Multilingual.Incl.Patch\Patch.exe	Win32/HackTool.Crack.JV aplicación potencialmente no segura	desinfectado por eliminación

D:\Descargas\USB Safeli 6.1.7\USB.Safely.Remove.v6.1.7.1279.Multilingual.Incl.Keygen\KeyGen.exe	una variante de Win32/HackTool.Crack.FN aplicación potencialmente no segura	desinfectado por eliminación

D:\Descargas\USB Safely Remove 6.2.1.1284\free4pc.org_USB Safely Remove 6.2.1.1284\KeyGen.exe	una variante de Win32/HackTool.Crack.FN aplicación potencialmente no segura	desinfectado por eliminación

D:\Descargas\advanced-systemcare-free-13-2-0-220.exe	una variante de Win32/IObit.AN aplicación potencialmente no deseada,una variante de Win32/IObit.AP aplicación potencialmente no deseada,una variante de Win32/IObit.AS aplicación potencialmente no deseada	desinfectado por eliminación

D:\Descargas\advanced-systemcare-setup.exe	una variante de Win32/IObit.AP aplicación potencialmente no deseada,una variante de Win32/IObit.AS aplicación potencialmente no deseada	desinfectado por eliminación

D:\Descargas\driver_booster_setup.exe	una variante de Win32/IObit.AP aplicación potencialmente no deseada,una variante de Win32/IObit.AQ aplicación potencialmente no deseada,una variante de Win32/IObit.AS aplicación potencialmente no deseada	desinfectado por eliminación

D:\Descargas\smart-defrag-setup.exe	una variante de Win32/IObit.AP aplicación potencialmente no deseada,una variante de Win32/IObit.AO aplicación potencialmente no deseada,una variante de Win32/IObit.AS aplicación potencialmente no deseada	desinfectado por eliminación

D:\Pendrive mio\Win-XP + actualizaciones\VRMPOEM_ES_VKWV4-7TRD8-8PM2Q-9X9PJ-KQ9XG\Winup 3.1\Winup3.1_es.exe	una variante de Win32/Toolbar.Conduit.B aplicación potencialmente no deseada,Win32/Toolbar.Conduit.Y aplicación potencialmente no deseada,está correcto	desinfectado por eliminación

D:\Pendrive mio\utorrent 3.3.2.exe	una variante de Win32/uTorrent.C aplicación potencialmente no deseada	desinfectado por eliminación

D:\Pendrive mio\utorrent-2.0.4.exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\AnyDVD v7.6.9.5\SlySoft.AnyDVD.HD.v7.6.9.5.Multilingual.incl.KEY\crack\BRD.dll	una variante de Win32/HackTool.Crack.EC aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\AnyDVD v7.6.9.5\SlySoft.AnyDVD.HD.v7.6.9.5.Multilingual.incl.KEY\crack\ElbyCDIO.dll	Win32/HackTool.Crack.DM troyano	eliminado

D:\Software\aTube Catcher v3.8.9622\aTube_Catcher_0130606591.exe	Win32/InstallCore.Gen.B aplicación potencialmente no deseada	desinfectado por eliminación

D:\Software\Autocad 2020\AUTODESK.AUTOCAD.V2020-ISO\Crack\xf-adesk20.exe	una variante de Win32/Keygen.ADF aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\Corel 2019\CorelDRAW.Graphics.Suite.2019.v21.1.0.643.MULTi.WIN64-XFORCE\Crack\xfcdgs2019.exe	una variante de Win32/Keygen.ACS aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\Corel 2019\CorelDRAW.Graphics.Suite.2019.v21.1.0.643.MULTi.WIN64-XFORCE\disable_activation.cmd	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\Corel Draw 2019\CorelDRAW.Graphics.Suite.2019.v21.1.0.643.MULTi.WIN64-XFORCE\disable_activation.cmd	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\CorelDRAW Graphics Suite 2019 v21.2.0.706\CorelDRAW.Graphics.Suite.2019.v21.2.0.706.MULTi.WIN64-XFORCE\Crack\xfcdgs2019.exe	una variante de Win32/Keygen.ACS aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\CorelDRAW Graphics Suite 2019 v21.2.0.706\CorelDRAW.Graphics.Suite.2019.v21.2.0.706.MULTi.WIN64-XFORCE\disable_activation.cmd	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\Format Factory v4.6.1\formatfactory-4-6-1-0.exe	una variante de Win32/FusionCore.AQ aplicación potencialmente no deseada	desinfectado por eliminación

D:\Software\Ifunbox 4.0\ifunbox_v4106_setup.exe	una variante de Generik.IVYBQPP troyano	desinfectado por eliminación

D:\Software\Iobit Uninstaller Pro 9.0.1.24\Loader-IObit.Uninstaller.Pro.8.x- Astron\Loader-IU.exe	Win32/HackTool.Crack.HM aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\Iobit Uninstaller Pro 9.0.1.24\iobituninstaller.exe	una variante de Win32/IObit.AD aplicación potencialmente no deseada,una variante de Win32/IObit.AQ aplicación potencialmente no deseada,una variante de Win32/IObit.AE aplicación potencialmente no deseada,una variante de Win32/IObit.AF aplicación potencialmente no deseada	desinfectado por eliminación

D:\Software\Iobit Unlocker 1.1.2.1\unlocker-setup.exe	Win32/IObit.D aplicación potencialmente no deseada,una variante de Win32/IObit.D aplicación potencialmente no deseada	desinfectado por eliminación

D:\Software\UltraIso 9.7.1.3519\ULTRIS.9.7.1.3519\UltraISO PE 9.x Retail Keygen by OnLyOnE\UltraISO PE 9.x Retail Keygen by OnLyOnE\KeyGen.exe	una variante de Win32/Keygen.KH.gen aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\UltraIso 9.7.1.3519\ULTRIS.9.7.1.3519\UltraISO PE 9.x Retail Keygen by OnLyOnE\KeyGen.exe	una variante de Win32/Keygen.KH.gen aplicación potencialmente no segura	desinfectado por eliminación

D:\Software\USB Disk Security 6.7.0.0\USBGuard6.7..exe	una variante de Win32/Adware.Linkzb.A aplicación	desinfectado por eliminación

D:\Software\Virtual_DJ 2018\Virtual_DJ_v2018_Build_4848.exe	una variante de MSIL/WebCompanion.A aplicación potencialmente no deseada,una variante de Win32/WebCompanion.B aplicación potencialmente no deseada	desinfectado por eliminación

D:\Software\WoordPerfect_Office_X7\Corel.WordPerfect.Office.X7.Professional.v17.0.0.337.SP1.Incl.Keymaker-CORE\keygen.exe	una variante de Win32/Keygen.AU aplicación potencialmente no segura	eliminado

H:\Windows-10\Downloads\Ati Radeon hd 4290\setup.exe	una variante de Win32/UwS.DriverTuner.A aplicación	desinfectado por eliminación

H:\Windows-10\Downloads\HDCity\utorrent.exe	una variante de Win32/Toolbar.Conduit.AX aplicación potencialmente no deseada	desinfectado por eliminación

H:\Windows-10\Downloads\utorrent 2.0.4.exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

H:\Windows-10\Downloads\utorrent 2.2.1 25130.exe	una variante de Win32/uTorrent.D aplicación potencialmente no deseada	desinfectado por eliminación

H:\Windows-10\Downloads\utorrent-2.0.4.exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

I:\Documentos-JMS\Download Software\JDownloader 0.8.821\JDownloader 0.8.821\tools\Windows\kikin\kikin_installer.exe	una variante de Win32/Kikin.A aplicación potencialmente no deseada	desinfectado por eliminación

I:\Nero\Nero Version 7 Premium Reloaded (Marcos)\Actualizacion\Nero-7.11.10.0c_all_update.exe	una variante de Win32/Bundled.Toolbar.Ask aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.After.Effects.CC.2019.[x64].Patch-MPT\adobe.after.effects.cc.2019.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.Character.Animator.CC.2019.[x64].Patch-MPT\adobe.character.animator.cc.2019.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.Dreamweaver.CC.2019.[x64].Patch-MPT\adobe.dreamweaver.cc.2019.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.Illustrator.CC.2019.[x64].Patch-MPT\adobe.illustrator.cc.2019.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.Lightroom.CC.8.0.[x64].Patch-MPT\adobe.lightroom.cc.8.0.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.Photoshop.CC.2019.Patch-MPT\adobe.photoshop.cc.2019.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\HDCity\Download\Adobe Creative Cloud 2019\_Patch\Adobe.Premiere.Pro.CC.2019.[x64].Patch-MPT\adobe.premiere.pro.cc.2019.[x64]-MPT.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Karaoke & VirtualDJ\Virtual_DJ 2018\Virtual_DJ_v2018_Build_4848.exe	una variante de MSIL/WebCompanion.A aplicación potencialmente no deseada,una variante de Win32/WebCompanion.B aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Ordenadores\Control de contraseñas\AI Roboform Enterprise v7.9.25.5\EV7.9.25.5\Patch_RoboForm_7.x_x64.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\AnyDVD v7.6.9.5\SlySoft.AnyDVD.HD.v7.6.9.5.Multilingual.incl.KEY\crack\ElbyCDIO.dll	Win32/HackTool.Crack.DM troyano	eliminado

N:\Software JMS\Software\Corel Draw 2019\CorelDRAW.Graphics.Suite.2019.v21.1.0.643.MULTi.WIN64-XFORCE\disable_activation.cmd	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\Format Factory v4.6.1\formatfactory-4-6-1-0.exe	una variante de Win32/FusionCore.AQ aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\Ifunbox 4.0\ifunbox_v4106_setup.exe	una variante de Generik.IVYBQPP troyano	desinfectado por eliminación

N:\Software JMS\Software\Infeccion Chrome\Advanced system care 9.3.0.1121\advanced-systemcare-free-9-3-0-1121.exe	una variante de Win32/IObit.G aplicación potencialmente no deseada,una variante de Win32/IObit.AM aplicación potencialmente no deseada,una variante de Win32/IObit.AN aplicación potencialmente no deseada,una variante de Win32/IObit.AH aplicación potencialmente no deseada,una variante de Win32/IObit.M aplicación potencialmente no deseada,una variante de Win32/IObit.J aplicación potencialmente no deseada,Win32/IObit.D aplicación potencialmente no deseada,una variante de Win32/IObit.D aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\Infeccion Chrome\Revo Unistaller 3.1.1\Revo.Uninstaller.Pro.v3.1.1.Multilingual.Incl.Registrator-addhaloka\RUP_3.1.0_Registrator.exe	una variante de Win32/HackTool.Crack.FT aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\IObit\Advanced System Care Pro\advanced-systemcare-setup (12).exe	una variante de Win32/IObit.AJ aplicación potencialmente no deseada,una variante de Win32/IObit.AG aplicación potencialmente no deseada,una variante de Win32/IObit.AE aplicación potencialmente no deseada,una variante de Win32/IObit.AH aplicación potencialmente no deseada,una variante de Win32/IObit.AD aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\IObit\Advanced System Care Pro\advanced-systemcare-setup.exe	una variante de Win32/IObit.E aplicación potencialmente no deseada,una variante de Win32/IObit.AG aplicación potencialmente no deseada,una variante de Win32/IObit.AE aplicación potencialmente no deseada,una variante de Win32/IObit.AH aplicación potencialmente no deseada,una variante de Win32/IObit.M aplicación potencialmente no deseada,una variante de Win32/IObit.AD aplicación potencialmente no deseada,una variante de Win32/IObit.D aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\IObit\Driver Booster 6.3.0.276\driver-booster-6-3-0-276.exe	una variante de Win32/IObit.AJ aplicación potencialmente no deseada,una variante de Win32/IObit.AE aplicación potencialmente no deseada,una variante de Win32/IObit.AH aplicación potencialmente no deseada,una variante de Win32/IObit.AG aplicación potencialmente no deseada,una variante de Win32/IObit.Z aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\IObit\IObit Malware Fighter PRO v4.3.0.2688\MAL43\Block.bat	BAT/HostsChanger.A aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\IObit\IObit Malware Fighter PRO v4.3.0.2688\MAL43\IObit-Malware-Fighter-Setup.exe	una variante de Win32/IObit.S aplicación potencialmente no deseada,una variante de Win32/IObit.AM aplicación potencialmente no deseada,una variante de Win32/IObit.F aplicación potencialmente no deseada,una variante de Win32/IObit.AH aplicación potencialmente no deseada,Win32/IObit.D aplicación potencialmente no deseada,una variante de Win32/IObit.D aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\IObit\Iobit Uninstaller Pro 9.0.1.24\iobituninstaller.exe	una variante de Win32/IObit.AD aplicación potencialmente no deseada,una variante de Win32/IObit.AQ aplicación potencialmente no deseada,una variante de Win32/IObit.AE aplicación potencialmente no deseada,una variante de Win32/IObit.AF aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\IObit\Iobit Unlocker 1.1.2.1\unlocker-setup.exe	Win32/IObit.D aplicación potencialmente no deseada,una variante de Win32/IObit.D aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\Nero\_Nero Version 7 Premium Reloaded (Marcos)\Actualizacion\Nero-7.11.10.0c_all_update.exe	una variante de Win32/Bundled.Toolbar.Ask aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\Uniblue 2015 v4.3.0.0\Uniblue.PowerSuite.2015.v4.3.0.0.Multilingual.Incl.Serial\Powersuite-standalone-setup.exe	una variante de Win32/UniBlue.F aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\_Programas Instalados\ACDSee.Ultimate.v10.0.0.838\ACDSee.Ultimate.v10.0.0.838.WIN64.Incl.unipatch-Kindly\acdsee.ultimate.10.x.unipatch.exe	una variante de Win32/HackTool.Patcher.AD aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\_Programas Instalados\aTube Catcher v3.8.9622\aTube_Catcher_0130606591.exe	Win32/InstallCore.Gen.B aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software\_Programas Instalados\Utorrent_2.0.4\uTorrent 2.0.4\utorrent (2.0.4).exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\_Programas Instalados\Utorrent_2.0.4\utorrent 2.0.4 (descargado desde hdcity).exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software\_Programas Instalados\Utorrent_2.0.4\Utorrent_2.0.4_build_22967.exe	una variante de Win32/Toolbar.Conduit.AX aplicación potencialmente no deseada	desinfectado por eliminación

N:\Software JMS\Software Base PC\FileMenuTools-portable 7.7\Setup\Setup.exe	Win32/TrojanDownloader.AutoHK.KH troyano	desinfectado por eliminación

N:\Software JMS\Software Base PC\Piriform\Defraggler 2.20.989\dfsetup220.exe	Win32/Bundled.Toolbar.Google.D aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software Base PC\Piriform\Recuva 1.52.1086\rcsetup152.exe	Win32/Bundled.Toolbar.Google.D aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software Base PC\Tratamiento Video-HD\Wondershare Video Converter Ultimate v8.8.0.3\WOVIDEOC.8.0.3\patch.exe	una variante de Win32/HackTool.Patcher.DE aplicación potencialmente no segura	desinfectado por eliminación

N:\Software JMS\Software Base PC\Unlocker 1.9.2\Unlocker1.9.2.exe	una variante de Win32/Toolbar.Babylon.E aplicación potencialmente no deseada	desinfectado por eliminación

N:\Trekstor\Instalados\Jdownloader 0.9.579\JDownloaderSetup0.9.579.exe	una variante de Win32/Kikin.A aplicación potencialmente no deseada	desinfectado por eliminación

N:\Trekstor\Instalados\uTorrent 2.0.4\utorrent (2.0.4).exe	una variante de Win32/Bundled.Toolbar.Ask.T aplicación potencialmente no segura	desinfectado por eliminación

N:\Trekstor\Optimizacion\Registry Mechanic 9.0.0.114\rminstall.exe	Win32/RegistryMechanic.B aplicación potencialmente no deseada	desinfectado por eliminación

N:\Trekstor\Vacunas\Limpieza registro y otros\Registry Mechanic 9.0.0.114\rminstall.exe	Win32/RegistryMechanic.B aplicación potencialmente no deseada	desinfectado por eliminación

Kaspersky image