No puedo desactivar el proxy en windows 10

[churrimangui]

Hola a todos. Tengo una notebook Medion Akoya con windows 10. Mi problema es que hace dos días, tuve problemas para entrar en internet debido a que tenía el proxy activado. En firefox pude desactivarlo, pero el problema es que en explorer no hay manera, porque cuando voy a opciones de internet/conexiones, la opción de configuración de LAN me aparece bloqueada y más abajo me dice que “el administrador del sistema controla algunas configuraciones”. Por culpa de esta situación, windows update tampoco funciona. Cuando paso el solucionador de problemas de red, me dice lo siguiente: Problemas encontrados: el equipo remoto no acepta la conexión-El equipo o dispositivo no está configurado para aceptar conexiones en el puerto “el servidor World Wide Web (HTTP)” He intentado con varias supuestas soluciones de la comunidad microsoft, que no han funcionado, y he pasado varias herramientas de eliminación de virus y malware y no me detectan nada. Ya no sé qué hacer. Compré mi notebook a primeros de año y no quiero formatear. Os agradecería algo de ayuda. Muchas gracias de antemano. Un saludo.

[JavierHF]

Hola @churrimangui

Que herramientas de desinfección has usado…tienes informes de esas herramientas…??

El equipo lo compraste como nuevo… o ya lo había usado anteriormente alguien…??

[churrimangui]

Hola. He pasado las herramientas que tenéis en la guía de eliminación del malware, es decir, Rkill, Malwarebytes y eset online scanner. El único que me detectó algo fue el eset: dos archivos llamados SECOH-QAD.exe y SECOH-QAD.dll y los eliminó. Sin embargo el problema persiste. El equipo es nuevo. Gracias por tu interés y por tu ayuda.

[JavierHF]

Bien y ahora realiza estos pasos :

Desactiva temporalmente el Antivirus Cómo deshabilitar temporalmente su Antivirus, mientras estemos realizando TODOS los pasos.

Descargar en TU ESCRITORIO(y NO en otro lugar )

• Farbar Recovery Scan Tool. seleccionando la versión adecuada para la arquitectura(32 o 64bits) de tu equipo. [color=#FF8C00][size=1] ¿Cómo saber si mi Windows es de 32 o 64 bits.?[/size][/color]

Una vez descargadas, desconectas tu equipo de Internet(apaga el router) Muy Importante,… y Cierras también cualquier otro programa que tengas abierto.

Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas Ejecutar como Administrador para TODOS los programas.

Farbar Recovery Scan Tool.-

• Ejecuta FRST.exe.

• En el mensaje de la ventana del Disclaimer, pulsamos Yes

• En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.

• Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Poner los dos informes en tu próxima respuesta.

Debes copiarlos y pegarlos con todo su contenido y usaras varios mensajes si recibes un mensaje de error indicando que es muy largo(mas de 50.000 caracteres aprox.).

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo, aquí tienes un ejemplo de como hacerlo :

Saludos.

[churrimangui]

Hola, JavierHF:

A continuación te pongo los informes en varios mensajes, tal y como pides:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17.03.2019
Ran by churr (administrator) on DESKTOP-D7SGER7 (03-04-2019 20:06:18)
Running from C:\Users\churr\Desktop
Loaded Profiles: churr (Available Profiles: churr)
Platform: Windows 10 Home Version 1809 17763.404 (X64) Language: Español (España, internacional)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Windows\System32\HingeAngleService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Korton Group B.V. -> Inno Setup®) [File not signed] C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
() [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11811.1001.18.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [isa] => C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [330240 2015-02-26] () [File not signed]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [260488 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
Startup: C:\Users\churr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Enviar a OneNote.lnk [2019-03-15]
ShortcutTarget: Enviar a OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
ProxyEnable: [HKLM] => Proxy is enabled.
ProxyEnable: [HKLM-x32] => Proxy is enabled.
ProxyServer: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyServer: [HKLM-x32] => http=127.0.0.1:6061;https=127.0.0.1:6061
AutoConfigURL: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyEnable: [S-1-5-21-2809358218-3760247148-3921720809-1003] => Proxy is enabled.
ProxyServer: [S-1-5-21-2809358218-3760247148-3921720809-1003] => http=127.0.0.1:6061;https=127.0.0.1:6061
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{33ea2223-e33e-4fdb-9d43-2b7d88871c3e}: [DhcpNameServer] 192.168.0.1
ManualProxies: 1http=127.0.0.1:6061;https=127.0.0.1:6061

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP
SearchScopes: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-03-21] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-03-15] (Microsoft Corporation -> Microsoft Corporation)

FireFox:
========
FF DefaultProfile: gideq8gx.default
FF ProfilePath: C:\Users\churr\AppData\Roaming\Mozilla\Firefox\Profiles\gideq8gx.default [2019-04-03]
FF Homepage: Mozilla\Firefox\Profiles\gideq8gx.default -> hxxps://www.google.es/?gws_rd=ssl
FF NetworkProxy: Mozilla\Firefox\Profiles\gideq8gx.default -> type", 0
FF Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\churr\AppData\Roaming\Mozilla\Firefox\Profiles\gideq8gx.default\Extensions\[email protected] [2019-02-07]
FF Extension: (Avast Online Security) - C:\Users\churr\AppData\Roaming\Mozilla\Firefox\Profiles\gideq8gx.default\Extensions\[email protected] [2019-03-15]
FF Extension: (Adblock Plus - bloqueador de anuncios gratis) - C:\Users\churr\AppData\Roaming\Mozilla\Firefox\Profiles\gideq8gx.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-03-25]
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2014-07-02] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2014-07-02] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-03-15] (Microsoft Corporation -> Microsoft Corporation)

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6570352 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [360440 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11129928 2019-03-06] (Microsoft Corporation -> Microsoft Corporation)
R2 esifsvc; C:\WINDOWS\System32\Intel\DPTF\esif_uf.exe [1407144 2015-08-11] (Intel(R) Software -> Intel Corporation)
R3 HingeAngleService; C:\Windows\system32\HingeAngleService.exe [200192 2016-12-21] () [File not signed]
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [365040 2017-04-04] (Intel(R) pGFX -> Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [881152 2015-05-22] (Intel® Trusted Connect Service -> Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [330240 2015-02-26] () [File not signed]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-02-26] () [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\TXE Components\DAL\jhi_service.exe [174368 2015-04-21] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3830128 2019-04-02] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [110944 2018-09-15] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37320 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [205608 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [254408 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [196304 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\WINDOWS\System32\drivers\aswblog.sys [320904 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [58168 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [15488 2019-02-06] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software)
R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [249152 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42496 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [169104 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [112520 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [88152 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1034640 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [476256 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [220632 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380160 2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
R3 camera; C:\WINDOWS\system32\DRIVERS\iacamera64.sys [942576 2016-03-12] (Intel(R) Intel_ICG -> Intel(R) Corporation)
R3 dptf_acpi; C:\WINDOWS\System32\drivers\dptf_acpi.sys [47096 2015-08-11] (Intel(R) Software -> Intel Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [43512 2015-08-11] (Intel(R) Software -> Intel Corporation)
R3 esif_lf; C:\WINDOWS\System32\drivers\esif_lf.sys [251384 2015-08-11] (Intel(R) Software -> Intel Corporation)
R3 HidEventFilter; C:\WINDOWS\System32\drivers\HidEventFilter.sys [26112 2015-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
S3 HID_PCI; C:\WINDOWS\System32\drivers\HID_PCI.sys [47928 2015-11-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel)
R3 iaisp; C:\WINDOWS\System32\drivers\iaisp64.sys [20208 2015-08-06] (WDKTestCert viedifw,130729819466811601 -> Intel(R) Corporation)
R3 iaspie; C:\WINDOWS\System32\drivers\iaspie.sys [62976 2015-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Intel(R) Corporation)
R3 iauarte; C:\WINDOWS\System32\drivers\iauarte.sys [103936 2015-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Intel(R) Corporation)
R3 ibtusb; C:\WINDOWS\System32\DriverStore\FileRepository\ibtusb.inf_amd64_986f72d2e9818a15\ibtusb.sys [182416 2018-11-20] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 igfxLP; C:\WINDOWS\system32\DRIVERS\igdkmd64lp.sys [7398384 2017-04-04] (Intel(R) pGFX -> Intel Corporation)
R3 IntelBatteryManagement; C:\WINDOWS\System32\drivers\IntelBatteryManagement.sys [95744 2016-06-04] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 IntelSST; C:\WINDOWS\system32\drivers\isstrtc.sys [699904 2015-08-09] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ISH; C:\WINDOWS\System32\drivers\ISH.sys [135992 2015-11-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel)
S3 ISH_BusDriver; C:\WINDOWS\System32\drivers\ISH_BusDriver.sys [71992 2015-11-11] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R0 MBI; C:\WINDOWS\System32\drivers\MBI.sys [32736 2015-06-24] (Intel(R) CherryTrail Windows -> Intel(R) Corporation)
R3 Nau88L24Rvp; C:\WINDOWS\system32\DRIVERS\Nau88L24Rvp.sys [128704 2017-01-19] (IgxTest -> )
R3 Netwtw04; C:\WINDOWS\System32\drivers\Netwtw04.sys [8717456 2018-12-04] (Intel(R) Wireless Connectivity Solutions -> Intel Corporation)
R3 PMIC; C:\WINDOWS\System32\drivers\PMIC.sys [100864 2015-10-01] (Microsoft Windows Hardware Compatibility Publisher -> Intel(R) Corporation)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [40664 2013-08-22] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 TXEIx64; C:\WINDOWS\System32\drivers\TXEIx64.sys [148280 2015-07-02] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46584 2018-09-15] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [340008 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [61992 2018-09-15] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-03 20:06 - 2019-04-03 20:08 - 000017188 _____ C:\Users\churr\Desktop\FRST.txt
2019-04-03 19:54 - 2019-04-03 20:06 - 000000000 ____D C:\FRST
2019-04-03 19:44 - 2019-04-03 19:44 - 002434048 _____ (Farbar) C:\Users\churr\Desktop\FRST64.exe
2019-04-03 17:48 - 2019-04-03 17:48 - 005436696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 003551104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 001459080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 001297120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 001294520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2019-04-03 17:48 - 2019-04-03 17:48 - 001072424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000897536 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000454144 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2019-04-03 17:48 - 2019-04-03 17:48 - 000263360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 026810368 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 023440896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 020815360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 019025408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 012843520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 012138496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 008898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 007919104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 004659712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 003904512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 003690496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2019-04-03 17:47 - 2019-04-03 17:47 - 003421696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2019-04-03 17:47 - 2019-04-03 17:47 - 002942464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 002127360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 001521664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 001064448 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysmain.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000840192 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000772608 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\objsel.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000316416 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\EduPrintProv.exe
2019-04-03 17:47 - 2019-04-03 17:47 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2019-04-03 17:47 - 2019-04-03 17:47 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msiexec.exe
2019-04-03 17:47 - 2019-04-03 17:47 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDSPnf.exe
2019-04-03 17:47 - 2019-04-03 17:47 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\dataclen.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfts.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dataclen.dll
2019-04-03 17:47 - 2019-04-03 17:47 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfts.dll
2019-04-03 17:46 - 2019-04-03 17:47 - 003656192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 015223296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 006925824 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 006547360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 006440960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 006309040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 005765120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 005205448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 004527624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 003496448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AI.MachineLearning.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002925880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-04-03 17:46 - 2019-04-03 17:46 - 002871304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 002777224 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002765312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002701304 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002689024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002627384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2019-04-03 17:46 - 2019-04-03 17:46 - 002346496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002275896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 002073960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001994768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001860096 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001760768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001711104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001701376 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001674480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001672072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001647632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001615872 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001506304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001484800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001467344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001458056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001370624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001360184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-04-03 17:46 - 2019-04-03 17:46 - 001342400 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-04-03 17:46 - 2019-04-03 17:46 - 001249280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001179680 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 001155072 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001026792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ole32.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000976896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000964096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000949248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000909840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000884224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000845824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000828728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000821048 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-04-03 17:46 - 2019-04-03 17:46 - 000762880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mprddm.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000737080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000731648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000730936 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000730112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000726416 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000711168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000672256 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000671232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000649064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SmartcardCredentialProvider.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000620560 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000598544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000553784 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000540448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000528384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2019-04-03 17:46 - 2019-04-03 17:46 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\slui.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000460800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000414720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-04-03 17:46 - 2019-04-03 17:46 - 000408528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\RADCUI.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000322568 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000312632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\thumbcache.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000294912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RADCUI.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincredui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000188416 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMPushRouterCore.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincredui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Radios.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000147496 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000143880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000115360 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000107832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000101376 _____ (Microsoft Corporation) C:\WINDOWS\system32\hlink.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000099840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hlink.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\olepro32.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000071208 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntlanman.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntlanman.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\credui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscapi.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\perfproc.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\perfproc.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credui.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcPing.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2019-04-03 17:46 - 2019-04-03 17:46 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RpcPing.exe
2019-04-03 17:46 - 2019-04-03 17:46 - 000022016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cscdll.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 017513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 009682232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 007883776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 007645600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 004866560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AI.MachineLearning.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 004704272 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 004304896 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 003982848 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 003661312 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 003557888 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 003384832 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 003377976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 002995712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 002842624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 002485248 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 002188288 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 002042368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001969464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refs.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001892864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001844448 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001697752 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2019-04-03 17:45 - 2019-04-03 17:45 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001641400 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001468952 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 001395056 _____ (Microsoft Corporation) C:\WINDOWS\system32\ole32.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001311232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001259320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 001213752 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvstore.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001145856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001133568 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001058304 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2019-04-03 17:45 - 2019-04-03 17:45 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 001054200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 001035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000998712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000984888 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000981816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\refsv1.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000974352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvstore.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000927232 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000926208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\mprddm.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-04-03 17:45 - 2019-04-03 17:45 - 000877056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000865792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmartcardCredentialProvider.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000855040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000809784 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000807424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000757664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyHrtfEnc.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000660480 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000651064 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000611840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000609792 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000568632 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000552448 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-04-03 17:45 - 2019-04-03 17:45 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000508208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000485192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000475648 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000407552 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000407504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtapi.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000386360 _____ (Microsoft Corporation) C:\WINDOWS\system32\thumbcache.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000343984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000283032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wevtapi.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiCloudStore.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000257696 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000255128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmBroker.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Radios.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.SharedPC.CredentialProvider.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000159272 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000157496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000149504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000146432 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000134456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000121344 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RjvMDMConfig.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\negoexts.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000098664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpr.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000097808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dam.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpr.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dtdump.exe
2019-04-03 17:45 - 2019-04-03 17:45 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mpsdrv.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscapi.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000039736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WppRecorder.sys
2019-04-03 17:45 - 2019-04-03 17:45 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\cscdll.dll
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-04-03 17:45 - 2019-04-03 17:45 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-04-03 17:44 - 2019-04-03 17:44 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 004991112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 003334496 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 002722304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 002592816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 002017792 _____ C:\WINDOWS\system32\rdpnano.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 001856000 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 001567232 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-04-03 17:44 - 2019-04-03 17:44 - 001191728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 001053192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 001044280 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-04-03 17:44 - 2019-04-03 17:44 - 001022616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000982880 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000871792 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2019-04-03 17:44 - 2019-04-03 17:44 - 000799568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000796088 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000766480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000761280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000675096 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000651792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000607744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000606080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000580024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\objsel.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000513040 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000506168 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000463672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000421392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000386872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000385024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000384312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000306488 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000300344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbvideo.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000264704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000234808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000195896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000169784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\winquic.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winquic.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000131384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys
2019-04-03 17:44 - 2019-04-03 17:44 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\negoexts.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\KdsCli.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000035640 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-04-03 17:44 - 2019-04-03 17:44 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-04-03 17:44 - 2019-04-03 17:44 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-04-03 14:49 - 2019-04-03 14:49 - 000010632 _____ C:\Users\churr\Documents\cc_20190403_144926.reg
2019-04-03 14:47 - 2019-04-03 14:48 - 000080878 _____ C:\Users\churr\Documents\cc_20190403_144756.reg
2019-04-03 14:11 - 2019-04-03 14:11 - 007665272 _____ (ESET spol. s r.o.) C:\Users\churr\Downloads\esetonlinescanner_esn(1).exe
2019-04-03 14:03 - 2019-04-03 14:03 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\churr\Downloads\iExplore.exe
2019-04-03 13:18 - 2019-04-03 13:18 - 007316688 _____ (Malwarebytes) C:\Users\churr\Downloads\adwcleaner_7.2.7.0.exe
2019-04-03 13:14 - 2019-04-03 12:37 - 000000000 ____D C:\Windows.old
2019-04-03 12:43 - 2019-04-03 12:43 - 000001559 _____ C:\Users\churr\Desktop\iexplore - Acceso directo.lnk
2019-04-03 12:39 - 2019-04-03 12:39 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2019-04-03 12:37 - 2019-04-03 12:37 - 000000020 ___SH C:\Users\churr\ntuser.ini
2019-04-03 12:36 - 2019-04-03 19:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-04-03 12:36 - 2019-04-03 12:36 - 000002938 _____ C:\WINDOWS\System32\Tasks\Re-attempt Adobe® Flash Player Install
2019-04-03 12:36 - 2019-04-03 12:36 - 000002544 _____ C:\WINDOWS\System32\Tasks\Inno Setup® Software Update Scheduler
2019-04-03 12:36 - 2019-04-03 12:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
2019-04-03 12:36 - 2019-04-03 12:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\Avast Software
2019-04-03 12:34 - 2019-04-03 12:36 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2019-04-03 12:34 - 2019-04-03 12:36 - 000007623 _____ C:\WINDOWS\diagerr.xml
2019-04-03 12:30 - 2019-04-03 19:46 - 001773362 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-04-03 12:21 - 2019-04-03 12:21 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2019-04-03 12:19 - 2019-04-03 12:37 - 000000000 ____D C:\Users\churr
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Reciente
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Plantillas
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Mis documentos
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Menú Inicio
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Impresoras
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Entorno de red
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Documents\Mis vídeos
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Documents\Mis imágenes
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Documents\Mi música
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Datos de programa
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\Configuración local
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\AppData\Local\Historial
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\AppData\Local\Datos de programa
2019-04-03 12:19 - 2019-04-03 12:19 - 000000000 _SHDL C:\Users\churr\AppData\Local\Archivos temporales de Internet
2019-04-03 12:19 - 2018-09-15 09:29 - 000001105 _____ C:\Users\churr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-04-03 12:18 - 2019-04-03 12:18 - 000000000 ____D C:\ProgramData\USOShared
2019-04-03 12:17 - 2019-04-02 23:45 - 002865152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2019-04-03 12:17 - 2017-04-04 17:37 - 000095216 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.DLL
2019-04-03 12:17 - 2017-04-04 17:37 - 000091120 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.DLL
2019-04-03 12:15 - 2019-04-03 17:56 - 000432312 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-04-03 12:15 - 2019-04-03 12:16 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2019-04-03 00:30 - 2019-04-03 13:14 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2019-04-03 00:18 - 2019-04-03 00:29 - 000000000 ____D C:\WINDOWS\ServiceProfiles

[churrimangui]

2019-04-02 23:55 - 2019-04-02 23:55 - 011724288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 009941504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 004488192 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2019-04-02 23:55 - 2019-04-02 23:55 - 003442176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2019-04-02 23:55 - 2019-04-02 23:55 - 000301096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpeffects.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 000241680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpeffects.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpshell.dll
2019-04-02 23:55 - 2019-04-02 23:55 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpshell.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 024616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 019284480 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 006069760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 004920832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 003744256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 003566080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002986352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002752360 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002429752 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL
2019-04-02 23:54 - 2019-04-02 23:54 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002323688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002278240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 002160160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL
2019-04-02 23:54 - 2019-04-02 23:54 - 001706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001289192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001282640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001200920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2019-04-02 23:54 - 2019-04-02 23:54 - 001077912 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001057976 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2adec.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001024920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 001022464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MixedRealityCapture.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000870400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MixedRealityCapture.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000866152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000854784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2adec.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000829440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000762272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000690688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000662528 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Pipeline.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000577024 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfh264enc.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000560128 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfh264enc.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000453632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2019-04-02 23:54 - 2019-04-02 23:54 - 000429056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000421688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000352768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000329216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regedit.exe
2019-04-02 23:54 - 2019-04-02 23:54 - 000313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2019-04-02 23:54 - 2019-04-02 23:54 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscinterop.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000098816 ____R (Microsoft Corporation) C:\WINDOWS\system32\MixedRealityCapture.Broker.dll
2019-04-02 23:54 - 2019-04-02 23:54 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 007882240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 003952952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 002298880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 001782272 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 001749504 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpasvc.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 001224704 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 001182720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2019-04-02 23:53 - 2019-04-02 23:53 - 001131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 001018880 _____ (Microsoft Corporation) C:\WINDOWS\system32\termsrv.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000883200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceControl.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000642048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2019-04-02 23:53 - 2019-04-02 23:53 - 000522312 _____ (Microsoft Corporation) C:\WINDOWS\system32\systemreset.exe
2019-04-02 23:53 - 2019-04-02 23:53 - 000480256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000427520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000358400 _____ (Microsoft Corporation) C:\WINDOWS\regedit.exe
2019-04-02 23:53 - 2019-04-02 23:53 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\udfs.sys
2019-04-02 23:53 - 2019-04-02 23:53 - 000314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys
2019-04-02 23:53 - 2019-04-02 23:53 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscinterop.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000180736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\itss.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000167424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-04-02 23:53 - 2019-04-02 23:53 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\itss.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000137216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpaceAgent.exe
2019-04-02 23:53 - 2019-04-02 23:53 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CastingShellExt.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlahc.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\PktMon.exe
2019-04-02 23:53 - 2019-04-02 23:53 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvSysprep.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SMSRouter.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll
2019-04-02 23:53 - 2019-04-02 23:53 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 003108864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 001675712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 001294848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 001279024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
2019-04-02 23:52 - 2019-04-02 23:52 - 001221528 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2019-04-02 23:52 - 2019-04-02 23:52 - 001110528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000913920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2019-04-02 23:52 - 2019-04-02 23:52 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000775168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVolSSO.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000626176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\apphelp.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000495104 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000492032 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000489984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000361984 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageHandlers.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000330752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000322048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\discan.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasppp.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000222720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scrrun.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000156672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasman.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\CastingShellExt.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\DataUsageLiveTileTask.exe
2019-04-02 23:52 - 2019-04-02 23:52 - 000126976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srpapi.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2019-04-02 23:52 - 2019-04-02 23:52 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupcln.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cdfs.sys
2019-04-02 23:52 - 2019-04-02 23:52 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-04-02 23:52 - 2019-04-02 23:52 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nslookup.exe
2019-04-02 23:52 - 2019-04-02 23:52 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiwmi.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdBth.dll
2019-04-02 23:52 - 2019-04-02 23:52 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureBioSysprep.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 007251456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 005915936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 003729808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2019-04-02 23:51 - 2019-04-02 23:51 - 003652656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 003427840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 002832896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 002447360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapRouter.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 002001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapGeocoder.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001720936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001590072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001572176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\propsys.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001476096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001272552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001271608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001221944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpbase.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001168384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001162280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001098128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000964976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000918032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000803328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000782968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000772408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000729088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000652824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000615936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000604248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000591832 _____ C:\WINDOWS\SysWOW64\InputHost.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000585728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000548864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000514112 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dsound.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000423936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000373768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coml2.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000284672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000279376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000272648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000252536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscapi.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000226816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000144896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe
2019-04-02 23:51 - 2019-04-02 23:51 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssph.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spopk.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DisplayManager.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000114344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000104960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll
2019-04-02 23:51 - 2019-04-02 23:51 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredentialMigrationHandler.dll
2019-04-02 23:50 - 2019-04-02 23:51 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 003761664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 003504128 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 002893312 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 001481488 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 001446400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42u.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 001415680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc42.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 001180248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 001010176 _____ (Microsoft Corporation) C:\WINDOWS\system32\refsutil.exe
2019-04-02 23:50 - 2019-04-02 23:50 - 001001472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2019-04-02 23:50 - 2019-04-02 23:50 - 000823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000800256 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000764216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000655160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000588304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000535048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-04-02 23:50 - 2019-04-02 23:50 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000383288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000262456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\WPTaskScheduler.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\spopk.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\srpapi.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000146888 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-04-02 23:50 - 2019-04-02 23:50 - 000121872 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000109568 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2019-04-02 23:50 - 2019-04-02 23:50 - 000094224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fileinfo.sys
2019-04-02 23:50 - 2019-04-02 23:50 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\nslookup.exe
2019-04-02 23:50 - 2019-04-02 23:50 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdBth.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 005566464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 004588744 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-04-02 23:49 - 2019-04-02 23:49 - 004019200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 002879488 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001884672 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001671680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001391096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
2019-04-02 23:49 - 2019-04-02 23:49 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001267712 _____ (Microsoft Corporation) C:\WINDOWS\system32\APMon.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001249792 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 001056272 _____ (Microsoft Corporation) C:\WINDOWS\system32\pidgenx.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000889344 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000888120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pidgenx.dll

[churrimangui]

2019-04-02 23:49 - 2019-04-02 23:49 - 000860160 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2019-04-02 23:49 - 2019-04-02 23:49 - 000684544 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe
2019-04-02 23:49 - 2019-04-02 23:49 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\apphelp.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000516608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000496872 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2019-04-02 23:49 - 2019-04-02 23:49 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000420864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000400384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.OneCore.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasppp.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000256512 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\scrrun.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasman.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000156160 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMapi.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupcln.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-04-02 23:49 - 2019-04-02 23:49 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-04-02 23:49 - 2019-04-02 23:49 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpkinstall.exe
2019-04-02 23:49 - 2019-04-02 23:49 - 000039936 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-04-02 23:49 - 2019-04-02 23:49 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-04-02 23:48 - 2019-04-02 23:48 - 009670656 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 007647256 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 007556392 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 005527552 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 005296640 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 003399168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapRouter.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 003092480 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 002842112 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapGeocoder.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 002637312 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2019-04-02 23:48 - 2019-04-02 23:48 - 002437344 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 002185728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001824768 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001797128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001715712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001664904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001563336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001533440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001479480 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001287776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001176064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001078072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000902144 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000890368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000863752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2019-04-02 23:48 - 2019-04-02 23:48 - 000836096 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000833064 _____ C:\WINDOWS\system32\InputHost.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000820736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000818832 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000801792 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000714240 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000681984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000622080 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000572416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000547840 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000514048 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000494080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoMetadataHandler.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000468992 _____ (Microsoft Corporation) C:\WINDOWS\system32\coml2.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000439296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-04-02 23:48 - 2019-04-02 23:48 - 000435712 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000415744 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
2019-04-02 23:48 - 2019-04-02 23:48 - 000394240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000330464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000251904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000246584 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000241664 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
2019-04-02 23:48 - 2019-04-02 23:48 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\ACPBackgroundManagerPolicy.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000197120 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthserv.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000196608 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssph.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000175096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2019-04-02 23:48 - 2019-04-02 23:48 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DisplayManager.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000151872 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-04-02 23:48 - 2019-04-02 23:48 - 000074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WindowsTrustedRT.sys
2019-04-02 23:48 - 2019-04-02 23:48 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msscntrs.dll
2019-04-02 23:48 - 2019-04-02 23:48 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnsruprov.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 005561856 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 004245280 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 002630656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 002618880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WsmSvc.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 002085376 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 001931264 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 001700880 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 001315840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 001199104 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 001087800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000955392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000864056 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000745984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000604336 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsound.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\eeprov.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000378368 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioCredProv.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000294072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscapi.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000275768 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BioCredProv.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000273408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\smbwmiv2.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbio.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\energyprov.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000171520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000148480 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.HotspotAuthentication.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyMATEnc.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000114856 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManMigrationPlugin.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000062464 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialMigrationHandler.dll
2019-04-02 23:47 - 2019-04-02 23:47 - 000047136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-04-02 23:47 - 2019-04-02 23:47 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSManHTTPConfig.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 006132736 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 005130752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 002766648 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 002149368 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 001742104 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 001387496 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 001208320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 001005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000895048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000865568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000790328 _____ (Microsoft Corporation) C:\WINDOWS\system32\upshared.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000741888 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000680184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000646656 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32time.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000646632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000612368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000531976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000527872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000506408 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000473616 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000449368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000444728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000419128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fastfat.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000408800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswsock.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\exfat.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000402576 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000398416 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000355360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswsock.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000276488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MTF.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\w32tm.exe
2019-04-02 23:46 - 2019-04-02 23:46 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ptpprov.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000202752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecureTimeAggregator.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MTF.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000202552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netiohlp.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000178696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000164288 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000140808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000138960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000115152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2019-04-02 23:46 - 2019-04-02 23:46 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mmcss.sys
2019-04-02 23:46 - 2019-04-02 23:46 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 002929152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 002654208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WsmSvc.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 002021584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 001672704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 001520208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 001496064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 001296576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 001221120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000918304 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000854016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000752136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000661816 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000605496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000582240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000519992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvcext.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000300024 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsvc.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000298296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000273920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000211968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\w32tm.exe
2019-04-02 23:45 - 2019-04-02 23:45 - 000193032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000164344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netiohlp.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000126464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbio.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthhfenum.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthenum.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000095544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storqosflt.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000083472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vid.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vpci.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iscsiwmi.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManMigrationPlugin.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000055608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\iorate.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\kbdhid.sys
2019-04-02 23:45 - 2019-04-02 23:45 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSManHTTPConfig.exe
2019-04-02 23:45 - 2019-04-02 23:45 - 000033056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\npmproxy.dll
2019-04-02 23:45 - 2019-04-02 23:45 - 000000072 _____ C:\WINDOWS\system32\edgehtmlpluginpolicy.bin
2019-04-02 22:20 - 2019-04-02 22:20 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-04-02 22:20 - 2019-04-02 22:20 - 000000000 ____D C:\Program Files\Reference Assemblies
2019-04-02 22:20 - 2019-04-02 22:20 - 000000000 ____D C:\Program Files\MSBuild
2019-04-02 22:20 - 2019-04-02 22:20 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-04-02 22:20 - 2019-04-02 22:20 - 000000000 ____D C:\Program Files (x86)\MSBuild
2019-04-02 22:15 - 2018-08-29 17:56 - 000780376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-04-02 22:15 - 2018-08-29 17:56 - 000104560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-04-02 22:15 - 2018-08-29 17:56 - 000036896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-04-02 22:14 - 2018-09-09 17:17 - 001167960 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-04-02 22:14 - 2018-09-09 17:16 - 000126064 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-04-02 22:14 - 2018-09-09 17:16 - 000035440 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-04-02 22:12 - 2018-09-14 21:41 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\XPSSHHDR.dll
2019-04-02 22:12 - 2018-09-14 21:34 - 000922112 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsFilt.dll
2019-04-02 22:12 - 2018-09-14 20:57 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XPSSHHDR.dll
2019-04-02 22:12 - 2018-09-14 20:52 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsFilt.dll
2019-04-02 22:12 - 2018-08-09 14:49 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2019-04-02 22:12 - 2018-08-08 20:58 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2019-04-02 22:09 - 2018-09-14 18:05 - 005739008 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2019-04-02 22:09 - 2018-09-14 18:04 - 002629120 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2019-04-02 22:09 - 2018-09-14 17:50 - 006347776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2019-04-02 22:09 - 2018-09-14 17:34 - 005489664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2019-04-02 21:36 - 2019-04-02 21:36 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2019-04-02 18:49 - 2019-04-02 18:49 - 007665272 _____ (ESET spol. s r.o.) C:\Users\churr\Downloads\esetonlinescanner_esn.exe
2019-04-02 18:49 - 2019-04-02 18:49 - 000000000 ____D C:\Users\churr\AppData\Local\ESET
2019-04-02 18:44 - 2019-04-02 18:44 - 000000000 ____D C:\Users\churr\AppData\Local\mbam
2019-04-02 18:43 - 2019-04-03 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-04-02 18:43 - 2019-04-02 18:48 - 000153328 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2019-04-02 18:43 - 2019-04-02 18:43 - 000001919 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-04-02 18:43 - 2019-04-02 18:43 - 000000000 ____D C:\Users\churr\AppData\Local\mbamtray
2019-04-02 18:43 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2019-04-02 18:42 - 2019-04-02 18:42 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-04-02 18:42 - 2019-04-02 18:42 - 000000000 ____D C:\Program Files\Malwarebytes
2019-04-02 18:41 - 2019-04-02 18:41 - 064309056 _____ (Malwarebytes ) C:\Users\churr\Downloads\mb3-setup-35891.35891-3.7.1.2839-1.0.538-1.0.9074.exe
2019-04-01 21:21 - 2019-04-01 21:21 - 000000460 _____ C:\Users\churr\Documents\cc_20190401_212107.reg
2019-04-01 21:21 - 2019-04-01 21:21 - 000000082 _____ C:\Users\churr\Documents\cc_20190401_212100.reg
2019-04-01 21:20 - 2019-04-01 21:20 - 000005192 _____ C:\Users\churr\Documents\cc_20190401_212017.reg
2019-04-01 21:19 - 2019-04-01 21:19 - 000082372 _____ C:\Users\churr\Documents\cc_20190401_211931.reg
2019-04-01 17:13 - 2019-04-01 17:13 - 004002110 _____ C:\Users\churr\Downloads\bda_40063060.pdf
2019-04-01 13:24 - 2019-04-03 14:45 - 000000000 ___DC C:\WINDOWS\Panther
2019-03-28 01:30 - 2019-03-28 18:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-03-27 13:33 - 2019-03-27 13:33 - 000000000 ____D C:\ProgramData\Adobe Flash Player
2019-03-25 18:55 - 2019-04-03 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-03-25 18:55 - 2019-03-25 18:55 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-03-25 18:55 - 2019-03-25 18:55 - 000000000 ____D C:\Program Files\CCleaner
2019-03-25 17:26 - 2019-03-25 17:26 - 000000000 ____D C:\ProgramData\NCH Software
2019-03-25 15:38 - 2019-03-25 15:38 - 000000000 ____D C:\Users\churr\Documents\MuseScore3
2019-03-25 15:37 - 2019-04-03 12:21 - 000000000 ____D C:\Users\churr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MuseScore 3
2019-03-25 15:37 - 2019-03-25 15:45 - 000000000 ____D C:\Users\churr\AppData\Roaming\MuseScore
2019-03-25 15:37 - 2019-03-25 15:37 - 000001096 _____ C:\Users\churr\Desktop\MuseScore 3.lnk
2019-03-25 15:37 - 2019-03-25 15:37 - 000000000 ____D C:\Users\churr\AppData\Local\MuseScore
2019-03-25 15:37 - 2019-03-25 15:37 - 000000000 ____D C:\Program Files\MuseScore 3
2019-03-25 14:42 - 2019-03-25 14:43 - 000000000 ____D C:\AdwCleaner
2019-03-22 19:56 - 2019-04-01 23:06 - 000000000 ____D C:\Users\churr\AppData\Local\PlaceholderTileLogoFolder
2019-03-21 14:41 - 2019-04-03 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office
2019-03-21 14:41 - 2019-03-21 14:41 - 000002538 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2019-03-21 14:41 - 2019-03-21 14:41 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2019-03-21 14:41 - 2019-03-21 14:41 - 000002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2019-03-21 14:41 - 2019-03-21 14:41 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2019-03-21 14:41 - 2019-03-21 14:41 - 000002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2019-03-21 14:41 - 2019-03-21 14:41 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2019-03-21 14:41 - 2019-03-21 14:41 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2019-03-21 00:28 - 2019-04-03 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2019-03-21 00:28 - 2019-04-01 17:47 - 000000000 ____D C:\Users\churr\AppData\Roaming\vlc
2019-03-21 00:27 - 2019-03-21 00:27 - 000000000 ____D C:\Program Files\VideoLAN
2019-03-20 22:34 - 2019-03-20 22:34 - 000000000 ____D C:\Users\churr\AppData\LocalLow\Temp
2019-03-20 20:50 - 2019-04-02 18:20 - 000000000 ____D C:\Users\churr\AppData\Local\CrashDumps
2019-03-19 18:36 - 2019-03-27 13:35 - 000000000 ____D C:\Program Files\KMSpico
2019-03-19 18:10 - 2019-03-19 18:10 - 000000000 ____D C:\Users\churr\AppData\Roaming\WinRAR
2019-03-19 18:09 - 2019-04-03 13:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-19 18:09 - 2019-04-03 12:21 - 000000000 ____D C:\Users\churr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-03-19 18:09 - 2019-03-19 18:09 - 000000000 ____D C:\Program Files\WinRAR
2019-03-18 18:27 - 2019-03-18 18:27 - 000000354 _____ C:\Users\churr\Desktop\SDHC (D) - Acceso directo.lnk
2019-03-15 19:55 - 2019-03-15 19:56 - 000000000 ____D C:\Users\churr\Documents\Blocs de notas de OneNote
2019-03-15 00:26 - 2019-03-15 00:25 - 000362888 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-04-03 20:09 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-04-03 19:46 - 2018-09-15 18:36 - 000791070 _____ C:\WINDOWS\system32\perfh00A.dat
2019-04-03 19:46 - 2018-09-15 18:36 - 000156308 _____ C:\WINDOWS\system32\perfc00A.dat
2019-04-03 19:46 - 2018-09-15 09:31 - 000000000 ____D C:\WINDOWS\INF
2019-04-03 19:42 - 2019-02-06 15:33 - 000000000 ____D C:\Users\churr\AppData\LocalLow\Mozilla
2019-04-03 19:39 - 2019-02-06 15:10 - 000000000 __SHD C:\Users\churr\IntelGraphicsProfiles
2019-04-03 19:39 - 2018-01-04 11:05 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-04-03 19:38 - 2018-09-15 08:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2019-04-03 19:37 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\NDF
2019-04-03 17:54 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-04-03 17:54 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-04-03 17:54 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\oobe
2019-04-03 17:54 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\system32\Dism
2019-04-03 17:53 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\bcastdvr
2019-04-03 17:53 - 2018-09-15 09:23 - 000000000 ____D C:\WINDOWS\CbsTemp
2019-04-03 17:52 - 2018-09-15 08:09 - 000000000 ____D C:\WINDOWS\servicing
2019-04-03 17:03 - 2018-09-15 09:36 - 000835480 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-04-03 17:03 - 2018-09-15 09:36 - 000179608 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-04-03 13:14 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-04-03 13:14 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-04-03 13:14 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-04-03 13:14 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\spool
2019-04-03 13:14 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2019-04-03 13:14 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-04-03 13:14 - 2018-09-15 09:31 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-04-03 13:14 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-04-03 13:14 - 2017-08-22 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MEDION
2019-04-03 13:14 - 2017-08-21 14:44 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2019-04-03 13:14 - 2017-08-21 14:35 - 000000000 ____D C:\Program Files\Intel
2019-04-03 13:02 - 2018-09-15 08:09 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2019-04-03 13:00 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2019-04-03 12:57 - 2019-02-07 13:07 - 000000000 ____D C:\ProgramData\Packages
2019-04-03 12:57 - 2019-02-06 15:10 - 000000000 ____D C:\Users\churr\AppData\Local\Packages
2019-04-03 12:57 - 2018-09-15 09:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-04-03 12:45 - 2019-02-06 15:07 - 000000000 ____D C:\Program Files\rempl
2019-04-03 12:37 - 2019-02-07 16:39 - 000000000 ___RD C:\Users\churr\3D Objects
2019-04-03 12:37 - 2019-02-06 15:10 - 000000000 ____D C:\Users\churr\AppData\Local\ConnectedDevicesPlatform
2019-04-03 12:37 - 2017-04-26 11:43 - 000000000 __RHD C:\Users\Public\AccountPictures
2019-04-03 12:36 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files\windows nt
2019-04-03 12:33 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\Registration
2019-04-03 12:29 - 2018-09-15 09:33 - 000000000 ___RD C:\WINDOWS\PrintDialog
2019-04-03 12:28 - 2019-02-07 16:10 - 000023172 _____ C:\WINDOWS\system32\emptyregdb.dat
2019-04-03 12:18 - 2018-09-15 09:33 - 000000000 ____D C:\ProgramData\USOPrivate
2019-04-03 12:17 - 2017-08-21 14:35 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-04-03 12:16 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\ServiceState
2019-04-03 01:23 - 2018-09-15 09:36 - 000000000 ____D C:\WINDOWS\Setup
2019-04-03 00:58 - 2018-04-12 01:38 - 000000000 ____D C:\WINDOWS\InfusedApps
2019-04-03 00:57 - 2018-09-15 09:33 - 000000000 __RHD C:\Users\Public\Libraries
2019-04-03 00:32 - 2017-08-21 14:29 - 000000000 ____D C:\WINDOWS\system32\Intel
2019-04-03 00:31 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\Resources
2019-04-03 00:30 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\Help
2019-04-03 00:04 - 2018-09-15 18:38 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-04-03 00:04 - 2018-09-15 18:38 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-04-03 00:04 - 2018-09-15 09:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-04-03 00:04 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\TextInput
2019-04-03 00:04 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\migwiz
2019-04-03 00:04 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\appraiser
2019-04-03 00:04 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\ShellExperiences
2019-04-03 00:04 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\ShellComponents
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\system32\winrm
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\system32\WCN
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\system32\slmgr
2019-04-02 22:51 - 2018-09-15 18:36 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2019-04-02 22:51 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2019-04-02 22:51 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2019-04-02 22:51 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\F12
2019-04-02 22:51 - 2018-09-15 09:33 - 000000000 ___SD C:\WINDOWS\system32\dsc
2019-04-02 22:51 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2019-04-02 22:51 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2019-04-02 22:50 - 2018-09-15 09:33 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-04-02 22:50 - 2018-09-15 09:33 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-04-02 22:20 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-04-02 22:20 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\MUI
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\et-EE
2019-04-02 22:12 - 2018-09-15 09:33 - 000000000 ____D C:\WINDOWS\system32\es-MX
2019-04-01 22:17 - 2019-02-06 15:11 - 000000000 ____D C:\Users\churr\AppData\Local\Publishers
2019-03-28 18:01 - 2019-02-06 15:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-03-28 13:35 - 2019-02-06 15:33 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-03-21 14:38 - 2017-08-21 14:08 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2019-03-18 21:34 - 2019-02-11 18:44 - 000000000 ____D C:\Users\churr\AppData\Local\D3DSCache
2019-03-15 01:08 - 2019-02-06 15:16 - 000000000 ___RD C:\Users\churr\OneDrive
2019-03-15 01:05 - 2019-02-06 17:23 - 000000000 ____D C:\WINDOWS\system32\MRT
2019-03-15 01:01 - 2019-02-06 17:23 - 127411920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-03-15 00:25 - 2019-02-13 15:02 - 000249152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 001034640 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000476256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000380160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000220632 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000205608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000169104 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000112520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000088152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000042496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2019-03-15 00:25 - 2019-02-06 17:22 - 000037320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2019-03-15 00:24 - 2019-02-06 17:22 - 000320904 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswblog.sys
2019-03-15 00:24 - 2019-02-06 17:22 - 000254408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2019-03-15 00:24 - 2019-02-06 17:22 - 000196304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2019-03-15 00:24 - 2019-02-06 17:22 - 000058168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\dllhost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\dllhost.exe => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

[churrimangui]

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by churr (03-04-2019 20:10:17)
Running from C:\Users\churr\Desktop
Windows 10 Home Version 1809 17763.404 (X64) (2019-04-03 10:37:15)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-2809358218-3760247148-3921720809-500 - Administrator - Disabled)
churr (S-1-5-21-2809358218-3760247148-3921720809-1003 - Administrator - Enabled) => C:\Users\churr
DefaultAccount (S-1-5-21-2809358218-3760247148-3921720809-503 - Limited - Disabled)
Invitado (S-1-5-21-2809358218-3760247148-3921720809-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2809358218-3760247148-3921720809-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.3.2369 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.55 - Piriform)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1067 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{185db067-38cd-4521-a43e-c39b96ee1389}) (Version: 19.50.1 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{84DB01CB-7EB7-4261-9249-99A32768D991}) (Version: 1.0.0.523 - Intel Corporation)
Malwarebytes versión 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Microsoft Office 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.11328.20158 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\...\OneDriveSetup.exe) (Version: 19.012.0121.0011 - Microsoft Corporation)
Mozilla Firefox 66.0.2 (x64 es-ES) (HKLM\...\Mozilla Firefox 66.0.2 (x64 es-ES)) (Version: 66.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 65.0 - Mozilla)
MuseScore 3 (HKLM\...\{D4228234-027C-4E11-92EF-1DDB532822DC}) (Version: 3.0.5.5992 - Werner Schweer and Others)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0C0A-0000-0000000FF1CE}) (Version: 16.0.11328.20158 - Microsoft Corporation) Hidden
osrss (HKLM-x32\...\{1BA1133B-1C7A-41A0-8CBF-9B993E63D296}) (Version: 1.0.0 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.9600.39064 - Realtek Semiconductor Corp.)
SupportAPP (HKLM\...\{0000A0AB-3A12-1EF4-A21C-9ADE1843AB04}) (Version: 1.1 - )
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{FBA3961B-D1DF-493C-BC1F-E67D3B832895}) (Version: 2.56.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Windows Driver Package - Kionix (WUDFRd) Sensor  (08/28/2015 1.0.0.11) (HKLM\...\DBCC966A33311F2029D94BAC8B2E9D195B932F6B) (Version: 08/28/2015 1.0.0.11 - Kionix)
WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} =>  -> No File
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-03-15] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> No File
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> No File
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1862DF82-A77A-4941-80C5-44DDC3578863} - System32\Tasks\Re-attempt Adobe® Flash Player Install => C:\ProgramData\Adobe Flash Player\Temp\install_flash_player_23_plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated) [File not signed] <==== ATTENTION
Task: {FF930D56-19A6-4023-9FE3-6E7CA1E27201} - System32\Tasks\Inno Setup® Software Update Scheduler => C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe (Korton Group B.V. -> Inno Setup®) [File not signed]

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2017-08-21 14:45 - 2016-12-21 08:29 - 000200192 _____ () [File not signed] C:\Windows\system32\HingeAngleService.exe
2019-03-27 13:33 - 2019-01-21 11:36 - 001011512 _____ (Korton Group B.V. -> Inno Setup®) [File not signed] C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe
2015-02-26 12:12 - 2015-02-26 12:12 - 000007680 _____ () [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2015-02-26 12:12 - 2015-02-26 12:12 - 000330240 _____ () [File not signed] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaspie.sys => ""="Driver"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2017-03-18 23:03 - 2017-03-18 23:01 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Intel\TXE Components\TCS\;C:\Program Files\Intel\TXE Components\TCS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files (x86)\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;C:\Program Files (x86)\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\churr\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\...\StartupApproved\StartupFolder: => "Enviar a OneNote.lnk"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (04/03/2019 07:27:19 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10900.175) TYPE: ERROR MODULE: DPTF TIME 4324582 ms

DPTF Build Version:  8.1.10900.175
DPTF Build Date:  Jul 24 2015 04:00:01
Source File:  ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
Executing Function:  DptfEvent
Message:  Received unexpected event
Framework Event:  DptfResume [3]

Error: (04/03/2019 06:08:07 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10900.175) TYPE: ERROR MODULE: DEFAULT FUNC: rsrc_file_extract_resource_file FILE: rsrc_file.c LINE: 384 TIME: 413512 ms

Error: Unable to create resource file.

Error: (04/03/2019 06:08:03 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Intel(R) Dynamic Platform and Thermal Framework : ESIF(8.1.10900.175) TYPE: ERROR MODULE: DPTF TIME 409146 ms

DPTF Build Version:  8.1.10900.175
DPTF Build Date:  Jul 24 2015 04:00:01
Source File:  ..\..\..\Sources\Manager\EsifApplicationInterface.cpp @ line 737
Executing Function:  DptfEvent
Message:  Received unexpected event
Framework Event:  DptfResume [3]

Error: (04/03/2019 12:42:14 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error al actualizar el estado de (unknown) a SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 12:42:14 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error al actualizar el estado de (unknown) a SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 12:42:04 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error al actualizar el estado de (unknown) a SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 12:42:04 PM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Error al actualizar el estado de (unknown) a SECURITY_PRODUCT_STATE_ON.

Error: (04/03/2019 12:42:04 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center no pudo validar al autor de la llamada con el error %1.


System errors:
=============
Error: (04/03/2019 07:44:39 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-D7SGER7)
Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 y APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 al usuario DESKTOP-D7SGER7\churr con SID (S-1-5-21-2809358218-3760247148-3921720809-1003) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

Error: (04/03/2019 07:44:38 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-D7SGER7)
Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 y APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 al usuario DESKTOP-D7SGER7\churr con SID (S-1-5-21-2809358218-3760247148-3921720809-1003) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

Error: (04/03/2019 07:38:23 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: El servicio aswbIDSAgent no se cerró correctamente después de recibir un control de aviso de apagado.

Error: (04/03/2019 07:38:14 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Error de DCOM "1115" al intentar iniciar el servicio SecurityHealthService con argumentos "No disponible" para ejecutar el servidor:
{2D15188C-D298-4E10-83B2-64666CCBEBBD}

Error: (04/03/2019 07:38:14 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Error de DCOM "1115" al intentar iniciar el servicio SecurityHealthService con argumentos "No disponible" para ejecutar el servidor:
{2D15188C-D298-4E10-83B2-64666CCBEBBD}

Error: (04/03/2019 07:38:14 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Error de DCOM "1115" al intentar iniciar el servicio SecurityHealthService con argumentos "No disponible" para ejecutar el servidor:
{2D15188C-D298-4E10-83B2-64666CCBEBBD}

Error: (04/03/2019 07:38:14 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Error de DCOM "1115" al intentar iniciar el servicio SecurityHealthService con argumentos "No disponible" para ejecutar el servidor:
{2D15188C-D298-4E10-83B2-64666CCBEBBD}

Error: (04/03/2019 07:38:14 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY)
Description: Error de DCOM "1115" al intentar iniciar el servicio SecurityHealthService con argumentos "No disponible" para ejecutar el servidor:
{2D15188C-D298-4E10-83B2-64666CCBEBBD}


CodeIntegrity:
===================================

Date: 2019-04-03 18:16:10.582
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:16:10.019
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:16:09.690
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:16:09.351
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:02:10.250
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:02:09.776
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:02:08.566
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2019-04-03 18:02:07.614
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Memory info =========================== 

Processor: Intel(R) Atom(TM) x5-Z8350 CPU @ 1.44GHz
Percentage of memory in use: 66%
Total physical RAM: 4019.92 MB
Available physical RAM: 1346.13 MB
Total Virtual: 4723.92 MB
Available Virtual: 1718.64 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:57.15 GB) (Free:20.1 GB) NTFS
Drive d: () (Removable) (Total:14.92 GB) (Free:9.94 GB) FAT32

\\?\Volume{a97495d8-936f-4536-80fd-2e5933b4f4c8}\ (Windows RE tools) (Fixed) (Total:0.98 GB) (Free:0.58 GB) NTFS
\\?\Volume{1e5469f9-d346-421f-aea7-2f9be19bff7c}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 1 (Protective MBR) (Size: 14.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== End of Addition.txt ============================

[churrimangui]

De nuevo gracias por tu ayuda. Quedo a la espera de respuesta. Un saludo.

[JavierHF]

Bien… y ahora sigue estos pasos, MUY Importante Realiza una copia de seguridad del registro :

• Para hacerlo descarga DelFix.exe(en tu escritorio).

• Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).

• Atención, ahora marca/selecciona únicamente la casilla Create registry backup, las demás casillas NO.

• Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

Con los demás programas cerrados ve a Inicio Ejecutar y escribe Notepad.exe.

• Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.

START
CREATERESTOREPOINT:
CLOSEPROCESSES:
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
Task: {1862DF82-A77A-4941-80C5-44DDC3578863} - System32\Tasks\Re-attempt Adobe® Flash Player Install => C:\ProgramData\Adobe Flash Player\Temp\install_flash_player_23_plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated) [File not signed] <==== ATTENTION
Task: {FF930D56-19A6-4023-9FE3-6E7CA1E27201} - System32\Tasks\Inno Setup® Software Update Scheduler => C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe (Korton Group B.V. -> Inno Setup®) [File not signed]
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
ProxyEnable: [HKLM] => Proxy is enabled.
ProxyEnable: [HKLM-x32] => Proxy is enabled.
ProxyServer: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyServer: [HKLM-x32] => http=127.0.0.1:6061;https=127.0.0.1:6061
AutoConfigURL: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyEnable: [S-1-5-21-2809358218-3760247148-3921720809-1003] => Proxy is enabled.
ProxyServer: [S-1-5-21-2809358218-3760247148-3921720809-1003] => http=127.0.0.1:6061;https=127.0.0.1:6061
ManualProxies: 1http=127.0.0.1:6061;https=127.0.0.1:6061
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
FF NetworkProxy: Mozilla\Firefox\Profiles\gideq8gx.default -> type", 0
R3 Nau88L24Rvp; C:\WINDOWS\system32\DRIVERS\Nau88L24Rvp.sys [128704 2017-01-19] (IgxTest -> )
2019-04-03 19:39 - 2018-01-04 11:05 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-04-03 12:17 - 2017-08-21 14:35 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-04-03 12:36 - 2019-04-03 12:36 - 000002544 _____ C:\WINDOWS\System32\Tasks\Inno Setup® Software Update Scheduler
2019-04-03 12:36 - 2019-04-03 12:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Guárdalo bajo el nombre de FIXLIST.TXT en el escritorio Esto es muy importante.

Nota Es importante que la herramienta FRST.exe(Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.

ATENCION!!! El siguiente Script de reparación fue hecho específicamente por un miembro del staff para este usuario, si tiene un problema similar por favor abra su propio tema para recibir ayuda personalizada. Usar Scripts de otros usuarios puede causar daños graves en su equipo

Y ahora inicia tu equipo desde el Modo Seguro – con funciones de Red, de Windows

• Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).

• Presionar el botón FIX y aguardar a que termine.

• La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).

Pegar el contenido de este fichero en tu próxima respuesta.

Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo, aquí tienes un ejemplo de como hacerlo :

Saludos.

[churrimangui]

Genial! Me pongo a ello este fin de semana y te comento qué tal. ¡Espero que funcione! Muchísimas gracias.

[churrimangui]

Aquí estoy de nuevo.

Me he puesto en un ratillo libre con tus instrucciones y me he encontrado con el primer problema y es que en “modo seguro con funciones de red” no tengo funciones de red, porque mi notebook funciona por wifi.

No quiero continuar con el FRST.exe sin estar segura de que no habrá problemas por la falta de funciones de red, que entiendo que son necesarias para el proceso.

Espero tu respuesta para saber si puedo continuar con tus instrucciones con normalidad o no.

Un saludo.

[JavierHF]

Hola.

En principio, y con que tengas ya creado el fichero FIXLIST.txt puedes entrar en modo seguro con red y sin ella, ya seria indistinto, siempre decimos que se haga con RED por si fuera necesario acceder a realizar alguna consulta.

Pero de todas maneras… una vez que hayas entrado en modo seguro con RED lo que debes intentar hacer, para ver si puedes tener conexión, es buscar la RED Wifi a la que TU te conectas habitualmente y pulsar en el botón de CONECTAR.

En muchos equipos que tienen o usan la conexión Wifi es habitual que ocurra eso que tu comentas, que al entrar en modo seguro con RED la conexión NO se establece de forma automática como si es habitual que ocurra entrando en modo normal.

Prueba y nos comentas, pero YA sabes que en caso de NO conseguir tener conexión desde el modo seguro con RED tampoco habría mayor problema en que sigas con los pasos.

Saludos.

[churrimangui]

Hola, JavierHF.

Pues parece que se ha solucionado el problema y no puedo estar más agradecida. Olé y olé.

Pero tengo dos preguntas: ¿si me volviera a pasar, puedo usar esta solución tal cual o tendría que volver a consultar? y ¿tienes idea de qué puede haber provocado este problema? Muchas gracias de nuevo.

Fix result of Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Ran by churr (07-04-2019 17:37:29) Run:1
Running from C:\Users\churr\Desktop
Loaded Profiles: churr (Available Profiles: churr)
Boot Mode: Safe Mode (with Networking)
==============================================

fixlist content:
*****************
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> No File
Task: {1862DF82-A77A-4941-80C5-44DDC3578863} - System32\Tasks\Re-attempt Adobe� Flash Player Install => C:\ProgramData\Adobe Flash Player\Temp\install_flash_player_23_plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated) [File not signed] <==== ATTENTION
Task: {FF930D56-19A6-4023-9FE3-6E7CA1E27201} - System32\Tasks\Inno Setup� Software Update Scheduler => C:\Program Files (x86)\Common Files\Inno Setup\Updater\InnoUPD.exe (Korton Group B.V. -> Inno Setup�) [File not signed]
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATTENTION (Restriction - ProxySettings)
ProxyEnable: [HKLM] => Proxy is enabled.
ProxyEnable: [HKLM-x32] => Proxy is enabled.
ProxyServer: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyServer: [HKLM-x32] => http=127.0.0.1:6061;https=127.0.0.1:6061
AutoConfigURL: [HKLM] => http=127.0.0.1:6061;https=127.0.0.1:6061
ProxyEnable: [S-1-5-21-2809358218-3760247148-3921720809-1003] => Proxy is enabled.
ProxyServer: [S-1-5-21-2809358218-3760247148-3921720809-1003] => http=127.0.0.1:6061;https=127.0.0.1:6061
ManualProxies: 1http=127.0.0.1:6061;https=127.0.0.1:6061
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
SearchScopes: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2809358218-3760247148-3921720809-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
FF NetworkProxy: Mozilla\Firefox\Profiles\gideq8gx.default -> type", 0
R3 Nau88L24Rvp; C:\WINDOWS\system32\DRIVERS\Nau88L24Rvp.sys [128704 2017-01-19] (IgxTest -> )
2019-04-03 19:39 - 2018-01-04 11:05 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-04-03 12:17 - 2017-08-21 14:35 - 000000200 _____ C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat
2019-04-03 12:36 - 2019-04-03 12:36 - 000002544 _____ C:\WINDOWS\System32\Tasks\Inno Setup� Software Update Scheduler
2019-04-03 12:36 - 2019-04-03 12:36 - 000000000 ____D C:\WINDOWS\System32\Tasks\NCH Software
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************

Error: Restore point can only be created in normal mode.
Processes closed successfully.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\CLSID\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => removed successfully
HKLM\Software\Classes\CLSID\{474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1862DF82-A77A-4941-80C5-44DDC3578863}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1862DF82-A77A-4941-80C5-44DDC3578863}" => removed successfully
"C:\WINDOWS\System32\Tasks\Re-attempt Adobe� Flash Player Install" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Re-attempt Adobe� Flash Player Install" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FF930D56-19A6-4023-9FE3-6E7CA1E27201}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF930D56-19A6-4023-9FE3-6E7CA1E27201}" => removed successfully
"C:\WINDOWS\System32\Tasks\Inno Setup� Software Update Scheduler" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Inno Setup� Software Update Scheduler" => not found
"HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser" => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable" => removed successfully
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable" => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => not found
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL" => not found
"HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable" => removed successfully
"HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\" => removed successfully
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => removed successfully
"HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
Firefox Proxy settings were reset.
HKLM\System\CurrentControlSet\Services\Nau88L24Rvp => removed successfully
Nau88L24Rvp => service removed successfully
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\WINDOWS\system32\{EC94D02F-D200-4428-9531-05AF7F9799CB}.bat => moved successfully
"C:\WINDOWS\System32\Tasks\Inno Setup� Software Update Scheduler" => not found
C:\WINDOWS\System32\Tasks\NCH Software => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= RemoveProxy: =========

"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-2809358218-3760247148-3921720809-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully


========= End of RemoveProxy: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= End of CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

Error en la operaci¢n. No hay ning£n adaptador permitido para 
esta operaci¢n.

========= End of CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= End of CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

Unable to connect to BITS - 0x8007043c
El servicio no puede iniciarse en modo a prueba de errores



========= End of CMD: =========


========= netsh advfirewall reset =========

Aceptar


========= End of CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar


========= End of CMD: =========


========= netsh int ipv4 reset =========

Reenv¡o de compartimiento se restableci¢ correctamente.
Compartimiento se restableci¢ correctamente.
Protocolo de control se restableci¢ correctamente.
Solicitud de secuencia eco se restableci¢ correctamente.
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente.
Direcciones de multidifusi¢n se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Posible se restableci¢ correctamente.
Directiva de prefijo se restableci¢ correctamente.
Vecino de proxy se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Prefijo de sitio se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Patr¢n de reactivaci¢n se restableci¢ correctamente.
Resolver vecino se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= End of CMD: =========


========= netsh int ipv6 reset =========

Reenv¡o de compartimiento se restableci¢ correctamente.
Compartimiento se restableci¢ correctamente.
Protocolo de control se restableci¢ correctamente.
Solicitud de secuencia eco se restableci¢ correctamente.
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente.
Direcciones de multidifusi¢n se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Posible se restableci¢ correctamente.
Directiva de prefijo se restableci¢ correctamente.
Vecino de proxy se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Prefijo de sitio se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Patr¢n de reactivaci¢n se restableci¢ correctamente.
Resolver vecino se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= End of CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 7364608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 34008035 B
Java, Flash, Steam htmlcache => 506 B
Windows/system/drivers => 6598643 B
Edge => 3986790 B
Chrome => 0 B
Firefox => 889111071 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 11946 B
LocalService => 0 B
NetworkService => 916 B
NetworkService => 0 B
churr => 2770711 B

RecycleBin => 0 B
EmptyTemp: => 900.1 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 17:40:42 ====

[JavierHF]

Hola.

@churrimangui

Pero tengo dos preguntas: ¿si me volviera a pasar, puedo usar esta solución tal cual o tendría que volver a consultar?

Si te vuelve a ocurrir algo similar tendrías que volver a consultarnos, cada caso u ocasión sera diferente, no suelen existir dos casos iguales NUNCA ni siquiera siendo el mismo equipo y cada SCRIPT que realizamos es especifico al informe que nos habéis puesto de la situación concreta de vuestro equipo en cada momento.

@churrimangui

y ¿tienes idea de qué puede haber provocado este problema?

Pues idea…exacta NO, pero lo que suele ocurrir suele ser siempre lo mismo, algún programa que se ha instalado(pensando que era fiable) y que venia acompañado de un “extra” que ha provocado esa situación.

Nos alegra ver que ya está el problema inicial completamente arreglado, ahora solo queda eliminar las herramientas usadas.

Para hacerlo descarga DelFix.exe en tu escritorio.

• Doble clic para ejecutarlo. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador -).

• Marca todas las casillas, y pulsas en Run

Se abrirá el informe (DelFix.txt), puedes cerrarlo.

---

Para cualquier otro problema, no dudes en volver a postear., ya sabes dónde estamos.

Tema Solucionado.

Te recomendamos mantenerte informado en InfoSpyware Blog y siguiendo también nuestras vías de difusión E-Mail - Facebook - Twitter y Google+.

Saludos, Javier.