Problemas Windows Defender

[mikirru]

Hola buenas tardes , hacía tiempo que no tenia ningún problema, hoy he encendido el pc y el antivirus Windows Defender me esta dando problemas (pagina no disponible Administrador de TI) No consigo quitar el problema

Saludos: mikirru

[SanMar]

Hola @mikirru

Bienvenido al Foro!!!

Has instalado algún otro antivirus recientemente?

Nos comentas.

Salu2

[mikirru]

Hola buenos días, lo único que instale fue una impresora Epson, que instalo un antivirus y lo desinstale con Revo Unistaler, a los días me he dado cuenta que el Defender no iba bien estuve mirando los programas y me apareció (segurazo) lo desinstale con el Revo Unistaler pero en el Disco duro en programas me sigue apareciendo dicho programa. He intentado mandarlo ala papelera pero me pide permisos de administrador (hay me pierdo, no se como poder quitarlo) Saludos: mikirri

[SanMar]

Hola @mikirru

@mikirru

que instalo un antivirus y lo desinstale con Revo Unistaler

Mal hecho, los antivirus deben desinstalarse con herramientas especificas.

Cual fue ese Av?

@mikirru

a los días me he dado cuenta que el Defender no iba bien estuve mirando los programas y me apareció (segurazo) lo desinstale con el Revo Unistaler pero en el Disco duro en programas me sigue apareciendo dicho programa

No es un simple programa, es una gran infección.

---

Realiza lo siguiente:

1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

2.- Descarga, instala y/o actualiza a las siguientes herramientas:

• Malwarebytes Anti-Malware
• AdwCleaner
• ZHPCleaner
• CCleaner

3.- Ejecutas respetando el orden los pasos con todos los programas cerrados incluido los navegadores

Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas Ejecutar como Administrador para TODOS los programas.

CCleaner

Usando su opción Limpiador de acuerdo su Manual:

• Para borrar Cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.
• Cuando lo instales destilda las casillas para no permitir la instalación de Ccleaner Browser/Avast Browser o similar…
• NO necesitamos este reporte

AdwCleaner

Lo ejecutas.

• Pulsa en el botón Escanear y espera a que se realice el proceso. Luego pulsa sobre el botón Limpiar.
• Espera a que se complete. Si te pidiera reiniciar el sistema Aceptas.
• Guarda el reporte que le aparecerá para copiarlo y pegarlo en tu próxima respuesta.
• El informe también puede encontrarse en “C:\AdwCleaner\AdwCleaner.txt”

ZHPCleaner

• Siguiendo su manual, lo instalas y ejecutas. Cuando termine, elimina todo lo que encuentre.

Malwarebytes Versión 4

• Presiona clic en “Use Malewarebytes Free” (Usar Malewarebyte gratis).

• Pulsa en el botón “Open Malewarebytes Free”.

• Presiona el botón “Scan” (Escaneo).

Una vez finalizado el escaneo aparecerá la siguiente pantalla:

• Pulsa en “View report” (Ver informe).

• Luego presionar el botón “Export” (Exportar). Elijes “Text file” (fichero de texto). Elijes un nombre y guardas ese archivo en el escritorio…

4.- Nota Importante:

En tu próxima respuesta debes pegar los reportes de AdwCleaner , ZHPCleaner y Malwarebytes.

Guía: ¿Como Pegar reportes en el Foro?

Nos comentas.

Salu2

[mikirru]

Hola buenos días ,realizado todo lo que me habéis dicho para hacer

# Malwarebytes AdwCleaner 7.1.1.0
# -------------------------------
# Build:    04-27-2018
# Database: 2018-04-24.1
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    11-08-2019
# Duration: 00:00:10
# OS:       Windows 10 Home
# Scanned:  40734
# Detected: 1


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy             C:\Program Files (x86)\Common Files\freemake shared

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S08].txt ##########

~ ZHPCleaner v2019.11.3.156 by Nicolas Coolman (2019/11/03)
~ Run by Propietario (Administrator)  (08/11/2019 12:02:05)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : 
~ Type : Reparar
~ Report : C:\Users\Propietario\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\Propietario\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point : OK
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 18362)


---\\  Alternate Data Stream (ADS). (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Servicios (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Navegadores de Internet (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Hosts carpeta (1)
~ El archivo hosts es legítimo (21)


---\\  Tareas automáticas programadas. (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Explorador ( Archivos, Carpetas ) (11)
MOVIDO carpeta: C:\Windows\Prefetch\SEGURAZO.EXE-A0AFBD7C.pf    =>SUP.Optional.Segurazo
MOVIDO carpeta: C:\Windows\Prefetch\SEGURAZOCLIENT.EXE-1C334FE9.pf    =>SUP.Optional.Segurazo
MOVIDO carpeta: C:\Windows\Prefetch\SEGURAZOIC.EXE-BABC5F32.pf    =>SUP.Optional.Segurazo
MOVIDO carpeta: C:\Windows\Prefetch\SEGURAZOSERVICE.EXE-38D69393.pf    =>SUP.Optional.Segurazo
MOVIDO carpeta: C:\Windows\Prefetch\SEGURAZOUNINSTALLER.EXE-23769AFB.pf    =>SUP.Optional.Segurazo
MOVIDO archivo: C:\Program Files (x86)\Chromium  =>.SUP.Empty
MOVIDO archivo: C:\Program Files (x86)\Segurazo  =>SUP.Optional.Segurazo
MOVIDO archivo: C:\Program Files\KMSpico  =>HackTool.KMSpico
MOVIDO archivo: C:\ProgramData\Segurazo  =>SUP.Optional.Segurazo
MOVIDO archivo: C:\Users\Propietario\AppData\Local\MSfree Inc  =>HackTool.WinActivator
MOVIDO archivo: C:\Users\Propietario\AppData\Local\Solvusoft_Corporation  =>SUP.Optional.Solvusoft


---\\  Registro ( Claves, Valores, Datos) (1)
BORRADOS clave*: HKCU\Software\undefined [AdditionalScan 148]  =>.SUP.Downloader


---\\  Resumen de elementos en su estación de trabajo (6)
https://nicolascoolman.eu/2019/07/23/sup-segurazo/  =>SUP.Optional.Segurazo
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/  =>.SUP.Empty
https://nicolascoolman.eu/2017/02/16/hacktool-kmspico/  =>HackTool.KMSpico
https://nicolascoolman.eu/2017/01/13/hacktool-winactivator/  =>HackTool.WinActivator
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>SUP.Optional.Solvusoft
https://nicolascoolman.eu/2017/12/22/sup-downloader/  =>.SUP.Downloader


---\\ Limpieza adicional. (5)
~ Clave de registro Tracing borrados (5)
~ Quitar los antiguos informes de ZHPCleaner. (0)


---\\ Resultado de la reparación.
~ Reparación llevada a cabo con éxito
~ Internet Explorer OK
~ Opera OK


---\\ STATISTIQUES
~ Items escaneado : 2654
~ Items encontrado : 0
~ artículos cancelados : 0
~ Items opciones : 6/13
~ Ahorro de espacio (bytes) : 0


~ End of clean in 00h00mn09s

---\\  Reporte (3)
ZHPCleaner-[S]-08112019-11_27_43.txt
ZHPCleaner-[S]-08112019-11_57_28.txt
ZHPCleaner-[R]-08112019-12_02_14.txt


Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 8/11/19
Hora del análisis: 12:03
Archivo de registro: 65275dca-0217-11ea-af94-10e7c67981ed.json

-Información del software-
Versión: 4.0.4.49
Versión de los componentes: 1.0.718
Versión del paquete de actualización: 1.0.14664
Licencia: Gratis

-Información del sistema-
SO: Windows 10 (Build 18362.449)
CPU: x64
Sistema de archivos: NTFS
Usuario: PC-1547457620\Propietario

-Resumen del análisis-
Tipo de análisis: Análisis de amenazas
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 282684
Amenazas detectadas: 0
Amenazas en cuarentena: 0
Tiempo transcurrido: 1 min, 32 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Desactivado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 0
(No hay elementos maliciosos detectados)

Valor del registro: 0
(No hay elementos maliciosos detectados)

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 0
(No hay elementos maliciosos detectados)

Archivo: 0
(No hay elementos maliciosos detectados)

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)

Estos son los informes que habéis pedido, espero que os aclare las cosas .

Me gustaría que me aconsejarais un buen Antivirus

Estoy con el Malwarebytes Free

Saludos:

mikirru

[SanMar]

Hola @mikirru

Por el momento no instales ningún AV ni programa que no te indiquemos, ya te recomendare uno.

---

Realiza lo siguiente:

1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

2.- Descarga Farbar Recovery Scan Tool. en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de su equipo. >> Como saber si mi Windows es de 32 o 64 bits.?

• Ejecuta FRST.exe.
• En el mensaje de la ventana del Disclaimer, pulsamos Yes
• En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.
• Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Guía: Como Ejecutar FRST

3.- En tu próxima respuesta, pega los reportes generados.

Guía : ¿Como Pegar reportes en el Foro?

Esperamos esos reporte.

Salu2

[mikirru]

Hola os envío el Addition

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-04-2017 01
Ran by Propietario (08-11-2019 14:26:40)
Running from C:\Users\Propietario\Downloads
Windows 10 Home Version 1903 (X64) (2019-11-06 12:36:54)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-46111833-480644225-1942068361-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-46111833-480644225-1942068361-503 - Limited - Disabled)
Invitado (S-1-5-21-46111833-480644225-1942068361-501 - Limited - Disabled)
Propietario (S-1-5-21-46111833-480644225-1942068361-1000 - Administrator - Enabled) => C:\Users\Propietario
WDAGUtilityAccount (S-1-5-21-46111833-480644225-1942068361-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
7-Zip 18.05 (HKLM-x32\...\{23170F69-40C1-2701-1805-000001000000}) (Version: 18.05.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 19.021.20049 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.270 - Adobe)
Asistente para actualización a Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22899 - Microsoft Corporation)
BitComet 1.59 (HKLM-x32\...\BitComet_x64) (Version: 1.59 - CometNetwork)
BrytonUpdate (HKLM-x32\...\{CF4B3534-FBC1-496F-9B04-72C8F85C3B5D}_is1) (Version: 1.0 - BrytonSport, Inc.)
calibre 64bit (HKLM\...\{4D4D4686-D99D-4C19-AD38-CE7135518209}) (Version: 4.3.0 - Kovid Goyal)
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
CDBurnerXP (HKLM-x32\...\{5B448B73-1651-4FD8-8B94-ECCEB88929F1}) (Version: 4.5.8.6795 - Canneverbe Limited)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version:  - )
Desinstalar impresora EPSON XP-255 257 Series (HKLM\...\EPSON XP-255 257 Series) (Version:  - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{15F081E3-93FF-4FF3-B447-42CC458C4F79}) (Version: 3.11.0021 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version:  - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
Epson Software Updater (HKLM-x32\...\{FD036A57-F81D-4865-AAF0-811558EA76AE}) (Version: 4.5.1 - Seiko Epson Corporation)
Freemake Video Converter versión 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Mixbyte Inc.)
Google Chrome (HKLM\...\{6BE8C6A1-54E8-312E-A876-FF27463F3324}) (Version: 78.0.3904.87 - Google, Inc.)
Google Earth Pro (HKLM\...\{70A0F34E-564B-4F93-ADD6-3BAEC6E44075}) (Version: 7.3.2.5776 - Google)
Google Update Helper (x32 Version: 1.3.35.341 - Google LLC) Hidden
Google Update Helper (x32 Version: 1.3.99.0 - Google Inc.) Hidden
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6518 - Intel Corporation)
Malwarebytes version 4.0.4.49 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.0.4.49 - Malwarebytes)
Manuales de EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.56.1.0 - Seiko Epson Corporation)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft Office Profesional Plus 2016 - es-es (HKLM\...\ProplusRetail - es-es) (Version: 16.0.11126.20196 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-46111833-480644225-1942068361-1000\...\OneDriveSetup.exe) (Version: 19.174.0902.0013 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version:  - )
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version:  - )
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version:  - )
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version:  - )
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)
MyEpson Portal (x32 Version: 1.1.2.2 - SEIKO EPSON CORPORATION) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.11126.20196 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.11126.20196 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.11126.20196 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.11126.20196 - Microsoft Corporation) Hidden
OpenOffice 4.1.5 (HKLM-x32\...\{A93E0F8F-B3C1-4784-916D-15865808017B}) (Version: 4.15.9789 - Apache Software Foundation)
PDF Reader for Windows 10 (HKLM\...\PDF Reader for Windows 10_is1) (Version:  - PDFLogic Corporation)
Photo Common (HKLM-x32\...\{CAA0F57A-BA8C-4AD8-AA03-F32B0E4F5623}) (Version:  - )
Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version:  - )
Photo Gallery (HKLM-x32\...\{C992FFE0-AC32-4FA9-BC9A-F1637B9E655D}) (Version:  - )
Polar FlowSync versión 3.0.0.1337 (HKLM-x32\...\{A1538F5C-7B65-4DB6-9FFB-FFC0DF2E85D8}_is1) (Version: 3.0.0.1337 - Polar Electro Oy)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8734.1 - Realtek Semiconductor Corp.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Video to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version:  - Media Converters)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
VueScan x64 (HKLM\...\VueScan x64) (Version:  - Hamrick Software)
Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version:  - )
Windows Live Essentials (HKLM-x32\...\{66B5819D-DE70-42BE-B40F-978FBA12452E}) (Version:  - )
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version:  - )
Windows Live Mail (HKLM-x32\...\{BAD27F0E-5165-49A5-BE66-AF5BF73F2FEE}) (Version:  - )
Windows Live Messenger (HKLM-x32\...\{BAD984EE-790E-4513-A428-3BE2D426DCA7}) (Version:  - )
Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version:  - )
Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version:  - )
Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version:  - )
Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version:  - )
Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version:  - )
Windows Live UX Platform Language Pack (HKLM-x32\...\{6522F5F9-411B-4513-A75B-CEA00395F032}) (Version:  - )
Windows Live Writer (HKLM-x32\...\{A2DC527D-FA79-46E9-973F-920897CA55E9}) (Version:  - )
Windows Live Writer Resources (HKLM-x32\...\{0F974770-76EB-4C38-986E-E7BDD9C0DFC4}) (Version:  - )
Windows Movie Maker 2017 (HKLM-x32\...\{3CC29C1A-B5FE-457B-1234-32A2557A92C7}}_is1) (Version:  - winmoviemaker)
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-46111833-480644225-1942068361-1000_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\Propietario\AppData\Local\Microsoft\OneDrive\19.174.0902.0013\amd64\FileCoAuthLib64.dll (Microsoft Corporation)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {01FF7AC2-F59A-4FE5-98A1-1F74F96A3884} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2019-10-11] (Adobe)
Task: {083F3813-82BC-4622-A1B0-070C619B7D11} - System32\Tasks\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner => C:\WINDOWS\system32\mitigationscanner.exe [2019-03-19] (Microsoft Corporation)
Task: {09BEA9FD-4CC3-4ADA-A67D-A5FD8A2D0B6B} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_270_Plugin.exe [2019-10-11] (Adobe)
Task: {0A4F2A9C-72DD-4D5A-A7B1-4A0E917D58A6} - System32\Tasks\Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask
Task: {105D676A-D551-4274-81E7-97AC52E4FD87} - System32\Tasks\Microsoft\Windows\Speech\HeadsetButtonPress => C:\WINDOWS\system32\speech_onecore\common\SpeechRuntime.exe [2019-11-06] (Microsoft Corporation)
Task: {12B77A7C-1DDB-48D8-9A89-E91548474357} - System32\Tasks\Microsoft\Windows\USB\Usb-Notifications
Task: {191384C9-85A1-4EB2-81D4-48F5A0C6ACB7} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => C:\WINDOWS\System32\UNP\UpdateNotificationMgr.exe [2019-03-19] (Microsoft Corporation)
Task: {1F60E03E-B239-4810-8C89-26C443AC5B33} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2019-10-14] (Piriform Ltd)
Task: {316613E3-195B-4FFC-9B40-DE9208256E12} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2019-09-10] (Adobe Systems)
Task: {39754B36-BB7B-4578-959C-9DFB01B8967C} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2019-01-14] (Microsoft Corporation)
Task: {3D8E83D8-967E-44AC-8896-42CDEC763404} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdatesAsUser
Task: {3E7650E7-DBA3-4B90-8D84-4232AE8A029F} - System32\Tasks\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh
Task: {3EBAF09A-814C-4FB9-9F00-8BB931BFE845} - System32\Tasks\Microsoft\Windows\Chkdsk\SyspartRepair => C:\WINDOWS\system32\bcdboot.exe [2019-03-19] (Microsoft Corporation)
Task: {40378C7B-CE71-41E6-9B6F-EDE9D47789DE} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh
Task: {416FBFEF-09C2-4D51-9358-72205B2F5ED3} - System32\Tasks\Microsoft\Windows\BitLocker\BitLocker Encrypt All Drives
Task: {44D1E144-C1D2-4B08-A27E-CA22BD932693} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2019-01-14] (Google Inc.)
Task: {47B89A79-53D2-485E-AD87-148165B28519} - System32\Tasks\Microsoft\Windows\PushToInstall\Registration => Sc.exe start pushtoinstall registration
Task: {48F207D2-23BE-4F26-A115-B05B486F6CA6} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndScanForUpdates
Task: {499096C7-1E07-4EF2-8441-6A945874CB30} - System32\Tasks\Microsoft\Windows\DirectX\DirectXDatabaseUpdater => C:\WINDOWS\system32\directxdatabaseupdater.exe [2019-11-06] (Microsoft Corporation)
Task: {4A61BCE1-02FC-4F8D-AD7D-06CC80F2C130} - System32\Tasks\Microsoft\Windows\EDP\StorageCardEncryption Task
Task: {4DDF305C-E963-45BE-A8F0-DB2A76C9E03C} - System32\Tasks\Microsoft\Windows\EDP\EDP Inaccessible Credentials Task
Task: {55412461-F053-4583-A6BF-19F36DAAD46D} - System32\Tasks\Microsoft\Windows\InstallService\ScanForUpdates
Task: {600288A9-41DC-427C-913E-7412FAE10AB0} - System32\Tasks\Microsoft\Windows\SMB\UninstallSMB1ServerTask => powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Server"
Task: {613A083C-17CD-47F4-AC35-96FC308E59CF} - System32\Tasks\Microsoft\Windows\Workplace Join\Device-Sync
Task: {68560DFD-FC67-4EF8-BAA4-7F72211F3FD5} - System32\Tasks\Microsoft\Windows\DirectX\DXGIAdapterCache => C:\WINDOWS\system32\dxgiadaptercache.exe [2019-11-06] (Microsoft Corporation)
Task: {68EDE00F-F6CF-41C7-BF33-22E5510792A2} - System32\Tasks\Microsoft\Windows\SMB\UninstallSMB1ClientTask => powershell.exe -ExecutionPolicy Unrestricted -NonInteractive -NoProfile -WindowStyle Hidden "& %windir%\system32\WindowsPowerShell\v1.0\Modules\SmbShare\DisableUnusedSmb1.ps1 -Scenario Client"
Task: {6FFA775B-E7BB-4DE0-A8F8-EA6FA07E6B25} - System32\Tasks\Microsoft\Windows\LanguageComponentsInstaller\ReconcileLanguageResources
Task: {73CB9900-BD4D-4C69-9F68-6746AE3BB44B} - System32\Tasks\Microsoft\Windows\InstallService\SmartRetry
Task: {7544363C-0611-4579-8F5F-5F5ECFBB1FCE} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {7C8034B4-286F-4E86-AD41-4140C28A9604} - System32\Tasks\Microsoft\Windows\WaaSMedic\PerformRemediation
Task: {8339D371-629A-4E0C-8B79-B0477FC33E95} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceWnsFallback
Task: {8CE419DE-4815-423C-8287-51CEF62C7937} - System32\Tasks\Microsoft\Windows\WlanSvc\CDSSync
Task: {90C28B5C-2A50-48E1-9579-EEE75F1B1F2E} - System32\Tasks\Microsoft\Windows\StateRepository\MaintenanceTasks => Rundll32.exe %windir%\system32\Windows.StateRepositoryClient.dll,StateRepositoryDoMaintenanceTasks
Task: {93BF1B2D-981E-46AB-BB95-307105C603A3} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2019-01-14] (Microsoft Corporation)
Task: {9583F22D-931C-4367-B588-E199B6C36894} - System32\Tasks\EPSON XP-255 257 Series Update {4AF4DDDE-5A5B-4844-85A9-8082EE0AB51B} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVCE.EXE [2017-06-07] (Seiko Epson Corporation)
Task: {980F4AAB-7B11-4701-A62A-0C89CB0C2458} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2019-10-14] (Piriform Software Ltd)
Task: {9A103BC5-F32A-4773-BC79-06B7344B248F} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2019-01-14] (Microsoft Corporation)
Task: {9E42E54A-6BB4-4F7E-892C-2C5183F55B20} - System32\Tasks\Microsoft\Windows\Printing\EduPrintProv => C:\WINDOWS\system32\eduprintprov.exe [2019-03-19] (Microsoft Corporation)
Task: {A3CD0556-AB0B-45DE-9916-26EBC475930E} - System32\Tasks\Microsoft\Windows\Subscription\LicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2019-03-19] (Microsoft Corporation)
Task: {B708CB1F-A4D8-461A-904B-A3E7D351CF94} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2019-01-14] (Microsoft Corporation)
Task: {B8F0DEC7-8392-4F57-9990-74FCB934033F} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2019-03-19] ()
Task: {BBBF938C-7691-4A20-AB43-15C9CE7A3B13} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2019-01-02] (Microsoft Corporation)
Task: {CDDBEE09-A4E2-4FF0-9763-5E09E2762249} - System32\Tasks\Microsoft\Windows\Subscription\EnableLicenseAcquisition => C:\WINDOWS\system32\ClipRenew.exe [2019-03-19] (Microsoft Corporation)
Task: {D49D574B-BF33-4DF9-A417-9FBC8CEEE68B} - System32\Tasks\Microsoft\Windows\Flighting\OneSettings\RefreshCache
Task: {D8A50F3C-4BF2-46E9-B708-B51207C90FF2} - System32\Tasks\Microsoft\Windows\PushToInstall\LoginCheck => Sc.exe start pushtoinstall login
Task: {DACF6AD2-0908-427A-8D04-4540D28AD914} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2019-01-02] (Microsoft Corporation)
Task: {DBBAC212-3E26-4676-913B-E1C6452CFA32} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2019-01-14] (Microsoft Corporation)
Task: {DF8ABE54-47C9-4567-8DD0-36F92A2CC529} - System32\Tasks\Microsoft\Windows\InstallService\WakeUpAndContinueUpdates
Task: {E4AEB720-7F18-419F-A20E-6E0B5C4ED968} - System32\Tasks\Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged
Task: {EEE00BC5-2DD3-49DD-A681-F2FD3FF9BAC7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe [2019-01-14] (Microsoft Corporation)
Task: {F51EED70-C428-4635-BB74-9889FDE983BD} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2019-01-14] (Google Inc.)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EPSON XP-255 257 Series Update {4AF4DDDE-5A5B-4844-85A9-8082EE0AB51B}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVCE.EXE :/EXE:{4AF4DDDE-5A5B-4844-85A9-8082EE0AB51B} /F:Update  WORKGROUP\PC-1547457620$ ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2019-03-19 05:43 - 2019-03-19 05:43 - 00054960 _____ () C:\WINDOWS\System32\UMPDC.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01841152 _____ () C:\WINDOWS\system32\TextInputMethodFormatter.dll
2019-02-07 23:25 - 2019-08-26 16:01 - 00652536 _____ () C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX64.dll
2019-03-19 05:59 - 2019-03-19 13:02 - 00094720 _____ () C:\Windows\System32\VirtualMonitorManager.dll
2019-03-19 05:43 - 2019-03-19 05:43 - 00494592 _____ () C:\Windows\ShellExperiences\TileControl.dll
2019-11-06 16:25 - 2019-11-06 16:25 - 02880000 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00944144 _____ () C:\WINDOWS\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 01796608 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioEndpointBuilder => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AudioSrv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CBDHSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudAddService.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HdAudBus.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SerCx2.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\usbaudio.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Media"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96C-E325-11CE-BFC1-08002BE10318} => "SafeBootDrivers"="1"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioEndpointBuilder => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioSrv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CBDHSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudAddService.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HdAudBus.Sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetSetupSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SerCx2.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\usbaudio.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinQuic => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Media"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => "SafeBootDrivers"="1"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2018-04-12 00:38 - 2018-04-12 00:36 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-46111833-480644225-1942068361-1000\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 212.142.144.66
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKU\S-1-5-21-46111833-480644225-1942068361-1000\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [Microsoft-Windows-DeviceManagement-CertificateInstall-TCP-Out] => (Allow) %SystemRoot%\system32\dmcertinst.exe
FirewallRules: [Microsoft-Windows-DeviceManagement-deviceenroller-TCP-Out] => (Allow) %SystemRoot%\system32\deviceenroller.exe
FirewallRules: [Microsoft-Windows-DeviceManagement-OmaDmClient-TCP-Out] => (Allow) %SystemRoot%\system32\omadmclient.exe
FirewallRules: [{A226EC7F-EACD-4897-AE57-C226E4DD4E6A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{49069035-A045-45E8-BA14-296BF42DFFB2}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{BFD559CE-71F3-4DDB-A0EE-50CEB74D02DE}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
FirewallRules: [{73E53360-2B48-4EC2-8DEE-7F198A94B403}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{C5A20718-B6B6-4059-8021-D1FFCBE1696A}] => (Allow) C:\Program Files\VueScan\vuescan.exe
FirewallRules: [{DE37D3D6-B309-4DB2-A56F-251916359330}] => (Allow) C:\Program Files\VueScan\vuescan.exe
FirewallRules: [{35E8AC77-445F-4A74-BC19-C94EABDA829C}] => (Allow) LPort=1900
FirewallRules: [{CC2F13B8-CC83-4069-A7DA-19A94657909D}] => (Allow) LPort=2869
FirewallRules: [{4A269DDB-46F2-4290-BAA2-48EB859D8A89}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{13A7D11D-ED43-42FF-8089-2251570C8C39}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{136898EC-0EF8-490B-8EEE-3A5AEE1FC805}] => (Allow) C:\Program Files\BitComet\BitComet.exe
FirewallRules: [{6BAB83BC-CC72-47AB-B258-2D02AE8C16D5}] => (Allow) LPort=5354
FirewallRules: [{01FC83C6-840F-4287-869C-4F59C3FD068F}] => (Allow) LPort=5354
FirewallRules: [{4B840F0F-67DF-4876-806A-B429079FCD68}] => (Allow) LPort=5354
FirewallRules: [{0EC00B7D-FD26-4FEC-93AF-9020988C1F75}] => (Allow) LPort=5354
FirewallRules: [{2A5360CE-FB7B-41D0-8686-0CEA1E743D9E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe] => enabled:@shell32.dll,-1

==================== Restore Points =========================

06-11-2019 15:15:26 Windows Update
08-11-2019 12:01:44 ZHPcleaner

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (11/08/2019 02:19:38 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Error al generar el contexto de activación para "C:\Users\Propietario\AppData\Local\chromium\Application\chrome.exe".
No se encontró el ensamblado dependiente 63.0.3235.0,language="*",type="win32",version="63.0.3235.0".
Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (11/08/2019 11:48:07 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Error al generar el contexto de activación para "C:\Users\Propietario\AppData\Local\chromium\Application\chrome.exe".
No se encontró el ensamblado dependiente 63.0.3235.0,language="*",type="win32",version="63.0.3235.0".
Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (11/08/2019 11:44:37 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Error al generar el contexto de activación para "C:\Users\Propietario\AppData\Local\chromium\Application\chrome.exe".
No se encontró el ensamblado dependiente 63.0.3235.0,language="*",type="win32",version="63.0.3235.0".
Use sxstrace.exe para obtener un diagnóstico detallado.

Error: (11/08/2019 11:33:37 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: Morgan.exe, versión: 1.0.1.0, marca de tiempo: 0x5d325074
Nombre del módulo con errores: ntdll.dll, versión: 10.0.18362.387, marca de tiempo: 0xa4208572
Código de excepción: 0xc0000374
Desplazamiento de errores: 0x000df94d
Identificador del proceso con errores: 0x25cc
Hora de inicio de la aplicación con errores: 0x01d5961d0afdcd75
Ruta de acceso de la aplicación con errores: C:\Users\Propietario\AppData\Local\Programs\morgan\Morgan.exe
Ruta de acceso del módulo con errores: C:\WINDOWS\SYSTEM32\ntdll.dll
Identificador del informe: dd7732d8-c83d-45b5-b0c8-592b634d3e84
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (11/08/2019 11:33:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().

Details:
AddWin32ServiceFiles: Unable to back up image of service Avast Antivirus since QueryServiceConfig API failed

System Error:
El sistema no puede encontrar el archivo especificado.
.

Error: (11/08/2019 11:33:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().

Details:
AddWin32ServiceFiles: Unable to back up image of service aswbIDSAgent since QueryServiceConfig API failed

System Error:
El sistema no puede encontrar el archivo especificado.
.

Error: (11/08/2019 11:33:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswVmm.

System Error:
El sistema no puede encontrar el archivo especificado.
.

Error: (11/08/2019 11:33:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.

System Error:
El sistema no puede encontrar el archivo especificado.
.

Error: (11/08/2019 11:33:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswMonFlt.

System Error:
El sistema no puede encontrar el archivo especificado.
.

Error: (11/08/2019 11:33:24 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswRdr.

System Error:
El sistema no puede encontrar el archivo especificado.
.


System errors:
=============
Error: (11/08/2019 12:02:54 PM) (Source: DCOM) (EventID: 10000) (User: PC-1547457620)
Description: No se puede iniciar un servidor DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Error 
"2147942767"
al iniciar este comando:
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}

Error: (11/08/2019 11:47:09 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: El módulo de extensibilidad de WLAN se detuvo inesperadamente.

Ruta de acceso del módulo: C:\WINDOWS\system32\Rtlihvs.dll

Error: (11/08/2019 11:47:09 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: El módulo de extensibilidad de WLAN se detuvo inesperadamente.

Ruta de acceso del módulo: C:\WINDOWS\system32\Rtlihvs.dll

Error: (11/08/2019 11:47:07 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY)
Description: El módulo de extensibilidad de WLAN se detuvo inesperadamente.

Ruta de acceso del módulo: C:\WINDOWS\system32\Rtlihvs.dll

Error: (11/08/2019 11:47:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Intel(R) Content Protection HECI Service se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (11/08/2019 11:47:06 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Windows Presentation Foundation Font Cache 3.0.0.0 terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio.

Error: (11/08/2019 11:47:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Freemake Improver se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (11/08/2019 11:47:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio MyEpson Portal Service se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (11/08/2019 11:47:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Realtek Bluetooth Device Manager Service se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (11/08/2019 11:47:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Intel(R) Content Protection HDCP Service se terminó de manera inesperada. Esto ha sucedido 1 veces.


CodeIntegrity:
===================================
  Date: 2019-11-08 11:43:03.091
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-08 11:36:30.434
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-08 11:13:21.779
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

  Date: 2019-11-08 11:13:21.685
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

  Date: 2019-11-07 12:13:51.809
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-07 12:05:57.784
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-07 11:58:17.023
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-07 11:49:39.929
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-07 11:44:49.570
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.

  Date: 2019-11-07 11:39:13.973
  Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Segurazo\SInspector.dll that did not meet the Microsoft signing level requirements.


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i3-6006U CPU @ 2.00GHz
Percentage of memory in use: 26%
Total physical RAM: 8108.82 MB
Available physical RAM: 5948.59 MB
Total Virtual: 9388.82 MB
Available Virtual: 7476.45 MB

==================== Drives ================================

Drive c: (Sistema) (Fixed) (Total:237.2 GB) (Free:61.73 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 3AA33B6A)

Partition: GPT.

==================== End of Addition.txt ============================

El FRST no me deja enviarlo me dice que sobrepaso los 1600000 caracteres Veré que puedo hacer para enviarlo

Salu2

[mikirru]

Hola de nuevo voy a tener que enviarlo en dos veces

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-04-2017 01 ([color=red]ATTENTION: ====> FRSTversion is 935 days old and could be outdated[/color])
Ran by Propietario (administrator) on PC-1547457620 (08-11-2019 14:25:54)
Running from C:\Users\Propietario\Downloads
Loaded Profiles: Propietario (Available Profiles: Propietario)
Platform: Windows 10 Home Version 1903 (X64) Language: Español (España, internacional)
Internet Explorer Version 11 (Default browser: Edge)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

Failed to access process -> Registry
(Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxEM.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHDCPSvc.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHeciSvc.exe
(Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
() C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIVCE.EXE
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Microsoft Corporation) C:\Windows\System32\SgrmBroker.exe
(Microsoft Corporation) C:\Windows\System32\SecurityHealthService.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\WINDOWS\system32\SecurityHealthSystray.exe [84992 2019-03-19] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9277520 2019-06-20] (Realtek Semiconductor)
HKLM\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1312040 2018-12-04] (Seiko Epson Corporation)
HKU\S-1-5-21-46111833-480644225-1942068361-1000\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIVCE.EXE [416896 2017-09-22] (Seiko Epson Corporation)
HKU\S-1-5-21-46111833-480644225-1942068361-1000\...\Run: [Chromium] => c:\users\propietario\appdata\local\chromium\application\chrome.exe [4195328 2017-10-07] (The Chromium Authors)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX64.dll [2019-08-26] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX64.dll [2019-08-26] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX64.dll [2019-08-26] ()
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX32.dll [2019-08-26] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX32.dll [2019-08-26] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Propietario\AppData\Local\MEGAsync\ShellExtX32.dll [2019-08-26] ()
Startup: C:\Users\Propietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2019-04-18]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Propietario\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
GroupPolicy\User: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 212.142.144.66
Tcpip\..\Interfaces\{988ec0a9-b6aa-4124-9a19-97add44644a2}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{d44ab5be-1993-48b4-a814-08fc6e0442c6}: [DhcpNameServer] 212.142.144.66

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
SearchScopes: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> DefaultScope {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = 
SearchScopes: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://es.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wDesWS8nJeYe8J55oyTjT8eSdwmqWeDjPwhoclXzMKVyD%2BUaPn8tcphLSvVZpStC2roLMUpoSIQvZoqFM8nVr3IaxxG%2BQOxHpl6sVx4oUcCmZf%2B3204n2yaWh%2B3TgWqUL7s5iGdSTBJ98jAXVOAuUWT%2Fjq05Ge4mpeaV5G4twUg5ckCi32cIi8dgNCCsu4q9ShARlzxC3%2BdQTRZaqYpdDDGYBDhBtaBPfhrMZRiidr%2BXNOYrr07Nf8loxT3Hmw4L8l1ZuWDmuj1mEbWROpK1O2nw5clzCfY45UCqW9IffXiwzBXN%2Bg%2FeuDduywZUTrcR7A%3D%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> {0A33EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-01-14] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-14] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-14] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-14] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-14] (Microsoft Corporation)

Edge: 
======
Edge HomeButtonPage: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> about:start
Edge Extension: (No Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions [2019-03-19]
Edge Extension: (No Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets [2019-03-19]
Edge Extension: (No Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions [2019-03-19]
Edge Extension: (No Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions [2019-03-19]

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_270.dll [2019-10-11] ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_270.dll [2019-10-11] ()
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-01-14] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-06] (Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-06] (Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-11] (Adobe Systems Inc.)

Chrome: 
=======
CHR HomePage: Default -> hxxps://es.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wGhF4pomuaDUEjloxyc9Otuy7VrEwzU15hC3bzSKYIQuArNct%2B3QHqRVpO%2FzYovpd4fjRZIRYYYL4nCA4wNUOOegVz8zqIA6Gc8rB8JAlsm94LkW9lg%2FGx19AiwHKO2cnrfitgKwZi4Bl6S3DnI42v3XeTGNdC0QyBmeWeiSnkTIfsP%2F1vgDXKo%2BztfnRZtwFr%2F%2BS0CKXn4PqPWIWKkqkQYxCxmoqJVfEOBlqRcvqYFVLUO5m3yfnGupFS0Wtanr6ylcf%2BPBt2qfmPQ7bdVjy9ohS4erBmJEFYQ6caxbjGOMSK1hWlR4%2FHqAG%2BS5bm4%2FGg%3D%3D
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wGP5q83pjXDESI1qDlfEJynztAVtwO55tLoCusY6%2Fd%2FEP5B33x6DnxhEUIjH7BbPeUbXYIHM1rpAJs%2BU%2BbGTi0BrqD0MjaOfcApt3bYZKpPerxDrPsr0Tnq%2F5XPMqR0prp9VDf4FDrhrR7rrRXs6XQnZcZCY3dILV1H2A3xSPvr6wEfoEfRIXuyeKGTwhZLURn5GiAvMPcYATH5VtuseqUIcG%2Fvn50agsUcayi5HHXgyAAHjmaUa2u%2FVLTPJCjXHcWLanIMa065K2c3u9mg9pfQd3WjFllR0CGtDx16WUUY3CGW1sEl0%2F%2BxVj8jGM1f8Rg%3D%3D&p={searchTerms}
CHR DefaultSearchKeyword: Default -> search.yahoo.com
CHR DefaultNewTabURL: Default -> hxxps://es.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wDstfzOznhtU6QbZcOAeL%2FHBsc8fB6v1NDkzgqRwbfaja1%2FArdCiKaDKe4BHcFRjpEMX%2BlMRenNbdVXm5Yw2A2PP7nQ1aC4fUDqhaupfoWl4fwEwkIAdtiLTh9Ka3eEm8%2Bg0%2F2JFoXzi58PDE76CXAKFr70VGxrtGZsVfM3HBauyJuSl98LKaVO62m0WHQuERZVzXqu4WHEOIyoW7oC28KzzeoEzBdgsc35AWy1R6xiM7YcVYRBOnUXicgd9zw%2BYawV%2BetU2EGn3ZCndSDL%2B26wkFRKG8bWshclbWgo9lSm8pC8wqbiv2DHlaSULrXKMFA%3D%3D
CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
CHR Profile: C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default [2019-11-08]
CHR Extension: (Presentaciones) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-01-15]
CHR Extension: (Documentos) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-15]
CHR Extension: (Google Drive) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-01-15]
CHR Extension: (YouTube) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-15]
CHR Extension: (Hojas de cálculo) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-01-15]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-01-15]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-11]
CHR Extension: (Gmail) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-07-16]
CHR Extension: (Chrome Media Router) - C:\Users\Propietario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-10-23]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AarSvc; C:\WINDOWS\System32\AarSvc.dll [184832 2019-11-06] (Microsoft Corporation)
S3 AarSvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 AarSvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-10-11] (Adobe)
S3 autotimesvc; C:\WINDOWS\System32\autotimesvc.dll [116224 2019-03-19] (Microsoft Corporation)
S3 BcastDVRUserService; C:\WINDOWS\System32\BcastDVRUserService.dll [1392640 2019-03-19] (Microsoft Corporation)
S3 BcastDVRUserService_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 BcastDVRUserService_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
S3 BluetoothUserService; C:\WINDOWS\System32\Microsoft.Bluetooth.UserService.dll [534528 2019-11-06] (Microsoft Corporation)
S3 BluetoothUserService_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 BluetoothUserService_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
R2 BrokerInfrastructure; C:\WINDOWS\System32\psmsrv.dll [236544 2019-11-06] (Microsoft Corporation)
S3 BTAGService; C:\WINDOWS\System32\BTAGService.dll [1070080 2019-11-06] (Microsoft Corporation)
S3 BTAGService; C:\WINDOWS\SysWOW64\BTAGService.dll [700416 2019-11-06] (Microsoft Corporation)
R3 BthAvctpSvc; C:\WINDOWS\System32\BthAvctpSvc.dll [382976 2019-03-19] (Microsoft Corporation)
R3 camsvc; C:\WINDOWS\system32\CapabilityAccessManager.dll [344576 2019-06-12] (Microsoft Corporation)
S3 CaptureService; C:\WINDOWS\System32\CaptureService.dll [128000 2019-03-19] (Microsoft Corporation)
S3 CaptureService_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 CaptureService_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 cbdhsvc; C:\WINDOWS\System32\cbdhsvc.dll [1122816 2019-11-06] (Microsoft Corporation)
R3 cbdhsvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
R3 cbdhsvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9619616 2019-01-02] (Microsoft Corporation)
S3 ConsentUxUserSvc; C:\WINDOWS\System32\ConsentUxClient.dll [177152 2019-03-19] (Microsoft Corporation)
S3 ConsentUxUserSvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 ConsentUxUserSvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
R3 cphs; C:\WINDOWS\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHeciSvc.exe [508976 2019-02-25] (Intel Corporation)
R2 cplspcon; C:\WINDOWS\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHDCPSvc.exe [516136 2019-02-25] (Intel Corporation)
S3 CredentialEnrollmentManagerUserSvc; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [380120 2019-03-19] (Microsoft Corporation)
S3 CredentialEnrollmentManagerUserSvc_2c337; C:\WINDOWS\system32\CredentialEnrollmentManager.exe [380120 2019-03-19] (Microsoft Corporation)
S3 DeviceAssociationBrokerSvc; C:\WINDOWS\System32\deviceaccess.dll [231912 2019-03-19] (Microsoft Corporation)
S3 DeviceAssociationBrokerSvc; C:\WINDOWS\SysWOW64\deviceaccess.dll [185944 2019-03-19] (Microsoft Corporation)
S3 DeviceAssociationBrokerSvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 DeviceAssociationBrokerSvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 DevicePickerUserSvc; C:\WINDOWS\System32\Windows.Devices.Picker.dll [465920 2019-03-19] (Microsoft Corporation)
S3 DevicePickerUserSvc; C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll [338432 2019-03-19] (Microsoft Corporation)
S3 DevicePickerUserSvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 DevicePickerUserSvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 DevicesFlowUserSvc; C:\WINDOWS\System32\DevicesFlowBroker.dll [649728 2019-11-06] (Microsoft Corporation)
S3 DevicesFlowUserSvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 DevicesFlowUserSvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 diagsvc; C:\WINDOWS\system32\DiagSvc.dll [214528 2019-11-06] (Microsoft Corporation)
R2 DispBrokerDesktopSvc; C:\WINDOWS\System32\DispBroker.Desktop.dll [404992 2019-11-06] (Microsoft Corporation)
R3 DisplayEnhancementService; C:\WINDOWS\system32\Microsoft.Graphics.Display.DisplayEnhancementService.dll [1189376 2019-11-06] (Microsoft Corporation)
R2 DusmSvc; C:\WINDOWS\System32\dusmsvc.dll [358912 2019-03-19] (Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2017-11-13] (Seiko Epson Corporation)
R2 esifsvc; C:\WINDOWS\SysWOW64\esif_uf.exe [1392792 2018-07-10] (Intel Corporation)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2019-10-17] (Freemake)
S3 GoogleChromeElevationService; C:\Program Files (x86)\Google\Chrome\Application\78.0.3904.87\elevation_service.exe [1111704 2019-10-31] (Google LLC)
S3 GraphicsPerfSvc; C:\WINDOWS\System32\GraphicsPerfSvc.dll [97792 2019-03-19] (Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe [421216 2019-02-25] (Intel Corporation)
R3 InstallService; C:\WINDOWS\system32\InstallService.dll [2456064 2019-11-06] (Microsoft Corporation)
R3 InstallService; C:\WINDOWS\SysWOW64\InstallService.dll [1730560 2019-11-06] (Microsoft Corporation)
S3 IpxlatCfgSvc; C:\WINDOWS\System32\IpxlatCfg.dll [64512 2019-03-19] (Microsoft Corporation)
S3 LxpSvc; C:\WINDOWS\System32\LanguageOverlayServer.dll [317952 2019-03-19] (Microsoft Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2019-11-07] (Malwarebytes)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (Seiko Epson Corporation)
S3 NaturalAuthentication; C:\WINDOWS\System32\NaturalAuth.dll [831488 2019-03-19] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
S3 perceptionsimulation; C:\WINDOWS\system32\PerceptionSimulation\PerceptionSimulationService.exe [103424 2019-03-19] (Microsoft Corporation)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
S3 PrintWorkflowUserSvc; C:\WINDOWS\System32\PrintWorkflowService.dll [178688 2019-03-19] (Microsoft Corporation)
S3 PrintWorkflowUserSvc; C:\WINDOWS\SysWOW64\PrintWorkflowService.dll [141312 2019-03-19] (Microsoft Corporation)
S3 PrintWorkflowUserSvc_2c337; C:\WINDOWS\system32\svchost.exe [53744 2019-03-19] (Microsoft Corporation)
S3 PrintWorkflowUserSvc_2c337; C:\WINDOWS\SysWOW64\svchost.exe [45448 2019-03-19] (Microsoft Corporation)
S3 PushToInstall; C:\WINDOWS\system32\PushToInstall.dll [269824 2019-03-19] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [267552 2019-06-20] (Realtek Semiconductor)
R2 RtkBtManServ; C:\WINDOWS\RtkBtManServ.exe [703392 2019-08-22] (Realtek Semiconductor Corp.)
R3 SecurityHealthService; C:\WINDOWS\system32\SecurityHealthService.exe [913168 2019-11-06] (Microsoft Corporation)
S3 SEMgrSvc; C:\WINDOWS\system32\SEMgrSvc.dll [1270784 2019-03-19] (Microsoft Corporation)
R2 SgrmBroker; C:\WINDOWS\system32\SgrmBroker.exe [263904 2019-03-19] (Microsoft Corporation)
S3 SharedRealitySvc; C:\WINDOWS\System32\SharedRealitySvc.dll [472576 2019-11-06] (Microsoft Corporation)
S3 spectrum; C:\WINDOWS\system32\spectrum.exe [986112 2019-11-06] (Microsoft Corporation)
S4 ssh-agent; C:\WINDOWS\System32\OpenSSH\ssh-agent.exe [384512 2019-03-19] ()
R2 SynTPEnhService; C:\WINDOWS\System32\SynTPEnhService.exe [382008 2019-08-15] (Synaptics Incorporated)
R3 TokenBroker; C:\WINDOWS\System32\TokenBroker.dll [1497088 2019-11-06] (Microsoft Corporation)
R3 TokenBroker; C:\WINDOWS\SysWOW64\TokenBroker.dll [1244672 2019-11-06] (Microsoft Corporation)
S3 TroubleshootingSvc; C:\WINDOWS\system32\MitigationClient.dll [394752 2019-03-19] (Microsoft Corporation)
S3 tzautoupdate; C:\WINDOWS\SysWOW64\tzautoupdate.dll [72704 2019-11-06] (Microsoft Corporation)
R2 UsoSvc; C:\WINDOWS\system32\usosvc.dll [530944 2019-11-06] (Microsoft Corporation)
S3 VacSvc; C:\WINDOWS\System32\vac.dll [422192 2019-03-19] (Microsoft Corporation)
S3 WaaSMedicSvc; C:\WINDOWS\System32\WaaSMedicSvc.dll [355840 2019-11-06] (Microsoft Corporation)
S3 WarpJITSvc; C:\WINDOWS\System32\Windows.WARP.JITService.dll [61952 2019-03-19] (Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe [3201616 2019-10-28] (Microsoft Corporation)
S3 WFDSConMgrSvc; C:\WINDOWS\System32\wfdsconmgrsvc.dll [740352 2019-03-19] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe [103168 2019-10-28] (Microsoft Corporation)
S3 wisvc; C:\WINDOWS\SysWOW64\flightsettings.dll [729088 2019-11-06] (Microsoft Corporation)
S3 wlpasvc; C:\WINDOWS\System32\lpasvc.dll [1390080 2019-03-19] (Microsoft Corporation)
S3 WManSvc; C:\WINDOWS\system32\Windows.Management.Service.dll [868864 2019-11-06] (Microsoft Corporation)
S3 WpcMonSvc; C:\WINDOWS\System32\WpcDesktopMonSvc.dll [2120704 2019-11-06] (Microsoft Corporation)
S3 XboxGipSvc; C:\WINDOWS\System32\XboxGipSvc.dll [72704 2019-03-19] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Acx01000; C:\WINDOWS\System32\drivers\Acx01000.sys [337920 2019-03-19] (Microsoft Corporation)
R1 afunix; C:\WINDOWS\system32\drivers\afunix.sys [40960 2019-03-19] (Microsoft Corporation)
R1 afunix; C:\Windows\SysWOW64\drivers\afunix.sys [29696 2019-03-19] (Microsoft Corporation)
S3 amdgpio2; C:\WINDOWS\System32\drivers\amdgpio2.sys [18432 2019-03-19] (Advanced Micro Devices, Inc)
S3 amdi2c; C:\WINDOWS\System32\drivers\amdi2c.sys [37888 2019-03-19] (Advanced Micro Devices, Inc)
R1 bam; C:\WINDOWS\System32\drivers\bam.sys [70456 2019-03-19] (Microsoft Corporation)
R1 BasicDisplay; C:\WINDOWS\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_307898c750ba9e44\BasicDisplay.sys [68096 2019-11-06] (Microsoft Corporation)
R1 BasicRender; C:\WINDOWS\System32\DriverStore\FileRepository\basicrender.inf_amd64_ba2a8de08ea0d469\BasicRender.sys [37888 2019-11-06] (Microsoft Corporation)
S3 bindflt; C:\WINDOWS\system32\drivers\bindflt.sys [117048 2019-11-06] (Microsoft Corporation)
S3 BthLEEnum; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [97280 2019-03-19] (Microsoft Corporation)
S3 BthMini; C:\WINDOWS\System32\drivers\BTHMINI.sys [36864 2019-11-06] (Microsoft Corporation)
S0 bttflt; C:\WINDOWS\System32\drivers\bttflt.sys [42808 2019-03-19] (Microsoft Corporation)
R3 CAD; C:\WINDOWS\System32\drivers\CAD.sys [64312 2019-03-19] (Microsoft Corporation)
R2 CldFlt; C:\WINDOWS\System32\drivers\cldflt.sys [457216 2019-11-06] (Microsoft Corporation)
R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [52200 2018-07-10] (Intel Corporation)
R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [260072 2018-07-10] (Intel Corporation)
S3 genericusbfn; C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_b9c53b80e63af230\genericusbfn.sys [20992 2019-11-06] (Microsoft Corporation)
S3 hidspi; C:\WINDOWS\System32\drivers\hidspi.sys [64000 2019-11-06] (Microsoft Corporation)
S4 hvcrash; C:\WINDOWS\System32\drivers\hvcrash.sys [32568 2019-03-19] (Microsoft Corporation)
S3 HwNClx0101; C:\WINDOWS\System32\Drivers\mshwnclx.sys [28672 2019-03-19] (Microsoft Corporation)
S3 iaLPSS2i_GPIO2_BXT_P; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [93184 2019-03-19] (Intel Corporation)
S3 iaLPSS2i_GPIO2_CNL; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [112128 2019-03-19] (Intel Corporation)
S3 iaLPSS2i_GPIO2_GLK; C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [96256 2019-03-19] (Intel Corporation)
S3 iaLPSS2i_I2C_BXT_P; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [175104 2019-03-19] (Intel Corporation)
S3 iaLPSS2i_I2C_CNL; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [180736 2019-03-19] (Intel Corporation)
S3 iaLPSS2i_I2C_GLK; C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [177664 2019-03-19] (Intel Corporation)
R0 iaStorAC; C:\WINDOWS\System32\drivers\iaStorAC.sys [1096192 2019-08-12] (Intel Corporation)
S0 iaStorAVC; C:\WINDOWS\System32\drivers\iaStorAVC.sys [885048 2019-03-19] (Intel Corporation)
R3 igfx; C:\WINDOWS\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igdkmd64.sys [16161120 2019-02-25] (Intel Corporation)
R3 IntcDAud; C:\WINDOWS\System32\DriverStore\FileRepository\intcdaud.inf_amd64_78de84df29d43260\IntcDAud.sys [674352 2019-02-25] (Intel(R) Corporation)
S3 intelpmax; C:\WINDOWS\System32\drivers\intelpmax.sys [28672 2019-03-19] (Microsoft Corporation)
S3 IPT; C:\WINDOWS\System32\drivers\ipt.sys [54584 2019-03-19] (Microsoft Corporation)
S0 ItSas35i; C:\WINDOWS\System32\drivers\ItSas35i.sys [148520 2019-03-19] (Avago Technologies)
S3 mausbhost; C:\WINDOWS\System32\drivers\mausbhost.sys [535864 2019-03-19] (Microsoft Corporation)
S3 mausbip; C:\WINDOWS\System32\drivers\mausbip.sys [62264 2019-03-19] (Microsoft Corporation)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-11-07] (Malwarebytes)
S3 MbbCx; C:\WINDOWS\System32\drivers\MbbCx.sys [359424 2019-11-06] (Microsoft Corporation)
S0 megasas35i; C:\WINDOWS\System32\drivers\megasas35i.sys [94736 2019-03-19] (Avago Technologies)
S3 Microsoft_Bluetooth_AvrcpTransport; C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [64512 2019-03-19] (Microsoft Corporation)
S3 NDKPing; C:\WINDOWS\System32\drivers\NDKPing.sys [63488 2019-03-19] (Microsoft Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [187904 2019-03-19] (Microsoft Corporation)
S3 nvdimm; C:\WINDOWS\System32\drivers\nvdimm.sys [158520 2019-03-19] (Microsoft Corporation)
S3 PktMon; C:\WINDOWS\System32\drivers\PktMon.sys [96056 2019-03-19] (Microsoft Corporation)
S3 pmem; C:\WINDOWS\System32\drivers\pmem.sys [127800 2019-03-19] (Microsoft Corporation)
S3 portcfg; C:\WINDOWS\System32\drivers\portcfg.sys [25600 2019-03-19] (Microsoft Corporation)
S0 Ramdisk; C:\WINDOWS\System32\DRIVERS\ramdisk.sys [41784 2019-03-19] (Microsoft Corporation)
S3 rhproxy; C:\WINDOWS\System32\drivers\rhproxy.sys [113152 2019-03-19] (Microsoft Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Realtek                                            )
R3 RtkBtFilter; C:\WINDOWS\System32\drivers\RtkBtfilter.sys [784472 2019-08-22] (Realtek Semiconductor Corporation)
R3 RTWlanE; C:\WINDOWS\System32\drivers\rtwlane.sys [11438376 2019-03-29] (Realtek Semiconductor Corporation                           )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [33592 2019-03-19] (Microsoft Corporation)
R0 SgrmAgent; C:\WINDOWS\System32\drivers\SgrmAgent.sys [89096 2019-03-19] (Microsoft Corporation)
S0 SmartSAMD; C:\WINDOWS\System32\drivers\SmartSAMD.sys [220176 2019-03-19] (Microsemi Corportation)
R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [49208 2019-08-15] (Synaptics Incorporated)
S3 SpatialGraphFilter; C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys [76088 2019-03-19] (Microsoft Corporation)
S3 UcmUcsiAcpiClient; C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys [34816 2019-03-19] (Microsoft Corporation)
S3 UcmUcsiCx0101; C:\WINDOWS\System32\Drivers\UcmUcsiCx.sys [111104 2019-03-19] (Microsoft Corporation)
R3 UEFI; C:\WINDOWS\System32\DriverStore\FileRepository\uefi.inf_amd64_4fcaf0fc6eaf7533\UEFI.sys [32568 2019-11-06] (Microsoft Corporation)
S3 UfxChipidea; C:\WINDOWS\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_624eef84faf426d6\UfxChipidea.sys [108584 2019-11-06] (Microsoft Corporation)
R3 umbus; C:\WINDOWS\System32\DriverStore\FileRepository\umbus.inf_amd64_e566af5dd9858a0e\umbus.sys [57856 2019-11-06] (Microsoft Corporation)
S3 UrsChipidea; C:\WINDOWS\System32\DriverStore\FileRepository\urschipidea.inf_amd64_86da23c455846f41\urschipidea.sys [30224 2019-11-06] (Microsoft Corporation)
S3 UrsSynopsys; C:\WINDOWS\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_7302ce5d1420ed71\urssynopsys.sys [28472 2019-11-06] (Microsoft Corporation)
S3 usbaudio2; C:\WINDOWS\System32\drivers\usbaudio2.sys [257536 2019-11-06] (Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46472 2019-10-28] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [351968 2019-10-28] (Microsoft Corporation)
S3 WdmCompanionFilter; C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys [21816 2019-03-19] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-10-28] (Microsoft Corporation)
S3 WinNat; C:\WINDOWS\System32\drivers\winnat.sys [250880 2019-11-06] (Microsoft Corporation)
R3 WinQuic; C:\WINDOWS\System32\drivers\winquic.sys [205112 2019-06-12] (Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2019-08-06] (HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

NETSVC: PushToInstall -> C:\Windows\system32\PushToInstall.dll (Microsoft Corporation)
NETSVC: InstallService -> C:\Windows\system32\InstallService.dll (Microsoft Corporation)
NETSVC: TroubleshootingSvc -> C:\Windows\system32\MitigationClient.dll (Microsoft Corporation)
NETSVC: LxpSvc -> C:\Windows\System32\LanguageOverlayServer.dll (Microsoft Corporation)
NETSVC: WManSvc -> C:\Windows\system32\Windows.Management.Service.dll (Microsoft Corporation)
NETSVC: TokenBroker -> C:\Windows\System32\TokenBroker.dll (Microsoft Corporation)
NETSVC: XboxGipSvc -> C:\Windows\System32\XboxGipSvc.dll (Microsoft Corporation)
NETSVC: NaturalAuthentication -> C:\Windows\System32\NaturalAuth.dll (Microsoft Corporation)
NETSVCx32: TokenBroker -> C:\Windows\SysWOW64\TokenBroker.dll (Microsoft Corporation)

enseguida os envío el resto

Salu2

[mikirru]

ultima parte

C:\WINDOWS\system32\SharedRealitySvc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00467968 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00463272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00455680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00454736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00452408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiagn.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00450360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11on12.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00450048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00440256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00437760 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2PGraph.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00431448 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00429568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00428544 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2psvc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00422008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SgrmEnclave_secure.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00421376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2019-11-06 13:00 - 2019-11-06 13:00 - 00421376 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\system32\curl.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00417280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SessEnv.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2019-11-06 13:00 - 2019-11-06 13:00 - 00411136 _____ (Microsoft Corporation) C:\WINDOWS\system32\DavSyncProvider.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00406528 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00404992 _____ (Microsoft Corporation) C:\WINDOWS\system32\DispBroker.Desktop.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00404392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00387832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpps.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\provplatformdesktop.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00386048 _____ (curl, hxxps://curl.haxx.se/) C:\WINDOWS\SysWOW64\curl.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00383984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MMDevAPI.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00380216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00379840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ws2_32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00376832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webauthn.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00375808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00369664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxdiag.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00366184 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00362056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2PGraph.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnrpsvc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\secproc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00336928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DavSyncProvider.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00321024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00320512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFolder.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00317952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00316216 _____ (Microsoft Corporation) C:\WINDOWS\system32\computestorage.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00315392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxdiag.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00313344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd2x40.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WiFiDisplay.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00307200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00300184 _____ (Microsoft Corporation) C:\WINDOWS\system32\skci.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AnalogShell.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00285256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00283688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ttdwriter.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeunlock.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\coredpus.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00279040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00278080 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00274944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngctasks.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00270336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncryptprov.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00267528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00267496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\provplatformdesktop.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\glu32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00244736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndproxy.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\VideoHandlers.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00243712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Gpu.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpsrv.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00236520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cfgmgr32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\icm32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2019-11-06 13:00 - 2019-11-06 13:00 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCenter.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00222208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\P2P.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00210744 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00205312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\p2pnetsh.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00199480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\container.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00193592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00187920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ifsutil.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2019-11-06 13:00 - 2019-11-06 13:00 - 00185856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceCenter.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngOnline.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00178176 _____ (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetpp.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00176440 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlib.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\p2pnetsh.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00174080 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\P2P.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvinst.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00170920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xmllite.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NcaSvc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdpdr.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00167136 _____ (Microsoft Corporation) C:\WINDOWS\system32\vertdll.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountTokenProvider.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\glu32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00158208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxdav.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComposableShellProxyStub.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvcext.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00150328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00149512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ulib.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00145720 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-kernel-processor-power-events.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00143808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imm32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prntvpt.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00137864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devobj.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00135480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00135000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00132912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Display.BrightnessOverride.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ForceSync.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00129088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinHvPlatform.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00125232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00122880 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00120344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\profext.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00119296 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00116904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rmclient.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00114176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00110080 _____ C:\WINDOWS\system32\ResBParser.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00105984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\drvsetup.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00105832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OpenWith.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00100664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbkmcl.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00098592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Display.BrightnessOverride.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compstui.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00096032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcrypt.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00094208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00093104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpfve.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wanarp.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winhvr.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvvmtransport.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\offreg.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00078848 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComputerDefaults.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00077824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Groupinghc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzautoupdate.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\efsext.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00066832 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\findnetprinters.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvvmtransport.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ComputerDefaults.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ssdpapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coloradapterclient.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00062464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\system32\edpnotify.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offreg.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00058825 _____ C:\WINDOWS\system32\srms.dat
2019-11-06 13:00 - 2019-11-06 13:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devrtl.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnppolicy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00055296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efsext.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\findnetprinters.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ByteCodeGenerator.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edpnotify.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ddrawex.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInput.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInput1_4.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00042512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SysResetErr.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ddrawex.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\compact.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00037888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInputUap.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XInput1_4.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\enrollmentapi.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00035328 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdeui.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00033048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NtlmShared.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndistapi.sys
2019-11-06 13:00 - 2019-11-06 13:00 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecerts.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00026112 _____ (Microsoft Corporation)
C:\WINDOWS\SysWOW64\msimsg.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fvecerts.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00019984 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.exe
2019-11-06 13:00 - 2019-11-06 13:00 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winnlsres.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00016696 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizres.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d8thk.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00013824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDJPN.DLL
2019-11-06 13:00 - 2019-11-06 13:00 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDKOR.DLL
2019-11-06 13:00 - 2019-11-06 13:00 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00011576 _____ (Microsoft Corporation) C:\WINDOWS\system32\uxlibres.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kbd106.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCertResources.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3r.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3r.dll
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2019-11-06 13:00 - 2019-11-06 13:00 - 00000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2019-11-06 12:59 - 2019-11-06 12:59 - 07582752 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 04562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 04470784 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 04009472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03654656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03553280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03353088 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03327256 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03261440 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03184128 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03141120 _____ (Microsoft Corporation) C:\WINDOWS\system32\directml.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 03084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02656768 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02590208 _____ C:\WINDOWS\system32\dwmscene.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02466304 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02456064 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02249216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02114048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02069504 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 02000168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01940952 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01884200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConstraintIndex.Search.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01841152 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01830200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpserverbase.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01819136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01761792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01744400 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01743672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01717776 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01657856 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01635328 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01616608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdrecordcpu.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01607680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01601536 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01581056 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01543168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01512320 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 01505808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpbase.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01497088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01482040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 01480704 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01423872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01383856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01372160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01366128 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2019-11-06 12:59 - 2019-11-06 12:59 - 01337872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpx.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01332736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01301008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 01261800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01182240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 01180160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01158656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01150240 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Signals.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01091584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01084728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01084432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ReAgent.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01042944 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2019-11-06 12:59 - 2019-11-06 12:59 - 01036800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01029432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ClipSp.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 01023128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 01007120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00977688 _____ (Microsoft Corporation) C:\WINDOWS\system32\propsys.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00977408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcsvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00944664 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00916480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00913168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00890472 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00880088 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00878080 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2019-11-06 12:59 - 2019-11-06 12:59 - 00864256 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00858112 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00839680 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9on12.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00833312 _____ (Microsoft Corporation) C:\WINDOWS\system32\pkeyhelper.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00822416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00818656 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00817152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\PEAuth.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00811160 _____ C:\WINDOWS\SysWOW64\locale.nls
2019-11-06 12:59 - 2019-11-06 12:59 - 00811160 _____ C:\WINDOWS\system32\locale.nls
2019-11-06 12:59 - 2019-11-06 12:59 - 00810496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnrSvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00808960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00804880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00797112 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00771584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00759488 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00758584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00752792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00750080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.Search.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00732176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_StorageSense.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00731648 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00728576 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00722288 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00717312 _____ (Microsoft Corporation) C:\WINDOWS\system32\mousocoreworker.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00706760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscms.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00702464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00686080 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplicationFrame.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00680448 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngccredprov.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00676632 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00674072 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00670208 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00656960 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11on12.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00642208 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00640512 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00639400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00636416 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00617784 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00606112 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00596008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_9.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_PCDisplay.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00561680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Notifications.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00551952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Vid.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00544576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2019-11-06 12:59 - 2019-11-06 12:59 - 00533504 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00531976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2019-11-06 12:59 - 2019-11-06 12:59 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00524216 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00516408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00515896 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00481592 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcdedit.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00477696 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
2019-11-06 12:59 - 2019-11-06 12:59 - 00466416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00464384 _____ (Microsoft Corporation) C:\WINDOWS\system32\webauthn.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00449888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MMDevAPI.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00448000 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsEnvironment.Desktop.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00442704 _____ (Microsoft Corporation) C:\WINDOWS\system32\ws2_32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00437776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fltMgr.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00436536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00425472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00425264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00412152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00401208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00398728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininit.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00396288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00395776 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00392704 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00390456 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00388096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00386320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00379392 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00373248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00363624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00355000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelpep.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00353960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00350208 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncryptprov.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00342896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ttdwriter.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.BlueLightReduction.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00338800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00336960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSrvPolicyManager.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00334936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00331776 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ComposableShellProxyStub.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xboxgip.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00314368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wc_storage.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00310072 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00309760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00296976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00293376 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00293344 _____ (Microsoft Corporation) C:\WINDOWS\system32\cfgmgr32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkssvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\directxdatabaseupdater.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00284160 _____ (Microsoft Corporation) C:\WINDOWS\system32\container.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00283144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00282112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ngcpopkeysrv.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00268800 _____ (Microsoft Corporation) C:\WINDOWS\system32\ubpm.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00260920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00258048 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00257536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbaudio2.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_ManagePhone.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\system32\icm32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00252416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnservice.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00249656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\ManageCI.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00247856 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00245248 _____ (Microsoft Corporation) C:\WINDOWS\system32\wosc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\HttpsDataSource.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApproveChildRequest.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00237880 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00236032 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00233472 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BthA2dp.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountTokenProvider.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00225080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wof.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00223032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\intelppm.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00221696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgiadaptercache.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00220472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00214032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ifsutil.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00210400 _____ (Microsoft Corporation) C:\WINDOWS\system32\xmllite.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00208184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\processr.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\regapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00201016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdppm.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00199480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\amdk8.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00186880 _____ (Microsoft Corporation) C:\WINDOWS\system32\fcon.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00182288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00180536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wfplwfs.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00180240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pdc.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00180024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ulib.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\appsruprov.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00176152 _____ (Microsoft Corporation) C:\WINDOWS\system32\imm32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00165832 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00162384 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00160256 _____ (Microsoft Corporation) C:\WINDOWS\system32\appinfo.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00159112 _____ (Microsoft Corporation) C:\WINDOWS\system32\devobj.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00157752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rmclient.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00155648 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_AppExecutionAlias.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00153088 _____ (Microsoft Corporation) C:\WINDOWS\system32\dssvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00151568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_BackgroundApps.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00149504 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00147184 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00146416 _____ (Microsoft Corporation) C:\WINDOWS\system32\profext.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00144376 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcrypt.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00141840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00140496 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00138752 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmredir.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00132096 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinAUG.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00129848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mup.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsutil.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\drvsetup.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00123920 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdnet.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00121856 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00119840 _____ (Microsoft Corporation) C:\WINDOWS\system32\OpenWith.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00117048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bindflt.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00115120 _____ (Microsoft Corporation)

Salu2

[mikirru]

Ultima parte

C:\WINDOWS\system32\phoneactivate.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00109056 _____ (Microsoft Corporation) C:\WINDOWS\system32\vds_ps.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00107008 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShellExtFramework.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00106296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00102400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00092624 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskhostw.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00088488 _____ (Microsoft Corporation) C:\WINDOWS\system32\coloradapterclient.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00087048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00079376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\uaspstor.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwm.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00070144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\monitor.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo-overrides.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidspi.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ByteCodeGenerator.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\system32\devrtl.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00056832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInput.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00055304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00053248 _____ C:\WINDOWS\system32\Drivers\UsbPmApi.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00052752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmstorfl.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\XInputUap.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00047616 _____ C:\WINDOWS\system32\UsbPmApi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\devauthe.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00046632 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser_broker.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\compact.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cellulardatacapabilityhandler.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storvsc.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00043536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msfs.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00039304 _____ (Microsoft Corporation) C:\WINDOWS\system32\NtlmShared.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00037176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00028936 _____ (Microsoft Corporation) C:\WINDOWS\system32\vmbuspipe.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32_DeviceGuard.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\vdsldr.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ws2ifsl.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wci.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00023352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00020944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00019968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winnlsres.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmsgapi.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00019256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msisadrv.sys
2019-11-06 12:59 - 2019-11-06 12:59 - 00017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\bindflt.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\dstokenclean.exe
2019-11-06 12:59 - 2019-11-06 12:59 - 00003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCertResources.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2019-11-06 12:59 - 2019-11-06 12:59 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2019-11-06 12:54 - 2019-11-06 12:54 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2019-11-06 12:54 - 2019-11-06 12:54 - 00000000 ____D C:\Program Files\Reference Assemblies
2019-11-06 12:54 - 2019-11-06 12:54 - 00000000 ____D C:\Program Files\MSBuild
2019-11-06 12:54 - 2019-11-06 12:54 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2019-11-06 12:54 - 2019-11-06 12:54 - 00000000 ____D C:\Program Files (x86)\MSBuild
2019-11-06 12:54 - 2019-03-01 17:31 - 01166488 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2019-11-06 12:54 - 2019-03-01 17:31 - 00124568 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2019-11-06 12:54 - 2019-03-01 17:31 - 00035592 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2019-11-06 12:54 - 2019-02-05 18:41 - 00778912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2019-11-06 12:54 - 2019-02-05 18:41 - 00103072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2019-11-06 12:54 - 2019-02-05 18:41 - 00035592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2019-11-06 12:34 - 2019-11-07 11:55 - 00000000 ___DC C:\WINDOWS\Panther
2019-11-06 12:22 - 2019-11-06 12:34 - 00000036 _____ C:\WINDOWS\progress.ini
2019-11-06 12:22 - 2019-11-06 12:30 - 00000000 ___HD C:\$GetCurrent
2019-11-06 10:44 - 2019-11-06 12:22 - 00000000 ____D C:\Windows10Upgrade
2019-11-06 10:44 - 2019-11-06 12:10 - 00000738 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Asistente para actualización a Windows 10.lnk
2019-10-31 12:14 - 2019-10-31 12:14 - 00000000 ____D C:\Users\Propietario\Documents\Plantillas personalizadas de Office
2019-10-28 17:35 - 2019-10-28 17:35 - 03950199 _____ C:\Users\Propietario\Downloads\3E_01T_Sistemas_Automaticos_ES (1).pdf
2019-10-28 17:17 - 2019-10-28 17:17 - 07470118 _____ C:\Users\Propietario\Downloads\3E_01T_Presentacion_Sistemas_Automaticos__ES.pdf
2019-10-28 17:16 - 2019-10-28 17:16 - 03950199 _____ C:\Users\Propietario\Downloads\3E_01T_Sistemas_Automaticos_ES.pdf
2019-10-23 16:34 - 2019-10-24 08:34 - 00000000 ____D C:\Users\Propietario\AppData\Local\Avg
2019-10-23 10:28 - 2019-11-06 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2019-10-22 16:58 - 2019-10-22 16:58 - 00000000 ____D C:\Users\Propietario\AppData\Local\calibre-ebook.com
2019-10-21 19:56 - 2019-10-21 19:56 - 00001140 _____ C:\Users\Public\Desktop\MyEpson Portal.lnk
2019-10-21 19:56 - 2019-10-21 19:56 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\Epson
2019-10-21 19:42 - 2019-11-06 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON Software
2019-10-21 19:42 - 2019-10-21 19:57 - 00000000 ____D C:\Program Files (x86)\EPSON Software
2019-10-21 19:42 - 2019-10-21 19:42 - 00001160 _____ C:\Users\Public\Desktop\Manuales de EPSON.lnk
2019-10-21 19:42 - 2019-10-21 19:42 - 00000123 _____ C:\Users\Public\Desktop\Epson Connect Site.url
2019-10-21 19:41 - 2019-10-21 19:57 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2019-10-21 19:40 - 2019-11-06 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
2019-10-21 19:40 - 2019-10-22 16:48 - 00000947 _____ C:\WINDOWS\Tasks\EPSON XP-255 257 Series Update {4AF4DDDE-5A5B-4844-85A9-8082EE0AB51B}.job
2019-10-21 19:40 - 2019-10-21 19:57 - 00000000 ____D C:\Program Files (x86)\epson
2019-10-21 19:40 - 2019-10-21 19:40 - 00001241 _____ C:\Users\Public\Desktop\Epson Scan 2.lnk
2019-10-21 19:40 - 2019-10-21 19:40 - 00000000 ____D C:\Program Files\Common Files\EPSON
2019-10-21 19:40 - 2017-11-13 13:52 - 00147472 _____ (TWAIN Working Group) C:\WINDOWS\SysWOW64\twaindsm.dll
2019-10-21 19:40 - 2017-11-13 13:52 - 00145224 _____ (Seiko Epson Corporation) C:\WINDOWS\system32\escsvc64.exe
2019-10-21 19:38 - 2019-10-21 19:56 - 00000000 ____D C:\ProgramData\Epson
2019-10-19 16:34 - 2019-11-06 13:31 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2019-10-19 16:34 - 2019-11-06 13:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2019-10-19 16:34 - 2019-10-19 16:35 - 00000000 ____D C:\Users\Propietario\Documents\Freemake
2019-10-19 16:34 - 2019-10-19 16:35 - 00000000 ____D C:\ProgramData\Freemake
2019-10-19 16:34 - 2019-10-19 16:34 - 00001396 _____ C:\Users\Public\Desktop\Freemake Video Converter.lnk
2019-10-19 16:33 - 2019-10-19 16:34 - 00000000 ____D C:\Program Files (x86)\Freemake
2019-10-19 12:27 - 2019-10-19 12:27 - 00000000 ____D C:\Users\Propietario\AppData\Local\FreemakeVideoConverter

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-11-08 14:23 - 2019-03-19 12:59 - 00791070 _____ C:\WINDOWS\system32\perfh00A.dat
2019-11-08 14:23 - 2019-03-19 12:59 - 00156308 _____ C:\WINDOWS\system32\perfc00A.dat
2019-11-08 14:23 - 2019-03-19 05:50 - 00000000 ____D C:\WINDOWS\INF
2019-11-08 14:19 - 2019-03-19 05:52 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-11-08 14:19 - 2019-01-14 09:38 - 00000000 __SHD C:\Users\Propietario\IntelGraphicsProfiles
2019-11-08 13:12 - 2019-03-05 21:00 - 00000000 ___HD C:\Users\Propietario\Documents\Biblioteca de calibre
2019-11-08 13:09 - 2019-03-05 21:00 - 00001006 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2019-11-08 13:09 - 2019-03-05 21:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2019-11-08 13:09 - 2019-03-05 21:00 - 00000000 ____D C:\Program Files\Calibre2
2019-11-08 13:02 - 2019-01-16 17:10 - 00000000 ____D C:\Users\Propietario\Documents\Larraitz
2019-11-08 12:47 - 2018-07-26 22:36 - 00000000 ___RD C:\Users\Propietario\OneDrive
2019-11-08 12:45 - 2019-03-19 05:37 - 00262144 _____ C:\WINDOWS\system32\config\BBI
2019-11-08 12:34 - 2019-01-16 17:12 - 00000000 ____D C:\Users\Propietario\Documents\Mitxel
2019-11-08 12:02 - 2019-01-25 12:13 - 00000000 ____D C:\Users\Propietario\AppData\Local\CrashDumps
2019-11-08 11:44 - 2019-01-25 12:02 - 00000000 ____D C:\Program Files\Common Files\AVAST Software
2019-11-08 11:12 - 2019-03-19 05:52 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2019-11-08 10:52 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\AppReadiness
2019-11-08 10:50 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\appcompat
2019-11-06 19:41 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2019-11-06 19:05 - 2019-03-19 05:52 - 00000000 ___HD C:\Program Files\WindowsApps
2019-11-06 19:05 - 2018-07-26 22:30 - 00000000 ____D C:\Users\Propietario\AppData\Local\Packages
2019-11-06 18:01 - 2019-02-10 12:52 - 00000000 ____D C:\Users\Propietario\AppData\Local\D3DSCache
2019-11-06 17:21 - 2019-01-14 14:53 - 00000000 ____D C:\Users\Propietario\AppData\Local\PlaceholderTileLogoFolder
2019-11-06 17:21 - 2019-01-14 13:09 - 00000000 ____D C:\ProgramData\Packages
2019-11-06 16:33 - 2018-07-26 22:30 - 00000000 __RHD C:\Users\Public\AccountPictures
2019-11-06 16:33 - 2018-07-26 22:30 - 00000000 ___RD C:\Users\Propietario\3D Objects
2019-11-06 16:33 - 2018-07-26 22:29 - 00000000 ____D C:\Users\Propietario\AppData\Local\ConnectedDevicesPlatform
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ___RD C:\WINDOWS\PrintDialog
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\SystemResources
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\en-GB
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\appraiser
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\ShellExperiences
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\ShellComponents
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\DiagTrack
2019-11-06 16:29 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\bcastdvr
2019-11-06 16:29 - 2019-03-19 05:37 - 00000000 ____D C:\WINDOWS\servicing
2019-11-06 16:29 - 2019-03-19 05:37 - 00000000 ____D C:\WINDOWS\CbsTemp
2019-11-06 16:13 - 2018-04-12 00:38 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2019-11-06 15:18 - 2019-01-14 09:43 - 03817239 _____ C:\WINDOWS\system32\Drivers\rtkhdasetting.zip
2019-11-06 15:18 - 2019-01-14 09:43 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2019-11-06 13:37 - 2019-03-19 05:52 - 00000000 ____D C:\ProgramData\USOPrivate
2019-11-06 13:36 - 2019-03-19 05:52 - 00000000 ____D C:\Program Files\Windows Defender
2019-11-06 13:36 - 2019-03-19 05:37 - 00032768 _____ C:\WINDOWS\system32\config\ELAM
2019-11-06 13:35 - 2019-01-14 09:42 - 00002306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-11-06 13:35 - 2019-01-14 09:42 - 00002265 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-11-06 13:32 - 2019-04-18 11:45 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2019-11-06 13:32 - 2019-01-14 09:43 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-11-06 13:26 - 2019-08-25 18:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF Reader for Windows 10
2019-11-06 13:26 - 2019-06-19 16:19 - 00000000 ____D C:\Program Files\UNP
2019-11-06 13:26 - 2019-04-11 10:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 __RHD C:\Users\Public\Libraries
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\spool
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\oobe
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\NDF
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\Macromed
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\ServiceState
2019-11-06 13:26 - 2019-03-19 05:52 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2019-11-06 13:26 - 2019-03-19 05:49 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2019-11-06 13:26 - 2019-03-18 10:33 - 00000000 ____D C:\WINDOWS\en
2019-11-06 13:26 - 2019-03-01 10:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video to Video
2019-11-06 13:26 - 2019-01-16 16:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2019-11-06 13:26 - 2019-01-15 20:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BrytonUpdate
2019-11-06 13:26 - 2019-01-14 11:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office
2019-11-06 13:26 - 2019-01-14 09:43 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.5
2019-11-06 13:26 - 2019-01-14 09:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2019-11-06 13:26 - 2019-01-14 09:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2019-11-06 13:26 - 2019-01-14 09:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP
2019-11-06 13:26 - 2019-01-14 09:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2019-11-06 13:26 - 2019-01-14 09:38 - 00000000 ____D C:\Program Files\Intel
2019-11-06 13:26 - 2019-01-14 09:38 - 00000000 ____D C:\Program Files (x86)\Intel
2019-11-06 13:26 - 2018-09-15 08:33 - 00000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2019-11-06 13:26 - 2018-09-15 08:33 - 00000000 ____D C:\WINDOWS\system32\MsDtc
2019-11-06 13:26 - 2018-07-26 22:36 - 00000000 ____D C:\WINDOWS\system32\MRT
2019-11-06 13:07 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2019-11-06 13:07 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\Resources
2019-11-06 13:07 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\Help
2019-11-06 13:07 - 2019-01-15 20:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Polar
2019-11-06 13:07 - 2019-01-14 09:43 - 00000000 ____D C:\WINDOWS\system32\SRSLabs
2019-11-06 13:07 - 2019-01-14 09:43 - 00000000 ____D C:\Program Files\Realtek
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ___SD C:\WINDOWS\system32\DiagSvcs
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\TextInput
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\SysWOW64\oobe
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\WinMetadata
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\migwiz
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\Dism
2019-11-06 13:04 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\Provisioning
2019-11-06 13:03 - 2019-03-19 13:02 - 00021504 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2019-11-06 13:03 - 2019-03-19 13:02 - 00018903 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2019-11-06 12:54 - 2019-03-19 05:56 - 00000000 ____D C:\WINDOWS\Setup
2019-11-06 12:54 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2019-11-06 12:54 - 2019-03-19 05:52 - 00000000 ____D C:\WINDOWS\system32\MUI
2019-11-06 10:32 - 2019-01-14 09:42 - 00000000 ____D C:\Program Files (x86)\Google
2019-10-28 21:42 - 2018-07-26 22:27 - 00000000 ____D C:\WINDOWS\system32\Drivers\wd
2019-10-28 17:24 - 2019-01-14 09:42 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-10-24 08:57 - 2019-01-16 17:57 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\vlc
2019-10-23 10:28 - 2019-04-21 10:47 - 00000860 _____ C:\Users\Public\Desktop\BitComet.lnk
2019-10-23 10:28 - 2019-01-25 12:00 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\BitComet
2019-10-22 16:58 - 2019-03-05 21:00 - 00000000 ____D C:\Users\Propietario\AppData\Roaming\calibre
2019-10-22 16:58 - 2019-01-16 16:54 - 00000000 ____D C:\Users\Propietario\AppData\Local\calibre-cache
2019-10-20 18:11 - 2019-01-16 15:26 - 00000000 ____D C:\Users\Propietario\AppData\Local\ElevatedDiagnostics
2019-10-19 11:54 - 2019-04-11 10:08 - 00000000 ____D C:\Users\Propietario\AppData\Local\Windows Live
2019-10-15 18:10 - 2019-01-16 17:37 - 00000000 ____D C:\Users\Propietario\AppData\Local\Adobe
2019-10-14 10:08 - 2019-04-18 11:47 - 00000000 ____D C:\Users\Propietario\Documents\MEGAsync Downloads
2019-10-11 16:23 - 2018-07-26 22:36 - 127230528 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Files in the root of some directories =======

2019-01-16 16:04 - 2019-01-16 17:27 - 0006956 _____ () C:\ProgramData\hpzinstall.log
2019-03-15 13:15 - 2019-03-15 13:15 - 0000016 _____ () C:\ProgramData\mntemp
2019-03-15 13:15 - 2019-03-15 13:15 - 0012716 _____ () C:\ProgramData\sokqucqi.nri

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
C:\WINDOWS\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION

==================== End of FRST.txt ============================

Me ha costado pero lo he enviado todo espero que os haya llegado

Salu2: mikirru

[SanMar]

Hola @mikirru

Dos cuestiones:

Ejecutaste una versión de FRST muy antigua que tienes instalado en tu ordenador:

• ATTENTION: ====> FRSTversion is 935 days old and could be outdated

Elimina ese ejecutable que tienes en la carpeta descargas:

• Running from C:\Users\Propietario\Downloads

Vacias la papelera y descargas un nuevo ejecutable desde el enlace que anteriormente te deje.

Eso si, siguiendo mis pasos debes descargarlo y ejecutarlo a y desde tu escritorio. <<< Esto es muy importante

Para pegar los reportes intenta con el Método 4 de la Guia:

@SanMar

Guía : ¿Como Pegar reportes en el Foro?

Salu2

[mikirru]

Hola del enlace que tu me enviaste me descarga este archivo y no consigo el FRST 24.10.2018

Saludos

[mikirru]

Hola informes FRST Addition.txt (28,1 KB)

FRST.txt (182,9 KB)

Espero que este bien Como te he escrito antes de link se me baja este ejecutable Saludos

[SanMar]

Hola @mikirru

Ahora si los informes están correctos con la versión correcta.

Analizo los reportes y te dejo respuesta.

Salu2

[SanMar]

Hola @mikirru

Sigue estos pasos:

1.- Muy Importante >>> Realizar una copia de Seguridad de su Registro.

• Descarga DelFix en el escritorio de Windows.
• Clic Derecho, “Ejecutar como Administrador”.
• En la ventana principal, marca solamente la casilla “Create Registry Backup”.
• Clic en Run.

Al terminar se abrirá un reporte llamado DelFix.txt, guárdelo por si fuera necesario y cierre la herramienta…

2.- Desactiva Temporalmente tu antivirus.

3.- Abre un nuevo archivo Notepad/Bloc de Notas y copia y pega este contenido:

Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
C:\Program Files\AVAST Software
GroupPolicy\User: Restriction ? <==== ATTENTION
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
Task: {4C26C162-F5FB-4C74-BA00-76E7B2775E63} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
SearchScopes: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> DefaultScope {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = 
SearchScopes: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://es.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wDesWS8nJeYe8J55oyTjT8eSdwmqWeDjPwhoclXzMKVyD%2BUaPn8tcphLSvVZpStC2roLMUpoSIQvZoqFM8nVr3IaxxG%2BQOxHpl6sVx4oUcCmZf%2B3204n2yaWh%2B3TgWqUL7s5iGdSTBJ98jAXVOAuUWT%2Fjq05Ge4mpeaV5G4twUg5ckCi32cIi8dgNCCsu4q9ShARlzxC3%2BdQTRZaqYpdDDGYBDhBtaBPfhrMZRiidr%2BXNOYrr07Nf8loxT3Hmw4L8l1ZuWDmuj1mEbWROpK1O2nw5clzCfY45UCqW9IffXiwzBXN%2Bg%2FeuDduywZUTrcR7A%3D%3D&p={searchTerms}
SearchScopes: HKU\S-1-5-21-46111833-480644225-1942068361-1000 -> {0A33EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.342\npGoogleUpdate3.dll [2019-11-06] (Google Inc -> Google LLC)
FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-08-14] (VideoLAN -> VideoLAN)
CHR HomePage: Default -> hxxps://es.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wGhF4pomuaDUEjloxyc9Otuy7VrEwzU15hC3bzSKYIQuArNct%2B3QHqRVpO%2FzYovpd4fjRZIRYYYL4nCA4wNUOOegVz8zqIA6Gc8rB8JAlsm94LkW9lg%2FGx19AiwHKO2cnrfitgKwZi4Bl6S3DnI42v3XeTGNdC0QyBmeWeiSnkTIfsP%2F1vgDXKo%2BztfnRZtwFr%2F%2BS0CKXn4PqPWIWKkqkQYxCxmoqJVfEOBlqRcvqYFVLUO5m3yfnGupFS0Wtanr6ylcf%2BPBt2qfmPQ7bdVjy9ohS4erBmJEFYQ6caxbjGOMSK1hWlR4%2FHqAG%2BS5bm4%2FGg%3D%3D
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wGP5q83pjXDESI1qDlfEJynztAVtwO55tLoCusY6%2Fd%2FEP5B33x6DnxhEUIjH7BbPeUbXYIHM1rpAJs%2BU%2BbGTi0BrqD0MjaOfcApt3bYZKpPerxDrPsr0Tnq%2F5XPMqR0prp9VDf4FDrhrR7rrRXs6XQnZcZCY3dILV1H2A3xSPvr6wEfoEfRIXuyeKGTwhZLURn5GiAvMPcYATH5VtuseqUIcG%2Fvn50agsUcayi5HHXgyAAHjmaUa2u%2FVLTPJCjXHcWLanIMa065K2c3u9mg9pfQd3WjFllR0CGtDx16WUUY3CGW1sEl0%2F%2BxVj8jGM1f8Rg%3D%3D&p={searchTerms}
CHR DefaultSearchKeyword: Default -> search.yahoo.com
CHR DefaultNewTabURL: Default -> hxxps://es.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87bjvfsrk09bdfhjl4as004319&param1=y6bdVFVIsvuYsgEClQfz8FmuoEp5cNMnLyaa9CuXFcrNF7DbaCtOneqrDn913uLLr7guEjOKlm9g%2FQrwAHb4wDstfzOznhtU6QbZcOAeL%2FHBsc8fB6v1NDkzgqRwbfaja1%2FArdCiKaDKe4BHcFRjpEMX%2BlMRenNbdVXm5Yw2A2PP7nQ1aC4fUDqhaupfoWl4fwEwkIAdtiLTh9Ka3eEm8%2Bg0%2F2JFoXzi58PDE76CXAKFr70VGxrtGZsVfM3HBauyJuSl98LKaVO62m0WHQuERZVzXqu4WHEOIyoW7oC28KzzeoEzBdgsc35AWy1R6xiM7YcVYRBOnUXicgd9zw%2BYawV%2BetU2EGn3ZCndSDL%2B26wkFRKG8bWshclbWgo9lSm8pC8wqbiv2DHlaSULrXKMFA%3D%3D
CHR DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms}
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx
2019-11-08 11:12 - 2019-11-08 12:02 - 000000000 ____D C:\Program Files (x86)\Segurazo
2019-10-23 16:34 - 2019-10-24 08:34 - 000000000 ____D C:\Users\Propietario\AppData\Local\Avg
2019-11-08 11:44 - 2019-01-25 12:02 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
HKU\S-1-5-21-46111833-480644225-1942068361-1000\...\Run: [Chromium] => c:\users\propietario\appdata\local\chromium\application\chrome.exe [4195328 2017-10-07] (The Chromium Authors) [File not signed]
c:\users\propietario\appdata\local\chromium
2019-11-08 11:13 - 2019-11-08 11:29 - 000000000 ____D C:\Users\Propietario\AppData\Local\chromium
2019-11-08 11:13 - 2019-11-08 11:29 - 000000000 ____D C:\Program Files (x86)\Chromium
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION

CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
END

• Lo guardas bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.

Nota: Es necesario que el ejecutable Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no la herramienta no trabajara.

• Ejecutas Frst.exe.
• Presionas el botón Fix y aguardas a que termine.
• La Herramienta guardara el reporte en tu escritorio (Fixlog.txt).
• Lo pegas en tu próxima respuesta.

ATENCION!!! El siguiente Script de reparación fue hecho específicamente por un miembro del staff para este usuario, si tiene un problema similar por favor abra su propio tema para recibir ayuda personalizada. Usar Scripts de otros usuarios puede causar daños a su equipo

Nos comentas .

Salu2.

[mikirru]

Hola buenos días os paso el reporte (Fixilog.txt)

Fixlog.txt (16,4 KB)

espero vuestra contestación

Saludos: mikirru

[SanMar]

Hola @mikirru

Perfecto, ahora eres tu quien tiene que comentar como sientes el equipo.

Has podido usar Windows Defender?

Salu2

[mikirru]

Hola buenos días: Ya puedo usar el Windows Defender (Creo que esta solucionado) muchas gracias por vuestra ayuda. Si no, no lo habría podido desinstalar

¿Qué herramientas tengo que desinstalar?

También me gustaría que me aconsejarais un antivirus

Saludos: mikirru

[SanMar]

Hola @mikirru

Sobre el Windows Defender, por si quieres seguir utilizándolo, te dejo un enlace para que sepas configurarlo correctamente:

• ¿Cómo configurar Seguridad de Windows - Windows Defender?

De los antivirus gratuitos es muy bueno el Kaspersky Free

Para eliminar las herramientas utilizadas:

Descargas/Ejecutas >> Delfix, desde tu escritorio.

• Doble clic para ejecutarlo.(Si usas Windows Vista/7 /8 /10,presiona clic derecho y selecciona >> “Ejecutar como Administrador”)
• Marca las casilla Remove disinfection tools y Purgue Sistem Restore
• Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

Nos comentas si todo esta en orden para dar por Solucionado el tema.

Salu2.