Problema con la conexión internet

[adn88sp]

Hola, disculpen la intromisión, estoy siguiendo este post porque tengo el mismo problema y no encuentro la solución. Mi Windows está activado, utilice los comandos de ipconfig en el orden señalado, tengo W10 versión 1903, actualice el controlador del adaptador de red, con los drivers desde las página de mi notebook (es un Realtek RTL8723AE) fecha 31/MAR/2016, busqué en la página de Realtek pero ni siquiera aparece el mío. Mi notebook es un CX22954, cambié la configuración de batería para que el sistema NO apague el adaptador para ahorrar energía. El problema persiste y es sólo con mi notebook. Otros dispositivos cómo netbook, smartphones, smartv, PC desktop (está última ethernet), funcionan correctamente. Hay alguna forma de analizar, verificar o probar el hardware del adaptador de red si es que quedó obsoleto o es algún problema de incompatibilidad con W10? Desde ya muchas gracias, perdón si no debía comentar en este hilo. Si es así creeré un post nuevo.

[JavierHF]

Buenas @adn88sp.

Lo primero que debemos hacer es revisar tu equipo, para hacerlo sigue estos pasos, en el orden indicado y leyendo todo lo explicado.

Desactiva temporalmente el Antivirus Cómo deshabilitar temporalmente su Antivirus, mientras estemos realizando TODOS los pasos.

Vamos a descargar en TU ESCRITORIO(y NO en otro lugar ) todas las herramientas que vamos a utilizar en este procedimiento (pero no las ejecutes todavía) :

• CCleaner + Manual.

• Malwarebytes’ Anti-Malware + Manual. revisa en detalle el manual, para que sepas usarlo y configurarlo correctamente.

• AdwCleaner + Manual.

• Junkware Removal Tool.

• Farbar Recovery Scan Tool. seleccionando la versión adecuada para la arquitectura(32 o 64bits) de tu equipo. [color=#FF8C00][size=1] ¿Cómo saber si mi Windows es de 32 o 64 bits.?[/size][/color]

Una vez descargadas, desconectas tu equipo de Internet(apaga el router) Muy Importante,… y Cierras también cualquier otro programa que tengas abierto.

Ejecutas las herramientas de una en una y en el orden indicado :

Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas Ejecutar como Administrador para TODOS los programas.

CCleaner.-

• Instalas y Ejecutas CCleaner siguiendo los pasos indicados en el manual.

• Úsalo primero en su opción de Limpiador para borrar cookies, temporales de Internet y todos los archivos que te muestre como obsoletos.

• Después usa su opción de Registro para limpiar todo el registro de Windows(haciendo copia de seguridad).

Malwarebytes.-

• Instalas y Ejecutas MBAM siguiendo los pasos indicados en el manual.

• Realiza un Análisis Completo.

• Seleccionando TODOS a Cuarentena para enviarlo a la cuarentena y Reinicias el sistema.

• En el apartado del manual Historial encontrarás el informe del MBAM, que debes copiar y pegar en tu próxima respuesta, para analizarlo.

AdwCleaner.-

• Ejecuta Adwcleaner.exe.

• Pulsamos en el botón Analizar ahora, y espera a que se realice el proceso, inmediatamente pulsa siempre sobre el botón Iniciar Reparación.

• Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.

• El log/informe lo encontramos en la pestaña “Informes”, volviendo a abrir el programa si fuese necesario, para poder copiarlo y pegarlo en tu próxima respuesta.

• El informe también se puede encontrar en C:\AdwCleaner\Logs\AdwCleaner[C00].txt

Junkware Removal Tool.-

• Ejecuta JRT.exe.

• Y pulsar cualquier tecla para continuar, esperar pacientemente a que termine el proceso.

• Si en algún momento te pide Reiniciar hazlo.

• Al finalizar, un registro/informe (JRT.txt) se guardara en el escritorio y se abrirá automáticamente.

• Copia y pega el contenido de JRT.txt en tu próxima respuesta.

Farbar Recovery Scan Tool.-

• Ejecuta FRST.exe.

• En el mensaje de la ventana del Disclaimer, pulsamos Yes

• En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.

• Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Poner los informes en tu próxima respuesta de :

• Malwarebytes, AdwCleaner, JRT, FRST + Addition.txt, y en ese orden.

Debes copiarlos y pegarlos con todo su contenido y usaras varios mensajes si recibes un mensaje de error indicando que es muy largo(mas de 50.000 caracteres aprox.).

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo, aquí tienes un ejemplo de como hacerlo :

Y nos cuentas como funciona tu equipo en relación al problema planteado.

Saludos Javier.

[adn88sp]

Hola, bbuen día y gracias por responder tan rápido. Adjunto los informes.

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 16/10/19
Hora del análisis: 9:48
Archivo de registro: 40179cb8-f013-11e9-8412-dc85dee047f4.json

-Información del software-
Versión: 3.8.3.2965
Versión de los componentes: 1.0.629
Versión del paquete de actualización: 1.0.12917
Licencia: Gratis

-Información del sistema-
SO: Windows 10 (Build 18362.418)
CPU: x64
Sistema de archivos: NTFS
Usuario: NADAL\Nadal2016

-Resumen del análisis-
Tipo de análisis: Análisis de amenazas
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 292273
Amenazas detectadas: 0
Amenazas en cuarentena: 0
Tiempo transcurrido: 6 min, 14 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Desactivado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 0
(No hay elementos maliciosos detectados)

Valor del registro: 0
(No hay elementos maliciosos detectados)

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 0
(No hay elementos maliciosos detectados)

Archivo: 0
(No hay elementos maliciosos detectados)

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)

# -------------------------------
# Malwarebytes AdwCleaner 7.4.1.0
# -------------------------------
# Build:    09-05-2019
# Database: 2019-08-27.1 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    10-16-2019
# Duration: 00:00:09
# OS:       Windows 10 Pro
# Cleaned:  22
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Program Files (x86)\mipony
Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mipony
Deleted       C:\Users\Nadal2016\AppData\Roaming\DRPSu
Deleted       C:\Users\Nadal2016\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\mipony
Deleted       C:\Users\Nadal2016\AppData\Roaming\mipony
Deleted       C:\Users\Nadal2016\Documents\mipony

***** [ Files ] *****

Deleted       C:\Users\Nadal2016\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\MiPony.lnk

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\DriverFix
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|DriverFix
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MiPony.exe
Deleted       HKLM\Software\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted       HKLM\Software\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted       HKLM\Software\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
Deleted       HKLM\Software\Classes\mipony
Deleted       HKLM\Software\Classes\mpybrowser
Deleted       HKLM\Software\Wow6432Node\\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
Deleted       HKLM\Software\Wow6432Node\\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
Deleted       HKLM\Software\Wow6432Node\\Classes\TypeLib\{1112F282-7099-4624-A439-DB29D6551552}
Deleted       HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\App Paths\MiPony.exe
Deleted       HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\MiPony

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPMediaSmart   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}
Deleted       Preinstalled.HPMediaSmart   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{01FB4998-33C4-4431-85ED-079E3EEFE75D}


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner_Debug.log - [16705 octets] - [16/10/2019 09:59:09]
AdwCleaner[S00].txt - [3470 octets] - [16/10/2019 10:00:00]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 10 Enterprise x64 
Ran by Nadal2016 (Administrator) on 16/10/2019 at 10:11:52,06
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




File System: 0 




Registry: 0 





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 16/10/2019 at 10:16:50,37
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[adn88sp]

Continúo con los informes FRST 1ra parte

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12-10-2019 02

Ran by Nadal2016 (administrator) on NADAL (ADVANTEC SA CX 229XX) (16-10-2019 10:18:08)

Running from C:\Users\Nadal2016\Desktop

Loaded Profiles: Nadal2016 (Available Profiles: Nadal2016)

Platform: Windows 10 Pro Version 1903 18362.418 (X64) Language: Español (España, internacional)

Default browser: Chrome

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe

(ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe

(Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe

(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe

(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel Corporation - Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation - Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes Corporation -> Malwarebytes) C:\ProgramData\MB3Install\MBAMIService.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1909.6-0\MsMpEng.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1909.6-0\NisSrv.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe

(Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTDevMgr.exe

(Realtek Semiconductor Corp -> ) C:\Program Files (x86)\Realtek\Realtek Bluetooth\SkypePlugin.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\AvrcpService.exe

(Realtek Semiconductor Corp -> Realtek Semiconductor Corporation) C:\Program Files (x86)\Realtek\Realtek Bluetooth\BTServer.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [323312 2014-12-10] (Intel Corporation - Rapid Storage Technology -> Intel Corporation)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [3242696 2015-10-07] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16407296 2015-10-22] (Realtek Semiconductor Corp -> Realtek Semiconductor)

HKLM\...\Run: [BtServer] => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTServer.exe [230104 2015-07-10] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)

HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink -> CyberLink Corp.)

HKLM-x32\...\Run: [YouCam Mirror Tray icon] => C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [162912 2009-06-11] (CyberLink -> CyberLink Corp.) [File not signed]

HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2087264 2014-09-11] (Wondershare software CO., LIMITED -> Wondershare)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [49152 2008-03-25] (Hewlett-Packard) [File not signed]

HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-06-08] (Geek Software GmbH -> Geek Software GmbH)

HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2016-12-22] (Disc Soft Ltd -> Disc Soft Ltd)

HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Run: [Chromium] => c:\users\nadal2016\appdata\local\chromium\application\chrome.exe [829440 2017-02-15] (The Chromium Authors) [File not signed]

HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3152160 2019-04-29] (Valve -> Valve Corporation)

HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24916512 2019-10-01] (Piriform Software Ltd -> Piriform Ltd)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\77.0.3865.120\Installer\chrmstp.exe [2019-10-14] (Google LLC -> Google LLC)

GroupPolicy: Restriction ? <==== ATTENTION

[adn88sp]

FRST 2da Parte

=================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0573163F-7B48-462A-AD09-5F7AB1CCA240} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1626328 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {191739FB-2768-444F-AD7C-D9D24D6C060D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [860016 2019-08-27] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {196C87FC-F4FE-48AE-B5D7-96272B570B44} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18732320 2019-10-01] (Piriform Software Ltd -> Piriform Ltd)

Task: {1A8D1F04-077E-4C48-829D-28E2781FDCDA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1873288 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)

Task: {1B716250-6C36-4855-8EA8-1262826B4C4C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-05] (Google Inc -> Google Inc.)

Task: {1E0A30F3-9927-4FE3-AC4B-1A09658D7875} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [913448 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe

Task: {4A17B888-C368-4BF6-87C2-4F1CFF9594BB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-10-01] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {4C47CF94-3D82-4254-B75F-2CDF1E5F9274} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)

Task: {50681D7E-2AEB-41B5-A460-B8763B8056AC} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [913448 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {51F10797-CDB1-4AE4-92E1-385AE948E15C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MpCmdRun.exe [468120 2019-10-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {52CB3F10-6619-4C95-A5BB-242D60F9CB98} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-10-09] (Adobe Inc. -> Adobe)

Task: {534CA769-D7BB-4723-A144-A94693673C02} - System32\Tasks\{17C29019-C27E-4D6F-9E58-95E947E7F04E} => C:\Windows\system32\pcalua.exe -a F:\menu.exe -d F:\

Task: {59C4F732-2A6F-4B0D-950B-587179CF2BF6} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3310688 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {5A3FB241-0B11-4EA5-BC66-0D9F1B406040} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [32256 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

Task: {5C0B3C22-852A-46ED-861E-3AB19B8567DD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MpCmdRun.exe [468120 2019-10-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {65613D0A-DB33-4620-B6A0-E3A93F6ED165} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133608 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}

Task: {7F29EA44-D811-415A-9A9A-C52E50B70ADD} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

Task: {84B43CFF-7BC6-435E-808B-4CF049F1296E} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_270_Plugin.exe [1457720 2019-10-09] (Adobe Inc. -> Adobe)

Task: {8638B626-CE2D-4F51-ACD4-AB90A7E5C100} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}

Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}

Task: {88E33EB7-2029-45DE-90C9-D937B40157CA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {91F20E64-9A1F-4014-85CC-03C4A5A3852A} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133608 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {9F5AAF29-FFA9-442A-8284-C69188E05DE7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [860016 2019-08-27] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {A7DC02F1-372F-4CEC-9267-3C8D8E87AF94} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe

Task: {A8450278-6556-485D-9EA0-9BC59E27FD2B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MpCmdRun.exe [468120 2019-10-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {B247C302-DF57-4166-8268-7939F82A3205} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Nadal2016\Downloads\Limpieza\esetonlinescanner_esn.exe

Task: {BA1620EB-EF11-46DE-A28B-B2E82392BF2B} - System32\Tasks\{423132D0-4458-4CC0-89FC-F15CA7FF149B} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Microsoft Visual Studio\Installer\vs_installer.exe" -c /uninstall

Task: {C3E4F15E-880D-408C-963F-D044033CC91E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-05] (Google Inc -> Google Inc.)

Task: {C6D8FD1C-593A-4E7E-8025-693BED68B0AE} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133608 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {C74F1330-2483-47CB-AA8C-5F64E8DA65B9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [653864 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}

Task: {CF49547E-9BD8-47FD-B642-7F68316C5EFC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MpCmdRun.exe [468120 2019-10-02] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {D1610103-8729-47EA-B3D8-39EDB153FE01} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe

Task: {D5B42CFE-7E1B-4A52-9A3B-7B489EC05AF1} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Nadal2016\Downloads\Limpieza\esetonlinescanner_esn.exe

Task: {E3D8EA1E-964F-4571-BEED-FCC96A256CC5} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1133608 2019-09-05] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {EF93836C-2378-4828-90F0-97BBC9B915D2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)

Task: {F4C8B735-1172-4F60-AF63-5BD8E93B5DBC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-90768385-593489369-457854222-1001] => 172.17.135.1:8080

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{009f452f-5e8b-4daf-ba3b-b1ff99f235eb}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{26d4925c-4786-4fc4-90ef-7ae792bc3bbc}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{b3e0bdc3-bdac-4125-8aad-433bd5f08f27}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Tcpip\..\Interfaces\{ea7f0413-29cd-48d1-a50d-07fa7c52a832}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:

==================

HKU\S-1-5-21-90768385-593489369-457854222-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP

SearchScopes: HKU\S-1-5-21-90768385-593489369-457854222-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04

SearchScopes: HKU\S-1-5-21-90768385-593489369-457854222-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)

BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-07-18] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2018-03-14] (Microsoft Corporation -> Microsoft Corporation)

Edge:

======

DownloadDir: C:\Users\Nadal2016\Downloads

FireFox:

========

FF DefaultProfile: ffgncekh.default

FF ProfilePath: C:\Users\Nadal2016\AppData\Roaming\Mozilla\Firefox\Profiles\ffgncekh.default [2019-10-16]

FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_270.dll [2019-10-09] (Adobe Inc. -> )

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_270.dll [2019-10-09] (Adobe Inc. -> )

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-10-10] (Intel(R) Identity Protection Technology Software -> Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-10-10] (Intel(R) Identity Protection Technology Software -> Intel Corporation)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-06-12] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll [2019-10-02] (Google Inc -> Google LLC)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll [2019-10-02] (Google Inc -> Google LLC)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN -> VideoLAN)

FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN -> VideoLAN)

Chrome:

=======

CHR StartupUrls: Default -> "hxxps://www.google.com/"

CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}

CHR DefaultSearchKeyword: Default -> duckduckgo.com

CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab

CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list

CHR Profile: C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default [2019-10-16]

CHR Extension: (Documentos) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]

CHR Extension: (Google Drive) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-24]

CHR Extension: (YouTube) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-07]

CHR Extension: (minerBlock) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\emikbbbebcdfohonlaifafnoanocnebl [2019-02-03]

CHR Extension: (Documentos de Google sin conexión) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-19]

CHR Extension: (Skype) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2017-12-01]

CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03]

CHR Extension: (Gmail) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]

CHR Extension: (Chrome Media Router) - C:\Users\Nadal2016\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-09-25]

CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AvrcpService; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\AvrcpService.exe [41176 2015-03-02] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)

R2 BTDevManager; C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe [120024 2015-07-02] (Realtek Semiconductor Corp -> )

S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2016-12-22] (Disc Soft Ltd -> Disc Soft Ltd)

R2 ETDService; C:\Program Files\Elantech\ETDService.exe [144072 2015-10-07] (ELAN Microelectronics Corporation -> ELAN Microelectronics Corp.)

R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [353768 2018-09-13] (Intel Corporation -> Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel® Trusted Connect Service -> Intel(R) Corporation)

R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [132896 2014-10-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)

S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-10-10] (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation)

R2 MBAMIService; C:\ProgramData\MB3Install\MBAMIService.exe [231120 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)

R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [70144 2008-02-28] (Hewlett-Packard) [File not signed]

R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [860016 2019-08-27] (NVIDIA Corporation -> NVIDIA Corporation)

S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [860016 2019-08-27] (NVIDIA Corporation -> NVIDIA Corporation)

R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [217736 2017-06-08] (Geek Software GmbH -> Geek Software GmbH)

R2 PGFNEXSrv; C:\Program Files (x86)\PHotkey\PGFNEXSrv.exe [135680 2014-08-07] () [File not signed]

R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [88576 2008-02-28] (Hewlett-Packard) [File not signed]

R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [713816 2018-09-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5796168 2019-09-11] (Microsoft Windows Publisher -> Microsoft Corporation)

S4 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7032080 2016-05-12] (TeamViewer -> TeamViewer GmbH)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\NisSrv.exe [3004048 2019-10-02] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1909.6-0\MsMpEng.exe [103384 2019-10-02] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000

S2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-01-19] (Disc Soft Ltd -> Disc Soft Ltd)

R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-01-19] (Disc Soft Ltd -> Disc Soft Ltd)

R3 ETDSMBus; C:\WINDOWS\system32\DRIVERS\ETDSMBus.sys [23816 2014-10-08] (ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-10-16] (Malwarebytes Corporation -> Malwarebytes)

R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvpmi.inf_amd64_721c9caa7b81bc3a\nvlddmkm.sys [20371952 2018-11-13] (NVIDIA Corporation -> NVIDIA Corporation)

S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-07-23] (NVIDIA Corporation -> NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-03-19] (NVIDIA Corporation -> NVIDIA Corporation)

R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [75600 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation)

R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2009-09-11] (PEGATRON CORPORATION -> PEGATRON)

R3 PegaRadioSwitch; C:\WINDOWS\System32\drivers\PegaRadioSwitch.sys [23552 2013-08-21] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)

R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek )

R3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [607512 2015-07-09] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)

R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [433648 2018-11-06] (Realtek Semiconductor Corp. -> Realsil Semiconductor Corporation)

R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2019-03-19] (Microsoft Windows -> Realtek Semiconductor Corporation )

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46688 2019-10-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [350136 2019-10-02] (Microsoft Windows -> Microsoft Corporation)

S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54200 2019-10-02] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

[adn88sp]

FRST 3ra Parte

==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-16 10:18 - 2019-10-16 10:19 - 000029848 _____ C:\Users\Nadal2016\Desktop\FRST.txt

2019-10-16 10:17 - 2019-10-16 10:18 - 000000000 ____D C:\FRST

2019-10-16 10:16 - 2019-10-16 10:16 - 000000557 _____ C:\Users\Nadal2016\Desktop\JRT.txt

2019-10-16 10:07 - 2019-10-16 10:07 - 000003317 _____ C:\Users\Nadal2016\Desktop\AdwCleaner[C00]20191016.txt

2019-10-16 10:04 - 2019-10-16 10:04 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2019-10-16 09:55 - 2019-10-16 09:55 - 000001543 _____ C:\Users\Nadal2016\Desktop\MalwareBits20191016.txt

2019-10-16 09:47 - 2019-10-16 09:47 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2019-10-16 09:47 - 2019-10-16 09:47 - 000001912 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2019-10-16 09:47 - 2019-10-16 09:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes

2019-10-16 09:47 - 2019-09-30 06:25 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2019-10-16 09:47 - 2019-06-26 13:00 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2019-10-16 09:42 - 2019-10-16 10:13 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2019-10-16 09:42 - 2019-10-16 09:42 - 000002876 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC

2019-10-16 09:42 - 2019-10-16 09:42 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk

2019-10-16 09:42 - 2019-10-16 09:42 - 000000863 _____ C:\ProgramData\Desktop\CCleaner.lnk

2019-10-16 09:42 - 2019-10-16 09:42 - 000000000 ____D C:\Program Files\CCleaner

2019-10-15 20:13 - 2019-10-15 20:13 - 001616384 _____ (Farbar) C:\Users\Nadal2016\Desktop\FRST64.exe

2019-10-15 20:11 - 2019-10-15 20:11 - 001790024 _____ (Malwarebytes) C:\Users\Nadal2016\Desktop\JRT.exe

2019-10-15 20:09 - 2019-10-15 20:18 - 066740512 _____ (Malwarebytes ) C:\Users\Nadal2016\Desktop\mb3-setup-consumer-3.8.3.2965-1.0.629-1.0.12917.exe

2019-10-15 20:09 - 2019-10-15 20:16 - 025441808 _____ (Piriform Software Ltd) C:\Users\Nadal2016\Desktop\ccsetup562.exe

2019-10-15 17:10 - 2019-10-15 17:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-90768385-593489369-457854222-1001

2019-10-14 19:37 - 2019-10-14 19:37 - 000003826 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn

2019-10-14 19:37 - 2019-10-14 19:37 - 000003384 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime

2019-10-14 16:10 - 2019-10-14 16:10 - 000000890 _____ C:\Users\Nadal2016\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk

2019-10-14 15:37 - 2019-10-14 15:38 - 000001870 _____ C:\Users\Nadal2016\Desktop\Rkill.txt

2019-10-14 15:00 - 2019-10-14 15:00 - 000000000 ____D C:\Users\Nadal2016\Documents\Documentos Educación

2019-10-09 02:18 - 2019-10-09 02:18 - 025443840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 019811840 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 004129616 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 003525592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe

2019-10-09 02:18 - 2019-10-09 02:18 - 002494440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 002422592 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVCORE.DLL

2019-10-09 02:18 - 2019-10-09 02:18 - 002314648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 002236144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 002138472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVCORE.DLL

2019-10-09 02:18 - 2019-10-09 02:18 - 001610752 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 001273392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 001152016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 001098712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DolbyDecMFT.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 001012792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 000952416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DolbyDecMFT.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 000537600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll

2019-10-09 02:18 - 2019-10-09 02:18 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll

2019-10-09 02:17 - 2019-10-09 02:18 - 007015936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 025900544 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 022628352 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 019849216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 018019840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 017787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 014816256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 009928504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 008010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 007754240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 007600664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 007195648 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 006517640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 006232064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 005915648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 005041664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 004562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 004012544 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 003947008 _____ (Microsoft Corporation) C:\WINDOWS\system32\tellib.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 003771392 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 003701760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002861568 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsservices.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002762504 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2019-10-09 02:17 - 2019-10-09 02:17 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2019-10-09 02:17 - 2019-10-09 02:17 - 002723328 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 002703360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002456064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002284032 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002095104 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002081976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 002000168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001952360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001847808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsservices.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001748480 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001743672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001730560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001721144 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001687040 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001664928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001656392 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001563648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001562424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpserverbase.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001439744 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 001394488 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001283072 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001217904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 001214976 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 001084432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 001072952 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000904208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ReAgent.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000890472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000880088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000856576 _____ C:\WINDOWS\system32\MBR2GPT.EXE

2019-10-09 02:17 - 2019-10-09 02:17 - 000844800 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000842752 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000829536 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000818688 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000774672 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000758584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mousocoreworker.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000701952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.FileExplorer.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000691712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000679880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000669496 _____ (Microsoft Corporation) C:\WINDOWS\system32\computecore.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000598024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SppExtComObj.Exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000520192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000516408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000515896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000496640 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000466416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 000452408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 000429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000412152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000404392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000380216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000300184 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE

2019-10-09 02:17 - 2019-10-09 02:17 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000220472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000202040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXApplicabilityBlob.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE

2019-10-09 02:17 - 2019-10-09 02:17 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\CustomInstallExec.exe

2019-10-09 02:17 - 2019-10-09 02:17 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys

2019-10-09 02:17 - 2019-10-09 02:17 - 000033048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL

2019-10-09 02:17 - 2019-10-09 02:17 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll

2019-10-09 02:17 - 2019-10-09 02:17 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll

2019-10-09 02:01 - 2019-10-09 02:01 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe

2019-10-09 02:01 - 2019-10-09 02:01 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 005764872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 004481536 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 002258856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 002190864 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystems64.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 002132280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001788728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001716752 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntVirtualization.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001692160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001616784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001611792 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVIntegration.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001510752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001505320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001501712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppVEntSubsystems32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001386000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntSubsystemController.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001297936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001263616 _____ (Microsoft Corporation) C:\WINDOWS\system32\opengl32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001244944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001080320 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 001043984 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPolicy.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000960512 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000957240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVManifest.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000939008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000904704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\opengl32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000827408 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVOrchestration.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000816648 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVEntStreamingManager.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000802816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000742912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000741392 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVReporting.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000666128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVCatalog.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000659456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000649016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVPublishing.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000623104 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SmsRouterSvc.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\csc.sys

2019-10-03 20:27 - 2019-10-03 20:27 - 000568336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comctl32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000546816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiagn.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000541696 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourceMapper.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000510464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmenrollengine.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000502784 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000500736 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl

2019-10-03 20:27 - 2019-10-03 20:27 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpshell.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000495120 _____ (Microsoft Corporation) C:\WINDOWS\system32\TransportDSA.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000487576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\SessEnv.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl

2019-10-03 20:27 - 2019-10-03 20:27 - 000417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000394256 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVScripting.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000387832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpinit.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000258064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVFileSystemMetadata.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000231440 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVShNotify.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000228880 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamMap.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000202768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVStreamingUX.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000181776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVDllSurrogate.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000173072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppVNice.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys

2019-10-03 20:27 - 2019-10-03 20:27 - 000145208 _____ (Microsoft Corporation) C:\WINDOWS\system32\CscMig.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\system32\appvetwclientres.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000110080 _____ C:\WINDOWS\system32\ResBParser.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000100664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys

2019-10-03 20:27 - 2019-10-03 20:27 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000084496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys

2019-10-03 20:27 - 2019-10-03 20:27 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000037904 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncAppvPublishingServer.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000021816 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScriptRunner.exe

2019-10-03 20:27 - 2019-10-03 20:27 - 000021544 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\appvetwstreamingux.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSErrRedir.dll

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin

2019-10-03 20:27 - 2019-10-03 20:27 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin

2019-10-03 20:26 - 2019-10-03 20:27 - 000137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 007263992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 006425600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 006084048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 005865272 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizimg.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 005105152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 003964056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 003742032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 003553280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 002821120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 002799616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 002772032 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 002590208 _____ C:\WINDOWS\system32\dwmscene.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 002160640 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001957008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001940952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001913296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001857024 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001845408 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2019-10-03 20:26 - 2019-10-03 20:26 - 001664376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 001482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 001473488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001412096 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2019-10-03 20:26 - 2019-10-03 20:26 - 001334064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdrecordcpu.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001261800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001182240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 001178816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001154656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001054872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001047968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 001023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000984376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000975872 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000792296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000784384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000775768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000772656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000759488 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000674072 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000673080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000652800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000629248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.Search.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000612864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000606208 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxtheme.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000598016 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000551424 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000541480 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000539648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9on12.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000507704 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000501232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000476672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uxtheme.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 000450360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11on12.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000442704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000398728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000383984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000379840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000375720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000334936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000293344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000285256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000283688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 000243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000176152 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SpatialAudioLicenseSrv.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ForceSync.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000125232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000119840 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000116904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 000092624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000089544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000073024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys

2019-10-03 20:26 - 2019-10-03 20:26 - 000020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe

2019-10-03 20:26 - 2019-10-03 20:26 - 000011576 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll

2019-10-03 20:26 - 2019-10-03 20:26 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 007905000 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 007848192 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 006227624 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 006164480 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 004612520 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 004046336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 003590968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 003386880 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 003184128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 003105280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 002466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 002120704 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 002120272 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 002069504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001607680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001543168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001383856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001150240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001036800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 001029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000833312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000732176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000656960 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnprv.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000551952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000551936 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000449888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000415808 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000363624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\MbbCx.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000342896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000250880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000235008 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwpolicyiomgr.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000223032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\fwbase.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000132096 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000123904 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationControlCSP.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000105272 _____ (Microsoft Corporation) C:\WINDOWS\system32\icfupgd.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000053248 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000052752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000047616 _____ C:\WINDOWS\system32\UsbPmApi.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys

2019-10-03 20:25 - 2019-10-03 20:25 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe

2019-10-03 20:25 - 2019-10-03 20:25 - 000028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32_DeviceGuard.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfapigp.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll

2019-10-03 20:25 - 2019-10-03 20:25 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tier2punctuations.dll

2019-09-17 12:33 - 2019-09-17 12:33 - 000073108 _____ C:\Users\Nadal2016\Downloads\Legajo-33218489.pdf

2019-09-17 12:27 - 2019-09-17 12:27 - 000063357 _____ C:\Users\Nadal2016\Downloads\CV-33218489.pdf

[adn88sp]

FRST 4ta Parte

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-10-16 10:13 - 2016-05-07 21:14 - 000000000 ____D C:\ProgramData\NVIDIA

2019-10-16 10:06 - 2019-03-19 01:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2019-10-16 10:05 - 2017-09-28 19:55 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat

2019-10-16 10:05 - 2016-04-18 21:39 - 000000000 ____D C:\Users\Nadal2016\IntelGraphicsProfiles

2019-10-16 10:04 - 2019-07-30 23:04 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2019-10-16 10:03 - 2019-03-19 01:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2019-10-16 09:47 - 2019-03-19 01:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2019-10-16 09:47 - 2017-12-01 21:39 - 000000000 ____D C:\Program Files\Malwarebytes

2019-10-16 09:46 - 2018-05-27 12:32 - 000000000 ____D C:\Users\Nadal2016\Documents\Limpieza Registro

2019-10-16 09:44 - 2019-03-19 01:50 - 000000000 ____D C:\WINDOWS\INF

2019-10-15 23:26 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\NDF

2019-10-15 19:50 - 2019-07-30 22:40 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2019-10-14 23:38 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\AppReadiness

2019-10-14 23:23 - 2018-08-15 20:55 - 000000000 ____D C:\Users\Nadal2016\AppData\Local\ESET

2019-10-14 20:37 - 2016-05-05 11:22 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2019-10-14 19:46 - 2018-11-24 23:51 - 000000000 ____D C:\Program Files (x86)\Steam

2019-10-14 19:46 - 2017-01-19 22:17 - 000000000 ____D C:\Users\Nadal2016\AppData\Roaming\DAEMON Tools Lite

2019-10-14 19:46 - 2016-06-12 23:21 - 000000000 ____D C:\Users\Nadal2016\AppData\Roaming\uTorrent

2019-10-14 19:45 - 2019-07-25 00:04 - 000000000 ___DC C:\WINDOWS\Panther

2019-10-14 19:45 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2019-10-14 19:45 - 2016-07-22 09:54 - 000000000 ____D C:\Users\Nadal2016\AppData\Local\CrashDumps

2019-10-14 15:33 - 2019-09-11 14:43 - 000000000 ____D C:\Program Files (x86)\Audacity

2019-10-14 15:00 - 2016-05-14 15:21 - 000000000 ____D C:\Users\Nadal2016\Documents\Plantillas personalizadas de Office

2019-10-13 21:43 - 2019-07-30 22:58 - 001775178 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2019-10-13 21:43 - 2019-03-19 08:59 - 000789702 _____ C:\WINDOWS\system32\perfh00A.dat

2019-10-13 21:43 - 2019-03-19 08:59 - 000155956 _____ C:\WINDOWS\system32\perfc00A.dat

2019-10-12 17:43 - 2016-04-18 21:02 - 000000000 ____D C:\Users\Nadal2016\AppData\Local\Packages

2019-10-12 16:55 - 2019-03-19 01:52 - 000000000 ___HD C:\Program Files\WindowsApps

2019-10-10 13:51 - 2019-07-30 23:04 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-90768385-593489369-457854222-1001

2019-10-10 13:51 - 2019-07-30 22:48 - 000002405 _____ C:\Users\Nadal2016\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2019-10-10 13:51 - 2018-09-25 20:53 - 000000000 ___RD C:\Users\Nadal2016\OneDrive

2019-10-10 04:09 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ___RD C:\WINDOWS\PrintDialog

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\SystemResources

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\oobe

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\Dism

2019-10-10 04:08 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\bcastdvr

2019-10-09 17:19 - 2016-05-16 00:58 - 000000000 ____D C:\WINDOWS\system32\MRT

2019-10-09 17:13 - 2019-09-10 19:07 - 005769272 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe

2019-10-09 17:13 - 2019-07-30 23:04 - 000004610 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier

2019-10-09 17:13 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed

2019-10-09 17:13 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\Macromed

2019-10-09 02:23 - 2016-05-16 00:57 - 127230528 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2019-10-09 02:22 - 2016-05-05 11:09 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013

2019-10-09 02:21 - 2019-03-19 01:37 - 000000000 ____D C:\WINDOWS\CbsTemp

2019-10-08 14:38 - 2017-11-03 19:07 - 000000000 ____D C:\Users\Nadal2016\AppData\LocalLow\Mozilla

2019-10-04 03:10 - 2018-11-14 05:12 - 000000000 ___RD C:\Users\Nadal2016\3D Objects

2019-10-04 03:10 - 2018-09-25 20:53 - 000000000 __RHD C:\Users\Public\AccountPictures

2019-10-04 03:06 - 2019-07-30 22:40 - 000445384 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2019-10-04 03:03 - 2019-03-19 09:01 - 000000000 ___SD C:\WINDOWS\system32\AppV

2019-10-04 03:03 - 2019-03-19 01:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2019-10-04 03:03 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2019-10-04 03:03 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\system32\migwiz

2019-10-04 03:03 - 2019-03-19 01:52 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2019-10-03 23:32 - 2016-05-05 11:16 - 000000000 ____D C:\Users\Nadal2016\AppData\Roaming\vlc

2019-10-03 19:36 - 2019-09-07 10:19 - 000000000 ____D C:\Program Files (x86)\REALTEK PCIE Wireless LAN Driver

2019-10-03 19:23 - 2019-09-04 18:55 - 000000000 ____D C:\ProgramData\Realtek

2019-10-03 19:23 - 2016-04-18 21:29 - 000000000 ____D C:\Program Files (x86)\Realtek

2019-10-03 19:20 - 2018-12-25 22:58 - 000000000 ____D C:\Users\Nadal2016\Downloads\Driver CX22954

2019-10-03 19:02 - 2016-08-15 00:22 - 000000000 ____D C:\Users\Nadal2016\AppData\Roaming\AIMP

2019-10-02 20:35 - 2018-11-14 05:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2019-10-02 20:30 - 2019-07-30 23:04 - 000003558 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2019-10-02 20:30 - 2019-07-30 23:04 - 000003434 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2019-10-02 20:28 - 2016-05-05 11:15 - 000000000 ____D C:\Program Files (x86)\Google

2019-10-01 13:24 - 2013-08-22 10:25 - 000000202 _____ C:\WINDOWS\win.ini

2019-10-01 13:17 - 2019-04-06 15:06 - 000000000 ____D C:\Users\Nadal2016\AppData\Local\ElevatedDiagnostics

2019-09-17 12:56 - 2019-09-07 10:30 - 000000000 ____D C:\Users\Nadal2016\Documents\My Bluetooth

==================== Files in the root of some directories ================

2019-09-07 10:30 - 2019-10-16 10:13 - 000286855 _____ () C:\Users\Nadal2016\AppData\Local\BTServer.log

2018-08-20 15:13 - 2018-08-20 15:13 - 000004455 _____ () C:\Users\Nadal2016\AppData\Local\recently-used.xbel

2018-04-09 11:26 - 2019-06-12 23:32 - 000007598 _____ () C:\Users\Nadal2016\AppData\Local\Resmon.ResmonCfg

2017-03-19 08:36 - 2017-03-19 08:36 - 000000000 _____ () C:\Users\Nadal2016\AppData\Local\{1CE4D82D-8A03-4723-9011-A140B567D3F7}

2017-03-31 23:44 - 2017-03-31 23:44 - 000000000 _____ () C:\Users\Nadal2016\AppData\Local\{FCA1ACB6-1603-4076-8107-B0C9F578D61E}

==================== SigCheck ===============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ============================

[adn88sp]

Addition.

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 12-10-2019 02
Ran by Nadal2016 (16-10-2019 10:20:32)
Running from C:\Users\Nadal2016\Desktop
Windows 10 Pro Version 1903 18362.418 (X64) (2019-07-31 02:05:25)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-90768385-593489369-457854222-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-90768385-593489369-457854222-503 - Limited - Disabled)
Invitado (S-1-5-21-90768385-593489369-457854222-501 - Limited - Disabled)
Nadal2016 (S-1-5-21-90768385-593489369-457854222-1001 - Administrator - Enabled) => C:\Users\Nadal2016
WDAGUtilityAccount (S-1-5-21-90768385-593489369-457854222-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-90768385-593489369-457854222-1001\...\uTorrent) (Version: 3.5.5.45231 - BitTorrent Inc.)
64 Bit HP CIO Components Installer (HKLM\...\{A9513BBC-73B4-4856-BF83-0166523ABF09}) (Version: 2.2.4 - Hewlett-Packard) Hidden
Actualización de NVIDIA 38.0.1.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.1.0 - NVIDIA Corporation) Hidden
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.270 - Adobe)
Advanced RAR Repair v1.2 (HKLM-x32\...\Advanced RAR Repair v1.2) (Version:  - )
AIMP (HKLM-x32\...\AIMP) (Version: v4.51.2084, 01.12.2018 - AIMP DevTeam)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.62 - Piriform)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 3.0.1811.7429 - CyberLink Corp.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.0.0222 - Disc Soft Ltd)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 416.94 - NVIDIA Corporation) Hidden
Eines de correcció del Microsoft Office 2013: català (HKLM\...\{90150000-001F-0403-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.)
Electrum (HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Electrum) (Version: 3.0.3 - Electrum Technologies GmbH)
Exodus (HKU\S-1-5-21-90768385-593489369-457854222-1001\...\exodus) (Version: 1.40.0 - Exodus Movement Inc)
Ferramentas de verificación de Microsoft Office 2013 - Galego (HKLM\...\{90150000-001F-0456-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
GIMP 2.8.20 (HKLM\...\GIMP-2_is1) (Version: 2.8.20 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 77.0.3865.120 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.301 - Google LLC) Hidden
HP Update (HKLM-x32\...\{D063F201-FAC4-4D5C-B10B-615058ADE5A7}) (Version: 4.000.009.002 - Hewlett-Packard)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.30.1072 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.5058 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.6.0.1002 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 1.1.226.0 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
Malwarebytes versión 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUSR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-90768385-593489369-457854222-1001\...\OneDriveSetup.exe) (Version: 19.152.0927.0012 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.0.118 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.0.118 - NVIDIA Corporation)
NVIDIA Software del sistema PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Panel de control de NVIDIA 416.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 416.94 - NVIDIA Corporation) Hidden
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
PDF24 Creator 8.2.0 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
PHotkey (HKLM-x32\...\{E50C224A-BBF2-428D-9DCF-DBF9DF85C40E}) (Version: 1.00.0113 - Pegatron Corporation)
REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.868.867.071015 - REALTEK Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31225 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7640 - Realtek Semiconductor Corp.)
Realtek PCI-E Wireless LAN Driver (HKLM-x32\...\InstallShield_{70714FB7-4084-4202-A599-2D5935DECB67}) (Version: Drv_3.00.0015 - REALTEK Semiconductor Corp.)
Realtek Wireless LAN Adapter Software (HKLM-x32\...\{E462B252-195B-47EA-98E2-BAC3C2DF7D37}) (Version: 1.00.0048.0 - REALTEK Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.00.0271 - REALTEK Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (HKLM\...\{90150000-001F-0416-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version:  - Microsoft)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype versión 8.25 (HKLM-x32\...\Skype_is1) (Version: 8.25 - Skype Technologies S.A.)
Smart View (HKLM-x32\...\{5F8A3D28-643E-4062-80C9-37AD463EB61D}) (Version: 1.0.0.0 - Samsung )
Software para dispositivos de chipset Intel® (HKLM-x32\...\{da2de8c3-61b9-4b3b-916d-6b2fb2b1a90c}) (Version: 10.0.21 - Intel(R) Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 11 (HKLM-x32\...\TeamViewer) (Version: 11.0.59518 - TeamViewer)
Update for Skype for Business 2015 (KB4475564) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{CD0EE05F-11E6-46FA-BB7B-D2A28C47A4F3}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4475564) 64-Bit Edition (HKLM\...\{90150000-012B-0C0A-1000-0000000FF1CE}_Office15.PROPLUSR_{CD0EE05F-11E6-46FA-BB7B-D2A28C47A4F3}) (Version:  - Microsoft)
Update for Skype for Business 2015 (KB4475564) 64-Bit Edition (HKLM\...\{91150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUSR_{CD0EE05F-11E6-46FA-BB7B-D2A28C47A4F3}) (Version:  - Microsoft)
UsbFix Anti-Malware Premium (HKLM-x32\...\Usbfix) (Version: 10.0.0.1 - SOSVirus (SOSVirus.Net))
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.1 - VideoLAN)
Windows SDK AddOn (HKLM-x32\...\{30DCCFB4-068F-4C5C-BC10-5ECDCAEE55D4}) (Version: 10.1.0.0 - Microsoft Corporation)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

Packages:
=========
Correo y Calendario -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.12026.20218.0_x64__8wekyb3d8bbwe [2019-09-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.10022.0_x64__8wekyb3d8bbwe [2019-10-10] (Microsoft Studios) [MS Ad]
MSN Deportes -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-20] (Microsoft Corporation) [MS Ad]
MSN El tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.32.12463.0_x64__8wekyb3d8bbwe [2019-09-11] (Microsoft Corporation) [MS Ad]
MSN Finanzas -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-20] (Microsoft Corporation) [MS Ad]
MSN Recetas -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2018-11-14] (Microsoft Corporation) [MS Ad]
MSN Salud -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2018-11-14] (Microsoft Corporation) [MS Ad]
MSN Viajes -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2018-11-14] (Microsoft Corporation) [MS Ad]

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2019-07-13] (Artem Izmaylov -> AIMP DevTeam)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} =>  -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> No File
ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\DevMenuExt.dll [2014-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> No File
ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files (x86)\AIMP\System\aimp_menu64.dll [2019-07-13] (Artem Izmaylov -> AIMP DevTeam)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2018-09-13] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-11-12] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> No File
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Drivers32: [VIDC.FMVC] => C:\Windows\SysWOW64\fmcodec.dll [77824 2008-08-18] (Fox Magic Software) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


==================== Loaded Modules (Whitelisted) ==============

2008-02-28 11:53 - 2008-02-28 11:53 - 000070144 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzinw12.dll
2008-02-28 11:53 - 2008-02-28 11:53 - 000088576 _____ (Hewlett-Packard) [File not signed] c:\windows\system32\hpzipm12.dll
2014-12-10 01:01 - 2014-12-10 01:01 - 000541696 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2014-12-10 01:01 - 2014-12-10 01:01 - 000285696 _____ (Intel Corporation) [File not signed] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 10:25 - 2013-08-22 10:25 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts


2018-03-19 09:40 - 2018-11-11 01:29 - 000000374 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\GtkSharp\2.12\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR
HKU\S-1-5-21-90768385-593489369-457854222-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Nadal2016\AppData\Roaming\Microsoft\Windows Photo Viewer\Papel tapiz de Visualizador de fotos de Windows.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: BthHFSrv => 3
MSCONFIG\Services: Fax => 3
MSCONFIG\Services: HomeGroupListener => 3
MSCONFIG\Services: HomeGroupProvider => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: Spooler => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WbioSrvc => 3
MSCONFIG\Services: WMPNetworkSvc => 2
MSCONFIG\Services: WPCSvc => 3
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run32: => "YouCam Mirror Tray icon"
HKLM\...\StartupApproved\Run32: => "UCam_Menu"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\StartupApproved\Run: => "Steam"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [UDP Query User{C67BFC82-6E7B-4582-8957-86829B21EF77}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{FB1FAD61-7A0C-4E83-9593-7DB63A53C58B}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{729946C2-AD9F-452A-806F-5A299F7AFFC7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{D65F114A-05DC-4886-B1CC-379804FEB9A6}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1FD7D9E0-F7C4-4397-9E59-AC45E41DC050}] => (Allow) E:\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe (WARNER BROS. ENTERTAINMENT INC. -> )
FirewallRules: [{1C0288EE-E713-4122-84B4-EBC05EC2F5A6}] => (Allow) E:\Steam\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe (WARNER BROS. ENTERTAINMENT INC. -> )
FirewallRules: [{260BCE66-BA8C-42EB-84D4-1896DF1D1209}] => (Allow) E:\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe (WARNER BROS. ENTERTAINMENT INC. -> )
FirewallRules: [{C2C4498C-1B2A-420B-B6B9-3891E9B81003}] => (Allow) E:\Steam\steamapps\common\MK10\Binaries\Retail\MK10.exe (WARNER BROS. ENTERTAINMENT INC. -> )
FirewallRules: [{45BDB5F2-ED7C-4486-B058-04D01BD8C04C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{0D13733D-0666-4648-B83A-DB722AEE630B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{129F0D6B-AE9B-4681-893D-3C22251D24E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{4A0FD3C6-2EEC-4394-83E5-38B9D108A35E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{9CFAE7FC-1D8F-4A97-AB6C-80A50661EC34}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2D59C966-FB0F-4445-99E1-D939A96E20D3}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7616DC6E-74F5-4AE3-AA94-E5A466AE7FAB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{72B825B5-4250-477B-A029-94712D4BDF25}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{05DC072B-70AA-4808-8368-12F339FCD619}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{19DB6D32-BEC3-4A5D-B955-54ED947EC319}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{3C7F7340-44B5-491D-BEF9-31E057F3F7D0}C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{7AC9A939-2373-4C95-B57E-9F8191EED6EB}C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{C0C3067A-EDAC-4474-B96F-1031E3889B71}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3E7897FF-3DA8-4123-A37B-0317A7C6DC19}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{4F09E9C8-4DAF-4F61-9E7C-C5EEEC9187E5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{12F5FA77-BA51-4739-B395-0D099513970E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{C8AC7F23-AEE1-425F-92C1-2F15C3849385}C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{F44866CE-7216-40F8-B2FA-0F910295640D}C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\nadal2016\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{20D2C590-1EF8-452B-A098-CBEF3FE67778}C:\program files (x86)\teamviewer\teamviewer.exe] => (Block) C:\program files (x86)\teamviewer\teamviewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [UDP Query User{92ABE931-74BE-470C-BA64-EBE0BD0CC813}C:\program files (x86)\teamviewer\teamviewer.exe] => (Block) C:\program files (x86)\teamviewer\teamviewer.exe (TeamViewer -> TeamViewer GmbH)
FirewallRules: [{465E9547-0EEC-4293-970F-D47F1A7140D6}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{606A2AA3-5C63-4FE2-97B5-9231F9CB8E2A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{857C85CA-F985-4106-BD8B-031D51047C53}] => (Allow) %systemroot%\system32\alg.exe No File
FirewallRules: [TCP Query User{A459FDCC-1966-40F8-A263-35B15E72FD20}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [UDP Query User{C65C2A7A-173E-4982-83B2-F98832B2A8CA}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{98AA646C-6833-48B5-962D-4DDFD7467A90}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7E2E52DC-060C-4FA8-88DB-EC8782141F4D}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B0A7CDA8-4FD7-4E75-89BA-83B4BBEFDF29}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1D244729-1E33-4E35-9C4C-F78A8DC245BB}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{466AE699-372C-410A-BC75-69B1C1EB13C1}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0660BC6A-E8E2-46F8-90A6-26880ABE9203}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0DA815BD-811A-4805-9A72-D03918FDFAFA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{35AA2AC8-B672-4700-A9BA-72EB8CF87B7E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{55FEA200-1E27-45B2-8813-963A0CC61671}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1496F2A1-9A19-44EF-A8AF-A0339346BCB0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{FE2A3B21-5E48-42DE-AB04-EE5DCB261E87}C:\program files (x86)\smart view\smart view.exe] => (Allow) C:\program files (x86)\smart view\smart view.exe () [File not signed]
FirewallRules: [UDP Query User{44072C70-BCD1-4EF7-AFD4-9D9A0BDFF49F}C:\program files (x86)\smart view\smart view.exe] => (Allow) C:\program files (x86)\smart view\smart view.exe () [File not signed]
FirewallRules: [TCP Query User{9991D7C4-9846-4698-9A2D-ECAFC9497C92}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{5F996B3F-E4BE-445B-BE20-3B327F0FD2D8}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{506DF52F-CDC8-42EE-844E-15B8424825F0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Restore Points =========================

08-10-2019 16:49:18 Punto de control programado
16-10-2019 10:12:02 JRT Pre-Junkware Removal

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (10/16/2019 10:18:07 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3036,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/16/2019 10:12:09 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5468,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (10/16/2019 10:04:32 AM) (Source: MBAMIService) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/16/2019 10:04:32 AM) (Source: MBAMIService) (EventID: 0) (User: )
Description: Event-ID 0

Error: (10/16/2019 10:03:18 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Error del Servicio de instantáneas de volumen: error inesperado al llamar a la rutina CoCreateInstance. HR = 0x8007045b, Se está cerrando el sistema.
.

Error: (10/16/2019 10:03:18 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Error del Servicio de instantáneas de volumen: error inesperado al llamar a la rutina CoCreateInstance. HR = 0x8007045b, Se está cerrando el sistema.
.

Error: (10/16/2019 10:03:18 AM) (Source: VSS) (EventID: 13) (User: )
Description: Información del Servicio de instantáneas de volumen: el servidor COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} y el nombre CEventSystem no puede iniciarse. [0x8007045b, Se está cerrando el sistema.
]

Error: (10/16/2019 10:03:18 AM) (Source: VSS) (EventID: 13) (User: )
Description: Información del Servicio de instantáneas de volumen: el servidor COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} y el nombre CEventSystem no puede iniciarse. [0x8007045b, Se está cerrando el sistema.
]


System errors:
=============
Error: (10/16/2019 10:13:03 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio NVIDIA LocalSystem Container terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 6000 milisegundos: Reiniciar el servicio.

Error: (10/16/2019 10:13:03 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio NVIDIA Display Container LS terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 6000 milisegundos: Reiniciar el servicio.

Error: (10/16/2019 10:04:03 AM) (Source: TPM) (EventID: 15) (User: NT AUTHORITY)
Description: El controlador de dispositivo para el Módulo de plataforma segura (TPM) encontró en el hardware de TPM un error irrecuperable que impide que se usen los servicios de TPM (como el cifrado de datos). Para obtener más ayuda, póngase en contacto con el fabricante del equipo.

Error: (10/16/2019 10:03:22 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Servicio de uso compartido de red del Reproductor de Windows Media depende del servicio Windows Search, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio debido a un error en el inicio de sesión.

Error: (10/16/2019 10:03:22 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Windows Search no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio debido a un error en el inicio de sesión.

Error: (10/16/2019 10:03:22 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: El servicio WSearch no se pudo iniciarse como NT AUTHORITY\SYSTEM con la contraseña configurada actualmente debido al siguiente error: 
Solicitud no compatible.


Para asegurarse de que el servicio esté correctamente configurado, use el complemento Servicios en Microsoft Management Console (MMC).

Error: (10/16/2019 10:02:52 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio NVIDIA LocalSystem Container terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 6000 milisegundos: Reiniciar el servicio.

Error: (10/16/2019 10:02:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Realtek Bluetooth Device Manager Service se terminó de manera inesperada. Esto ha sucedido 1 veces.


Windows Defender:
===================================
Date: 2019-10-15 22:25:27.072
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {DA2A9983-3A7A-4850-9F34-9189F5E697EA}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2019-10-15 21:42:34.454
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {E9726DF3-BAA3-454A-BF0E-52A6CD523ABB}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2019-10-15 21:26:41.869
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {ED5BD5BD-BB99-41A7-8971-68B5FE2A19BC}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2019-10-15 21:09:55.851
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {796DBAC0-79D2-4F52-8E96-F71633E8187B}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2019-10-14 15:37:48.439
Description: 
El examen de Antivirus de Windows Defender se detuvo antes de completarse.
Id. de examen: {A824C9A4-A67D-4A9D-AAB4-731E8931C34C}
Tipo de examen: Antimalware
Parámetros de examen: Examen completo
Usuario: Nadal\Nadal2016

Date: 2019-10-16 10:15:00.976
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.303.1787.0
Origen de actualización: Servidor de Microsoft Update
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.16400.2
Código de error: 0x8024402c
Descripción del error: Se produjo un problema inesperado mientras se buscaban actualizaciones. Para obtener más información sobre cómo instalar o solucionar problemas en las actualizaciones, consulte Ayuda y soporte técnico. 

Date: 2019-10-09 01:16:38.493
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.303.1200.0
Origen de actualización: Servidor de Microsoft Update
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.16400.2
Código de error: 0x80240438
Descripción del error: Se produjo un problema inesperado mientras se buscaban actualizaciones. Para obtener más información sobre cómo instalar o solucionar problemas en las actualizaciones, consulte Ayuda y soporte técnico. 

Date: 2019-09-06 01:34:42.617
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.301.623.0
Origen de actualización: Servidor de Microsoft Update
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.16300.1
Código de error: 0x80070643
Descripción del error: Error irrecuperable durante la instalación. 

Date: 2019-08-26 15:32:18.995
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.299.2230.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión actual del motor: 
Versión anterior del motor: 1.1.16200.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

Date: 2019-08-26 15:32:18.995
Description: 
Antivirus de Windows Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.299.2230.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión actual del motor: 
Versión anterior del motor: 1.1.16200.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

CodeIntegrity:
===================================

Date: 2019-10-16 09:54:00.014
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:57.118
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:57.006
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:56.796
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:54.453
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:54.415
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:54.382
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-10-16 09:53:52.932
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Memory info =========================== 

BIOS: American Megatrends Inc. 207 01/19/2015
Motherboard: ADVANTEC SA D15D
Processor: Intel(R) Core(TM) i7-5500U CPU @ 2.40GHz
Percentage of memory in use: 33%
Total physical RAM: 8106.91 MB
Available physical RAM: 5366.04 MB
Total Virtual: 10106.91 MB
Available Virtual: 7395.36 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:343.53 GB) (Free:227.81 GB) NTFS
Drive e: () (Fixed) (Total:586.78 GB) (Free:367.29 GB) NTFS

\\?\Volume{715a743e-05c0-11e6-824e-806e6f6e6963}\ (Reservado para el sistema) (Fixed) (Total:0.34 GB) (Free:0.07 GB) NTFS
\\?\Volume{f5749a81-0000-0000-0000-30f855000000}\ () (Fixed) (Total:0.85 GB) (Free:0.4 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: F5749A81)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=343.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=869 MB) - (Type=27)
Partition 4: (Not Active) - (Size=586.8 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================

Este fue el último, espero su respuesta.

[JavierHF]

Bien… y ahora sigue estos pasos, MUY Importante Realiza una copia de seguridad del registro :

• Para hacerlo descarga DelFix.exe(en tu escritorio).

• Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).

• Atención, ahora marca/selecciona únicamente la casilla Create registry backup, las demás casillas NO.

• Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

Con los demás programas cerrados ve a Inicio Ejecutar y escribe Notepad.exe.

• Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.

START
CREATERESTOREPOINT:
CLOSEPROCESSES:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Run: [Chromium] => c:\users\nadal2016\appdata\local\chromium\application\chrome.exe [829440 2017-02-15] (The Chromium Authors) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Task: {1A8D1F04-077E-4C48-829D-28E2781FDCDA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1873288 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {534CA769-D7BB-4723-A144-A94693673C02} - System32\Tasks\{17C29019-C27E-4D6F-9E58-95E947E7F04E} => C:\Windows\system32\pcalua.exe -a F:\menu.exe -d F:\
Task: {7F29EA44-D811-415A-9A9A-C52E50B70ADD} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {A7DC02F1-372F-4CEC-9267-3C8D8E87AF94} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {B247C302-DF57-4166-8268-7939F82A3205} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Nadal2016\Downloads\Limpieza\esetonlinescanner_esn.exe
Task: {D1610103-8729-47EA-B3D8-39EDB153FE01} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {D5B42CFE-7E1B-4A52-9A3B-7B489EC05AF1} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Nadal2016\Downloads\Limpieza\esetonlinescanner_esn.exe
HKU\S-1-5-21-90768385-593489369-457854222-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP
SearchScopes: HKU\S-1-5-21-90768385-593489369-457854222-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-90768385-593489369-457854222-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
2019-10-16 10:05 - 2017-09-28 19:55 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Guárdalo bajo el nombre de FIXLIST.TXT en el escritorio Esto es muy importante.

Nota Es importante que la herramienta FRST.exe(Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.

ATENCION!!! El siguiente Script de reparación fue hecho específicamente por un miembro del staff para este usuario, si tiene un problema similar por favor abra su propio tema para recibir ayuda personalizada. Usar Scripts de otros usuarios puede causar daños graves en su equipo

Y ahora usa el 2º MÉTODO: de esta Faq de Windows 8(aplicable a Windows 10) ¿Cómo iniciar Windows 8/8.1 en Modo Seguro?, para trabajar desde ese modo de windows.

• Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).

• Presionar el botón FIX y aguardar a que termine.

• La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).

Pegar el contenido de este fichero en tu próxima respuesta.

Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo, aquí tienes un ejemplo de como hacerlo :

Saludos.

[adn88sp]

Todos estos pasos debo hacerlos sin conexión y con el módem apagado otra vez? Obviamente después de descargar el DelFix.exe

[JavierHF]

Hola.

Debes hacerlos desde el modo seguro de windows y puedes dejar el modem/router APAGADO.

[adn88sp]

Informe DelFix

# DelFix v1.013 - Logfile created 16/10/2019 at 21:00:05
# Updated 17/04/2016 by Xplode
# Username : Nadal2016 - NADAL
# Operating System : Windows 10 Enterprise  (64 bits)

~ Creating registry backup ... OK

########## - EOF - ##########

Informe FIXLOG

Fix result of Farbar Recovery Scan Tool (x64) Version: 12-10-2019 02
Ran by Nadal2016 (16-10-2019 21:01:26) Run:1
Running from C:\Users\Nadal2016\Desktop
Loaded Profiles: Nadal2016 (Available Profiles: Nadal2016)
Boot Mode: Safe Mode (with Networking)
==============================================

fixlist content:
*****************
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> No File
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> No File
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> No File
HKU\S-1-5-21-90768385-593489369-457854222-1001\...\Run: [Chromium] => c:\users\nadal2016\appdata\local\chromium\application\chrome.exe [829440 2017-02-15] (The Chromium Authors) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Task: {1A8D1F04-077E-4C48-829D-28E2781FDCDA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1873288 2019-09-18] (AVAST Software s.r.o. -> AVAST Software)
Task: {534CA769-D7BB-4723-A144-A94693673C02} - System32\Tasks\{17C29019-C27E-4D6F-9E58-95E947E7F04E} => C:\Windows\system32\pcalua.exe -a F:\menu.exe -d F:\
Task: {7F29EA44-D811-415A-9A9A-C52E50B70ADD} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {A7DC02F1-372F-4CEC-9267-3C8D8E87AF94} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {B247C302-DF57-4166-8268-7939F82A3205} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Nadal2016\Downloads\Limpieza\esetonlinescanner_esn.exe
Task: {D1610103-8729-47EA-B3D8-39EDB153FE01} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {D5B42CFE-7E1B-4A52-9A3B-7B489EC05AF1} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Nadal2016\Downloads\Limpieza\esetonlinescanner_esn.exe
HKU\S-1-5-21-90768385-593489369-457854222-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE03&ocid=UE03DHP
SearchScopes: HKU\S-1-5-21-90768385-593489369-457854222-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-90768385-593489369-457854222-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
2019-10-16 10:05 - 2017-09-28 19:55 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************

Error: Restore point can only be created in normal mode.
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => removed successfully
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => removed successfully
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => removed successfully
HKLM\Software\Classes\CLSID\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => removed successfully
HKLM\Software\Classes\CLSID\{23170F69-40C1-278A-1000-000100020000} => not found
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => removed successfully
HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D} => not found
"HKU\S-1-5-21-90768385-593489369-457854222-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Chromium" => removed successfully
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{1A8D1F04-077E-4C48-829D-28E2781FDCDA}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1A8D1F04-077E-4C48-829D-28E2781FDCDA}" => removed successfully
C:\WINDOWS\System32\Tasks\Avast Software\Overseer => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Avast Software\Overseer" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{534CA769-D7BB-4723-A144-A94693673C02}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{534CA769-D7BB-4723-A144-A94693673C02}" => removed successfully
C:\WINDOWS\System32\Tasks\{17C29019-C27E-4D6F-9E58-95E947E7F04E} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{17C29019-C27E-4D6F-9E58-95E947E7F04E}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{7F29EA44-D811-415A-9A9A-C52E50B70ADD}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F29EA44-D811-415A-9A9A-C52E50B70ADD}" => removed successfully
C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineCore => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AvastUpdateTaskMachineCore" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A7DC02F1-372F-4CEC-9267-3C8D8E87AF94}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7DC02F1-372F-4CEC-9267-3C8D8E87AF94}" => removed successfully
C:\WINDOWS\System32\Tasks\AVAST Software\Avast settings backup => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVAST Software\Avast settings backup" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B247C302-DF57-4166-8268-7939F82A3205}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B247C302-DF57-4166-8268-7939F82A3205}" => removed successfully
C:\WINDOWS\System32\Tasks\EOSv3 Scheduler onTime => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EOSv3 Scheduler onTime" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D1610103-8729-47EA-B3D8-39EDB153FE01}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D1610103-8729-47EA-B3D8-39EDB153FE01}" => removed successfully
C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineUA => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AvastUpdateTaskMachineUA" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D5B42CFE-7E1B-4A52-9A3B-7B489EC05AF1}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D5B42CFE-7E1B-4A52-9A3B-7B489EC05AF1}" => removed successfully
C:\WINDOWS\System32\Tasks\EOSv3 Scheduler onLogOn => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EOSv3 Scheduler onLogOn" => removed successfully
HKU\S-1-5-21-90768385-593489369-457854222-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => value restored successfully
"HKU\S-1-5-21-90768385-593489369-457854222-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully
HKU\S-1-5-21-90768385-593489369-457854222-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => removed successfully
HKLM\Software\Classes\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => not found
C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat => moved successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\S-1-5-21-90768385-593489369-457854222-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer" => removed successfully
"HKU\S-1-5-21-90768385-593489369-457854222-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-90768385-593489369-457854222-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully


========= End of RemoveProxy: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= End of CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

No se puede realizar ninguna operaci¢n en Ethernet mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Wi-Fi mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local* 16 mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local* 17 mientras los medios
est‚n desconectados.

========= End of CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= End of CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

Unable to connect to BITS - 0x8007043c

========= End of CMD: =========


========= netsh advfirewall reset =========

Aceptar


========= End of CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar


========= End of CMD: =========


========= netsh int ipv4 reset =========

Reenv¡o de compartimiento se restableci¢ correctamente.
Compartimiento se restableci¢ correctamente.
Protocolo de control se restableci¢ correctamente.
Solicitud de secuencia eco se restableci¢ correctamente.
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente.
Direcciones de multidifusi¢n se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Posible se restableci¢ correctamente.
Directiva de prefijo se restableci¢ correctamente.
Vecino de proxy se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Prefijo de sitio se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Patr¢n de reactivaci¢n se restableci¢ correctamente.
Resolver vecino se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= End of CMD: =========


========= netsh int ipv6 reset =========

Reenv¡o de compartimiento se restableci¢ correctamente.
Compartimiento se restableci¢ correctamente.
Protocolo de control se restableci¢ correctamente.
Solicitud de secuencia eco se restableci¢ correctamente.
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente.
Direcciones de multidifusi¢n se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Posible se restableci¢ correctamente.
Directiva de prefijo se restableci¢ correctamente.
Vecino de proxy se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Prefijo de sitio se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Patr¢n de reactivaci¢n se restableci¢ correctamente.
Resolver vecino se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= End of CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10712012 B
Java, Flash, Steam htmlcache => 228401513 B
Windows/system/drivers => 591855 B
Edge => 72321 B
Chrome => 51022704 B
Firefox => 29124994 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 2830 B
Nadal2016 => 19905782 B

RecycleBin => 0 B
EmptyTemp: => 333.9 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 21:02:35 ====

Voy a probar la conexión por el momento y avisaré, si mejoró o sigue igual.

[adn88sp]

Gracias muchas gracias, hasta ahora funciona sin interrupción la conexión wifi, parece que todos los pasos funcionaron, me podría explicar cuál puede decir que fue el problema? Había algo instalado que perjudicó al sistema? Cuando lo decida puede cerrar el post. Otra vez, muchas gracias por la atención.

[JavierHF]

@adn88sp

Gracias muchas gracias, hasta ahora funciona sin interrupción la conexión wifi

Perfecto.

@adn88sp

parece que todos los pasos funcionaron

Necesito ver el informe que te pedí, para poder valorarlo y darte las últimas instrucciones que tienes que seguir en tu equipo.

Saludos.

[adn88sp]

Los informes los adjunte antes del último mensaje. Informe DelFix e Informe FIXLOG, pensé que ya lo había leído.

[JavierHF]

Perfecto excelente, nos alegra ver que ya está el problema inicial completamente arreglado, ahora solo queda eliminar las herramientas usadas.

Para hacerlo descarga DelFix.exe en tu escritorio.

• Doble clic para ejecutarlo. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador -).

• Marca todas las casillas, y pulsas en Run

Se abrirá el informe (DelFix.txt), puedes cerrarlo.

---

Para cualquier otro problema, no dudes en volver a postear., ya sabes dónde estamos.

Tema Solucionado.

Te recomendamos mantenerte informado en InfoSpyware Blog y siguiendo también nuestras vías de difusión E-Mail - Facebook - Twitter y Google+.

Saludos, Javier.