# Recurrente PUP.Optional.Spigot en carpeta Chrome Default **URL:** \ **Category:** Eliminar Malwares\ **Created:** [6 Marzo, 2021 15:53 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991 "2021-03-06T15:53:38Z")\ **Posts on this page:** 20\ **Page:** 2
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [12 Marzo, 2021 02:57 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/21 "2021-03-12T02:57:28Z")
De momento, no he vacunado, pues todavía estoy asustado tras haberse borrado todos los archivos de D: Me iré a dormir. Seguimos mañana. Un abrazo! ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [12 Marzo, 2021 18:37 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/22 "2021-03-12T18:37:39Z")
Hola! (1) Tenia el disco duro con dos particiones: C: para el sistema operativo, y D: como almacén. Pues bien, quizás no debí escanear el disco duro con UsbFix, sino solamente las unidades USB. El caso es que me detectó una supuesta infección en D: y yo le di a limpiar. Eso eliminó las carpetas que tenía en D: (documentos, imágenes, vídeos…); y ni siquiera con la opción de “restaurar” los pude recuperar. No tengo ni idea de qué tipo de infección detectó en D:, o si fue una falsa alarma. (2) ¿Vacuno con UsbFix? (3) En Google Chrome, ¿puedo volver a darle a “sincronizar”? Me da miedo que si hago esto vuelva a aparecer el PUP. Optional.Spigot. Quizás antes debería hacer algo para limpiar el Chrome del otro ordenador que tenía sincronizado (un MacBook Air). (4) > [@MIXU](#): > > Respecto **IFS** \>\> tienes un poco de fragmentación en la unidad **C** que tiene el sistema operativo. Ya nos encargaremos después de esto. ¿Cómo me recomiendas que fragmente las unidades? (5) > [@MIXU](#): > > Por lo que veo hasta ahora, como mínimo un poco de **malware** de tipo **Adware** tienes. ¿A qué malware te referías que habías visto con IFS en mi ordenador? ---
**Author:** ![MIXU](https://forospyware.com/user_avatar/forospyware.com/mixu/32/44218_2.png) [@MIXU](https://forospyware.com/u/MIXU)\ **Post date:** [13 Marzo, 2021 00:40 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/23 "2021-03-13T00:40:52Z")
Hola, buenas @sebsalva > [@sebsalva](#): > > Sí. Perfecto. **JRT** \>\> OK. > [@sebsalva](#): > > Ha habido un problema con UsbFix: me ha detectado una supuesta infección de toda la partición D: Ingenuo de mi que le di a LIMPIAR, y me ha borrado todos los archivos, documentos y vídeos que tenía ahí. Bueno ingenuo no, ha hecho lo que tenía que hacer. Lo que sí que me parece extraño es que haya eliminado directamente todo esto: ```auto Deleted! D:\SEBWIN10 Deleted! D:\SEBWIN10 Deleted! D:\SEBWIN10 Deleted! D:\SEBWIN10 Deleted! D:\SEBWIN10 Deleted! D:\SEBWIN10 Deleted! D:\SEBWIN10 ``` > [@sebsalva](#): > > De momento, no he vacunado, pues todavía estoy asustado tras haberse borrado todos los archivos de D: > > Me iré a dormir. Seguimos mañana. Un abrazo! OK. De todas formas, vacuna todos los dispositivos. En la vacunación no se elimina nada de nada. Te fijas si en todos los dispositivos se ha creado: > Nota: UsbFix creará una carpeta oculta llamada “$RECYCLE.BIN” “autorun.inf” en cada partición y cada unidad USB que se encuentre conectado al momento de ejecutar este. No elimines estas carpetas de ningún lugar en el que se hayan creado, ya que estas ayudará a prevenir y proteger tus dispositivos extraíbles y particiones de futuras infecciones. O bien si hay un fichero llamado: **lpt1.UsbFix** dentro de **autorun.inf**. Me lo confirmas. > [@sebsalva](#): > > Hola! > > (1) Tenia el disco duro con dos particiones: C: para el sistema operativo, y D: como almacén. Pues bien, quizás no debí escanear el disco duro con UsbFix, sino solamente las unidades USB. El caso es que me detectó una supuesta infección en D: y yo le di a limpiar. Eso eliminó las carpetas que tenía en D: (documentos, imágenes, vídeos…); y ni siquiera con la opción de “restaurar” los pude recuperar. No tengo ni idea de qué tipo de infección detectó en D:, o si fue una falsa alarma. Sí, respecto a lo que dices de disco duro + unidades **usb** es correcto. Ya que era un **Full Análisis** , la ejecución por tu parte es correcta. No hay error. **De todas formas, ve a la Cuarentena de este y traes capturas de pantalla como ya sabes.** Has probado en restaurar de la **Cuarentena** de la siguiente forma: [**Restaurar Cuarentena USBFix**](https://forospyware.com/t/manual-de-usbfix/158#heading--cuarentena), prueba a restaurar de la **Cuarentena**. Si no funciona. No escribas, ni edites, ni muevas ningún fichero de ningún tipo dentro de **D:** , intentaríamos otras cosas. > [@sebsalva](#): > > (2) ¿Vacuno con UsbFix? Sí, lo dicho más arriba en este mismo mensaje. > [@sebsalva](#): > > (3) En Google Chrome, ¿puedo volver a darle a “sincronizar”? Me da miedo que si hago esto vuelva a aparecer el PUP. Optional.Spigot. Quizás antes debería hacer algo para limpiar el Chrome del otro ordenador que tenía sincronizado (un MacBook Air). De momento estamos desinfectando esta máquina. En **MAC** hay muy poco **Adware** , no actives esto aún en ninguna de las máquinas que estén infectadas/tengas sospechas. > [@sebsalva](#): > > ¿Cómo me recomiendas que fragmente las unidades? En su momento llegará y depende de ‘X’ cosas si se tienen que **desfragmentar** o no. Ahora no. > [@sebsalva](#): > > ¿A qué malware te referías que habías visto con IFS en mi ordenador? Este: ```auto HKLM64\SOFTWARE\Partner ``` Haces/traes lo comentado, respondes a las preguntas y seguimos. Salu2. ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [13 Marzo, 2021 01:49 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/24 "2021-03-13T01:49:15Z")
Buenas! > [@Exodus](#): > > Has probado en restaurar de la **Cuarentena** de la siguiente forma: [**Restaurar Cuarentena USBFix**](https://forospyware.com/t/manual-de-usbfix/158#heading--cuarentena), prueba a restaurar de la **Cuarentena**. Sí, ayer probé de restaurar, pero no funcionó: a penas restauró algunos archivos, pero no todos (ni mucho menos). > [@Exodus](#): > > De todas formas, ve a la Cuarentena de este y traes capturas de pantalla como ya sabes. Imposible. Me había bajado UsbFix en D:\SEBWIN10, precisamente. Tras la “limpieza” que este me hizo ayer, eliminó su propio archivo. Hoy el enlace de UsbFix que había en el escritorio estaba roto, por lo que ya no tengo acceso a los informes/cuarentenas de ayer. He tenido que bajarme el programa e instalarlo/ejecutarlo otra vez. Ahora he probado de pasar otra vez el UsbFix, y me vuelve a detectar D:\SEBWIN10\ como infectada (pero no entiendo por qué, o de qué). Esta vez no le he dado a LIMPIAR, porque me volvería a hacer lo mismo de borrar los (ahora pocos) archivos de esa carpeta. No pasa nada, porque tengo copia de seguridad en los USB (que, en cambio, no están infectados). Adjunto nuevo informe: > ``` > # ---------------------------------------------------- > # UsbFix Antivirus Premium > # ---------------------------------------------------- > # Version : 11.032 > # Database : > # Contact : https://www.usb-antivirus.com/contact > # ---------------------------------------------------- > # Scan type : Full > # User : sebsa (Administrator) > # Device : SEBWIN10 > # Started : 13/03/2021 02:19:28 > # ---------------------------------------------------- > > ------------ | Analyzed disks | > > C:\ NTFS (102GB/146GB) [Fixed] > D:\ NTFS (297GB/319GB) [Fixed] > E:\ FAT32 (3GB/7GB) [Removable] > M:\ exFAT (58GB/58GB) [Removable] > > ------------ | Infected elements | > > Not selected! D:\SEBWIN10 > > ------------ | Run | > > F2 - HKLM\..\Winlogon : [Shell] explorer.exe > F2 - [x64] HKLM\..\Winlogon : [Shell] explorer.exe > F2 - HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, > F2 - [x64] HKLM\..\Winlogon : [Userinit] C:\Windows\system32\userinit.exe, > 04 - HKCU\..\Run : [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR > 04 - HKCU\..\Run : [Adobe Reader Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" > 04 - HKLM\..\Run : [Creative Hot Key Control] "C:\Program Files (x86)\Creative\SBAudigy2\SB Audigy Control Panel\CTHKCtrl.exe" /StartupRun > 04 - HKLM\..\Run : [UpdReg] C:\Windows\UpdReg.EXE > 04 - HKLM\..\Run : [AsioThk32Reg] REGSVR32.EXE /S CTASIO.DLL > 04 - HKLM\..\Run : [CTHelper] CTHELPER.EXE > 04 - HKLM\..\Run : [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" > 04 - HKLM\..\Run : [Adobe CCXProcess] C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe > 04 - [x64] HKLM\..\Run : [SecurityHealth] %windir%\system32\SecurityHealthSystray.exe > 04 - [x64] HKLM\..\Run : [WindowsDefender] "%ProgramFiles%\Windows Defender\MSASCuiL.exe" > 04 - HKU\S-1-5-19\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup > 04 - HKU\S-1-5-20\..\Run : [OneDriveSetup] C:\Windows\SysWOW64\OneDriveSetup.exe /thfirstsetup > 04 - HKU\S-1-5-21-3721864700-73880727-17468404-1001\..\Run : [CCleaner Smart Cleaning] "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR > 04 - HKU\S-1-5-21-3721864700-73880727-17468404-1001\..\Run : [Adobe Reader Synchronizer] "C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe" > 04GS - Adobe Gamma.lnk : C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe > > ------------ | Tasks | > > Task - Adobe Acrobat Update Task --> C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe > Task - CCleaner Update --> C:\Program Files\CCleaner\CCUpdate.exe > Task - CCleanerSkipUAC --> "C:\Program Files\CCleaner\CCleaner.exe" $(Arg0) > Task - CLToast --> "C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe" -UpdateSchedule > Task - CLToastRun --> "C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe" -UpdateScheduleRun > Task - GoogleUpdateTaskMachineCore --> C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c > Task - GoogleUpdateTaskMachineUA --> C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler > Task - klcp_update --> "C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe" /verysilent /update /freq=30 > Task - MicrosoftEdgeUpdateTaskMachineCore --> C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /c > Task - MicrosoftEdgeUpdateTaskMachineUA --> C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /ua /installsource scheduler > Task - OneDrive Standalone Update Task-S-1-5-21-1434808951-705416986-4112985887-500 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe > Task - OneDrive Standalone Update Task-S-1-5-21-3721864700-73880727-17468404-1001 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe > Task - OneDrive Standalone Update Task-S-1-5-21-3721864700-73880727-17468404-500 --> %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe > Task - PowerDirectorStyleAgent --> C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe > Task - UsbFix Boot Scan --> "C:\Program Files (x86)\UsbFix\UsbFix.exe" -scanonstart > Task - UsbFix Monitor --> "C:\Program Files (x86)\UsbFix\Modules\UsbFixMonitor.exe" > > ------------ | C:\ %SystemDrive% - Fixed drive (NTFS) | > > [12/03/2021 - 19:47:16 | ASH | 8 Ko] - DumpStack.log.tmp > [12/03/2021 - 19:47:15 | ASH | 786432 Ko] - pagefile.sys > [12/03/2021 - 19:47:16 | ASH | 262144 Ko] - swapfile.sys > [13/03/2021 - 02:11:28 | ASH | 1670856 Ko] - hiberfil.sys > [04/03/2021 - 13:39:55 | SHD] - $Recycle.Bin > [04/03/2021 - 12:45:38 | RASH | 8 Ko] - BOOTSECT.BAK > [07/12/2019 - 10:08:58 | ASH | 0 Ko] - BOOTNXT > [07/12/2019 - 10:14:52 | D] - PerfLogs > [04/03/2021 - 12:52:35 | SHD] - Documents and Settings > [04/03/2021 - 12:52:36 | SHD] - Archivos de programa > [04/03/2021 - 13:02:31 | HD] - OneDriveTemp > [04/03/2021 - 13:10:09 | RD] - Users > [04/03/2021 - 15:22:21 | D] - WebCam > [04/03/2021 - 16:31:47 | SHD] - Recovery > [04/03/2021 - 20:06:53 | HD] - $SysReset > [04/03/2021 - 20:36:39 | D] - PSFONTS > [05/03/2021 - 01:58:46 | D] - PhSp_CS2_UE_Ret > [06/03/2021 - 16:32:05 | D] - AdwCleaner > [10/03/2021 - 12:58:15 | D] - FSTool > [10/03/2021 - 13:37:06 | HD] - ProgramData > [11/03/2021 - 17:04:23 | RASH | 404 Ko] - bootmgr > [11/03/2021 - 22:52:06 | SHD] - Boot > [12/03/2021 - 19:14:31 | HD] - $WinREAgent > [12/03/2021 - 22:16:53 | RD] - Program Files > [12/03/2021 - 22:29:15 | D] - Windows > [13/03/2021 - 02:19:01 | RD] - Program Files (x86) > > ------------ | D:\ - Fixed drive (NTFS) | > > [06/03/2021 - 16:47:21 | A | 3 Ko] - malaware.txt > [04/03/2021 - 13:01:02 | SHD] - $RECYCLE.BIN > [04/03/2021 - 21:32:12 | RHD] - MSOCache > [04/03/2021 - 22:06:25 | D] - Certificats digitals FNMT > [12/03/2021 - 03:21:18 | D] - SEBWIN10 > > ------------ | E:\ - Removable drive (FAT32) | > > [20/11/2020 - 07:08:14 | A | 0 Ko] - autorun.inf > [20/11/2020 - 07:08:14 | A | 72 Ko] - setup.exe > [20/11/2020 - 07:08:16 | A | 1506 Ko] - bootmgr.efi > [20/11/2020 - 07:08:16 | A | 404 Ko] - bootmgr > [03/03/2021 - 10:47:24 | D] - boot > [03/03/2021 - 10:47:30 | D] - efi > [03/03/2021 - 10:47:34 | D] - sources > [03/03/2021 - 10:57:20 | D] - support > > ------------ | M:\ - Removable drive (exFAT) | > > [16/12/2020 - 14:27:56 | AHD] - .Trashes > [16/12/2020 - 14:27:01 | AHD] - .Spotlight-V100 > [24/01/2021 - 21:13:17 | AD] - ANNEX > > Infected elements : 1 > Analyzed elements : 96202 in 00h 00m 39s > > # UsbFix-Report-01.txt [6493B] > > ------------ | E.O.F | > > ``` > [@Exodus](#): > > De todas formas, vacuna todos los dispositivos. En la vacunación no se elimina nada de nada. Te fijas si en todos los dispositivos se ha creado: > > > Nota: UsbFix creará una carpeta oculta llamada “$RECYCLE.BIN” “autorun.inf” en cada partición y cada unidad USB que se encuentre conectado al momento de ejecutar este. No elimines estas carpetas de ningún lugar en el que se hayan creado, ya que estas ayudará a prevenir y proteger tus dispositivos extraíbles y particiones de futuras infecciones. > > O bien si hay un fichero llamado: **lpt1.UsbFix** dentro de **autorun.inf**. Me lo confirmas. Sí, ahora he vacunado las unidades. Ha creado una carpeta **“autorun.inf”** en todas ellas, con un archivo “lpt1.UsbFix” dentro de estas. > [@Exodus](#): > > Este: > > ```auto > HKLM64\SOFTWARE\Partner > > ``` > > Haces/traes lo comentado, respondes a las preguntas y seguimos. Ok. Ya dirás cómo seguimos para eliminar este Partner, mirar qué pasa en D:\SEBWIN10, etc. Gràcies per tot! ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [13 Marzo, 2021 02:06 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/25 "2021-03-13T02:06:40Z")
Por si sirve de ayuda: En la partición D:/SEBWIN10\ tengo creadas carpetas que se llaman “vídeos”, “música”, documents" y “descàrregues”. Entonces, las carpetas que normalmente están en C:\USUARIO, con botón derecho + propiedades, las tenía cambiadas de “ubicación” hacia D:\SEBWIN10\DOCUMENTS, D:\SEBWIN10\VÍDEOS, D:\SEBWIN10\DESCÀRREGUES, etc. ---
**Author:** ![MIXU](https://forospyware.com/user_avatar/forospyware.com/mixu/32/44218_2.png) [@MIXU](https://forospyware.com/u/MIXU)\ **Post date:** [13 Marzo, 2021 02:56 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/26 "2021-03-13T02:56:20Z")
Hola, buenas @sebsalva > [@sebsalva](#): > > Imposible. Me había bajado UsbFix en D:\SEBWIN10, precisamente. Tras la “limpieza” que este me hizo ayer, eliminó su propio archivo. Hoy el enlace de UsbFix que había en el escritorio estaba roto, por lo que ya no tengo acceso a los informes/cuarentenas de ayer. He tenido que bajarme el programa e instalarlo/ejecutarlo otra vez. > > Ahora he probado de pasar otra vez el UsbFix, y me vuelve a detectar D:\SEBWIN10\ como infectada (pero no entiendo por qué, o de qué). > > Esta vez no le he dado a LIMPIAR, porque me volvería a hacer lo mismo de borrar los (ahora pocos) archivos de esa carpeta. Muy extraño esto que comentas. Lo hablaré con el creador de la **Herramienta** pues esto que comentas nunca había pasado / nunca me he encontrado con algo similar. > [@sebsalva](#): > > No pasa nada, porque tengo copia de seguridad en los USB (que, en cambio, no están infectados). OK. Perfecto. Suerte que tienes dicha copia. En el resto de los casos vigilaré con **USBFIX** hasta que sepa el porqué, si lo sé/descubro. Ya te lo diré. > [@sebsalva](#): > > Sí, ahora he vacunado las unidades. Ha creado una carpeta **“autorun.inf”** en todas ellas, con un archivo “lpt1.UsbFix” dentro de estas. OK. Perfecto. > [@sebsalva](#): > > Ok. Ya dirás cómo seguimos para eliminar este Partner, mirar qué pasa en D:\SEBWIN10, etc Seguimos ahora con el resto de la desinfección. Respecto al **USBFIX** , como dije ya te diré. De res. > [@sebsalva](#): > > Por si sirve de ayuda: En la partición D:/SEBWIN10\ tengo creadas carpetas que se llaman “vídeos”, “música”, documents" y “descàrregues”. Entonces, las carpetas que normalmente están en C:\USUARIO, con botón derecho + propiedades, las tenía cambiadas de “ubicación” hacia D:\SEBWIN10\DOCUMENTS, D:\SEBWIN10\VÍDEOS, D:\SEBWIN10\DESCÀRREGUES, etc. OK. Sí, gracias sí que me sirve, ya que lo hablaré con el creador de la Herramienta. **1️⃣ EN BUSCA / ELIMINACIÓN DE MALWARE** Realiza los pasos que te pongo a continuación, sin cambiar el orden y síguelos al pie de la letra: **Conectas todos tus dispositivos externos (todos los discos duros externos que tengas, USB, etc).** **0)** Descarga **Eset Online Scaner** [**Manual de Uso**](https://forospyware.com/t/manual-de-eset-online-scanner/971/2) y realizas un análisis del PC, lee detalladamente las instrucciones y realizas un **Análisis Personalizado** tal y como se indica en su manual. Me traes su reporte. **1)** Descarga **Kasperky Virus Removal Tool** [**Manual de Uso**](https://forospyware.com/t/kaspersky-virus-removal-tool/1623/2) y realizas un análisis del PC, lee detalladamente las instrucciones y lo realizas tal y como se indica en su manual. En este caso no da reporte alguno, cuando finalice, presionas en la pestaña **Report** tal y como se indica en su manual y haces una captura de pantalla y la subes. [**¿Como subir imágenes al Foro?**](https://forospyware.com/t/faq-preguntas-frecuentes-como-utilizar-el-foro/153/20) **2️⃣ PRÓXIMA RESPUESTA** Pegas los reportes de **Eset Online Scaner** y **Kasperky Virus Removal Tool (captura)** y comentas como va el PC. > **NOTA IMPORTANTE** > > **Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:** > > - No realices pasos/acciones que **NOSOTROS** no te hayamos indicado. > - No descargues **NADA** de Internet y/o conectes dispositivos externos a tu equipo. > - No instales **NADA** (programas/software/complementos/extensiones del navegador…). > - No ejecutes otros programas de seguridad **(Antivirus, Antimalware, ANTINADA…)**. > - No realices por tu cuenta otros procedimientos. > - Usa tu equipo **EXCLUSIVAMENTE** para desinfectarlo siguiendo nuestras indicaciones. ⚠ **Muy Importante** ⚠ Coloca los diferentes reportes que te he pedido como se muestra en la siguiente **imagen:** ![report](https://forospyware.com/uploads/default/original/2X/1/199a13e055d36842820b32aa2a6ce05ff1e8f994.png) Salu2. ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [14 Marzo, 2021 18:43 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/27 "2021-03-14T18:43:14Z")
Buenas! Ya he pasado estos programas. Parece que no hay infección. El ordenador parece que va bastante bien, pero ya es viejo y con el Windows 10 lo noto muy pesado (antes tenìa el 7). Yo creo que lo de D: era una falsa alarma. > ``` > 13/3/2021 13:12:14 > Archivos analizados: 374578 > Archivos detectados: 0 > Archivos desinfectados: 0 > Tiempo total de análisis: 01:51:21 > Estado del análisis: Finalizado > > ``` ![kaspersky](https://forospyware.com/uploads/default/original/3X/f/c/fc208180a84c326bc6196a1897e22c33a85690ec.jpeg) ---
**Author:** ![MIXU](https://forospyware.com/user_avatar/forospyware.com/mixu/32/44218_2.png) [@MIXU](https://forospyware.com/u/MIXU)\ **Post date:** [15 Marzo, 2021 13:31 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/28 "2021-03-15T13:31:04Z")
Hola, buenas @sebsalva > [@sebsalva](#): > > Ya he pasado estos programas. Parece que no hay infección. Perfecto. Ambos están limpios y han sido correctamente ejecutados. > [@sebsalva](#): > > El ordenador parece que va bastante bien, pero ya es viejo y con el Windows 10 lo noto muy pesado (antes tenìa el 7). OK. Haremos alguna poca cosa más para asegurar de que no queda absolutamente ninguna infección así como de que no quede ningún pequeño rastro de estas y haremos también un poco de optimización. Descarga, instala y ejecuta **ZHP Cleaner** siguiendo **[su manual](https://forospyware.com/t/manual-de-zhpcleaner/348)**, lo descargas, instalas y ejecutas. Cuando termine, elimina todo lo que encuentre. **1️⃣ RESTABLECER NAVEGADORES** Restablece todos los navegadores que tengas tal y como se indica en esta guía: OJO, REALIZA SOLO LA PARTE QUE EMPIEZA EN: **PUP/Adware en: Internet Explorer** y hacia abajo todos los posts que siguen (PUP/Adware en: Mozilla Firefox, PUP/Adware en: Google Chrome) y si tienes algún navegador como Opera o Safari que no salen en la guía, pues haz procedimientos similares y extrapolas de los navegadores que sí que aparecen. [Guía de cómo eliminar Adwares/PUPs](https://forospyware.com/t/gu%C3%ADa-de-c%C3%B3mo-eliminar-adwarespups/166) > [@Guía de cómo eliminar Adwares/PUPs](https://forospyware.com/t/gu%C3%ADa-de-c%C3%B3mo-eliminar-adwarespups/166): > > Guía de cómo eliminar Adwares/PUPs PUP (Programas Potencialmente NO Deseados) es como se les conoce a esos programas “extras” que se nos ofrecen durante la instalación de la mayoría de los programas gratuitos y/o rempaquetados en los instaladores de: Softonic, Download, Uptodown, Malavida, Brothersoft, FileHippo, entre otros. Mediante métodos poco claros o incluso engañosos utilizan lo que nos gusta llamar en [InfoSpyware](https://www.infospyware.com/): “La técnica del Vampiro” ya que somos los us… **2️⃣ PRÓXIMA RESPUESTA** Me traes log de: **ZHP Cleaner** y respondes a las preguntas que te haya realizado (si no hay, pues no) y comentas como va el PC. > **NOTA IMPORTANTE** > > **Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:** > > - No realices pasos/acciones que **NOSOTROS** no te hayamos indicado. > - No descargues **NADA** de Internet y/o conectes dispositivos externos a tu equipo. > - No instales **NADA** (programas/software/complementos/extensiones del navegador…). > - No ejecutes otros programas de seguridad **(Antivirus, Antimalware, ANTINADA…)**. > - No realices por tu cuenta otros procedimientos. > - Usa tu equipo **EXCLUSIVAMENTE** para desinfectarlo siguiendo nuestras indicaciones. ⚠ **Muy Importante** ⚠ Coloca los diferentes reportes que te he pedido como se muestra en la siguiente **imagen:** ![report](https://forospyware.com/uploads/default/original/2X/1/199a13e055d36842820b32aa2a6ce05ff1e8f994.png) Salu2. ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [16 Marzo, 2021 09:40 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/29 "2021-03-16T09:40:41Z")
Bon dia! Te adjunto el informe de ZHP Cleaner. Me encuentra un Chromium en la carpeta de usuario de Google Chrome (en el archivo “preferences”), pero dice “NO CLEANUP NECESSARY”. > ``` > ~ ZHPCleaner v2021.3.10.285 by Nicolas Coolman (2021/03/10) > ~ Run by sebsa (Administrator) (16/03/2021 10:36:29) > ~ Web: https://www.nicolascoolman.com > ~ Blog: https://nicolascoolman.eu/ > ~ Facebook : https://www.facebook.com/nicolascoolman1 > ~ State version : Version OK > ~ Type : Scan > ~ Report : C:\Users\sebsa\Desktop\ZHPCleaner (S).txt > ~ Quarantine : C:\Users\sebsa\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt > ~ System Restore Point : OK > ~ UAC : Activate > ~ Boot Mode : Normal (Normal boot) > Windows 10 Home, 64-bit (Build 19042) > > ---\\ Alternate Data Stream (ADS). (0) > ~ No malicious or unnecessary items found. > > ---\\ Services (0) > ~ No malicious or unnecessary items found. > > ---\\ Browser internet (0) > ~ No malicious or unnecessary items found. > > ---\\ Hosts file (1) > ~ The hosts file is legitimate (23) > > ---\\ Scheduled automatic tasks. (0) > ~ No malicious or unnecessary items found. > > ---\\ Explorer ( File, Folder) (1) > FOUND file: C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Preferences =>ChromiumPreference > > ---\\ Registry ( Key, Value, Data) (0) > ~ No malicious or unnecessary items found. > > ---\\ Summary of the elements found (1) > https://nicolascoolman.eu/2020/10/01/preferences-navigateurs-chromium/ =>ChromiumPreference > > ---\\ Other deletions. (1) > ~ Registry Keys Tracing deleted (1) > ~ Remove the old reports ZHPCleaner. (0) > > ---\\ Result of repair > ~ Any repair made > ~ Google Chrome OK > ~ Internet Explorer OK > > ---\\ Statistics > ~ Items scanned : 1135 > ~ Items found : 1 > ~ Items cancelled : 0 > ~ Space saving (bytes) : 0 > ~ Items options : 9/17 > > ---\\ OPTIONS NOT ACTIVES > ~ Temporary file analysis > ~ Temporary folder analysis > ~ Empty Folder CLSID Analysis > ~ Empty Other Folder Analysis > ~ Empty LocalLow Folder Analysis > ~ Empty Local Folder Analysis > ~ Obsolete Installer File Analysis > ~ Start browsers with extensions removed > > ~ End of search in 00h00mn06s > > ---\\ Reports (3) > ZHPCleaner-[S]-16032021-10_30_37.txt > ZHPCleaner-[S]-16032021-10_34_54.txt > ZHPCleaner-[S]-16032021-10_36_35.txt > > ``` ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [16 Marzo, 2021 10:01 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/30 "2021-03-16T10:01:25Z")
Algunas preguntas más: Ya he restablecido los navegadores Chrome y Edge en este ordenador. También he restablecido Chrome en mi MacBook, por si acaso —de hecho, incluso lo he desinstalado, eliminado la carpeta y vuelto a instalar (en el MacBook)—. **¿Sigo sin activar la sincronización de Chrome?** Por otra parte, para eliminar el **“partner”** que me comentaste, ¿cómo lo hago?: > [@Exodus](#): > > `HKLM64\SOFTWARE\Partner` Por otra parte, a mi **Malwarebytes** le quedan solo 5 días de prueba (al menos para las funciones de protección en línea). ¿Me recomiendas que cuando acabemos del todo lo desinstale de alguna forma en particular, o que lo deje tal cual? ¿O que adquiera una licencia Premium? De todos modos, creo que **me consume bastante memoria RAM.** ¿ Y con el **UsbFix,** qué hago? Se ejecuta con el arranque de Windows. ¿Lo dejo o lo desinstalo? ¿Puedo **optimizar el Windows** de alguna otra forma, para que vaya un poco más ligero, sobre todo para arrancar? ¿Y **fragmentamos** o no hace falta? Por último, ¿Alguna otra recomendación para dejar algún antivirus o antimalware gratuito, a parte del Windows Defender? ¿O me recomiendas que compre alguna licencia? ---
**Author:** ![MIXU](https://forospyware.com/user_avatar/forospyware.com/mixu/32/44218_2.png) [@MIXU](https://forospyware.com/u/MIXU)\ **Post date:** [17 Marzo, 2021 21:33 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/31 "2021-03-17T21:33:02Z")
Hola, buenas @sebsalva disculpa que haya tardado en contestar. Respecto **ZHP Cleaner** \>\> OK. No tiene mayor importancia. > [@sebsalva](#): > > Ya he restablecido los navegadores Chrome y Edge en este ordenador. También he restablecido Chrome en mi MacBook, por si acaso —de hecho, incluso lo he desinstalado, eliminado la carpeta y vuelto a instalar (en el MacBook)—. **¿Sigo sin activar la sincronización de Chrome?** De momento mejor que no. Ya falta poco para que te dé visto bueno, pero prefiero asegurar casi al 100 x 100. > [@sebsalva](#): > > Por otra parte, para eliminar el **“partner”** que me comentaste, ¿cómo lo hago?: Después revisaremos esto. Respecto a: > [@sebsalva](#): > > Por otra parte, a mi **Malwarebytes** le quedan solo 5 días de prueba (al menos para las funciones de protección en línea). ¿Me recomiendas que cuando acabemos del todo lo desinstale de alguna forma en particular, o que lo deje tal cual? ¿O que adquiera una licencia Premium? De todos modos, creo que **me consume bastante memoria RAM.** > > ¿ Y con el **UsbFix,** qué hago? Se ejecuta con el arranque de Windows. ¿Lo dejo o lo desinstalo? > > ¿Puedo **optimizar el Windows** de alguna otra forma, para que vaya un poco más ligero, sobre todo para arrancar? ¿Y **fragmentamos** o no hace falta? > > Por último, ¿Alguna otra recomendación para dejar algún antivirus o antimalware gratuito, a parte del Windows Defender? ¿O me recomiendas que compre alguna licencia? Nos encargaremos después. Tranquilo, lo tengo todo pensado. **Comentas como va el problema inicial planteado por el cual abriste este tema.** Salu2. ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [17 Marzo, 2021 21:58 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/32 "2021-03-17T21:58:14Z")
Hola! > [@Exodus](#): > > Comentas como va el problema inicial planteado por el cual abriste este tema. Pues, de momento, Malwarebytes no me ha vuelto a encontrar ninguna de las infecciones de Pup.Optional.Spigot en la carpeta de usuario de Chrome. Así que parece que todo está bien. Sigue siendo un misterio el por qué UsbFix me detecta infección en D: (ningún otro programa de los que hemos pasado ha detectado nada). ---
**Author:** ![MIXU](https://forospyware.com/user_avatar/forospyware.com/mixu/32/44218_2.png) [@MIXU](https://forospyware.com/u/MIXU)\ **Post date:** [17 Marzo, 2021 22:05 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/33 "2021-03-17T22:05:35Z")
Hola, buenas de nuevo @sebsalva > [@sebsalva](#): > > Pues, de momento, Malwarebytes no me ha vuelto a encontrar ninguna de las infecciones de Pup.Optional.Spigot en la carpeta de usuario de Chrome. Así que parece que todo está bien. OK. Perfecto. En principio por todo lo que he visto ya no queda rastro de **malware en tu PC**. > [@sebsalva](#): > > Sigue siendo un misterio el por qué UsbFix me detecta infección en D: (ningún otro programa de los que hemos pasado ha detectado nada). Sí, correcto. Tengo que reportarlo al creador de esta. A ver si es un **falso positivo** o la herramienta tiene un comportamiento anómalo. Pues con otro usuario me ha sucedido algo parecido y esto antes nunca me había pasado y es desde ahora hace muy poco. De todas formas para estar seguros de que está todo OK: 1️⃣ Desactivas tu antivirus ▶ **[Como deshabilitar temporalmente un antivirus](https://forospyware.com/t/como-deshabilitar-temporalmente-su-antivirus/82/2)** y cualquier programa de seguridad que tengas activado. **LO DESCARGAS EN TU ESCRITORIO MUY IMPORTANTE (y no en otro sitio).** Descargas [**Farbar Recovery Scan Tool**](https://forospyware.com/t/%C2%BFcomo-ejecutar-farbar-recovery-scan-tool/2393) **MUY IMPORTANTE** \>\> seleccionas la versión adecuada para la arquitectura correspondiente de tu Ordenador (32 o 64bits). ▶ [¿Cómo saber si mi Windows es de 32 o 64 bits.?](https://forospyware.com/t/%C2%BFc%C3%B3mo-saber-si-mi-windows-es-de-32-o-64-bits/84) > ⚠ Una vez descargado **FRST** , desconectas tu equipo de completamente de Internet (apagas el router) \>\> **Super Importante**. Acto seguido, cierras también cualquier otro programa que tengas abierto. 2️⃣ **Farbar Recovery Scan Tool** 1. Ejecutas el **FRST.exe** **(Si utilizas Windows Vista/7/8 o 10, presionas click derecho y seleccionas Ejecutar como Administrador)**. 2. Aparecerá una ventana con un mensaje de **Disclaimer/Responsabilidad** , presionas sobre **Si** o **Yes**. 3. En la ventana principal del programa presionas sobre **Analizar/Scan** y esperas a que finalice el análisis. 4. Aparecerán dos **logs/reportes** que serán: **Frst.txt** y **Addition.txt** , estos quedarán guardados en el escritorio. 3️⃣ **Activas de nuevo tu antivirus y cualquier programa de seguridad que tengas activado.** **También conectas nuevamente tu equipo a Internet.** **4️⃣ PRÓXIMA RESPUESTA** Pegas los reportes de **FRST** y **Addition.txt**. Debes de poner ambos reportes todos enteros con absolutamente todo su contenido. Deberás de realizar varios mensajes si recibes un mensaje de **error/advertencia** indicando que es muy largo dicho reporte que formará el mensaje (más de 50.000 carácteres aprox.). > **NOTA IMPORTANTE** > > **Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:** > > - No realices pasos/acciones que **NOSOTROS** no te hayamos indicado. > - No descargues **NADA** de Internet y/o conectes dispositivos externos a tu equipo. > - No instales **NADA** (programas/software/complementos/extensiones del navegador…). > - No ejecutes otros programas de seguridad **(Antivirus, Antimalware, ANTINADA…)**. > - No realices por tu cuenta otros procedimientos. > - Usa tu equipo **EXCLUSIVAMENTE** para desinfectarlo siguiendo nuestras indicaciones. ⚠ **Muy Importante** ⚠ Coloca los diferentes reportes que te he pedido como se muestra en la siguiente **imagen:** ![report](https://forospyware.com/uploads/default/original/2X/1/199a13e055d36842820b32aa2a6ce05ff1e8f994.png) Salu2. ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [17 Marzo, 2021 23:35 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/34 "2021-03-17T23:35:36Z")
Hola de nuevo! Ahí va el informe FRST (1.ª parte): > ``` > Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-03-2021 > Ran by sebsa (administrator) on SEBWIN10 (Gigabyte Technology Co., Ltd. H61M-D2H-USB3) (18-03-2021 00:21:37) > Running from C:\Users\sebsa\Desktop > Loaded Profiles: sebsa > Platform: Windows 10 Home Version 20H2 19042.867 (X64) Language: Espanyol (Espanya, alfabet internacional) -> Català (català) > Default browser: Chrome > Boot Mode: Normal > > ==================== Processes (Whitelisted) ================= > > (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) > > (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe > (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe > (Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe > (Creative Technology Ltd) [File not signed] C:\Program Files (x86)\Creative\SBAudigy2\SB Audigy Control Panel\CTHKCtrl.exe > (Creative Technology Ltd) [File not signed] C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe > (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe > (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe > (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe > (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE > (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe > (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe > (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe > (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4> > (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe > (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe > (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) C:\Windows\SysWOW64\CtHelper.exe > (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe > (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe > (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> > (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe > (Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe > > ==================== Registry (Whitelisted) =================== > > (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) > > HKLM-x32\...\Run: [Creative Hot Key Control] => C:\Program Files (x86)\Creative\SBAudigy2\SB Audigy Control Panel\CTHKCtrl.exe [650752 2013-07-19] (Creative Technology Ltd) [File not signed] > HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) [File not signed] > HKLM-x32\...\Run: [AsioThk32Reg] => REGSVR32.EXE /S CTASIO.DLL > HKLM-x32\...\Run: [CTHelper] => C:\Windows\SysWOW64\CTHELPER.EXE* [29776 2021-03-04] () [File not signed] > HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-12-09] (Oracle America, Inc. -> Oracle Corporation) > HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [114824 2021-03-05] (Adobe Inc. -> ) > HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-02] (Piriform Software Ltd -> Piriform Software Ltd) > HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\Run: [Adobe Reader Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe [5536424 2021-03-06] (Adobe Inc. -> Adobe Systems Incorporated) > HKLM\...\Print\Monitors\CutePDF Writer Monitor v4.0: C:\Windows\system32\cpwmon64_v40.dll [89584 2019-10-20] (Acro Software Inc -> ) > HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-18] (Google LLC -> Google LLC) > HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] -> > Startup: C:\Users\sebsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk [2021-03-05] > ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed] > > ==================== Scheduled Tasks (Whitelisted) ============ > > (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) > > Task: {085C48D7-6CD1-40E5-B90C-A28412C39C07} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1907712 2021-02-25] () [File not signed] > Task: {15F27D61-F54D-4019-9567-EEA30761AC13} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-12] (Google LLC -> Google LLC) > Task: {20EF0C13-F7A6-41D8-903E-EA3B89F1A8C6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-17] (Microsoft Windows Publisher -> Microsoft Corporation) > Task: {22350CF6-6629-467F-8092-D5BCEE51992F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993800 2021-02-27] (Microsoft Corporation -> Microsoft Corporation) > Task: {39C0F7E9-D420-480B-BD02-43A5F6EA2075} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993800 2021-02-27] (Microsoft Corporation -> Microsoft Corporation) > Task: {3C11D7F0-0DFA-4115-B082-17498F1068CE} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4047464 2021-02-02] (Microsoft Corporation -> Microsoft Corporation) > Task: {549AC3A3-4386-4889-84BA-618602843D7E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-02] (Piriform Software Ltd -> Piriform) > Task: {5FEB1572-8D1C-4FFC-AE70-252988C9E073} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2018800 2020-09-11] (CyberLink Corp. -> ) > Task: {649745E0-A707-462A-89DC-B27AC78419E8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142152 2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Task: {6A560210-D67C-48DA-8446-750F4043BB6E} - System32\Tasks\CLToast_PowerDirector#153478 => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2018800 2020-09-11] (CyberLink Corp. -> ) > Task: {84CB904A-A5F8-4969-8939-0C737F4AB8C2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.) > Task: {A0F8B8EE-6C88-4D4D-9AF4-77DBB249637C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-17] (Microsoft Windows Publisher -> Microsoft Corporation) > Task: {AA000D0D-2F85-4184-9D2F-9B1CF2644BFA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-02] (Piriform Software Ltd -> Piriform Software Ltd) > Task: {B0B0D6E9-4209-47B2-8764-BC6A14B2DA42} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142152 2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Task: {B9E0D12C-DC65-4456-9A7E-59B8C73C1E5B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5199792 2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Task: {BB52AF8E-8BA8-4DDD-8CCB-DD36B9D48E04} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-17] (Microsoft Windows Publisher -> Microsoft Corporation) > Task: {BCF2715C-BD8B-4BAB-BEC8-8F04DF87DFBB} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [101872 2020-09-11] (CyberLink Corp. -> CyberLink Corp.) > Task: {CF02A66B-11AC-4A5D-B381-3F5A903CBF9E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-12] (Google LLC -> Google LLC) > Task: {E1FF5835-FC5E-46CF-882D-BDAA94D4BDDA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5199792 2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Task: {E429F296-BD80-4662-AF41-6D4B4C892E53} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-17] (Microsoft Windows Publisher -> Microsoft Corporation) > Task: {EC7280D8-63D6-4FEF-98AE-B8881485DD31} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2018800 2020-09-11] (CyberLink Corp. -> ) > > (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) > > ==================== Internet (Whitelisted) ==================== > > (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) > > Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt > Tcpip\..\Interfaces\{a2cc2335-f2ca-4d62-bf36-36812cd9b610}: [NameServer] 80.58.61.250,80.58.61.254 > > Edge: > ======= > Edge DefaultProfile: Default > Edge Profile: C:\Users\sebsa\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-18] > Edge StartupUrls: Default -> "hxxp://google.es/" > > FireFox: > ======== > FF Plugin: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-03-04] (Oracle America, Inc. -> Oracle Corporation) > FF Plugin: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-03-04] (Oracle America, Inc. -> Oracle Corporation) > FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN) > FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] > FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] > FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.) > > Chrome: > ======= > CHR Profile: C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default [2021-03-18] > CHR Extension: (Presentacions) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-03-12] > CHR Extension: (Documents) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-03-12] > CHR Extension: (Google Drive) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-03-12] > CHR Extension: (YouTube) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-03-12] > CHR Extension: (Fulls de càlcul) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-03-12] > CHR Extension: (Documents de Google sense connexió) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-12] > CHR Extension: (Sistema de pagaments de Chrome Web Store) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-12] > CHR Extension: (Gmail) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-03-12] > CHR Extension: (Chrome Media Router) - C:\Users\sebsa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-12] > > ==================== Services (Whitelisted) =================== > > (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) > > S4 Adobe LM Service; C:\Program Files (x86)\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2021-03-04] (Adobe Systems) [File not signed] > R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.) > R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8905608 2021-02-27] (Microsoft Corporation -> Microsoft Corporation) > R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [429056 2013-10-28] (Creative Technology Ltd) [File not signed] > R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [284808 2021-03-05] (HP Inc. -> HP Inc.) > R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1439856 2021-02-23] (Plex, Inc. -> Plex, Inc.) > R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [630256 2020-09-11] (CyberLink Corp. -> CyberLink) > S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-03-17] (Microsoft Windows Publisher -> Microsoft Corporation) > R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-03-17] (Microsoft Windows Publisher -> Microsoft Corporation) > > ===================== Drivers (Whitelisted) =================== > > (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) > > R0 Achernar; C:\Windows\System32\Drivers\Achernar.sys [34104 2021-03-04] (An Chen Computer Co., Ltd. -> NewSoft Technology Corporation) > R0 Achernar; C:\Windows\SysWOW64\Drivers\Achernar.sys [18432 2007-02-05] (NewSoft Technology Corporation) [File not signed] > S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [File not signed] > R3 ctgame; C:\Windows\system32\DRIVERS\ctgame.sys [37880 2021-03-04] (Creative Technology Ltd -> Creative Technology Ltd.) > S3 MpKslc22365db; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{AC70BD98-436B-4702-A0F8-B874AB097D2B}\MpKslDrv.sys [90360 2021-03-17] (Microsoft Windows -> Microsoft Corporation) > R3 P0630VID; C:\Windows\system32\DRIVERS\P0630Vid.sys [99488 2005-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.) > S3 USB28xxBGA; C:\Windows\system32\DRIVERS\emBDA64.sys [651776 2008-09-12] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology, Inc.) > S3 USB28xxOEM; C:\Windows\system32\DRIVERS\emOEM64.sys [539520 2008-09-12] (Microsoft Windows Hardware Compatibility Publisher -> eMPIA Technology, Inc.) > S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49560 2021-03-17] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) > R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [420072 2021-03-17] (Microsoft Windows -> Microsoft Corporation) > S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-17] (Microsoft Windows -> Microsoft Corporation) > > ==================== NetSvcs (Whitelisted) =================== > > (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) > > ==================== One month (created) (Whitelisted) ========= > > (If an entry is included in the fixlist, the file/folder will be moved.) > > 2021-03-18 00:21 - 2021-03-18 00:22 - 000017412 _____ C:\Users\sebsa\Desktop\FRST.txt > 2021-03-18 00:21 - 2021-03-18 00:22 - 000000000 ____ D C:\FRST > 2021-03-18 00:20 - 2021-03-18 00:19 - 002300928 _____ (Farbar) C:\Users\sebsa\Desktop\FRST64.exe > 2021-03-17 10:26 - 2021-03-17 10:26 - 000003688 _____ C:\Windows\system32\Tasks\CLToast_PowerDirector#153478 > 2021-03-14 16:31 - 2021-03-14 16:31 - 000000000 ____ D C:\KVRT2020_Data > 2021-03-13 13:17 - 2021-03-13 13:18 - 000000000 ____ D C:\ProgramData\Kaspersky Lab > 2021-03-13 13:14 - 2021-03-13 13:18 - 000000000 ____ D C:\ProgramData\Kaspersky Lab Setup Files > 2021-03-13 11:15 - 2021-03-14 20:01 - 000000000 ____ D C:\Users\sebsa\AppData\Local\ESET > 2021-03-13 11:15 - 2021-03-13 11:15 - 000000690 _____ C:\Users\sebsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk > 2021-03-12 21:23 - 2021-03-12 21:23 - 000001364 _____ C:\Users\sebsa\Desktop\Windows Media Player.lnk > 2021-03-12 17:30 - 2021-03-12 17:30 - 000000000 ____ D C:\Windows\system32\Tasks\Agent Activation Runtime > 2021-03-12 12:37 - 2021-03-18 00:11 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk > 2021-03-12 12:37 - 2021-03-12 12:37 - 000003560 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA > 2021-03-12 12:37 - 2021-03-12 12:37 - 000003436 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore > 2021-03-12 12:37 - 2021-03-12 12:37 - 000000000 ____ D C:\Program Files\Google > 2021-03-11 17:06 - 2021-03-11 17:06 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb > 2021-03-11 17:05 - 2021-03-11 17:05 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb > 2021-03-11 17:05 - 2021-03-11 17:05 - 000011359 _____ C:\Windows\system32\DrtmAuthTxt.wim > 2021-03-11 17:04 - 2021-03-11 17:04 - 001163776 _____ C:\Windows\system32\MBR2GPT.EXE > 2021-03-11 17:04 - 2021-03-11 17:04 - 000707016 _____ C:\Windows\system32\TextShaping.dll > 2021-03-11 17:04 - 2021-03-11 17:04 - 000611952 _____ C:\Windows\SysWOW64\TextShaping.dll > 2021-03-11 11:12 - 2021-03-11 11:12 - 000002401 _____ C:\Users\sebsa\Desktop\Publisher.lnk > 2021-03-09 03:05 - 2021-03-10 12:58 - 000000000 ____ D C:\FSTool > 2021-03-09 03:04 - 2021-03-14 19:55 - 000000000 ____ D C:\Users\sebsa\AppData\Local\CrashDumps > 2021-03-08 14:30 - 2021-03-08 14:30 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CutePDF Writer > 2021-03-08 14:30 - 2021-03-08 14:30 - 000000000 ____ D C:\Program Files (x86)\GPLGS > 2021-03-08 14:30 - 2019-10-20 13:10 - 000089584 _____ C:\Windows\system32\cpwmon64_v40.dll > 2021-03-08 14:29 - 2021-03-08 14:29 - 000000000 ____ D C:\Program Files (x86)\CutePDF Writer > 2021-03-06 15:17 - 2021-03-06 15:17 - 000000000 ____ D C:\Users\sebsa\AppData\Local\mbam > 2021-03-06 15:16 - 2021-03-06 15:16 - 000000000 ____ D C:\ProgramData\Malwarebytes > 2021-03-06 12:38 - 2021-03-06 14:43 - 000000000 ____ D C:\Program Files (x86)\LogMeIn Rescue Applet > 2021-03-06 12:37 - 2021-03-06 13:43 - 000000000 ____ D C:\Users\sebsa\AppData\Local\LogMeIn Rescue Applet > 2021-03-05 21:51 - 2021-03-05 21:51 - 000000000 ____ D C:\Program Files\HPPrintScanDoctor > 2021-03-05 20:53 - 2021-03-05 20:53 - 000001325 _____ C:\Users\sebsa\Desktop\Plex Media Server.lnk > 2021-03-05 20:49 - 2021-03-13 13:14 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Plex Media Server > 2021-03-05 20:49 - 2021-03-05 20:49 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server > 2021-03-05 20:49 - 2021-03-05 20:49 - 000000000 ____ D C:\Program Files (x86)\Plex > 2021-03-05 18:13 - 2021-03-05 18:13 - 000001521 _____ C:\Users\sebsa\Desktop\Pel·lícules i programes.lnk > 2021-03-05 14:30 - 2021-03-05 14:30 - 000003178 _____ C:\Windows\system32\Tasks\klcp_update > 2021-03-05 14:29 - 2021-03-05 14:29 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack > 2021-03-05 14:29 - 2021-03-05 14:29 - 000000000 ____ D C:\Program Files (x86)\K-Lite Codec Pack > 2021-03-05 13:49 - 2021-03-05 14:03 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Samsung > 2021-03-05 13:48 - 2021-03-05 14:03 - 000000000 ____ D C:\Program Files (x86)\Samsung > 2021-03-05 13:45 - 2021-03-05 13:45 - 000000000 ____ D C:\Windows\SysWOW64\XPSViewer > 2021-03-05 13:45 - 2021-03-05 13:45 - 000000000 ____ D C:\Program Files\Reference Assemblies > 2021-03-05 13:45 - 2021-03-05 13:45 - 000000000 ____ D C:\Program Files\MSBuild > 2021-03-05 13:45 - 2021-03-05 13:45 - 000000000 ____ D C:\Program Files (x86)\Reference Assemblies > 2021-03-05 13:45 - 2021-03-05 13:45 - 000000000 ____ D C:\Program Files (x86)\MSBuild > 2021-03-05 13:38 - 2021-03-05 13:38 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Downloaded Installations > 2021-03-05 12:52 - 2021-03-05 12:52 - 000000729 _____ C:\Users\sebsa\Desktop\Documents.lnk > 2021-03-05 12:52 - 2021-03-05 12:52 - 000000728 _____ C:\Users\sebsa\Desktop\Baixades.lnk > 2021-03-05 12:52 - 2021-03-05 12:52 - 000000719 _____ C:\Users\sebsa\Desktop\Imatges.lnk > 2021-03-05 12:52 - 2021-03-05 12:52 - 000000718 _____ C:\Users\sebsa\Desktop\Vídeos.lnk > 2021-03-05 12:40 - 2021-03-10 16:20 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\vlc > 2021-03-05 12:40 - 2021-03-05 12:40 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN > 2021-03-05 12:39 - 2021-03-05 12:39 - 000000000 ____ D C:\Program Files\VideoLAN > 2021-03-05 12:19 - 2021-03-05 12:19 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\BorisFX > 2021-03-05 12:15 - 2021-03-05 12:15 - 000000000 ____ D C:\ProgramData\Caphyon > 2021-03-05 12:14 - 2021-03-05 12:14 - 000003590 _____ C:\Windows\system32\Tasks\CLToast > 2021-03-05 12:14 - 2021-03-05 12:14 - 000003416 _____ C:\Windows\system32\Tasks\CLToastRun > 2021-03-05 12:14 - 2021-03-05 12:14 - 000003280 _____ C:\Windows\system32\Tasks\PowerDirectorStyleAgent > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\proDAD > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\ProgramData\proDAD > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Boris FX Continuum CYBERLINK > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\ProgramData\GenArts > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\ProgramData\BorisFX > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\Program Files\proDAD > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\Program Files\Common Files\NewBlue > 2021-03-05 12:14 - 2021-03-05 12:14 - 000000000 ____ D C:\Program Files\BorisFX > 2021-03-05 12:14 - 2020-09-11 12:11 - 000607256 _____ (proDAD GmbH) C:\Windows\system32\prodad-codec.dll > 2021-03-05 12:14 - 2020-09-11 12:11 - 000376344 _____ (proDAD GmbH) C:\Windows\system32\proDAD-PA-Support.dll > 2021-03-05 12:13 - 2021-03-05 12:14 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewBlue > 2021-03-05 12:13 - 2021-03-05 12:14 - 000000000 ____ D C:\Program Files\NewBlue > 2021-03-05 12:13 - 2021-03-05 12:14 - 000000000 ____ D C:\Program Files (x86)\NewBlue > 2021-03-05 12:13 - 2021-03-05 12:13 - 000002065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector 19.lnk > 2021-03-05 12:13 - 2021-03-05 12:13 - 000000000 ____ D C:\Program Files (x86)\NSIS Uninstall Information > 2021-03-05 12:13 - 2021-03-05 12:13 - 000000000 ____ D C:\Program Files (x86)\CyberLink > 2021-03-05 12:12 - 2021-03-05 12:13 - 000000000 ____ D C:\Program Files\CyberLink > 2021-03-05 12:12 - 2021-03-05 12:12 - 000000000 ____ D C:\ProgramData\install_backup > 2021-03-05 03:18 - 2021-03-17 18:53 - 000036016 _____ C:\Windows\system32\BMXStateBkp-{00000004-00000000-00000001-00001102-00000004-10071102}.rfx > 2021-03-05 03:18 - 2021-03-17 18:53 - 000036016 _____ C:\Windows\system32\BMXState-{00000004-00000000-00000001-00001102-00000004-10071102}.rfx > 2021-03-05 03:18 - 2021-03-17 18:53 - 000032136 _____ C:\Windows\system32\BMXCtrlState-{00000004-00000000-00000001-00001102-00000004-10071102}.rfx > 2021-03-05 03:18 - 2021-03-17 18:53 - 000032136 _____ C:\Windows\system32\BMXBkpCtrlState-{00000004-00000000-00000001-00001102-00000004-10071102}.rfx > 2021-03-05 03:18 - 2021-03-17 18:53 - 000011564 _____ C:\Windows\system32\DVCState-{00000004-00000000-00000001-00001102-00000004-10071102}.rfx > 2021-03-05 02:29 - 2021-03-05 02:29 - 000000000 _____ C:\Users\sebsa\AppData\LocalLow\FIND099.tmp > 2021-03-05 02:29 - 2021-03-05 02:29 - 000000000 _____ C:\Users\sebsa\AppData\LocalLow\FIND098.tmp > 2021-03-05 02:28 - 2021-03-05 02:28 - 000000000 ____ D C:\Program Files\MakeMusic > 2021-03-05 02:15 - 2021-03-05 02:15 - 000000000 ____ D C:\Users\sebsa\AppData\LocalLow\Finale > 2021-03-05 02:12 - 2021-03-05 02:29 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale > 2021-03-05 02:12 - 2021-03-05 02:12 - 000000000 ____ D C:\Program Files\Common Files\Propellerhead Software > 2021-03-05 02:01 - 2021-03-05 02:01 - 000002118 _____ C:\Users\sebsa\Desktop\Adobe Photoshop CS2.lnk > 2021-03-05 02:00 - 2021-03-05 02:00 - 000002154 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help Center.lnk > 2021-03-05 01:59 - 2021-03-05 01:59 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge.lnk > 2021-03-05 01:59 - 2021-03-05 01:59 - 000002118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS2.lnk > 2021-03-05 01:59 - 2021-03-05 01:59 - 000002115 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ImageReady CS2.lnk > 2021-03-05 01:59 - 2021-03-05 01:59 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D C:\PhSp_CS2_UE_Ret > 2021-03-05 01:40 - 2021-03-05 01:40 - 000000000 ____ D C:\Users\sebsa\AppData\Local\NVIDIA > 2021-03-05 01:39 - 2021-03-05 01:39 - 000000000 ____ D C:\Users\sebsa\AppData\Local\CEF > 2021-03-05 01:26 - 2021-03-05 02:04 - 000000000 ____ D C:\Program Files\Common Files\Adobe > 2021-03-05 01:26 - 2021-03-05 01:34 - 000000000 ____ D C:\Program Files\Adobe > 2021-03-05 00:59 - 2021-03-05 00:59 - 000000000 ____ D C:\Windows\system32\Tasks\S-1-5-21-3721864700-73880727-17468404-1001 > 2021-03-05 00:37 - 2021-03-05 00:37 - 000002360 _____ C:\Users\sebsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk > 2021-03-05 00:37 - 2021-03-05 00:37 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Teams > 2021-03-05 00:36 - 2021-03-05 00:37 - 000000000 ____ D C:\Users\sebsa\AppData\Local\SquirrelTemp > 2021-03-04 22:43 - 2021-03-04 22:46 - 000000514 _____ C:\Windows\demdata.txt > 2021-03-04 22:27 - 2021-03-04 22:27 - 000002450 _____ C:\Users\sebsa\Desktop\PowerPoint.lnk > 2021-03-04 22:26 - 2021-03-04 22:26 - 000002451 _____ C:\Users\sebsa\Desktop\Word.lnk > 2021-03-04 22:26 - 2021-03-04 22:26 - 000002413 _____ C:\Users\sebsa\Desktop\Excel.lnk > 2021-03-04 22:25 - 2021-03-04 22:25 - 000192168 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll > 2021-03-04 22:25 - 2021-03-04 22:25 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Sun > 2021-03-04 22:25 - 2021-03-04 22:25 - 000000000 ____ D C:\ProgramData\Oracle > 2021-03-04 22:25 - 2021-03-04 22:25 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java > 2021-03-04 22:25 - 2021-03-04 22:25 - 000000000 ____ D C:\Program Files\Java > 2021-03-04 22:24 - 2021-03-04 22:24 - 000000000 ____ D C:\Program Files (x86)\Teams Installer > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002414 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002413 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002407 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000002393 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk > 2021-03-04 22:23 - 2021-03-04 22:23 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools > 2021-03-04 22:22 - 2021-03-04 22:22 - 000000000 ____ D C:\Program Files\Common Files\DESIGNER > 2021-03-04 22:21 - 2021-03-04 22:21 - 000000000 ____ D C:\Users\sebsa\AppData\LocalLow\Sun > 2021-03-04 22:15 - 2021-03-13 02:28 - 000000000 ____ D C:\Program Files\Microsoft Office > 2021-03-04 22:15 - 2021-03-04 22:15 - 000000000 ____ D C:\Program Files\Microsoft Office 15 > 2021-03-04 21:56 - 2021-03-11 02:32 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task > 2021-03-04 21:56 - 2021-03-04 23:36 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Adobe > 2021-03-04 21:56 - 2021-03-04 21:56 - 000000000 ____ D C:\Users\sebsa\AppData\LocalLow\Adobe > 2021-03-04 21:55 - 2021-03-11 02:34 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk > 2021-03-04 21:55 - 2021-03-05 02:00 - 000000000 ____ D C:\Program Files (x86)\Adobe > 2021-03-04 21:54 - 2021-03-05 02:04 - 000000000 ____ D C:\ProgramData\Adobe > 2021-03-04 21:40 - 2021-03-12 22:14 - 000111544 _____ C:\Users\sebsa\AppData\Local\GDIPFONTCACHEV1.DAT > 2021-03-04 21:40 - 2021-03-04 21:40 - 000002689 _____ C:\Users\sebsa\Desktop\Microsoft Office FrontPage 2003.lnk > 2021-03-04 21:38 - 2021-03-04 21:38 - 000002711 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Nuevo documento de Office.lnk > 2021-03-04 21:38 - 2021-03-04 21:38 - 000002693 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Abrir documento de Office.lnk > 2021-03-04 21:38 - 2021-03-04 21:38 - 000000376 _____ C:\Windows\ODBC.INI > 2021-03-04 21:38 - 2021-03-04 21:38 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office > 2021-03-04 21:37 - 2021-03-04 21:37 - 000000000 ____ D C:\Windows\PCHEALTH > 2021-03-04 21:37 - 2021-03-04 21:37 - 000000000 ____ D C:\Program Files (x86)\Microsoft Works > 2021-03-04 21:37 - 2021-03-04 21:37 - 000000000 ____ D C:\Program Files (x86)\Microsoft Visual Studio > 2021-03-04 21:37 - 2021-03-04 21:37 - 000000000 ____ D C:\Program Files (x86)\Microsoft Office > 2021-03-04 21:26 - 2021-03-04 21:26 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip > 2021-03-04 21:26 - 2021-03-04 21:26 - 000000000 ____ D C:\Program Files\7-Zip > 2021-03-04 20:53 - 2021-03-04 20:53 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Plogue > 2021-03-04 20:48 - 2021-03-04 20:53 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Garritan > 2021-03-04 20:48 - 2021-03-04 20:48 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garritan ARIA Player > 2021-03-04 20:48 - 2021-03-04 20:48 - 000000000 ____ D C:\Program Files\vstplugins > 2021-03-04 20:44 - 2021-03-05 02:18 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\MakeMusic > 2021-03-04 20:43 - 2021-03-04 20:43 - 001822272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi > 2021-03-04 20:43 - 2021-03-04 20:43 - 001394024 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi > 2021-03-04 20:43 - 2021-03-04 20:43 - 001314128 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi > 2021-03-04 20:43 - 2021-03-04 20:43 - 000231248 _____ C:\Windows\system32\containerdevicemanagement.dll > 2021-03-04 20:43 - 2021-03-04 20:43 - 000091136 _____ C:\Windows\system32\Drivers\cimfs.sys > 2021-03-04 20:41 - 2021-03-04 20:48 - 000000000 ____ D C:\Program Files\Garritan > 2021-03-04 20:41 - 2021-03-04 20:41 - 000000000 ____ D C:\Program Files\Plogue > 2021-03-04 20:39 - 2021-03-04 20:39 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Finale 2011 > 2021-03-04 20:37 - 2021-03-05 02:12 - 000000000 ____ D C:\ProgramData\MakeMusic > 2021-03-04 20:36 - 2021-03-04 21:06 - 000000000 ____ D C:\Program Files (x86)\Finale 2011 > 2021-03-04 20:36 - 2021-03-04 20:36 - 000000000 ____ D C:\PSFONTS > 2021-03-04 20:06 - 2021-03-04 20:06 - 000000000 ___HD C:\$SysReset > 2021-03-04 19:51 - 2021-03-04 19:51 - 000000000 ____ D C:\Users\sebsa\AppData\Local\wureset > 2021-03-04 18:21 - 2021-03-04 18:21 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\NVIDIA > 2021-03-04 18:12 - 2021-03-05 12:14 - 000000000 ____ D C:\ProgramData\CLSK > 2021-03-04 18:12 - 2021-03-05 11:58 - 000000000 ____ D C:\ProgramData\install_clap > 2021-03-04 18:09 - 2021-03-05 12:13 - 000000000 ___HD C:\ProgramData\CyberLink > 2021-03-04 18:00 - 2021-03-04 18:00 - 000000000 ____ D C:\Windows\SysWOW64\ca-ES > 2021-03-04 18:00 - 2021-03-04 18:00 - 000000000 ____ D C:\Windows\ca-ES > 2021-03-04 17:56 - 2021-03-05 12:15 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\CyberLink > 2021-03-04 17:52 - 2021-03-04 17:53 - 000000000 ____ D C:\ProgramData\Temp > 2021-03-04 17:51 - 2021-03-12 17:59 - 000000000 ____ D C:\Windows\system32\ca-ES > 2021-03-04 17:48 - 2007-02-05 11:15 - 000018432 _____ (NewSoft Technology Corporation) C:\Windows\SysWOW64\Drivers\Achernar.sys > 2021-03-04 17:48 - 2006-02-17 14:53 - 000671859 _____ C:\Windows\SysWOW64\NSEncore.dll > 2021-03-04 17:48 - 2005-06-08 01:32 - 000192512 _____ C:\Windows\SysWOW64\NSM4AEnc.dll > 2021-03-04 17:46 - 2021-03-04 17:49 - 000000000 ____ D C:\Users\sebsa\AppData\Local\NewSoft > 2021-03-04 17:45 - 2021-03-04 17:48 - 000034104 _____ (NewSoft Technology Corporation) C:\Windows\system32\Drivers\Achernar.sys > 2021-03-04 17:45 - 2021-03-04 17:48 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NewSoft > 2021-03-04 17:45 - 2001-11-12 10:44 - 000122880 _____ C:\Windows\SysWOW64\Nsvideo.dll > 2021-03-04 17:44 - 2021-03-04 17:48 - 000000000 ____ D C:\Program Files (x86)\NewSoft > 2021-03-04 17:40 - 2009-02-10 20:43 - 000001724 _____ C:\Windows\Spanish.lng > 2021-03-04 17:40 - 2009-02-10 20:41 - 000001458 _____ C:\Windows\TVEpaDrv.ini > 2021-03-04 17:40 - 2008-09-12 14:21 - 000651776 _____ (eMPIA Technology, Inc.) C:\Windows\system32\Drivers\emBDA64.sys > 2021-03-04 17:40 - 2008-09-12 14:21 - 000539520 _____ (eMPIA Technology, Inc.) C:\Windows\system32\Drivers\emOEM64.sys > 2021-03-04 17:40 - 2008-09-12 14:20 - 000106496 _____ (eMPIA Technology, Inc.) C:\Windows\SysWOW64\emPRP.ax > 2021-03-04 17:40 - 2008-09-12 14:19 - 000123904 _____ (eMPIA Technology, Inc.) C:\Windows\system32\emPRP64.ax > 2021-03-04 17:40 - 2008-01-25 16:54 - 000451072 _____ C:\Windows\emunist.exe > 2021-03-04 17:40 - 2007-11-08 09:07 - 000065536 _____ (eMPIA Technology, Inc.) C:\Windows\emMON.exe > 2021-03-04 17:40 - 2006-11-10 04:50 - 000016382 _____ C:\Windows\system32\Drivers\merlinC.rom > 2021-03-04 17:33 - 2021-03-04 17:33 - 000581120 _____ (Microsoft Corporation) C:\Windows\system32\PhotoScreensaver.scr > 2021-03-04 17:33 - 2021-03-04 17:33 - 000499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoScreensaver.scr > 2021-03-04 17:33 - 2021-03-04 17:33 - 000095744 _____ C:\Windows\system32\VirtualMonitorManager.dll > 2021-03-04 17:33 - 2021-03-04 17:33 - 000067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscui.cpl > 2021-03-04 17:32 - 2021-03-04 17:32 - 000575488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hhctrl.ocx > 2021-03-04 17:32 - 2021-03-04 17:32 - 000469504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appwiz.cpl > 2021-03-04 17:32 - 2021-03-04 17:32 - 000304128 _____ (Microsoft Corporation) C:\Windows\system32\ksproxy.ax > 2021-03-04 17:32 - 2021-03-04 17:32 - 000234496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ksproxy.ax > 2021-03-04 17:32 - 2021-03-04 17:32 - 000170496 _____ (Microsoft Corporation) C:\Windows\system32\VBICodec.ax > 2021-03-04 17:32 - 2021-03-04 17:32 - 000135168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VBICodec.ax > 2021-03-04 17:32 - 2021-03-04 17:32 - 000084992 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl > 2021-03-04 17:32 - 2021-03-04 17:32 - 000072704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx > 2021-03-04 17:32 - 2021-03-04 17:32 - 000053760 _____ C:\Windows\SysWOW64\BWContextHandler.dll > 2021-03-04 17:31 - 2021-03-04 17:31 - 000729600 _____ (Microsoft Corporation) C:\Windows\system32\hhctrl.ocx > 2021-03-04 17:31 - 2021-03-04 17:31 - 000595968 _____ (Microsoft Corporation) C:\Windows\system32\appwiz.cpl > 2021-03-04 17:31 - 2021-03-04 17:31 - 000087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx > 2021-03-04 17:31 - 2021-03-04 17:31 - 000067072 _____ C:\Windows\system32\BWContextHandler.dll > 2021-03-04 17:30 - 2021-03-04 17:30 - 000446976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mmsys.cpl > 2021-03-04 17:30 - 2021-03-04 17:30 - 000178688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\intl.cpl > 2021-03-04 17:30 - 2021-03-04 17:30 - 000100864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncpa.cpl > 2021-03-04 17:30 - 2021-03-04 17:30 - 000039936 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 001333760 _____ C:\Windows\SysWOW64\TextInputMethodFormatter.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 000455680 _____ C:\Windows\SysWOW64\WindowManagementAPI.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 000422912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winspool.drv > 2021-03-04 17:29 - 2021-03-04 17:29 - 000330752 _____ C:\Windows\SysWOW64\ssdm.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 000266240 _____ C:\Windows\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 000240640 _____ C:\Windows\SysWOW64\CoreMas.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 000235520 _____ C:\Windows\SysWOW64\HeatCore.dll > 2021-03-04 17:29 - 2021-03-04 17:29 - 000182272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\timedate.cpl > 2021-03-04 17:29 - 2021-03-04 17:29 - 000010752 _____ C:\Windows\SysWOW64\agentactivationruntimestarter.exe > 2021-03-04 17:28 - 2021-03-04 17:28 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\ncpa.cpl > 2021-03-04 17:27 - 2021-03-04 17:29 - 000000000 ___HD C:\Program Files (x86)\Creative Installation Information > 2021-03-04 17:27 - 2021-03-04 17:27 - 002254336 _____ C:\Windows\system32\dwmscene.dll > 2021-03-04 17:27 - 2021-03-04 17:27 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\intl.cpl > 2021-03-04 17:27 - 2021-03-04 17:27 - 000060928 _____ C:\Windows\system32\runexehelper.exe > 2021-03-04 17:27 - 2021-03-04 17:27 - 000048640 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll > 2021-03-04 17:27 - 2021-03-04 17:27 - 000001370 _____ C:\Windows\system32\ThirdPartyNoticesBySHS.txt > 2021-03-04 17:26 - 2021-03-04 17:26 - 000643072 _____ C:\Windows\system32\WindowManagementAPI.dll > 2021-03-04 17:26 - 2021-03-04 17:26 - 000544768 _____ (Microsoft Corporation) C:\Windows\system32\mmsys.cpl > 2021-03-04 17:26 - 2021-03-04 17:26 - 000190976 _____ C:\Windows\system32\BthpanContextHandler.dll > 2021-03-04 17:26 - 2021-03-04 17:26 - 000152064 _____ C:\Windows\system32\EoAExperiences.exe > 2021-03-04 17:25 - 2021-03-04 17:25 - 002260992 _____ C:\Windows\system32\TextInputMethodFormatter.dll > 2021-03-04 17:25 - 2021-03-04 17:25 - 000306688 _____ C:\Windows\system32\HeatCore.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000562688 _____ (Microsoft Corporation) C:\Windows\system32\winspool.drv > 2021-03-04 17:24 - 2021-03-04 17:24 - 000455168 _____ C:\Windows\system32\ssdm.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000363520 _____ C:\Windows\system32\Windows.Internal.UI.Shell.WindowTabManager.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000287232 _____ C:\Windows\system32\CoreMas.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\timedate.cpl > 2021-03-04 17:24 - 2021-03-04 17:24 - 000165888 _____ C:\Windows\system32\DataStoreCacheDumpTool.exe > 2021-03-04 17:24 - 2021-03-04 17:24 - 000089088 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.proxystub.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000074240 _____ C:\Windows\system32\rdsxvmaudio.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000073216 _____ C:\Windows\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll > 2021-03-04 17:24 - 2021-03-04 17:24 - 000013312 _____ C:\Windows\system32\agentactivationruntimestarter.exe > 2021-03-04 16:25 - 2021-03-17 16:25 - 000000000 ____ D C:\Program Files\CCleaner > 2021-03-04 16:25 - 2021-03-04 16:25 - 000003936 _____ C:\Windows\system32\Tasks\CCleaner Update > 2021-03-04 16:25 - 2021-03-04 16:25 - 000002874 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC > 2021-03-04 16:25 - 2021-03-04 16:25 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner > 2021-03-04 16:04 - 2021-03-04 16:04 - 000000000 ____ D C:\Users\sebsa\AppData\Local\OneDrive > 2021-03-04 15:31 - 2021-03-04 15:31 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Creative > 2021-03-04 15:22 - 2005-11-23 01:01 - 000020480 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\P0630Ext.crl > 2021-03-04 15:22 - 2005-11-23 01:01 - 000010752 _____ (Creative Technology Ltd.) C:\Windows\system32\P0630Ext.crl > 2021-03-04 15:22 - 2005-11-11 13:55 - 000099488 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\P0630Vid.sys > 2021-03-04 15:22 - 2005-10-28 10:04 - 000005973 _____ C:\Windows\PD0630.uns > 2021-03-04 15:22 - 2005-10-12 01:02 - 000057344 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\P0630Hwx.dll > 2021-03-04 15:22 - 2005-10-12 01:02 - 000052736 _____ (Creative Technology Ltd.) C:\Windows\system32\P0630Hwx.dll > 2021-03-04 15:22 - 2005-10-12 01:02 - 000017408 _____ (Creative Technology Ltd.) C:\Windows\system32\P0630Sti.dll > 2021-03-04 15:22 - 2005-10-12 01:01 - 000024576 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\P0630Aor.dll > 2021-03-04 15:22 - 2005-10-11 01:02 - 000098304 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\P0630Ext.ax > 2021-03-04 15:22 - 2005-10-11 01:02 - 000094720 _____ (Creative Technology Ltd.) C:\Windows\system32\P0630Ext.ax > 2021-03-04 15:22 - 2005-10-11 01:02 - 000033792 _____ (Creative Technology Ltd.) C:\Windows\system32\P0630Pin.dll > 2021-03-04 15:22 - 2005-09-20 01:01 - 000009728 _____ (Creative Technology Ltd.) C:\Windows\system32\P0630Srv.exe > 2021-03-04 15:22 - 2005-08-31 01:01 - 000126976 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\P0630Vfw.dll > 2021-03-04 15:22 - 2005-08-31 01:01 - 000024576 _____ (Creative Technology Ltd.) C:\Windows\P0630Cfg.exe > 2021-03-04 15:22 - 2005-08-02 01:06 - 000026112 _____ (Creative Technology Ltd.) C:\Windows\system32\CtRegApp.dll > 2021-03-04 15:22 - 2005-07-13 02:17 - 000097280 _____ (Creative Technology Ltd.) C:\Windows\CtDrvIns.exe > 2021-03-04 15:22 - 2005-07-07 01:07 - 000036864 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\CtCamMgr.dll > 2021-03-04 15:22 - 2005-07-07 01:07 - 000025088 _____ (Creative Technology Ltd.) C:\Windows\system32\CtCamMgr.dll > 2021-03-04 15:22 - 2005-04-19 01:00 - 000005120 _____ (Creative Technology Ltd.) C:\Windows\system32\CtCamPin.crl > 2021-03-04 14:52 - 2021-03-04 15:11 - 004931577 _____ C:\Windows\{00000004-00000000-00000001-00001102-00000004-10071102}.CDF > 2021-03-04 14:52 - 2021-03-04 14:52 - 000466520 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll > 2021-03-04 14:52 - 2021-03-04 14:52 - 000445016 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll > 2021-03-04 14:52 - 2021-03-04 14:52 - 000123480 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll > 2021-03-04 14:52 - 2021-03-04 14:52 - 000109144 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll > 2021-03-04 14:52 - 2021-03-04 14:52 - 000000000 ____ D C:\Program Files (x86)\OpenAL > 2021-03-04 14:51 - 2021-03-04 14:52 - 000000000 ____ D C:\Windows\system32\Data > 2021-03-04 14:51 - 2021-03-04 14:51 - 000000000 ____ D C:\Windows\SysWOW64\Data > 2021-03-04 14:51 - 2021-03-04 14:47 - 000021592 _____ (Creative Technology Limited) C:\Windows\system32\INRES.DLL > 2021-03-04 14:51 - 2021-03-04 14:47 - 000021080 _____ (Creative Technology Limited) C:\Windows\SysWOW64\INRES.DLL > 2021-03-04 14:51 - 2021-03-04 14:47 - 000019544 _____ (Creative Technology Ltd) C:\Windows\system32\CTDCRES.DLL > 2021-03-04 14:46 - 2021-03-04 15:07 - 000000000 ____ D C:\Windows\SysWOW64\Defaults > 2021-03-04 14:46 - 2021-03-04 14:46 - 000000159 ___RH C:\Windows\ctfile.rfc > 2021-03-04 14:46 - 2016-09-27 17:23 - 000089600 _____ C:\Windows\system32\CmdRtr64.DLL > 2021-03-04 14:46 - 2016-09-27 17:22 - 000074240 _____ C:\Windows\SysWOW64\CmdRtr.DLL > 2021-03-04 14:46 - 2016-09-27 17:21 - 000363520 _____ C:\Windows\system32\APOMgr64.DLL > 2021-03-04 14:46 - 2016-09-27 17:19 - 000273920 _____ C:\Windows\SysWOW64\APOMngr.DLL > 2021-03-04 14:46 - 2013-04-25 16:07 - 000006505 ____ N C:\Windows\SysWOW64\CTOPT399.cat > 2021-03-04 14:46 - 2013-04-03 14:01 - 000006601 ____ N C:\Windows\system32\CTOPT399.cat > 2021-03-04 14:46 - 2013-04-03 09:55 - 000079360 ____ N (Creative Technology Ltd) C:\Windows\SysWOW64\CTOPT399.dll > 2021-03-04 14:46 - 2013-04-03 09:54 - 000088576 ____ N (Creative Technology Ltd) C:\Windows\system32\CTOPT399.dll > 2021-03-04 14:46 - 2008-12-22 20:13 - 000061440 ____ N (Creative Technology Ltd) C:\Windows\SysWOW64\CTChkAud.dll > 2021-03-04 14:46 - 2008-12-22 20:13 - 000049664 ____ N (Creative Technology Ltd) C:\Windows\system32\CTChkAud.dll > 2021-03-04 14:46 - 2000-05-11 02:00 - 000090112 ____ N (Creative Technology Ltd.) C:\Windows\Updreg.EXE > 2021-03-04 14:45 - 2021-03-04 17:29 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative > 2021-03-04 14:45 - 2021-03-04 14:45 - 000000000 ____ D C:\Program Files\Creative > 2021-03-04 14:44 - 2021-03-04 17:28 - 000000000 ____ D C:\Program Files (x86)\Creative > 2021-03-04 14:14 - 2021-03-12 13:10 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information > 2021-03-04 14:14 - 2021-03-04 15:10 - 000000000 ___HD C:\Program Files (x86)\Temp > 2021-03-04 14:13 - 2021-03-05 20:48 - 000000000 ____ D C:\ProgramData\Package Cache > 2021-03-04 14:13 - 2021-03-04 14:13 - 000000000 ____ D C:\Program Files\Intel > 2021-03-04 14:11 - 2021-03-04 14:11 - 000000000 ____ D C:\ProgramData\Intel > 2021-03-04 14:11 - 2021-03-04 14:11 - 000000000 ____ D C:\Program Files (x86)\Intel > 2021-03-04 14:10 - 2021-03-04 14:10 - 000000000 ____ D C:\Users\sebsa\Intel > 2021-03-04 13:49 - 2021-03-04 13:49 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation > 2021-03-04 13:49 - 2021-03-04 13:49 - 000000000 ____ D C:\Program Files (x86)\VulkanRT > 2021-03-04 13:49 - 2018-03-24 00:05 - 000138120 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe > 2021-03-04 13:49 - 2017-12-08 23:25 - 000798520 _____ C:\Windows\SysWOW64\vulkan-1.dll > 2021-03-04 13:49 - 2017-12-08 23:25 - 000490808 _____ C:\Windows\SysWOW64\vulkaninfo.exe > 2021-03-04 13:49 - 2017-12-08 23:24 - 000928568 _____ C:\Windows\system32\vulkan-1.dll > 2021-03-04 13:49 - 2017-12-08 23:24 - 000591672 _____ C:\Windows\system32\vulkaninfo.exe > 2021-03-04 13:47 - 2021-03-05 15:33 - 000000000 ____ D C:\Users\sebsa\AppData\Local\D3DSCache > 2021-03-04 13:47 - 2021-03-04 13:47 - 000000000 ____ D C:\Windows\system32\Drivers\NVIDIA Corporation > 2021-03-04 13:46 - 2018-04-12 23:02 - 000998432 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll > 2021-03-04 13:46 - 2018-04-12 23:02 - 000950016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll > 2021-03-04 13:46 - 2018-04-12 23:01 - 001985112 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6439135.dll > 2021-03-04 13:46 - 2018-04-12 23:01 - 001683712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6439135.dll > 2021-03-04 13:46 - 2018-04-12 23:01 - 001138720 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll > 2021-03-04 13:46 - 2018-04-12 23:01 - 001065888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll > 2021-03-04 13:46 - 2018-04-12 23:01 - 000054272 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll > 2021-03-04 13:46 - 2018-04-12 23:00 - 040278616 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll > 2021-03-04 13:46 - 2018-04-12 23:00 - 035188992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll > 2021-03-04 13:46 - 2018-04-12 23:00 - 004318112 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll > 2021-03-04 13:46 - 2018-04-12 23:00 - 003719096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll > 2021-03-04 13:46 - 2018-04-12 22:58 - 019855144 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll > 2021-03-04 13:46 - 2018-04-12 22:58 - 016496768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll > 2021-03-04 13:46 - 2018-04-12 22:58 - 013571520 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll > 2021-03-04 13:46 - 2018-04-12 22:58 - 011132384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll > 2021-03-04 13:46 - 2018-04-12 22:58 - 001153752 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll > 2021-03-04 13:46 - 2018-04-12 22:57 - 012967056 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll > 2021-03-04 13:46 - 2018-04-12 22:57 - 000902096 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll > 2021-03-04 13:46 - 2018-04-12 22:56 - 011001504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll > 2021-03-04 13:46 - 2018-04-12 22:56 - 003939624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll > 2021-03-04 13:41 - 2021-03-04 13:41 - 000000000 ____ D C:\Windows\pss > 2021-03-04 13:36 - 2021-03-04 13:36 - 000000000 ____ D C:\Program Files\Microsoft Update Health Tools > 2021-03-04 13:30 - 2021-03-12 12:37 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Google > 2021-03-04 13:30 - 2021-03-12 12:36 - 000000000 ____ D C:\Program Files (x86)\Google > 2021-03-04 13:30 - 2021-03-10 12:26 - 000000000 ____ D C:\Windows\system32\MRT > 2021-03-04 13:28 - 2021-03-12 19:14 - 000000000 ___HD C:\$WinREAgent > 2021-03-04 13:27 - 2021-03-04 19:34 - 000000000 ____ D C:\Users\sebsa\AppData\Local\ElevatedDiagnostics > 2021-03-04 13:17 - 2021-03-06 12:17 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Comms > 2021-03-04 13:04 - 2021-03-08 14:53 - 000000000 ____ D C:\Users\sebsa\AppData\Local\PlaceholderTileLogoFolder > 2021-03-04 13:02 - 2021-03-04 13:02 - 000000000 ___HD C:\OneDriveTemp > 2021-03-04 13:01 - 2021-03-16 09:55 - 000003358 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3721864700-73880727-17468404-1001 > 2021-03-04 13:01 - 2021-03-16 09:55 - 000000000 ___RD C:\Users\sebsa\OneDrive > 2021-03-04 13:00 - 2018-03-24 00:02 - 005952392 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll > 2021-03-04 13:00 - 2018-03-24 00:02 - 002596320 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll > 2021-03-04 13:00 - 2018-03-24 00:02 - 001767824 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll > 2021-03-04 13:00 - 2018-03-24 00:02 - 000633224 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll > 2021-03-04 13:00 - 2018-03-24 00:02 - 000451040 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll > 2021-03-04 13:00 - 2018-03-24 00:02 - 000123840 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll > 2021-03-04 13:00 - 2018-03-24 00:02 - 000083072 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll > 2021-03-04 13:00 - 2018-03-21 12:22 - 008114212 _____ C:\Windows\system32\nvcoproc.bin > 2021-03-04 12:59 - 2021-03-17 18:53 - 000000000 ____ D C:\ProgramData\NVIDIA > 2021-03-04 12:59 - 2021-03-04 13:49 - 000000000 ____ D C:\ProgramData\NVIDIA Corporation > 2021-03-04 12:59 - 2021-03-04 13:47 - 000000000 ____ D C:\Program Files (x86)\NVIDIA Corporation > 2021-03-04 12:59 - 2021-03-04 12:59 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Publishers > 2021-03-04 12:59 - 2018-03-24 00:50 - 000001951 _____ C:\Windows\NvContainerRecovery.bat > 2021-03-04 12:59 - 2017-11-09 04:43 - 000540784 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll > 2021-03-04 12:59 - 2017-11-09 04:43 - 000446392 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll > 2021-03-04 12:58 - 2021-03-05 21:50 - 000000000 ____ D C:\Users\sebsa\AppData\Local\Packages > 2021-03-04 12:58 - 2021-03-05 13:17 - 000000000 ____ D C:\Users\sebsa\AppData\Local\VirtualStore > 2021-03-04 12:58 - 2021-03-05 02:04 - 000000000 ____ D C:\Users\sebsa\AppData\Roaming\Adobe > 2021-03-04 12:58 - 2021-03-05 01:12 - 000000000 ____ D C:\Users\sebsa\AppData\Local\ConnectedDevicesPlatform > 2021-03-04 12:58 - 2021-03-05 00:38 - 001683676 _____ C:\Windows\system32\PerfStringBackup.INI > 2021-03-04 12:58 - 2021-03-04 13:47 - 000000000 ____ D C:\Program Files\NVIDIA Corporation > 2021-03-04 12:58 - 2018-04-12 23:01 - 001690952 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll > 2021-03-04 12:58 - 2018-04-12 23:01 - 000235424 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys > 2021-03-04 12:58 - 2018-04-12 22:56 - 004633920 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll > 2021-03-04 12:58 - 2018-04-12 19:33 - 000048407 _____ C:\Windows\system32\nvinfo.pb > 2021-03-04 12:56 - 2021-03-17 14:52 - 000000000 ____ D C:\Users\sebsa > 2021-03-04 12:56 - 2021-03-16 09:55 - 000002399 _____ C:\Users\sebsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000020 ___SH C:\Users\sebsa\ntuser.ini > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Reciente > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Plantillas > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Mis documentos > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Menú Inicio > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Impresoras > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Entorno de red > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Datos de programa > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\Configuración local > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\AppData\Roaming\Microsoft\Windows\Start Menu\Programas > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\AppData\Local\Historial > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\AppData\Local\Datos de programa > 2021-03-04 12:56 - 2021-03-04 12:56 - 000000000 _SHDL C:\Users\sebsa\AppData\Local\Archivos temporales de Internet > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Reciente > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Plantillas > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Mis documentos > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Menú Inicio > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Impresoras > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Entorno de red > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Datos de programa > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\Configuración local > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historial > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\AppData\Local\Datos de programa > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Users\Default\AppData\Local\Archivos temporales de Internet > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\ProgramData\Plantillas > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\ProgramData\Menú Inicio > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\ProgramData\Escritorio > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\ProgramData\Documentos > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\ProgramData\Datos de programa > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Program Files\Archivos comunes > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Documents and Settings > 2021-03-04 12:52 - 2021-03-04 12:52 - 000000000 _SHDL C:\Archivos de programa > 2021-03-04 12:47 - 2021-03-04 12:47 - 000002842 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3721864700-73880727-17468404-500 > 2021-03-04 12:47 - 2021-03-04 12:47 - 000000000 ____ H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf > 2021-03-04 12:46 - 2021-03-17 14:50 - 000008192 ___SH C:\DumpStack.log.tmp > 2021-03-04 12:45 - 2021-03-06 13:54 - 000000000 ____ D C:\Windows\Panther > 2021-03-04 12:45 - 2021-03-04 12:45 - 000008192 __RSH C:\BOOTSECT.BAK > > ``` ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [17 Marzo, 2021 23:36 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/35 "2021-03-17T23:36:12Z")
Y 2.ª parte (FRST): > ``` > ==================== One month (modified) ================== > > (If an entry is included in the fixlist, the file/folder will be moved.) > > 2021-03-17 18:52 - 2020-11-18 23:30 - 000000000 ____ D C:\Windows\system32\SleepStudy > 2021-03-17 18:52 - 2019-12-07 10:14 - 000000000 ____ D C:\ProgramData\regid.1991-06.com.microsoft > 2021-03-17 16:12 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\Registration > 2021-03-17 14:50 - 2020-11-19 00:30 - 000000006 ____ H C:\Windows\Tasks\SA.DAT > 2021-03-17 14:41 - 2020-11-19 00:30 - 000000000 ____ D C:\Windows\system32\Drivers\wd > 2021-03-17 10:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Windows\ELAMBKUP > 2021-03-17 10:27 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\AppReadiness > 2021-03-17 10:26 - 2019-12-07 10:13 - 000000000 ____ D C:\Windows\INF > 2021-03-15 07:03 - 2020-11-19 00:32 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk > 2021-03-15 07:03 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps > 2021-03-14 20:01 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI > 2021-03-13 13:17 - 2019-12-07 10:03 - 000032768 _____ C:\Windows\system32\config\ELAM > 2021-03-12 19:35 - 2019-12-07 10:03 - 000000000 ____ D C:\Windows\CbsTemp > 2021-03-12 10:27 - 2020-11-18 23:30 - 000490032 _____ C:\Windows\system32\FNTCACHE.DAT > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\setup > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\oobe > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\Dism > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SystemResources > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\SystemResetPlatform > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\setup > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\oobe > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\Dism > 2021-03-11 22:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\bcastdvr > 2021-03-11 17:04 - 2020-11-19 00:12 - 000413702 __RSH C:\bootmgr > 2021-03-06 13:03 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\NDF > 2021-03-05 21:50 - 2020-11-19 00:34 - 000000000 ____ D C:\ProgramData\Packages > 2021-03-05 17:42 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\LiveKernelReports > 2021-03-05 13:46 - 2019-12-07 15:55 - 000788380 _____ C:\Windows\system32\perfh00A.dat > 2021-03-05 13:46 - 2019-12-07 15:55 - 000155768 _____ C:\Windows\system32\perfc00A.dat > 2021-03-05 13:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\MUI > 2021-03-05 13:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\MUI > 2021-03-05 11:37 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\appcompat > 2021-03-05 01:25 - 2019-12-07 10:14 - 000000000 ____ D C:\Program Files\Common Files\microsoft shared > 2021-03-04 21:44 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel > 2021-03-04 21:44 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\WinBioPlugIns > 2021-03-04 21:44 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\Provisioning > 2021-03-04 21:44 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\PolicyDefinitions > 2021-03-04 21:38 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\IME > 2021-03-04 21:32 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\System > 2021-03-04 18:45 - 2019-12-07 15:57 - 000000000 ____ D C:\Program Files\Windows Photo Viewer > 2021-03-04 18:45 - 2019-12-07 15:57 - 000000000 ____ D C:\Program Files (x86)\Windows Photo Viewer > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\F12 > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\UNP > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\F12 > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\PrintDialog > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\PerceptionSimulation > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\Keywords > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\Com > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\SysWOW64\AdvancedInstallers > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\Sysprep > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\PerceptionSimulation > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\migwiz > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\Keywords > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\es-MX > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\Com > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\system32\AdvancedInstallers > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\ShellExperiences > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\ShellComponents > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Program Files\Windows Defender > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Program Files\Common Files\System > 2021-03-04 18:45 - 2019-12-07 10:14 - 000000000 ____ D C:\Program Files (x86)\Windows Defender > 2021-03-04 18:45 - 2019-12-07 10:03 - 000000000 ____ D C:\Windows\servicing > 2021-03-04 18:00 - 2019-12-07 15:55 - 000000000 ____ D C:\Windows\SysWOW64\Printing_Admin_Scripts > 2021-03-04 18:00 - 2019-12-07 15:55 - 000000000 ____ D C:\Windows\system32\Printing_Admin_Scripts > 2021-03-04 18:00 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\dsc > 2021-03-04 15:22 - 2019-12-07 10:14 - 000000251 _____ C:\Windows\system.ini > 2021-03-04 14:47 - 2018-08-15 02:56 - 000601440 _____ (Creative Technology Ltd.) C:\Windows\system32\UDAAPO64.DLL > 2021-03-04 14:47 - 2018-08-15 02:56 - 000522896 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\UDAAPO32.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 002202496 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\CT0531FL.SYS > 2021-03-04 14:47 - 2018-08-14 23:57 - 001840000 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\CTMMFILT.SYS > 2021-03-04 14:47 - 2018-08-14 23:57 - 001375640 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\ha10kx2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000880000 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\ctaud2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000818888 _____ (Creative Labs Inc.) C:\Windows\SysWOW64\OALInst.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000718208 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CTAUDFX.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000692600 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CTSBLFX.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000609512 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\UDAAIM64.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000592256 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\ctac32k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000345712 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctdc0001.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000306560 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\haP17v2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000301976 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\ctsfm2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000271232 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\haP16v2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000237144 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctdc0000.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000236920 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\ctoss2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000229464 _____ (Creative Technology Limited) C:\Windows\system32\ctdvinst.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000205392 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctemupia.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000185424 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ct_oal.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000170368 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\COMMONFX.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000159104 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\emupia2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000153472 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\CTERFXFX.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000141912 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\sfms32.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000140376 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctdcifce.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000131152 _____ (Creative Technology Limited) C:\Windows\system32\ctsfinst.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000097040 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctpxst32.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000087128 _____ C:\Windows\SysWOW64\ctmmactl.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000087128 _____ (Creative Labs) C:\Windows\SysWOW64\eaxac3.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000083032 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\piaproxy.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000083032 _____ (Creative Technology Limited) C:\Windows\system32\ctcoinst.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000078936 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctosuser.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000067160 _____ (Creative Technology Ltd.) C:\Windows\system32\UDAPLD64.DLL > 2021-03-04 14:47 - 2018-08-14 23:57 - 000066128 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CTpcmcia.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000064592 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctdproxy.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000056408 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctspkhlp.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000056408 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctasio.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000052816 _____ () C:\Windows\SysWOW64\CTBurst.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000051792 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\AddCat.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000050768 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctscal.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000047704 _____ (Creative Technology Limited) C:\Windows\SysWOW64\readreg.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000047192 _____ C:\Windows\SysWOW64\psconv.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000043096 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\devreg.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000042064 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctthxcal.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000037880 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\ctgame.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000029776 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CtHelper.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000028752 _____ C:\Windows\system32\regplib.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000028544 _____ (Creative Technology Ltd) C:\Windows\system32\Drivers\ctprxy2k.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000028032 _____ (Creative Technology Ltd.) C:\Windows\system32\Drivers\pfmodnt.sys > 2021-03-04 14:47 - 2018-08-14 23:57 - 000022104 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctmmep.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000021080 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ac3api.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000020056 _____ ( ) C:\Windows\SysWOW64\a3d.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000019544 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CTDCRES.DLL > 2021-03-04 14:47 - 2018-08-14 23:57 - 000019536 _____ ( ) C:\Windows\SysWOW64\killapps.exe > 2021-03-04 14:47 - 2018-08-14 23:57 - 000018520 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\CTPRES.DLL > 2021-03-04 14:47 - 2018-08-14 23:57 - 000018000 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\ctagent.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000015440 _____ (Creative Technology Ltd) C:\Windows\SysWOW64\sfman32.dll > 2021-03-04 14:47 - 2018-08-14 23:57 - 000014424 _____ C:\Windows\SysWOW64\enlocstr.exe > 2021-03-04 14:47 - 2018-08-14 23:56 - 000119376 _____ (Creative Technology Ltd) C:\Windows\system32\ctosur64.dll > 2021-03-04 14:47 - 2018-08-14 23:56 - 000106760 _____ (Creative Technology Ltd) C:\Windows\system32\ctpxst64.exe > 2021-03-04 14:47 - 2018-08-14 23:56 - 000089168 _____ (Creative Technology Ltd) C:\Windows\system32\ctdpxy64.dll > 2021-03-04 14:47 - 2018-08-14 23:56 - 000069712 _____ (Creative Technology Ltd) C:\Windows\system32\ctasio64.dll > 2021-03-04 14:47 - 2018-08-14 21:19 - 000050929 _____ C:\Windows\SysWOW64\instwdm.ini > 2021-03-04 14:47 - 2018-08-14 21:19 - 000050929 _____ C:\Windows\system32\instwdm.ini > 2021-03-04 14:47 - 2018-08-14 21:18 - 000000054 _____ C:\Windows\SysWOW64\ctzapxx.ini > 2021-03-04 14:47 - 2018-08-14 21:18 - 000000054 _____ C:\Windows\system32\ctzapxx.ini > 2021-03-04 14:47 - 2018-08-14 19:47 - 000389995 _____ C:\Windows\SysWOW64\ctdnlstr.dat > 2021-03-04 14:47 - 2018-08-14 19:47 - 000389995 _____ C:\Windows\system32\ctdnlstr.dat > 2021-03-04 14:47 - 2018-08-14 19:47 - 000051981 _____ C:\Windows\SysWOW64\ctdlang.dat > 2021-03-04 14:47 - 2018-08-14 19:47 - 000051981 _____ C:\Windows\system32\ctdlang.dat > 2021-03-04 14:47 - 2018-08-14 19:36 - 000149856 _____ C:\Windows\system32\ctbas2w.dat > 2021-03-04 14:47 - 2018-08-14 19:33 - 000283249 _____ C:\Windows\system32\ctsbas2w.dat > 2021-03-04 14:47 - 2018-08-14 19:31 - 000313207 _____ C:\Windows\SysWOW64\ctstatic.dat > 2021-03-04 14:47 - 2018-08-14 19:31 - 000313207 _____ C:\Windows\system32\ctstatic.dat > 2021-03-04 14:47 - 2018-08-14 19:31 - 000053932 _____ C:\Windows\SysWOW64\ctdaught.dat > 2021-03-04 14:47 - 2018-08-14 19:31 - 000053932 _____ C:\Windows\system32\ctdaught.dat > 2021-03-04 14:47 - 2009-07-08 15:10 - 002167684 _____ C:\Windows\SysWOW64\CT2MGM.SF2 > 2021-03-04 14:47 - 2009-07-08 15:10 - 002167684 _____ C:\Windows\system32\CT2MGM.SF2 > 2021-03-04 14:47 - 2009-07-08 15:10 - 001048576 _____ C:\Windows\SysWOW64\CT1MGM.ROM > 2021-03-04 14:47 - 2009-07-08 15:10 - 001048576 _____ C:\Windows\system32\CT1MGM.ROM > 2021-03-04 14:47 - 2009-07-08 15:10 - 000001912 _____ C:\Windows\system32\Audigy.bmp > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000307 _____ C:\Windows\SysWOW64\kill.ini > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000307 _____ C:\Windows\system32\kill.ini > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000059 _____ C:\Windows\SysWOW64\default8.sfm > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000059 _____ C:\Windows\SysWOW64\default4.sfm > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000059 _____ C:\Windows\SysWOW64\default.sfm > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000059 _____ C:\Windows\system32\default8.sfm > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000059 _____ C:\Windows\system32\default4.sfm > 2021-03-04 14:47 - 2009-07-08 15:10 - 000000059 _____ C:\Windows\system32\default.sfm > 2021-03-04 14:47 - 2009-07-08 14:37 - 004931577 _____ C:\Windows\CTDVAUDY.CDF > 2021-03-04 14:47 - 2009-07-08 14:37 - 003735544 _____ C:\Windows\CTDV10K2.CDF > 2021-03-04 14:47 - 2009-06-12 22:09 - 000008515 _____ C:\Windows\SysWOW64\UDAAPO64.UDA > 2021-03-04 14:15 - 2020-11-19 00:32 - 002877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll > 2021-03-04 13:00 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\Help > 2021-03-04 12:56 - 2020-11-19 00:32 - 000003652 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA > 2021-03-04 12:56 - 2020-11-19 00:32 - 000003528 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore > 2021-03-04 12:54 - 2019-12-07 15:56 - 000000000 ____ D C:\Windows\system32\FxsTmp > 2021-03-04 12:54 - 2019-12-07 10:14 - 000000000 ____ D C:\Windows\ServiceState > 2021-03-04 12:54 - 2019-12-07 10:14 - 000000000 ____ D C:\ProgramData\USOPrivate > 2021-03-04 12:52 - 2019-12-07 10:14 - 000000000 ____ D C:\Program Files\Windows NT > 2021-03-04 12:45 - 2019-12-07 10:14 - 000028672 _____ C:\Windows\system32\config\BCD-Template > > ==================== SigCheck ============================ > > (There is no automatic fix for files that do not pass verification.) > > ==================== End of FRST.txt ======================== > > ``` ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [17 Marzo, 2021 23:36 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/36 "2021-03-17T23:36:47Z")
Y el “Addition”: > ``` > Additional scan result of Farbar Recovery Scan Tool (x64) Version: 17-03-2021 > Ran by sebsa (18-03-2021 00:26:19) > Running from C:\Users\sebsa\Desktop > Windows 10 Home Version 20H2 19042.867 (X64) (2021-03-04 11:53:18) > Boot Mode: Normal > ========================================================== > > ==================== Accounts: ============================= > > Administrador (S-1-5-21-3721864700-73880727-17468404-500 - Administrator - Disabled) > DefaultAccount (S-1-5-21-3721864700-73880727-17468404-503 - Limited - Disabled) > Invitado (S-1-5-21-3721864700-73880727-17468404-501 - Limited - Enabled) > sebsa (S-1-5-21-3721864700-73880727-17468404-1001 - Administrator - Enabled) => C:\Users\sebsa > WDAGUtilityAccount (S-1-5-21-3721864700-73880727-17468404-504 - Limited - Disabled) > > ==================== Security Center ======================== > > (If an entry is included in the fixlist, it will be removed.) > > AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} > > ==================== Installed Programs ====================== > > (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) > > 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) > Adobe Acrobat Reader DC - Catalan (HKLM-x32\...\{AC76BA86-7AD7-1027-7B44-AC0F074E4100}) (Version: 21.001.20145 - Nom de la vostra empresa) > Adobe Photoshop CS2 (HKLM-x32\...\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}) (Version: 9.0 - Adobe Systems, Inc.) > Aplicaciones de Microsoft 365 para empresas - ca-es (HKLM\...\O365ProPlusRetail - ca-es) (Version: 16.0.13628.20528 - Microsoft Corporation) > Aplicaciones de Microsoft 365 para empresas - es-es (HKLM\...\O365ProPlusRetail - es-es) (Version: 16.0.13628.20528 - Microsoft Corporation) > ARIA Engine v1.0.9.8 (HKLM\...\ARIA Engine_is1) (Version: v1.0.9.8 - Plogue Art et Technologie, Inc) > Boris FX Continuum Plug-ins 11 for Cyberlink (HKLM\...\{7E607B62-1788-40CB-BADB-DC1511627F6C}_is1) (Version: - Boris FX, Inc.) > CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform) > Conceptronic CHVIDEOCR (HKLM-x32\...\TVEpaDrv) (Version: - ) > Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.45 - Creative Technology Limited) > Creative MediaSource 5 (HKLM-x32\...\{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}) (Version: 5.26 - Creative Technology Limited) > Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited) > Creative WebCam Center (HKLM-x32\...\Creative WebCam Center) (Version: - ) > Creative WebCam Live! Driver (2.00.06.0000) (HKLM\...\Creative PD0630) (Version: - ) > CutePDF Writer (HKLM\...\CutePDF Writer Installation) (Version: 4.0 - Acro Software Inc.) > CyberLink PowerDirector 19 (HKLM-x32\...\{684A5195-4242-40E9-A0B8-58359138DF12}) (Version: 19.0.2108.0 - CyberLink Corp.) > Finale (HKLM\...\{9035EEF1-7FC8-4E01-8150-A12296BA8375}) (Version: 26.3.1.520 - MakeMusic) > Finale 2011 (HKLM-x32\...\Finale 2011) (Version: 2011..r2.2 - MakeMusic) > Garritan ARIA Player v1.02 (HKLM\...\ __ARIA_1012___ is1) (Version: v1.0.2.1 - Garritan) > Garritan Instruments for Finale (HKLM\...\ __ARIA_1013___ is1) (Version: v1.0.2.2 - Garritan) > Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.90 - Google LLC) > Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation) > Java 8 Update 281 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180281F0}) (Version: 8.0.2810.9 - Oracle Corporation) > K-Lite Codec Pack 16.0.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.0.5 - KLCP) > Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.54 - Microsoft Corporation) > Microsoft Office FrontPage 2003 (HKLM-x32\...\{90170C0A-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.5614.0 - Microsoft Corporation) > Microsoft OneDrive (HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\OneDriveSetup.exe) (Version: 21.030.0211.0002 - Microsoft Corporation) > Microsoft Teams (HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\Teams) (Version: 1.3.00.28779 - Microsoft Corporation) > Microsoft Update Health Tools (HKLM\...\{99FAF70F-9B61-4AB0-9EC0-B31F98FFDC4A}) (Version: 2.75.0.0 - Microsoft Corporation) > Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) > Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) > Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) > Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{2DFD8316-9EF1-3210-908C-4CB61961C1AC}) (Version: 9.0.30729 - Microsoft Corporation) > Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{527BBE2F-1FED-3D8B-91CB-4DB0F838E69E}) (Version: 9.0.30729 - Microsoft Corporation) > Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) > Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) > Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) > Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) > Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) > Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) > Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) > Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) > Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) > Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.23.27820 (HKLM-x32\...\{852adda4-4c78-4a38-b583-c0b360a329d6}) (Version: 14.23.27820.0 - Microsoft Corporation) > Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation) > MMFonts (HKLM-x32\...\{7564F180-CD44-4721-88FB-F88E7782D604}) (Version: 1.1.1.1 - MakeMusic, Inc.) > NewBlue Titler Pro for Windows (HKLM-x32\...\NewBlue Titler Pro for Windows) (Version: 1.5 - NewBlue) > NewBlue Video Essentials for Windows (HKLM-x32\...\NewBlue Video Essentials for Windows) (Version: 3.0 - NewBlue) > NewBlue Video Essentials VII for Windows (HKLM-x32\...\NewBlue Video Essentials VII for Windows) (Version: 3.0 - NewBlue) > NVIDIA Controlador de 3D Vision 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 391.35 - NVIDIA Corporation) > NVIDIA Controlador de audio HD 1.3.36.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.36.6 - NVIDIA Corporation) > NVIDIA Controlador de gráficos 391.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 391.35 - NVIDIA Corporation) > Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13628.20274 - Microsoft Corporation) Hidden > Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13628.20330 - Microsoft Corporation) Hidden > Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.13628.20274 - Microsoft Corporation) Hidden > OpenAL (HKLM-x32\...\OpenAL) (Version: - ) > Paquete Dolby Digital Live (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited) > Plex Media Server (HKLM-x32\...\{4d99a028-68e9-44ef-bd17-e79275ca6c49}) (Version: 1.21.4.4079 - Plex, Inc.) > Plex Media Server (HKLM-x32\...\{8814C965-46C7-4ACE-A890-B32E7517ACAD}) (Version: 1.21.4079 - Plex, Inc.) Hidden > PowerDirector Ultimate (HKLM\...\PowerDirector Ultimate 19.0.2108.0) (Version: 19.0.2108.0 - CyberLink) > Presto! Digital Converter (HKLM-x32\...\{EEFD47F3-3122-4A9C-8FFA-199F624378C6}) (Version: 1.10.00 - NewSoft) > Presto! VideoWorks 6 (HKLM-x32\...\{B0C0F5E6-10B1-11D6-9296-0050BA073EEC}) (Version: 6.31.00 - NewSoft) > proDAD Adorage 3.0 (64bit) (HKLM\...\proDAD-Adorage-3.0) (Version: 3.0.115.3 - proDAD GmbH) > Software para dispositivos de chipset Intel® (HKLM-x32\...\{c6cff78a-cccb-49d5-be68-ae0ec5f0d48a}) (Version: 10.1.1.8 - Intel(R) Corporation) Hidden > Sound Blaster Audigy 2 (HKLM-x32\...\{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}) (Version: 1.0 - Creative Technology Limited) > Stopping Plex (HKLM-x32\...\{BBCC35B6-3657-41A4-A961-3BD807F9F381}) (Version: 1.21.4079 - Plex, Inc.) Hidden > Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.28779 - Microsoft Corporation) > VLC media player (HKLM\...\VLC media player) (Version: 3.0.12 - VideoLAN) > Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden > > Packages: > ========= > Extensió de vídeo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2021-03-04] (Microsoft Corporation) > HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.3.838.0_x64__v10z8vjag6ke6 [2021-03-05] (HP Inc.) > Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.9.1252.0_x64__8wekyb3d8bbwe [2021-03-04] (Microsoft Studios) [MS Ad] > Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0 [2021-03-05] (Spotify AB) [Startup Task] > > ==================== Custom CLSID (Whitelisted): ============== > > (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) > > CustomCLSID: HKU\S-1-5-21-3721864700-73880727-17468404-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\sebsa\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) > CustomCLSID: HKU\S-1-5-21-3721864700-73880727-17468404-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\sebsa\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) > ShellIconOverlayIdentifiers: [AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-03-05] (Adobe Inc. -> ) > ShellIconOverlayIdentifiers: [AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-03-05] (Adobe Inc. -> ) > ShellIconOverlayIdentifiers: [AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-03-05] (Adobe Inc. -> ) > ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed] > ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-03-05] (Adobe Inc. -> ) > ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed] > ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation) > ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed] > ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2021-03-05] (Adobe Inc. -> ) > > ==================== Codecs (Whitelisted) ==================== > > (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) > > HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\system32\prodad-codec.dll [607256 2020-09-11] (proDAD GmbH -> proDAD GmbH) > HKLM\...\Drivers32: [VIDC.NSVI] => C:\Windows\SysWOW64\nsvideo.dll [122880 2001-11-12] () [File not signed] > > ==================== Shortcuts & WMI ======================== > > (The entries could be listed to be restored or removed.) > > ShortcutWithArgument: C:\Users\sebsa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" > > ==================== Loaded Modules (Whitelisted) ============= > > 2021-03-04 14:45 - 2016-04-07 14:16 - 000562176 ____ N (Creative Technology Ltd) [File not signed] C:\Program Files (x86)\Creative\SBAudigy2\SB Audigy Control Panel\CTAudEp.dll > 2021-03-04 14:45 - 2015-01-26 11:48 - 000239104 ____ N (Creative Technology Ltd) [File not signed] C:\Program Files (x86)\Creative\SBAudigy2\SB Audigy Control Panel\CTLoadRs.dll > 2021-03-04 14:45 - 2014-11-20 09:23 - 000837120 ____ N (Creative Technology Ltd) [File not signed] C:\Program Files (x86)\Creative\SBAudigy2\SB Audigy Control Panel\HookWndU.DLL > 2021-03-04 21:26 - 2019-02-21 17:00 - 000078336 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll > 2021-03-04 13:49 - 2018-03-24 00:05 - 000880024 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll > 2021-03-04 13:49 - 2018-03-24 00:05 - 000343728 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem\NvStereo\_nvstapisvr64.dll > > ==================== Alternate Data Streams (Whitelisted) ======== > > ==================== Safe Mode (Whitelisted) ================== > > ==================== Association (Whitelisted) ================= > > ==================== Internet Explorer (Whitelisted) ========== > > BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-03-04] (Oracle America, Inc. -> Oracle Corporation) > BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-04] (Oracle America, Inc. -> Oracle Corporation) > BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler-x32: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files (x86)\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation) [File not signed] > Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-03-13] (Microsoft Corporation -> Microsoft Corporation) > > (If an entry is included in the fixlist, it will be removed from the registry.) > > IE trusted site: HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\sharepoint.com -> hxxps://uab-files.sharepoint.com > > ==================== Hosts content: ========================= > > (If needed Hosts: directive could be included in the fixlist to reset Hosts.) > > 2019-12-07 10:14 - 2021-03-05 12:10 - 000000893 _____ C:\Windows\system32\drivers\etc\hosts > 127.0.0.1 cap.cyberlink.com > 127.0.0.1 activation.cyberlink.com > > ==================== Other Areas =========================== > > (Currently there is no automatic fix for this section.) > > HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\wureset;C:\Program Files (x86)\Common Files\Adobe\AGL > HKU\S-1-5-21-3721864700-73880727-17468404-1001\Control Panel\Desktop\\Wallpaper -> D:\SEBWIN10\Imatges\1003880.png > DNS Servers: Media is not connected to internet. > HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) > HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) > Windows Firewall is enabled. > > ==================== MSCONFIG/TASK MANAGER disabled items == > > (If an entry is included in the fixlist, it will be removed.) > > MSCONFIG\Services: Adobe LM Service => 3 > MSCONFIG\Services: AdobeARMservice => 2 > HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\StartupApproved\StartupFolder: => "Adobe Gamma.lnk" > HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning" > HKU\S-1-5-21-3721864700-73880727-17468404-1001\...\StartupApproved\Run: => "Adobe Reader Synchronizer" > > ==================== FirewallRules (Whitelisted) ================ > > (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) > > FirewallRules: [{EB75C0D4-942C-4610-8027-0F58D3A7E6A5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) > FirewallRules: [{AE94D3F4-653A-4EB9-89D1-2DF628B86F2E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) > FirewallRules: [{33D3A82E-02DD-4E71-9380-BFBB8802E889}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) > FirewallRules: [{6CF23A2C-1C4E-4B69-854B-499DE192099D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) > FirewallRules: [{6AB838C6-B5CA-4286-BF37-7F8DB84BF7CE}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) > FirewallRules: [{87737D8A-1822-4010-B259-6611D882E794}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) > FirewallRules: [{5502B54A-789F-470A-96DE-056AE5F1A1A0}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) > FirewallRules: [{69BF9367-DD3C-4550-BFC4-42D8D80BECE4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) > FirewallRules: [{26B61E77-32D5-4730-BC57-DEE15AC4C510}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) > FirewallRules: [{0C613E07-7589-4F17-95A5-9F92C56F93E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{E4FCA653-1949-4216-9AD3-D8D30C3D5C02}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{5869E5AC-E01B-4295-B951-5BFF39F07C15}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{8E222612-A908-4BD1-8DB3-DC789DF132A5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{4C7E58F1-4FA8-45DC-866B-F8D19EE0E465}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{13E3F45D-D308-4A49-936A-1827C7A2DEBD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{E2169C3D-43E1-4B83-92CF-CAE0F28DCB5B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{59C76FE6-D62D-4524-BAB9-0B2761994837}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.154.592.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) > FirewallRules: [{8BB64BD2-C682-47C2-8966-46447E01D6DE}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc. -> Plex, Inc.) > FirewallRules: [{1223CDDF-69F5-4FDA-B0E6-4D8EB6B10216}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc. -> Python Software Foundation) > FirewallRules: [{4C8ABA46-4A61-49FB-9D3B-4435459F9281}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc. -> Plex, Inc.) > FirewallRules: [{059648AF-FFE3-48FD-BE6F-A08B88C0F158}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc. -> ) > FirewallRules: [{AB9E6EBF-3FC2-4574-BE75-B6C7A536EDF3}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Game Transcoder\Plex Game Transcoder.exe (Plex, Inc. -> ) > FirewallRules: [{331CB76B-9E08-453E-9C9C-55E5F2806498}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) > > ==================== Restore Points ========================= > > 13-03-2021 04:30:25 Punto de control programado > 16-03-2021 10:14:31 ZHPcleaner > > ==================== Faulty Device Manager Devices ============ > > ==================== Event log errors: ======================== > > Application errors: > ================== > Error: (03/17/2021 05:09:44 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) > Description: El optimizador de almacenamiento no pudo completar volver a optimizar en MAGATZEM (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) > > Error: (03/17/2021 05:09:41 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) > Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (C:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) > > Error: (03/17/2021 03:12:25 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) > Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (C:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) > > Error: (03/17/2021 10:35:56 AM) (Source: SecurityCenter) (EventID: 17) (User: ) > Description: Security Center no pudo validar al autor de la llamada con el error %1. > > Error: (03/16/2021 10:14:48 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) > Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity(). > > Details: > AddLegacyDriverFiles: Unable to back up image of binary MsQuic. > > System Error: > Error del cargador de recursos al buscar un archivo MUI. > . > > Error: (03/13/2021 04:30:59 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) > Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity(). > > Details: > AddLegacyDriverFiles: Unable to back up image of binary MsQuic. > > System Error: > Error del cargador de recursos al buscar un archivo MUI. > . > > Error: (03/13/2021 03:51:51 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) > Description: El optimizador de almacenamiento no pudo completar volver a optimizar en MAGATZEM (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) > > Error: (03/13/2021 03:49:13 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) > Description: El optimizador de almacenamiento no pudo completar volver a optimizar en IOMEGA_SEB (L:) debido a: Esta operación no se admite en este sistema de archivos. (0x89000020) > > System errors: > ============= > Error: (03/17/2021 02:50:17 PM) (Source: EventLog) (EventID: 6008) (User: ) > Description: El cierre anterior del sistema a las 10:22:00 del ‎17/‎3/‎2021 resultó inesperado. > > Error: (03/17/2021 10:45:56 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY) > Description: El servidor {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} no se registró con DCOM dentro del tiempo de espera requerido. > > Error: (03/17/2021 10:45:56 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY) > Description: El servidor {A463FCB9-6B1C-4E0D-A80B-A2CA7999E25D} no se registró con DCOM dentro del tiempo de espera requerido. > > Error: (03/17/2021 10:38:17 AM) (Source: DCOM) (EventID: 10000) (User: SEBWIN10) > Description: No se puede iniciar un servidor DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Error > "2147942767" > al iniciar este comando: > C:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} > > Error: (03/17/2021 10:22:00 AM) (Source: EventLog) (EventID: 6008) (User: ) > Description: El cierre anterior del sistema a las 10:58:09 del ‎16/‎3/‎2021 resultó inesperado. > > Error: (03/17/2021 10:21:22 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT AUTHORITY) > Description: 3221226513A fatal error occurred processing the restoration data. > > Error: (03/17/2021 10:18:03 AM) (Source: DCOM) (EventID: 10010) (User: SEBWIN10) > Description: El servidor {4AA0A5C4-1B9B-4F2E-99D7-99C6AEC83474} no se registró con DCOM dentro del tiempo de espera requerido. > > Error: (03/17/2021 10:11:08 AM) (Source: DCOM) (EventID: 10010) (User: SEBWIN10) > Description: El servidor {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} no se registró con DCOM dentro del tiempo de espera requerido. > > Windows Defender: > ================ > Date: 2021-03-17 17:07:29 > Description: > El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. > Id. de examen: {489BCDF6-C304-4651-BD0B-D8C50F8706CC} > Tipo de examen: Antimalware > Parámetros de examen: Examen rápido > Usuario: NT AUTHORITY\SYSTEM > > Date: 2021-03-10 12:33:40 > Description: > El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. > Id. de examen: {184AD160-EE0F-4B83-8360-43EA627613AC} > Tipo de examen: Antimalware > Parámetros de examen: Examen rápido > Usuario: NT AUTHORITY\SYSTEM > > Date: 2021-03-06 15:20:03 > Description: > El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. > Id. de examen: {EE0F4AF5-98A0-46DC-94F4-DEF5D14355B0} > Tipo de examen: Antimalware > Parámetros de examen: Examen completo > Usuario: SEBWIN10\sebsa > > Date: 2021-03-06 12:23:10 > Description: > El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. > Id. de examen: {D997F33A-40CF-499D-A7B7-316C4FB9037D} > Tipo de examen: Antimalware > Parámetros de examen: Examen rápido > Usuario: NT AUTHORITY\SYSTEM > > Date: 2021-03-06 12:22:27 > Description: > El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. > Id. de examen: {5F209658-C20C-4284-BBBD-DA9859564A08} > Tipo de examen: Antimalware > Parámetros de examen: Examen rápido > Usuario: NT AUTHORITY\SYSTEM > > Date: 2021-03-06 14:54:33 > Description: > Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad. > Nueva versión de inteligencia de seguridad: 1.331.2515.0 > Versión anterior de inteligencia de seguridad: 1.331.2500.0 > Origen de actualización: Usuario > Tipo de inteligencia de seguridad: AntiSpyware > Tipo de actualización: Diferencia > Usuario: NT AUTHORITY\SYSTEM > Versión actual del motor: 1.1.17900.7 > Versión anterior del motor: 1.1.17900.7 > Código de error: 0x80509004 > Descripción del error: Problema inesperado. Instale todas las actualizaciones disponibles e intente iniciar el programa de nuevo. Para obtener más información sobre cómo instalar actualizaciones, consulte Ayuda y soporte técnico. > > Date: 2021-03-06 14:54:33 > Description: > Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad. > Nueva versión de inteligencia de seguridad: 1.331.2515.0 > Versión anterior de inteligencia de seguridad: 1.331.2500.0 > Origen de actualización: Usuario > Tipo de inteligencia de seguridad: AntiVirus > Tipo de actualización: Diferencia > Usuario: NT AUTHORITY\SYSTEM > Versión actual del motor: 1.1.17900.7 > Versión anterior del motor: 1.1.17900.7 > Código de error: 0x80509004 > Descripción del error: Problema inesperado. Instale todas las actualizaciones disponibles e intente iniciar el programa de nuevo. Para obtener más información sobre cómo instalar actualizaciones, consulte Ayuda y soporte técnico. > > Date: 2021-03-06 14:54:29 > Description: > Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad. > Nueva versión de inteligencia de seguridad: > Versión anterior de inteligencia de seguridad: 1.331.2500.0 > Origen de actualización: Servidor de Microsoft Update > Tipo de inteligencia de seguridad: AntiVirus > Tipo de actualización: Completa > Usuario: NT AUTHORITY\SYSTEM > Versión actual del motor: > Versión anterior del motor: 1.1.17900.7 > Código de error: 0x80240022 > Descripción del error: El programa no puede buscar actualizaciones de definiciones. > > Date: 2021-03-06 12:27:02 > Description: > Antivirus de Microsoft Defender encontró un error al intentar restaurar un elemento de la cuarentena. > Para más información, consulta lo siguiente: > https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/AutoKMS.E!MSR&threatid=2147743252&enterprise=0 > Nombre: HackTool:Win32/AutoKMS.E!MSR > Id.: 2147743252 > Gravedad: Alta > Categoría: Herramienta > Usuario: SEBWIN10\sebsa > Código de error: 0x80508014 > Descripción del error: No se puede restaurar el elemento en cuarentena. > Versión de inteligencia de seguridad: AV: 1.331.2500.0, AS: 1.331.2500.0 > Versión de motor: 1.1.17900.7 > > Date: 2021-03-06 12:26:56 > Description: > Antivirus de Microsoft Defender encontró un error al intentar restaurar un elemento de la cuarentena. > Para más información, consulta lo siguiente: > https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:MSIL/AutoKms&threatid=2147711767&enterprise=0 > Nombre: HackTool:MSIL/AutoKms > Id.: 2147711767 > Gravedad: Alta > Categoría: Herramienta > Usuario: SEBWIN10\sebsa > Código de error: 0x80508014 > Descripción del error: No se puede restaurar el elemento en cuarentena. > Versión de inteligencia de seguridad: AV: 1.331.2500.0, AS: 1.331.2500.0 > Versión de motor: 1.1.17900.7 > > CodeIntegrity: > =============== > Date: 2021-03-09 03:41:50 > Description: > Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. > > Date: 2021-03-05 18:14:00 > Description: > Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\MDEServer.exe) attempted to load \Device\HarddiskVolume1\Program Files (x86)\K-Lite Codec Pack\Filters\LAV64\LAVSplitter.ax that did not meet the Microsoft signing level requirements. > > Date: 2021-03-05 18:14:00 > Description: > Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\MDEServer.exe) attempted to load \Device\HarddiskVolume1\Program Files (x86)\K-Lite Codec Pack\Filters\DirectVobSub64\vsfilter.dll that did not meet the Microsoft signing level requirements. > > ==================== Memory info =========================== > > BIOS: Award Software International, Inc. F7 07/13/2012 > Motherboard: Gigabyte Technology Co., Ltd. H61M-D2H-USB3 > Processor: Intel(R) Core(TM) i5-3330 CPU @ 3.00GHz > Percentage of memory in use: 41% > Total physical RAM: 8175.24 MB > Available physical RAM: 4759.79 MB > Total Virtual: 9455.24 MB > Available Virtual: 5716.19 MB > > ==================== Drives ================================ > > Drive c: () (Fixed) (Total:146.48 GB) (Free:96.25 GB) NTFS ==>[drive with boot components (obtained from BCD)] > Drive d: (MAGATZEM) (Fixed) (Total:319.28 GB) (Free:297.49 GB) NTFS > > ==================== MBR & Partition Table ==================== > > ========================================================== > Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 0768D7F7) > Partition 1: (Active) - (Size=146.5 GB) - (Type=07 NTFS) > Partition 2: (Not Active) - (Size=319.3 GB) - (Type=07 NTFS) > > ==================== End of Addition.txt ======================= > > ``` ---
**Author:** ![MIXU](https://forospyware.com/user_avatar/forospyware.com/mixu/32/44218_2.png) [@MIXU](https://forospyware.com/u/MIXU)\ **Post date:** [18 Marzo, 2021 03:57 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/37 "2021-03-18T03:57:10Z")
Hola @sebsalva 1️⃣ Ahora debes de hacer una **COPIA DE SEGURIDAD DEL REGISTRO** , para ello: - Reinicias el ordenador en **Modo Normal**. - Descargas [DelFix](https://www.infospyware.com/Software/click.php?id=47) **en tu escritorio**. - Doble clic para ejecutarlo. **(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador)** - Marcas solamente la casilla de **Create registry backup** , el resto te aseguras de que no estén seleccionadas. - Presionas en **Run**. Se abrirá el informe ( **DelFix**.txt), puedes cerrarlo. Pero lo guardas por si en el futuro te lo pido/hace falta. Seguidamente, **CIERRAS TODOS LOS PROGRAMAS** , vas a Inicio \>\> Ejecutar y escribes **Notepad.exe** - Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del **Notepad**. ```auto START CREATERESTOREPOINT: CLOSEPROCESSES: HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-18] (Google LLC -> Google LLC) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] -> ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed] Folder: C:\PhSp_CS2_UE_Ret Folder: C:\Windows\system32\Tasks\S-1-5-21-3721864700-73880727-17468404-1001 2021-03-04 12:46 - 2021-03-17 14:50 - 000008192 ___SH C:\DumpStack.log.tmp CMD: ipconfig /flushdns CMD: ipconfig /renew CMD: bitsadmin /reset /allusers CMD: netsh winsock reset CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: Hosts: END ``` Lo guardas con el nombre de **FIXLIST.TXT** en tu escritorio **(MUY IMPORTANTE).** Pues en caso contrario no funcionará el **SCRIPT** , ambos ficheros ( **FRST.exe** y **FIXLIST.TXT** ) y deben de estar en la ubicación del **ESCRITORIO**. > ⚠ _El anterior Script de reparación es personalizado para la máquina en concreto para la cual se fabricó y está hecho específicamente por un miembro del Staff. Si se tiene un problema parecido, por favor abra su propio tema para recibir ayuda personalizada y específica. Utilizar Scripts de otros Sistemas puede causar daños graves en su ordenador._ Finalmente **(OJO, sigues en MODO NORMAL AHORA)**: 1. Ejecutas nuevamente **FRST.exe** **(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador)**. 2. Presionas sobre **Fix/Corregir** y esperas a que finalice el proceso. No hagas nada con el PC mientras este realizando dichas reparaciones, incluso si parece ser que se ha quedado colgado. No lo toques y esperas. 3. Cunado finalice, en el **ESCRITORIO** se creará el fichero **FIXLOG.TXT** lo traes en tu próxima respuesta. 4. Reinicias el ordenador en **Modo Normal** compruebas durante un rato el funcionamiento de este y comentas como sigue el problema inicialmente planteado. ⚠ **Muy Importante** ⚠ Coloca el reporte que te he pedido como se muestra en la siguiente **imagen:** ![report](https://forospyware.com/uploads/default/original/2X/1/199a13e055d36842820b32aa2a6ce05ff1e8f994.png) Salu2. ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [18 Marzo, 2021 11:42 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/38 "2021-03-18T11:42:23Z")
Hola! He hecho lo que me has dicho. Después de reiniciar, he tenido un problema: se ha desconfigurado la red y no tenía acceso a Internet. Entonces he tenido que darle a DIAGNOSTICAR (en el centro de redes de Windows) , habilitar DHCP (que es lo que me ha pedido tras diagnosticar el problema), etc. Después, como se ha reconfigurado la red en modo de detección automática, la he vuelto a poner como yo tenía antes: con una IP y DNS fijas para mi ordenador. He observado también que, tras hacer esto, cuando entro en Chrome, en la esquina superior derecha, los accesos de “Gmail”, “Imágenes” “Aplicaciones de Google” y “Cuenta” tardan unos segundos en aparecer/cargarse —antes salían casi de inmediato—. Adjunto informe de DelFix: > ``` > # DelFix v1.013 - Logfile created 18/03/2021 at 12:05:58 > # Updated 17/04/2016 by Xplode > # Username : sebsa - SEBWIN10 > # Operating System : Windows 10 Home (64 bits) > > ~ Creating registry backup ... OK > > ########## - EOF - ########## > > ``` ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [18 Marzo, 2021 11:44 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/39 "2021-03-18T11:44:01Z")
Y adjunto informe FIXLOG (1.ª parte): > ``` > Fix result of Farbar Recovery Scan Tool (x64) Version: 17-03-2021 > Ran by sebsa (18-03-2021 12:09:37) Run:1 > Running from C:\Users\sebsa\Desktop > Loaded Profiles: sebsa > Boot Mode: Normal > ============================================== > > fixlist content: > ***************** > START > CREATERESTOREPOINT: > CLOSEPROCESSES: > HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-18] (Google LLC -> Google LLC) > HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] -> > ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [File not signed] > Folder: C:\PhSp_CS2_UE_Ret > Folder: C:\Windows\system32\Tasks\S-1-5-21-3721864700-73880727-17468404-1001 > 2021-03-04 12:46 - 2021-03-17 14:50 - 000008192 ___SH C:\DumpStack.log.tmp > > CMD: ipconfig /flushdns > CMD: ipconfig /renew > CMD: bitsadmin /reset /allusers > CMD: netsh winsock reset > CMD: netsh advfirewall reset > CMD: netsh advfirewall set allprofiles state ON > CMD: netsh int ipv4 reset > CMD: netsh int ipv6 reset > RemoveProxy: > EmptyTemp: > Hosts: > END > ***************** > > Restore point was successfully created. > Processes closed successfully. > HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => removed successfully > HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9} => removed successfully > C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe => moved successfully > > ========================= Folder: C:\PhSp_CS2_UE_Ret ======================== > > 2005-03-21 13:41 - 2005-03-21 13:41 - 000012793 ____ A [BFEFBEE16EF9E695DC27C97FAE224D50] () C:\PhSp_CS2_UE_Ret\How To Install.html > 2005-02-25 14:37 - 2005-02-25 14:37 - 000157035 ____ A [CC3A588DDB5A82AE5927B2694CB2999C] () C:\PhSp_CS2_UE_Ret\LegalNotices.pdf > 2005-02-22 13:31 - 2005-02-22 13:31 - 000142049 ____ A [D1A2CCE85A4E386F599688888B704D29] () C:\PhSp_CS2_UE_Ret\Photoshop At A Glance.pdf > 2005-02-22 13:32 - 2005-02-22 13:32 - 002723276 ____ A [33C5AB70A0C4BCB8FD91763EE4DE9126] () C:\PhSp_CS2_UE_Ret\Photoshop New Features.pdf > 2005-02-23 11:24 - 2005-02-23 11:24 - 000002773 ____ A [F394B4889BF4D26710AD94CA2EBA894E] () C:\PhSp_CS2_UE_Ret\Read Me First.html > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\International > 2005-02-23 18:41 - 2005-02-23 18:41 - 000137148 ____ A [2AC76BE593BB4B150544D1A03CF5FAD6] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\International\Adobe Certified Datasheet.pdf > 2005-02-23 18:56 - 2005-02-23 18:56 - 000110445 ____ A [E99EFE396628FA51D1ACA0B77C3F40E0] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\International\ASN Developer Program Datasheet.pdf > 2005-02-23 19:08 - 2005-02-23 19:08 - 000133432 ____ A [8AF82BB0452161C2FC461127CFD459D9] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\International\ASN Print Service Provider Program Datasheet.pdf > 2005-02-23 20:05 - 2005-02-23 20:05 - 000114587 ____ A [FEA9A08DB698BF6A263FA39B1A0CABC1] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\International\ASN Training Provider Program Datasheet.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\North America > 2005-02-23 19:25 - 2005-02-23 19:25 - 000137796 ____ A [3C8732C3561FD6D158C37C28BB8585E7] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\North America\Adobe Certified Datasheet.pdf > 2005-02-23 18:57 - 2005-02-23 18:57 - 000105939 ____ A [33CA4BEB49331922D6936576CD11ABB1] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\North America\ASN Developer Program Datasheet.pdf > 2005-02-23 19:22 - 2005-02-23 19:22 - 000136218 ____ A [3A5F8A71D9564307596DABDB1D751457] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\North America\ASN Print Service Provider Program Datasheet.pdf > 2005-02-23 20:18 - 2005-02-23 20:18 - 000112983 ____ A [6FFCBD5FC34E5EF28A9B54F77B51808F] () C:\PhSp_CS2_UE_Ret\Adobe Solutions Network\North America\ASN Training Provider Program Datasheet.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2 > 2003-02-25 10:04 - 2003-02-25 10:04 - 000004632 ____ A [7A858CA524BEB223533A2AC6138C4B73] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\0x0409.ini > 2005-02-03 14:04 - 2005-02-03 14:04 - 000000686 ____ A [82E16BA5FA29873E815FCBA3565564CC] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\Abcpy.ini > 2005-03-28 11:02 - 2005-03-28 11:02 - 005092236 ____ A [70960207BEB32B035FB697DB7760B5A5] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\Adobe Photoshop CS2.msi > 2005-03-28 11:02 - 2005-03-28 11:02 - 152609396 ____ A [35E2B8B719E7FC76EE9F5F1CFAB935D3] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\Data1.cab > 2002-03-11 06:45 - 2002-03-11 06:45 - 001708856 ____ A [43F7305C2E5DD4A8F3C5ABEB2FFE4833] (Microsoft Corporation) C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\instmsia.exe > 2002-03-11 10:06 - 2002-03-11 10:06 - 001822520 ____ A [61A5FB191AE2AE876DB31DCCE75E4183] (Microsoft Corporation) C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\instmsiw.exe > 2005-03-01 17:46 - 2005-03-01 17:46 - 000045486 ____ A [C6672CEA33499418557F6FEFA833F545] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\Photoshop Read Me.wri > 2005-03-28 11:01 - 2005-03-28 11:01 - 000225280 ____ A [3354AB56DDEE8B7DC8636615888B48DC] (Adobe Systems, Inc. ) C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\setup.exe > 2005-03-28 11:02 - 2005-03-28 11:02 - 000001207 ____ A [D3C299D698CF47AE79A029E939BA4118] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\Setup.ini > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\bridge > 2005-03-24 17:29 - 2005-03-24 17:29 - 031518208 ____ A [C073317D7071A750B88D16015D1B11BC] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\bridge\Adobe Bridge 1.0.msi > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\commonfilesinstaller > 2005-03-16 20:20 - 2005-03-16 20:20 - 000539648 ____ A [05142677D9896C51828629DF8E9699D0] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\commonfilesinstaller\Adobe Common File Installer.msi > 2005-03-16 20:20 - 2005-03-16 20:20 - 088670105 ____ A [809CD230669F18A3F122A0C21780950D] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\commonfilesinstaller\Data1.cab > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\help center > 2005-03-15 21:53 - 2005-03-15 21:53 - 012826624 ____ A [25C82AC0FD6F564098201DFA3AD6FBAC] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\help center\Adobe Help Center 1.0.msi > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\stock photography > 2005-03-16 21:14 - 2005-03-16 21:14 - 003559424 ____ A [E6C3A427F877BFC64D8D757B43F2D015] () C:\PhSp_CS2_UE_Ret\Adobe(R) Photoshop(R) CS2\stock photography\Adobe Stock Photos 1.0.msi > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Customer Support > 2004-09-30 10:06 - 2004-09-30 10:06 - 000355811 ____ A [53085C66BAE7A928B8B72473C711380F] () C:\PhSp_CS2_UE_Ret\Customer Support\Adobe Support Info.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies > 2002-03-04 07:56 - 2002-03-04 07:56 - 000180969 ____ A [0CC4E345229D7C0578B62DA1E835A3A2] () C:\PhSp_CS2_UE_Ret\Goodies\Adobe Type Library.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets > 2005-02-16 12:07 - 2005-02-16 12:07 - 000000923 ____ A [B734447A15A488872BEA172C14886903] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Mixer Read Me.html > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps > 1997-11-11 14:21 - 1997-11-11 14:21 - 000000044 ____ A [A017E12C19DC67C8547E7D7D92A9E204] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\CMYK Rotate Channels Back.cha > 1997-11-11 14:20 - 1997-11-11 14:20 - 000000044 ____ A [4B9956C55258CDC695A62EE0261A7D9A] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\CMYK Rotate Channels Fore.cha > 1997-11-11 14:22 - 1997-11-11 14:22 - 000000044 ____ A [166D72CC6D9AA451947EF923ADC69F6E] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\CMYK Swap Cyan&Black.cha > 1997-09-21 05:21 - 1997-09-21 05:21 - 000000044 ____ A [C546E007D98BAB3AE658D24D4FCE976F] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\CMYK Swap Cyan&Magenta.cha > 1997-09-21 05:22 - 1997-09-21 05:22 - 000000044 ____ A [6BF42E1708B0DF8CD0D62A1F2E51CB1F] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\CMYK Swap Cyan&Yellow.cha > 1997-09-21 04:42 - 1997-09-21 04:42 - 000000044 ____ A [F4BE835AE891DC395FC689577EBE8C15] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\RGB Rotate Channels.cha > 1997-09-21 05:22 - 1997-09-21 05:22 - 000000044 ____ A [197F85FA1E384732DCA9722B86ABF097] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\RGB Swap Green&Blue.cha > 1997-09-21 05:22 - 1997-09-21 05:22 - 000000044 ____ A [6BF42E1708B0DF8CD0D62A1F2E51CB1F] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\RGB Swap Red&Blue.cha > 1997-09-21 05:21 - 1997-09-21 05:21 - 000000044 ____ A [C546E007D98BAB3AE658D24D4FCE976F] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Channel Swaps\RGB Swap Red&Green.cha > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale > 1997-09-24 07:18 - 1997-09-24 07:18 - 000000044 ____ A [B002BABD740F0A10460C28CB85D7A265] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale\CMYK to Gray.cha > 1997-09-21 04:39 - 1997-09-21 04:39 - 000000044 ____ A [269CEB84152045391B54D6607DB9AB93] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale\Grayscale Blues.cha > 1997-09-21 04:41 - 1997-09-21 04:41 - 000000044 ____ A [82C3E4F3542C3CEA28B28B42572A9AEF] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale\Grayscale Standard.cha > 1997-11-11 14:07 - 1997-11-11 14:07 - 000000044 ____ A [F0599038B0D1F310497950CC7D862021] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale\Grayscale Yellows.cha > 1997-09-21 04:38 - 1997-09-21 04:38 - 000000044 ____ A [C3F9553EF4A5D79359C488B88C7E7EA9] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale\Grayscale Yellows2.cha > 1997-09-21 05:13 - 1997-09-21 05:13 - 000000044 ____ A [CE28EB05BED0E2D09A253F173FA99E13] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Grayscale\RGB Inverted Grayscale.cha > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects > 1997-10-23 10:08 - 1997-10-23 10:08 - 000000044 ____ A [3CB1CADDE6DB38A3A73ADC315FEEFD0F] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\CMYK Holiday Wrap.cha > 1997-11-06 13:51 - 1997-11-06 13:51 - 000000044 ____ A [D9BECC94976D1E25A3AE4AA9D740B3C8] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Blacklight.cha > 1997-11-06 13:48 - 1997-11-06 13:48 - 000000044 ____ A [63F476123450AACCC3ADBB1D0C8C9F0D] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Blueprint.cha > 1997-11-06 13:44 - 1997-11-06 13:44 - 000000044 ____ A [D471C9EF64DE3B15C257E542196E5FA3] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Burnt Foliage.cha > 1997-11-11 14:13 - 1997-11-11 14:13 - 000000044 ____ A [DE37762538656BF82764E253A91AEBAD] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Easter colors.cha > 1997-11-06 12:50 - 1997-11-06 12:50 - 000000044 ____ A [7B1810EFE04CB497EB799FFB465F2EEB] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Holiday Wrap.cha > 1997-09-21 05:14 - 1997-09-21 05:14 - 000000044 ____ A [A8B1DE5C30B6C29EA22B88C107581272] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Inverted Warm Brass.cha > 1997-11-06 13:40 - 1997-11-06 13:40 - 000000044 ____ A [034C1323376CD9C6204B00E24797197A] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Over Saturate.cha > 1998-01-09 07:54 - 1998-01-09 07:54 - 000000044 ____ A [EDCB8F1F001F51A97D4BAFF87A330C0A] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Pastels.cha > 1997-09-21 05:09 - 1997-09-21 05:09 - 000000044 ____ A [325104E9480C82426969EE4A3E750486] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Sepiatone subtle color.cha > 1997-09-22 09:23 - 1997-09-22 09:23 - 000000044 ____ A [57EF6C6C446EFD41A7DCC50AADD5B270] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Sepiatone subtle color2.cha > 1997-09-22 09:42 - 1997-09-22 09:42 - 000000044 ____ A [0242948F2E10CB28C9D3E848F8AC9A2D] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Sepiatone subtle color3.cha > 1997-11-06 13:39 - 1997-11-06 13:39 - 000000044 ____ A [18AD59122DE2A4BC3B5CD64359C0463E] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\RGB Warmer.cha > 1997-09-24 07:25 - 1997-09-24 07:25 - 000000044 ____ A [5820D9A4D19904B75D5049D947D68AA5] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\Special Effects\Yellows&Blues (RGB or CMYK).cha > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\YCC Color > 1997-11-06 13:02 - 1997-11-06 13:02 - 000000044 ____ A [F9CC5624EFEC080E2F004B147903A6F1] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\YCC Color\RGB to YCrCb.cha > 1997-11-06 13:12 - 1997-11-06 13:12 - 000000044 ____ A [1ECC13112F165D7AFCB2B381F2846C78] () C:\PhSp_CS2_UE_Ret\Goodies\Channel Mixer Presets\YCC Color\YCrCb to RGB.cha > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Custom File Info Panels > 2005-02-16 12:16 - 2005-02-16 12:16 - 000002467 ____ A [6080A4083B109E68CC3B7AB9F305720A] () C:\PhSp_CS2_UE_Ret\Goodies\Custom File Info Panels\File Info Panels Read Me.html > 2003-09-19 12:47 - 2003-09-19 12:47 - 000330931 ____ A [AA0EA72E7556E47306ACB6EE359CA689] () C:\PhSp_CS2_UE_Ret\Goodies\Custom File Info Panels\XMP Custom Panels.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Custom File Info Panels\Sample File Info Panels > 2003-09-19 15:06 - 2003-09-19 15:06 - 000002154 ____ A [1EEE626C0068C9B325668C336A154A56] () C:\PhSp_CS2_UE_Ret\Goodies\Custom File Info Panels\Sample File Info Panels\CustomPanel_allWidgets.txt > 2003-09-19 15:06 - 2003-09-19 15:06 - 000007094 ____ A [BCF5B264DAA91321D4C45EB172801F0F] () C:\PhSp_CS2_UE_Ret\Goodies\Custom File Info Panels\Sample File Info Panels\Description.txt > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures > 2003-09-12 16:43 - 2003-09-12 16:43 - 000003126 ____ A [3387BFB7562C9E07036200D92A6B07DB] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\AdobeP8M.md0 > 2003-09-12 16:43 - 2003-09-12 16:43 - 001012475 ____ A [A9DB45FA010FF1E551E444FA7F5C85F1] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\AdobeP8P.tb0 > 2003-09-12 16:43 - 2003-09-12 16:43 - 000013694 ____ A [5826757B1943AAD7D59CA6F32C027B6A] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\AdobeP8T.tb0 > 2002-02-19 23:46 - 2002-02-19 23:46 - 003656500 ____ A [468E83F3DB49A037D8CFB6EFA2BA44A2] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\Japanese Rice Paper.jpg > 2002-02-19 23:46 - 2002-02-19 23:46 - 006764627 ____ A [49B91773B22998387C0B00205AA40CF4] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\Red Origami Flowers.jpg > 2002-02-19 23:46 - 2002-02-19 23:46 - 002857306 ____ A [846891C987D60C407B675B36DFE0617A] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\Sepia Marble Paper.jpg > 2002-02-19 23:46 - 2002-02-19 23:46 - 006380752 ____ A [E66EEA2AA48984A7C5777DA0C1BC57CF] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\Woodchip Paper.jpg > 2002-02-19 23:46 - 2002-02-19 23:46 - 005220475 ____ A [C33722E2E1FFDACCD8923C6E6143FF37] () C:\PhSp_CS2_UE_Ret\Goodies\Hi Res RGB Textures\Wrinkled Woodchip Paper.jpg > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches > 1996-10-14 16:08 - 1996-10-14 16:08 - 000006724 ____ A [D29B7C0B4173302ECF5193BEBBBE7978] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\216 browser safe colors.aco > 1996-10-09 06:47 - 1996-10-09 06:47 - 000002244 ____ A [773AFFE5A00248FF8F1EA4EFE1023E35] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\216 by hue.aco > 1996-10-09 06:09 - 1996-10-09 06:09 - 000002244 ____ A [84382F6E07B79298AC41022F8F52B391] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\216 by luminosity.aco > 1996-10-05 12:44 - 1996-10-05 12:44 - 000001284 ____ A [22F4AA82DDC6A8251F166722E5936103] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\desaturated range.aco > 1996-07-20 11:49 - 1996-07-20 11:49 - 000005124 ____ A [7D1C556A083633051E5E32A67FCACD32] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\full saturated range.aco > 1996-07-27 14:35 - 1996-07-27 14:35 - 000003204 ____ A [3D5579B6A67FBAB366BA93381869258F] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\med saturation range.aco > 1998-05-25 13:09 - 1998-05-25 13:09 - 000009604 ____ A [70F6A501E0E94B33A4F348FE25AC6682] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\standard set.aco > 2005-02-16 12:37 - 2005-02-16 12:37 - 000001675 ____ A [589864224B22E65596E78C62FD4B52A1] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Web Swatches Read Me.html > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes > 1996-10-05 12:43 - 1996-10-05 12:43 - 000002884 ____ A [36B233034F2C70DA92EE8EBF95288933] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\blue analogous.aco > 1996-07-17 07:34 - 1996-07-17 07:34 - 000004004 ____ A [BF969C189305F6E4E0984FB0D9D11F42] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\blue desaturated range.aco > 1996-07-20 09:35 - 1996-07-20 09:35 - 000006244 ____ A [0613944F9AF793C97C07359AD56C662B] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\blue saturated range.aco > 1996-10-05 12:34 - 1996-10-05 12:34 - 000002884 ____ A [4E41137E2F5E9AD53E317C1B84642A04] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\cyan analogous.aco > 1996-07-17 13:31 - 1996-07-17 13:31 - 000004004 ____ A [777B5EDCFD25B106C6D65BAA19CE3A19] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\cyan desaturated range.aco > 1996-07-20 09:38 - 1996-07-20 09:38 - 000006244 ____ A [A84F0E09E9A37D9C23C272CD9C0A1FCA] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\cyan saturated range.aco > 1996-10-05 12:38 - 1996-10-05 12:38 - 000002884 ____ A [9DEB6F5DF90370B2EAEE0E6EA6D4FB58] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\green analogous.aco > 1996-07-17 07:44 - 1996-07-17 07:44 - 000004004 ____ A [344B08BF2790474FF3529EC1F9427C87] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\green desaturated range.aco > 1996-07-20 09:40 - 1996-07-20 09:40 - 000006244 ____ A [8D3E4CB250044DD7D7DC791D559EB4BD] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\green saturated range.aco > 1996-10-05 12:42 - 1996-10-05 12:42 - 000002884 ____ A [C381B7E1BE126B1D38BF10A6B7241EC0] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\magenta analogous.aco > 1996-07-17 13:15 - 1996-07-17 13:15 - 000004004 ____ A [0626BA92417545D25D26F06C0667B45A] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\magenta desaturated range.aco > 1996-07-20 09:41 - 1996-07-20 09:41 - 000006244 ____ A [DEB3175C6A65F555D17186AF384A6A29] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\magenta saturated range.aco > 1996-10-05 12:40 - 1996-10-05 12:40 - 000002884 ____ A [E569A029CE59CCCF3A1BDEE0EBAB930F] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\red analogous.aco > 1996-07-17 07:27 - 1996-07-17 07:27 - 000004004 ____ A [F49538B650E1B11CFD04A0D8A66849D9] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\red desaturated range.aco > 1996-07-20 09:42 - 1996-07-20 09:42 - 000006244 ____ A [5C1B995BD05ACF2C2135872470CEB480] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\red saturated range.aco > 1996-10-05 12:36 - 1996-10-05 12:36 - 000002884 ____ A [BBB5693A7630AF5AFDD9A807A7257E38] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\yellow analogous.aco > 1996-07-17 13:21 - 1996-07-17 13:21 - 000004004 ____ A [D44911B1C6E3992766C72EF458934084] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\yellow desaturated range.aco > 1996-07-20 09:45 - 1996-07-20 09:45 - 000006244 ____ A [3D05353ED404B64DF851B174E53E18C8] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Color Schemes\yellow saturated range.aco > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts > 1996-07-17 14:20 - 1996-07-17 14:20 - 000000324 ____ A [B92300A386F395235F06EAD369E70BBE] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts\greyscale.aco > 1996-09-23 11:59 - 1996-09-23 11:59 - 000000964 ____ A [7E71209459EF8F7A543D4876D4EA83EF] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts\luminosity desaturated.aco > 1996-09-23 12:19 - 1996-09-23 12:19 - 000002404 ____ A [907F7BCD6D1B4A176BD022689E155BD5] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts\luminosity full saturation.aco > 1996-09-23 11:57 - 1996-09-23 11:57 - 000001764 ____ A [CE5C96EABDB504C1CC8045A7CDAB40B2] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts\luminosity medium saturatin.aco > 1997-09-15 08:39 - 1997-09-15 08:39 - 000001284 ____ A [5685D3F9F149D2C0984A9D0D7066F7C5] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts\muted.aco > 1996-07-13 05:42 - 1996-07-13 05:42 - 000001284 ____ A [5B8A2DCC448FD521872073019512ABA5] () C:\PhSp_CS2_UE_Ret\Goodies\lynda.com Web swatches\Other Layouts\rgbcmyk 11 step gradation.aco > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ditherbox > 2001-08-24 06:54 - 2001-08-24 06:54 - 000067898 ____ A [13277F37D8EDE3D2AB47A50D2A3BF082] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ditherbox\Dither Box filter.pdf > 2005-02-18 10:00 - 2005-02-18 10:00 - 000000945 ____ A [DEEC9F93322FCA5196CB5191E51C7524] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ditherbox\Ditherbox Read Me.html > 1999-06-24 12:28 - 1999-06-24 12:28 - 000097792 ____ A [20AD36B8BC676FA98A8EDF6A0B6ED7C3] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ditherbox\DitherBx.8bf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory > 2000-10-10 14:59 - 2000-10-10 14:59 - 000049152 ____ A [527182C4D40328D376BC0154BACE781D] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Ffactory.8bf > 2003-07-21 09:58 - 2003-07-21 09:58 - 000037677 ____ A [59D29A20D74346A5D7FA8FED0ABFB040] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Ffactory.wri > 1997-04-17 10:51 - 1997-04-17 10:51 - 000055808 ____ A [BFE05C7D93BE380A7F65D91188CD910A] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Ffexamp.8bf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000000396 ____ A [42A24CCD71DD4A45A66DA034919D7BDF] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Ffexamp.afs > 1994-10-30 05:39 - 1994-10-30 05:39 - 000064216 ____ A [0F1687C8A784FA22743FF5089489F0FF] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Fftutor.pdf > 2005-02-23 19:33 - 2005-02-23 19:33 - 000001418 ____ A [66401E5F4EE68EBA3DDEE5B247241BBA] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Filter Factory Read Me.html > 1998-03-04 07:22 - 1998-03-04 07:22 - 000183165 ____ A [C1BEC8FD3C8F13CF5BB348AF03CDA0EF] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Filter_Factory.pdf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000055808 ____ A [DFEE700AE0A826D95FB7368F7DA70F1F] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Lights.8bf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000000651 ____ A [32BAFCDB318ACDAE9CCCBBC7BE012279] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Lights.afs > 1993-07-23 01:00 - 1993-07-23 01:00 - 000210944 ____ A [DF252F37880142ED5574C2BE4DADF5A7] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Msvcrt10.dll > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples > 1995-05-03 02:11 - 1995-05-03 02:11 - 000057344 ____ A [FF0461B5A382A1B377B0DB1B8377D856] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Edittran.8bf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000000118 ____ A [724CBF6364F91350C49DF3BFD107C15F] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Edittrns.afs > 1995-05-03 02:11 - 1995-05-03 02:11 - 000057344 ____ A [6CBC358CC4E888BCF2C4F339F7E591AE] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Lumopac.8bf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000000058 ____ A [13CB502F7A5AD81FEE781A44ADC14326] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Lumopac.afs > 1995-05-03 02:12 - 1995-05-03 02:12 - 000057344 ____ A [66A665B2BB9171B36AA849380A2F60B4] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Opaclum.8bf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000000096 ____ A [2C030D41226F1E9F99662529A559707C] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Opaclum.afs > 1995-05-03 02:12 - 1995-05-03 02:12 - 000057344 ____ A [8D1798F001CDCA540A2604DBA491FDAC] (Adobe Systems, Inc.) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Settrans.8bf > 1997-04-17 10:51 - 1997-04-17 10:51 - 000000052 ____ A [2FADEE06BE12CF52D1C68DA49A6ED6D5] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Settrans.afs > 1996-10-29 15:49 - 1996-10-29 15:49 - 000034173 ____ A [A71CAFBB9A087860B831AFDECFC8D89D] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Ffactory\Transparency Examples\Transparency Read Me.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format > 2005-02-16 11:36 - 2005-02-16 11:36 - 000000958 ____ A [E9C87D0F0A3018F7D55BC99BFFBF4DE2] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\About Alias Format.html > 2005-02-16 11:49 - 2005-02-16 11:49 - 000000946 ____ A [4939AC7BD2A03A488C89F72FC3280E2C] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\About ElectricImage Format.html > 2005-02-16 11:51 - 2005-02-16 11:51 - 000000849 ____ A [3AAD3CF423FA81956581F6F17D47FCDF] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\About IFF Format.html > 2005-02-16 11:57 - 2005-02-16 11:57 - 000000977 ____ A [D16221E99EFE676DE6C00438D0540D75] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\About RLA Format.html > 2005-02-16 12:00 - 2005-02-16 12:00 - 000000989 ____ A [9E114D835139DC4758944D2527F0BEBA] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\About SGI RGB Format.html > > ``` ---
**Author:** ![sebsalva](https://forospyware.com/user_avatar/forospyware.com/sebsalva/32/20511_2.png) [@sebsalva](https://forospyware.com/u/sebsalva)\ **Post date:** [18 Marzo, 2021 11:44 UTC](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991/40 "2021-03-18T11:44:42Z")
FIXLOG (2.ª parte): > ``` > 2005-03-03 13:44 - 2005-03-03 13:44 - 000000918 ____ A [CBA9EA4319E6CE2DFE039C354C42AA0A] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\About SoftImage Format.html > 2005-03-22 04:20 - 2005-03-22 04:20 - 000014848 ____ A [91AC8D0079E435EC8210216F4774E098] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\Alias.8BI > 2005-03-22 04:21 - 2005-03-22 04:21 - 000019456 ____ A [D91055BA256F296BCD8A380010ADDBE6] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\ElectricImage.8BI > 2005-03-22 04:20 - 2005-03-22 04:20 - 000031744 ____ A [921E59F6C1371C8AF5D4169DBD44F0D5] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\IFF Format.8BI > 2005-03-22 04:24 - 2005-03-22 04:24 - 000016384 ____ A [D2AFF1217D7AEBBF04F2DB306E125302] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\Rla.8bi > 2005-03-22 04:25 - 2005-03-22 04:25 - 000016384 ____ A [2B3F7C74ED2C870C38368BFF128F78C8] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\Sgirgb.8bi > 2005-03-22 04:25 - 2005-03-22 04:25 - 000013824 ____ A [E735EEA9BFC557D098425206B9D952D6] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\File Format\SoftImage.8BI > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Filters > 2005-03-22 04:31 - 2005-03-22 04:31 - 000286720 ____ A [ED1A773DBF646B1C587552C29B31A111] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Filters\3D Transform.8BF > 2005-03-22 04:36 - 2005-03-22 04:36 - 000020992 ____ A [E3122776C19CB10F188618BA918C99C9] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Filters\Texture Fill.8BF > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\File Formats > 2005-02-16 12:10 - 2005-02-16 12:10 - 000001079 ____ A [689A983CFA03F276C5EBE5F53DC3290E] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\File Formats\File Formats Read Me.html > 2005-03-22 04:22 - 2005-03-22 04:22 - 000176128 ____ A [667277D559A7A4FFBD8A8D38B3831445] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\File Formats\JPEG2000.8BI > 2005-03-22 04:22 - 2005-03-22 04:22 - 000016896 ____ A [9B454ED535D10155C7718AEA31FDE672] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\File Formats\Mac Paint.8BI > 2005-02-09 04:24 - 2005-02-09 04:24 - 000023552 ____ A [84D6B74E03042F330BDE5002FB7E2711] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\File Formats\PIXPNT8B.8BI > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\HSBHSL > 2005-02-16 18:19 - 2005-02-16 18:19 - 000001194 ____ A [01AB070D43DCF340A1CD120F57E7B1B2] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\HSBHSL\HSBHSL Read Me.html > 2005-03-22 04:32 - 2005-03-22 04:32 - 000017408 ____ A [5E4036E3BA7D861E5EF5A85DE5A8DA48] (Adobe Systems, Incorporated) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\HSBHSL\Hsbhsl.8bf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions > 2004-05-06 14:54 - 2004-05-06 14:54 - 000000121 ____ A [567E7D172ECE51075BC8CE820E9DD2DC] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AllowNetworkScratch_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000134 ____ A [EF952526B0F390B0028B134E57C8B8A1] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AllowNetworkScratch_ON.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000123 ____ A [1166AF7BBDDA0C1BA4C23D8613CFBCCD] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AllowRemovableScrtch_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000136 ____ A [D526056F2F12BE011D403F7E778529D5] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AllowRemovableScrtch_ON.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000117 ____ A [8DD4B708ED61F0DF352B43CE99DF44FA] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AlwaysImportClipbd_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000130 ____ A [B21556DC5B821FC28CD68FD0618745E3] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AlwaysImportClipbd_ON.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000114 ____ A [8728C9F650E5FC2B8C2922CEAE9BE510] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AlwaysShowPalettes_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000127 ____ A [CF77A11C15DC3963DDD44852EF48DFE6] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\AlwaysShowPalettes_ON.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000124 ____ A [A14490906D3F6B935E93412EF17B2120] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BadDriverRGBBlitCheck_OFF.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000111 ____ A [CD6999D9384F3E4F2C52D38CE6F27DC2] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BadDriverRGBBlitCheck_ON_D.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000115 ____ A [8640C124F47484D89F5245EDFD79F34C] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BadDriverStickyCrsr_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000128 ____ A [E7C04D5C99AB3C1FAF9115352FCAA550] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BadDriverStickyCrsr_ON.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000115 ____ A [F6C32056FBA237BBB6CC1D4FD28936F1] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BlitSingleScanLines_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000128 ____ A [0E4C8A9847DE694F83FFCA8E14C51735] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BlitSingleScanLines_ON.reg > 2004-09-03 10:59 - 2004-09-03 10:59 - 000000256 ____ A [B6BE9A5F60CC256B015ADCD3B0F9AA94] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BrokenLargeCursors_OFF.reg > 2004-09-03 10:59 - 2004-09-03 10:59 - 000000256 ____ A [8F4A5B823FD26D99295AFA2D84EDB950] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\BrokenLargeCursors_ON_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000120 ____ A [373DE09B725A220D5DC642D539C6C642] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ClipboardSizeLimit_OFF.reg > 2004-05-06 14:53 - 2004-05-06 14:53 - 000000105 ____ A [FCDF1973BFD8E455B42E450651E5C773] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ClipboardSizeLimit_ON_D.reg > 2004-05-06 14:52 - 2004-05-06 14:52 - 000000116 ____ A [5D10C85BBAF08CDD95AE566A04A041CA] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\DisableScratchCmprs_OFF_D.reg > 2004-05-06 14:56 - 2004-05-06 14:56 - 000000129 ____ A [931935FFF4E6A2574DC3CD046FF80675] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\DisableScratchCmprs_ON.reg > 2004-05-06 14:24 - 2004-05-06 14:24 - 000000109 ____ A [7679C329B33A804D9B93542BD3042E35] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ForceProgress_OFF_D.reg > 2004-05-06 14:24 - 2004-05-06 14:24 - 000000122 ____ A [A2C4C6ACB1C56A5EF98FEE7B9201E9C0] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ForceProgress_ON.reg > 2004-05-06 14:52 - 2004-05-06 14:52 - 000000111 ____ A [FA9FF531BBE354DDA844DD2AB2C11D97] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ForceVMCompression_OFF_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000124 ____ A [5786369BAEC42507DA90A2332AEA0607] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ForceVMCompression_ON.reg > 2004-05-06 14:52 - 2004-05-06 14:52 - 000000110 ____ A [312ADFDBE4A25510FFCFE52F0F58DCEF] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\IgnoreEXIFsRGB_OFF_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000123 ____ A [CFEB79B52C0DB77962DF12EB550F149D] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\IgnoreEXIFsRGB_ON.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000133 ____ A [2F5BE3F4A69FF9C4806B512891EA7434] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\OptimizeResizeDrawing_OFF.reg > 2004-05-06 14:52 - 2004-05-06 14:52 - 000000120 ____ A [6302DABD711E2DA1755321830D6C3E38] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\OptimizeResizeDrawing_ON_D.reg > 2004-05-06 14:52 - 2004-05-06 14:52 - 000000118 ____ A [E3A2A69F042ECD7D797CECED04F552D8] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\PrintPassthrough_NORM_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000131 ____ A [B9364CD1ECC324130615FEDEC3BF3597] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\PrintPassthrough_PASS.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000131 ____ A [B49FD19EE58D1E947D5B28CE9EC0E843] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\PrintPassthrough_PS_PASS.reg > 2005-02-25 10:07 - 2005-02-25 10:07 - 000014495 ____ A [B3976694FB27BA2440AA5ED71116C158] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\Registry Keys Read Me.html > 2004-05-06 14:52 - 2004-05-06 14:52 - 000000111 ____ A [A2398811723BBB67341DF824F973624D] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\RememberSlowFiles_OFF_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000124 ____ A [29B7336B003A1B47BAA4B9E31C1D2788] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\RememberSlowFiles_ON.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000126 ____ A [F62B29F26D71022391A1DB5D28CA6B0C] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ShowWindowsThumbnails_OFF.reg > 2004-05-06 14:51 - 2004-05-06 14:51 - 000000113 ____ A [714131680B23CE45907CFBA164B6807A] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\ShowWindowsThumbnails_ON_D.reg > 2004-05-06 14:51 - 2004-05-06 14:51 - 000000109 ____ A [60FAD01AA6F699BD70A0B0A49CB8881F] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\TaskDebugging_OFF_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000122 ____ A [8E93DBC2C982EBB7410F8B0E9FF2DD54] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\TaskDebugging_ON.reg > 2004-05-06 14:51 - 2004-05-06 14:51 - 000000109 ____ A [32457F7F2B257EE6CD7B0050F11505BE] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\UnlimitedPreviews_OFF_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000124 ____ A [FF3C3CD694ACC12E6AACE256AF1AE752] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\UnlimitedPreviews_ON.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000119 ____ A [4D0ED8141D782FAB87FC44E3A0DE8F3E] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\UseAsyncIO_OFF.reg > 2004-05-06 14:51 - 2004-05-06 14:51 - 000000106 ____ A [177E992A17012DA74A26EEB27B29D459] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\UseAsyncIO_ON_D.reg > 2004-05-06 14:51 - 2004-05-06 14:51 - 000000111 ____ A [22FE3E87A2AD51EA260BBE87E04A01BD] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\UseAsyncScratch_OFF_D.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000124 ____ A [2734066235C4F2EE96EAEFC128C82264] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\UseAsyncScratch_ON.reg > 2004-05-06 14:55 - 2004-05-06 14:55 - 000000129 ____ A [F44495B364423ECBAC87ADB4802A9611] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\WarnSavePrefsFailure_OFF.reg > 2004-05-06 14:51 - 2004-05-06 14:51 - 000000114 ____ A [60E4471E73E4B3DE4715128CF5720F5A] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Photoshop Only\Optional Extensions\WarnSavePrefsFailure_ON_D.reg > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Seiko Epson > 2003-09-03 17:10 - 2003-09-03 17:10 - 001858682 ____ A [3C852734E7AA9861CBE28543CCFD9FAD] (SEIKO EPSON CORPORATION ) C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Seiko Epson\PIM II Installer.exe > 2003-09-12 19:16 - 2003-09-12 19:16 - 000211573 ____ A [5D55E1737C9F7C5AE5E9B05921D96A39] () C:\PhSp_CS2_UE_Ret\Goodies\Optional Plug-Ins\Seiko Epson\PRINT Image Matching.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects > 2003-09-22 15:26 - 2003-09-22 15:26 - 000024084 ____ A [74146B952D72EAAF3CAE345C43BF255C] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\AdobeP8M.md0 > 2003-09-22 15:26 - 2003-09-22 15:26 - 003886711 ____ A [CCC7A90B7FE014E52113549380D78142] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\AdobeP8P.tb0 > 2003-09-22 15:26 - 2003-09-22 15:26 - 000027374 ____ A [108C8643FC364641084391D2B4BDBDE2] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\AdobeP8T.tb0 > 1994-11-30 10:18 - 1994-11-30 10:18 - 000262041 ____ A [1658EF04CC3769BCFB3025B51F114553] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Amoeba.psd > 1994-11-30 10:18 - 1994-11-30 10:18 - 000262456 ____ A [BAF27C88973228E8A229A23E847989C4] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Bark.psd > 1994-11-30 10:17 - 1994-11-30 10:17 - 000254759 ____ A [2A64F048C61B28F2476B30495467829A] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Blistered Paint.psd > 1994-06-07 06:49 - 1994-06-07 06:49 - 000167215 ____ A [3C22070CD9819F3E64E3368E7499A5D6] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Bricks.psd > 1994-11-30 10:17 - 1994-11-30 10:17 - 000262456 ____ A [D2E4B348930B960F25F4041C6F452EA2] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Burlap.psd > 1994-06-07 06:49 - 1994-06-07 06:49 - 000262434 ____ A [100F5B6F1779CC7C702C855A2B29A01E] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Canvas.psd > 1994-06-07 06:49 - 1994-06-07 06:49 - 000258856 ____ A [820327913F4D3134A9325C822C09D6A0] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Carpet.psd > 1994-06-07 06:48 - 1994-06-07 06:48 - 000262462 ____ A [4459BE6BABB51D408F97945D218E8F8E] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Caviar.psd > 1994-11-30 10:17 - 1994-11-30 10:17 - 000262456 ____ A [C70BA9673FC30759BBACE39B07B73556] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Cinder Blocks.psd > 1994-06-07 06:48 - 1994-06-07 06:48 - 000252357 ____ A [8696219E17FA52DF0201620B2F20DB8A] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Clouds.psd > 1994-06-07 06:42 - 1994-06-07 06:42 - 000262434 ____ A [0977982166DE30D9077904B84FE2AB65] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Concrete.psd > 1994-11-30 10:16 - 1994-11-30 10:16 - 000262456 ____ A [7354FEAF3A74585AAF4C42C28D71DE5F] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Confetti.psd > 1994-05-31 07:38 - 1994-05-31 07:38 - 000262434 ____ A [5C40D4AC1E975500117CBC6128773A94] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Denim 1.psd > 1994-05-31 07:34 - 1994-05-31 07:34 - 000262434 ____ A [DDCA3829268266F1C71883DDF9B39304] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Denim 2.psd > 1994-06-08 06:19 - 1994-06-08 06:19 - 000262456 ____ A [ECFF0B6F1E43F110FFC82BAC85B237A5] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Dragon Scales 1.psd > 1994-06-08 06:32 - 1994-06-08 06:32 - 000262484 ____ A [FE67C523C8E1EBF556218268DE731F46] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Dragon Scales 2.psd > 1994-11-30 10:19 - 1994-11-30 10:19 - 000262456 ____ A [FB1E27D7EF708CAC47A5BE22BAC38237] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Driven Snow.psd > 1994-11-30 10:19 - 1994-11-30 10:19 - 000262456 ____ A [3B23328B2CF4D2168B71AC7E20C2D912] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Feathers.psd > 1994-11-30 10:19 - 1994-11-30 10:19 - 000262456 ____ A [424A0C327889374F1852D6CAF29EA8FE] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Footprints.psd > 1994-05-31 08:40 - 1994-05-31 08:40 - 000261861 ____ A [67D5EA1C709DE5C1551272EDE33F2EB7] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Frosted Glass.psd > 1994-11-30 10:19 - 1994-11-30 10:19 - 000239672 ____ A [839EE0914B21104403E10F722A4C3AD0] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Frozen Rain.psd > 1994-11-30 10:19 - 1994-11-30 10:19 - 000262456 ____ A [6D73378BEADEBF22300F0AFFE939DB7A] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Gauze.psd > 1994-11-30 10:22 - 1994-11-30 10:22 - 000222294 ____ A [CAA693F3B94AA429AE208A6545F421D1] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Glass Block.psd > 1994-05-31 07:27 - 1994-05-31 07:27 - 000262434 ____ A [8E686DAC12E54C105A8EAFBB4DC7AA4D] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Irish Short Hair.psd > 1995-01-06 10:41 - 1995-01-06 10:41 - 000142360 ____ A [11ABB9F7A05E0D4C0D0085C3CDD84858] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Knurl.psd > 1994-11-30 10:22 - 1994-11-30 10:22 - 000173101 ____ A [7F4E8B83F4CE1A9445DB70C5CE115C64] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Leather 1.psd > 1994-11-30 10:21 - 1994-11-30 10:21 - 000260867 ____ A [751EFD0CC86C9C51395DB88EF5AD6497] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Leather 2.psd > 1994-11-30 10:21 - 1994-11-30 10:21 - 000262456 ____ A [0757F0C86754C2C6912E9D0E2CD7984E] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Lichen.psd > 1994-06-07 06:48 - 1994-06-07 06:48 - 000210701 ____ A [7B3E6E1AE732A40223A0FCF3D006BF47] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Lines.psd > 1994-06-07 06:48 - 1994-06-07 06:48 - 000262462 ____ A [8DA8E862D0673844F8322F7709287CB0] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Loose Threads.psd > 1994-06-07 06:47 - 1994-06-07 06:47 - 000253199 ____ A [D6C5283520C02BADEB1DE2A29CD16897] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Mountains 1.psd > 1994-11-30 10:21 - 1994-11-30 10:21 - 000232138 ____ A [22533EE8B289941B6699F719698FDA21] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Mountains 2.psd > 1995-01-04 04:48 - 1995-01-04 04:48 - 000259040 ____ A [696F59DC97FCC4B69C03CF22E56C1DBB] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Noise.psd > 1994-05-31 07:34 - 1994-05-31 07:34 - 000262434 ____ A [2B33C0C6B3F1387933AFC2C0801E569F] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper.psd > 1994-11-30 10:23 - 1994-11-30 10:23 - 000262456 ____ A [AB1F3DCF73FD848F513F2FB13266D909] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Big Canvas.psd > 1994-11-30 10:23 - 1994-11-30 10:23 - 000262456 ____ A [996B518273E0DE8582F3ABF18FF95026] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Fibrous.psd > 1994-06-07 06:45 - 1994-06-07 06:45 - 000262434 ____ A [E6D406988FC13F260813261201B92C61] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Fine.psd > 1994-11-30 10:23 - 1994-11-30 10:23 - 000262456 ____ A [E5DB0E7C71A5C50118904C11DF30F2D6] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Regular.psd > 1994-06-07 06:45 - 1994-06-07 06:45 - 000262434 ____ A [5743E754EB0699AA280D82DC968BCA70] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Rough.psd > 1994-11-30 10:23 - 1994-11-30 10:23 - 000262456 ____ A [4EB0A219ACDCEC6249AF7236E105B138] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Rougher.psd > 1994-11-30 10:22 - 1994-11-30 10:22 - 000262456 ____ A [DD15B988B723635D87392F644623C7AD] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-Watercolor.psd > 1994-11-30 10:25 - 1994-11-30 10:25 - 000262456 ____ A [32080B06BDC56C9B309A37BD41CE3F3B] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Paper-XRough.psd > 1994-11-30 10:25 - 1994-11-30 10:25 - 000262456 ____ A [7EFAF3ECCBCF0B126FA6BF33B91A59EB] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Pine Bark.psd > 1994-11-30 10:25 - 1994-11-30 10:25 - 000150330 ____ A [A78A299C2BCAFEA28502048DDC910541] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Puzzle.psd > 1994-06-07 06:44 - 1994-06-07 06:44 - 000262434 ____ A [0C458169EAF584C08A793375E02ECB85] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Rosette.psd > 1994-06-07 06:43 - 1994-06-07 06:43 - 000245885 ____ A [9D69437184A92ADDE7B8068F6EE54931] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Rust Flakes.psd > 1994-11-30 10:25 - 1994-11-30 10:25 - 000262456 ____ A [8B77A8ED34C5E514B84F5DB10B24B50B] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Screen Door.psd > 1994-11-30 10:24 - 1994-11-30 10:24 - 000262456 ____ A [4B77072708A1D24A9E2467B74A60CE1A] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Shagg Rug.psd > 1994-06-08 06:19 - 1994-06-08 06:19 - 000262456 ____ A [6DAB0B1B860EB9A80FFF71DED27BCA2C] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Shingles 1.psd > 1994-06-07 06:44 - 1994-06-07 06:44 - 000096653 ____ A [F4AF53B485932924671B8D1C84878427] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Shingles 2.psd > 1994-05-31 07:36 - 1994-05-31 07:36 - 000262434 ____ A [F6227D3A92C0C864977CB231F7C7FCBC] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Shredded Plastic 1.psd > 1994-06-07 06:43 - 1994-06-07 06:43 - 000262434 ____ A [CB1B8949D32A3E62A5A273F723637194] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Shredded Plastic 2.psd > 1994-06-07 06:44 - 1994-06-07 06:44 - 000225771 ____ A [314BF482A341E482B2651B16887132D8] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Snake Skin.psd > 1994-05-31 07:08 - 1994-05-31 07:08 - 000118636 ____ A [FBDBA9ED755D0F36D10ACE271C36CEBE] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Sparse Basic Noise.psd > 1994-06-07 06:41 - 1994-06-07 06:41 - 000252335 ____ A [26592628512CD0E49881DEC60C5D78E7] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Sphere Grid.psd > 1994-06-07 06:40 - 1994-06-07 06:40 - 000262434 ____ A [090D881F149DACF26C1F785AAD9B1215] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Strands 1.psd > 1994-06-07 06:39 - 1994-06-07 06:39 - 000262434 ____ A [02E9066E4C0059A39FD9741F43042305] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Strands 2.psd > 1994-05-31 07:33 - 1994-05-31 07:33 - 000262434 ____ A [5BBC607550AD1203F2C3FC7F092D5156] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Stucco 1.psd > 1994-11-30 10:26 - 1994-11-30 10:26 - 000248369 ____ A [DD13325DD9AB1DB7FB0125E97D37C60E] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Stucco 2.psd > 1994-11-30 10:26 - 1994-11-30 10:26 - 000262456 ____ A [FB2FCBB054A42407F4AE0A13B7ABDE57] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Stucco 3.psd > 1994-06-26 19:08 - 1994-06-26 19:08 - 000247711 ____ A [6191D16A3139B047DFA86D73553462EE] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Styrofoam Balls.psd > 2005-02-16 12:19 - 2005-02-16 12:19 - 000000672 ____ A [F973C1E2CC2976E326A1E4FD820AA4F3] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Textures Read Me.html > 1994-06-07 06:39 - 1994-06-07 06:39 - 000262434 ____ A [640F37D055CE3E064488DB018C0D4FC4] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Thick Hair.psd > 1994-05-31 07:15 - 1994-05-31 07:15 - 000245788 ____ A [0CAFAB50B79819B498FA5EB5C70ACD3D] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Tiles - Bumpy.psd > 1994-07-01 11:22 - 1994-07-01 11:22 - 000042722 ____ A [8DBFB3B2DF724BE2B2880C596666FAB4] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Tiles - Smooth.psd > 1994-11-30 10:29 - 1994-11-30 10:29 - 000261942 ____ A [155773568E01EBE9FCB30B49CE4BCFC3] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Towel.psd > 1994-11-30 10:29 - 1994-11-30 10:29 - 000154264 ____ A [D422C7176B2146AD2A1A0B8E2DD8B91F] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Tread.psd > 1994-11-30 10:28 - 1994-11-30 10:28 - 000262456 ____ A [42E3A15CF8057F1809E6F4A2889BC79D] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 1.psd > 1994-11-30 10:28 - 1994-11-30 10:28 - 000259148 ____ A [6F5F984817C4732FB182456E9671A529] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 2.psd > 1994-05-31 07:32 - 1994-05-31 07:32 - 000262434 ____ A [F255AC65AAF3663D46A065E288E71EAE] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 3.psd > 1994-05-31 07:39 - 1994-05-31 07:39 - 000262434 ____ A [3B3828B98AB37BC3BA79BDE766F2F6E4] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 4.psd > 1994-06-07 06:38 - 1994-06-07 06:38 - 000261883 ____ A [16EAE3834F42036E3D99F10CC93A7389] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 5.psd > 1994-06-07 06:38 - 1994-06-07 06:38 - 000262434 ____ A [E4D05F08BA4A693CB6F0F163A7C736D5] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 6.psd > 1994-06-07 06:37 - 1994-06-07 06:37 - 000184906 ____ A [F434B6FCEFEA7C7721CD0B75058D6BE9] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 7.psd > 1994-06-07 06:38 - 1994-06-07 06:38 - 000258238 ____ A [2F21BF574C82E65D7880E6AB9D7FD562] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Weave 8.psd > 1994-11-30 10:28 - 1994-11-30 10:28 - 000244304 ____ A [F284B88AA8B550DAA1DD6A23F443B86E] () C:\PhSp_CS2_UE_Ret\Goodies\Textures for Lighting Effects\Web.psd > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates > 2005-02-16 14:51 - 2005-02-16 14:51 - 000000952 ____ A [91B7163FC0EB0C8B944CA9A7062FA0E1] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\WPG Templates Read Me.html > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000002 ____ A [73D0A7B3FAB51BEEEE8BA428B9CD1D47] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000472 ____ A [CB4C8D8EB0E9DF7634A497D1DD385C8A] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000484 ____ A [CA2D293AD2C4B7AB8C19637B8AAAC3D9] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000003376 ____ A [CEEA1C4AF75DCD5DC59D4E8637480BCA] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000342 ____ A [0CAAD5D19E29B8E98656C0458FD786AE] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\images > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000182 ____ A [F42432C7517ED0ADFA997C204BAEF2B9] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\images\nextimage.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000170 ____ A [C6A9317C8B7631BF0937AD394940C89F] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\images\previmage.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000068 ____ A [9A3CA2B39BC01F99257A365661391E1E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Blue & Gray\images\rule.gif > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000000 ____ A [D41D8CD98F00B204E9800998ECF8427E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000472 ____ A [CB4C8D8EB0E9DF7634A497D1DD385C8A] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000518 ____ A [D103F010413B5CF191CEA212DAE12ED4] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002090 ____ A [76CEB2D5ED469A3D42FAE35F9B07205D] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000323 ____ A [185A3EDD81AFEF6468F7C32CD36EB745] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\images > 2003-09-16 09:59 - 2003-09-16 09:59 - 000004900 ____ A [C2EC3DC88C57CDE0CA303B83BC4109E3] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Dark\images\bannerimage.gif > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Frame > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000000 ____ A [D41D8CD98F00B204E9800998ECF8427E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Frame\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000464 ____ A [5AF456F1E0E702CD731A006CCA668E0F] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Frame\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000382 ____ A [B572398C534F9966468611F0E02BC274] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Frame\IndexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000001148 ____ A [2CF8D1954E7DCB09F49ABF6D2FF2E18E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Frame\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000359 ____ A [30A9ACD65132C6944B5D4AD90144EEB1] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Frame\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Light > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000000 ____ A [D41D8CD98F00B204E9800998ECF8427E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Light\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000472 ____ A [CB4C8D8EB0E9DF7634A497D1DD385C8A] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Light\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000512 ____ A [14851192ED8773EE93980F099BEB2818] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Light\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002121 ____ A [5AB58FB6BD4831673A10664228124895] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Light\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000337 ____ A [AE8B3C2234F70D274DDC374D9431818C] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Light\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000000 ____ A [D41D8CD98F00B204E9800998ECF8427E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000475 ____ A [CFF7E5D70B4FE2445773A9BE084394D0] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000543 ____ A [AC3A12FA17F3E77775D89D6794B7682C] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002241 ____ A [A98D462888452F3527A04073AFA546D9] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000338 ____ A [98CF0DF8EFF1959942918E50741C70DB] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\images > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002305 ____ A [B4D2AB86A18D1B2A8E6AC94F9E287CF6] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\images\bkgnd.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000266 ____ A [D977270675DE996AE3B50AF108329085] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\images\nextimage.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000283 ____ A [7B2FEA7BCF338B3244DFD3A8F5231E93] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Horizontal Patterned\images\previmage.gif > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000000 ____ A [D41D8CD98F00B204E9800998ECF8427E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000001252 ____ A [462DF9D5FAA2C0D925BB40A5AC446ECD] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\IndexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002075 ____ A [300926BD867E7A3325488DC50EC62F22] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000298 ____ A [62F2EE79B137D7A432BD7DC158ABAA9A] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000000 ____ A [D41D8CD98F00B204E9800998ECF8427E] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002002 ____ A [E869CF683A79AFA60D416AD9E080C506] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000002190 ____ A [8FA5C17AD67A7B728E52A911472781BF] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000346 ____ A [1198D99EEBC4CA6A48BB6F1D407CF580] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\images > 2003-09-16 09:59 - 2003-09-16 09:59 - 000005760 ____ A [EFAD4875801C0698852F5F475DF4C719] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\images\bannerimage.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000203 ____ A [CD41A100666C052DE69DF40662175A86] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\images\currentindex.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000184 ____ A [F4316A993B596F71EEF05AB84F01451F] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\images\nextimage.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000192 ____ A [DF9B7E3C565588B4B9058E5CE7E4DB2F] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\images\previmage.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000068 ____ A [DB93AD31E2A59E82493C3881D44A53B7] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table - Blue\images\rule.gif > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\images > 2003-09-16 09:59 - 2003-09-16 09:59 - 000006729 ____ A [A1587CC5135974016CC21D877D97062C] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\images\background.jpg > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000691 ____ A [F470E493875A62D5AC801A7FA5645F76] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\images\home.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000683 ____ A [ABBF959994DA39D7FDD89EE7F45D9B36] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\images\next.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000685 ____ A [E2638E5EEB4D76BD3991ADD0FE8D31BA] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Table\images\previous.gif > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Frame > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000433 ____ A [CA5D34DB9D5A812B771F47DCE175771C] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Frame\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000462 ____ A [21F09CD5FD71C10DDFD2211F766A001A] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Frame\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000466 ____ A [80844A34B3EFCEB53CAA565837ED0CDA] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Frame\IndexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000001204 ____ A [C40D87DE825C3FE82D3501986632D1B8] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Frame\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000200 ____ A [82CC0F255F7C0233E484189587552509] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Frame\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 1 > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000002 ____ A [73D0A7B3FAB51BEEEE8BA428B9CD1D47] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 1\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000464 ____ A [145CF6A19574DBC5CFC0A6E493107D0D] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 1\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000538 ____ A [E78010B66A91833410DBADC7E638B533] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 1\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000001510 ____ A [512245B548C5327AE75F9EC904CE9997] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 1\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000359 ____ A [99E15A23F07E350A99EA06BDAF60EA2B] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 1\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2 > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000002 ____ A [73D0A7B3FAB51BEEEE8BA428B9CD1D47] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\Caption.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000492 ____ A [AF4F90F2B6CBC5E170C4FAC22CEA262B] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\FrameSet.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000538 ____ A [E78010B66A91833410DBADC7E638B533] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\indexPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000001377 ____ A [C40F77444B6CD836F185AB34F0744313] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\SubPage.htm > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000361 ____ A [B6366C8C753097FC406040BF2A55AB21] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\Thumbnail.htm > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\images > 2003-09-16 09:59 - 2003-09-16 09:59 - 000000058 ____ A [286D604214376BC7D2F0AD0AC924DBD8] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\images\arrow.gif > 2003-09-16 09:59 - 2003-09-16 09:59 - 000010417 ____ A [BCFBA559B704213B5F2EBC6E180A2C8C] () C:\PhSp_CS2_UE_Ret\Goodies\Web Photo Gallery Templates\Vertical Slide Show 2\images\bkgnd.gif > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Help > 2005-02-18 11:21 - 2005-02-18 11:21 - 017949745 ____ A [6F8CA2EB5B4B6B688E19552BD8BFE4DE] () C:\PhSp_CS2_UE_Ret\Help\Photoshop Help.pdf > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Technical Information > 2021-03-05 01:58 - 2021-03-05 01:58 - 000000000 ____ D [00000000000000000000000000000000] () C:\PhSp_CS2_UE_Ret\Technical Information\Scripting Guide > 2005-03-11 11:00 - 2005-03-11 11:00 - 001466555 ____ A [24DEFC9E0C9AD3D8FD5EAFBD4A5D1F42] () C:\PhSp_CS2_UE_Ret\Technical Information\Scripting Guide\AppleScript Reference Guide.pdf > 2005-03-11 11:02 - 2005-03-11 11:02 - 003518909 ____ A [CCABA9ED6A61C998E7282A0588FAB79F] () C:\PhSp_CS2_UE_Ret\Technical Information\Scripting Guide\JavaScript Reference Guide.pdf > 2005-03-11 10:59 - 2005-03-11 10:59 - 000714623 ____ A [7F39CD251EFE1131E976362CB57936CF] () C:\PhSp_CS2_UE_Ret\Technical Information\Scripting Guide\Photoshop Scripting Guide.pdf > 2005-03-11 11:03 - 2005-03-11 11:03 - 001364766 ____ A [EEA15A97EB38AA1924BCF9E06A05C310] () C:\PhSp_CS2_UE_Ret\Technical Information\Scripting Guide\VisualBasic Reference Guide.pdf > > ====== End of Folder: ====== > > ``` [Página anterior](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991.md?page=1) [Página siguiente](https://forospyware.com/t/recurrente-pupoptionalspigot-en-carpeta-chrome-default/21991.md?page=3)