No puedo instalar MALWAREBYTES ANTIMALWARE Free

Buenos dias y perdona por mi desconocimiento. Efectivamente, en vez de code puse MODE, error de novato. Si me lo hubieras dicho te lo hubiera vuelto a enviar bien.

Muchas gracias, eres muy amable.

1 me gusta

Saludos de nuevo.

FRST ha trabajado correctamente. Pero como sigues sin poder instalar MBAM, vamos a ver si con Windows Repair lo podemos solucionar.

1.- Descarga y descomprime Windows Repair Portable en cualquier lugar de fácil acceso.Tweaking.com - Windows Repair Portable

2.- Inicia en modo seguro: Iniciar el PC en modo seguro

3.- Abre la carpeta de Windows Repair e inicia Repair_Windows.exe. Espera a que inicie y ve a la pestaña Repairs-Main y selecciona la opción Open Repairs.

Se abrirá la ventana de reparaciones. En esta dirígete al listado de la parte izquierda y marca las siguientes casillas:

  • 01 - Reset Registry Permissions
  • 02 - Reset File Permissions
  • 03 - Reset Service Permissions
  • 04 - Register SystemFiles
  • 10 - Remove Policies set by Infections
  • 14 - Remove Temp Files
  • 18 - Repair Volume Shadow Copy Service
  • 25 - Restore Important Windows Services
  • 26 - Set Windows Services to default Startup

Ya con esto seleccionado das en Start Repairs. Espera pacientemente a que termine. Una vez que lo haga reinicia en modo normal y comprueba si ya puedes instalar MBAM.

Saludos.

Buenos días Pablo: he hecho lo que me has indicado y después de reiniciado el ordenador he intentado instalar el MBAM. Sigue dando el mismo error “You do not have sufficient permissions (either disk or registry) to install Malwarebytes”

Muchas gracias por todo, pero parece que se resiste.

Un saludo

1 me gusta

Saludos de nuevo @JEVEMO

Tenemos que sacar un nuevo reporte de FRST, para ver si pasamos algo por alto y, sobre todo, si algo ha cambiado en tu sistema. Para hacerlo, vuelve a la respuesta 17, en la que te di las instrucciones:

Repite el proceso entero, sin olvidar desactivar el antivirus.

Saludos.

Buenos dias Pablo: te envío por partes los repostes de FRST.txt y de ADDITION.txt. Muchas gracias por todo.

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x86) Versión: 19-07-2021 01
Ejecutado por Ernesto (administrador) sobre ERNESTO-AHTEC (Generic Products) (22-07-2021 10:59:52)
Ejecutado desde C:\Users\Ernesto\Desktop
Perfiles cargados: Ernesto
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Idioma: Español (España, internacional)
Navegador predeterminado: FF
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

() [Archivo no firmado] C:\Windows\runSW.exe
(Adobe Inc. -> Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat DC\Acrobat\acrotray.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
(aSwIt S.r.l.) [Archivo no firmado] C:\Program Files\Printfil\Printfil.exe
(AVG Netherlands B.V. -> TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TUAutoReactivator32.exe
(AVG Netherlands B.V. -> TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesApp32.exe
(AVG Netherlands B.V. -> TuneUp Software) C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe
(CobianSoft, Luis Cobian) [Archivo no firmado] C:\Program Files\Cobian Backup 11\cbVSCService11.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files\Dropbox\Client\126.4.4618\QtWebEngineProcess.exe <3>
(Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files\Seguridad Total PC\fs_ui_32.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files\Seguridad Total PC\fshoster32.exe <3>
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files\Seguridad Total PC\ui\fsmainui.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files\Seguridad Total PC\Ultralight\http\1626348810\nif2_ols_ca.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fsorsp.exe
(F-Secure Corporation -> F-Secure Corporation) C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fsulprothoster.exe
(geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2>
(Google Inc -> Google Inc.) C:\Program Files\Google\Update\GoogleUpdate.exe <2>
(Luis Cobian, CobianSoft) [Archivo no firmado] C:\Program Files\Cobian Backup 11\cbInterface.exe
(Luis Cobian, CobianSoft) [Archivo no firmado] C:\Program Files\Cobian Backup 11\Cobian.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <6>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe <2>
(Realtek) [Archivo no firmado] C:\Windows\SwUSB.exe
(Samsung Electronics CO., LTD. -> ) C:\Windows\System32\SecUPDUtilSvc.exe
(Solid Documents -> Solid Documents, LLC) C:\Windows\Installer\MSIA4CB.tmp
(WASEO) [Archivo no firmado] C:\Program Files\ClickTray Calendar\ClickTray.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)
HKLM\...\Run: [Dropbox] => C:\Program Files\Dropbox\Client\Dropbox.exe [8107808 2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5296864 2021-06-27] (Adobe Inc. -> Adobe Systems Inc.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM\...\Run: [doPDF 11 doPdf_Softland Tray] => C:\Program Files\Softland\novaPDF 11\Driver\Tray.exe [146752 2021-06-23] (Softland SRL -> )
HKU\S-1-5-21-408995212-1637284617-1868651882-1000\...\Run: [Cobian Backup 11] => C:\Program Files\Cobian Backup 11\Cobian.exe [720896 2012-12-06] (Luis Cobian, CobianSoft) [Archivo no firmado]
HKU\S-1-5-21-408995212-1637284617-1868651882-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-408995212-1637284617-1868651882-1000\...\Run: [Reset-COMO ADMINISTRADOR] => C:\Users\Ernesto\Desktop\Reset-COMO ADMINISTRADOR\Reset-COMO ADMINISTRADOR.exe [66048 2021-04-25] () [Archivo no firmado]
HKU\S-1-5-21-408995212-1637284617-1868651882-1000\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [5550304 2021-06-27] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-18\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [894344 2013-02-05] (Autodesk, Inc -> Autodesk, Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-08-10] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows NT x86\Print Processors\LMABDC4C: C:\Windows\System32\spool\prtprocs\W32X86\LMABDC4C.DLL [59392 2007-09-27] (Lexmark International Inc.) [Archivo no firmado]
HKLM\...\Windows NT x86\Print Processors\SSP2MPC: C:\Windows\System32\spool\prtprocs\W32X86\ssp2mpc.dll [19968 2008-01-11] (Windows (R) 2000 DDK provider) [Archivo no firmado]
HKLM\...\Windows NT x86\Print Processors\us003PC: C:\Windows\System32\spool\prtprocs\W32X86\us003pc.dll [29696 2015-03-12] (Windows (R) Codename Longhorn DDK provider) [Archivo no firmado]
HKLM\...\Windows NT x86\Print Processors\usp02PC: C:\Windows\System32\spool\prtprocs\W32X86\usp02pc.dll [29696 2014-02-24] (Windows (R) Codename Longhorn DDK provider) [Archivo no firmado]
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\SYSTEM32\AdobePDF.dll [59016 2021-05-28] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\novaPDF 11 Port Monitor: C:\Windows\SYSTEM32\novamn11.dll [16384 2021-06-23] (Softland) [Archivo no firmado]
HKLM\...\Print\Monitors\Solid PDF Port Monitor: C:\Windows\SYSTEM32\solidlocalmon.dll [27392 2009-09-10] (Solid Documents -> )
HKLM\...\Print\Monitors\SSP2M Langmon: C:\Windows\SYSTEM32\ssp2ml3.dll [22723 2008-01-11] () [Archivo no firmado]
HKLM\...\Print\Monitors\us003 Langmon: C:\Windows\SYSTEM32\us003lm.dll [18432 2015-03-12] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\usp02 Langmon: C:\Windows\SYSTEM32\usp02l.dll [25600 2014-04-16] () [Archivo no firmado]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\91.0.4472.164\Installer\chrmstp.exe [2021-07-21] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2012-10-17] (Broadcom Corporation -> Broadcom Corporation.)
HKLM\Software\...\Authentication\Credential Providers: [{D28973E5-8630-41af-8831-50A15FEB396B}] -> C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll [2012-10-17] (Broadcom Corporation -> Broadcom Corporation.)
Lsa: [Notification Packages] scecli C:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Printfil.lnk [2018-07-13]
ShortcutTarget: Printfil.lnk -> C:\Program Files\Printfil\Printfil.exe (aSwIt S.r.l.) [Archivo no firmado]
Startup: C:\Users\Ernesto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ClickTray Calendar.lnk [2016-08-10]
ShortcutTarget: ClickTray Calendar.lnk -> C:\Program Files\ClickTray Calendar\ClickTray.exe (WASEO) [Archivo no firmado]
Startup: C:\Users\Ernesto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2021-06-18]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Ernesto\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)
Startup: C:\Users\Ernesto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Reset-COMO ADMINISTRADOR.exe [2021-06-13] () [Archivo no firmado]
Policies: C:\ProgramData\NTUSER.pol: Restricción <==== ATENCIÓN
Policies: C:\Users\Ernesto\NTUSER.pol: Restricción <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {00AA0A50-ED48-4EEE-84D3-C20C4E1F17E1} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (For User Ernesto) => C:\Program Files\Restore Point Creator\Restore Point Creator.exe [1165312 2018-09-10] () [Archivo no firmado]
Task: {02D09FCC-0A7E-4ACC-82F0-DEB956327AA5} - System32\Tasks\doPDF 11 Update => C:\Program Files\Softland\novaPDF 11\Driver\UpdateApplication.exe [99136 2021-06-23] (Softland SRL -> )
Task: {09A2DE53-7A61-4E0E-953D-9CF56AE33200} - System32\Tasks\{4CB031CE-6426-4B2C-8AAA-15E591FEDB43} => C:\Windows\system32\pcalua.exe -a C:\Users\Ernesto\Downloads\jre-8u111-windows-i586-iftw.exe -d C:\Users\Ernesto\Downloads
Task: {10B08F34-5AA1-4F4D-989B-8B5AC18C4A6C} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin\InstallManagerApp.exe [9287368 2015-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {165BFCF6-9FC8-4D22-9905-C6A91B6E1280} - System32\Tasks\{4A83D9B1-0242-40E0-85D1-653A1D90B490} => C:\Windows\system32\pcalua.exe -a G:\SanDiskSecureAccessV3_win.exe -d G:\
Task: {1F5DC024-3A72-4411-AF38-78B7D4E88DC8} - System32\Tasks\klcp_update => C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2021-05-20] () [Archivo no firmado]
Task: {406EA970-AE1C-4604-9343-3CF3FFEF0868} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {43E070AB-6BC0-476B-A1CE-F23476159FC9} - System32\Tasks\Scheduled scanning task => C:\Program Files\Seguridad Total PC\fsscan.exe [283480 2021-05-19] (F-Secure Corporation -> F-Secure Corporation)
Task: {4BCEF97F-F61A-4F69-99EC-2CEC55FB41BF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [625080 2021-07-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {4DB44A47-62D5-4D1E-96A9-0F920514506E} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Delete old Restore Points) (For User Ernesto) => C:\Program Files\Restore Point Creator\Restore Point Creator.exe [1165312 2018-09-10] () [Archivo no firmado]
Task: {515008D2-2DB6-4327-823C-3FB09E3BC55D} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Create Custom Restore Point) (For User Ernesto) => C:\Program Files\Restore Point Creator\Restore Point Creator.exe [1165312 2018-09-10] () [Archivo no firmado]
Task: {548A5093-34D3-4C9E-B6A0-FB759E4906AB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-06-17] (Piriform Software Ltd -> Piriform)
Task: {5A970F02-D43E-4475-84E8-D0643308F366} - System32\Tasks\Games\UpdateCheck_S-1-5-21-408995212-1637284617-1868651882-1000 => {CA22F5B1-E06F-4A2B-94FC-21E87FE53781} C:\Windows\System32\gameux.dll [2576384 2012-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {6243DD6F-1C26-4577-8680-C0681955AA3A} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-408995212-1637284617-1868651882-1000 => C:\Users\Ernesto\AppData\Local\MEGAsync\MEGAupdater.exe [1303800 2020-12-06] (Mega Limited -> Mega Limited)
Task: {63512828-1639-4A90-B7A8-936AA138254B} - System32\Tasks\{105DE7F3-C45F-4440-B782-764154774E08} => C:\Windows\system32\pcalua.exe -a C:\Users\Ernesto\Downloads\jxpiinstall.exe -d C:\Users\Ernesto\Downloads
Task: {6846C5D0-B902-4C19-B859-5C704A8579F9} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2017-08-05] (Google Inc -> Google Inc.)
Task: {6950B5EF-1A00-4627-A2DF-2EB2887EE7E1} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Keep X Number of Restore Points) (For User Ernesto) => C:\Program Files\Restore Point Creator\Restore Point Creator.exe [1165312 2018-09-10] () [Archivo no firmado]
Task: {719FD850-81E4-4213-A30E-580414BDC11A} - System32\Tasks\{F801D3AF-D07A-427A-975E-8575B3A940CA} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\SUPERAntiSpyware\Uninstall.exe" -d "C:\Program Files\SUPERAntiSpyware"
Task: {79A6936B-E790-478C-B6B9-1006B8552986} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2020-03-22] (Dropbox, Inc -> Dropbox, Inc.)
Task: {807F4B72-38D7-4A45-8D79-864215F8C127} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
Task: {862BC026-0E17-43B3-AF7C-4F2FAA7A4991} - System32\Tasks\Apple Diagnostics => C:\Program Files\Common Files\Apple\Internet Services\EReporter.exe [67896 2020-09-08] (Apple Inc. -> Apple Inc.)
Task: {97E6C446-41F8-4B4F-B1B3-AE62677A1B0D} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3325520 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {9B5061C8-19CC-4F81-B803-E6AB10E05211} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [28880512 2021-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {9C25955E-B9C9-4E94-9A68-A18CEAC3D1CB} - System32\Tasks\{95E3264D-EC94-4B5D-9535-A8A278BB333A} => C:\Windows\system32\pcalua.exe -a C:\Users\Ernesto\Downloads\4200fvst8611a_xpen\SetupSG.exe -d C:\Users\Ernesto\Downloads\4200fvst8611a_xpen
Task: {A60F3ED0-D409-4882-A470-1032F14B6AEF} - System32\Tasks\{C89416CC-0A25-484F-B255-D1045DF9053D} => C:\Windows\system32\pcalua.exe -a C:\Users\Ernesto\Downloads\4200fvst8611a_xpes\SetupSG.exe -d C:\Users\Ernesto\Downloads\4200fvst8611a_xpes
Task: {A813EDFA-E4B9-4909-978C-12B09B8E93B7} - System32\Tasks\F-Secure\F-Secure Hotfix => C:\Program Files\Seguridad Total PC\fs_hotfix.exe [338264 2021-05-19] (F-Secure Corporation -> F-Secure Corporation)
Task: {AFD69807-6F84-4B87-8C85-690B303B5329} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2020-03-22] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B2A53466-5FF0-4AA8-B0F4-E8D1CCB51814} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe [1725440 2018-02-11] () [Archivo no firmado]
Task: {B2E9E3CD-4456-4FDD-8F1B-02E521424B37} - System32\Tasks\{C6A2472E-C73A-4F0C-AF0A-D1AC8C22CD94} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RevoAppBar.exe" -d C:\Windows\system32 -c /in "I:\D en PORTATIL 19-2-2017\DRIVERS PORTATIL\DRIVERS IMPRESORA-SCANER"
Task: {CC76B646-FF38-48F9-A2B8-45FDA5EAD127} - System32\Tasks\doPDF 11 Telemetry => C:\Program Files\Softland\novaPDF 11\Driver\GoogleAnalytics.exe [50496 2021-06-23] (Softland SRL -> )
Task: {CEAE3A0F-2888-4714-8BC7-D55CEBB3DB24} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2017-08-05] (Google Inc -> Google Inc.)
Task: {D6620D9B-527D-43A1-977B-270BB0E3373A} - System32\Tasks\{9D4597AF-0F99-4CC7-B3C2-DDF0CF9778D8} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Kodi\kodi.exe" -d "C:\Program Files\Kodi"
Task: {E4B86A07-00AC-4304-A87F-681AE63425D5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {EE09B938-1AAD-4E88-81CE-82D8D1F7FAEA} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Create Restore Point) (For User Ernesto) => C:\Program Files\Restore Point Creator\Restore Point Creator.exe [1165312 2018-09-10] () [Archivo no firmado]
Task: {FE658C1E-0A94-483B-9549-59C425813AC9} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files\TuneUp Utilities 2014\OneClick.exe [460088 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\Scheduled scanning task.job => C:\Program Files\Seguridad Total PC\fsscan.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo 
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo 
Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{269AEBB5-DD8F-4D88-B869-120203342C86}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{34DF5680-C07D-4DDE-8076-915CC4D4EF9C}: [NameServer] 10.64.0.1
Tcpip\..\Interfaces\{8ACE8CFF-6022-4783-9915-191C4743FF40}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8EA5CA60-6B4C-4BA5-98CF-5EF9A705C7AA}: [DhcpNameServer] 172.20.10.1

FireFox:
========
FF DefaultProfile: biiyu2og.default
FF ProfilePath: C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\biiyu2og.default [2021-07-18]
FF user.js: detected! => C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\biiyu2og.default\user.js [2021-07-18]
FF Extension: (IBM Security Rapport) - C:\Users\Ernesto\AppData\Roaming\Mozilla\Extensions\{ec8030f7-c20a-464f-9b0e-13a3a9e97384}\[email protected] [2019-05-26] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]
FF ProfilePath: C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718 [2021-07-22]
FF user.js: detected! => C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718\user.js [2021-07-18]
FF DownloadDir: C:\Users\Ernesto\Downloads
FF Homepage: Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718 -> hxxp://www.alaup.com/
FF Notifications: Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718 -> hxxps://web.whatsapp.com; hxxps://www.larazon.es; hxxps://www.rebajasde.es; hxxps://mx1l.rateneveryap.club; hxxps://www.micolet.com; hxxps://www.actualidadiphone.com; hxxps://www.milanuncios.com; hxxps://www.iberdrola.es; hxxps://es.savefrom.net; hxxps://www.leroymerlin.es; hxxps://www.mitele.es; hxxps://www.noticiascyl.com; hxxps://www.elnortedecastilla.es; hxxps://www.artistapirata.com; hxxps://www.evobanco.com; hxxps://es.aliexpress.com; hxxps://mail.google.com; hxxps://www.elindependiente.com; hxxps://forospyware.com
FF Extension: (Facebook Container) - C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718\Extensions\@contain-facebook.xpi [2021-05-07]
FF Extension: (SaveFrom.net helper) - C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718\Extensions\[email protected] [2021-07-01]
FF Extension: (Browsing Protection by F-Secure) - C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718\Extensions\[email protected] [2021-07-21] [UpdateUrl:hxxps://download.sp.f-secure.com/online-safety/updates.json]
FF Extension: (Traducir páginas web) - C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718\Extensions\{036a55b4-5e72-4d05-a06c-cba2dfcc134a}.xpi [2021-07-12]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\Ernesto\AppData\Roaming\Mozilla\Firefox\Profiles\0glm6w65.default-release-1587209563718\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2021-07-09]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-04-20]
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-05-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-05-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-06-27] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-01-23] (Adobe Systems Incorporated -> Adobe Systems)

Chrome: 
=======
CHR Profile: C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default [2021-07-18]
CHR Extension: (Presentaciones) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Documentos) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-11-03]
CHR Extension: (YouTube) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-08-05]
CHR Extension: (Adobe Acrobat) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-27]
CHR Extension: (Hojas de cálculo) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-07-05]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-07-05]
CHR Extension: (Browsing Protection by F-Secure) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmjjnhpacphpjmnnlnccpfmhkcloaade [2020-11-03]
CHR Extension: (Ace Script) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\mjbepbhonbojpoaenhckjocchgfiaofo [2019-02-12]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-27]
CHR Extension: (Gmail) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-11-03]
CHR Extension: (Chrome Media Router) - C:\Users\Ernesto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-05-03]
CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM\...\Chrome\Extension: [jmjjnhpacphpjmnnlnccpfmhkcloaade]
CHR HKLM\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
CHR HKU\S-1-5-21-408995212-1637284617-1868651882-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S4 AdobeARMservice; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S4 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-03-27] (Microsoft Windows Hardware Compatibility Publisher -> LSI Corporation)
R2 AGMService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGMService.exe [3673680 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe [3406416 2020-05-05] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [217088 2016-09-21] (Microsoft Windows Hardware Compatibility Publisher -> AMD)
S4 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [Archivo no firmado]
R2 cbVSCService11; C:\Program Files\Cobian Backup 11\cbVSCService11.exe [67584 2012-12-05] (CobianSoft, Luis Cobian) [Archivo no firmado]
S2 dbupdate; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2020-03-22] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files\Dropbox\Update\DropboxUpdate.exe [143144 2020-03-22] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [37104 2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2649064 2018-05-06] (Flexera Software LLC -> Flexera Software LLC)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2019-07-09] (Mixbyte Inc -> Freemake)
R2 fshoster; C:\Program Files\Seguridad Total PC\fshoster32.exe [238936 2021-05-19] (F-Secure Corporation -> F-Secure Corporation)
R2 fsnethoster; C:\Program Files\Seguridad Total PC\fshoster32.exe [238936 2021-05-19] (F-Secure Corporation -> F-Secure Corporation)
S2 fsulhoster; C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fshoster32.exe [482544 2021-07-08] (F-Secure Corporation -> F-Secure Corporation)
S2 fsulnethoster; C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fshoster32.exe [482544 2021-07-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulorsp; C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fsorsp.exe [87704 2021-07-08] (F-Secure Corporation -> F-Secure Corporation)
R2 fsulprothoster; C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fsulprothoster.exe [482544 2021-07-08] (F-Secure Corporation -> F-Secure Corporation)
S4 NovaPdf11Server; C:\Program Files\Softland\novaPDF 11\Server\novapdfs.exe [51520 2021-06-23] (Softland SRL -> Microsoft)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)
S4 RealtekWlanU; C:\Program Files\Realtek\USB Wireless LAN Utility\RtlService.exe [36864 2010-04-16] (Realtek) [Archivo no firmado]
S4 RTLDHCPService; C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [261848 2013-11-12] (Realtek Semiconductor Corp -> Realtek)
R2 RunSwUSB; C:\Windows\runSW.exe [36864 2014-04-15] () [Archivo no firmado]
R2 SamsungUPDUtilSvc; C:\Windows\system32\SecUPDUtilSvc.exe [118576 2014-11-26] (Samsung Electronics CO., LTD. -> )
R2 SCPDFReadSpool; C:\Windows\Installer\MSIA4CB.tmp [189696 2016-08-12] (Solid Documents -> Solid Documents, LLC)
S4 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [12871464 2021-04-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesService32.exe [1781048 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S4 Unchecky; C:\Program Files\Unchecky\bin\unchecky_svc.exe [297240 2018-04-10] (Reason Software Company Inc. -> Reason Software Company Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S4 WsAppService; C:\Program Files\Wondershare\WAF\2.3.1.204\WsAppService.exe [437392 2016-11-16] (Wondershare software CO., LIMITED -> Wondershare)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R3 AgereSoftModem; C:\Windows\System32\DRIVERS\AGRSM.sys [1202560 2008-02-29] (Microsoft Windows Hardware Compatibility Publisher -> Agere Systems)
R3 amdkmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [10070016 2016-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdkmdap; C:\Windows\System32\DRIVERS\atikmpag.sys [290304 2016-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
S3 atikmdag; C:\Windows\System32\DRIVERS\atikmdag.sys [10070016 2016-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 Btcsrusb; C:\Windows\System32\Drivers\btcusb.sys [47504 2020-12-07] (IVT CORPORATION -> IVT Corporation.)
S3 btwampfl; C:\Windows\System32\drivers\btwampfl.sys [507704 2012-07-03] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwaudio; C:\Windows\System32\drivers\btwaudio.sys [152400 2012-05-01] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwavdt; C:\Windows\System32\DRIVERS\btwavdt.sys [175144 2012-03-06] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwl2cap; C:\Windows\System32\DRIVERS\btwl2cap.sys [33832 2011-09-17] (Broadcom Corporation -> Broadcom Corporation.)
S3 btwrchid; C:\Windows\System32\DRIVERS\btwrchid.sys [18728 2012-03-06] (Broadcom Corporation -> Broadcom Corporation.)
S2 DgiVecp; C:\Windows\system32\Drivers\DgiVecp.sys [38400 2009-06-09] (Samsung Electronics Co., Ltd.) [Archivo no firmado]
S3 EMVSCARD; C:\Windows\System32\Drivers\EMVSCARD.sys [20736 2006-12-19] (Microsoft Windows Hardware Compatibility Publisher -> USB Smart Card Reader)
R3 F-Secure Gatekeeper; C:\Program Files\Seguridad Total PC\Ultralight\ulcore\1625740549\fsulgk.sys [249872 2021-07-08] (Microsoft Windows Hardware Compatibility Publisher -> F-Secure Corporation)
R0 fsbts; C:\Windows\System32\drivers\fsbts.sys [42264 2020-12-02] (F-Secure Corporation -> F-Secure Corporation)
R2 fsnif2; C:\Program Files\Seguridad Total PC\Ultralight\nif2\1623937389\nif2s32.sys [118272 2021-06-18] (Microsoft Windows Hardware Compatibility Publisher -> F-Secure Corporation)
S3 GeneStor; C:\Windows\System32\DRIVERS\GeneStor.sys [56832 2020-12-07] (Microsoft Windows Hardware Compatibility Publisher -> GenesysLogic)
S3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-19] (Microsoft Windows Hardware Compatibility Publisher -> Siliten)
S3 kinonivd; C:\Windows\System32\DRIVERS\kinonivd.sys [231624 2019-02-01] (Kinoni Oy -> Windows (R) Win 7 DDK provider)
S3 KINONI_Wave; C:\Windows\System32\drivers\kinonivad.sys [18432 2019-01-04] (Kinoni Oy -> Windows (R) Win 7 DDK provider)
S3 KMWDFILTER; C:\Windows\System32\DRIVERS\KMWDFILTER.sys [17408 2008-10-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl.sys [18944 2016-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R3 NETwLv32; C:\Windows\System32\DRIVERS\NETwLv32.sys [6639616 2010-10-06] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
S3 pccsmcfd; C:\Windows\System32\DRIVERS\pccsmcfd.sys [19072 2012-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Nokia)
R2 rimmptsk; C:\Windows\System32\DRIVERS\rimmptsk.sys [48128 2016-09-21] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 rimsptsk; C:\Windows\System32\DRIVERS\rimsptsk.sys [44544 2020-12-07] (Microsoft Windows Hardware Compatibility Publisher -> REDC)
R2 risdptsk; C:\Windows\System32\DRIVERS\risdptsk.sys [46592 2015-10-10] (REDC) [Archivo no firmado]
R3 ROCKEYNT; C:\Windows\System32\DRIVERS\Rockey4.sys [26976 2018-05-06] (Feitian Technologies Co., Ltd. -> Feitian Technologies Co., Ltd.)
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2589912 2000-01-01] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
S2 Sentinel; C:\Windows\System32\Drivers\SENTINEL.SYS [64512 1997-05-30] () [Archivo no firmado]
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2008-01-10] (Samsung Electronics) [Archivo no firmado]
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2014\TuneUpUtilitiesDriver32.sys [30632 2015-06-04] (AVG Technologies CZ, s.r.o. -> TuneUp Software)
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2016-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2021-07-22 10:59 - 2021-07-22 11:03 - 000036470 _____ C:\Users\Ernesto\Desktop\FRST.txt
2021-07-22 10:58 - 2021-07-22 10:58 - 000000000 ____D C:\Users\Ernesto\Desktop\FRST-OlderVersion
2021-07-22 10:56 - 2021-07-22 10:58 - 002012672 _____ (Farbar) C:\Users\Ernesto\Desktop\FRST.exe
2021-07-21 12:23 - 2021-07-21 12:50 - 002012672 _____ (Farbar) C:\Users\Ernesto\Downloads\FRSTEnglish.exe
2021-07-20 13:46 - 2021-07-20 13:46 - 000000207 _____ C:\Windows\tweaking.com-regbackup-ERNESTO-AHTEC-Windows-7-Ultimate-(32-bit).dat
2021-07-20 13:46 - 2021-07-20 13:46 - 000000000 ____D C:\RegBackup
2021-07-20 11:37 - 2021-07-20 11:37 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2021-07-18 13:17 - 2021-07-18 13:17 - 000000008 __RSH C:\Users\Ernesto\ntuser.pol
2021-07-18 13:17 - 2021-07-18 13:17 - 000000008 __RSH C:\ProgramData\ntuser.pol
2021-07-17 10:31 - 2021-07-17 10:31 - 000000000 _____ C:\Users\Ernesto\filename.txt
2021-07-15 11:32 - 2021-07-15 11:32 - 000250930 ____N C:\Users\Ernesto\Desktop\[email protected] Permanente.pdf
2021-07-14 23:25 - 2021-07-14 23:25 - 000000000 ____D C:\ProgramData\SystemAcCrux
2021-07-14 22:26 - 2021-07-14 22:26 - 000000001 _____ C:\Users\Ernesto\AppData\Local\llftool.4.25.agreement
2021-07-11 16:19 - 2021-07-12 06:15 - 000000000 ____D C:\KRD2018_Data
2021-07-09 10:31 - 2021-07-09 10:33 - 000000000 ____D C:\Users\Ernesto\AppData\Roaming\QTranslate
2021-07-09 10:31 - 2021-07-09 10:31 - 000000989 ____N C:\Users\Ernesto\Desktop\QTranslate.lnk
2021-07-09 10:31 - 2021-07-09 10:31 - 000000000 ____D C:\Users\Ernesto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTranslate
2021-07-09 10:31 - 2021-07-09 10:31 - 000000000 ____D C:\Program Files\QTranslate
2021-07-08 20:25 - 2021-07-08 20:25 - 000000734 ____N C:\Users\Ernesto\Desktop\ANUNCIOS - Acceso directo.lnk
2021-07-08 10:49 - 2021-07-08 10:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2021-07-07 09:38 - 2021-07-13 10:46 - 000000182 ____N C:\Users\Ernesto\Desktop\ESCUCHAR RADIO.es.URL
2021-07-04 11:40 - 2021-07-07 10:37 - 000003474 _____ C:\Windows\system32\Tasks\doPDF 11 Update
2021-07-04 11:40 - 2021-07-07 10:36 - 000003460 _____ C:\Windows\system32\Tasks\doPDF 11 Telemetry
2021-07-04 11:40 - 2021-07-04 11:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 11
2021-07-01 12:06 - 2021-07-20 10:16 - 000000356 _____ C:\Windows\Tasks\Scheduled scanning task.job
2021-07-01 12:06 - 2021-07-01 12:06 - 000003176 _____ C:\Windows\system32\Tasks\Scheduled scanning task
2021-06-28 21:28 - 2021-06-29 22:28 - 000000000 ____D C:\KVRT2020_Data
2021-06-26 11:00 - 2021-06-26 11:03 - 000000908 ____N C:\Users\Ernesto\Desktop\DISCOS.lnk
2021-06-23 13:19 - 2021-06-23 13:19 - 000016384 _____ (Softland) C:\Windows\system32\novamn11.dll
2021-06-23 13:19 - 2021-06-23 13:19 - 000014848 _____ (Softland) C:\Windows\system32\novami11.dll
2021-06-23 11:52 - 2021-06-23 11:53 - 000000000 ____D C:\Users\Ernesto\Desktop\GORRAS

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2021-07-22 11:02 - 2021-06-08 13:19 - 000000000 ____D C:\FRST
2021-07-22 10:59 - 2018-06-02 12:12 - 000000000 ____D C:\Program Files\CCleaner
2021-07-22 10:54 - 2009-07-14 06:34 - 000024320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2021-07-22 10:54 - 2009-07-14 06:34 - 000024320 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2021-07-22 10:52 - 2019-01-30 20:50 - 000000000 ____D C:\ProgramData\Mozilla
2021-07-22 10:50 - 2016-11-23 13:40 - 000000000 ____D C:\Users\Ernesto\AppData\LocalLow\Mozilla
2021-07-22 10:35 - 2020-03-22 22:55 - 000000978 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2021-07-22 10:35 - 2016-08-10 19:31 - 000000000 ____D C:\Program Files\Google
2021-07-22 10:30 - 2017-09-20 20:51 - 000000000 ____D C:\Users\Ernesto\AppData\Local\Deployment
2021-07-22 10:29 - 2020-06-01 22:01 - 000000000 ____D C:\Users\Ernesto\AppData\Local\F2EBF1ED-E803-45A3-A952-E48788DA658B.aplzod
2021-07-22 10:29 - 2020-03-22 22:55 - 000000982 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2021-07-22 10:29 - 2016-08-13 10:38 - 000000000 ____D C:\Users\Ernesto\Documents\Archivos de Outlook
2021-07-22 10:29 - 2016-08-09 14:13 - 000004006 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{1953C800-7761-4447-B8F2-F88855800B51}
2021-07-22 10:27 - 2018-02-11 22:35 - 000003486 _____ C:\Windows\system32\Tasks\AutoKMS
2021-07-22 10:24 - 2009-07-14 06:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-07-21 12:19 - 2016-12-01 14:30 - 000000000 ____D C:\Users\Ernesto\.matplotlib
2021-07-21 12:19 - 2016-08-09 11:57 - 000000000 ____D C:\Users\Ernesto
2021-07-21 11:48 - 2020-02-15 15:26 - 000000000 ____D C:\Users\Ernesto\AppData\Local\cache
2021-07-21 11:43 - 2021-03-06 12:39 - 000000000 ____D C:\Users\Ernesto\AppData\Local\CrashDumps
2021-07-21 10:58 - 2016-08-09 14:01 - 000144240 _____ C:\Users\Ernesto\AppData\Local\GDIPFONTCACHEV1.DAT
2021-07-20 14:03 - 2020-05-11 14:15 - 000493040 _____ C:\Windows\system32\FNTCACHE.DAT
2021-07-20 13:42 - 2021-03-15 11:56 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-07-20 13:21 - 2016-08-11 10:09 - 000000000 ____D C:\Autodesk
2021-07-20 12:57 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\inf
2021-07-20 12:30 - 2019-10-03 12:05 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2021-07-20 11:37 - 2017-11-25 13:44 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service
2021-07-20 11:15 - 2016-08-14 11:21 - 000000000 ____D C:\Users\Ernesto\AppData\Roaming\vlc
2021-07-19 13:57 - 2016-12-31 14:09 - 000000000 ____D C:\Users\Ernesto\Desktop\APLE
2021-07-19 11:58 - 2020-06-08 11:06 - 000000000 ____D C:\Users\Ernesto\AppData\Roaming\Kodi
2021-07-18 12:57 - 2016-08-14 13:25 - 000000000 ___SD C:\Users\Ernesto\AppData\LocalLow\Temp
2021-07-18 12:31 - 2009-07-14 04:37 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2021-07-18 11:20 - 2016-08-10 12:23 - 000000000 ____D C:\Users\Ernesto\Desktop\Bases de Datos
2021-07-18 10:49 - 2009-07-14 06:53 - 000032516 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2021-07-16 13:11 - 2018-11-18 21:02 - 000004466 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2021-07-16 10:18 - 2017-08-05 12:49 - 000003522 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2021-07-16 10:18 - 2017-08-05 12:49 - 000003394 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2021-07-15 14:11 - 2016-08-14 10:18 - 001125888 ____N C:\Users\Ernesto\Desktop\LECTURA CONTADOR COMILLAS.xls
2021-07-15 12:48 - 2021-06-07 14:10 - 000002007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller DC.lnk
2021-07-15 12:48 - 2021-06-07 14:10 - 000001996 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2021-07-15 01:03 - 2016-08-12 11:23 - 000000000 ____D C:\Users\Ernesto\AppData\Roaming\SolidDocuments
2021-07-15 01:02 - 2020-12-27 00:12 - 000000000 ____D C:\Users\Ernesto\Desktop\AQUALIA COMILLAS 2020-2021
2021-07-15 00:17 - 2016-12-31 13:14 - 000000000 ____D C:\Users\Ernesto\AppData\Roaming\Apple Computer
2021-07-15 00:17 - 2016-12-31 13:14 - 000000000 ____D C:\Users\Ernesto\AppData\Local\Apple Computer
2021-07-15 00:17 - 2016-12-31 13:13 - 000000000 ____D C:\ProgramData\Apple Computer
2021-07-14 23:37 - 2009-07-14 04:37 - 000000000 ____D C:\Windows\registration
2021-07-14 13:25 - 2016-08-10 11:50 - 000000000 ____D C:\Windows\system32\MRT
2021-07-14 11:03 - 2016-08-10 11:49 - 130056632 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2021-07-13 22:33 - 2020-02-11 13:30 - 000000000 ____D C:\Users\Ernesto\Desktop\CApp.v2.0.4-Final.140218.Portable.Windows
2021-07-12 22:44 - 2018-02-03 21:39 - 000000057 _____ C:\Users\Ernesto\AppData\Roaming\stsetting.ini
2021-07-12 13:11 - 2021-02-01 22:50 - 000000000 ____D C:\Users\Ernesto\Desktop\IBERDROLA ERNESTO
2021-07-12 13:00 - 2016-08-20 13:43 - 000000000 ____D C:\Users\Ernesto\Desktop\AUTOCAD
2021-07-09 13:39 - 2016-08-09 11:40 - 001685896 _____ C:\Windows\system32\PerfStringBackup.INI
2021-07-09 13:39 - 2009-07-14 10:48 - 000751282 _____ C:\Windows\system32\perfh00A.dat
2021-07-09 13:39 - 2009-07-14 10:48 - 000160292 _____ C:\Windows\system32\perfc00A.dat
2021-07-08 10:50 - 2020-03-22 22:55 - 000000000 ____D C:\Program Files\Dropbox
2021-07-08 10:36 - 2016-12-01 14:20 - 000000000 ____D C:\Users\Ernesto\Documents\CEX
2021-07-08 10:35 - 2016-08-14 13:44 - 000000000 ___RD C:\Users\Ernesto\Documents\Scanned Documents
2021-07-07 10:34 - 2016-08-13 11:58 - 000000000 ____D C:\Users\Ernesto\Desktop\LIMPIAR REGISTRO
2021-07-05 14:26 - 2016-08-09 14:32 - 000000000 ____D C:\ProgramData\F-Secure
2021-07-04 11:41 - 2016-09-29 22:54 - 000000000 ____D C:\ProgramData\Package Cache
2021-07-04 11:36 - 2021-02-24 14:04 - 000000000 ____D C:\Program Files\Softland
2021-07-03 12:02 - 2017-07-29 11:55 - 000000000 ____D C:\Windows\Minidump
2021-07-03 11:43 - 2016-08-24 11:22 - 000000000 ____D C:\Program Files\Driver Magician
2021-06-30 13:09 - 2016-08-13 11:59 - 000000000 ____D C:\Users\Ernesto\Desktop\MUSICA Y FOTOS
2021-06-29 21:25 - 2017-08-01 20:44 - 000000000 ____D C:\Windows\pss
2021-06-29 13:30 - 2018-03-19 11:13 - 000011866 _____ C:\Windows\system32\Drivers\etc\hosts.txt
2021-06-24 13:24 - 2020-05-08 10:50 - 000000000 ____D C:\Users\Ernesto\Desktop\GASTOS 2020-2021
2021-06-24 11:24 - 2020-03-22 22:55 - 000003978 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskMachineUA
2021-06-24 11:24 - 2020-03-22 22:55 - 000003726 _____ C:\Windows\system32\Tasks\DropboxUpdateTaskMachineCore
2021-06-22 12:28 - 2021-06-21 13:14 - 000000000 ____D C:\Users\Ernesto\Desktop\AMAZON

==================== Archivos en la raíz de algunos directorios ========

2016-08-14 12:05 - 2019-06-02 21:04 - 000000666 _____ () C:\Users\Ernesto\AppData\Roaming\burnaware.ini
2016-08-15 22:13 - 2016-08-15 22:32 - 000000115 _____ () C:\Users\Ernesto\AppData\Roaming\LogFile.txt
2019-06-28 21:06 - 2019-06-28 21:06 - 000000004 _____ () C:\Users\Ernesto\AppData\Roaming\stlan.ini
2018-02-03 21:39 - 2021-07-12 22:44 - 000000057 _____ () C:\Users\Ernesto\AppData\Roaming\stsetting.ini
2020-04-23 21:54 - 2020-04-23 21:54 - 000000008 _____ () C:\Users\Ernesto\AppData\Roaming\stsound.dll
2017-09-20 12:24 - 2017-09-21 10:55 - 000038439 _____ () C:\Users\Ernesto\AppData\Roaming\Valores separados por comas (Windows).ADR
2020-05-18 13:59 - 2020-05-18 14:43 - 000000716 ____H () C:\Users\Ernesto\AppData\Roaming\{FC8D7619-D302-BD53-4ABB-8EE5A1ECDA75}
2021-05-31 10:59 - 2021-05-31 10:59 - 000000000 ____H () C:\Users\Ernesto\AppData\Local\BIT8ECC.tmp
2017-03-11 13:43 - 2017-03-11 13:43 - 000004096 ____H () C:\Users\Ernesto\AppData\Local\keyfile3.drm
2021-07-14 22:26 - 2021-07-14 22:26 - 000000001 _____ () C:\Users\Ernesto\AppData\Local\llftool.4.25.agreement
2016-10-22 10:09 - 2016-10-22 10:09 - 000000001 _____ () C:\Users\Ernesto\AppData\Local\llftool.4.30.agreement
2018-09-30 09:23 - 2018-09-30 09:23 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\oobelibMkey.log
2021-05-31 10:59 - 2021-05-31 10:59 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\{2EF24744-DE29-4005-9D1E-5903DA2DBC6D}
2020-05-01 20:10 - 2020-05-01 20:10 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\{8E1E5D4A-8103-42CC-B49F-E7A5EA872940}
==================== FLock ==============================

2016-03-24 00:39 C:\bootmgr
2021-07-12 06:15 C:\KRD2018_Data
2009-06-10 23:16 C:\Windows\system32\12520437.cpx
2009-06-10 23:16 C:\Windows\system32\12520850.cpx
2010-11-20 14:18 C:\Windows\system32\accessibilitycpl.dll
2009-07-14 03:03 C:\Windows\system32\ACCTRES.dll
2009-07-14 03:14 C:\Windows\system32\acledit.dll
2009-07-14 03:14 C:\Windows\system32\aclui.dll
2019-09-10 02:10 C:\Windows\system32\acmigration.dll
2010-11-20 14:18 C:\Windows\system32\acppage.dll
2009-07-14 03:14 C:\Windows\system32\acproxy.dll
2010-11-20 14:18 C:\Windows\system32\ActionCenter.dll
2010-11-20 14:18 C:\Windows\system32\ActionCenterCPL.dll
2010-11-20 14:18 C:\Windows\system32\ActionQueue.dll
2010-11-20 14:18 C:\Windows\system32\activeds.dll
2009-07-14 01:37 C:\Windows\system32\activeds.tlb
2010-11-20 14:18 C:\Windows\system32\actxprxy.dll
2009-07-14 03:14 C:\Windows\system32\AdapterTroubleshooter.exe
2010-11-20 14:18 C:\Windows\system32\AdmTmpl.dll
2014-03-04 11:17 C:\Windows\system32\adprovider.dll
2010-11-20 14:18 C:\Windows\system32\adsldp.dll
2009-07-14 03:14 C:\Windows\system32\adsldpc.dll
2016-09-12 22:49 C:\Windows\system32\adsmsext.dll
2009-07-14 03:14 C:\Windows\system32\adsnt.dll
2020-01-03 05:37 C:\Windows\system32\adtschema.dll
2016-08-16 21:28 C:\Windows\system32\AdvancedInstallers
2020-01-03 05:37 C:\Windows\system32\advapi32.dll
2009-07-14 03:14 C:\Windows\system32\advpack.dll
2009-07-14 03:14 C:\Windows\system32\aecache.dll
2009-07-14 03:03 C:\Windows\system32\aeevts.dll
2019-09-17 04:29 C:\Windows\system32\aeinv.dll
2015-10-29 19:49 C:\Windows\system32\aelupsvc.dll
2019-09-10 02:10 C:\Windows\system32\aepic.dll
2010-11-20 14:16 C:\Windows\system32\aitagent.exe
2019-09-10 02:10 C:\Windows\system32\aitstatic.exe
2009-07-14 03:14 C:\Windows\system32\alg.exe
2009-07-14 03:14 C:\Windows\system32\AltTab.dll
2009-07-13 23:04 C:\Windows\system32\amcompat.tlb
2010-11-20 14:18 C:\Windows\system32\amstream.dll
2009-07-14 03:14 C:\Windows\system32\amxread.dll
2009-07-13 23:40 C:\Windows\system32\ANSI.SYS
2009-07-14 03:14 C:\Windows\system32\apds.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2020-01-03 05:37 C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2020-01-03 05:02 C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2020-01-03 05:02 C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2020-01-03 05:02 C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2019-04-12 15:04 C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2016-08-10 12:31 C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2020-01-03 05:02 C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2009-07-14 01:11 C:\Windows\system32\api-ms-win-security-lsalookup-l1-1-0.dll
2009-07-14 01:11 C:\Windows\system32\api-ms-win-security-sddl-l1-1-0.dll
2009-07-14 03:03 C:\Windows\system32\api-ms-win-service-core-l1-1-0.dll
2009-07-14 03:03 C:\Windows\system32\api-ms-win-service-management-l1-1-0.dll
2009-07-14 03:03 C:\Windows\system32\api-ms-win-service-management-l2-1-0.dll
2009-07-14 03:03 C:\Windows\system32\api-ms-win-service-winsvc-l1-1-0.dll
2009-07-14 03:14 C:\Windows\system32\apilogen.dll
2009-07-14 03:14 C:\Windows\system32\apircl.dll
2020-01-03 05:37 C:\Windows\system32\apisetschema.dll
2009-07-13 23:40 C:\Windows\system32\append.exe
2015-10-29 19:49 C:\Windows\system32\apphelp.dll
2009-07-14 03:14 C:\Windows\system32\Apphlpdm.dll
2020-01-03 05:37 C:\Windows\system32\appidapi.dll
2020-01-03 05:10 C:\Windows\system32\appidcertstorecheck.exe
2020-01-03 05:10 C:\Windows\system32\appidpolicyconverter.exe
2009-07-14 03:14 C:\Windows\system32\AppIdPolicyEngineApi.dll
2020-01-03 05:10 C:\Windows\system32\appidsvc.dll
2019-11-05 23:24 C:\Windows\system32\appinfo.dll
2009-07-14 03:14 C:\Windows\system32\appmgmts.dll
2010-11-20 14:18 C:\Windows\system32\appmgr.dll
2019-10-26 02:17 C:\Windows\system32\appraiser.dll
2010-11-20 14:16 C:\Windows\system32\appwiz.cpl
2009-07-14 03:14 C:\Windows\system32\apss.dll
2009-07-14 03:14 C:\Windows\system32\ARP.EXE
2009-07-14 03:03 C:\Windows\system32\asferror.dll
2017-03-07 18:17 C:\Windows\system32\asycfilt.dll
2009-07-14 03:14 C:\Windows\system32\at.exe
2009-07-14 03:14 C:\Windows\system32\AtBroker.exe
2009-07-14 03:14 C:\Windows\system32\atl.dll
2019-11-15 04:32 C:\Windows\system32\atmfd.dll
2019-11-15 03:59 C:\Windows\system32\atmlib.dll
2009-07-14 03:14 C:\Windows\system32\attrib.exe
2010-11-20 14:18 C:\Windows\system32\audiodev.dll
2019-09-12 05:32 C:\Windows\system32\audiodg.exe
2019-09-12 05:52 C:\Windows\system32\AudioEng.dll
2019-09-12 05:53 C:\Windows\system32\AUDIOKSE.dll
2019-09-12 05:52 C:\Windows\system32\AudioSes.dll
2019-09-12 05:52 C:\Windows\system32\audiosrv.dll
2009-07-14 03:14 C:\Windows\system32\auditcse.dll
2009-07-14 03:14 C:\Windows\system32\AuditNativeSnapIn.dll
2020-01-03 05:09 C:\Windows\system32\auditpol.exe
2009-07-14 03:14 C:\Windows\system32\AuditPolicyGPInterop.dll
2009-07-14 03:03 C:\Windows\system32\auditpolmsg.dll
2009-07-14 03:14 C:\Windows\system32\authfwcfg.dll
2009-07-14 03:14 C:\Windows\system32\AuthFWGP.dll
2010-11-20 14:32 C:\Windows\system32\AuthFWSnapin.dll
2009-07-14 03:20 C:\Windows\system32\AuthFWWizFwk.dll
2019-11-05 23:24 C:\Windows\system32\authui.dll
2009-07-14 03:14 C:\Windows\system32\authz.dll
2010-11-20 14:16 C:\Windows\system32\autochk.exe
2010-11-20 14:16 C:\Windows\system32\autoconv.exe
2010-11-20 14:16 C:\Windows\system32\autofmt.exe
2010-11-20 14:18 C:\Windows\system32\autoplay.dll
2009-07-14 03:14 C:\Windows\system32\AuxiliaryDisplayApi.dll
2009-07-14 03:14 C:\Windows\system32\AuxiliaryDisplayClassInstaller.dll
2010-11-20 14:18 C:\Windows\system32\AuxiliaryDisplayCpl.dll
2009-07-14 03:14 C:\Windows\system32\AuxiliaryDisplayDriverLib.dll
2010-11-20 14:18 C:\Windows\system32\AuxiliaryDisplayServices.dll
2009-06-10 23:21 C:\Windows\system32\avicap.dll
2009-07-14 03:14 C:\Windows\system32\avicap32.dll
2010-11-20 14:18 C:\Windows\system32\avifil32.dll
2009-06-10 23:21 C:\Windows\system32\avifile.dll
2009-07-14 03:14 C:\Windows\system32\avrt.dll
2019-11-05 23:24 C:\Windows\system32\AxInstSv.dll
2019-11-05 22:57 C:\Windows\system32\AxInstUI.exe
2009-06-10 23:21 C:\Windows\system32\azman.msc
2010-11-20 14:18 C:\Windows\system32\azroles.dll
2010-11-20 14:18 C:\Windows\system32\azroleui.dll
2010-11-20 14:18 C:\Windows\system32\AzSqlExt.dll
2009-07-14 03:14 C:\Windows\system32\baaupdate.exe
2018-03-06 20:13 C:\Windows\system32\basecsp.dll
2015-07-15 04:55 C:\Windows\system32\basesrv.dll
2010-11-20 14:18 C:\Windows\system32\batmeter.dll
2009-07-14 03:14 C:\Windows\system32\batt.dll
2010-11-20 14:16 C:\Windows\system32\bcdboot.exe
2016-10-11 16:51 C:\Windows\system32\bcdedit.exe
2009-07-14 03:14 C:\Windows\system32\bcdprov.dll
2010-11-20 14:18 C:\Windows\system32\bcdsrv.dll
2020-01-03 05:37 C:\Windows\system32\bcrypt.dll
2016-05-12 15:04 C:\Windows\system32\bcryptprimitives.dll
2009-07-14 03:14 C:\Windows\system32\bdaplgin.ax
2010-11-20 14:16 C:\Windows\system32\BdeHdCfg.exe
2009-07-14 03:14 C:\Windows\system32\BdeHdCfgLib.dll
2009-07-14 03:14 C:\Windows\system32\bderepair.dll
2009-07-14 03:14 C:\Windows\system32\bdesvc.dll
2009-07-14 03:14 C:\Windows\system32\bdeui.dll
2009-07-14 03:14 C:\Windows\system32\BdeUISrv.exe
2009-07-14 03:14 C:\Windows\system32\BdeUnlockWizard.exe
2010-11-20 14:18 C:\Windows\system32\BFE.DLL
2009-07-14 03:14 C:\Windows\system32\bidispl.dll
2010-11-20 14:18 C:\Windows\system32\biocpl.dll
2009-07-14 03:14 C:\Windows\system32\BioCredProv.dll
2009-06-10 23:42 C:\Windows\system32\bios1.rom
2009-06-10 23:42 C:\Windows\system32\bios4.rom
2009-07-14 03:14 C:\Windows\system32\BitLockerWizard.exe
2009-07-14 03:14 C:\Windows\system32\BitLockerWizardElev.exe
2010-11-20 14:16 C:\Windows\system32\bitsadmin.exe
2009-07-14 03:14 C:\Windows\system32\bitsigd.dll
2010-11-20 14:18 C:\Windows\system32\bitsperf.dll
2009-07-14 03:14 C:\Windows\system32\bitsprx2.dll
2009-07-14 03:14 C:\Windows\system32\bitsprx3.dll
2009-07-14 03:14 C:\Windows\system32\bitsprx4.dll
2009-07-14 03:14 C:\Windows\system32\bitsprx5.dll
2009-07-14 03:14 C:\Windows\system32\bitsprx6.dll
2019-06-12 17:19 C:\Windows\system32\blackbox.dll
2010-11-20 13:56 C:\Windows\system32\BlbEvents.dll
2009-07-14 03:04 C:\Windows\system32\blbres.dll
2009-07-14 03:15 C:\Windows\system32\blb_ps.dll
2019-12-13 12:13 C:\Windows\system32\Boot
2009-06-10 23:44 C:\Windows\system32\boot.sdi
2009-07-14 03:14 C:\Windows\system32\bootcfg.exe
2010-11-20 14:29 C:\Windows\system32\bootres.dll
2009-07-14 03:04 C:\Windows\system32\bootstr.dll
2009-07-14 03:26 C:\Windows\system32\BOOTVID.DLL
2009-06-10 23:30 C:\Windows\system32\bopomofo.uce
2019-02-07 17:42 C:\Windows\system32\brdgcfg.dll
2019-02-07 17:57 C:\Windows\system32\bridgeres.dll
2019-02-07 17:42 C:\Windows\system32\bridgeunattend.exe
2012-07-04 23:14 C:\Windows\system32\browcli.dll
2012-07-04 23:14 C:\Windows\system32\browser.dll
2010-11-20 14:18 C:\Windows\system32\browseui.dll
2009-07-14 03:15 C:\Windows\system32\bthci.dll
2009-07-14 03:15 C:\Windows\system32\BthMtpContextHandler.dll
2009-07-14 03:15 C:\Windows\system32\bthpanapi.dll
2009-07-14 03:15 C:\Windows\system32\BthpanContextHandler.dll
2010-11-20 14:16 C:\Windows\system32\bthprops.cpl
2009-07-14 03:15 C:\Windows\system32\bthserv.dll
2009-07-14 03:14 C:\Windows\system32\bthudtask.exe
2009-07-14 03:15 C:\Windows\system32\btpanui.dll
2010-11-20 14:16 C:\Windows\system32\Bubbles.scr
2009-07-14 03:15 C:\Windows\system32\BWContextHandler.dll
2009-07-14 03:15 C:\Windows\system32\BWUnpairElevated.dll
2010-11-20 14:18 C:\Windows\system32\cabinet.dll
2010-11-20 14:18 C:\Windows\system32\cabview.dll
2009-07-14 03:14 C:\Windows\system32\cacls.exe
2010-11-20 14:16 C:\Windows\system32\calc.exe
2014-03-04 11:17 C:\Windows\system32\capiprovider.dll
2009-07-14 03:15 C:\Windows\system32\capisp.dll
2009-07-14 03:04 C:\Windows\system32\CardGames.dll
2009-07-14 03:15 C:\Windows\system32\catsrv.dll
2009-07-14 03:15 C:\Windows\system32\catsrvps.dll
2018-04-10 18:32 C:\Windows\system32\catsrvut.dll
2010-11-20 14:18 C:\Windows\system32\cca.dll
2019-08-14 00:12 C:\Windows\system32\cdd.dll
2019-05-09 17:17 C:\Windows\system32\cdosys.dll
2019-09-10 02:10 C:\Windows\system32\centel.dll
2012-12-07 12:46 C:\Windows\system32\cero.rs
2015-04-18 04:56 C:\Windows\system32\certcli.dll
2009-07-14 03:15 C:\Windows\system32\certCredProvider.dll
2013-05-13 05:08 C:\Windows\system32\certenc.dll
2010-11-20 14:18 C:\Windows\system32\CertEnroll.dll
2009-07-14 03:14 C:\Windows\system32\CertEnrollCtrl.exe
2009-07-14 03:15 C:\Windows\system32\CertEnrollUI.dll
2010-11-20 14:18 C:\Windows\system32\certmgr.dll
2009-06-10 23:36 C:\Windows\system32\certmgr.msc
2010-11-20 14:18 C:\Windows\system32\CertPolEng.dll
2010-11-20 14:18 C:\Windows\system32\certprop.dll
2009-07-14 03:14 C:\Windows\system32\certreq.exe
2013-05-13 05:08 C:\Windows\system32\certutil.exe
2015-06-02 01:47 C:\Windows\system32\cewmdm.dll
2009-07-14 03:15 C:\Windows\system32\cfgbkend.dll
2010-11-20 14:18 C:\Windows\system32\cfgmgr32.dll
2016-10-11 17:18 C:\Windows\system32\chajei.ime
2010-11-20 14:16 C:\Windows\system32\change.exe
2014-10-30 03:45 C:\Windows\system32\charmap.exe
2009-07-14 01:15 C:\Windows\system32\chcp.com
2010-11-20 14:16 C:\Windows\system32\chglogon.exe
2010-11-20 14:16 C:\Windows\system32\chgport.exe
2010-11-20 14:16 C:\Windows\system32\chgusr.exe
2009-07-14 03:14 C:\Windows\system32\chkdsk.exe
2009-07-14 03:14 C:\Windows\system32\chkntfs.exe
2009-07-14 03:15 C:\Windows\system32\chkwudrv.dll
2009-07-14 03:14 C:\Windows\system32\choice.exe
2009-07-14 03:15 C:\Windows\system32\chsbrkr.dll
2009-07-14 03:15 C:\Windows\system32\chtbrkr.dll
2009-07-14 03:15 C:\Windows\system32\CHxReadingStringIME.dll
2019-09-17 02:10 C:\Windows\system32\ci.dll
2017-08-14 19:35 C:\Windows\system32\cic.dll
2016-10-11 17:18 C:\Windows\system32\cintlgnt.ime
2009-07-14 03:14 C:\Windows\system32\cipher.exe
2009-07-14 03:15 C:\Windows\system32\clb.dll
2009-07-14 03:15 C:\Windows\system32\clbcatq.dll
2009-07-14 03:14 C:\Windows\system32\cleanmgr.exe
2019-12-10 11:43 C:\Windows\system32\clfs.sys
2015-03-04 06:10 C:\Windows\system32\clfsw32.dll
2009-07-14 03:15 C:\Windows\system32\cliconfg.dll
2009-07-14 03:14 C:\Windows\system32\cliconfg.exe
2009-07-14 02:12 C:\Windows\system32\cliconfg.rll
2009-07-14 03:14 C:\Windows\system32\clip.exe
2010-11-20 14:18 C:\Windows\system32\clusapi.dll
2009-07-14 03:15 C:\Windows\system32\cmcfg32.dll
2010-11-20 14:17 C:\Windows\system32\cmd.exe
2009-07-14 03:15 C:\Windows\system32\cmdial32.dll
2009-07-14 03:14 C:\Windows\system32\cmdkey.exe
2009-07-14 03:14 C:\Windows\system32\cmdl32.exe
2009-07-14 03:15 C:\Windows\system32\cmicryptinstall.dll
2009-07-14 03:15 C:\Windows\system32\cmifw.dll
2009-07-14 03:15 C:\Windows\system32\cmipnpinstall.dll
2009-07-14 03:15 C:\Windows\system32\cmlua.dll
2009-07-14 03:14 C:\Windows\system32\cmmon32.exe
2009-07-14 03:15 C:\Windows\system32\cmncliM.dll
2009-07-14 03:15 C:\Windows\system32\cmpbk32.dll
2010-11-20 14:17 C:\Windows\system32\cmstp.exe
2009-07-14 03:15 C:\Windows\system32\cmstplua.dll
2009-07-14 03:15 C:\Windows\system32\cmutil.dll
2009-07-14 03:15 C:\Windows\system32\cngaudit.dll
2014-03-04 11:17 C:\Windows\system32\cngprovider.dll
2009-07-14 03:15 C:\Windows\system32\cnvfat.dll
2012-12-07 12:46 C:\Windows\system32\cob-au.rs
2009-07-14 03:14 C:\Windows\system32\cofire.exe
2009-07-14 03:15 C:\Windows\system32\cofiredm.dll
2009-07-14 03:15 C:\Windows\system32\colbact.dll
2009-07-14 03:14 C:\Windows\system32\collab.cpl
2015-12-08 23:53 C:\Windows\system32\COLORCNV.DLL
2009-07-14 03:14 C:\Windows\system32\colorcpl.exe
2009-07-14 03:15 C:\Windows\system32\colorui.dll
2019-11-15 04:04 C:\Windows\system32\comcat.dll
2015-04-24 19:56 C:\Windows\system32\comctl32.dll
2010-11-20 14:18 C:\Windows\system32\comdlg32.dll
2009-06-10 23:17 C:\Windows\system32\comexp.msc
2009-07-13 23:41 C:\Windows\system32\COMM.drv
2009-07-13 23:40 C:\Windows\system32\COMMAND.COM
2009-07-13 23:41 C:\Windows\system32\COMMDLG.DLL
2009-07-14 03:14 C:\Windows\system32\comp.exe
2009-07-14 03:14 C:\Windows\system32\compact.exe
2019-11-05 23:27 C:\Windows\system32\CompatTelRunner.exe
2009-06-10 23:21 C:\Windows\system32\compmgmt.msc
2009-07-14 03:14 C:\Windows\system32\CompMgmtLauncher.exe
2009-06-10 23:25 C:\Windows\system32\compobj.dll
2009-07-14 03:15 C:\Windows\system32\compstui.dll
2009-07-14 03:14 C:\Windows\system32\ComputerDefaults.exe
2009-07-14 03:15 C:\Windows\system32\comrepl.dll
2009-07-14 03:04 C:\Windows\system32\comres.dll
2009-07-14 03:15 C:\Windows\system32\comsnap.dll
2018-04-10 18:33 C:\Windows\system32\comsvcs.dll
2009-07-14 03:15 C:\Windows\system32\comuid.dll
2020-01-03 05:07 C:\Windows\system32\conhost.exe
2009-07-14 03:15 C:\Windows\system32\connect.dll
2019-11-05 23:29 C:\Windows\system32\consent.exe
2009-07-14 03:15 C:\Windows\system32\console.dll
2009-07-14 03:14 C:\Windows\system32\control.exe
2009-07-14 03:14 C:\Windows\system32\convert.exe
2009-07-14 03:15 C:\Windows\system32\correngine.dll
2009-07-13 23:40 C:\Windows\system32\country.sys
2016-01-22 08:04 C:\Windows\system32\CPFilters.dll
2020-01-03 05:37 C:\Windows\system32\credssp.dll
2013-10-04 03:56 C:\Windows\system32\credui.dll
2009-07-14 03:14 C:\Windows\system32\credwiz.exe
2009-07-14 03:15 C:\Windows\system32\CRPPresentation.dll
2009-07-14 03:15 C:\Windows\system32\crtdll.dll
2019-12-10 10:38 C:\Windows\system32\crypt32.dll
2020-01-03 05:02 C:\Windows\system32\cryptbase.dll
2013-05-10 05:20 C:\Windows\system32\cryptdlg.dll
2019-04-05 02:23 C:\Windows\system32\cryptdll.dll
2009-07-14 03:15 C:\Windows\system32\cryptext.dll
2019-12-10 10:38 C:\Windows\system32\cryptnet.dll
2019-06-12 17:19 C:\Windows\system32\cryptsp.dll
2019-12-10 10:38 C:\Windows\system32\cryptsvc.dll
2019-11-05 23:24 C:\Windows\system32\cryptui.dll
2009-07-14 03:15 C:\Windows\system32\cryptxml.dll
2018-06-29 17:09 C:\Windows\system32\cscapi.dll
2018-06-29 17:40 C:\Windows\system32\cscdll.dll
2018-06-29 17:40 C:\Windows\system32\CscMig.dll
2010-11-20 14:18 C:\Windows\system32\cscobj.dll
2018-10-27 05:04 C:\Windows\system32\cscript.exe
2018-06-29 17:40 C:\Windows\system32\cscsvc.dll
2010-11-20 14:18 C:\Windows\system32\cscui.dll
2012-12-07 12:46 C:\Windows\system32\csrr.rs
2020-01-03 05:37 C:\Windows\system32\csrsrv.dll
2009-07-14 03:14 C:\Windows\system32\csrss.exe
2009-07-14 03:14 C:\Windows\system32\csrstub.exe
2009-07-14 03:14 C:\Windows\system32\ctfmon.exe
2009-07-14 03:15 C:\Windows\system32\ctl3d32.dll
2009-06-10 23:42 C:\Windows\system32\ctl3dv2.dll
2009-07-14 03:14 C:\Windows\system32\cttune.exe
2009-07-14 03:14 C:\Windows\system32\cttunesvr.exe
2009-06-10 23:48 C:\Windows\system32\C_037.NLS
2009-06-10 23:48 C:\Windows\system32\C_10000.NLS
2009-06-10 23:48 C:\Windows\system32\C_10001.NLS
2009-06-10 23:48 C:\Windows\system32\C_10002.NLS
2009-06-10 23:48 C:\Windows\system32\C_10003.NLS
2009-06-10 23:48 C:\Windows\system32\C_10004.NLS
2009-06-10 23:48 C:\Windows\system32\C_10005.NLS
2009-06-10 23:48 C:\Windows\system32\C_10006.NLS
2009-06-10 23:48 C:\Windows\system32\C_10007.NLS
2009-06-10 23:48 C:\Windows\system32\C_10008.NLS
2009-06-10 23:48 C:\Windows\system32\C_10010.NLS
2009-06-10 23:48 C:\Windows\system32\C_10017.NLS
2009-06-10 23:48 C:\Windows\system32\C_10021.NLS
2009-06-10 23:48 C:\Windows\system32\C_10029.NLS
2009-06-10 23:48 C:\Windows\system32\C_10079.NLS
2009-06-10 23:48 C:\Windows\system32\C_10081.NLS
2009-06-10 23:48 C:\Windows\system32\C_10082.NLS
2009-06-10 23:48 C:\Windows\system32\C_1026.NLS
2009-06-10 23:48 C:\Windows\system32\C_1047.NLS
2009-06-10 23:48 C:\Windows\system32\C_1140.NLS
2009-06-10 23:48 C:\Windows\system32\C_1141.NLS
2009-06-10 23:48 C:\Windows\system32\C_1142.NLS
2009-06-10 23:48 C:\Windows\system32\C_1143.NLS
2009-06-10 23:48 C:\Windows\system32\C_1144.NLS
2009-06-10 23:48 C:\Windows\system32\C_1145.NLS
2009-06-10 23:48 C:\Windows\system32\C_1146.NLS
2009-06-10 23:48 C:\Windows\system32\C_1147.NLS
2009-06-10 23:48 C:\Windows\system32\C_1148.NLS
2009-06-10 23:48 C:\Windows\system32\C_1149.NLS
2009-06-10 23:48 C:\Windows\system32\C_1250.NLS
2009-06-10 23:48 C:\Windows\system32\C_1251.NLS
2009-06-10 23:48 C:\Windows\system32\C_1252.NLS
2009-06-10 23:48 C:\Windows\system32\C_1253.NLS
2009-06-10 23:48 C:\Windows\system32\C_1254.NLS
2009-06-10 23:48 C:\Windows\system32\C_1255.NLS
2009-06-10 23:48 C:\Windows\system32\C_1256.NLS
2009-06-10 23:48 C:\Windows\system32\C_1257.NLS
2009-06-10 23:48 C:\Windows\system32\C_1258.NLS
2009-06-10 23:48 C:\Windows\system32\C_1361.NLS
2009-06-10 23:48 C:\Windows\system32\C_20000.NLS
2009-06-10 23:48 C:\Windows\system32\C_20001.NLS
2009-06-10 23:48 C:\Windows\system32\C_20002.NLS
2009-06-10 23:48 C:\Windows\system32\C_20003.NLS
2009-06-10 23:48 C:\Windows\system32\C_20004.NLS
2009-06-10 23:48 C:\Windows\system32\C_20005.NLS
2009-06-10 23:48 C:\Windows\system32\C_20105.NLS
2009-06-10 23:48 C:\Windows\system32\C_20106.NLS
2009-06-10 23:48 C:\Windows\system32\C_20107.NLS
2009-06-10 23:48 C:\Windows\system32\C_20108.NLS
2009-06-10 23:48 C:\Windows\system32\C_20127.NLS
2009-06-10 23:48 C:\Windows\system32\C_20261.NLS
2009-06-10 23:48 C:\Windows\system32\C_20269.NLS
2009-06-10 23:48 C:\Windows\system32\C_20273.NLS
2009-06-10 23:48 C:\Windows\system32\C_20277.NLS
2009-06-10 23:48 C:\Windows\system32\C_20278.NLS
2009-06-10 23:48 C:\Windows\system32\C_20280.NLS
2009-06-10 23:48 C:\Windows\system32\C_20284.NLS
2009-06-10 23:48 C:\Windows\system32\C_20285.NLS
2009-06-10 23:48 C:\Windows\system32\C_20290.NLS
2009-06-10 23:48 C:\Windows\system32\C_20297.NLS
2009-06-10 23:48 C:\Windows\system32\C_20420.NLS
2009-06-10 23:48 C:\Windows\system32\C_20423.NLS
2009-06-10 23:48 C:\Windows\system32\C_20424.NLS
2009-06-10 23:48 C:\Windows\system32\C_20833.NLS
2009-06-10 23:48 C:\Windows\system32\C_20838.NLS
2009-06-10 23:48 C:\Windows\system32\C_20866.NLS
2009-06-10 23:48 C:\Windows\system32\C_20871.NLS
2009-06-10 23:48 C:\Windows\system32\C_20880.NLS
2009-06-10 23:48 C:\Windows\system32\C_20905.NLS
2009-06-10 23:48 C:\Windows\system32\C_20924.NLS
2009-06-10 23:48 C:\Windows\system32\C_20932.NLS
2009-06-10 23:48 C:\Windows\system32\C_20936.NLS
2009-06-10 23:48 C:\Windows\system32\C_20949.NLS
2009-06-10 23:48 C:\Windows\system32\C_21025.NLS
2009-06-10 23:48 C:\Windows\system32\C_21027.NLS
2009-06-10 23:48 C:\Windows\system32\C_21866.NLS
2009-06-10 23:48 C:\Windows\system32\C_28591.NLS
2009-06-10 23:48 C:\Windows\system32\C_28592.NLS
2009-06-10 23:48 C:\Windows\system32\C_28593.NLS
2009-06-10 23:48 C:\Windows\system32\C_28594.NLS
2009-06-10 23:48 C:\Windows\system32\C_28595.NLS
2009-06-10 23:48 C:\Windows\system32\C_28596.NLS
2009-06-10 23:48 C:\Windows\system32\C_28597.NLS
2009-06-10 23:48 C:\Windows\system32\C_28598.NLS
2009-06-10 23:48 C:\Windows\system32\C_28599.NLS
2009-06-10 23:48 C:\Windows\system32\c_28603.nls
2009-06-10 23:48 C:\Windows\system32\C_28605.NLS
2009-06-10 23:48 C:\Windows\system32\C_437.NLS
2009-06-10 23:48 C:\Windows\system32\C_500.NLS
2009-06-10 23:48 C:\Windows\system32\C_708.NLS
2009-06-10 23:48 C:\Windows\system32\C_720.NLS
2009-06-10 23:48 C:\Windows\system32\C_737.NLS
2009-06-10 23:48 C:\Windows\system32\C_775.NLS
2009-06-10 23:48 C:\Windows\system32\C_850.NLS
2009-06-10 23:48 C:\Windows\system32\C_852.NLS
2009-06-10 23:48 C:\Windows\system32\C_855.NLS
2009-06-10 23:48 C:\Windows\system32\C_857.NLS
2009-06-10 23:48 C:\Windows\system32\C_858.NLS
2009-06-10 23:48 C:\Windows\system32\C_860.NLS
2009-06-10 23:48 C:\Windows\system32\C_861.NLS
2009-06-10 23:48 C:\Windows\system32\C_862.NLS
2009-06-10 23:48 C:\Windows\system32\C_863.NLS
2009-06-10 23:48 C:\Windows\system32\C_864.NLS
2009-06-10 23:48 C:\Windows\system32\C_865.NLS
2009-06-10 23:48 C:\Windows\system32\C_866.NLS
2009-06-10 23:48 C:\Windows\system32\C_869.NLS
2009-06-10 23:48 C:\Windows\system32\C_870.NLS
2009-06-10 23:48 C:\Windows\system32\C_874.NLS
2009-06-10 23:48 C:\Windows\system32\C_875.NLS
2009-06-10 23:48 C:\Windows\system32\C_932.NLS
2009-06-10 23:48 C:\Windows\system32\C_936.NLS
2009-06-10 23:48 C:\Windows\system32\C_949.NLS
2009-06-10 23:48 C:\Windows\system32\C_950.NLS
2009-07-14 03:15 C:\Windows\system32\C_G18030.DLL
2009-07-14 03:15 C:\Windows\system32\C_IS2022.DLL
2010-11-20 14:18 C:\Windows\system32\C_ISCII.DLL
2013-11-26 10:16 C:\Windows\system32\d2d1.dll
2016-08-10 12:31 C:\Windows\system32\d3d10.dll
2016-08-10 12:31 C:\Windows\system32\d3d10core.dll
2016-04-14 15:49 C:\Windows\system32\d3d10level9.dll
2018-10-06 15:42 C:\Windows\system32\d3d10warp.dll
2016-08-10 12:31 C:\Windows\system32\d3d10_1.dll
2016-08-10 12:31 C:\Windows\system32\d3d10_1core.dll
2016-08-10 12:28 C:\Windows\system32\d3d11.dll
2009-07-14 03:15 C:\Windows\system32\d3d8.dll
2009-07-14 03:15 C:\Windows\system32\d3d8thk.dll
2010-11-20 14:18 C:\Windows\system32\d3d9.dll
2017-04-28 00:50 C:\Windows\system32\D3DCompiler_47.dll
2009-07-14 03:15 C:\Windows\system32\d3dim.dll
2009-07-14 03:15 C:\Windows\system32\d3dim700.dll
2009-07-14 03:15 C:\Windows\system32\d3dramp.dll
2009-07-14 03:15 C:\Windows\system32\d3dxof.dll
2009-07-14 03:15 C:\Windows\system32\dataclen.dll
2016-09-08 22:34 C:\Windows\system32\davclnt.dll
2009-07-14 03:15 C:\Windows\system32\davhlpr.dll
2010-11-20 14:18 C:\Windows\system32\dbgeng.dll
2010-11-20 14:18 C:\Windows\system32\dbghelp.dll
2009-07-14 03:15 C:\Windows\system32\dbnetlib.dll
2009-07-14 03:15 C:\Windows\system32\dbnmpntw.dll
2009-07-14 03:14 C:\Windows\system32\dccw.exe
2019-11-15 04:29 C:\Windows\system32\dciman32.dll
2009-07-14 03:14 C:\Windows\system32\dcomcnfg.exe
2009-07-14 03:15 C:\Windows\system32\DDACLSys.dll
2009-07-13 23:41 C:\Windows\system32\DDEML.DLL
2009-07-14 03:14 C:\Windows\system32\ddodiag.exe
2009-07-14 03:15 C:\Windows\system32\DDOIProxy.dll
2009-07-14 03:15 C:\Windows\system32\DDORes.dll
2009-07-14 03:15 C:\Windows\system32\ddraw.dll
2009-07-14 03:15 C:\Windows\system32\ddrawex.dll
2009-07-13 23:40 C:\Windows\system32\debug.exe
2010-11-20 14:18 C:\Windows\system32\defaultlocationcpl.dll
2009-07-14 03:14 C:\Windows\system32\Defrag.exe
2009-07-14 03:15 C:\Windows\system32\defragproxy.dll
2009-07-14 03:15 C:\Windows\system32\defragsvc.dll
2010-11-20 14:16 C:\Windows\system32\desk.cpl
2009-07-14 03:15 C:\Windows\system32\deskadp.dll
2009-07-14 03:15 C:\Windows\system32\deskmon.dll
2009-07-14 03:15 C:\Windows\system32\deskperf.dll
2015-12-08 23:53 C:\Windows\system32\devenum.dll
2010-11-20 14:18 C:\Windows\system32\DeviceCenter.dll
2009-07-14 03:14 C:\Windows\system32\DeviceDisplayObjectProvider.exe
2009-07-14 03:15 C:\Windows\system32\DeviceDisplayStatusManager.dll
2009-07-14 03:14 C:\Windows\system32\DeviceEject.exe
2009-07-14 03:15 C:\Windows\system32\DeviceMetadataParsers.dll
2009-07-14 03:15 C:\Windows\system32\DevicePairing.dll
2010-11-20 14:18 C:\Windows\system32\DevicePairingFolder.dll
2009-07-14 03:15 C:\Windows\system32\DevicePairingHandler.dll
2009-07-14 03:15 C:\Windows\system32\DevicePairingProxy.dll
2009-07-14 03:14 C:\Windows\system32\DevicePairingWizard.exe
2009-07-14 03:14 C:\Windows\system32\DeviceProperties.exe
2009-07-14 03:15 C:\Windows\system32\DeviceUxRes.dll
2019-09-10 02:10 C:\Windows\system32\devinv.dll
2009-06-10 23:46 C:\Windows\system32\devmgmt.msc
2009-07-14 03:15 C:\Windows\system32\devmgr.dll
2009-07-14 03:15 C:\Windows\system32\devobj.dll
2009-07-14 03:15 C:\Windows\system32\devrtl.dll
2009-07-14 03:15 C:\Windows\system32\dfdts.dll
2009-07-14 03:14 C:\Windows\system32\DFDWiz.exe
2010-11-20 14:17 C:\Windows\system32\dfrgui.exe
2009-07-14 03:15 C:\Windows\system32\dfscli.dll
2014-06-19 00:23 C:\Windows\system32\dfshim.dll
2009-07-14 03:15 C:\Windows\system32\DfsShlEx.dll
2019-07-13 10:13 C:\Windows\system32\dhcpcmonitor.dll
2019-07-13 10:33 C:\Windows\system32\dhcpcore.dll
2019-07-13 10:33 C:\Windows\system32\dhcpcore6.dll
2019-07-13 10:33 C:\Windows\system32\dhcpcsvc.dll
2019-07-13 10:33 C:\Windows\system32\dhcpcsvc6.dll
2009-07-14 03:15 C:\Windows\system32\DHCPQEC.DLL
2009-07-14 03:15 C:\Windows\system32\dhcpsapi.dll
2010-11-20 14:18 C:\Windows\system32\DiagCpl.dll
2010-11-20 14:18 C:\Windows\system32\diagperf.dll
2018-08-13 23:48 C:\Windows\system32\diagtrack.dll
2009-07-14 03:14 C:\Windows\system32\dialer.exe
2009-07-14 03:14 C:\Windows\system32\diantz.exe
2009-07-14 03:15 C:\Windows\system32\difxapi.dll
2009-07-14 03:15 C:\Windows\system32\dimsjob.dll
2014-03-04 11:17 C:\Windows\system32\dimsroam.dll
2009-07-14 03:14 C:\Windows\system32\dinotify.exe
2009-07-14 03:15 C:\Windows\system32\dinput.dll
2009-07-14 03:15 C:\Windows\system32\dinput8.dll
2009-07-14 01:15 C:\Windows\system32\diskcomp.com
2009-07-14 01:15 C:\Windows\system32\diskcopy.com
2009-07-14 03:15 C:\Windows\system32\diskcopy.dll
2009-06-10 23:47 C:\Windows\system32\diskmgmt.msc
2010-11-20 14:17 C:\Windows\system32\diskpart.exe
2015-05-25 20:00 C:\Windows\system32\diskperf.exe
2010-11-20 14:17 C:\Windows\system32\diskraid.exe
2019-06-12 16:49 C:\Windows\system32\Dism.exe
2009-07-14 03:15 C:\Windows\system32\dispci.dll
2009-07-14 03:14 C:\Windows\system32\dispdiag.exe
2018-10-27 05:04 C:\Windows\system32\dispex.dll
2010-11-20 14:18 C:\Windows\system32\Display.dll
2009-07-14 03:14 C:\Windows\system32\DisplaySwitch.exe
2012-12-07 12:46 C:\Windows\system32\djctq.rs
2010-11-20 14:17 C:\Windows\system32\djoin.exe
2009-07-14 03:14 C:\Windows\system32\dllhost.exe
2009-07-14 03:14 C:\Windows\system32\dllhst3g.exe
2009-07-14 03:15 C:\Windows\system32\dmband.dll
2009-07-14 03:15 C:\Windows\system32\dmcompos.dll
2009-07-14 03:15 C:\Windows\system32\dmdlgs.dll
2009-07-14 03:15 C:\Windows\system32\dmdskmgr.dll
2009-07-14 03:04 C:\Windows\system32\dmdskres.dll
2009-07-14 03:04 C:\Windows\system32\dmdskres2.dll
2009-07-14 03:15 C:\Windows\system32\dmime.dll
2009-07-14 03:15 C:\Windows\system32\dmintf.dll
2009-07-14 03:15 C:\Windows\system32\dmloader.dll
2009-07-14 03:15 C:\Windows\system32\dmocx.dll
2009-07-14 03:15 C:\Windows\system32\dmrc.dll
2009-07-14 03:15 C:\Windows\system32\dmscript.dll
2009-07-14 03:15 C:\Windows\system32\dmstyle.dll
2009-07-14 03:15 C:\Windows\system32\dmsynth.dll
2009-07-14 03:15 C:\Windows\system32\dmusic.dll
2009-07-14 03:15 C:\Windows\system32\dmutil.dll
2009-07-14 03:15 C:\Windows\system32\dmvdsitf.dll
2009-07-14 03:14 C:\Windows\system32\dmview.ocx
2018-06-08 17:54 C:\Windows\system32\dnsapi.dll
2018-06-08 17:28 C:\Windows\system32\dnscacheugc.exe
2010-11-20 14:18 C:\Windows\system32\dnscmmc.dll
2009-07-14 03:15 C:\Windows\system32\dnsext.dll
2009-07-14 03:15 C:\Windows\system32\dnshc.dll
2018-06-08 17:54 C:\Windows\system32\dnsrslvr.dll
2009-07-14 03:15 C:\Windows\system32\docprop.dll
2009-07-14 03:04 C:\Windows\system32\DocumentPerformanceEvents.dll
2009-07-14 03:14 C:\Windows\system32\doskey.exe
2010-11-20 07:23 C:\Windows\system32\dosx.exe
2010-11-20 14:18 C:\Windows\system32\dot3api.dll
2010-11-20 14:18 C:\Windows\system32\dot3cfg.dll
2009-07-14 03:15 C:\Windows\system32\dot3dlg.dll
2009-07-14 03:15 C:\Windows\system32\dot3gpclnt.dll
2009-07-14 03:15 C:\Windows\system32\dot3gpui.dll
2009-07-14 03:15 C:\Windows\system32\dot3hc.dll
2010-11-20 14:18 C:\Windows\system32\dot3msm.dll
2010-11-20 14:18 C:\Windows\system32\dot3svc.dll
2010-11-20 14:18 C:\Windows\system32\dot3ui.dll
2009-07-14 03:14 C:\Windows\system32\dpapimig.exe
2014-03-04 11:17 C:\Windows\system32\dpapiprovider.dll
2009-07-14 03:14 C:\Windows\system32\DpiScaling.exe
2009-07-14 03:14 C:\Windows\system32\dplaysvr.exe
2009-07-14 03:15 C:\Windows\system32\dplayx.dll
2009-07-14 03:15 C:\Windows\system32\dpmodemx.dll
2010-11-20 13:57 C:\Windows\system32\dpnaddr.dll
2009-07-14 03:15 C:\Windows\system32\dpnathlp.dll
2012-11-02 07:11 C:\Windows\system32\dpnet.dll
2009-07-14 03:15 C:\Windows\system32\dpnhpast.dll
2009-07-14 03:15 C:\Windows\system32\dpnhupnp.dll
2009-07-14 03:04 C:\Windows\system32\dpnlobby.dll
2009-07-14 03:14 C:\Windows\system32\dpnsvr.exe
2010-11-20 14:18 C:\Windows\system32\dps.dll
2009-07-14 03:15 C:\Windows\system32\dpwsockx.dll
2010-11-20 14:18 C:\Windows\system32\dpx.dll
2009-07-14 03:14 C:\Windows\system32\driverquery.exe
2021-06-28 21:52 C:\Windows\system32\drivers
2021-07-04 11:37 C:\Windows\system32\DriverStore
2019-06-12 17:20 C:\Windows\system32\drmmgrtn.dll
2019-06-12 17:20 C:\Windows\system32\drmv2clt.dll
2009-07-14 03:15 C:\Windows\system32\drprov.dll
2009-07-14 03:15 C:\Windows\system32\drt.dll
2009-07-14 03:15 C:\Windows\system32\drtprov.dll
2009-07-14 03:15 C:\Windows\system32\drttransport.dll
2009-07-14 03:14 C:\Windows\system32\drvinst.exe
2010-11-20 14:18 C:\Windows\system32\drvstore.dll
2009-07-13 23:41 C:\Windows\system32\DRWATSON.EXE
2009-06-10 23:17 C:\Windows\system32\ds16gt.dLL
2009-07-14 03:15 C:\Windows\system32\ds32gt.dll
2010-11-20 14:18 C:\Windows\system32\dsauth.dll
2009-07-14 03:15 C:\Windows\system32\dsdmo.dll
2019-12-12 05:34 C:\Windows\system32\DShowRdpFilter.dll
2009-07-14 03:15 C:\Windows\system32\dskquota.dll
2010-11-20 14:18 C:\Windows\system32\dskquoui.dll
2009-07-14 03:15 C:\Windows\system32\dsound.dll
2009-07-14 03:15 C:\Windows\system32\dsprop.dll
2009-07-14 03:15 C:\Windows\system32\dsquery.dll
2009-07-14 03:15 C:\Windows\system32\dsrole.dll
2009-07-14 03:15 C:\Windows\system32\dssec.dll
2009-07-14 03:17 C:\Windows\system32\dssenh.dll
2010-11-20 14:18 C:\Windows\system32\dsuiext.dll
2009-07-14 03:15 C:\Windows\system32\dswave.dll
2009-07-14 03:15 C:\Windows\system32\dtsh.dll
2009-07-14 03:15 C:\Windows\system32\dui70.dll
2009-07-14 03:15 C:\Windows\system32\duser.dll
2009-07-14 03:14 C:\Windows\system32\dvdplay.exe
2009-07-14 03:14 C:\Windows\system32\dvdupgrd.exe
2009-07-14 03:14 C:\Windows\system32\dwm.exe
2015-07-09 19:42 C:\Windows\system32\dwmapi.dll
2015-07-09 19:42 C:\Windows\system32\dwmcore.dll
2010-11-20 14:18 C:\Windows\system32\dwmredir.dll
2019-11-05 21:43 C:\Windows\system32\DWrite.dll
2019-09-10 04:00 C:\Windows\system32\DWWIN.EXE
2009-07-14 03:14 C:\Windows\system32\dxdiag.exe
2010-11-20 14:18 C:\Windows\system32\dxdiagn.dll
2016-08-10 12:31 C:\Windows\system32\dxgi.dll
2019-06-12 17:06 C:\Windows\system32\dxmasf.dll
2010-11-20 14:18 C:\Windows\system32\DXP.dll
2009-07-14 03:15 C:\Windows\system32\dxpps.dll
2009-07-14 03:14 C:\Windows\system32\Dxpserver.exe
2017-07-07 17:10 C:\Windows\system32\DXPTaskRingtone.dll
2010-11-20 14:18 C:\Windows\system32\DxpTaskSync.dll
2019-12-17 02:18 C:\Windows\system32\dxtmsft.dll
2019-12-17 02:09 C:\Windows\system32\dxtrans.dll
2009-07-14 03:15 C:\Windows\system32\dxva2.dll
2009-07-14 03:14 C:\Windows\system32\Eap3Host.exe
2010-11-20 14:18 C:\Windows\system32\eapp3hst.dll
2009-07-14 03:15 C:\Windows\system32\eappcfg.dll
2010-11-20 14:18 C:\Windows\system32\eappgnui.dll
2010-11-20 14:18 C:\Windows\system32\eapphost.dll
2009-07-14 03:15 C:\Windows\system32\eappprxy.dll
2009-07-14 03:15 C:\Windows\system32\EAPQEC.DLL
2009-07-14 03:15 C:\Windows\system32\eapsvc.dll
2009-06-10 23:42 C:\Windows\system32\edit.com
2009-06-10 23:42 C:\Windows\system32\EDIT.HLP
2009-07-13 23:40 C:\Windows\system32\edlin.exe
2009-07-14 03:15 C:\Windows\system32\efsadu.dll
2010-11-20 14:18 C:\Windows\system32\efscore.dll
2009-07-14 03:15 C:\Windows\system32\efslsaext.dll
2009-07-14 03:15 C:\Windows\system32\efssvc.dll
2009-07-14 03:14 C:\Windows\system32\efsui.exe
2009-07-14 03:15 C:\Windows\system32\efsutil.dll
2009-06-10 23:26 C:\Windows\system32\ega.cpi
2010-11-20 14:18 C:\Windows\system32\EhStorAPI.dll
2009-07-14 03:14 C:\Windows\system32\EhStorAuthn.exe
2009-07-14 03:15 C:\Windows\system32\EhStorPwdMgr.dll
2009-07-14 03:15 C:\Windows\system32\EhStorShell.dll
2015-11-03 20:55 C:\Windows\system32\els.dll
2009-07-14 03:15 C:\Windows\system32\ELSCore.dll
2016-08-10 12:37 C:\Windows\system32\elshyph.dll
2009-07-14 03:15 C:\Windows\system32\elslad.dll
2010-11-20 14:18 C:\Windows\system32\elsTrans.dll
2009-07-14 03:15 C:\Windows\system32\encapi.dll
2016-01-22 08:04 C:\Windows\system32\EncDec.dll
2019-09-12 05:53 C:\Windows\system32\EncDump.dll
2009-07-14 03:15 C:\Windows\system32\energy.dll
2019-12-31 05:06 C:\Windows\system32\EOSNotify.exe
2009-07-14 03:15 C:\Windows\system32\eqossnap.dll
2011-03-11 07:33 C:\Windows\system32\esent.dll
2009-07-14 03:15 C:\Windows\system32\esentprf.dll
2009-07-14 03:14 C:\Windows\system32\esentutl.exe
2012-12-07 12:46 C:\Windows\system32\esrb.rs
2010-11-20 14:17 C:\Windows\system32\eudcedit.exe
2009-07-14 03:15 C:\Windows\system32\eventcls.dll
2009-07-14 03:14 C:\Windows\system32\eventcreate.exe
2009-06-10 23:38 C:\Windows\system32\EventViewer_EventDetails.xsl
2009-07-14 03:14 C:\Windows\system32\eventvwr.exe
2009-06-10 23:38 C:\Windows\system32\eventvwr.msc
2019-06-12 17:20 C:\Windows\system32\evr.dll
2009-07-13 23:40 C:\Windows\system32\exe2bin.exe
2009-07-14 03:14 C:\Windows\system32\expand.exe
2019-05-25 01:58 C:\Windows\system32\ExplorerFrame.dll
2009-07-14 03:15 C:\Windows\system32\expsrv.dll
2009-07-14 03:14 C:\Windows\system32\extrac32.exe
2009-07-14 01:25 C:\Windows\system32\f3ahvoas.dll
2009-07-13 23:41 C:\Windows\system32\fastopen.exe
2019-09-10 04:27 C:\Windows\system32\Faultrep.dll
2009-07-14 03:14 C:\Windows\system32\fc.exe
2009-07-14 03:15 C:\Windows\system32\fdBth.dll
2009-07-14 03:15 C:\Windows\system32\fdBthProxy.dll
2010-11-20 14:19 C:\Windows\system32\fde.dll
2010-11-20 14:19 C:\Windows\system32\fdeploy.dll
2009-07-14 03:15 C:\Windows\system32\fdPHost.dll
2009-07-14 03:15 C:\Windows\system32\fdPnp.dll
2009-07-14 03:15 C:\Windows\system32\fdprint.dll
2009-07-14 03:15 C:\Windows\system32\fdProxy.dll
2009-07-14 03:15 C:\Windows\system32\FDResPub.dll
2009-07-14 03:15 C:\Windows\system32\fdSSDP.dll
2009-07-14 03:15 C:\Windows\system32\fdWCN.dll
2009-07-14 03:15 C:\Windows\system32\fdWNet.dll
2009-07-14 03:15 C:\Windows\system32\fdWSD.dll
2009-07-14 03:15 C:\Windows\system32\feclient.dll
2009-07-14 03:15 C:\Windows\system32\filemgmt.dll
2009-07-14 03:14 C:\Windows\system32\find.exe
2009-07-14 03:15 C:\Windows\system32\findnetprinters.dll
2010-11-20 14:17 C:\Windows\system32\findstr.exe
2009-07-14 03:14 C:\Windows\system32\finger.exe
2009-07-14 03:14 C:\Windows\system32\Firewall.cpl
2010-11-20 14:19 C:\Windows\system32\FirewallControlPanel.dll
2015-11-14 00:49 C:\Windows\system32\fixmapi.exe
2009-07-14 03:15 C:\Windows\system32\fltLib.dll
2009-07-14 03:14 C:\Windows\system32\fltMC.exe
2009-07-14 03:15 C:\Windows\system32\fmifs.dll
2010-11-20 14:19 C:\Windows\system32\fms.dll
2019-11-05 21:43 C:\Windows\system32\FntCache.dll
2010-11-20 14:19 C:\Windows\system32\fontext.dll
2019-11-15 04:29 C:\Windows\system32\fontsub.dll
2009-07-14 03:14 C:\Windows\system32\fontview.exe
2009-07-14 03:14 C:\Windows\system32\forfiles.exe
2009-07-14 01:15 C:\Windows\system32\format.com
2012-12-07 12:46 C:\Windows\system32\fpb.rs
2010-11-20 14:19 C:\Windows\system32\fphc.dll
2009-07-14 01:25 C:\Windows\system32\framebuf.dll
2010-11-20 14:19 C:\Windows\system32\framedyn.dll
2010-11-20 14:19 C:\Windows\system32\framedynos.dll
2009-06-10 23:21 C:\Windows\system32\fsmgmt.msc
2019-07-30 03:56 C:\Windows\system32\fsquirt.exe
2011-03-11 07:31 C:\Windows\system32\fsutil.exe
2009-07-14 03:15 C:\Windows\system32\fthsvc.dll
2009-08-04 19:55 C:\Windows\system32\ftlx0411.dll
2009-08-04 19:55 C:\Windows\system32\ftlx041e.dll
2010-11-20 14:17 C:\Windows\system32\ftp.exe
2009-08-04 19:55 C:\Windows\system32\ftsrch.dll
2009-07-14 03:15 C:\Windows\system32\fundisc.dll
2015-06-03 22:22 C:\Windows\system32\fveapi.dll
2016-02-05 20:44 C:\Windows\system32\fveapibase.dll
2009-07-14 03:15 C:\Windows\system32\fvecerts.dll
2010-11-20 14:19 C:\Windows\system32\fvecpl.dll
2009-07-14 03:14 C:\Windows\system32\fvenotify.exe
2009-07-14 03:14 C:\Windows\system32\fveprompt.exe
2009-07-14 03:15 C:\Windows\system32\fveRecover.dll
2009-07-14 03:15 C:\Windows\system32\fveui.dll
2009-07-14 03:15 C:\Windows\system32\fvewiz.dll
2009-07-14 03:15 C:\Windows\system32\fwcfg.dll
2013-10-12 04:01 C:\Windows\system32\FWPUCLNT.DLL
2016-05-12 17:18 C:\Windows\system32\FwRemoteSvr.dll
2009-07-14 03:15 C:\Windows\system32\FXSAPI.dll
2009-07-14 03:15 C:\Windows\system32\FXSCOM.dll
2009-07-14 03:15 C:\Windows\system32\FXSCOMEX.dll
2009-07-14 03:15 C:\Windows\system32\FXSCOMPOSE.dll
2009-07-14 03:05 C:\Windows\system32\FXSCOMPOSERES.dll
2011-02-12 07:35 C:\Windows\system32\FXSCOVER.exe
2009-07-14 03:05 C:\Windows\system32\FXSEVENT.dll
2009-07-14 03:15 C:\Windows\system32\FXSEXT32.dll
2010-11-20 14:19 C:\Windows\system32\FXSMON.dll
2009-07-14 03:05 C:\Windows\system32\FXSRESM.dll
2009-07-14 03:15 C:\Windows\system32\FXSROUTE.dll
2009-07-14 03:15 C:\Windows\system32\FXSST.dll
2010-11-20 14:17 C:\Windows\system32\FXSSVC.exe
2009-07-14 03:15 C:\Windows\system32\FXST30.dll
2010-11-20 14:19 C:\Windows\system32\FXSTIFF.dll
2009-07-14 06:42 C:\Windows\system32\FxsTmp
2009-07-14 03:14 C:\Windows\system32\FXSUNATD.exe
2009-07-14 03:15 C:\Windows\system32\FXSUTILITY.dll
2009-07-14 03:15 C:\Windows\system32\FXSXP32.dll
2010-11-20 14:16 C:\Windows\system32\g711codc.ax
2009-07-14 03:15 C:\Windows\system32\gacinstall.dll
2012-12-07 14:20 C:\Windows\system32\gameux.dll
2009-07-14 03:05 C:\Windows\system32\GameUXLegacyGDFs.dll
2009-06-10 23:19 C:\Windows\system32\gatherNetworkInfo.vbs
2009-06-10 23:30 C:\Windows\system32\gb2312.uce
2009-07-14 03:15 C:\Windows\system32\gcdef.dll
2009-07-13 23:41 C:\Windows\system32\GDI.EXE
2019-11-28 05:29 C:\Windows\system32\gdi32.dll
2019-09-10 02:10 C:\Windows\system32\generaltel.dll
2009-07-14 03:14 C:\Windows\system32\getmac.exe
2009-07-14 03:14 C:\Windows\system32\GettingStarted.exe
2009-07-14 03:15 C:\Windows\system32\getuname.dll
2009-07-14 03:15 C:\Windows\system32\glmf32.dll
2009-07-14 03:15 C:\Windows\system32\glu32.dll
2016-05-12 17:18 C:\Windows\system32\gpapi.dll
2017-10-17 00:46 C:\Windows\system32\gpedit.dll
2009-06-10 23:28 C:\Windows\system32\gpedit.msc
2016-05-12 17:18 C:\Windows\system32\gpprefcl.dll
2009-07-14 03:15 C:\Windows\system32\gpprnext.dll
2009-07-14 03:14 C:\Windows\system32\gpresult.exe
2016-05-12 16:57 C:\Windows\system32\gpscript.dll
2016-05-12 16:57 C:\Windows\system32\gpscript.exe
2016-05-12 17:18 C:\Windows\system32\gpsvc.dll
2009-07-14 03:15 C:\Windows\system32\gptext.dll
2009-07-14 03:14 C:\Windows\system32\gpupdate.exe
2009-07-14 01:20 C:\Windows\system32\graftabl.com
2009-07-13 23:41 C:\Windows\system32\GRAPHICS.COM
2009-06-10 23:42 C:\Windows\system32\graphics.pro
2012-12-07 12:46 C:\Windows\system32\grb.rs
2019-07-13 10:33 C:\Windows\system32\Groupinghc.dll
2009-07-14 03:14 C:\Windows\system32\grpconv.exe
2020-01-03 05:42 C:\Windows\system32\hal.dll
2020-01-03 05:42 C:\Windows\system32\halacpi.dll
2020-01-03 05:42 C:\Windows\system32\halmacpi.dll
2010-11-20 14:19 C:\Windows\system32\hbaapi.dll
2009-07-14 03:15 C:\Windows\system32\hcproviders.dll
2009-07-14 03:14 C:\Windows\system32\hdwwiz.cpl
2009-07-14 03:14 C:\Windows\system32\hdwwiz.exe
2009-07-14 03:14 C:\Windows\system32\help.exe
2009-07-14 03:15 C:\Windows\system32\HelpPaneProxy.dll
2010-11-20 14:19 C:\Windows\system32\hgcpl.dll
2010-11-20 14:19 C:\Windows\system32\hgprint.dll
2018-04-18 17:51 C:\Windows\system32\hhctrl.ocx
2018-04-18 17:51 C:\Windows\system32\hhsetup.dll
2009-07-14 03:15 C:\Windows\system32\hid.dll
2009-07-14 03:14 C:\Windows\system32\hidphone.tsp
2009-07-14 03:15 C:\Windows\system32\hidserv.dll
2009-07-13 23:40 C:\Windows\system32\HIMEM.SYS
2018-08-03 17:39 C:\Windows\system32\hlink.dll
2009-07-14 03:15 C:\Windows\system32\hnetcfg.dll
2009-07-14 03:15 C:\Windows\system32\hnetmon.dll
2009-07-14 03:14 C:\Windows\system32\HOSTNAME.EXE
2009-07-14 03:15 C:\Windows\system32\hotplug.dll
2010-11-20 14:19 C:\Windows\system32\HotStartUserAgent.dll
2019-12-17 02:36 C:\Windows\system32\html.iec
2010-11-20 14:19 C:\Windows\system32\httpapi.dll
2009-07-14 03:15 C:\Windows\system32\htui.dll
2009-07-14 03:14 C:\Windows\system32\hwrcomp.exe
2009-07-14 03:14 C:\Windows\system32\hwrreg.exe
2009-07-14 03:14 C:\Windows\system32\iac25_32.ax
2009-07-14 03:15 C:\Windows\system32\ias.dll
2010-11-20 14:19 C:\Windows\system32\iasacct.dll
2009-07-14 03:15 C:\Windows\system32\iasads.dll
2009-07-14 03:15 C:\Windows\system32\iasdatastore.dll
2009-07-14 03:15 C:\Windows\system32\iashlpr.dll
2009-07-14 03:16 C:\Windows\system32\IasMigPlugin.dll
2009-07-14 03:15 C:\Windows\system32\iasnap.dll
2009-07-14 03:15 C:\Windows\system32\iaspolcy.dll
2010-11-20 14:19 C:\Windows\system32\iasrad.dll
2010-11-20 14:19 C:\Windows\system32\iasrecst.dll
2009-07-14 03:15 C:\Windows\system32\iassam.dll
2009-07-14 03:15 C:\Windows\system32\iassdo.dll
2009-07-14 03:15 C:\Windows\system32\iassvcs.dll
2017-08-14 19:35 C:\Windows\system32\icaapi.dll
2009-07-14 03:14 C:\Windows\system32\icacls.exe
2014-03-09 23:47 C:\Windows\system32\icardagt.exe
2016-08-10 12:37 C:\Windows\system32\icardie.dll
2014-07-01 00:14 C:\Windows\system32\icardres.dll
2010-11-20 14:19 C:\Windows\system32\iccvid.dll
2018-08-10 17:40 C:\Windows\system32\icfupgd.dll
2019-11-15 04:29 C:\Windows\system32\icm32.dll
2009-07-14 03:05 C:\Windows\system32\icmp.dll
2009-07-14 03:15 C:\Windows\system32\icmui.dll
2009-07-14 03:15 C:\Windows\system32\IconCodecService.dll
2009-07-14 03:15 C:\Windows\system32\icsigd.dll
2009-07-14 03:14 C:\Windows\system32\icsunattend.exe
2009-07-14 04:37 C:\Windows\system32\icsxml
2009-06-10 23:30 C:\Windows\system32\ideograf.uce
2009-07-14 03:15 C:\Windows\system32\IdListen.dll
2009-07-14 03:15 C:\Windows\system32\idndl.dll
2009-07-14 03:15 C:\Windows\system32\IDStore.dll
2019-12-17 02:01 C:\Windows\system32\ie4uinit.exe
2016-08-10 12:37 C:\Windows\system32\IEAdvpack.dll
2016-08-10 12:37 C:\Windows\system32\ieapfltr.dat
2019-12-17 01:38 C:\Windows\system32\ieapfltr.dll
2019-12-18 18:48 C:\Windows\system32\iedkcs32.dll
2019-12-17 02:27 C:\Windows\system32\ieetwcollector.exe
2019-12-17 02:49 C:\Windows\system32\ieetwcollectorres.dll
2019-12-17 02:36 C:\Windows\system32\ieetwproxystub.dll
2019-12-17 01:56 C:\Windows\system32\ieframe.dll
2016-08-10 12:37 C:\Windows\system32\iepeers.dll
2019-12-17 02:30 C:\Windows\system32\iernonce.dll
2019-12-17 02:33 C:\Windows\system32\iertutil.dll
2019-12-17 02:37 C:\Windows\system32\iesetup.dll
2016-08-10 12:37 C:\Windows\system32\iesysprep.dll
2019-12-17 02:28 C:\Windows\system32\ieui.dll
2016-08-10 12:37 C:\Windows\system32\ieuinit.inf
2019-12-17 02:27 C:\Windows\system32\ieUnatt.exe
2016-08-10 12:37 C:\Windows\system32\iexpress.exe
2009-07-14 03:15 C:\Windows\system32\ifmon.dll
2010-11-20 14:19 C:\Windows\system32\ifsutil.dll
2009-07-14 03:15 C:\Windows\system32\ifsutilx.dll
2009-07-14 03:15 C:\Windows\system32\igdDiag.dll
2013-10-12 04:01 C:\Windows\system32\IKEEXT.DLL
2009-07-14 03:14 C:\Windows\system32\imaadp32.acm
2013-10-19 03:36 C:\Windows\system32\imagehlp.dll
2009-07-14 03:06 C:\Windows\system32\imageres.dll
2009-07-14 03:06 C:\Windows\system32\imagesp1.dll
2009-07-14 03:15 C:\Windows\system32\imapi.dll
2010-11-20 14:19 C:\Windows\system32\imapi2.dll
2010-11-20 14:19 C:\Windows\system32\imapi2fs.dll
2016-08-10 12:37 C:\Windows\system32\imgutil.dll
2016-10-11 17:18 C:\Windows\system32\IMJP10.IME
2016-10-11 17:18 C:\Windows\system32\IMJP10K.DLL
2016-10-11 17:18 C:\Windows\system32\imkr80.ime
2010-11-20 14:19 C:\Windows\system32\imm32.dll
2018-05-11 02:40 C:\Windows\system32\inetcomm.dll
2019-12-17 02:01 C:\Windows\system32\inetcpl.cpl
2010-11-20 14:19 C:\Windows\system32\inetmib1.dll
2017-08-11 08:19 C:\Windows\system32\inetpp.dll
2017-08-11 08:09 C:\Windows\system32\inetppui.dll
2018-05-11 02:40 C:\Windows\system32\INETRES.dll
2009-07-14 03:14 C:\Windows\system32\InfDefaultInstall.exe
2014-03-09 23:47 C:\Windows\system32\infocardapi.dll
2009-06-10 23:14 C:\Windows\system32\infocardcpl.cpl
2016-03-09 20:34 C:\Windows\system32\InkEd.dll
2016-10-11 17:18 C:\Windows\system32\input.dll
2019-12-17 02:13 C:\Windows\system32\inseng.dll
2010-11-20 14:16 C:\Windows\system32\intl.cpl
2019-09-10 02:10 C:\Windows\system32\invagent.dll
2014-02-04 04:00 C:\Windows\system32\iologmsg.dll
2009-07-14 03:15 C:\Windows\system32\IPBusEnum.dll
2009-07-14 03:15 C:\Windows\system32\IPBusEnumProxy.dll
2009-07-14 03:14 C:\Windows\system32\ipconfig.exe
2010-11-20 14:19 C:\Windows\system32\IPHLPAPI.DLL
2019-11-05 23:25 C:\Windows\system32\iphlpsvc.dll
2009-07-14 03:15 C:\Windows\system32\ipnathlp.dll
2009-07-14 03:06 C:\Windows\system32\iprop.dll
2017-11-02 16:56 C:\Windows\system32\iprtprio.dll
2017-11-02 17:11 C:\Windows\system32\iprtrmgr.dll
2009-07-14 03:15 C:\Windows\system32\ipsecsnp.dll
2016-05-12 17:18 C:\Windows\system32\IPSECSVC.DLL
2010-11-20 14:19 C:\Windows\system32\ipsmsnap.dll
2009-07-14 03:15 C:\Windows\system32\ir32_32.dll
2009-07-14 03:14 C:\Windows\system32\ir41_32.ax
2009-07-14 03:15 C:\Windows\system32\ir41_qc.dll
2009-07-14 03:15 C:\Windows\system32\ir41_qcx.dll
2009-07-14 03:15 C:\Windows\system32\ir50_32.dll
2009-07-14 03:15 C:\Windows\system32\ir50_qc.dll
2009-07-14 03:15 C:\Windows\system32\ir50_qcx.dll
2009-07-14 03:15 C:\Windows\system32\irclass.dll
2009-07-14 03:14 C:\Windows\system32\irftp.exe
2009-07-14 03:15 C:\Windows\system32\irmon.dll
2009-07-14 03:14 C:\Windows\system32\irprops.cpl
2010-11-20 14:17 C:\Windows\system32\iscsicli.exe
2009-07-14 03:15 C:\Windows\system32\iscsicpl.dll
2009-07-14 03:14 C:\Windows\system32\iscsicpl.exe
2009-07-14 03:15 C:\Windows\system32\iscsidsc.dll
2009-07-14 03:15 C:\Windows\system32\iscsied.dll
2009-07-14 03:15 C:\Windows\system32\iscsiexe.dll
2010-11-20 14:19 C:\Windows\system32\iscsium.dll
2009-07-14 03:15 C:\Windows\system32\iscsiwmi.dll
2010-11-20 14:17 C:\Windows\system32\isoburn.exe
2018-12-04 17:55 C:\Windows\system32\itircl.dll
2018-12-04 17:55 C:\Windows\system32\itss.dll
2010-11-20 14:19 C:\Windows\system32\iTVData.dll
2009-07-14 03:14 C:\Windows\system32\ivfsrc.ax
2010-11-20 14:19 C:\Windows\system32\iyuv_32.dll
2019-12-17 02:14 C:\Windows\system32\JavaScriptCollectionAgent.dll
2009-07-14 03:14 C:\Windows\system32\joy.cpl
2019-12-17 02:27 C:\Windows\system32\jscript.dll
2019-12-17 02:03 C:\Windows\system32\jscript9.dll
2019-12-17 02:26 C:\Windows\system32\jscript9diag.dll
2016-08-10 12:37 C:\Windows\system32\jsIntl.dll
2019-12-17 02:30 C:\Windows\system32\jsproxy.dll
2009-06-10 23:30 C:\Windows\system32\kanji_1.uce
2009-06-10 23:30 C:\Windows\system32\kanji_2.uce
2009-07-13 23:40 C:\Windows\system32\KB16.COM
2009-07-14 03:06 C:\Windows\system32\kbd101.dll
2009-07-14 03:06 C:\Windows\system32\kbd101a.dll
2009-07-14 03:06 C:\Windows\system32\kbd101b.dll
2009-07-14 03:06 C:\Windows\system32\kbd101c.dll
2009-07-14 03:06 C:\Windows\system32\kbd103.dll
2009-07-14 03:06 C:\Windows\system32\kbd106.dll
2009-07-14 03:06 C:\Windows\system32\kbd106n.dll
2009-07-14 03:06 C:\Windows\system32\KBDA1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDA2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDA3.DLL
2009-07-14 03:06 C:\Windows\system32\KBDAL.DLL
2009-07-14 03:06 C:\Windows\system32\KBDARME.DLL
2009-07-14 03:06 C:\Windows\system32\KBDARMW.DLL
2009-07-14 03:06 C:\Windows\system32\kbdax2.dll
2015-12-16 20:43 C:\Windows\system32\KBDAZE.DLL
2015-12-16 20:43 C:\Windows\system32\KBDAZEL.DLL
2014-07-09 03:29 C:\Windows\system32\KBDBASH.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBE.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBENE.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBGPH.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBGPH1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBHC.DLL
2010-11-20 14:00 C:\Windows\system32\KBDBLR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDBU.DLL
2010-11-20 14:00 C:\Windows\system32\KBDBULG.DLL
2009-07-14 03:06 C:\Windows\system32\KBDCA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDCAN.DLL
2009-07-14 03:06 C:\Windows\system32\KBDCR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDCZ.DLL
2010-11-20 14:00 C:\Windows\system32\KBDCZ1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDCZ2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDDA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDDIV1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDDIV2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDDV.DLL
2009-07-14 03:06 C:\Windows\system32\KBDES.DLL
2009-07-14 03:06 C:\Windows\system32\KBDEST.DLL
2009-07-14 03:06 C:\Windows\system32\KBDFA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDFC.DLL
2009-07-14 03:06 C:\Windows\system32\KBDFI.DLL
2009-07-14 03:06 C:\Windows\system32\KBDFI1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDFO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDFR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDGAE.DLL
2010-11-20 14:00 C:\Windows\system32\KBDGEO.DLL
2009-07-14 03:06 C:\Windows\system32\kbdgeoer.dll
2015-12-16 20:43 C:\Windows\system32\kbdgeoqw.dll
2010-11-20 14:00 C:\Windows\system32\KBDGKL.DLL
2009-07-14 03:06 C:\Windows\system32\KBDGR.DLL
2010-11-20 14:00 C:\Windows\system32\KBDGR1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDGRLND.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHAU.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHE.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHE220.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHE319.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHEB.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHELA2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHELA3.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHEPT.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHU.DLL
2009-07-14 03:06 C:\Windows\system32\KBDHU1.DLL
2009-07-14 03:06 C:\Windows\system32\kbdibm02.dll
2009-07-14 03:06 C:\Windows\system32\KBDIBO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDIC.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINASA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINBE1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINBE2.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINBEN.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINDEV.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINGUJ.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINHIN.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINKAN.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINMAL.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINMAR.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINORI.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINPUN.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINTAM.DLL
2010-11-20 14:00 C:\Windows\system32\KBDINTEL.DLL
2009-07-14 03:06 C:\Windows\system32\KBDINUK2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDIR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDIT.DLL
2009-07-14 03:06 C:\Windows\system32\KBDIT142.DLL
2009-07-14 03:06 C:\Windows\system32\KBDIULAT.DLL
2009-07-14 03:15 C:\Windows\system32\KBDJPN.DLL
2009-07-14 03:06 C:\Windows\system32\KBDKAZ.DLL
2009-07-14 03:06 C:\Windows\system32\KBDKHMR.DLL
2009-07-14 03:15 C:\Windows\system32\KBDKOR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDKYR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDLA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDLAO.DLL
2010-11-20 14:00 C:\Windows\system32\kbdlk41a.dll
2009-07-14 03:06 C:\Windows\system32\KBDLT.DLL
2010-11-20 14:00 C:\Windows\system32\KBDLT1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDLT2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDLV.DLL
2009-07-14 03:06 C:\Windows\system32\KBDLV1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDMAC.DLL
2009-07-14 03:06 C:\Windows\system32\KBDMACST.DLL
2010-11-20 14:00 C:\Windows\system32\KBDMAORI.DLL
2009-07-14 03:06 C:\Windows\system32\KBDMLT47.DLL
2009-07-14 03:06 C:\Windows\system32\KBDMLT48.DLL
2010-11-20 14:00 C:\Windows\system32\KBDMON.DLL
2009-07-14 03:06 C:\Windows\system32\KBDMONMO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDNE.DLL
2009-07-14 03:06 C:\Windows\system32\kbdnec.dll
2009-07-14 03:06 C:\Windows\system32\kbdnec95.dll
2009-07-14 03:06 C:\Windows\system32\kbdnecat.dll
2009-07-14 03:06 C:\Windows\system32\kbdnecnt.dll
2010-11-20 14:00 C:\Windows\system32\KBDNEPR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDNO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDNO1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDNSO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDPASH.DLL
2009-07-14 03:06 C:\Windows\system32\KBDPL.DLL
2009-07-14 03:06 C:\Windows\system32\KBDPL1.DLL
2010-11-20 14:00 C:\Windows\system32\KBDPO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDRO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDROPR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDROST.DLL
2014-07-09 03:29 C:\Windows\system32\KBDRU.DLL
2014-07-09 03:29 C:\Windows\system32\KBDRU1.DLL
2010-11-20 14:00 C:\Windows\system32\KBDSF.DLL
2010-11-20 14:00 C:\Windows\system32\KBDSG.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSL.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSL1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSMSFI.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSMSNO.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSN1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSOREX.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSORS1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSORST.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSP.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSW.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSW09.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSYR1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDSYR2.DLL
2010-11-20 14:00 C:\Windows\system32\KBDTAJIK.DLL
2014-07-09 03:29 C:\Windows\system32\KBDTAT.DLL
2009-07-14 03:06 C:\Windows\system32\KBDTH0.DLL
2009-07-14 03:06 C:\Windows\system32\KBDTH1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDTH2.DLL
2009-07-14 03:06 C:\Windows\system32\KBDTH3.DLL
2009-07-14 03:06 C:\Windows\system32\KBDTIPRC.DLL
2010-11-20 14:00 C:\Windows\system32\KBDTUF.DLL
2010-11-20 14:00 C:\Windows\system32\KBDTUQ.DLL
2010-11-20 14:00 C:\Windows\system32\KBDTURME.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUGHR.DLL
2010-11-20 14:00 C:\Windows\system32\KBDUGHR1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUK.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUKX.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUR1.DLL
2009-07-14 03:06 C:\Windows\system32\KBDURDU.DLL
2010-11-20 14:00 C:\Windows\system32\KBDUS.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUSA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUSL.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUSR.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUSX.DLL
2009-07-14 03:06 C:\Windows\system32\KBDUZB.DLL
2009-07-14 03:06 C:\Windows\system32\KBDVNTC.DLL
2009-07-14 03:06 C:\Windows\system32\KBDWOL.DLL
2014-07-09 03:29 C:\Windows\system32\KBDYAK.DLL
2009-07-14 03:06 C:\Windows\system32\KBDYBA.DLL
2009-07-14 03:06 C:\Windows\system32\KBDYCC.DLL
2009-07-14 03:06 C:\Windows\system32\KBDYCL.DLL
2009-07-14 03:20 C:\Windows\system32\kd1394.dll
2009-07-14 03:20 C:\Windows\system32\kdcom.dll
2009-07-14 03:20 C:\Windows\system32\kdusb.dll
2020-01-03 05:38 C:\Windows\system32\kerberos.dll
2020-01-03 05:38 C:\Windows\system32\kernel32.dll
2020-01-03 05:38 C:\Windows\system32\KernelBase.dll
2009-07-14 03:15 C:\Windows\system32\kernelceip.dll
2009-07-13 23:40 C:\Windows\system32\KEY01.SYS
2009-07-13 23:41 C:\Windows\system32\keyboard.drv
2009-07-13 23:40 C:\Windows\system32\KEYBOARD.SYS
2009-07-14 03:15 C:\Windows\system32\keyiso.dll
2009-07-14 03:15 C:\Windows\system32\keymgr.dll
2009-07-14 03:14 C:\Windows\system32\klist.exe
2018-12-08 04:41 C:\Windows\system32\kmddsp.tsp
2010-11-20 14:19 C:\Windows\system32\KMSVC.DLL
2009-06-10 23:30 C:\Windows\system32\korean.uce
2009-07-14 03:15 C:\Windows\system32\korwbrkr.dll
2009-07-13 23:41 C:\Windows\system32\krnl386.exe
2009-07-14 03:14 C:\Windows\system32\ksetup.exe
2015-12-08 23:53 C:\Windows\system32\ksproxy.ax
2010-11-20 14:16 C:\Windows\system32\kstvtune.ax
2015-12-08 23:53 C:\Windows\system32\ksuser.dll
2010-11-20 14:16 C:\Windows\system32\Kswdmcap.ax
2010-11-20 14:16 C:\Windows\system32\ksxbar.ax
2009-07-14 03:14 C:\Windows\system32\ktmutil.exe
2009-07-14 03:15 C:\Windows\system32\ktmw32.dll
2009-07-14 03:15 C:\Windows\system32\l2gpstore.dll
2009-07-14 03:15 C:\Windows\system32\l2nacp.dll
2009-07-14 03:15 C:\Windows\system32\L2SecHC.dll
2009-07-14 03:14 C:\Windows\system32\l3codeca.acm
2009-07-14 03:14 C:\Windows\system32\l3codecp.acm
2009-07-14 03:14 C:\Windows\system32\label.exe
2009-07-14 03:15 C:\Windows\system32\LangCleanupSysprepAction.dll
2009-06-10 23:42 C:\Windows\system32\lanman.drv
2009-07-14 03:15 C:\Windows\system32\LAPRXY.DLL
2009-06-10 23:41 C:\Windows\system32\lcphrase.tbl
2009-06-10 23:41 C:\Windows\system32\lcptr.tbl
2016-08-10 12:37 C:\Windows\system32\licmgr10.dll
2009-07-14 03:15 C:\Windows\system32\linkinfo.dll
2010-11-20 14:19 C:\Windows\system32\ListSvc.dll
2009-07-14 03:15 C:\Windows\system32\lltdapi.dll
2009-07-14 03:06 C:\Windows\system32\lltdres.dll
2009-07-14 03:15 C:\Windows\system32\lltdsvc.dll
2009-07-14 03:15 C:\Windows\system32\lmhsvc.dll
2009-07-13 23:40 C:\Windows\system32\LOADFIX.COM
2009-07-14 03:15 C:\Windows\system32\loadperf.dll
2019-04-16 15:15 C:\Windows\system32\locale.nls
2010-11-20 14:19 C:\Windows\system32\localsec.dll
2019-02-16 07:50 C:\Windows\system32\localspl.dll
2009-07-14 03:15 C:\Windows\system32\localui.dll
2009-07-14 03:15 C:\Windows\system32\LocationApi.dll
2009-07-14 03:14 C:\Windows\system32\LocationNotifications.exe
2009-06-10 23:16 C:\Windows\system32\locationnotificationsview.xml
2009-07-14 03:14 C:\Windows\system32\Locator.exe
2009-07-14 03:14 C:\Windows\system32\lodctr.exe
2010-11-20 14:17 C:\Windows\system32\logagent.exe
2009-07-14 03:15 C:\Windows\system32\loghours.dll
2015-05-25 20:00 C:\Windows\system32\logman.exe
2010-11-20 14:17 C:\Windows\system32\logoff.exe
2010-11-20 14:19 C:\Windows\system32\logoncli.dll
2010-11-20 14:17 C:\Windows\system32\LogonUI.exe
2019-11-15 04:29 C:\Windows\system32\lpk.dll
2010-11-20 14:17 C:\Windows\system32\lpksetup.exe
2009-07-14 03:15 C:\Windows\system32\lpksetupproxyserv.dll
2010-11-20 14:17 C:\Windows\system32\lpremove.exe
2020-01-03 05:38 C:\Windows\system32\lsasrv.dll
2020-01-03 05:02 C:\Windows\system32\lsass.exe
2019-12-12 05:15 C:\Windows\system32\LSCSHostPolicy.dll
2010-11-20 14:17 C:\Windows\system32\lsm.exe
2010-11-20 14:19 C:\Windows\system32\lsmproxy.dll
2010-11-20 14:19 C:\Windows\system32\luainstall.dll
2009-06-10 23:26 C:\Windows\system32\lusrmgr.msc
2009-07-14 03:06 C:\Windows\system32\lz32.dll
2009-06-10 23:42 C:\Windows\system32\lzexpand.dll
2009-06-10 23:48 C:\Windows\system32\l_intl.nls
2009-07-14 03:15 C:\Windows\system32\Magnification.dll
2009-07-14 03:14 C:\Windows\system32\Magnify.exe
2010-11-20 14:16 C:\Windows\system32\main.cpl
2009-07-14 03:14 C:\Windows\system32\makecab.exe
2010-11-20 14:17 C:\Windows\system32\manage-bde.exe
2009-06-10 23:43 C:\Windows\system32\manage-bde.wsf
2015-11-14 00:50 C:\Windows\system32\mapi32.dll
2015-11-14 00:50 C:\Windows\system32\mapistub.dll
2010-11-20 14:17 C:\Windows\system32\mblctr.exe
2010-11-20 14:17 C:\Windows\system32\mcbuilder.exe
2010-11-05 04:11 C:\Windows\system32\MCEWMDRMNDBootstrap.dll
2009-06-10 23:21 C:\Windows\system32\mciavi.drv
2010-11-20 14:19 C:\Windows\system32\mciavi32.dll
2009-07-14 03:15 C:\Windows\system32\mcicda.dll
2010-11-20 14:19 C:\Windows\system32\mciqtz32.dll
2009-07-14 03:15 C:\Windows\system32\mciseq.dll
2009-06-10 23:21 C:\Windows\system32\mciseq.drv
2009-07-14 03:15 C:\Windows\system32\mciwave.dll
2009-06-10 23:21 C:\Windows\system32\mciwave.drv
2015-12-08 23:53 C:\Windows\system32\mcmde.dll
2009-07-14 03:15 C:\Windows\system32\mcsrchPH.dll
2009-07-14 03:14 C:\Windows\system32\mctadmin.exe
2009-07-14 03:06 C:\Windows\system32\mctres.dll
2009-07-14 03:20 C:\Windows\system32\mcupdate_AuthenticAMD.dll
2010-11-20 14:29 C:\Windows\system32\mcupdate_GenuineIntel.dll
2010-11-20 14:19 C:\Windows\system32\Mcx2Svc.dll
2009-07-14 03:15 C:\Windows\system32\McxDriv.dll
2009-07-14 03:15 C:\Windows\system32\mdminst.dll
2009-07-14 03:14 C:\Windows\system32\MdRes.exe
2010-11-20 14:17 C:\Windows\system32\MdSched.exe
2010-11-20 14:19 C:\Windows\system32\MediaMetadataHandler.dll
2009-07-13 23:40 C:\Windows\system32\mem.exe
2009-07-14 03:15 C:\Windows\system32\memdiag.dll
2019-06-12 17:20 C:\Windows\system32\mf.dll
2019-11-05 23:25 C:\Windows\system32\mf3216.dll
2009-07-14 03:15 C:\Windows\system32\mfAACEnc.dll
2010-11-20 14:19 C:\Windows\system32\mfc40.dll
2010-11-20 14:19 C:\Windows\system32\mfc40u.dll
2011-03-11 07:33 C:\Windows\system32\mfc42.dll
2011-03-11 07:33 C:\Windows\system32\mfc42u.dll
2009-07-14 03:15 C:\Windows\system32\mfcsubs.dll
2016-02-04 20:41 C:\Windows\system32\mfds.dll
2009-07-14 03:15 C:\Windows\system32\mfdvdec.dll
2019-06-12 17:20 C:\Windows\system32\mferror.dll
2009-07-14 03:15 C:\Windows\system32\mfh264enc.dll
2017-03-04 03:14 C:\Windows\system32\mfmjpegdec.dll
2019-06-12 17:20 C:\Windows\system32\mfplat.dll
2010-11-20 14:19 C:\Windows\system32\MFPlay.dll
2019-06-12 17:04 C:\Windows\system32\mfpmp.exe
2019-06-12 17:20 C:\Windows\system32\mfps.dll
2010-11-20 14:19 C:\Windows\system32\mfreadwrite.dll
2015-12-08 23:53 C:\Windows\system32\mfvdsp.dll
2015-12-08 23:53 C:\Windows\system32\MFWMAAEC.DLL
2009-07-14 03:15 C:\Windows\system32\mgmtapi.dll
2009-07-14 03:06 C:\Windows\system32\microsoft-windows-hal-events.dll
2009-07-14 03:06 C:\Windows\system32\microsoft-windows-kernel-power-events.dll
2009-07-14 03:06 C:\Windows\system32\microsoft-windows-kernel-processor-power-events.dll
2009-07-14 03:15 C:\Windows\system32\midimap.dll
2017-05-10 17:16 C:\Windows\system32\MigAutoPlay.exe
2010-11-20 14:19 C:\Windows\system32\migisol.dll
2009-07-14 03:15 C:\Windows\system32\miguiresource.dll
2010-11-20 14:19 C:\Windows\system32\mimefilt.dll
2009-06-10 23:26 C:\Windows\system32\mlang.dat
2009-07-14 03:15 C:\Windows\system32\mlang.dll
2017-08-13 23:30 C:\Windows\system32\mmc.exe
2017-08-14 19:35 C:\Windows\system32\mmcbase.dll
2009-07-14 03:15 C:\Windows\system32\mmci.dll
2009-07-14 03:15 C:\Windows\system32\mmcico.dll
2017-08-14 19:35 C:\Windows\system32\mmcndmgr.dll
2017-08-14 19:35 C:\Windows\system32\mmcshext.dll
2009-07-14 03:15 C:\Windows\system32\mmcss.dll
2010-11-20 14:19 C:\Windows\system32\MMDevAPI.dll
2009-07-14 03:06 C:\Windows\system32\mmres.dll
2010-11-20 14:16 C:\Windows\system32\mmsys.cpl
2009-07-13 23:41 C:\Windows\system32\MMSYSTEM.DLL
2009-07-13 23:41 C:\Windows\system32\mmtask.tsk
2010-11-20 14:17 C:\Windows\system32\mobsync.exe
2009-07-14 01:15 C:\Windows\system32\mode.com
2009-07-14 03:15 C:\Windows\system32\modemui.dll
2009-07-14 03:15 C:\Windows\system32\montr_ci.dll
2009-07-14 01:15 C:\Windows\system32\more.com
2009-07-14 03:06 C:\Windows\system32\moricons.dll
2009-07-14 03:14 C:\Windows\system32\mountvol.exe
2009-07-13 23:41 C:\Windows\system32\mouse.drv
2015-12-08 23:53 C:\Windows\system32\MP3DMOD.DLL
2015-12-08 23:53 C:\Windows\system32\MP43DECD.DLL
2015-12-08 23:53 C:\Windows\system32\MP4SDECD.DLL
2010-11-20 14:16 C:\Windows\system32\Mpeg2Data.ax
2010-12-23 07:50 C:\Windows\system32\mpg2splt.ax
2015-12-08 23:53 C:\Windows\system32\MPG4DECD.DLL
2009-07-14 03:14 C:\Windows\system32\mpnotify.exe
2009-07-14 03:15 C:\Windows\system32\mpr.dll
2010-11-20 14:19 C:\Windows\system32\mprapi.dll
2010-11-20 14:19 C:\Windows\system32\mprddm.dll
2017-11-02 17:11 C:\Windows\system32\mprdim.dll
2009-07-14 03:15 C:\Windows\system32\mprmsg.dll
2018-08-10 17:41 C:\Windows\system32\MPSSVC.dll
2009-07-14 03:14 C:\Windows\system32\MRINFO.EXE
2009-07-14 03:15 C:\Windows\system32\msaatext.dll
2010-11-20 14:19 C:\Windows\system32\MSAC3ENC.DLL
2009-06-10 23:22 C:\Windows\system32\msacm.dll
2009-07-14 03:15 C:\Windows\system32\msacm32.dll
2009-07-14 03:14 C:\Windows\system32\msacm32.drv
2009-07-14 03:14 C:\Windows\system32\msadp32.acm
2009-07-14 03:06 C:\Windows\system32\msafd.dll
2010-11-20 14:19 C:\Windows\system32\msasn1.dll
2020-01-03 05:38 C:\Windows\system32\msaudite.dll
2009-07-14 03:15 C:\Windows\system32\mscandui.dll
2009-07-14 03:15 C:\Windows\system32\mscat32.dll
2009-07-13 23:41 C:\Windows\system32\mscdexnt.exe
2019-11-15 04:29 C:\Windows\system32\mscms.dll
2010-11-20 14:17 C:\Windows\system32\msconfig.exe
2010-11-05 03:58 C:\Windows\system32\mscoree.dll
2014-06-19 00:23 C:\Windows\system32\mscorier.dll
2014-06-19 00:23 C:\Windows\system32\mscories.dll
2009-07-14 03:06 C:\Windows\system32\mscpx32r.dLL
2009-07-14 03:15 C:\Windows\system32\mscpxl32.dLL
2019-08-29 04:52 C:\Windows\system32\msctf.dll
2009-07-14 01:26 C:\Windows\system32\msctfime.ime
2009-07-14 03:15 C:\Windows\system32\MsCtfMonitor.dll
2009-07-14 03:15 C:\Windows\system32\msctfp.dll
2009-07-14 03:15 C:\Windows\system32\msctfui.dll
2009-07-14 03:15 C:\Windows\system32\msdadiag.dll
2009-07-14 03:15 C:\Windows\system32\msdart.dll
2009-07-14 02:11 C:\Windows\system32\msdatsrc.tlb
2009-07-14 03:15 C:\Windows\system32\msdelta.dll
2010-11-20 14:19 C:\Windows\system32\msdmo.dll
2010-11-20 14:19 C:\Windows\system32\msdri.dll
2013-12-04 04:02 C:\Windows\system32\msdrm.dll
2009-07-14 03:14 C:\Windows\system32\msdt.exe
2009-07-14 03:14 C:\Windows\system32\msdtc.exe
2009-07-14 03:15 C:\Windows\system32\msdtckrm.dll
2009-07-14 03:15 C:\Windows\system32\msdtclog.dll
2009-07-14 03:15 C:\Windows\system32\msdtcprx.dll
2010-11-20 14:19 C:\Windows\system32\msdtctm.dll
2009-07-14 03:15 C:\Windows\system32\msdtcuiu.dll
2009-07-14 03:06 C:\Windows\system32\msdtcVSp1res.dll
2010-11-20 14:16 C:\Windows\system32\MSDvbNP.ax
2019-06-12 17:06 C:\Windows\system32\msdxm.ocx
2009-07-13 23:04 C:\Windows\system32\msdxm.tlb
2017-07-21 16:26 C:\Windows\system32\msexch40.dll
2019-07-13 10:22 C:\Windows\system32\msexcl40.dll
2019-12-17 02:01 C:\Windows\system32\msfeeds.dll
2016-08-10 12:37 C:\Windows\system32\msfeedsbs.dll
2016-08-10 12:37 C:\Windows\system32\msfeedssync.exe
2010-11-20 14:19 C:\Windows\system32\msftedit.dll
2010-11-20 14:17 C:\Windows\system32\msg.exe
2009-07-14 03:14 C:\Windows\system32\msg711.acm
2009-07-14 03:14 C:\Windows\system32\msgsm32.acm
2016-08-10 12:37 C:\Windows\system32\mshta.exe
2019-12-17 02:52 C:\Windows\system32\mshtml.dll
2019-12-17 02:49 C:\Windows\system32\mshtml.tlb
2019-12-17 02:35 C:\Windows\system32\MshtmlDac.dll
2019-12-17 02:10 C:\Windows\system32\mshtmled.dll
2016-08-10 12:37 C:\Windows\system32\mshtmler.dll
2019-12-17 02:00 C:\Windows\system32\mshtmlmedia.dll
2019-11-05 23:25 C:\Windows\system32\msi.dll
2009-07-14 03:15 C:\Windows\system32\MsiCofire.dll
2009-07-14 03:15 C:\Windows\system32\msidcrl30.dll
2009-07-14 03:15 C:\Windows\system32\msident.dll
2009-07-14 03:15 C:\Windows\system32\msidle.dll
2009-07-14 03:07 C:\Windows\system32\msidntld.dll
2013-10-30 04:19 C:\Windows\system32\msieftp.dll
2019-11-05 22:57 C:\Windows\system32\msiexec.exe
2019-11-05 23:25 C:\Windows\system32\msihnd.dll
2009-07-14 03:15 C:\Windows\system32\msiltcfg.dll
2019-11-05 23:25 C:\Windows\system32\msimg32.dll
2019-11-05 23:25 C:\Windows\system32\msimsg.dll
2009-07-14 03:15 C:\Windows\system32\msimtf.dll
2017-06-13 00:06 C:\Windows\system32\msinfo32.exe
2009-07-14 03:15 C:\Windows\system32\msisip.dll
2019-11-05 23:12 C:\Windows\system32\msjet40.dll
2017-07-21 16:26 C:\Windows\system32\msjetoledb40.dll
2017-09-08 16:20 C:\Windows\system32\msjint40.dll
2017-07-01 15:05 C:\Windows\system32\msjter40.dll
2017-07-21 16:26 C:\Windows\system32\msjtes40.dll
2016-08-10 12:37 C:\Windows\system32\msls31.dll
2019-09-11 06:56 C:\Windows\system32\msltus40.dll
2019-06-12 16:58 C:\Windows\system32\msmmsp.dll
2015-12-08 23:53 C:\Windows\system32\msmpeg2adec.dll
2015-12-08 23:53 C:\Windows\system32\MSMPEG2ENC.DLL
2015-12-08 23:54 C:\Windows\system32\msmpeg2vdec.dll
2019-06-12 17:20 C:\Windows\system32\msnetobj.dll
2010-11-20 14:16 C:\Windows\system32\MSNP.ax
2020-01-03 05:38 C:\Windows\system32\msobjs.dll
2009-07-14 03:15 C:\Windows\system32\msoeacct.dll
2009-07-14 03:15 C:\Windows\system32\msoert2.dll
2009-07-14 03:07 C:\Windows\system32\msorc32r.dll
2016-03-16 20:28 C:\Windows\system32\msorcl32.dll
2009-07-14 03:14 C:\Windows\system32\mspaint.exe
2009-07-14 03:15 C:\Windows\system32\mspatcha.dll
2010-11-20 14:19 C:\Windows\system32\mspbda.dll
2009-07-14 03:15 C:\Windows\system32\MsPbdaCoInst.dll
2019-04-07 16:42 C:\Windows\system32\mspbde40.dll
2009-07-14 03:15 C:\Windows\system32\msports.dll
2009-07-14 03:07 C:\Windows\system32\msprivs.dll
2018-02-10 19:36 C:\Windows\system32\msra.exe
2018-02-10 20:23 C:\Windows\system32\msrahc.dll
2018-02-10 19:36 C:\Windows\system32\MsraLegacy.tlb
2019-12-17 02:11 C:\Windows\system32\msrating.dll
2019-08-13 04:58 C:\Windows\system32\msrd2x40.dll
2019-09-11 06:56 C:\Windows\system32\msrd3x40.dll
2009-07-14 03:15 C:\Windows\system32\msrdc.dll
2013-10-02 02:14 C:\Windows\system32\MsRdpWebAccess.dll
2017-07-01 15:05 C:\Windows\system32\msrepl40.dll
2010-11-20 14:19 C:\Windows\system32\msrle32.dll
2019-12-10 10:38 C:\Windows\system32\msscntrs.dll
2019-06-12 17:20 C:\Windows\system32\msscp.dll
2009-07-14 03:14 C:\Windows\system32\msscript.ocx
2009-07-14 03:15 C:\Windows\system32\mssha.dll
2009-07-14 03:07 C:\Windows\system32\msshavmsg.dll
2019-12-10 10:22 C:\Windows\system32\msshooks.dll
2019-06-12 17:20 C:\Windows\system32\mssign32.dll
2009-07-14 03:15 C:\Windows\system32\mssip32.dll
2019-12-10 10:38 C:\Windows\system32\mssitlb.dll
2019-12-17 02:21 C:\Windows\system32\MsSpellCheckingFacility.exe
2019-12-10 10:38 C:\Windows\system32\mssph.dll
2019-12-10 10:38 C:\Windows\system32\mssphtb.dll
2019-12-10 10:38 C:\Windows\system32\mssprxy.dll
2019-12-10 10:38 C:\Windows\system32\mssrch.dll
2019-12-10 10:38 C:\Windows\system32\mssvp.dll
2009-07-14 03:15 C:\Windows\system32\msswch.dll
2010-11-20 14:19 C:\Windows\system32\mstask.dll
2017-07-21 16:26 C:\Windows\system32\mstext40.dll
2013-10-02 00:34 C:\Windows\system32\mstsc.exe
2019-12-10 10:17 C:\Windows\system32\mstscax.dll
2010-11-20 14:19 C:\Windows\system32\msutb.dll
2020-01-03 05:38 C:\Windows\system32\msv1_0.dll
2009-07-14 03:15 C:\Windows\system32\msvbvm60.dll
2009-07-14 03:15 C:\Windows\system32\msvcirt.dll
2009-07-14 03:15 C:\Windows\system32\msvcp60.dll
2011-12-16 09:52 C:\Windows\system32\msvcrt.dll
2009-07-14 03:15 C:\Windows\system32\msvcrt20.dll
2009-07-14 03:07 C:\Windows\system32\msvcrt40.dll
2010-11-20 14:19 C:\Windows\system32\msvfw32.dll
2010-11-20 14:19 C:\Windows\system32\msvidc32.dll
2018-02-10 20:23 C:\Windows\system32\MSVidCtl.dll
2009-06-10 23:21 C:\Windows\system32\msvideo.dll
2017-07-01 15:05 C:\Windows\system32\mswdat10.dll
2009-07-14 03:15 C:\Windows\system32\mswmdm.dll
2016-05-11 17:19 C:\Windows\system32\mswsock.dll
2017-09-08 16:20 C:\Windows\system32\mswstr10.dll
2019-08-13 04:58 C:\Windows\system32\msxbde40.dll
2019-03-11 23:33 C:\Windows\system32\msxml3.dll
2019-03-11 23:33 C:\Windows\system32\msxml3r.dll
2019-07-13 10:34 C:\Windows\system32\msxml6.dll
2019-07-13 10:34 C:\Windows\system32\msxml6r.dll
2010-11-20 14:19 C:\Windows\system32\msyuv.dll
2009-07-14 03:14 C:\Windows\system32\mtstocom.exe
2010-11-20 14:19 C:\Windows\system32\mtxclu.dll
2009-07-14 03:15 C:\Windows\system32\mtxdm.dll
2009-07-14 03:15 C:\Windows\system32\mtxex.dll
2009-07-14 03:15 C:\Windows\system32\mtxlegih.dll
2016-03-16 20:28 C:\Windows\system32\mtxoci.dll
2010-11-20 14:19 C:\Windows\system32\muifontsetup.dll
2009-07-14 03:15 C:\Windows\system32\MUILanguageCleanup.dll
2010-11-20 14:17 C:\Windows\system32\MuiUnattend.exe
2010-11-20 14:17 C:\Windows\system32\MultiDigiMon.exe
2009-07-14 03:16 C:\Windows\system32\mycomput.dll
2010-11-20 14:20 C:\Windows\system32\mydocs.dll
2010-11-20 14:16 C:\Windows\system32\Mystify.scr
2009-06-10 23:25 C:\Windows\system32\NAPCLCFG.MSC
2010-11-20 14:36 C:\Windows\system32\NAPCRYPT.DLL
2010-11-20 14:20 C:\Windows\system32\napdsnap.dll
2010-11-20 14:36 C:\Windows\system32\NAPHLPR.DLL
2009-07-14 03:16 C:\Windows\system32\NapiNSP.dll
2009-07-14 03:16 C:\Windows\system32\napipsec.dll
2009-07-14 03:16 C:\Windows\system32\NAPMONTR.DLL
2009-07-14 03:14 C:\Windows\system32\NAPSTAT.EXE
2010-11-20 14:36 C:\Windows\system32\Narrator.exe
2009-07-14 03:16 C:\Windows\system32\NativeHooks.dll
2010-11-20 14:20 C:\Windows\system32\NaturalLanguage6.dll
2009-07-14 03:14 C:\Windows\system32\nbtstat.exe
2009-07-14 03:16 C:\Windows\system32\NcdProp.dll
2010-11-20 14:20 C:\Windows\system32\nci.dll
2009-07-14 03:16 C:\Windows\system32\ncobjapi.dll
2009-07-14 03:14 C:\Windows\system32\ncpa.cpl
2020-01-03 05:38 C:\Windows\system32\ncrypt.dll
2010-11-20 14:20 C:\Windows\system32\ncryptui.dll
2012-10-03 18:42 C:\Windows\system32\ncsi.dll
2009-07-14 03:14 C:\Windows\system32\ndadmin.exe
2009-07-14 03:16 C:\Windows\system32\nddeapi.dll
2009-07-14 03:16 C:\Windows\system32\ndfapi.dll
2009-07-14 03:16 C:\Windows\system32\ndfetw.dll
2009-06-10 23:18 C:\Windows\system32\NdfEventView.xml
2009-07-14 03:16 C:\Windows\system32\ndfhcdiscovery.dll
2009-07-14 03:16 C:\Windows\system32\ndiscapCfg.dll
2009-07-14 03:16 C:\Windows\system32\ndishc.dll
2009-07-14 03:16 C:\Windows\system32\ndproxystub.dll
2018-12-08 04:56 C:\Windows\system32\ndptsp.tsp
2009-07-14 03:16 C:\Windows\system32\negoexts.dll
2009-07-14 03:14 C:\Windows\system32\net.exe
2010-11-20 14:17 C:\Windows\system32\net1.exe
2009-06-10 23:42 C:\Windows\system32\netapi.dll
2012-07-04 23:16 C:\Windows\system32\netapi32.dll
2009-07-14 03:16 C:\Windows\system32\netbios.dll
2019-02-21 17:43 C:\Windows\system32\netbtugc.exe
2010-11-20 14:20 C:\Windows\system32\netcenter.dll
2010-11-20 14:17 C:\Windows\system32\netcfg.exe
2010-11-20 14:20 C:\Windows\system32\netcfgx.dll
2019-11-05 23:25 C:\Windows\system32\netcorehc.dll
2010-11-20 14:20 C:\Windows\system32\netdiagfx.dll
2018-08-12 22:14 C:\Windows\system32\netevent.dll
2010-11-05 03:58 C:\Windows\system32\netfxperf.dll
2009-07-14 03:07 C:\Windows\system32\neth.dll
2010-11-20 14:20 C:\Windows\system32\netid.dll
2010-11-20 14:20 C:\Windows\system32\netiohlp.dll
2010-11-20 14:17 C:\Windows\system32\netiougc.exe
2010-11-20 14:20 C:\Windows\system32\netjoin.dll
2019-11-05 23:25 C:\Windows\system32\netlogon.dll
2009-07-14 03:16 C:\Windows\system32\netman.dll
2009-07-14 03:07 C:\Windows\system32\netmsg.dll
2010-11-20 14:20 C:\Windows\system32\netplwiz.dll
2009-07-14 03:14 C:\Windows\system32\Netplwiz.exe
2009-07-14 03:16 C:\Windows\system32\netprof.dll
2009-07-14 03:16 C:\Windows\system32\netprofm.dll
2009-07-14 03:14 C:\Windows\system32\NetProj.exe
2009-07-14 03:16 C:\Windows\system32\NetProjW.dll
2009-07-14 03:14 C:\Windows\system32\netsh.exe
2010-11-20 14:20 C:\Windows\system32\netshell.dll
2009-07-14 03:14 C:\Windows\system32\NETSTAT.EXE
2009-07-14 03:16 C:\Windows\system32\nettrace.dll
2009-06-10 23:19 C:\Windows\system32\NetTrace.PLA.Diagnostics.xml
2010-11-20 14:20 C:\Windows\system32\netutils.dll
2010-11-20 14:20 C:\Windows\system32\networkexplorer.dll
2009-07-14 03:16 C:\Windows\system32\networkitemfactory.dll
2010-11-20 14:20 C:\Windows\system32\networkmap.dll
2009-07-14 03:16 C:\Windows\system32\newdev.dll
2009-07-14 03:14 C:\Windows\system32\newdev.exe
2012-10-03 18:42 C:\Windows\system32\nlaapi.dll
2009-07-14 03:16 C:\Windows\system32\nlahc.dll
2014-12-06 05:50 C:\Windows\system32\nlasvc.dll
2009-07-14 03:16 C:\Windows\system32\nlhtml.dll
2009-07-14 03:16 C:\Windows\system32\nlmgp.dll
2009-07-14 03:16 C:\Windows\system32\nlmsprep.dll
2016-10-11 17:18 C:\Windows\system32\nlsbres.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0000.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0001.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0002.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0003.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0007.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0009.dll
2009-07-14 03:16 C:\Windows\system32\NlsData000a.dll
2009-07-14 03:16 C:\Windows\system32\NlsData000c.dll
2009-07-14 03:16 C:\Windows\system32\NlsData000d.dll
2009-07-14 03:16 C:\Windows\system32\NlsData000f.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0010.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0011.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0013.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0018.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0019.dll
2009-07-14 03:16 C:\Windows\system32\NlsData001a.dll
2009-07-14 03:16 C:\Windows\system32\NlsData001b.dll
2009-07-14 03:16 C:\Windows\system32\NlsData001d.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0020.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0021.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0022.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0024.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0026.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0027.dll
2009-07-14 03:16 C:\Windows\system32\NlsData002a.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0039.dll
2009-07-14 03:16 C:\Windows\system32\NlsData003e.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0045.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0046.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0047.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0049.dll
2009-07-14 03:16 C:\Windows\system32\NlsData004a.dll
2009-07-14 03:16 C:\Windows\system32\NlsData004b.dll
2009-07-14 03:16 C:\Windows\system32\NlsData004c.dll
2009-07-14 03:16 C:\Windows\system32\NlsData004e.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0414.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0416.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0816.dll
2009-07-14 03:16 C:\Windows\system32\NlsData081a.dll
2009-07-14 03:16 C:\Windows\system32\NlsData0c1a.dll
2009-07-14 03:16 C:\Windows\system32\Nlsdl.dll
2009-07-13 23:40 C:\Windows\system32\nlsfunc.exe
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0001.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0002.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0003.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0007.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0009.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons000a.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons000c.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons000d.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons000f.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0010.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0011.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0013.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0018.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0019.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons001a.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons001b.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons001d.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0020.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0021.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0022.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0024.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0026.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0027.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons002a.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0039.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons003e.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0045.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0046.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0047.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0049.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons004a.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons004b.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons004c.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons004e.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0414.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0416.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0816.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons081a.dll
2009-07-14 03:08 C:\Windows\system32\NlsLexicons0c1a.dll
2009-07-14 03:09 C:\Windows\system32\NlsModels0011.dll
2019-04-07 16:52 C:\Windows\system32\nltest.exe
2009-06-10 23:32 C:\Windows\system32\noise.jpn
2009-07-14 03:09 C:\Windows\system32\normaliz.dll
2009-06-10 23:48 C:\Windows\system32\normidna.nls
2009-06-10 23:48 C:\Windows\system32\normnfc.nls
2009-06-10 23:48 C:\Windows\system32\normnfd.nls
2009-06-10 23:48 C:\Windows\system32\normnfkc.nls
2009-06-10 23:48 C:\Windows\system32\normnfkd.nls
2015-07-09 19:42 C:\Windows\system32\notepad.exe
2009-07-14 03:16 C:\Windows\system32\npmproxy.dll
2010-11-20 14:20 C:\Windows\system32\nrpsrv.dll
2009-07-14 03:16 C:\Windows\system32\nshhttp.dll
2010-11-20 14:20 C:\Windows\system32\nshipsec.dll
2013-10-12 04:03 C:\Windows\system32\nshwfp.dll
2017-08-11 08:19 C:\Windows\system32\nsi.dll
2017-08-11 08:19 C:\Windows\system32\nsisvc.dll
2010-11-20 14:17 C:\Windows\system32\nslookup.exe
2020-01-03 05:41 C:\Windows\system32\ntdll.dll
2009-07-13 23:40 C:\Windows\system32\NTDOS.SYS
2009-07-13 23:40 C:\Windows\system32\NTDOS404.SYS
2009-07-13 23:40 C:\Windows\system32\NTDOS411.SYS
2009-07-13 23:40 C:\Windows\system32\NTDOS412.SYS
2009-07-13 23:40 C:\Windows\system32\NTDOS804.SYS
2009-07-14 03:16 C:\Windows\system32\ntdsapi.dll
2009-07-13 23:40 C:\Windows\system32\NTIO.SYS
2009-07-13 23:40 C:\Windows\system32\NTIO404.SYS
2009-07-13 23:40 C:\Windows\system32\NTIO411.SYS
2009-07-13 23:40 C:\Windows\system32\NTIO412.SYS
2009-07-13 23:40 C:\Windows\system32\NTIO804.SYS
2020-01-03 05:42 C:\Windows\system32\ntkrnlpa.exe
2010-11-20 14:20 C:\Windows\system32\ntlanman.dll
2009-07-14 03:16 C:\Windows\system32\ntlanui2.dll
2009-07-14 03:16 C:\Windows\system32\ntmarta.dll
2020-01-03 05:42 C:\Windows\system32\ntoskrnl.exe
2017-08-11 08:19 C:\Windows\system32\ntprint.dll
2017-08-11 08:09 C:\Windows\system32\ntprint.exe
2012-01-04 10:58 C:\Windows\system32\ntshrui.dll
2009-07-14 03:14 C:\Windows\system32\ntvdm.exe
2009-07-14 03:16 C:\Windows\system32\ntvdmd.dll
2014-03-04 11:17 C:\Windows\system32\objsel.dll
2019-12-17 02:08 C:\Windows\system32\occache.dll
2010-11-20 14:20 C:\Windows\system32\ocsetapi.dll
2010-11-20 14:17 C:\Windows\system32\ocsetup.exe
2009-06-10 23:17 C:\Windows\system32\odbc16gt.dll
2010-11-20 14:20 C:\Windows\system32\odbc32.dll
2009-07-14 03:16 C:\Windows\system32\odbc32gt.dll
2009-07-14 03:14 C:\Windows\system32\odbcad32.exe
2009-07-14 03:16 C:\Windows\system32\odbcbcp.dll
2010-11-20 14:20 C:\Windows\system32\odbcconf.dll
2009-07-14 03:14 C:\Windows\system32\odbcconf.exe
2009-07-14 01:06 C:\Windows\system32\odbcconf.rsp
2011-06-15 10:55 C:\Windows\system32\odbccp32.dll
2011-06-15 10:55 C:\Windows\system32\odbccr32.dll
2011-06-15 10:55 C:\Windows\system32\odbccu32.dll
2009-07-14 03:09 C:\Windows\system32\odbcint.dll
2009-07-14 03:16 C:\Windows\system32\odbcji32.dll
2011-06-15 10:55 C:\Windows\system32\odbcjt32.dll
2011-06-15 10:55 C:\Windows\system32\odbctrac.dll
2009-07-14 03:16 C:\Windows\system32\oddbse32.dll
2009-07-14 03:16 C:\Windows\system32\odexl32.dll
2009-07-14 03:16 C:\Windows\system32\odfox32.dll
2009-07-14 03:16 C:\Windows\system32\odpdx32.dll
2009-07-14 03:16 C:\Windows\system32\odtext32.dll
2009-07-14 03:16 C:\Windows\system32\offfilt.dll
2012-12-07 12:46 C:\Windows\system32\oflc-nz.rs
2012-12-07 12:46 C:\Windows\system32\oflc.rs
2009-07-14 03:16 C:\Windows\system32\ogldrv.dll
2009-06-10 23:25 C:\Windows\system32\ole2.dll
2009-06-10 23:25 C:\Windows\system32\ole2disp.dll
2009-06-10 23:25 C:\Windows\system32\ole2nls.dll
2019-11-15 04:29 C:\Windows\system32\ole32.dll
2011-08-27 06:26 C:\Windows\system32\oleacc.dll
2009-07-14 03:16 C:\Windows\system32\oleacchooks.dll
2009-07-14 03:09 C:\Windows\system32\oleaccrc.dll
2019-11-15 04:29 C:\Windows\system32\oleaut32.dll
2009-06-10 23:42 C:\Windows\system32\olecli.dll
2009-07-14 03:16 C:\Windows\system32\olecli32.dll
2009-07-14 03:16 C:\Windows\system32\oledlg.dll
2019-03-11 23:33 C:\Windows\system32\oleprn.dll
2016-10-07 17:12 C:\Windows\system32\olepro32.dll
2019-11-15 04:29 C:\Windows\system32\oleres.dll
2009-07-13 23:41 C:\Windows\system32\OLESVR.DLL
2009-07-14 03:16 C:\Windows\system32\olesvr32.dll
2010-11-20 14:20 C:\Windows\system32\olethk32.dll
2010-11-20 14:20 C:\Windows\system32\onex.dll
2010-11-20 14:20 C:\Windows\system32\onexui.dll
2010-11-20 14:20 C:\Windows\system32\OnLineIDCpl.dll
2009-06-10 23:42 C:\Windows\system32\onlinesetup.cmd
2010-11-20 14:20 C:\Windows\system32\OobeFldr.dll
2010-11-20 14:20 C:\Windows\system32\OpcServices.dll
2009-07-14 03:14 C:\Windows\system32\openfiles.exe
2009-07-14 03:16 C:\Windows\system32\opengl32.dll
2009-07-14 03:14 C:\Windows\system32\OptionalFeatures.exe
2009-07-14 03:16 C:\Windows\system32\osbaseln.dll
2014-06-18 03:51 C:\Windows\system32\osk.exe
2009-07-14 03:16 C:\Windows\system32\osuninst.dll
2012-08-21 22:12 C:\Windows\system32\OxpsConverter.exe
2019-07-13 10:34 C:\Windows\system32\P2P.dll
2009-07-14 03:16 C:\Windows\system32\p2pcollab.dll
2019-07-13 10:34 C:\Windows\system32\P2PGraph.dll
2009-07-14 03:14 C:\Windows\system32\p2phost.exe
2009-07-14 03:16 C:\Windows\system32\p2pnetsh.dll
2018-01-01 04:00 C:\Windows\system32\p2psvc.dll
2014-10-25 03:32 C:\Windows\system32\packager.dll
2009-07-14 03:16 C:\Windows\system32\panmap.dll
2009-07-14 03:14 C:\Windows\system32\PATHPING.EXE
2009-07-14 03:16 C:\Windows\system32\pautoenr.dll
2019-06-12 16:50 C:\Windows\system32\pcadm.dll
2019-06-12 17:20 C:\Windows\system32\pcaevts.dll
2019-06-12 16:50 C:\Windows\system32\pcalua.exe
2019-06-12 17:20 C:\Windows\system32\pcasvc.dll
2009-07-14 03:16 C:\Windows\system32\pcaui.dll
2009-07-14 03:14 C:\Windows\system32\pcaui.exe
2019-06-12 16:50 C:\Windows\system32\pcawrk.exe
2009-06-10 23:39 C:\Windows\system32\pcl.sep
2009-07-14 03:14 C:\Windows\system32\pcwrun.exe
2009-07-14 03:16 C:\Windows\system32\pcwum.dll
2009-07-14 03:15 C:\Windows\system32\pcwutl.dll
2017-03-10 18:20 C:\Windows\system32\pdh.dll
2017-06-13 00:28 C:\Windows\system32\pdhui.dll
2018-01-01 04:00 C:\Windows\system32\PeerDist.dll
2018-01-01 03:44 C:\Windows\system32\PeerDistHttpTrans.dll
2009-07-14 03:16 C:\Windows\system32\PeerDistSh.dll
2018-01-01 04:00 C:\Windows\system32\PeerDistSvc.dll
2018-01-01 04:00 C:\Windows\system32\PeerDistWSDDiscoProv.dll
2012-12-07 12:46 C:\Windows\system32\pegi-fi.rs
2012-12-07 12:46 C:\Windows\system32\pegi-pt.rs
2012-12-07 12:46 C:\Windows\system32\pegi.rs
2012-12-07 12:46 C:\Windows\system32\pegibbfc.rs
2010-11-20 14:20 C:\Windows\system32\PerfCenterCPL.dll
2009-06-10 23:17 C:\Windows\system32\PerfCenterCpl.ico
2009-07-14 03:16 C:\Windows\system32\perfctrs.dll
2009-07-14 03:16 C:\Windows\system32\perfdisk.dll
2017-06-13 00:06 C:\Windows\system32\perfmon.exe
2009-06-10 23:31 C:\Windows\system32\perfmon.msc
2009-07-14 03:16 C:\Windows\system32\perfnet.dll
2009-07-14 03:16 C:\Windows\system32\perfos.dll
2009-07-14 03:16 C:\Windows\system32\perfproc.dll
2015-01-09 04:48 C:\Windows\system32\perftrack.dll
2010-11-20 14:20 C:\Windows\system32\perfts.dll
2016-10-11 17:18 C:\Windows\system32\phon.ime
2009-07-14 03:16 C:\Windows\system32\PhotoMetadataHandler.dll
2010-11-20 14:16 C:\Windows\system32\PhotoScreensaver.scr
2010-11-20 14:20 C:\Windows\system32\photowiz.dll
2009-07-14 03:16 C:\Windows\system32\pid.dll
2009-07-14 03:16 C:\Windows\system32\pidgenx.dll
2010-11-20 14:05 C:\Windows\system32\pifmgr.dll
2009-07-14 03:14 C:\Windows\system32\PING.EXE
2016-10-11 17:18 C:\Windows\system32\pintlgnt.ime
2010-11-20 14:17 C:\Windows\system32\PkgMgr.exe
2014-11-11 04:44 C:\Windows\system32\pku2u.dll
2017-03-10 18:20 C:\Windows\system32\pla.dll
2017-03-10 17:52 C:\Windows\system32\plasrv.exe
2009-07-14 03:16 C:\Windows\system32\PlaySndSrv.dll
2009-07-14 03:16 C:\Windows\system32\pmcsnap.dll
2009-06-10 23:42 C:\Windows\system32\pmspl.dll
2016-08-10 12:37 C:\Windows\system32\pngfilt.dll
2010-11-20 14:20 C:\Windows\system32\pnidui.dll
2009-07-14 03:09 C:\Windows\system32\pnpsetup.dll
2009-07-14 03:16 C:\Windows\system32\pnpts.dll
2009-07-14 03:16 C:\Windows\system32\pnpui.dll
2010-11-20 14:17 C:\Windows\system32\PnPUnattend.exe
2009-07-14 03:14 C:\Windows\system32\PnPutil.exe
2009-07-14 03:16 C:\Windows\system32\PNPXAssoc.dll
2009-07-14 03:16 C:\Windows\system32\PNPXAssocPrx.dll
2009-07-14 03:16 C:\Windows\system32\pnrpauto.dll
2009-07-14 03:16 C:\Windows\system32\Pnrphc.dll
2009-07-14 03:16 C:\Windows\system32\pnrpnsp.dll
2019-07-13 10:34 C:\Windows\system32\pnrpsvc.dll
2016-05-12 17:18 C:\Windows\system32\polstore.dll
2019-12-31 04:40 C:\Windows\system32\poqexec.exe
2010-11-20 14:20 C:\Windows\system32\PortableDeviceApi.dll
2009-07-14 03:16 C:\Windows\system32\PortableDeviceClassExtension.dll
2009-07-14 03:16 C:\Windows\system32\PortableDeviceConnectApi.dll
2010-11-20 14:20 C:\Windows\system32\PortableDeviceStatus.dll
2010-11-20 14:20 C:\Windows\system32\PortableDeviceSyncProvider.dll
2009-07-14 03:16 C:\Windows\system32\PortableDeviceTypes.dll
2009-07-14 03:16 C:\Windows\system32\PortableDeviceWiaCompat.dll
2009-07-14 03:16 C:\Windows\system32\PortableDeviceWMDRM.dll
2009-07-14 03:16 C:\Windows\system32\pots.dll
2010-11-20 14:16 C:\Windows\system32\powercfg.cpl
2009-07-14 03:14 C:\Windows\system32\powercfg.exe
2010-11-20 14:20 C:\Windows\system32\powercpl.dll
2015-01-09 04:48 C:\Windows\system32\powertracker.dll
2009-07-14 03:16 C:\Windows\system32\powrprof.dll
2009-07-14 03:16 C:\Windows\system32\ppcsnap.dll
2015-07-30 15:13 C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2010-11-05 03:53 C:\Windows\system32\PresentationHost.exe
2010-11-05 03:53 C:\Windows\system32\PresentationHostProxy.dll
2009-06-10 23:14 C:\Windows\system32\PresentationNative_v0300.dll
2010-11-20 14:17 C:\Windows\system32\PresentationSettings.exe
2011-02-18 07:39 C:\Windows\system32\prevhost.exe
2009-07-14 03:09 C:\Windows\system32\prflbmsg.dll
2009-07-14 03:14 C:\Windows\system32\print.exe
2017-08-11 08:10 C:\Windows\system32\PrintBrmUi.exe
2019-11-15 04:13 C:\Windows\system32\printfilterpipelineprxy.dll
2019-11-15 04:13 C:\Windows\system32\printfilterpipelinesvc.exe
2009-07-14 03:14 C:\Windows\system32\PrintIsolationHost.exe
2010-11-20 14:20 C:\Windows\system32\PrintIsolationProxy.dll
2009-06-10 23:40 C:\Windows\system32\printmanagement.msc
2010-11-20 14:20 C:\Windows\system32\printui.dll
2009-07-14 03:14 C:\Windows\system32\printui.exe
2010-11-20 14:20 C:\Windows\system32\prncache.dll
2010-11-20 14:20 C:\Windows\system32\prnfldr.dll
2009-07-14 03:16 C:\Windows\system32\prnntfy.dll
2010-11-20 14:20 C:\Windows\system32\prntvpt.dll
2009-07-14 03:16 C:\Windows\system32\procinst.dll
2009-07-14 03:16 C:\Windows\system32\profapi.dll
2010-11-20 14:20 C:\Windows\system32\profprov.dll
2014-12-19 04:43 C:\Windows\system32\profsvc.dll
2010-11-20 14:20 C:\Windows\system32\propsys.dll
2010-11-20 14:17 C:\Windows\system32\proquota.exe
2010-11-20 14:20 C:\Windows\system32\provsvc.dll
2009-07-14 03:16 C:\Windows\system32\provthrd.dll
2009-07-14 03:16 C:\Windows\system32\psapi.dll
2009-07-14 03:16 C:\Windows\system32\psbase.dll
2009-06-10 23:39 C:\Windows\system32\pscript.sep
2009-07-14 03:19 C:\Windows\system32\PSHED.DLL
2011-08-17 06:24 C:\Windows\system32\psisdecd.dll
2011-08-17 06:19 C:\Windows\system32\psisrndr.ax
2009-07-14 03:14 C:\Windows\system32\psr.exe
2009-07-14 03:16 C:\Windows\system32\pstorec.dll
2009-07-14 03:16 C:\Windows\system32\pstorsvc.dll
2009-07-14 03:16 C:\Windows\system32\puiapi.dll
2010-11-20 14:20 C:\Windows\system32\puiobj.dll
2010-11-20 14:17 C:\Windows\system32\PushPrinterConnections.exe
2009-07-14 03:15 C:\Windows\system32\pwrshplugin.dll
2010-11-20 14:20 C:\Windows\system32\QAGENT.DLL
2010-11-20 14:20 C:\Windows\system32\QAGENTRT.DLL
2010-11-20 14:17 C:\Windows\system32\qappsrv.exe
2015-12-08 23:53 C:\Windows\system32\qasf.dll
2010-11-20 14:20 C:\Windows\system32\qcap.dll
2010-11-20 14:20 C:\Windows\system32\QCLIPROV.DLL
2010-11-20 14:20 C:\Windows\system32\qdv.dll
2019-06-12 17:20 C:\Windows\system32\qdvd.dll
2015-12-08 23:53 C:\Windows\system32\qedit.dll
2009-07-14 03:09 C:\Windows\system32\qedwipes.dll
2016-10-11 17:18 C:\Windows\system32\qintlgnt.ime
2010-11-20 14:20 C:\Windows\system32\qmgr.dll
2009-07-14 03:16 C:\Windows\system32\qmgrprxy.dll
2010-11-20 14:17 C:\Windows\system32\qprocess.exe
2010-11-20 14:20 C:\Windows\system32\QSHVHOST.DLL
2010-11-20 14:20 C:\Windows\system32\QSVRMGMT.DLL
2019-11-15 04:29 C:\Windows\system32\quartz.dll
2017-10-12 02:37 C:\Windows\system32\Query.dll
2010-11-20 14:17 C:\Windows\system32\query.exe
2016-10-11 17:18 C:\Windows\system32\quick.ime
2010-11-20 14:17 C:\Windows\system32\quser.exe
2010-11-20 14:21 C:\Windows\system32\QUTIL.DLL
2009-07-14 03:16 C:\Windows\system32\qwave.dll
2010-11-20 14:17 C:\Windows\system32\qwinsta.exe
2010-11-20 14:21 C:\Windows\system32\RacEngn.dll
2018-02-10 20:23 C:\Windows\system32\racpldlg.dll
2010-11-05 04:20 C:\Windows\system32\RacRules.xml
2009-07-14 03:16 C:\Windows\system32\radardt.dll
2009-07-14 03:16 C:\Windows\system32\radarrs.dll
2009-07-14 03:16 C:\Windows\system32\rasadhlp.dll
2009-07-14 03:16 C:\Windows\system32\rasapi32.dll
2009-07-14 03:16 C:\Windows\system32\rasauto.dll
2009-07-14 03:14 C:\Windows\system32\rasautou.exe
2018-12-08 04:56 C:\Windows\system32\rascfg.dll
2010-11-20 14:21 C:\Windows\system32\raschap.dll
2009-06-10 23:39 C:\Windows\system32\rasctrnm.h
2009-07-14 03:16 C:\Windows\system32\rasctrs.dll
2018-12-08 04:56 C:\Windows\system32\rasdiag.dll
2009-07-14 03:14 C:\Windows\system32\rasdial.exe
2009-07-14 03:16 C:\Windows\system32\rasdlg.dll
2009-07-14 03:14 C:\Windows\system32\raserver.exe
2009-07-14 03:16 C:\Windows\system32\rasgcw.dll
2009-07-14 03:16 C:\Windows\system32\rasman.dll
2010-11-20 14:21 C:\Windows\system32\rasmans.dll
2009-07-14 03:16 C:\Windows\system32\rasmbmgr.dll
2009-07-14 03:16 C:\Windows\system32\RASMM.dll
2009-07-14 03:16 C:\Windows\system32\rasmontr.dll
2018-12-08 04:41 C:\Windows\system32\rasmxs.dll
2009-07-14 03:14 C:\Windows\system32\rasphone.exe
2009-07-14 03:16 C:\Windows\system32\rasplap.dll
2010-11-20 14:21 C:\Windows\system32\rasppp.dll
2018-12-08 04:41 C:\Windows\system32\rasser.dll
2010-11-20 14:21 C:\Windows\system32\rastapi.dll
2014-09-04 07:04 C:\Windows\system32\rastls.dll
2010-11-20 14:21 C:\Windows\system32\rdpcfgex.dll
2019-06-02 06:07 C:\Windows\system32\rdpclip.exe
2019-03-11 23:33 C:\Windows\system32\rdpcore.dll
2014-07-17 03:39 C:\Windows\system32\rdpcorekmts.dll
2019-11-15 04:13 C:\Windows\system32\rdpcorets.dll
2010-11-20 14:21 C:\Windows\system32\rdpd3d.dll
2010-11-20 12:22 C:\Windows\system32\rdpdd.dll
2010-11-20 14:05 C:\Windows\system32\RDPENCDD.dll
2010-11-20 14:21 C:\Windows\system32\rdpencom.dll
2010-11-20 14:21 C:\Windows\system32\rdpendp.dll
2012-08-23 13:12 C:\Windows\system32\rdpendp_winip.dll
2017-03-07 17:06 C:\Windows\system32\RdpGroupPolicyExtension.dll
2010-11-20 14:17 C:\Windows\system32\rdpinit.exe
2010-11-20 12:21 C:\Windows\system32\RDPREFDD.dll
2010-11-20 14:21 C:\Windows\system32\rdprefdrvapi.dll
2010-11-20 14:17 C:\Windows\system32\rdpshell.exe
2010-11-20 14:17 C:\Windows\system32\rdpsign.exe
2017-03-07 17:06 C:\Windows\system32\rdpudd.dll
2012-04-26 06:45 C:\Windows\system32\rdpwsx.dll
2009-07-14 03:14 C:\Windows\system32\rdrleakdiag.exe
2012-04-26 06:41 C:\Windows\system32\rdrmemptylst.exe
2010-11-20 14:17 C:\Windows\system32\RDVGHelper.exe
2013-10-02 01:08 C:\Windows\system32\rdvidcrl.dll
2010-11-20 14:21 C:\Windows\system32\ReAgent.dll
2010-11-20 14:17 C:\Windows\system32\ReAgentc.exe
2010-11-20 14:17 C:\Windows\system32\recdisc.exe
2009-07-14 03:14 C:\Windows\system32\recover.exe
2016-08-09 11:56 C:\Windows\system32\Recovery
2010-11-20 14:21 C:\Windows\system32\recovery.dll
2009-07-13 23:41 C:\Windows\system32\redir.exe
2009-07-14 03:14 C:\Windows\system32\reg.exe
2010-11-20 14:21 C:\Windows\system32\regapi.dll
2009-07-14 03:16 C:\Windows\system32\RegCtrl.dll
2009-07-14 03:14 C:\Windows\system32\regedt32.exe
2009-07-14 03:16 C:\Windows\system32\regidle.dll
2009-07-14 03:14 C:\Windows\system32\regini.exe
2016-08-10 12:37 C:\Windows\system32\RegisterIEPKEYs.exe
2009-07-14 03:16 C:\Windows\system32\regsvc.dll
2009-07-14 03:14 C:\Windows\system32\regsvr32.exe
2009-07-14 03:14 C:\Windows\system32\rekeywiz.exe
2015-05-25 20:00 C:\Windows\system32\relog.exe
2010-11-20 14:17 C:\Windows\system32\RelPost.exe
2010-11-20 14:21 C:\Windows\system32\remotepg.dll
2009-07-14 03:14 C:\Windows\system32\remotesp.tsp
2009-07-14 01:19 C:\Windows\system32\rendezvousSession.tlb
2010-11-20 14:17 C:\Windows\system32\repair-bde.exe
2009-07-14 03:14 C:\Windows\system32\replace.exe
2015-12-08 23:53 C:\Windows\system32\RESAMPLEDMO.DLL
2010-11-20 14:17 C:\Windows\system32\reset.exe
2017-06-13 00:06 C:\Windows\system32\resmon.exe
2009-07-13 22:29 C:\Windows\system32\RestartManager.mof
2009-07-13 22:29 C:\Windows\system32\RestartManagerUninstall.mof
2010-11-20 14:21 C:\Windows\system32\resutils.dll
2009-07-14 03:16 C:\Windows\system32\rgb9rast.dll
2010-11-20 14:16 C:\Windows\system32\Ribbons.scr
2010-11-20 14:21 C:\Windows\system32\riched20.dll
2010-11-20 14:21 C:\Windows\system32\riched32.dll
2013-12-04 03:54 C:\Windows\system32\RMActivate.exe
2013-12-04 03:54 C:\Windows\system32\RMActivate_isv.exe
2013-12-04 03:54 C:\Windows\system32\RMActivate_ssp.exe
2013-12-04 03:54 C:\Windows\system32\RMActivate_ssp_isv.exe
2009-07-14 03:14 C:\Windows\system32\RmClient.exe
2009-07-14 03:09 C:\Windows\system32\rnr20.dll
2010-11-20 14:17 C:\Windows\system32\Robocopy.exe
2009-07-14 03:14 C:\Windows\system32\ROUTE.EXE
2009-07-14 03:16 C:\Windows\system32\RpcDiag.dll
2009-07-14 03:16 C:\Windows\system32\RpcEpMap.dll
2020-01-03 05:38 C:\Windows\system32\rpchttp.dll
2009-07-14 03:16 C:\Windows\system32\RPCNDFP.dll
2009-07-14 03:16 C:\Windows\system32\RpcNs4.dll
2009-07-14 03:16 C:\Windows\system32\rpcnsh.dll
2009-07-14 03:14 C:\Windows\system32\RpcPing.exe
2020-01-03 05:38 C:\Windows\system32\rpcrt4.dll
2010-11-20 14:21 C:\Windows\system32\RpcRtRemote.dll
2019-11-15 04:29 C:\Windows\system32\rpcss.dll
2019-06-12 17:05 C:\Windows\system32\rrinstaller.exe
2009-07-14 03:17 C:\Windows\system32\rsaenh.dll
2009-07-14 03:16 C:\Windows\system32\rshx32.dll
2009-06-10 23:28 C:\Windows\system32\rsop.msc
2009-07-14 03:16 C:\Windows\system32\RstrtMgr.dll
2020-01-03 05:06 C:\Windows\system32\rstrui.exe
2009-07-14 03:16 C:\Windows\system32\rtffilt.dll
2017-11-02 17:11 C:\Windows\system32\rtm.dll
2010-11-20 14:21 C:\Windows\system32\rtutils.dll
2009-07-14 03:14 C:\Windows\system32\runas.exe
2017-03-30 16:58 C:\Windows\system32\rundll32.exe
2009-07-14 03:14 C:\Windows\system32\RunLegacyCPLElevated.exe
2010-11-20 14:17 C:\Windows\system32\runonce.exe
2010-11-20 14:17 C:\Windows\system32\rwinsta.exe
2010-11-20 14:21 C:\Windows\system32\samcli.dll
2017-02-09 18:14 C:\Windows\system32\samlib.dll
2009-07-14 03:09 C:\Windows\system32\SampleRes.dll
2017-02-09 18:14 C:\Windows\system32\samsrv.dll
2009-07-14 03:16 C:\Windows\system32\sas.dll
2010-12-23 07:54 C:\Windows\system32\sbe.dll
2009-07-14 03:16 C:\Windows\system32\sbeio.dll
2009-07-14 03:09 C:\Windows\system32\sberes.dll
2009-07-14 03:14 C:\Windows\system32\sbunattend.exe
2009-07-14 03:14 C:\Windows\system32\sc.exe
2010-11-20 14:21 C:\Windows\system32\scansetting.dll
2009-07-14 03:16 C:\Windows\system32\SCardDlg.dll
2009-07-14 03:16 C:\Windows\system32\SCardSvr.dll
2010-11-10 03:45 C:\Windows\system32\ScavengeSpace.xml
2016-08-12 18:21 C:\Windows\system32\scavengeui.dll
2009-07-14 03:16 C:\Windows\system32\sccls.dll
2010-11-20 14:21 C:\Windows\system32\scecli.dll
2018-01-12 18:26 C:\Windows\system32\scesrv.dll
2009-07-14 03:16 C:\Windows\system32\scext.dll
2020-01-03 05:38 C:\Windows\system32\schannel.dll
2010-11-20 14:21 C:\Windows\system32\schedcli.dll
2019-06-04 01:10 C:\Windows\system32\schedsvc.dll
2010-11-20 14:17 C:\Windows\system32\schtasks.exe
2018-03-06 20:11 C:\Windows\system32\scksp.dll
2009-07-14 03:16 C:\Windows\system32\scripto.dll
2009-07-14 03:14 C:\Windows\system32\scrnsave.scr
2018-10-27 05:27 C:\Windows\system32\scrobj.dll
2010-11-20 14:21 C:\Windows\system32\scrptadm.dll
2018-10-27 05:27 C:\Windows\system32\scrrun.dll
2009-07-14 03:16 C:\Windows\system32\sdautoplay.dll
2015-10-29 19:49 C:\Windows\system32\sdbinst.exe
2018-02-10 19:36 C:\Windows\system32\sdchange.exe
2010-11-20 14:17 C:\Windows\system32\sdclt.exe
2010-11-20 14:21 C:\Windows\system32\sdcpl.dll
2010-11-20 14:21 C:\Windows\system32\sdengin2.dll
2009-07-14 03:16 C:\Windows\system32\sdhcinst.dll
2009-07-14 03:16 C:\Windows\system32\sdiageng.dll
2009-07-14 03:14 C:\Windows\system32\sdiagnhost.exe
2009-07-14 03:16 C:\Windows\system32\sdiagprv.dll
2009-07-14 03:16 C:\Windows\system32\sdiagschd.dll
2009-07-14 03:16 C:\Windows\system32\sdohlp.dll
2010-11-20 14:21 C:\Windows\system32\sdrsvc.dll
2009-07-14 03:16 C:\Windows\system32\sdshext.dll
2019-12-10 10:22 C:\Windows\system32\SearchFilterHost.exe
2010-11-20 14:21 C:\Windows\system32\SearchFolder.dll
2019-12-10 10:22 C:\Windows\system32\SearchIndexer.exe
2019-12-10 10:22 C:\Windows\system32\SearchProtocolHost.exe
2009-07-14 03:14 C:\Windows\system32\SecEdit.exe
2015-05-25 20:01 C:\Windows\system32\sechost.dll
2009-07-14 03:14 C:\Windows\system32\secinit.exe
2016-02-09 11:50 C:\Windows\system32\seclogon.dll
2009-06-10 23:35 C:\Windows\system32\secpol.msc
2013-12-04 04:03 C:\Windows\system32\secproc.dll
2013-12-04 04:03 C:\Windows\system32\secproc_isv.dll
2013-12-04 04:03 C:\Windows\system32\secproc_ssp.dll
2013-12-04 04:03 C:\Windows\system32\secproc_ssp_isv.dll
2020-01-03 05:38 C:\Windows\system32\secur32.dll
2009-07-14 03:09 C:\Windows\system32\security.dll
2009-07-14 03:16 C:\Windows\system32\sendmail.dll
2009-07-14 03:16 C:\Windows\system32\Sens.dll
2009-07-14 03:16 C:\Windows\system32\SensApi.dll
2009-07-14 03:16 C:\Windows\system32\SensorsApi.dll
2009-07-14 03:16 C:\Windows\system32\SensorsClassExtension.dll
2010-11-20 14:21 C:\Windows\system32\SensorsCpl.dll
2009-07-14 03:16 C:\Windows\system32\sensrsvc.dll
2009-07-14 03:16 C:\Windows\system32\serialui.dll
2019-11-15 03:55 C:\Windows\system32\services.exe
2009-06-10 23:21 C:\Windows\system32\services.msc
2009-07-14 03:16 C:\Windows\system32\serwvdrv.dll
2010-11-20 14:21 C:\Windows\system32\SessEnv.dll
2020-01-03 05:38 C:\Windows\system32\setbcdlocale.dll
2010-11-20 14:17 C:\Windows\system32\sethc.exe
2016-08-10 12:37 C:\Windows\system32\SetIEInstalledDate.exe
2009-07-14 03:14 C:\Windows\system32\setspn.exe
2010-11-20 14:21 C:\Windows\system32\setupapi.dll
2010-11-20 14:17 C:\Windows\system32\setupcl.exe
2010-11-20 14:21 C:\Windows\system32\setupcln.dll
2009-07-14 03:10 C:\Windows\system32\setupetw.dll
2009-07-14 03:14 C:\Windows\system32\setupSNK.exe
2010-11-20 14:17 C:\Windows\system32\setupugc.exe
2009-07-13 23:40 C:\Windows\system32\setver.exe
2009-07-14 03:14 C:\Windows\system32\setx.exe
2009-07-14 03:10 C:\Windows\system32\sfc.dll
2009-07-14 03:14 C:\Windows\system32\sfc.exe
2009-07-14 03:16 C:\Windows\system32\sfc_os.dll
2010-11-20 14:21 C:\Windows\system32\shacct.dll
2010-11-20 14:17 C:\Windows\system32\shadow.exe
2009-07-13 23:41 C:\Windows\system32\share.exe
2010-11-20 14:21 C:\Windows\system32\sharemediacpl.dll
2017-08-19 17:10 C:\Windows\system32\shdocvw.dll
2009-07-13 23:41 C:\Windows\system32\SHELL.DLL
2019-05-25 01:59 C:\Windows\system32\shell32.dll
2009-07-14 03:04 C:\Windows\system32\shellstyle.dll
2009-07-14 03:16 C:\Windows\system32\shfolder.dll
2010-11-20 14:21 C:\Windows\system32\shgina.dll
2009-06-10 23:30 C:\Windows\system32\ShiftJIS.uce
2015-10-29 19:50 C:\Windows\system32\shimeng.dll
2010-11-20 14:21 C:\Windows\system32\shimgvw.dll
2010-11-20 14:21 C:\Windows\system32\shlwapi.dll
2009-07-14 03:16 C:\Windows\system32\shpafact.dll
2009-07-14 03:14 C:\Windows\system32\shrpubw.exe
2010-11-20 14:21 C:\Windows\system32\shsetup.dll
2019-12-10 10:38 C:\Windows\system32\shsvcs.dll
2010-11-20 14:21 C:\Windows\system32\shunimpl.dll
2009-07-14 03:14 C:\Windows\system32\shutdown.exe
2010-11-20 14:21 C:\Windows\system32\shwebsvc.dll
2009-07-14 03:16 C:\Windows\system32\signdrv.dll
2009-07-14 03:14 C:\Windows\system32\sigverif.exe
2009-07-14 02:11 C:\Windows\system32\simpdata.tlb
2019-07-13 10:19 C:\Windows\system32\sipnotify.exe
2010-11-20 14:21 C:\Windows\system32\sisbkup.dll
2009-07-14 03:16 C:\Windows\system32\slc.dll
2009-07-14 03:16 C:\Windows\system32\slcext.dll
2009-06-10 23:38 C:\Windows\system32\slmgr.vbs
2010-11-20 14:17 C:\Windows\system32\slui.exe
2010-11-20 14:21 C:\Windows\system32\slwga.dll
2013-10-04 03:58 C:\Windows\system32\SmartcardCredentialProvider.dll
2009-07-14 03:16 C:\Windows\system32\SMBHelperClass.dll
2010-11-20 14:21 C:\Windows\system32\SmiEngine.dll
2020-01-03 05:02 C:\Windows\system32\smss.exe
2010-11-20 14:17 C:\Windows\system32\SndVol.exe
2010-11-20 14:21 C:\Windows\system32\SndVolSSO.dll
2009-07-14 03:14 C:\Windows\system32\SnippingTool.exe
2009-07-14 03:16 C:\Windows\system32\snmpapi.dll
2009-07-14 03:14 C:\Windows\system32\snmptrap.exe
2009-07-14 03:16 C:\Windows\system32\SNTSearch.dll
2009-07-14 03:16 C:\Windows\system32\softkbd.dll
2009-07-14 03:16 C:\Windows\system32\softpub.dll
2009-07-14 03:14 C:\Windows\system32\sort.exe
2009-07-14 03:16 C:\Windows\system32\SortServer2003Compat.dll
2009-07-14 03:16 C:\Windows\system32\SortWindows6Compat.dll
2009-07-13 23:41 C:\Windows\system32\sound.drv
2009-07-14 03:14 C:\Windows\system32\SoundRecorder.exe
2010-11-20 14:21 C:\Windows\system32\spbcd.dll
2009-06-10 23:46 C:\Windows\system32\spcinstrumentation.man
2009-07-14 03:16 C:\Windows\system32\spcmsg.dll
2009-07-14 03:16 C:\Windows\system32\sperror.dll
2009-07-14 03:16 C:\Windows\system32\spfileq.dll
2009-07-14 03:16 C:\Windows\system32\SPInf.dll
2010-11-20 14:17 C:\Windows\system32\spinstall.exe
2009-07-14 03:16 C:\Windows\system32\spnet.dll
2009-07-14 03:16 C:\Windows\system32\spoolss.dll
2018-01-01 03:50 C:\Windows\system32\spoolsv.exe
2010-11-20 14:21 C:\Windows\system32\spopk.dll
2010-11-20 14:21 C:\Windows\system32\spp.dll
2010-11-20 14:20 C:\Windows\system32\sppc.dll
2009-07-14 03:16 C:\Windows\system32\sppcc.dll
2009-07-14 03:16 C:\Windows\system32\sppcext.dll
2010-11-20 14:21 C:\Windows\system32\sppcomapi.dll
2009-07-14 03:16 C:\Windows\system32\sppcommdlg.dll
2010-11-20 14:21 C:\Windows\system32\sppinst.dll
2010-11-20 14:21 C:\Windows\system32\sppnp.dll
2010-11-20 14:21 C:\Windows\system32\sppobjs.dll
2010-11-20 14:17 C:\Windows\system32\sppsvc.exe
2010-11-20 14:21 C:\Windows\system32\sppuinotify.dll
2010-11-20 14:21 C:\Windows\system32\sppwinob.dll
2009-07-14 03:16 C:\Windows\system32\sppwmi.dll
2010-11-20 14:17 C:\Windows\system32\spreview.exe
2009-07-14 03:16 C:\Windows\system32\spwinsat.dll
2010-11-20 14:21 C:\Windows\system32\spwizeng.dll
2009-07-14 03:10 C:\Windows\system32\spwizimg.dll
2010-11-20 14:07 C:\Windows\system32\spwizres.dll
2010-11-20 14:21 C:\Windows\system32\spwizui.dll
2019-06-12 17:06 C:\Windows\system32\spwmp.dll
2009-07-14 03:16 C:\Windows\system32\sqlceoledb30.dll
2009-07-14 03:16 C:\Windows\system32\sqlceqp30.dll
2010-11-20 14:21 C:\Windows\system32\sqlcese30.dll
2010-11-20 14:21 C:\Windows\system32\sqlsrv32.dll
2009-07-14 02:12 C:\Windows\system32\sqlsrv32.rll
2009-07-14 03:16 C:\Windows\system32\sqlunirl.dll
2009-07-14 03:16 C:\Windows\system32\sqlwid.dll
2009-07-13 23:03 C:\Windows\system32\sqlwoa.dll
2010-11-20 14:21 C:\Windows\system32\sqmapi.dll
2010-11-20 14:21 C:\Windows\system32\srchadmin.dll
2020-01-03 05:38 C:\Windows\system32\srclient.dll
2020-01-03 05:38 C:\Windows\system32\srcore.dll
2009-07-14 03:14 C:\Windows\system32\srdelayed.exe
2009-07-14 03:16 C:\Windows\system32\srhelper.dll
2009-07-14 03:16 C:\Windows\system32\SrpUxNativeSnapIn.dll
2010-11-20 14:21 C:\Windows\system32\srrstr.dll
2010-11-20 14:21 C:\Windows\system32\srvcli.dll
2020-01-03 05:38 C:\Windows\system32\srvsvc.dll
2009-07-14 03:16 C:\Windows\system32\srwmi.dll
2020-01-03 05:10 C:\Windows\system32\sscore.dll
2019-07-13 10:34 C:\Windows\system32\ssdpapi.dll
2019-07-13 10:34 C:\Windows\system32\ssdpsrv.dll
2020-01-03 05:38 C:\Windows\system32\sspicli.dll
2020-01-03 05:02 C:\Windows\system32\sspisrv.dll
2009-07-14 03:16 C:\Windows\system32\SSShim.dll
2010-11-20 14:16 C:\Windows\system32\ssText3d.scr
2009-07-14 03:16 C:\Windows\system32\sstpsvc.dll
2009-07-14 03:16 C:\Windows\system32\stclient.dll
2009-06-10 23:29 C:\Windows\system32\stdole32.tlb
2019-12-10 10:38 C:\Windows\system32\sti.dll
2009-07-14 03:14 C:\Windows\system32\StikyNot.exe
2019-12-10 10:38 C:\Windows\system32\sti_ci.dll
2010-11-20 14:21 C:\Windows\system32\stobject.dll
2009-06-10 23:25 C:\Windows\system32\storage.dll
2009-07-14 03:16 C:\Windows\system32\StorageContextHandler.dll
2009-07-14 03:16 C:\Windows\system32\Storprop.dll
2019-12-10 10:38 C:\Windows\system32\StructuredQuery.dll
2009-06-10 23:30 C:\Windows\system32\SubRange.uce
2009-07-14 03:14 C:\Windows\system32\subst.exe
2010-11-20 14:21 C:\Windows\system32\sud.dll
2009-07-14 03:14 C:\Windows\system32\svchost.exe
2009-07-14 03:16 C:\Windows\system32\swprv.dll
2009-07-14 03:16 C:\Windows\system32\sxproxy.dll
2010-11-20 14:21 C:\Windows\system32\sxs.dll
2009-07-14 03:16 C:\Windows\system32\sxshared.dll
2019-03-21 03:36 C:\Windows\system32\sxssrv.dll
2009-07-14 03:16 C:\Windows\system32\sxsstore.dll
2009-07-14 03:14 C:\Windows\system32\sxstrace.exe
2010-11-20 14:21 C:\Windows\system32\SyncCenter.dll
2012-09-26 00:47 C:\Windows\system32\synceng.dll
2009-07-14 03:14 C:\Windows\system32\SyncHost.exe
2009-07-14 03:16 C:\Windows\system32\SyncHostps.dll
2009-07-14 03:16 C:\Windows\system32\SyncInfrastructure.dll
2009-07-14 03:16 C:\Windows\system32\SyncInfrastructureps.dll
2009-07-14 03:16 C:\Windows\system32\Syncreg.dll
2010-11-20 14:21 C:\Windows\system32\syncui.dll
2010-11-20 14:21 C:\Windows\system32\sysclass.dll
2010-11-20 14:16 C:\Windows\system32\sysdm.cpl
2009-06-10 23:42 C:\Windows\system32\sysedit.exe
2015-12-08 23:53 C:\Windows\system32\SysFxUI.dll
2009-07-14 03:14 C:\Windows\system32\syskey.exe
2018-01-01 04:00 C:\Windows\system32\sysmain.dll
2017-06-13 00:29 C:\Windows\system32\sysmon.ocx
2009-07-14 03:16 C:\Windows\system32\sysntfy.dll
2009-07-14 03:16 C:\Windows\system32\sysprepMCE.dll
2009-06-10 23:39 C:\Windows\system32\sysprint.sep
2009-06-10 23:39 C:\Windows\system32\sysprtj.sep
2010-11-20 14:21 C:\Windows\system32\syssetup.dll
2009-07-13 23:41 C:\Windows\system32\system.drv
2010-11-20 14:21 C:\Windows\system32\systemcpl.dll
2009-07-14 03:14 C:\Windows\system32\systeminfo.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesAdvanced.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesComputerName.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesDataExecutionPrevention.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesHardware.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesPerformance.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesProtection.exe
2009-07-14 03:14 C:\Windows\system32\SystemPropertiesRemote.exe
2010-11-05 04:20 C:\Windows\system32\systemsf.ebd
2009-07-14 03:14 C:\Windows\system32\systray.exe
2019-11-15 04:29 C:\Windows\system32\t2embed.dll
2009-07-14 03:16 C:\Windows\system32\Tabbtn.dll
2009-07-14 03:16 C:\Windows\system32\TabbtnEx.dll
2010-11-20 14:17 C:\Windows\system32\tabcal.exe
2010-11-20 14:16 C:\Windows\system32\TabletPC.cpl
2017-12-05 19:08 C:\Windows\system32\TabSvc.dll
2010-11-20 14:17 C:\Windows\system32\takeown.exe
2009-06-10 23:41 C:\Windows\system32\tapi.dll
2009-07-14 03:16 C:\Windows\system32\tapi3.dll
2009-07-14 03:16 C:\Windows\system32\tapi32.dll
2009-07-14 03:16 C:\Windows\system32\tapilua.dll
2009-07-14 03:16 C:\Windows\system32\TapiMigPlugin.dll
2009-07-14 03:16 C:\Windows\system32\tapiperf.dll
2010-11-20 14:21 C:\Windows\system32\tapisrv.dll
2009-07-14 03:16 C:\Windows\system32\TapiSysprep.dll
2009-07-14 03:10 C:\Windows\system32\tapiui.dll
2009-07-14 03:14 C:\Windows\system32\TapiUnattend.exe
2010-11-20 14:21 C:\Windows\system32\taskbarcpl.dll
2019-06-04 01:10 C:\Windows\system32\taskcomp.dll
2010-11-20 14:17 C:\Windows\system32\taskeng.exe
2016-08-10 12:35 C:\Windows\system32\taskhost.exe
2009-07-14 03:14 C:\Windows\system32\taskkill.exe
2009-07-14 03:14 C:\Windows\system32\tasklist.exe
2010-11-20 14:17 C:\Windows\system32\taskmgr.exe
2010-11-20 14:21 C:\Windows\system32\taskschd.dll
2009-06-10 23:38 C:\Windows\system32\taskschd.msc
2009-07-14 03:16 C:\Windows\system32\TaskSchdPS.dll
2016-02-05 19:33 C:\Windows\system32\tbs.dll
2009-07-14 03:14 C:\Windows\system32\tcmsetup.exe
2009-06-10 23:39 C:\Windows\system32\tcpbidi.xml
2010-11-20 14:21 C:\Windows\system32\tcpipcfg.dll
2009-07-14 03:16 C:\Windows\system32\tcpmib.dll
2009-07-14 03:16 C:\Windows\system32\tcpmon.dll
2009-06-10 23:39 C:\Windows\system32\tcpmon.ini
2009-07-14 03:16 C:\Windows\system32\tcpmonui.dll
2009-07-14 03:14 C:\Windows\system32\TCPSVCS.EXE
2019-12-17 02:14 C:\Windows\system32\tdc.ocx
2015-07-22 19:53 C:\Windows\system32\tdh.dll
2009-07-14 03:14 C:\Windows\system32\telephon.cpl
2010-11-20 14:21 C:\Windows\system32\termmgr.dll
2019-03-11 23:33 C:\Windows\system32\termsrv.dll
2009-07-14 03:16 C:\Windows\system32\thawbrkr.dll
2010-11-20 14:21 C:\Windows\system32\themecpl.dll
2009-07-14 03:16 C:\Windows\system32\themeservice.dll
2018-09-09 02:44 C:\Windows\system32\themeui.dll
2010-11-20 14:21 C:\Windows\system32\thumbcache.dll
2011-12-30 07:27 C:\Windows\system32\timedate.cpl
2009-07-14 03:16 C:\Windows\system32\TimeDateMUICallback.dll
2009-07-14 03:14 C:\Windows\system32\timeout.exe
2009-07-13 23:41 C:\Windows\system32\TIMER.DRV
2016-10-11 17:18 C:\Windows\system32\tintlgnt.ime
2010-11-20 14:21 C:\Windows\system32\tlscsp.dll
2009-07-13 23:41 C:\Windows\system32\TOOLHELP.DLL
2009-06-10 23:43 C:\Windows\system32\tpm.msc
2009-07-14 03:16 C:\Windows\system32\tpmcompc.dll
2009-07-14 03:14 C:\Windows\system32\TpmInit.exe
2019-12-10 10:38 C:\Windows\system32\tquery.dll
2015-05-25 20:00 C:\Windows\system32\tracerpt.exe
2009-07-14 03:14 C:\Windows\system32\TRACERT.EXE
2018-01-01 04:00 C:\Windows\system32\traffic.dll
2010-11-20 14:21 C:\Windows\system32\TRAPI.dll
2009-07-14 01:15 C:\Windows\system32\tree.com
2009-07-14 03:16 C:\Windows\system32\trkwks.dll
2010-11-20 14:21 C:\Windows\system32\tsbyuv.dll
2010-11-20 14:21 C:\Windows\system32\tscfgwmi.dll
2009-07-14 03:16 C:\Windows\system32\TSChannel.dll
2010-11-20 14:17 C:\Windows\system32\tscon.exe
2009-07-14 02:01 C:\Windows\system32\tsddd.dll
2010-11-20 14:17 C:\Windows\system32\tsdiscon.exe
2009-07-14 03:16 C:\Windows\system32\TSErrRedir.dll
2013-10-02 01:58 C:\Windows\system32\tsgqec.dll
2010-11-20 14:17 C:\Windows\system32\tskill.exe
2019-12-12 05:35 C:\Windows\system32\tsmf.dll
2020-01-03 05:38 C:\Windows\system32\TSpkg.dll
2009-07-14 03:16 C:\Windows\system32\TsPnPRdrCoInstaller.dll
2010-11-20 14:21 C:\Windows\system32\tspubwmi.dll
2019-12-12 05:35 C:\Windows\system32\tssrvlic.dll
2009-07-14 03:14 C:\Windows\system32\TSTheme.exe
2013-10-02 01:45 C:\Windows\system32\TsUsbGDCoInstaller.dll
2013-10-02 02:32 C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2013-10-02 02:30 C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-12-11 19:47 C:\Windows\system32\TSWbPrxy.exe
2014-08-01 13:35 C:\Windows\system32\TSWorkspace.dll
2014-06-06 08:16 C:\Windows\system32\TsWpfWrp.exe
2009-07-14 03:16 C:\Windows\system32\tvratings.dll
2010-11-20 14:21 C:\Windows\system32\twext.dll
2009-07-14 03:16 C:\Windows\system32\txflog.dll
2009-07-14 03:16 C:\Windows\system32\txfw32.dll
2009-06-10 23:25 C:\Windows\system32\typelib.dll
2015-05-25 20:00 C:\Windows\system32\typeperf.exe
2019-09-10 04:27 C:\Windows\system32\tzres.dll
2010-11-20 14:17 C:\Windows\system32\tzutil.exe
2015-02-03 05:12 C:\Windows\system32\ubpm.dll
2009-07-14 03:16 C:\Windows\system32\ucmhc.dll
2019-04-12 15:04 C:\Windows\system32\ucrtbase.dll
2009-07-14 03:14 C:\Windows\system32\ucsvc.exe
2019-11-05 23:03 C:\Windows\system32\udhisapi.dll
2009-07-14 03:16 C:\Windows\system32\uDWM.dll
2009-07-14 03:16 C:\Windows\system32\uexfat.dll
2009-07-14 03:16 C:\Windows\system32\ufat.dll
2009-07-14 03:14 C:\Windows\system32\UI0Detect.exe
2016-10-11 15:33 C:\Windows\system32\UIAnimation.dll
2009-07-14 03:16 C:\Windows\system32\UIAutomationCore.dll
2009-07-14 03:16 C:\Windows\system32\uicom.dll
2009-07-14 03:16 C:\Windows\system32\UIHub.dll
2010-11-20 14:21 C:\Windows\system32\UIRibbon.dll
2010-11-20 14:07 C:\Windows\system32\UIRibbonRes.dll
2009-07-14 03:16 C:\Windows\system32\ulib.dll
2010-11-20 14:21 C:\Windows\system32\umb.dll
2009-07-14 03:16 C:\Windows\system32\umdmxfrm.dll
2011-05-24 12:44 C:\Windows\system32\umpnpmgr.dll
2019-09-19 06:30 C:\Windows\system32\umpo.dll
2010-11-20 14:21 C:\Windows\system32\umrdp.dll
2010-11-20 14:21 C:\Windows\system32\unattend.dll
2010-11-20 14:16 C:\Windows\system32\unimdm.tsp
2010-11-20 14:21 C:\Windows\system32\unimdmat.dll
2009-07-14 03:16 C:\Windows\system32\uniplat.dll
2010-11-20 14:17 C:\Windows\system32\unlodctr.exe
2009-07-14 03:14 C:\Windows\system32\unregmp2.exe
2010-11-20 14:21 C:\Windows\system32\untfs.dll
2010-11-20 14:21 C:\Windows\system32\upnp.dll
2019-11-05 23:03 C:\Windows\system32\upnpcont.exe
2019-11-05 23:25 C:\Windows\system32\upnphost.dll
2009-07-14 03:16 C:\Windows\system32\ureg.dll
2016-08-10 12:37 C:\Windows\system32\url.dll
2019-12-17 01:39 C:\Windows\system32\urlmon.dll
2009-07-14 03:16 C:\Windows\system32\usbceip.dll
2009-07-14 03:16 C:\Windows\system32\usbmon.dll
2009-07-14 03:16 C:\Windows\system32\usbperf.dll
2009-07-14 03:16 C:\Windows\system32\usbui.dll
2009-07-13 23:41 C:\Windows\system32\USER.EXE
2020-01-30 04:30 C:\Windows\system32\user32.dll
2010-11-20 14:21 C:\Windows\system32\UserAccountControlSettings.dll
2009-07-14 03:14 C:\Windows\system32\UserAccountControlSettings.exe
2010-11-20 14:21 C:\Windows\system32\usercpl.dll
2019-11-05 23:25 C:\Windows\system32\userenv.dll
2010-11-20 14:17 C:\Windows\system32\userinit.exe
2012-12-07 12:46 C:\Windows\system32\usk.rs
2019-11-05 23:25 C:\Windows\system32\usp10.dll
2018-08-16 04:14 C:\Windows\system32\UtcResources.dll
2010-11-20 14:21 C:\Windows\system32\utildll.dll
2009-07-14 03:14 C:\Windows\system32\Utilman.exe
2009-07-14 03:16 C:\Windows\system32\uudf.dll
2009-07-14 03:16 C:\Windows\system32\UXInit.dll
2010-11-20 14:21 C:\Windows\system32\uxlib.dll
2009-07-14 03:10 C:\Windows\system32\uxlibres.dll
2009-07-14 03:16 C:\Windows\system32\uxsms.dll
2009-07-14 03:16 C:\Windows\system32\uxtheme.dll
2009-06-10 23:42 C:\Windows\system32\v7vga.rom
2010-11-20 14:21 C:\Windows\system32\VAN.dll
2010-11-20 14:21 C:\Windows\system32\Vault.dll
2009-07-14 03:16 C:\Windows\system32\vaultcli.dll
2009-07-14 03:14 C:\Windows\system32\VaultCmd.exe
2009-07-14 03:16 C:\Windows\system32\VaultCredProvider.dll
2010-11-20 14:21 C:\Windows\system32\vaultsvc.dll
2009-07-14 03:14 C:\Windows\system32\VaultSysUi.exe
2009-07-14 03:16 C:\Windows\system32\vbajet32.dll
2010-11-20 14:16 C:\Windows\system32\VBICodec.ax
2010-11-20 14:16 C:\Windows\system32\vbisurf.ax
2019-12-17 02:37 C:\Windows\system32\vbscript.dll
2009-07-14 03:16 C:\Windows\system32\vdmdbg.dll
2009-07-14 03:16 C:\Windows\system32\vdmredir.dll
2010-11-20 14:17 C:\Windows\system32\vds.exe
2010-11-20 14:21 C:\Windows\system32\vdsbas.dll
2009-07-14 03:16 C:\Windows\system32\vdsdyn.dll
2009-07-14 03:14 C:\Windows\system32\vdsldr.exe
2010-11-20 14:21 C:\Windows\system32\vdsutil.dll
2009-07-14 03:16 C:\Windows\system32\vdsvd.dll
2009-07-14 03:16 C:\Windows\system32\vds_ps.dll
2009-06-10 23:42 C:\Windows\system32\ver.dll
2009-07-14 03:14 C:\Windows\system32\verclsid.exe
2009-07-14 03:16 C:\Windows\system32\verifier.dll
2009-07-14 03:14 C:\Windows\system32\verifier.exe
2009-07-14 03:16 C:\Windows\system32\version.dll
2010-11-20 14:21 C:\Windows\system32\vfwwdm32.dll
2009-07-14 01:25 C:\Windows\system32\vga.dll
2009-07-13 23:41 C:\Windows\system32\vga.drv
2009-07-14 01:26 C:\Windows\system32\vga256.dll
2009-07-14 01:25 C:\Windows\system32\vga64k.dll
2009-07-14 03:14 C:\Windows\system32\vidcap.ax
2015-12-08 23:54 C:\Windows\system32\VIDRESZR.DLL
2009-07-14 03:16 C:\Windows\system32\virtdisk.dll
2010-11-20 14:21 C:\Windows\system32\vpnike.dll
2010-11-20 14:21 C:\Windows\system32\vpnikeapi.dll
2009-07-14 03:14 C:\Windows\system32\vssadmin.exe
2010-11-20 14:21 C:\Windows\system32\vssapi.dll
2009-07-14 03:16 C:\Windows\system32\vsstrace.dll
2010-11-20 14:17 C:\Windows\system32\VSSVC.exe
2009-07-14 03:16 C:\Windows\system32\vss_ps.dll
2009-07-14 03:16 C:\Windows\system32\w32time.dll
2010-11-20 14:17 C:\Windows\system32\w32tm.exe
2009-07-14 03:16 C:\Windows\system32\w32topl.dll
2009-07-14 03:16 C:\Windows\system32\WABSyncProvider.dll
2009-07-14 03:14 C:\Windows\system32\waitfor.exe
2010-11-20 14:21 C:\Windows\system32\WavDest.dll
2010-11-20 14:21 C:\Windows\system32\wavemsp.dll
2009-07-14 03:14 C:\Windows\system32\wbadmin.exe
2010-11-20 14:21 C:\Windows\system32\wbemcomn.dll
2010-11-20 14:17 C:\Windows\system32\wbengine.exe
2009-07-14 03:16 C:\Windows\system32\wbiosrvc.dll
2009-07-14 03:16 C:\Windows\system32\WcnApi.dll
2010-11-20 14:21 C:\Windows\system32\wcncsvc.dll
2009-07-14 03:16 C:\Windows\system32\WcnEapAuthProxy.dll
2009-07-14 03:16 C:\Windows\system32\WcnEapPeerProxy.dll
2009-07-14 03:16 C:\Windows\system32\WcnNetsh.dll
2009-07-14 03:16 C:\Windows\system32\wcnwiz.dll
2019-11-15 03:59 C:\Windows\system32\WcsPlugInService.dll
2017-06-13 00:29 C:\Windows\system32\wdc.dll
2012-11-29 00:57 C:\Windows\system32\Wdfres.dll
2018-07-18 22:39 C:\Windows\system32\wdi
2015-01-09 04:48 C:\Windows\system32\wdi.dll
2010-11-20 14:21 C:\Windows\system32\wdiasqmmodule.dll
2020-01-03 05:38 C:\Windows\system32\wdigest.dll
2010-11-20 14:16 C:\Windows\system32\wdmaud.drv
2010-11-20 14:21 C:\Windows\system32\wdscore.dll
2009-07-13 23:38 C:\Windows\system32\WdsUnattendTemplate.xml
2009-07-14 01:40 C:\Windows\system32\WEB.rs
2019-12-17 02:02 C:\Windows\system32\webcheck.dll
2016-09-08 22:34 C:\Windows\system32\WebClnt.dll
2016-03-09 20:40 C:\Windows\system32\webio.dll
2018-05-15 05:13 C:\Windows\system32\webservices.dll
2009-07-14 03:16 C:\Windows\system32\wecapi.dll
2009-07-14 03:16 C:\Windows\system32\wecsvc.dll
2009-07-14 03:14 C:\Windows\system32\wecutil.exe
2019-09-10 04:27 C:\Windows\system32\wer.dll
2019-09-10 04:27 C:\Windows\system32\werconcpl.dll
2019-09-10 04:00 C:\Windows\system32\wercplsupport.dll
2019-09-10 04:00 C:\Windows\system32\werdiagcontroller.dll
2019-09-10 04:00 C:\Windows\system32\WerFault.exe
2019-09-10 04:00 C:\Windows\system32\WerFaultSecure.exe
2019-09-10 04:00 C:\Windows\system32\wermgr.exe
2009-07-14 03:16 C:\Windows\system32\wersvc.dll
2019-09-10 04:27 C:\Windows\system32\werui.dll
2009-07-14 03:16 C:\Windows\system32\wevtapi.dll
2009-07-14 03:16 C:\Windows\system32\wevtfwd.dll
2010-11-20 14:21 C:\Windows\system32\wevtsvc.dll
2009-07-14 03:14 C:\Windows\system32\wevtutil.exe
2016-08-10 12:37 C:\Windows\system32\wextract.exe
2009-06-10 23:27 C:\Windows\system32\WF.msc
2018-08-10 17:20 C:\Windows\system32\wfapigp.dll
2009-07-14 03:16 C:\Windows\system32\WfHC.dll
2010-11-20 14:17 C:\Windows\system32\WFS.exe
2009-07-14 03:11 C:\Windows\system32\WFSR.dll
2009-07-13 23:41 C:\Windows\system32\WFWNET.DRV
2009-07-14 03:16 C:\Windows\system32\whealogr.dll
2009-07-14 03:14 C:\Windows\system32\where.exe
2009-07-14 03:16 C:\Windows\system32\whhelper.dll
2009-07-14 03:14 C:\Windows\system32\whoami.exe
2009-07-14 03:14 C:\Windows\system32\wiaacmgr.exe
2019-12-10 10:38 C:\Windows\system32\wiaaut.dll
2010-11-20 14:21 C:\Windows\system32\wiadefui.dll
2019-12-10 10:38 C:\Windows\system32\wiadss.dll
2019-12-10 10:38 C:\Windows\system32\wiarpc.dll
2009-07-14 03:16 C:\Windows\system32\wiascanprofiles.dll
2019-12-10 10:38 C:\Windows\system32\wiaservc.dll
2009-07-14 03:16 C:\Windows\system32\wiashext.dll
2019-12-10 10:22 C:\Windows\system32\wiatrace.dll
2010-11-20 14:21 C:\Windows\system32\wiavideo.dll
2009-07-13 23:41 C:\Windows\system32\WIFEMAN.DLL
2010-11-20 14:21 C:\Windows\system32\wimgapi.dll
2010-11-20 14:17 C:\Windows\system32\wimserv.exe
2009-07-14 01:20 C:\Windows\system32\win.com
2019-12-10 10:09 C:\Windows\system32\win32k.sys
2009-06-10 23:42 C:\Windows\system32\win87em.dll
2009-07-14 03:16 C:\Windows\system32\winbio.dll
2009-07-14 03:16 C:\Windows\system32\winbrand.dll
2014-03-04 11:17 C:\Windows\system32\wincredprovider.dll
2010-11-20 14:17 C:\Windows\system32\WindowsAnytimeUpgradeResults.exe
2018-08-30 03:47 C:\Windows\system32\WindowsCodecs.dll
2016-08-10 12:31 C:\Windows\system32\WindowsCodecsExt.dll
2009-07-14 03:16 C:\Windows\system32\winethc.dll
2009-07-14 03:16 C:\Windows\system32\WinFax.dll
2016-05-11 17:19 C:\Windows\system32\winhttp.dll
2019-12-17 01:43 C:\Windows\system32\wininet.dll
2009-07-14 03:14 C:\Windows\system32\wininit.exe
2016-05-12 17:18 C:\Windows\system32\winipsec.dll
2019-11-26 22:22 C:\Windows\system32\winload.exe
2019-08-14 06:57 C:\Windows\system32\winlogon.exe
2010-11-20 14:21 C:\Windows\system32\winmm.dll
2009-07-13 23:41 C:\Windows\system32\WINNLS.DLL
2017-08-11 08:19 C:\Windows\system32\winnsi.dll
2009-07-13 23:41 C:\Windows\system32\WINOLDAP.MOD
2016-03-24 00:39 C:\Windows\system32\winresume.exe
2009-06-10 23:40 C:\Windows\system32\winrm.cmd
2009-06-10 23:40 C:\Windows\system32\winrm.vbs
2009-07-14 03:16 C:\Windows\system32\winrnr.dll
2009-07-14 03:14 C:\Windows\system32\winrs.exe
2009-07-14 03:16 C:\Windows\system32\winrscmd.dll
2009-07-14 03:14 C:\Windows\system32\winrshost.exe
2009-07-14 03:11 C:\Windows\system32\winrsmgr.dll
2009-07-14 03:16 C:\Windows\system32\winrssrv.dll
2010-11-20 14:17 C:\Windows\system32\WinSAT.exe
2010-11-20 14:21 C:\Windows\system32\WinSATAPI.dll
2018-02-22 05:06 C:\Windows\system32\WinSCard.dll
2019-04-09 17:14 C:\Windows\system32\WinSetupUI.dll
2009-07-14 03:15 C:\Windows\system32\winshfhc.dll
2009-07-13 23:41 C:\Windows\system32\WINSOCK.DLL
2009-07-14 03:16 C:\Windows\system32\winsockhc.dll
2019-02-16 07:50 C:\Windows\system32\winspool.drv
2009-07-13 23:41 C:\Windows\system32\WINSPOOL.EXE
2009-07-14 03:16 C:\Windows\system32\WINSRPC.DLL
2020-01-03 05:38 C:\Windows\system32\winsrv.dll
2014-07-17 03:40 C:\Windows\system32\winsta.dll
2009-07-14 03:16 C:\Windows\system32\WinSync.dll
2009-07-14 03:16 C:\Windows\system32\WinSyncMetastore.dll
2009-07-14 03:16 C:\Windows\system32\WinSyncProviders.dll
2019-12-10 10:38 C:\Windows\system32\wintrust.dll
2009-07-14 03:16 C:\Windows\system32\winusb.dll
2009-07-14 03:14 C:\Windows\system32\winver.exe
2017-12-05 17:54 C:\Windows\system32\wisptis.exe
2010-11-20 14:21 C:\Windows\system32\wkscli.dll
2015-07-16 17:14 C:\Windows\system32\wksprt.exe
2013-10-02 02:14 C:\Windows\system32\wksprtPS.dll
2018-04-25 17:54 C:\Windows\system32\wkssvc.dll
2019-06-28 07:23 C:\Windows\system32\wlanapi.dll
2009-07-14 03:16 C:\Windows\system32\wlancfg.dll
2009-07-14 03:16 C:\Windows\system32\WLanConn.dll
2009-07-14 03:16 C:\Windows\system32\wlandlg.dll
2009-07-14 03:14 C:\Windows\system32\wlanext.exe
2010-11-20 14:21 C:\Windows\system32\wlangpui.dll
2009-07-14 03:16 C:\Windows\system32\WLanHC.dll
2019-06-28 07:23 C:\Windows\system32\wlanhlp.dll
2009-07-14 03:16 C:\Windows\system32\wlaninst.dll
2009-07-14 03:16 C:\Windows\system32\WlanMM.dll
2019-06-28 07:23 C:\Windows\system32\wlanmsm.dll
2010-11-20 14:21 C:\Windows\system32\wlanpref.dll
2019-06-28 07:23 C:\Windows\system32\wlansec.dll
2019-06-28 07:23 C:\Windows\system32\wlansvc.dll
2010-11-20 14:21 C:\Windows\system32\wlanui.dll
2009-07-14 03:16 C:\Windows\system32\wlanutil.dll
2017-08-11 08:19 C:\Windows\system32\Wldap32.dll
2009-07-14 03:16 C:\Windows\system32\wlgpclnt.dll
2009-07-14 03:14 C:\Windows\system32\wlrmdr.exe
2009-07-14 03:16 C:\Windows\system32\WlS0WndH.dll
2015-12-08 23:54 C:\Windows\system32\WMADMOD.DLL
2015-12-08 23:54 C:\Windows\system32\WMADMOE.DLL
2015-12-08 23:54 C:\Windows\system32\WMALFXGFXDSP.dll
2009-07-14 03:16 C:\Windows\system32\WMASF.DLL
2009-07-14 03:16 C:\Windows\system32\wmcodecdspps.dll
2009-07-14 03:16 C:\Windows\system32\wmdmlog.dll
2009-07-14 03:16 C:\Windows\system32\wmdmps.dll
2010-11-20 14:21 C:\Windows\system32\wmdrmdev.dll
2010-11-20 14:21 C:\Windows\system32\wmdrmnet.dll
2019-06-12 17:21 C:\Windows\system32\wmdrmsdk.dll
2009-07-14 03:11 C:\Windows\system32\wmerror.dll
2012-03-01 07:29 C:\Windows\system32\wmi.dll
2010-11-20 14:21 C:\Windows\system32\wmicmiplugin.dll
2009-07-14 03:16 C:\Windows\system32\wmidx.dll
2009-06-10 23:39 C:\Windows\system32\WmiMgmt.msc
2009-07-14 03:16 C:\Windows\system32\wmiprop.dll
2010-11-20 14:21 C:\Windows\system32\WMNetMgr.dll
2019-06-12 17:21 C:\Windows\system32\wmp.dll
2009-07-14 03:16 C:\Windows\system32\wmpcm.dll
2009-07-14 03:16 C:\Windows\system32\WmpDui.dll
2010-11-20 14:21 C:\Windows\system32\wmpdxm.dll
2010-11-20 14:21 C:\Windows\system32\wmpeffects.dll
2010-11-20 14:21 C:\Windows\system32\WMPEncEn.dll
2015-02-04 04:54 C:\Windows\system32\WMPhoto.dll
2019-06-12 17:21 C:\Windows\system32\wmploc.DLL
2015-12-08 23:54 C:\Windows\system32\wmpmde.dll
2010-11-20 14:21 C:\Windows\system32\wmpps.dll
2010-11-20 14:21 C:\Windows\system32\wmpshell.dll
2010-11-20 14:21 C:\Windows\system32\wmpsrcwp.dll
2009-07-14 03:16 C:\Windows\system32\wmsgapi.dll
2015-12-08 23:54 C:\Windows\system32\WMSPDMOD.DLL
2015-12-08 23:54 C:\Windows\system32\WMSPDMOE.DLL
2010-11-20 14:20 C:\Windows\system32\WMVCORE.DLL
2015-12-08 23:54 C:\Windows\system32\WMVDECOD.DLL
2009-07-14 03:16 C:\Windows\system32\wmvdspa.dll
2015-12-08 23:54 C:\Windows\system32\WMVENCOD.DLL
2015-12-08 23:54 C:\Windows\system32\WMVSDECD.DLL
2015-12-08 23:54 C:\Windows\system32\WMVSENCD.DLL
2015-12-08 23:54 C:\Windows\system32\WMVXENCD.DLL
2009-07-14 03:16 C:\Windows\system32\wow32.dll
2009-07-13 23:41 C:\Windows\system32\WOWDEB.EXE
2009-07-13 23:41 C:\Windows\system32\WOWEXEC.EXE
2012-12-07 14:26 C:\Windows\system32\Wpc.dll
2009-07-14 03:16 C:\Windows\system32\wpcao.dll
2010-11-20 14:21 C:\Windows\system32\wpccpl.dll
2009-07-14 03:16 C:\Windows\system32\wpcmig.dll
2009-07-14 03:16 C:\Windows\system32\wpcsvc.dll
2009-07-14 03:16 C:\Windows\system32\wpcumi.dll
2010-11-20 14:21 C:\Windows\system32\wpdbusenum.dll
2009-07-14 03:16 C:\Windows\system32\WpdMtp.dll
2009-07-14 03:16 C:\Windows\system32\WpdMtpUS.dll
2015-01-29 05:02 C:\Windows\system32\wpdshext.dll
2009-07-14 03:14 C:\Windows\system32\WPDShextAutoplay.exe
2010-11-20 14:21 C:\Windows\system32\WPDShServiceObj.dll
2010-11-20 14:21 C:\Windows\system32\WPDSp.dll
2010-11-20 14:21 C:\Windows\system32\wpdwcn.dll
2010-11-20 14:21 C:\Windows\system32\wpd_ci.dll
2017-08-11 08:09 C:\Windows\system32\wpnpinst.exe
2009-07-14 03:14 C:\Windows\system32\write.exe
2009-07-14 03:11 C:\Windows\system32\ws2help.dll
2016-05-11 17:19 C:\Windows\system32\ws2_32.dll
2010-11-20 14:21 C:\Windows\system32\wscapi.dll
2009-07-14 03:16 C:\Windows\system32\wscinterop.dll
2009-07-14 03:16 C:\Windows\system32\wscisvif.dll
2009-07-14 03:16 C:\Windows\system32\wscmisetup.dll
2009-07-14 03:16 C:\Windows\system32\wscproxystub.dll
2018-10-27 05:04 C:\Windows\system32\wscript.exe
2009-07-14 03:16 C:\Windows\system32\wscsvc.dll
2009-07-14 03:14 C:\Windows\system32\wscui.cpl
2010-11-20 14:21 C:\Windows\system32\WSDApi.dll
2010-11-20 14:21 C:\Windows\system32\wsdchngr.dll
2009-07-14 03:16 C:\Windows\system32\WSDMon.dll
2009-07-14 03:16 C:\Windows\system32\WSDPrintProxy.DLL
2009-07-14 03:16 C:\Windows\system32\WSDScanProxy.dll
2009-07-14 03:16 C:\Windows\system32\wsecedit.dll
2009-07-14 03:16 C:\Windows\system32\wsepno.dll
2010-11-20 14:21 C:\Windows\system32\wshbth.dll
2018-10-27 05:04 C:\Windows\system32\wshcon.dll
2009-07-14 03:16 C:\Windows\system32\wshelper.dll
2009-07-14 03:16 C:\Windows\system32\wshext.dll
2009-07-14 03:16 C:\Windows\system32\wship6.dll
2010-11-20 14:21 C:\Windows\system32\wshirda.dll
2018-01-01 04:00 C:\Windows\system32\wshnetbs.dll
2018-10-27 05:27 C:\Windows\system32\wshom.ocx
2018-01-01 03:43 C:\Windows\system32\wshqos.dll
2015-11-05 21:02 C:\Windows\system32\wshrm.dll
2009-07-14 03:16 C:\Windows\system32\WSHTCPIP.DLL
2009-06-10 23:40 C:\Windows\system32\wsmanconfig_schema.xml
2016-08-06 16:53 C:\Windows\system32\WSManHTTPConfig.exe
2016-08-06 17:15 C:\Windows\system32\WSManMigrationPlugin.dll
2016-08-06 17:15 C:\Windows\system32\WsmAuto.dll
2016-08-06 16:53 C:\Windows\system32\wsmplpxy.dll
2016-08-06 16:53 C:\Windows\system32\wsmprovhost.exe
2009-06-10 23:40 C:\Windows\system32\WsmPty.xsl
2016-08-06 17:15 C:\Windows\system32\WsmRes.dll
2016-08-06 17:15 C:\Windows\system32\WsmSvc.dll
2009-06-10 23:40 C:\Windows\system32\WsmTxt.xsl
2016-08-06 17:15 C:\Windows\system32\WsmWmiPl.dll
2018-03-06 20:11 C:\Windows\system32\wsnmp32.dll
2009-07-14 03:16 C:\Windows\system32\wsock32.dll
2010-11-20 14:17 C:\Windows\system32\wsqmcons.exe
2010-11-20 14:16 C:\Windows\system32\WSTPager.ax
2010-11-20 14:21 C:\Windows\system32\wtsapi32.dll
2019-04-09 17:05 C:\Windows\system32\wu.upgrade.ps.dll
2019-12-10 10:23 C:\Windows\system32\wuapi.dll
2019-04-09 17:05 C:\Windows\system32\wuapp.exe
2019-12-10 10:22 C:\Windows\system32\wuauclt.exe
2019-12-10 10:23 C:\Windows\system32\wuaueng.dll
2019-12-10 10:38 C:\Windows\system32\wucltux.dll
2012-07-26 05:20 C:\Windows\system32\WUDFCoinstaller.dll
2012-07-26 05:21 C:\Windows\system32\WUDFHost.exe
2012-07-26 05:20 C:\Windows\system32\WUDFPlatform.dll
2012-07-26 05:20 C:\Windows\system32\WUDFSvc.dll
2012-07-26 05:20 C:\Windows\system32\WUDFx.dll
2019-12-10 10:22 C:\Windows\system32\wudriver.dll
2019-12-10 10:22 C:\Windows\system32\wups.dll
2019-12-10 10:22 C:\Windows\system32\wups2.dll
2010-11-20 14:17 C:\Windows\system32\wusa.exe
2019-04-09 17:17 C:\Windows\system32\wuwebv.dll
2017-06-13 00:29 C:\Windows\system32\wvc.dll
2009-07-14 03:16 C:\Windows\system32\Wwanadvui.dll
2009-07-14 03:16 C:\Windows\system32\WWanAPI.dll
2009-07-14 03:16 C:\Windows\system32\wwancfg.dll
2010-11-20 14:21 C:\Windows\system32\wwanconn.dll
2009-07-14 03:16 C:\Windows\system32\WWanHC.dll
2009-07-14 03:16 C:\Windows\system32\wwaninst.dll
2009-07-14 03:16 C:\Windows\system32\wwanmm.dll
2009-07-14 03:16 C:\Windows\system32\Wwanpref.dll
2013-03-19 05:33 C:\Windows\system32\wwanprotdim.dll
2014-01-28 04:07 C:\Windows\system32\wwansvc.dll
2009-07-14 03:16 C:\Windows\system32\wwapi.dll
2009-07-14 03:16 C:\Windows\system32\wzcdlg.dll
2009-07-14 03:14 C:\Windows\system32\xcopy.exe
2009-07-14 03:16 C:\Windows\system32\XInput9_1_0.dll
2009-07-14 03:16 C:\Windows\system32\xmlfilter.dll
2019-07-13 10:34 C:\Windows\system32\xmllite.dll
2009-07-14 03:16 C:\Windows\system32\xmlprovi.dll
2009-07-14 03:16 C:\Windows\system32\xolehlp.dll
2009-07-14 03:16 C:\Windows\system32\XpsFilt.dll
2016-08-10 12:31 C:\Windows\system32\XpsGdiConverter.dll
2016-08-10 12:31 C:\Windows\system32\XpsPrint.dll
2010-11-20 14:21 C:\Windows\system32\XpsRasterService.dll
2018-01-12 18:16 C:\Windows\system32\xpsrchvw.exe
2009-06-10 23:15 C:\Windows\system32\xpsrchvw.xml
2010-11-20 14:21 C:\Windows\system32\xpsservices.dll
2009-07-14 03:16 C:\Windows\system32\XPSSHHDR.dll
2009-07-14 03:16 C:\Windows\system32\xpssvcs.dll
2009-06-10 23:42 C:\Windows\system32\xwizard.dtd
2009-07-14 03:14 C:\Windows\system32\xwizard.exe
2009-07-14 03:16 C:\Windows\system32\xwizards.dll
2009-07-14 03:16 C:\Windows\system32\xwreg.dll
2009-07-14 03:16 C:\Windows\system32\xwtpdui.dll
2009-07-14 03:16 C:\Windows\system32\xwtpw32.dll
2009-07-14 03:16 C:\Windows\system32\zgmprxy.dll
2018-06-08 17:55 C:\Windows\system32\zipfldr.dll
2010-11-20 14:16 C:\Windows\bfsvc.exe
2009-07-14 06:52 C:\Windows\Boot
2009-07-14 06:52 C:\Windows\diagnostics
2016-08-29 16:55 C:\Windows\explorer.exe
2009-07-14 03:14 C:\Windows\fveupdate.exe
2017-06-02 09:57 C:\Windows\HelpPane.exe
2018-04-18 17:35 C:\Windows\hh.exe
2009-07-14 00:58 C:\Windows\mib.bin
2015-07-09 19:42 C:\Windows\notepad.exe
2009-07-14 03:14 C:\Windows\regedit.exe
2020-04-02 16:37 C:\Windows\rescache
2019-12-07 12:52 C:\Windows\servicing
2016-08-16 14:04 C:\Windows\tracing
2009-06-10 23:41 C:\Windows\twain.dll
2010-11-20 14:21 C:\Windows\twain_32.dll
2009-06-10 23:41 C:\Windows\twunk_16.exe
2009-07-14 03:14 C:\Windows\twunk_32.exe
2009-06-10 23:42 C:\Windows\winhelp.exe
2009-08-04 19:56 C:\Windows\winhlp32.exe
2020-12-16 14:06 C:\Windows\winsxs
2009-06-10 23:34 C:\Windows\WMSysPr9.prx
2009-07-14 03:14 C:\Windows\write.exe
2009-06-10 23:42 C:\Windows\_default.pif
2018-02-10 20:48 C:\Windows\system32\Drivers\acpi.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\adp94xx.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\adpahci.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\adpu320.sys
2017-04-04 16:52 C:\Windows\system32\Drivers\afd.sys
2009-07-14 01:55 C:\Windows\system32\Drivers\agilevpn.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\AGP440.sys
2020-01-03 05:02 C:\Windows\system32\Drivers\amdk8.sys
2020-01-03 05:02 C:\Windows\system32\Drivers\amdppm.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\amdsbs.sys
2020-01-03 05:10 C:\Windows\system32\Drivers\appid.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\arc.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\arcsas.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\asyncmac.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\atapi.sys
2013-08-05 03:56 C:\Windows\system32\Drivers\ataport.sys
2019-05-10 10:36 C:\Windows\system32\Drivers\avgSP.sys.sum
2009-07-14 03:26 C:\Windows\system32\Drivers\battc.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\beep.sys
2018-07-18 17:14 C:\Windows\system32\Drivers\bowser.sys
2009-07-14 00:53 C:\Windows\system32\Drivers\BrFiltLo.sys
2009-07-14 00:53 C:\Windows\system32\Drivers\BrFiltUp.sys
2019-02-07 17:53 C:\Windows\system32\Drivers\bridge.sys
2009-07-14 02:57 C:\Windows\system32\Drivers\BrSerId.sys
2009-07-14 00:53 C:\Windows\system32\Drivers\BrSerWdm.sys
2009-07-14 00:53 C:\Windows\system32\Drivers\BrUsbMdm.sys
2009-07-14 00:53 C:\Windows\system32\Drivers\BrUsbSer.sys
2019-07-30 03:56 C:\Windows\system32\Drivers\bthenum.sys
2009-07-14 01:51 C:\Windows\system32\Drivers\bthmodem.sys
2019-07-30 03:56 C:\Windows\system32\Drivers\bthport.sys
2019-07-30 03:56 C:\Windows\system32\Drivers\BTHUSB.SYS
2009-07-14 00:02 C:\Windows\system32\Drivers\bxvbdx.sys
2019-02-10 18:18 C:\Windows\system32\Drivers\cdfs.sys
2010-11-20 10:38 C:\Windows\system32\Drivers\cdrom.sys
2009-07-14 01:51 C:\Windows\system32\Drivers\circlass.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\Classpnp.sys
2009-07-14 01:19 C:\Windows\system32\Drivers\CmBatt.sys
2018-05-15 03:09 C:\Windows\system32\Drivers\cng.sys
2009-07-14 03:26 C:\Windows\system32\Drivers\compbatt.sys
2010-11-20 11:50 C:\Windows\system32\Drivers\CompositeBus.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\crashdmp.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\crcdisk.sys
2018-06-29 17:10 C:\Windows\system32\Drivers\csc.sys
2021-05-11 23:25 C:\Windows\system32\Drivers\dbx-canary.sys
2021-05-11 23:25 C:\Windows\system32\Drivers\dbx-dev.sys
2021-05-11 23:25 C:\Windows\system32\Drivers\dbx-stable.sys
2018-04-25 17:17 C:\Windows\system32\Drivers\dfsc.sys
2009-06-09 05:18 C:\Windows\system32\Drivers\DGIVECP.SYS
2009-07-14 01:24 C:\Windows\system32\Drivers\discache.sys
2016-01-21 02:51 C:\Windows\system32\Drivers\disk.sys
2014-02-04 04:07 C:\Windows\system32\Drivers\Diskdump.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\djsvs.sys
2015-12-08 23:43 C:\Windows\system32\Drivers\drmk.sys
2015-12-08 23:11 C:\Windows\system32\Drivers\drmkaud.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\Dumpata.sys
2009-07-14 03:17 C:\Windows\system32\Drivers\dumpfve.sys
2009-07-14 01:25 C:\Windows\system32\Drivers\dxapi.sys
2009-07-14 01:25 C:\Windows\system32\Drivers\dxg.sys
2019-08-14 00:17 C:\Windows\system32\Drivers\dxgkrnl.sys
2019-08-14 00:17 C:\Windows\system32\Drivers\dxgmms1.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\elxstor.sys
2018-02-10 19:36 C:\Windows\system32\Drivers\errdev.sys
2009-07-14 00:02 C:\Windows\system32\Drivers\evbdx.sys
2019-02-10 18:18 C:\Windows\system32\Drivers\exfat.sys
2019-02-10 18:18 C:\Windows\system32\Drivers\fastfat.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\fdc.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\fileinfo.sys
2009-07-14 01:15 C:\Windows\system32\Drivers\filetrace.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\flpydisk.sys
2018-01-01 03:54 C:\Windows\system32\Drivers\fltMgr.sys
2020-12-02 14:26 C:\Windows\system32\Drivers\fsbts.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\fsdepends.sys
2012-03-01 07:46 C:\Windows\system32\Drivers\fs_rec.sys
2013-01-24 06:47 C:\Windows\system32\Drivers\fvevol.sys
2019-07-13 10:37 C:\Windows\system32\Drivers\FWPKCLNT.SYS
2009-07-14 03:20 C:\Windows\system32\Drivers\GAGP30KX.SYS
2009-06-10 23:14 C:\Windows\system32\Drivers\gm.dls
2009-06-10 23:14 C:\Windows\system32\Drivers\gmreadme.txt
2009-07-14 00:54 C:\Windows\system32\Drivers\hcw85cir.sys
2010-11-20 11:59 C:\Windows\system32\Drivers\hdaudbus.sys
2019-08-27 04:38 C:\Windows\system32\Drivers\HdAudio.sys
2009-07-14 01:19 C:\Windows\system32\Drivers\hidbatt.sys
2009-07-14 01:51 C:\Windows\system32\Drivers\hidbth.sys
2019-03-05 04:40 C:\Windows\system32\Drivers\hidclass.sys
2009-07-14 01:51 C:\Windows\system32\Drivers\hidir.sys
2019-03-05 04:40 C:\Windows\system32\Drivers\hidparse.sys
2019-03-05 04:40 C:\Windows\system32\Drivers\hidusb.sys
2019-12-10 10:06 C:\Windows\system32\Drivers\http.sys
2010-11-20 14:29 C:\Windows\system32\Drivers\hwpolicy.sys
2009-07-14 01:11 C:\Windows\system32\Drivers\i8042prt.sys
2010-11-05 23:39 C:\Windows\system32\Drivers\iaStor.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\iirsp.sys
2020-01-03 05:02 C:\Windows\system32\Drivers\intelppm.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\ipfltdrv.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\ipnat.sys
2009-07-14 01:53 C:\Windows\system32\Drivers\irda.sys
2009-07-14 01:53 C:\Windows\system32\Drivers\irenum.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\isapnp.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\kbdclass.sys
2019-02-01 11:36 C:\Windows\system32\Drivers\kinonivd.sys
2018-08-28 07:41 C:\Windows\system32\Drivers\ks.sys
2020-01-03 05:42 C:\Windows\system32\Drivers\ksecdd.sys
2020-01-03 05:42 C:\Windows\system32\Drivers\ksecpkg.sys
2009-07-14 01:53 C:\Windows\system32\Drivers\lltdio.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\lsi_fc.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\lsi_sas2.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\lsi_scsi.sys
2019-03-29 03:35 C:\Windows\system32\Drivers\luafv.sys
2021-05-18 21:28 C:\Windows\system32\Drivers\mbae.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\mcd.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\megasas.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\MegaSR.sys
2009-07-14 01:55 C:\Windows\system32\Drivers\modem.sys
2019-09-10 03:59 C:\Windows\system32\Drivers\monitor.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\mouclass.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\mouhid.sys
2019-06-12 17:23 C:\Windows\system32\Drivers\mountmgr.sys
2018-08-10 17:20 C:\Windows\system32\Drivers\mpsdrv.sys
2016-09-08 16:49 C:\Windows\system32\Drivers\mrxdav.sys
2020-01-03 05:03 C:\Windows\system32\Drivers\mrxsmb.sys
2020-01-03 05:03 C:\Windows\system32\Drivers\mrxsmb10.sys
2020-01-03 05:03 C:\Windows\system32\Drivers\mrxsmb20.sys
2019-02-03 17:34 C:\Windows\system32\Drivers\msfs.sys
2012-11-29 00:57 C:\Windows\system32\Drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
2012-06-02 16:57 C:\Windows\system32\Drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
2016-09-14 23:14 C:\Windows\system32\Drivers\Msft_Kernel_ccdcmb_01009.Wdf
2016-09-21 22:44 C:\Windows\system32\Drivers\Msft_Kernel_GeneStor_01009.Wdf
2018-03-13 15:08 C:\Windows\system32\Drivers\Msft_Kernel_netaapl_01009.Wdf
2017-03-18 12:52 C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2016-09-14 23:27 C:\Windows\system32\Drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
2016-08-09 12:27 C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2016-08-10 20:03 C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2009-07-14 01:51 C:\Windows\system32\Drivers\mshidkmdf.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\msisadrv.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\mskssrv.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\mspclock.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\mspqm.sys
2019-11-05 23:29 C:\Windows\system32\Drivers\msrpc.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\mssmbios.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\mstee.sys
2009-07-14 01:46 C:\Windows\system32\Drivers\MTConfig.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\mup.sys
2018-07-06 17:54 C:\Windows\system32\Drivers\ndis.sys
2009-07-14 01:52 C:\Windows\system32\Drivers\ndiscap.sys
2018-12-08 04:41 C:\Windows\system32\Drivers\ndistapi.sys
2010-11-20 12:06 C:\Windows\system32\Drivers\ndisuio.sys
2010-11-20 12:07 C:\Windows\system32\Drivers\ndiswan.sys
2018-12-08 04:41 C:\Windows\system32\Drivers\ndproxy.sys
2018-01-01 03:43 C:\Windows\system32\Drivers\netbios.sys
2019-02-21 17:36 C:\Windows\system32\Drivers\netbt.sys
2019-07-13 10:38 C:\Windows\system32\Drivers\netio.sys
2009-07-14 03:20 C:\Windows\system32\Drivers\nfrd960.sys
2020-01-03 05:02 C:\Windows\system32\Drivers\npfs.sys
2017-08-11 07:55 C:\Windows\system32\Drivers\nsiproxy.sys
2019-02-10 18:43 C:\Windows\system32\Drivers\ntfs.sys
2009-07-14 01:11 C:\Windows\system32\Drivers\null.sys
2017-09-13 16:53 C:\Windows\system32\Drivers\nwifi.sys
2018-01-01 03:43 C:\Windows\system32\Drivers\pacer.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\parport.sys
2012-03-17 09:27 C:\Windows\system32\Drivers\partmgr.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\parvdm.sys
2012-10-17 14:53 C:\Windows\system32\Drivers\pccsmcfd.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\pci.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\pciidex.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\pcmcia.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\pcw.sys
2019-06-12 17:16 C:\Windows\system32\Drivers\PEAuth.sys
2015-12-08 23:11 C:\Windows\system32\Drivers\portcls.sys
2020-01-03 05:02 C:\Windows\system32\Drivers\processr.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\ql2300.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\ql40xx.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\qwavedrv.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\rasacd.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\rasl2tp.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\raspppoe.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\raspptp.sys
2009-07-14 01:54 C:\Windows\system32\Drivers\rassstp.sys
2019-09-10 03:56 C:\Windows\system32\Drivers\rdbss.sys
2009-07-14 02:02 C:\Windows\system32\Drivers\rdpbus.sys
2010-11-20 12:22 C:\Windows\system32\Drivers\RDPCDD.sys
2010-11-20 12:24 C:\Windows\system32\Drivers\rdpdr.sys
2009-07-14 02:01 C:\Windows\system32\Drivers\RDPENCDD.sys
2009-07-14 02:01 C:\Windows\system32\Drivers\RDPREFMP.sys
2012-08-23 16:44 C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-07-17 03:03 C:\Windows\system32\Drivers\rdpwd.sys
2018-01-01 03:54 C:\Windows\system32\Drivers\rdyboost.sys
2016-12-21 14:52 C:\Windows\system32\Drivers\revoflt.sys
2009-07-14 01:51 C:\Windows\system32\Drivers\rfcomm.sys
2015-11-05 11:48 C:\Windows\system32\Drivers\rmcast.sys
2012-07-04 21:45 C:\Windows\system32\Drivers\RNDISMP.sys
2018-05-06 11:26 C:\Windows\system32\Drivers\Rockey4USB.sys
2009-07-14 01:55 C:\Windows\system32\Drivers\rootmdm.sys
2009-07-14 01:53 C:\Windows\system32\Drivers\rspndr.sys
2010-11-20 11:24 C:\Windows\system32\Drivers\scfilter.sys
2010-11-20 14:30 C:\Windows\system32\Drivers\scsiport.sys
2010-11-20 10:54 C:\Windows\system32\Drivers\sdbus.sys
1997-05-30 13:01 C:\Windows\system32\Drivers\SENTINEL.SYS
2009-07-14 01:45 C:\Windows\system32\Drivers\serenum.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\serial.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\sermouse.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\sfloppy.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\sisraid2.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\sisraid4.sys
2009-07-14 01:53 C:\Windows\system32\Drivers\smb.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\smclib.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\spldr.sys
2009-07-13 22:34 C:\Windows\system32\Drivers\spsys.sys
2020-01-03 05:04 C:\Windows\system32\Drivers\srv.sys
2020-01-03 05:03 C:\Windows\system32\Drivers\srv2.sys
2020-01-03 05:03 C:\Windows\system32\Drivers\srvnet.sys
2008-01-10 20:34 C:\Windows\system32\Drivers\SSPORT.SYS
2009-07-14 03:19 C:\Windows\system32\Drivers\stexstor.sys
2014-02-04 04:07 C:\Windows\system32\Drivers\storport.sys
2010-11-20 14:30 C:\Windows\system32\Drivers\storvsc.sys
2015-04-11 05:07 C:\Windows\system32\Drivers\stream.sys
2009-07-14 01:45 C:\Windows\system32\Drivers\tape.sys
2019-07-13 10:37 C:\Windows\system32\Drivers\tcpip.sys
2016-07-07 16:57 C:\Windows\system32\Drivers\tcpipreg.sys
2010-11-20 10:39 C:\Windows\system32\Drivers\tdi.sys
2010-11-20 12:21 C:\Windows\system32\Drivers\tdpipe.sys
2012-02-17 06:13 C:\Windows\system32\Drivers\tdtcp.sys
2017-07-29 16:50 C:\Windows\system32\Drivers\tdx.sys
2019-04-19 04:55 C:\Windows\system32\Drivers\termdd.sys
2017-08-13 23:35 C:\Windows\system32\Drivers\tssecsrv.sys
2013-10-02 02:42 C:\Windows\system32\Drivers\TsUsbFlt.sys
2010-11-20 12:06 C:\Windows\system32\Drivers\tunnel.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\UAGP35.SYS
2019-02-10 18:18 C:\Windows\system32\Drivers\udfs.sys
2010-11-20 12:00 C:\Windows\system32\Drivers\umbus.sys
2009-07-14 01:51 C:\Windows\system32\Drivers\umpass.sys
2013-02-12 05:32 C:\Windows\system32\Drivers\usb8023.sys
2010-11-20 12:00 C:\Windows\system32\Drivers\USBCAMD.sys
2010-11-20 12:00 C:\Windows\system32\Drivers\USBCAMD2.sys
2018-05-02 17:30 C:\Windows\system32\Drivers\usbccgp.sys
2018-05-02 17:29 C:\Windows\system32\Drivers\usbd.sys
2018-05-02 17:30 C:\Windows\system32\Drivers\usbehci.sys
2018-05-02 17:30 C:\Windows\system32\Drivers\usbhub.sys
2018-05-02 17:30 C:\Windows\system32\Drivers\usbohci.sys
2018-05-02 17:30 C:\Windows\system32\Drivers\usbport.sys
2009-07-14 02:17 C:\Windows\system32\Drivers\usbprint.sys
2010-11-20 12:52 C:\Windows\system32\Drivers\usbrpm.sys
2016-02-03 19:59 C:\Windows\system32\Drivers\USBSTOR.SYS
2018-05-02 17:30 C:\Windows\system32\Drivers\usbuhci.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\vdrvroot.sys
2009-07-14 01:25 C:\Windows\system32\Drivers\vga.sys
2009-07-14 01:25 C:\Windows\system32\Drivers\vgapnp.sys
2020-01-03 05:02 C:\Windows\system32\Drivers\viac7.sys
2020-01-03 05:07 C:\Windows\system32\Drivers\videoprt.sys
2010-11-20 14:30 C:\Windows\system32\Drivers\vmbus.sys
2010-11-20 11:14 C:\Windows\system32\Drivers\VMBusHID.sys
2010-11-20 11:14 C:\Windows\system32\Drivers\vms3cap.sys
2010-11-20 14:30 C:\Windows\system32\Drivers\vmstorfl.sys
2019-04-19 04:54 C:\Windows\system32\Drivers\volmgr.sys
2017-07-07 17:15 C:\Windows\system32\Drivers\volmgrx.sys
2010-11-20 14:30 C:\Windows\system32\Drivers\volsnap.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\vsmraid.sys
2009-07-14 01:52 C:\Windows\system32\Drivers\vwifibus.sys
2009-07-14 01:52 C:\Windows\system32\Drivers\vwififlt.sys
2009-07-14 01:52 C:\Windows\system32\Drivers\vwifimp.sys
2009-07-14 01:46 C:\Windows\system32\Drivers\wacompen.sys
2018-12-08 04:41 C:\Windows\system32\Drivers\wanarp.sys
2009-07-14 01:24 C:\Windows\system32\Drivers\watchdog.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\wd.sys
2013-06-26 00:56 C:\Windows\system32\Drivers\Wdf01000.sys
2012-11-29 00:57 C:\Windows\system32\Drivers\WdfLdr.sys
2009-07-14 01:53 C:\Windows\system32\Drivers\wfplwf.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\wimmount.sys
2010-11-20 14:29 C:\Windows\system32\Drivers\winhv.sys
2021-05-18 23:21 C:\Windows\system32\Drivers\wintun.sys
2010-11-20 11:59 C:\Windows\system32\Drivers\winusb.sys
2018-02-10 19:36 C:\Windows\system32\Drivers\wmiacpi.sys
2009-07-14 03:19 C:\Windows\system32\Drivers\wmilib.sys
2019-08-21 01:26 C:\Windows\system32\Drivers\ws2ifsl.sys
2012-07-26 04:33 C:\Windows\system32\Drivers\WUDFPf.sys
2012-07-26 04:32 C:\Windows\system32\Drivers\WUDFRd.sys
2021-07-16 13:11 C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2021-04-18 00:39 C:\Windows\system32\Tasks\Apple Diagnostics
2021-07-22 10:29 C:\Windows\system32\Tasks\User_Feed_Synchronization-{1953C800-7761-4447-B8F2-F88855800B51}
2019-04-03 11:22 C:\ProgramData\boost_interprocess
2016-08-24 11:43 C:\ProgramData\DP45977C.lfl
2021-07-20 12:30 C:\Users\Public\Documents\AdobeGCData

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)


LastRegBack: 2021-07-06 14:16
==================== Final de FRST.txt ========================

Empieza Addition.txt

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x86) Versión: 19-07-2021 01
Ejecutado por Ernesto (22-07-2021 11:04:55)
Ejecutado desde C:\Users\Ernesto\Desktop
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) (2016-08-09 09:57:02)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================


(Si una entrada es incluida en el fixlist, será eliminada.)

Administrador (S-1-5-21-408995212-1637284617-1868651882-500 - Administrator - Disabled)
Ernesto (S-1-5-21-408995212-1637284617-1868651882-1000 - Administrator - Enabled) => C:\Users\Ernesto
HomeGroupUser$ (S-1-5-21-408995212-1637284617-1868651882-1002 - Limited - Enabled)
Invitado (S-1-5-21-408995212-1637284617-1868651882-501 - Limited - Enabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Seguridad Total PC by F-Secure (Disabled - Up to date) {EFA7F7EC-9723-5757-549F-DDC923618754}
AS: Seguridad Total PC by F-Secure (Disabled - Up to date) {54C61608-B119-58D9-6E2F-E6BB58E6CDE9}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

3DP Chip Lite v17.08 (HKLM\...\3DP Chip Lite) (Version: v17.08 - 3DP)
ACDSee 9 Administrador fotografico (HKLM\...\{4AA377FF-9D88-485F-B86E-AE631A1AA069}) (Version: 9.0.108 - ACD Systems Ltd.)
Adobe Acrobat DC (HKLM\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 21.005.20058 - Adobe Systems Incorporated)
Agere Systems HDA Modem (HKLM\...\Agere Systems Soft Modem) (Version:  - Agere Systems)
Agescol 2012 (HKLM\...\{F5BCDB2B-352A-454D-8A7C-044A96D1EFDD}) (Version: 3.0.0.0 - CCOAATCyL)
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
Apowersoft Online Launcher version 1.7.8 (HKLM\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.8 - APOWERSOFT LIMITED)
Apple Application Support (32 bits) (HKLM\...\{CCA8C50D-785B-4896-8675-FFE0C4ECCBC3}) (Version: 8.7 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{6B614A22-2583-4A71-BB51-4983E2C79C43}) (Version: 14.5.0.7 - Apple Inc.)
Apple Software Update (HKLM\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
AutoCAD 2014 - Español (Spanish) (HKLM\...\{5783F2D7-D001-0000-0002-0060B0CE6BBA}) (Version: 19.1.18.0 - Autodesk) Hidden
AutoCAD Map R2 - Español (HKLM\...\Desinstalar AutoCAD Map R2 - Español) (Version:  - )
Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.0.27.1 - Autodesk)
Autodesk App Manager (HKLM\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk)
Autodesk AutoCAD 2014 - Español (Spanish) (HKLM\...\AutoCAD 2014 - Español (Spanish)) (Version: 19.1.18.0 - Autodesk)
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk)
Autodesk Content Service Language Pack (HKLM\...\{62F029AB-85F2-0001-866A-9FC0DD99DDBC}) (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Featured Apps (HKLM\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk)
Autodesk Material Library 2014 (HKLM\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk ReCap (HKLM\...\Autodesk ReCap) (Version: 1.0.43.13 - Autodesk)
Bat To Exe Converter version 2.4.2 (HKLM\...\{60C29EC2-33E8-45EE-87E4-31FA3E35C539}_is1) (Version: 2.4.2 - Fatih Kodak)
Bonjour (HKLM\...\{D168AAD0-6686-47C1-B599-CDD4888B9D1A}) (Version: 3.1.0.1 - Apple Inc.)
BurnAware Professional 9.2 (HKLM\...\BurnAware Professional_is1) (Version:  - Burnaware)
CanoScan Toolbox Ver4.6 (HKLM\...\{088A077A-8028-408C-AE7B-4512AE2A65A0}) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.82 - Piriform)
CE3X v2.3 (HKLM\...\{7139BD7B-FC0B-435F-8E79-63D7CCDA2BA8}_is1) (Version:  - Certificacion Energetica SL)
Cisco EAP-FAST Module (HKLM\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
ClickTray Calendar (HKLM\...\ClickTray Calendar_is1) (Version:  - )
Cobian Backup 11 Gravity (HKLM\...\CobBackup11) (Version:  - )
CodeTwo QR Code Desktop Reader & Generator (HKLM\...\{AF7E31D6-980C-4788-B80C-47F1837CF44C}) (Version: 1.1.2.4 - CodeTwo)
doPDF (HKLM\...\{48261BB6-AEFC-498B-B7AF-B427D1585AC9}) (Version: 11.0.170 - Softland) Hidden
doPDF 11 (HKLM\...\{6e031aaa-fb8f-4be8-bc9b-3cc3600b9193}) (Version: 11.0.170 - Softland)
doPDF 11 add-in for Microsoft Office (x86) (HKLM\...\{19D87112-B006-44FC-9F42-CDFA0F5D4D54}) (Version: 11.0.170 - Softland)
doPDF 11 Printer Driver (HKLM\...\{E103EDA4-C145-48A8-8CCA-781DAE840119}) (Version: 11.0.170 - Softland)
Driver Magician 4.5 (HKLM\...\Driver Magician_is1) (Version:  - GoldSolution Software, Inc.)
Dropbox (HKLM\...\Dropbox) (Version: 126.4.4618 - Dropbox, Inc.)
Dropbox Update Helper (HKLM\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.485.1 - Dropbox, Inc.) Hidden
FileMenu Tools (HKLM\...\FileMenu Tools_is1) (Version: 7.3.3 - LopeSoft)
FileMenu Tools 7.8.4 (HKLM\...\FileMenuTools_is1) (Version: 7.8.4 - LopeSoft)
Freeware PDF Unlocker (HKLM\...\{010C0B4A-DC93-4BB4-893B-BDDE95355A3E}) (Version: 1.0.4 - SMTguru)
F-Secure Ultralight 1.0.5438.0 (release) (cc0c4f981bd2f23d1e5e325af11ed0a0ecf2a348) (HKLM\...\{C75644E8-5FB5-4B8F-8FD2-08CC5D7ECD87}) (Version: 1.0.5438.0 - F-Secure Corporation) Hidden
Google Chrome (HKLM\...\Google Chrome) (Version: 91.0.4472.164 - Google LLC)
Hard Disk Low Level Format Tool 4.30 (HKLM\...\Hard Disk Low Level Format Tool_is1) (Version:  - HDDGURU)
iCloud (HKLM\...\{6D234FFA-256A-4E78-8F97-C76A54D74CD9}) (Version: 7.21.0.23 - Apple Inc.)
iExplorer 3.2.5.2 (HKLM\...\{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1) (Version:  - Macroplant LLC)
Instalable DNIe (HKLM\...\{D2CE0562-13E0-4FC9-85F2-CA3D0392310E}) (Version: 14.0.1 - Cuerpo Nacional de Policía)
Java 8 Update 291 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F32180291F0}) (Version: 8.0.2910.10 - Oracle Corporation)
K-Lite Codec Pack 16.2.0 Full (HKLM\...\KLiteCodecPack_is1) (Version: 16.2.0 - KLCP)
Kodi (HKU\S-1-5-21-408995212-1637284617-1868651882-1000\...\Kodi) (Version:  - XBMC Foundation)
LSI HDA Modem (HKLM\...\LSI Soft Modem) (Version: 2.2.98 - LSI Corporation)
MakeitOne MP3 Album Maker (HKLM\...\MakeitOne MP3 Album Maker) (Version:  - )
MEGAsync (HKLM\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.8 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27012 (HKLM\...\{67f67547-9693-4937-aa13-56e296bd40f6}) (Version: 14.16.27012.6 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.60828 - Microsoft Corporation)
Mozilla Firefox (x86 es-ES) (HKLM\...\Mozilla Firefox 90.0.1 (x86 es-ES)) (Version: 90.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 90.0.1.7867 - Mozilla)
MSVC80_x86_v2 (HKLM\...\{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}) (Version: 1.0.3.0 - Nokia) Hidden
MSVC90_x86 (HKLM\...\{AF111648-99A1-453E-81DD-80DBBF6DAD0D}) (Version: 1.0.1.2 - Nokia) Hidden
MSXML 4.0 SP3 Parser (HKLM\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Paquete de controladores de Windows - Nokia pccsmcfd “LegacyDriver”  (05/31/2012 7.1.2.0) (HKLM\...\17D063A0A9F5D5A225B76B1D9BCB5ADBE85C8382) (Version: 05/31/2012 7.1.2.0 - Nokia)
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x86) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - ESN) (Version: 10.0.60828 - Microsoft Corporation)
Password Depot 4 (HKLM\...\{A748A983-311C-4D65-B570-E7764492803E}) (Version: 4.1.8 - AceBIT)
PC Connectivity Solution (HKLM\...\{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}) (Version: 12.0.109.0 - Nokia)
PDF24 Creator 9.2.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)
PDFPasswordRemover 1.5 (HKLM\...\PDFPasswordRemover_is1) (Version:  - PDFPasswordRemover)
Printfil rel. 5.12 -2- (HKLM\...\Printfil_is1) (Version: 5.12 -2- - aSwIt s.r.l.)
QTranslate 6.8.0.1 (HKLM\...\QTranslate) (Version: 6.8.0.1 - QuestSoft)
Readiris Pro 10 (HKLM\...\{B6300A7D-C1B6-4A25-861D-4AED96202FCD}) (Version:  - )
Realtek Ethernet Controller Driver (HKLM\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.101.714.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8746.1 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM\...\{B63CCD1C-A133-4DF8-8306-DA0387231152}) (Version: 1.00.0243 - )
REALTEK Wireless LAN Driver and Utility (HKLM\...\{9C049509-055C-4CFF-A116-1D12312225EB}) (Version: 1.00.0239 - REALTEK Semiconductor Corp.)
Restore Point Creator version 7.1 Build 2 (HKLM\...\{CC48DE1C-8EC2-43BC-9201-29701CD9AE13}_is1) (Version: 7.1 - Tom Parkison)
Revo Uninstaller Pro 3.2.1 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 3.2.1 - VS Revo Group, Ltd.)
Samsung ML-1640 Series (HKLM\...\Samsung ML-1640 Series) (Version:  - Samsung Electronics CO.,LTD)
Samsung Universal Print Driver 2 (HKLM\...\Samsung Universal Print Driver 2) (Version: 2.50.06.00 - Samsung Electronics Co., Ltd.)
Seguridad Total PC (HKLM\...\{8EC20E27-C2EF-4FCA-BE69-CF53B6E9F89F}) (Version: 18.0 - F-Secure Corporation)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SketchUp Import for AutoCAD 2014 (HKLM\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
SoftPerfect WiFi Guard version 1.0.6 (HKLM\...\{38AFD787-4D2E-4442-92D2-7739F5F92CF4}_is1) (Version: 1.0.6 - SoftPerfect)
Software para dispositivos de chipset Intel® (HKLM\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
Solid Converter PDF (HKLM\...\{56BFAA6E-2BCC-4AED-9233-84731E66B205}) (Version: 6.0.664.0 - SolidDocuments)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.17.6 - TeamViewer)
TimeToPhoto 2.6.4591 (HKLM\...\TimeToPhoto_is1) (Version:  - AVPSoft.com)
TuneUp Utilities 2014 (HKLM\...\TuneUp Utilities) (Version: 14.0.1000.353 - TuneUp Software)
Unchecky v1.2 (HKLM\...\Unchecky) (Version: 1.2 - Reason Software Company Inc.)
Uninstall Samsung Printer Software (HKLM\...\TotalUninstaller) (Version: 4.0.0.13 - Samsung Electronics CO., LTD.)
Visual Studio 2012 x86 Redistributables (HKLM\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WIDCOMM Bluetooth Software (HKLM\...\{A1439D4F-FD46-47F2-A1D3-FEE097C29A09}) (Version: 6.5.1.3400 - Broadcom Corporation)
Windows Driver Package - Dirección General de la Policía (UMPass) SmartCard  (10/30/2018 1.0.2.7) (HKLM\...\EC0850ACBB539AD49EB5503A072981871981EB01) (Version: 10/30/2018 1.0.2.7 - Dirección General de la Policía)
WinRAR 5.71 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-408995212-1637284617-1868651882-1000_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-408995212-1637284617-1868651882-1000_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-408995212-1637284617-1868651882-1000_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-408995212-1637284617-1868651882-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\es-ES\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [4171480 2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Ernesto\AppData\Local\MEGAsync\ShellExtX32.dll [2020-12-06] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Ernesto\AppData\Local\MEGAsync\ShellExtX32.dll [2020-12-06] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Ernesto\AppData\Local\MEGAsync\ShellExtX32.dll [2020-12-06] (Mega Limited -> )
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [F-Secure DataGuard Icon Overlay] -> {CA789262-D278-40F7-AC12-19C0395F9DD9} => C:\Program Files\Seguridad Total PC\FsShellExtension32.dll [2021-05-19] (F-Secure Corporation -> F-Secure Corporation)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2013-02-08] (Autodesk, Inc -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ernesto\AppData\Local\MEGAsync\ShellExtX32.dll [2020-12-06] (Mega Limited -> )
ContextMenuHandlers1: [PeContextMenuExtension] -> {098A124A-AA1C-38C8-A65E-D1199A14516A} => C:\Program Files\Common Files\Wondershare\PDFelement\AddIns\PEShellExt_x86.dll [2020-04-29] (Wondershare Technology Co.,Ltd -> Wondershare)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams.dll [2020-09-08] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [TuneUp Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files\TuneUp Utilities 2014\SDShelEx-win32.dll [2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [FileMenuTools] -> {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} => C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools.dll [2021-03-15] (LopeSoft) [Archivo no firmado]
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ernesto\AppData\Local\MEGAsync\ShellExtX32.dll [2020-12-06] (Mega Limited -> )
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [FileMenuTools] -> {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} => C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools.dll [2021-03-15] (LopeSoft) [Archivo no firmado]
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Ernesto\AppData\Local\MEGAsync\ShellExtX32.dll [2020-12-06] (Mega Limited -> )
ContextMenuHandlers4: [TuneUp Disk Space Explorer Shell Extension] -> {4838CD50-7E5D-4811-9B17-C47A85539F28} => C:\Program Files\TuneUp Utilities 2014\DseShExt-x86.dll [2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
ContextMenuHandlers4: [TuneUp Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files\TuneUp Utilities 2014\SDShelEx-win32.dll [2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files\Dropbox\Client\DropboxExt.48.0.dll [2021-05-11] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [FileMenuTools] -> {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} => C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools.dll [2021-03-15] (LopeSoft) [Archivo no firmado]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [FileMenuTools] -> {C1B2C38F-3DCA-4E3D-BC34-D5B87B636543} => C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools.dll [2021-03-15] (LopeSoft) [Archivo no firmado]
ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2012-12-29] (VS Revo Group -> VS Revo Group)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Drivers32: [SENTINEL] => C:\Windows\SYSTEM32\snti386.dll [38400 1997-05-30] () [Archivo no firmado]
HKLM\...\Drivers32: [VIDC.ACDV] => C:\Windows\SYSTEM32\ACDV.dll [462848 2005-06-20] (ACD Systems) [Archivo no firmado]
HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SYSTEM32\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [Archivo no firmado]

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

Shortcut: C:\Users\Ernesto\Desktop\Reset-COMO ADMINISTRADOR\Reset-COMO ADMINISTRADOR.bat - Acceso directo (2).lnk -> C:\Users\Ernesto\Desktop\Reset-COMO ADMINISTRADOR\Reset-COMO ADMINISTRADOR.bat ()

==================== Módulos cargados (Lista blanca) =============

2021-04-21 04:20 - 2021-04-21 04:20 - 000010240 _____ () [Archivo no firmado] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\es_es\AcroTray.esp
2021-05-28 07:59 - 2021-05-28 07:59 - 000242176 _____ () [Archivo no firmado] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\es_ES\Adobe Send\SendAsLinkX.ESP
2021-04-21 04:20 - 2021-04-21 04:20 - 003474944 _____ () [Archivo no firmado] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\es_ES\PDFMaker\AdobePDFMakerX.ESP
2021-04-21 04:20 - 2021-04-21 04:20 - 000048128 _____ () [Archivo no firmado] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\es_es\PDFMaker\PDFMOutlookAddin.ESP
2019-12-07 14:58 - 2008-01-11 07:17 - 000022723 _____ () [Archivo no firmado] C:\Windows\System32\ssp2ml3.dll
2016-08-13 11:08 - 2014-04-16 10:22 - 000025600 _____ () [Archivo no firmado] C:\Windows\System32\usp02l.dll
2021-04-21 04:20 - 2021-04-21 04:20 - 000021504 _____ (Adobe Systems Inc.) [Archivo no firmado] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\es_es\Acrobat Elements\ContextMenuShim.esp
2021-04-21 04:20 - 2021-04-21 04:20 - 000055296 _____ (Adobe Systems Incorporated) [Archivo no firmado] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\es_es\Adobe Send\SendAsLinkAddin.ESP
2016-08-11 09:07 - 2007-09-27 11:52 - 000059392 _____ (Lexmark International Inc.) [Archivo no firmado] C:\Windows\system32\spool\PRTPROCS\W32X86\LMABDC4C.DLL
2021-03-16 13:52 - 2021-03-15 13:26 - 008784384 _____ (LopeSoft) [Archivo no firmado] C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools.dll
2018-03-21 10:56 - 2012-12-05 23:11 - 000009728 _____ (Luis Cobian) [Archivo no firmado] [El archivo está en uso] C:\Program Files\Cobian Backup 11\CobStringList.dll
2018-03-21 10:56 - 2012-12-06 00:08 - 002684928 _____ (Luis Cobian, CobianSoft) [Archivo no firmado] C:\Program Files\Cobian Backup 11\cbEngine.dll
2011-09-13 02:06 - 2011-09-13 02:06 - 000592616 _____ (Microsoft Corporation (Internal Use Only) -> Microsoft Corporation) [Archivo no firmado] C:\Program Files\Common Files\Microsoft Shared\PROOF\MSLID.DLL
2021-06-23 13:19 - 2021-06-23 13:19 - 000016384 _____ (Softland) [Archivo no firmado] C:\Windows\System32\novamn11.dll
2020-05-13 23:14 - 2015-09-09 10:41 - 000865792 _____ (Windows (R) 2000 DDK provider) [Archivo no firmado] C:\Windows\system32\spool\DRIVERS\W32X86\3\us003.dll
2019-12-07 15:00 - 2008-01-11 07:16 - 000019968 _____ (Windows (R) 2000 DDK provider) [Archivo no firmado] C:\Windows\system32\spool\PRTPROCS\W32X86\ssp2mpc.dll
2020-05-13 23:15 - 2015-03-12 04:43 - 000029696 _____ (Windows (R) Codename Longhorn DDK provider) [Archivo no firmado] C:\Windows\system32\spool\PRTPROCS\W32X86\us003pc.dll
2016-08-13 11:14 - 2014-02-24 08:33 - 000029696 _____ (Windows (R) Codename Longhorn DDK provider) [Archivo no firmado] C:\Windows\system32\spool\PRTPROCS\W32X86\usp02pc.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ntrexeservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== Asociación (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado.)

HKU\S-1-5-21-408995212-1637284617-1868651882-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer (Versión 11) (Lista blanca) ==========

HKU\S-1-5-21-408995212-1637284617-1868651882-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.alaup.com/
SearchScopes: HKU\S-1-5-21-408995212-1637284617-1868651882-1000 -> DefaultScope {B1A46A86-3DA3-45CF-81CE-3A3F2B26A0CA} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
SearchScopes: HKU\S-1-5-21-408995212-1637284617-1868651882-1000 -> {B1A46A86-3DA3-45CF-81CE-3A3F2B26A0CA} URL = hxxps://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
BHO: Browsing Protection by F-Secure -> {45BBE08D-81C5-4A67-AF20-B2A077C67747} -> C:\Program Files\Seguridad Total PC\Ultralight\http\1626348810\browser\fs_ie_https\fs_ie_https.dll [2021-07-15] (F-Secure Corporation -> F-Secure Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_291\bin\ssv.dll [2021-05-20] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-04-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_291\bin\jp2ssv.dll [2021-05-20] (Oracle America, Inc. -> Oracle Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-04-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-04-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-408995212-1637284617-1868651882-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2021-04-21] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2021-04-30 13:18 - 2021-06-29 13:45 - 000011866 ____R C:\Windows\system32\drivers\etc\hosts
127.0.0.1 209.34.83.73:443
127.0.0.1 209.34.83.73:43
127.0.0.1 209.34.83.73
127.0.0.1 209.34.83.67:443
127.0.0.1 209.34.83.67:43
127.0.0.1 209.34.83.67
127.0.0.1 ood.opsource.net
127.0.0.1 199.7.52.190:80
127.0.0.1 199.7.52.190
127.0.0.1 OCSP.SPO1.VERISIGN.COM
127.0.0.1 199.7.54.72:80
127.0.0.1 199.7.54.72
127.0.0.1 192.150.14.69
127.0.0.1 192.150.18.101
127.0.0.1 192.150.18.108
127.0.0.1 192.150.22.40
127.0.0.1 192.150.8.100
127.0.0.1 192.150.8.118
127.0.0.1 209-34-83-73.ood.opsource.net
127.0.0.1 3dns-1.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-4.adobe.com
127.0.0.1 3dns.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 activate-sjc0.adobe.com

Hay 301 más lineas.


==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;C:\PROGRAM FILES\PC CONNECTIVITY SOLUTION\;C:\PROGRAMDATA\ORACLE\JAVA\JAVAPATH;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;%SYSTEMROOT%\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\Program Files\WIDCOMM\Bluetooth Software\
HKU\S-1-5-21-408995212-1637284617-1868651882-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ernesto\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall de Windows está habilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

MSCONFIG\startupfolder: C:^Users^Ernesto^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup
MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"                                                                                                                                                                                           
MSCONFIG\startupreg: iCloudDrive => C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe                                                                                                                                                                                                    
MSCONFIG\startupreg: iCloudPhotos => C:\Program Files\Common Files\Apple\Internet Services\iCloudPhotos.exe                                                                                                                                                                                                   
MSCONFIG\startupreg: iCloudServices => C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe                                                                                                                                                                                                 
MSCONFIG\startupreg: SUPERAntiSpyware => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe                                                                                                                                                                                        

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{41BD49F1-71AE-48C2-A023-161F51FF99F9}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{90AAF8D7-F47D-4512-860C-FF8B7533DA9E}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{C5CC12E5-94EA-4A37-8E8E-5D0DF41480B4}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E27CAC0F-2A97-4BD5-8058-3E8C90C9F245}] => (Allow) C:\Program Files\Samsung\Samsung Universal Print Driver 2\PrinterSelector\SUPDApp.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [TCP Query User{09658D99-A1F8-49EB-BFF9-3E84696B18DB}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B52B5D71-78BD-44CF-B23E-8C57A15C87BD}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F9411116-BED5-426E-9654-0FC29879C5CA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{96905DDF-A42B-4EF1-BFFC-1FB51F4E90FA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{29964283-3D14-4464-9DD7-652299C01AC7}] => (Allow) C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{78D15995-7D21-41C3-A00A-B8771D1506B0}] => (Allow) C:\scantransferhost\core\apache2\bin\httpd_z.exe (Xi'an Pantuowangluokeji co, ltd. -> Apache Software Foundation)
FirewallRules: [TCP Query User{7105E5D9-C419-4FF0-A2A5-28F30C72F386}C:\program files\cobian backup 11\cbremotemanager.exe] => (Block) C:\program files\cobian backup 11\cbremotemanager.exe (Luis Cobian, CobianSoft) [Archivo no firmado]
FirewallRules: [UDP Query User{4F61E24F-B019-40F4-A0DB-DA1C82A8DB11}C:\program files\cobian backup 11\cbremotemanager.exe] => (Block) C:\program files\cobian backup 11\cbremotemanager.exe (Luis Cobian, CobianSoft) [Archivo no firmado]
FirewallRules: [{0D13AD64-204B-456B-9C47-8C8D810C9DD5}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{F55B36C5-4C34-4751-99AE-32D073575AB8}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{E14DB36A-20F0-4087-901F-D709AFCCC1C1}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{04884AD7-C6B2-465F-961A-982A7A0A1ACC}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform)
FirewallRules: [{0A517C65-4115-4F7B-A387-9F10D3B252E3}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.) [Archivo no firmado]
FirewallRules: [{264D8EBE-482B-40C2-BAF5-75A4FA9A7AF5}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{119E09B2-9657-455D-A916-1DF777191F06}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{F542A657-A837-427F-954B-A29C7D0B4583}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{5F7609D7-0D8D-4470-AFA3-1FDC0320408C}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{3F1A5437-B6D2-41B4-A27B-40096C1CEED6}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{C6674BA9-9B73-4BF9-B9C5-C228DC24597A}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{D8770122-9703-4184-9165-DEF58D6819F6}] => (Allow) C:\Program Files\Realtek\USB Wireless LAN Utility\RTLDHCP.exe (Realtek Semiconductor Corp -> Realtek)
FirewallRules: [{B5402E86-C6A6-4244-958E-C1F1537DE49E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{499F9A8E-B4BF-4EE2-BEC2-1999B403F69D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{878ED684-2700-4688-A4E9-60AB23391A0E}] => (Allow) C:\Users\Ernesto\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{F63114FD-FE1B-47E1-AD10-1AED4B0AC5BF}] => (Allow) C:\Users\Ernesto\AppData\Local\Apowersoft\Apowersoft Online Launcher\Apowersoft Online Launcher.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [TCP Query User{F301243C-8BE4-469A-96B7-3DAC028C073B}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{766CAD62-7B0D-4D87-9436-C3B981202422}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{4142E030-B572-4E9F-A263-27F40899599A}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe] => (Allow) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{9526BDAC-95D1-4EF6-B51D-CF47CF969ADF}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe] => (Allow) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{5864E33E-ED6C-467C-A1B0-2782978912B9}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [Archivo no firmado]
FirewallRules: [UDP Query User{5C46D37F-65C0-4B79-89C9-84A0FC4C142D}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe (XBMC Foundation) [Archivo no firmado]
FirewallRules: [TCP Query User{308E3991-8AD2-4816-933E-E9E50EC63CFA}C:\users\ernesto\appdata\roaming\kodi\addons\plugin.video.xbmctorrent\resources\bin\windows_x86\torrent2http.exe] => (Block) C:\users\ernesto\appdata\roaming\kodi\addons\plugin.video.xbmctorrent\resources\bin\windows_x86\torrent2http.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{74E01BDC-31C0-44CB-9364-F1FC0EED765D}C:\users\ernesto\appdata\roaming\kodi\addons\plugin.video.xbmctorrent\resources\bin\windows_x86\torrent2http.exe] => (Block) C:\users\ernesto\appdata\roaming\kodi\addons\plugin.video.xbmctorrent\resources\bin\windows_x86\torrent2http.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{E97EE426-441E-4A7C-B7CB-4D37C60D702C}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe] => (Block) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{D56C8C83-6B53-437A-882F-08F03519386A}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe] => (Block) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.quasar\bin\windows_x86\quasar.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{F6254FC8-9E00-4EAA-8C9E-D60D78E583FF}C:\program files\teamviewer\teamviewer.exe] => (Block) C:\program files\teamviewer\teamviewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [UDP Query User{9FD562FF-4C84-4592-A74F-62117C65AEDE}C:\program files\teamviewer\teamviewer.exe] => (Block) C:\program files\teamviewer\teamviewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E2D53098-4991-41DE-90B5-6D9D5F728BD0}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{630ABF29-A4C9-4A89-A512-5900B8234BB4}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9E58562C-9E7F-45D8-A241-D2036ED2ACFB}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{840AA3AF-639A-4630-BE61-1D33FCD8CA31}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{289481BD-9757-4E99-9143-D9961622D19F}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe] => (Allow) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{3B6DAE21-AE4C-41AC-AD92-8ABC0C9F5184}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe] => (Allow) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{A1738BD2-55FA-417E-9CDD-E330159C4695}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe] => (Block) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{A0429D6C-80F1-4AF8-A621-D910659E8F29}C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe] => (Block) C:\users\ernesto\appdata\roaming\kodi\userdata\addon_data\plugin.video.torrest\bin\torrest.exe () [Archivo no firmado]
FirewallRules: [{7E3622D6-A712-4E40-B7D6-820182944794}] => (Allow) C:\Program Files\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{ED0EA873-2EAA-4E6E-868D-CE28BFEECF46}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Puntos de Restauración =========================

15-07-2021 01:25:19 LIMPIEZA TODO CORRECTO
18-07-2021 12:30:07 Restore Point Created by FRST
19-07-2021 14:03:03 Revo Uninstaller Pro's restore point - Telegram Desktop version 2.7.1
20-07-2021 10:49:42 Revo Uninstaller Pro's restore point - KinoniDrivers 2.9.4
20-07-2021 12:57:59 Piriform Driver Updater - Update 6.0.8746.1
22-07-2021 10:45:20 Windows Update

==================== Dispositivos defectuosos en el Administrador de dispositivos ============

Name: WireGuard Tunnel
Description: WireGuard Tunnel
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: WireGuard LLC
Service: wintun
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (07/22/2021 10:24:54 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: FreemakeUtilsService.exe, versión: 1.0.0.0, marca de tiempo: 0x5d24515f
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.1.7601.24545, marca de tiempo: 0x5e0eb7d0
Código de excepción: 0xe0434352
Desplazamiento de errores: 0x0000845d
Id. del proceso con errores: 0xb2c
Hora de inicio de la aplicación con errores: 0x01d77ed2fe4da69f
Ruta de acceso de la aplicación con errores: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Ruta de acceso del módulo con errores: C:\Windows\system32\KERNELBASE.dll
Id. del informe: 4a8a1ae8-eac6-11eb-9138-0003254641d2

Error: (07/22/2021 10:24:37 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: FreemakeUtilsService.exe
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: System.IO.FileNotFoundException
   en FreemakeUtilsService.Program.Main(System.String[])

Error: (07/21/2021 11:43:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: WSCommCntr4.exe, versión: 4.0.3.0, marca de tiempo: 0x50dcb4e7
Nombre del módulo con errores: WSCommCntr4.exe, versión: 4.0.3.0, marca de tiempo: 0x50dcb4e7
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x00013ce2
Id. del proceso con errores: 0x2180
Hora de inicio de la aplicación con errores: 0x01d77e13ea15353f
Ruta de acceso de la aplicación con errores: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
Ruta de acceso del módulo con errores: C:\Program Files\Common Files\Autodesk Shared\WSCommCntr4\lib\WSCommCntr4.exe
Id. del informe: 14eb1f85-ea08-11eb-855b-0003254641d2

Error: (07/21/2021 10:56:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: FreemakeUtilsService.exe, versión: 1.0.0.0, marca de tiempo: 0x5d24515f
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.1.7601.24545, marca de tiempo: 0x5e0eb7d0
Código de excepción: 0xe0434352
Desplazamiento de errores: 0x0000845d
Id. del proceso con errores: 0xa7c
Hora de inicio de la aplicación con errores: 0x01d77e0e38b025cb
Ruta de acceso de la aplicación con errores: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Ruta de acceso del módulo con errores: C:\Windows\system32\KERNELBASE.dll
Id. del informe: 87f48b06-ea01-11eb-855b-0003254641d2

Error: (07/21/2021 10:56:05 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: FreemakeUtilsService.exe
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: System.IO.FileNotFoundException
   en FreemakeUtilsService.Program.Main(System.String[])

Error: (07/20/2021 02:05:31 PM) (Source: .NET Runtime Optimization Service) (EventID: 1103) (User: )
Description: .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Tried to start a service that wasn't the latest version of CLR Optimization service. Will shutdown

Error: (07/20/2021 02:04:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: FreemakeUtilsService.exe, versión: 1.0.0.0, marca de tiempo: 0x5d24515f
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.1.7601.24545, marca de tiempo: 0x5e0eb7d0
Código de excepción: 0xe0434352
Desplazamiento de errores: 0x0000845d
Id. del proceso con errores: 0x9e8
Hora de inicio de la aplicación con errores: 0x01d77d5f4011c12e
Ruta de acceso de la aplicación con errores: C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Ruta de acceso del módulo con errores: C:\Windows\system32\KERNELBASE.dll
Id. del informe: 90f8da31-e952-11eb-a34b-0003254641d2

Error: (07/20/2021 02:03:37 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: FreemakeUtilsService.exe
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: System.IO.FileNotFoundException
   en FreemakeUtilsService.Program.Main(System.String[])


Errores del sistema:
=============
Error: (07/22/2021 11:02:19 AM) (Source: Disk) (EventID: 11) (User: )
Description: El controlador detectó un error de controladora en \Device\Harddisk2\DR2.

Error: (07/22/2021 10:39:36 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: El servidor {005A3A96-BAC4-4B0A-94EA-C0CE100EA736} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (07/22/2021 10:24:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Freemake Improver no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (07/22/2021 10:24:57 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (60000 ms) para la conexión con el servicio Freemake Improver.

Error: (07/22/2021 10:24:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio DgiVecp no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar el dispositivo especificado.

Error: (07/22/2021 10:24:21 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Sentinel depende del servicio Parallel port driver, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio, porque está deshabilitado o porque no tiene dispositivos habilitados asociados a él.

Error: (07/21/2021 12:46:51 PM) (Source: Ntfs) (EventID: 137) (User: )
Description: El administrador de recursos de transacción en el volumen G: detectó un error irreproducible y no se pudo iniciar. Los datos contienen el código de error.

Error: (07/21/2021 12:46:51 PM) (Source: volsnap) (EventID: 16) (User: )
Description: Se anularon las instantáneas del volumen G: porque el volumen G:, que contiene un archivo de almacenamiento de instantáneas para esta instantánea, fue desmontado forzadamente.


Windows Defender:
================
Date: 2021-07-21 14:09:09.122
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{267FFD11-C1C7-4EC6-97A4-9AB3ADBAA104}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:Ernesto-Ahtec\Ernesto

Date: 2021-06-17 11:00:38.966
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{3573986D-18EE-43E8-821F-4B6A06D13FDF}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:NT AUTHORITY\Servicio de red

Date: 2021-06-25 16:49:35.046
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Copia de seguridad
Código de error:0x80070005
Descripción de error:Acceso denegado. 
Versión de firma:1.341.1023.0
Versión de motor:1.1.18200.4

Date: 2021-06-25 16:49:04.339
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Actual
Código de error:0x80070005
Descripción de error:Acceso denegado. 
Versión de firma:1.341.1224.0
Versión de motor:1.1.18200.4

Date: 2021-06-05 12:43:41.727
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Actual
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 
Versión de firma:0.0.0.0
Versión de motor:0.0.0.0

Date: 2021-06-05 12:43:39.214
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma:
Versión de firma anterior:
Origen de actualización:Carpeta de actualizaciones de firmas
Tipo de firma:AntiSpyware
Tipo de actualización:Diferencia
Usuario:NT AUTHORITY\SYSTEM
Versión de motor actual:1.1.18000.5
Versión de motor anterior:
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 

Date: 2021-06-05 12:43:39.214
Description: 
Windows Defender encontró un error al intentar actualizar el motor.
Nueva versión de motor:1.1.18000.5
Versión de motor anterior:
Origen de actualización:Carpeta de actualizaciones de firmas
Usuario:NT AUTHORITY\SYSTEM
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 

==================== Información de la memoria =========================== 

BIOS: Generic 8PT0D 06/11/2008
Placa base: Generic Products
Procesador: Intel(R) Pentium(R) Dual CPU T2330 @ 1.60GHz
Porcentaje de memoria en uso: 86%
RAM física total: 3070.43 MB
RAM física disponible: 413.21 MB
Virtual total: 6139.23 MB
Virtual disponible: 2009.41 MB

==================== Unidades ================================

Drive c: () (Fixed) (Total:91.56 GB) (Free:13 GB) NTFS ==>[unidad con componentes de arranque (obtenido de BCD)]
Drive d: (DATOS) (Fixed) (Total:141.29 GB) (Free:45 GB) NTFS
Drive e: (40 MB) (Fixed) (Total:0.04 GB) (Free:0.01 GB) FAT
Drive g: (TOSHIBA) (Fixed) (Total:1863.01 GB) (Free:509.37 GB) NTFS


==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: E7435579)
Partition 1: (Active) - (Size=91.6 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=141.3 GB) - (Type=0F Extended)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: AAFA8D5C)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== Final  Addition.txt =======================

Muchas gracias.

Ernesto

Creo que te he mandado todo. Si ves algo que no te concuerde quiza me haya despistado y no te haya mandado o haya duplicado algo. Dímelo y te lo vuelvo a enviar

Un saludo de nuevo @JEVEMO

Tenemos que hacer dos cosas. La primera, es un nuevo script de FRST y, la segunda, una pasada de TDSSKiller.

1.- FRST

1.- Abre un bloc de notas, copia y pega este script:

Start
SystemRestore: On
CreateRestorePoint:
CloseProcesses:

Policies: C:\ProgramData\NTUSER.pol: Restricción <==== ATENCIÓN	
Policies: C:\Users\Ernesto\NTUSER.pol: Restricción <==== ATENCIÓN
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo 
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo 
2021-07-22 10:29 - 2020-06-01 22:01 - 000000000 ____D C:\Users\Ernesto\AppData\Local\F2EBF1ED-E803-45A3-A952-E48788DA658B.aplzod
2020-05-18 13:59 - 2020-05-18 14:43 - 000000716 ____H () C:\Users\Ernesto\AppData\Roaming\{FC8D7619-D302-BD53-4ABB-8EE5A1ECDA75}
2021-05-31 10:59 - 2021-05-31 10:59 - 000000000 ____H () C:\Users\Ernesto\AppData\Local\BIT8ECC.tmp
2021-05-31 10:59 - 2021-05-31 10:59 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\{2EF24744-DE29-4005-9D1E-5903DA2DBC6D}
2020-05-01 20:10 - 2020-05-01 20:10 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\{8E1E5D4A-8103-42CC-B49F-E7A5EA872940}
File: C:\Windows\Installer\MSIA4CB.tmp

CMD: netsh winsock reset
CMD: netsh int ip reset all
CMD: ipconfig /flushdns
CMD: ipconfig /renew
EmptyTemp:
End
  • Ve a Archivo y selecciona Guardar Como.
  • En la parte de Códificación elige Unicode o UTF8 según le de la opción.
  • Guardalo bajo el nombre de fixlist.txt en el escritorio al igual que FRST. Esto es muy importante.

Igualmente, FRST.EXE debe seguir estando ubicado en el escritorio. IMPORTANTE.

:warning: El anterior Script de reparación es personalizado para la máquina en concreto para la cual se fabricó y está hecho específicamente por un miembro del Staff. Si se tiene un problema parecido, por favor abra su propio tema para recibir ayuda personalizada y específica. Utilizar Scripts de otros Sistemas puede causar daños graves en su ordenador.

Ahora, sigue estos pasos:

1.- Ejecutas de nuevo FRST.EXE (click derecho → ejecutar como administrador).

2.- Haz clic en Fix/Corregir. OJO: No hagas nada con el PC, ni trates de apagarlo aunque aparente quedarse colgado. Simplemente espera a que termine.

3.- Una vez terminado, en tu escritorio aparecerá fixlog.txt.

4.- Reinicia el PC.

5.- Próxima respuesta: contenido del fichero fixlog.txt. No es necesario dividirlo tanto, acércalo todo lo posible al máximo que el foro te permita (ponlo entero en un mensaje y, si te dijese que es demasiado largo, le quitas un poco y lo llevas a otro mensaje).

2.- TDSSKiller

Haz un análisis con el programa y tráeme el reporte en la siguiente respuesta. Las instrucciones de descarga y ejecución están en su manual: Manual de TDSSKiller

Si detecta algo, envíalo a cuarentena. Cuando llegues aquí:

Marca TODAS las casillas.

Saludos.

1 me gusta

Buenos dias Pablo: he seguido tus instrucciones y te envío el fixlog.txt del FRST.

Resultados de la corrección de Farbar Recovery Scan Tool (x86) Versión: 19-07-2021 01
Ejecutado por Ernesto (24-07-2021 11:00:42) Run:2
Ejecutado desde C:\Users\Ernesto\Desktop
Perfiles cargados: Ernesto
Modo de Inicio: Normal

==============================================

fixlist contenido:
*****************

CreateRestorePoint:

CloseProcesses:



Policies: C:\ProgramData\NTUSER.pol: Restricción <==== ATENCIÓN	

Policies: C:\Users\Ernesto\NTUSER.pol: Restricción <==== ATENCIÓN

Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo 

Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo 

2021-07-22 10:29 - 2020-06-01 22:01 - 000000000 ____D C:\Users\Ernesto\AppData\Local\F2EBF1ED-E803-45A3-A952-E48788DA658B.aplzod

2020-05-18 13:59 - 2020-05-18 14:43 - 000000716 ____H () C:\Users\Ernesto\AppData\Roaming\{FC8D7619-D302-BD53-4ABB-8EE5A1ECDA75}

2021-05-31 10:59 - 2021-05-31 10:59 - 000000000 ____H () C:\Users\Ernesto\AppData\Local\BIT8ECC.tmp

2021-05-31 10:59 - 2021-05-31 10:59 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\{2EF24744-DE29-4005-9D1E-5903DA2DBC6D}

2020-05-01 20:10 - 2020-05-01 20:10 - 000000000 _____ () C:\Users\Ernesto\AppData\Local\{8E1E5D4A-8103-42CC-B49F-E7A5EA872940}

File: C:\Windows\Installer\MSIA4CB.tmp



CMD: netsh winsock reset

CMD: netsh int ip reset all

CMD: ipconfig /flushdns

CMD: ipconfig /renew

EmptyTemp:

End

*****************

El punto de restauración fue creado correctamente.
Procesos cerrados correctamente.
C:\ProgramData\NTUSER.pol => movido correctamente
C:\Users\Ernesto\NTUSER.pol => movido correctamente
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000008 => eliminado correctamente
HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000009 => eliminado correctamente
C:\Users\Ernesto\AppData\Local\F2EBF1ED-E803-45A3-A952-E48788DA658B.aplzod => movido correctamente
C:\Users\Ernesto\AppData\Roaming\{FC8D7619-D302-BD53-4ABB-8EE5A1ECDA75} => movido correctamente
C:\Users\Ernesto\AppData\Local\BIT8ECC.tmp => movido correctamente
C:\Users\Ernesto\AppData\Local\{2EF24744-DE29-4005-9D1E-5903DA2DBC6D} => movido correctamente
C:\Users\Ernesto\AppData\Local\{8E1E5D4A-8103-42CC-B49F-E7A5EA872940} => movido correctamente

========================= File: C:\Windows\Installer\MSIA4CB.tmp ========================

C:\Windows\Installer\MSIA4CB.tmp
El archivo está firmado digitalmente
MD5: B9C8872B3C1CBD61A3B5D05B1F8E9E67
Fecha de creación y modificación: 2016-08-12 11:21 - 2016-08-12 11:21
Tamaño: 000189696
Atributos: ----A
Nombre de la compañía: Solid Documents -> Solid Documents, LLC
Interno Nombre: Solid Spool Service
Original Nombre: Solid Spool Service
Producto: Solid Converter PDF
Descripción: Solid Spool Service
Archivo Versión: 6.0.664.0
Producto Versión: 6.0.664.0
Copyright: Copyright (C) 2000-2009 Solid Documents, LLC
VirusTotal: https://www.virustotal.com/gui/file/2e55f80b0231401cac2788f56be8023532a6c89b25f4350e921a82c4f1137d42/detection/f-2e55f80b0231401cac2788f56be8023532a6c89b25f4350e921a82c4f1137d42-1578557531

====== Final de File: ======


========= netsh winsock reset =========

La funci¢n de inicializaci¢n InitHelperDll en NSHHTTP.DLL no pudo iniciar, c¢digo de error
11003

El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= Final de CMD: =========


========= netsh int ip reset all =========

La funci¢n de inicializaci¢n InitHelperDll en NSHHTTP.DLL no pudo iniciar, c¢digo de error
11003
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= Final de CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local mientras los medios
est‚n desconectados.

Adaptador de Ethernet Conexi¢n de  rea local:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de LAN inal mbrica Conexi¢n de red inal mbrica:

   Sufijo DNS espec¡fico para la conexi¢n. . : lan
   V¡nculo: direcci¢n IPv6 local. . . : fe80::783d:a1a2:82d1:5de5%10
   Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.1.133
   M scara de subred . . . . . . . . . . . . : 0.0.0.0
   Puerta de enlace predeterminada . . . . . : 192.168.1.1

Adaptador de t£nel isatap.lan:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : lan

========= Final de CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 6822408 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 230066828 B
Edge => 0 B
Chrome => 0 B
Firefox => 28663542 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
LocalService => 128 B
NetworkService => 768 B
Ernesto => 3319160 B

RecycleBin => 0 B
EmptyTemp: => 264.4 MB datos temporales Eliminados.

================================


El sistema necesita reiniciarse.

==== Final de Fixlog 11:03:34 ====

Despues he ejecutado el TDSSKILLER tal y como me has señalado, marcando todas las casillas. El resultado es que no ha encontrado nada. Te envío pantallazo. TDSSKILLER

Si quieres te envio tambien el Report aunque creo que no lo necesites al no haber encontrado nada.

Por otra parte, me ha llegado una ayuda por parte de Wildfox507, que le agradezco mucho, en el que me dice lo siguiente: " Buenas tardes ,siguiendo el hilo de este tema, sobre M W B s, veo que ya tenias instalado previamente el programa crackeado. El instalador no te dejara instalarlo , ya que en el registro aparece información referente sobre instalaciones previas. Entra en el registro del sistema . en la barra de búsqueda de inicio, escribe Regedit. ejecutas como administrador. te aparece un menu con todos los registros. selecciona Edicion,en el submenu Buscar escribe el nombre de malwarebytes. le das buscar o F3. Te aparecerá una linea de registro sombreada, eliminas ese registro. le vuelves a dar F3,y aparecerá otro registro , lo borras y así sucesivamente , hasta que te te salga el mensaje de búsqueda finalizada. Y listo ya puedes instalar , nuevamente Malwarebites. Recuerda tienes que borrar todos las líneas de registro que te aparezcan con el nombre de la aplicación".

Como tu estás interviniendo, no quiero hacer nada sin que tu me des permiso porque no se si obstaculizaria lo que estamos siguiendo, por lo que si me dices que siga esas instrucciones, las seguiré y si me dices que de momento no, no haré nada.

POR OTRA PARTE, HE INTENTADO INSTALAR TAL Y COMO ME DECIAS, Y ME SIGUE DANDO EL MISMO ERROR.

Gracias por todo

Saludos de nuevo.

Vamos a seguir intentando solucionar el problema.

MBAR

Vamos a pasar el programa Malwarebytes Anti-Rootkit. Desactivando previamente tu antivirus, pasa el programa tal y como se indica en el Manual Malwarebytes Anti-Rootkit Beta, y tráeme el informe en la siguiente respuesta. Cuando termine, limpia todo lo detectado y reinicias. Hecho eso, prueba a instalar malwarebytes a ver si ya puedes.

Modo seguro

Si no puedes instalar Malwarebytes después de pasar MBAR, arranca en modo seguro con funciones de red y trata de hacer la instalación desde ahí. Si no sabes arrancar en este modo, sigue las instrucciones de Microsoft:

https://support.microsoft.com/es-es/windows/iniciar-el-pc-en-modo-seguro-en-windows-10-92c27cff-db89-8644-1ce4-b3e5e56fe234

Me cuentas el resultado.

Un saludo.

PD: Por motivos personales, no estaré disponible unos días, así que puede que mis próximas respuestas se retrasen un poco. Disculpa las molestias.

PD 2: La respuesta de Wildfox507 ya fue eliminada. Es una BURRADA tratar así el registro, nada aconsejable.

1 me gusta

Buenos dias Pablo: he descargado el programa Malwarebytes Anti-Rootkit que me dices (mbar-1.10.3.1001.exe), y después de desactivar el antivirus lo he ejecutado como Administrador, pero no me deja .

Te pongo el proceso que sigue cuando ejecuto, como administrador, desde el escritorio: 1

Crea en el escritorio la carpeta “mbar” y sigue Terminado de actualizar pulso Next. A partir de aquí no escanea y sigue el siguiente proceso: 8 Le doy Si 9 Le doy Si 10 Le doy Aceptar Aunque no le de aceptar pasa a la siguiente pantalla 12 Da igual que dé a YES-NO-O NO HAGA NADA; se reinicia solo y va las siguientes pantallas. Carga archivos Siguiente Aceptar 16 Sin marcar ninguna opción, tal y como se ve en pantalla doy a reiniciar

Se reinicia y no hace nada más y ya trabaja normalmente como cuando se enciende el ordenador.

Muchas gracias y felices vacaciones. Lo reanudaremos cuando vuelvas.

Pablo, no se si te habrá llegado algo de lo que he intentado mandarte, pero no se como hacerlo. ¿hay alguna forma de adjuntar un archivo en formato DOCS que contenga texto e imágenes con lo que quiero explicarte?

Hola @JEVEMO y con el permiso de @Pablo. Viendo tus imágenes adjuntas y en lo que te sale después de intentar darle a escanear con el MBAR traducido al español, te pide que cuando le des a aceptar y cuando te salga la pantalla de debajo hagas click sobre símbolo del sistema y allí pegues el comando que te sugiere C:\mbstart.cmd y le des a enter o si no funcionara este probando uno a uno los siguientes D:\mbstart.cmd ,E:\mbstart.cmd, en orden alfabético si no te funcionara uno de estos cambiando solo la primera letra del comando. Lo siguiente que dice es que Windows se reiniciara en modo normal y el escaneo debería comenzar automáticamente. Un saludo a los dos.

Gracias KATO, lo había entendido, pero prefiero esperar a que vuelva PABLO, por si eso no debiera realizarlo tal y como me propone el error.

Perfecto, pues ya se verá cómo deberás de continuar cuando vuelva @Pablo. Un saludo.