Velocidad de internet lenta en modo normal y rápida en modo seguro de windows

Hola espero me puedan ayudar. El problema que tengo esque la velocidad de internet en mi laptop está muy lenta he probado con varios dispositivos y en todos obtengo una velocidad de 100 Mbps. Da igual si conecto la laptop por wifi o por ethernet. Probé haciendo la prueba de velocidad de internet en el modo seguro de windows ahí si alcanza los 100Mbps sin embargo cuando regreso al modo normal el test de velocidad me arroja una velocidad inferior a 1 Mbps. He leído otros problemas similares en los foros sin embargo mi problema no se ha solucionado adjunto los reportes de los programas que he ejecutado.

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 19/7/20
Hora del análisis: 11:09
Archivo de registro: 4198b134-c9da-11ea-85aa-509a4cbca8db.json

-Información del software-
Versión: 4.1.2.73
Versión de los componentes: 1.0.979
Versión del paquete de actualización: 1.0.27045
Licencia: Prueba

-Información del sistema-
SO: Windows 10 (Build 18362.959)
CPU: x64
Sistema de archivos: NTFS
Usuario: DESKTOP-F9C7RJH\Gilberto

-Resumen del análisis-
Tipo de análisis: Análisis personalizado
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 736665
Amenazas detectadas: 1
Amenazas en cuarentena: 1
Tiempo transcurrido: 28 hr, 21 min, 5 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Activado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 0
(No hay elementos maliciosos detectados)

Valor del registro: 0
(No hay elementos maliciosos detectados)

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 0
(No hay elementos maliciosos detectados)

Archivo: 1
Generic.Malware/Suspicious, C:\USERS\GILBERTO\DOCUMENTS\MICROSOFT OFFICE PRO PLUS 2016 V16.0.4266.1003 RTM + ACTIVATOR [TECHTOOLS.NET]\MICROSOFT OFFICE PRO PLUS 2016 V16.0.4266.1003 RTM + ACTIVATOR [TECHTOOLS.NET]\MICROSOFT OFFICE PRO PLUS 2016 V16.0.4266.1003 RTM + ACTIVATOR [TECHTOOLS.NET]\KMSAUTO NET 2015 V1.3.8 PORTABLE\KMSAUTO NET.EXE, En cuarentena, 0, 392686, 1.0.27045, , shuriken, 

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)
# -------------------------------
# Malwarebytes AdwCleaner 8.0.6.0
# -------------------------------
# Build:    06-24-2020
# Database: 2020-07-20.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    07-20-2020
# Duration: 00:00:43
# OS:       Windows 10 Home Single Language
# Cleaned:  58
# Failed:   9


***** [ Services ] *****

Deleted       WCAssistantService
Deleted       updater

***** [ Folders ] *****

Deleted       C:\Program Files\Hola
Deleted       C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted       C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
Deleted       C:\Users\Gilberto\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
Deleted       C:\Users\Gilberto\AppData\Roaming\Hola
Deleted       C:\Users\Gilberto\AppData\Roaming\Lavasoft\Web Companion
Not Deleted   C:\Program Files (x86)\Lavasoft\Web Companion
Not Deleted   C:\ProgramData\Lavasoft\Web Companion

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\Hola
Deleted       HKCU\Software\Lavasoft\Web Companion
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hola.org
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
Deleted       HKLM\SYSTEM\Setup\FirstBoot\Services\WCAssistantService
Deleted       HKLM\Software\Hola
Deleted       HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|hola
Deleted       HKLM\Software\Wow6432Node\Hola
Deleted       HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{e2b4cd19-1111-4df4-a298-5e57e2251a41}|DisplayIcon
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{e2b4cd19-1111-4df4-a298-5e57e2251a41}|DisplayName
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{e2b4cd19-1111-4df4-a298-5e57e2251a41}|UninstallString
Deleted       HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted       HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.DellDigitalDelivery   Folder   C:\Program Files (x86)\DELL DIGITAL DELIVERY
Deleted       Preinstalled.DellHelp&Support   Folder   C:\ProgramData\DELL\DELL HELP & SUPPORT
Deleted       Preinstalled.DellHelp&Support   Folder   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\DELL HELP & SUPPORT
Deleted       Preinstalled.DellHelp&Support   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E8669F4E-F2BE-48A9-B5A5-0BC12CA4CB4F}
Deleted       Preinstalled.DellHelp&Support   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{E8669F4E-F2BE-48A9-B5A5-0BC12CA4CB4F}
Deleted       Preinstalled.DellQuickset   Folder   C:\Program Files\DELL\QUICKSET
Deleted       Preinstalled.DellQuickset   Folder   C:\ProgramData\DELL\QUICKSET
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Classes\CLSID\{5CF37A65-BBB9-41FE-B88D-DD61422E9E3C}
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|QuickSet
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Run|QuickSet
Deleted       Preinstalled.DellQuickset   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{87CF757E-C1F1-4D22-865C-00C6950B5258}
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SAREMEDIATION\AUDIT
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SUPPORTASSIST
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\ProgramData\DELL\SAREMEDIATION\AGENT
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\ProgramData\DELL\SAREMEDIATION\PLUGIN
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\SUPPORTASSIST
Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\ProgramData\SUPPORTASSIST\CLIENT\TECHNICIANTOOLKIT
Deleted       Preinstalled.DellSupportAssistAgent   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C2C7A71D-9372-4897-B381-0771C4F98037} 
Deleted       Preinstalled.DellSupportAssistAgent   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C2C7A71D-9372-4897-B381-0771C4F98037} 
Deleted       Preinstalled.DellSupportAssistAgent   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Dell SupportAssistAgent AutoUpdate
Deleted       Preinstalled.DellSupportAssistAgent   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5832D99C-C9C6-437F-861C-43ED6333956F}
Deleted       Preinstalled.DellSupportAssistAgent   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6DE68941-66DE-48DE-9C80-FE60C9DE0AD4}
Deleted       Preinstalled.DellSupportAssistAgent   Task   C:\Windows\System32\Tasks\DELL SUPPORTASSISTAGENT AUTOUPDATE
Deleted       Preinstalled.DellSupportCenter   Folder   C:\Program Files\DELL SUPPORT CENTER
Deleted       Preinstalled.DellUpdateforWindows10   Folder   C:\Program Files (x86)\DELL\UPDATE
Deleted       Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\DELL\UPDATE
Deleted       Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DELL\UPDATE
Deleted       Preinstalled.DellUpdateforWindows10   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{5EBBC1DA-975F-44A0-B438-F325BCD45577}
Deleted       Preinstalled.LenovoThinkVantageToolbox   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{30819224-A208-44FF-B165-6EFE80F45134} 
Deleted       Preinstalled.LenovoThinkVantageToolbox   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{30819224-A208-44FF-B165-6EFE80F45134} 
Deleted       Preinstalled.LenovoThinkVantageToolbox   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDoctorBackgroundMonitorTask
Deleted       Preinstalled.LenovoThinkVantageToolbox   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\PC-Doctor for Windows
Deleted       Preinstalled.LenovoThinkVantageToolbox   Task   C:\Windows\System32\Tasks\PCDOCTORBACKGROUNDMONITORTASK
Deleted       Preinstalled.MyDell   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\Dell Support Center
Not Deleted   Preinstalled.DellHelp&Support   Folder   C:\Program Files\DELL\DELL HELP & SUPPORT
Not Deleted   Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SAREMEDIATION\AGENT
Not Deleted   Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Not Deleted   Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SUPPORTASSISTAGENT
Not Deleted   Preinstalled.DellUpdateforWindows10   Folder   C:\Program Files (x86)\DELL\UPDATESERVICE
Not Deleted   Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\DELL\UPDATESERVICE
Not Deleted   Preinstalled.SmartByte   Folder   C:\Program Files\RIVET NETWORKS


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [8465 octets] - [20/07/2020 19:36:16]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
~ ZHPCleaner v2020.7.17.213 by Nicolas Coolman (2020/07/17)
~ Run by Gilberto (Administrator)  (20/07/2020 20:12:13)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Reparar
~ Report : C:\Users\Gilberto\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\Gilberto\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point : OK
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 10 Home Single Language, 64-bit  (Build 18362)


---\\  Alternate Data Stream (ADS). (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Servicios (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Navegadores de Internet (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Hosts carpeta (1)
~ El archivo hosts es legítimo (21)


---\\  Tareas automáticas programadas. (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Explorador ( Archivos, Carpetas ) (6)
MOVIDO carpeta: C:\Users\Public\Desktop\ScpToolkit Settings Manager.lnk    =>PUP.Optional.SettingsManager
MOVIDO carpeta*: C:\Program Files (x86)\Lavasoft\web companion    =>PUP.Optional.LavasoftWebCompanion
MOVIDO carpeta*: C:\ProgramData\Lavasoft\web companion    =>PUP.Optional.LavasoftWebCompanion
MOVIDO archivo: C:\Users\Gilberto\AppData\Roaming\DiskDefrag  =>SUP.Optional.AuslogicsDiskDefrag
MOVIDO archivo: C:\Program Files (x86)\lavasoft\web companion  =>PUP.Optional.LavasoftWebCompanion
MOVIDO archivo: C:\ProgramData\lavasoft\web companion  =>PUP.Optional.LavasoftWebCompanion


---\\  Registro ( Claves, Valores, Datos) (1)
BORRADOS clave*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01BA9BEEBE4495157B7B12F92A5A558D [C:\Program Files (x86)\Plex\Plex Media Server\Resources\Plug-ins-77cb9455c\Media-Flags.bundle\Contents\Resources\Studio\cinemax.png]  =>Adware.CrossRider


---\\  Resumen de elementos en su estación de trabajo (4)
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>PUP.Optional.SettingsManager
https://nicolascoolman.eu/2017/03/12/superfluous-lavasoftwebcompanion/  =>PUP.Optional.LavasoftWebCompanion
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/  =>SUP.Optional.AuslogicsDiskDefrag
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/  =>Adware.CrossRider


---\\ Limpieza adicional. (9)
~ Clave de registro Tracing borrados (9)
~ Quitar los antiguos informes de ZHPCleaner. (0)


---\\ Resultado de la reparación.
~ Reparación llevada a cabo con éxito
~ Google Chrome OK
~ Internet Explorer OK


---\\ STATISTIQUES
~ Items escaneado : 1147
~ Items encontrado : 0
~ artículos cancelados : 0
~ Ahorro de espacio (bytes) : 0
~ Items opciones : 8/15


---\\ OPCIONES NO ACTIVAS
~ Análisis temporal de archivos
~ Análisis temporal de carpetas
~ Análisis de CLSID de carpetas vacías
~ Vaciar otro análisis de carpetas
~ Análisis de carpetas locales vacías
~ Análisis de carpetas locales vacías
~ Análisis de archivos de instalación obsoleto





~ End of clean in 00h00mn21s

---\\  Reporte (2)
ZHPCleaner-[S]-20072020-20_05_11.txt
ZHPCleaner-[R]-20072020-20_12_34.txt

Hola @Gilberto_Garcia

Y después de todos esos analisis como siguió el equipo? Ya que todas las herramientas te eliminaron algo.

Realiza lo siguiente:

1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

2.- Descarga Farbar Recovery Scan Tool. en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de su equipo. >> Como saber si mi Windows es de 32 o 64 bits.?

  • Ejecuta FRST.exe.
  • En el mensaje de la ventana del Disclaimer, pulsamos Yes
  • En la ventana principal pulsamos en el botón Scan/Analizar y esperamos a que concluya el proceso.
  • Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Guía: Como Ejecutar FRST

3.- En tu próxima respuesta, pega los reportes generados.

Guía : ¿Como Pegar reportes en el Foro?

Esperamos esos reporte.

Salu2

Gracias por responder. El equipo sigue igual, dejo los reportes de Farbar.

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 19-07-2020
Ejecutado por Gilberto (administrador) sobre DESKTOP-F9C7RJH (Dell Inc. Inspiron 5567) (20-07-2020 22:25:58)
Ejecutado desde C:\Users\Gilberto\Desktop
Perfiles cargados: Gilberto
Platform: Windows 10 Home Single Language Versión 1903 18362.959 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Chrome
Modo de Inicio: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(Dell Inc -> Dell Inc.) C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe
(Dell Inc -> Dell Inc.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(Dell Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Entertainment Experience LLC -> ) C:\Program Files\TrueColor\TrueColorALS.exe
(Entertainment Experience LLC -> Entertainment Experience) C:\Program Files\TrueColor\TrueColorUI.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k127153.inf_amd64_3f3936d8dec668b8\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k127153.inf_amd64_3f3936d8dec668b8\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k127153.inf_amd64_3f3936d8dec668b8\igfxext.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k127153.inf_amd64_3f3936d8dec668b8\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\k127153.inf_amd64_3f3936d8dec668b8\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2005.23.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12007.1001.2.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(PC-Doctor, Inc. -> PC-Doctor, Inc.) C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7193.518\DSAPI.exe
(Plex, Inc. -> Plex, Inc.) C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Rivet Networks LLC -> Rivet Networks LLC) C:\Program Files\Rivet Networks\SmartByte\RAPS.exe
(Rivet Networks LLC -> Rivet Networks) C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
(Rivet Networks LLC -> Rivet Networks, LLC.) C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe
(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320568 2016-09-20] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [TrueColor UI] => C:\Program Files\TrueColor\TrueColorUI.exe [19638160 2016-12-28] (Entertainment Experience LLC -> Entertainment Experience)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1235160 2019-09-26] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [24625656 2020-02-24] (Plex, Inc. -> Plex, Inc.)
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [29072568 2020-05-22] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-18\...\Run: [Plex Media Server] => C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [24625656 2020-02-24] (Plex, Inc. -> Plex, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-22] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-04-03]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
Startup: C:\Users\Gilberto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2020-04-30]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Gilberto\AppData\Local\MEGAsync\MEGAsync.exe (Ningún archivo)
GroupPolicy: Restricción ? <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {0CBA4467-48B4-498B-85FE-1E3EF0D66400} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {14C8C2B6-2CC9-48D8-B8B3-F9644F3C85AB} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-1505549421-2506334975-1048970357-1001 => C:\Users\Gilberto\AppData\Local\MEGAsync\MEGAupdater.exe
Task: {2AEC7C43-D6BA-42E0-AB04-961476BBAEA6} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {446DB093-73EB-41DB-B30A-FA122AAF7FF1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1331792 2020-05-07] (Adobe Inc. -> Adobe Inc.)
Task: {4B26117A-AAB5-4A73-9046-35362647096F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-05-22] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {4D4C39D0-26DA-421C-9C3E-A7D1C46015F6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {62941390-A91A-44AA-B9E1-12D631D2BEB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-06-05] (Google Inc -> Google LLC)
Task: {7321DFA9-DA73-4668-84F4-4CA2B1AB39CF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-06-05] (Google Inc -> Google LLC)
Task: {764B7083-9698-4889-8E4E-A52149E06255} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {765E46C0-B395-4A7F-A95D-4CC50BEBFA28} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Dell\SupportAssist\sessionchecker.exe
Task: {9866D49E-24CF-4A96-9F22-D4DFDE929520} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {9928BC75-3C16-457C-9AE8-71450F672A5C} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
Task: {9C2AF140-E304-4CC9-9926-E71A504F7DF8} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E32EA38-C070-459B-8889-73B918362667} - System32\Tasks\AdwCleaner_onReboot => C:\Users\Gilberto\Downloads\adwcleaner_8.0.6.exe [8420016 2020-07-19] (Malwarebytes Inc -> Malwarebytes)
Task: {BF552662-4DC2-49CD-9A85-7A5CE1C21592} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: {E5DE3339-3A4E-4E76-B055-CCABFF1791B8} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [24690360 2020-05-22] (Piriform Software Ltd -> Piriform Software Ltd)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\RunDLC.job => cmd c sc start Dell Help SupportWORKGROUP DESKTOP F9C7RJH

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{477d217a-aeff-428f-93ee-070a153c5d67}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{ef6a2156-c1a8-4d47-a710-ff535f61faac}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001 -> DefaultScope {5E3AA19E-3DCC-4208-A973-B757AB47CD6D} URL = 
SearchScopes: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001 -> {5E3AA19E-3DCC-4208-A973-B757AB47CD6D} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\ssv.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Gilberto\AppData\Local\Microsoft\Edge\User Data\Default [2020-07-20]
Edge HomePage: Default -> hxxps://www.google.com.mx/

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-04-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-03] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR Profile: C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default [2020-07-20]
CHR HomePage: Default -> hxxps://www.google.com.mx/
CHR StartupUrls: Default -> "hxxps://www.google.com.mx/"
CHR Extension: (Presentaciones) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-05]
CHR Extension: (Documentos) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-06-05]
CHR Extension: (Google Drive) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-06-05]
CHR Extension: (YouTube) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-06-05]
CHR Extension: (Hojas de cálculo) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-06-05]
CHR Extension: (Dark atmosphere) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfpikgkkfdoabncoileilaglepbpdhek [2019-06-09]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-28]
CHR Extension: (AdBlock: el mejor bloqueador de anuncios) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2020-07-12]
CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2020-07-15]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-13]
CHR Extension: (Gmail) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-05]
CHR Extension: (Chrome Media Router) - C:\Users\Gilberto\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-05-28]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3153872 2020-04-03] (philandro Software GmbH -> philandro Software GmbH)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [284720 2020-06-10] (Dell Inc -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [3455536 2020-06-10] (Dell Inc -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [294448 2020-06-10] (Dell Inc -> Dell Technologies Inc.)
R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7193.518\DSAPI.exe [965104 2020-07-15] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
R2 Dell Help & Support; C:\Program Files\Dell\Dell Help & Support\MDLCSvc.exe [77648 2016-12-22] (Dell Inc -> Dell Inc.)
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [293528 2018-10-20] (Dell Inc -> Dell Inc.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [36544 2020-04-17] (Dell Inc -> )
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6970968 2020-07-13] (Malwarebytes Inc -> Malwarebytes)
R2 PlexUpdateService; C:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [2148856 2020-02-24] (Plex, Inc. -> Plex, Inc.)
R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [65096 2020-04-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [65104 2020-04-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [269600 2020-02-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2361952 2020-04-10] (Rivet Networks LLC -> Rivet Networks)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182120 2019-09-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [33240 2020-07-06] (Dell Inc. -> Dell Inc.)
R2 TrueColorALS; C:\Program Files\TrueColor\TrueColorALS.exe [93072 2016-12-12] (Entertainment Experience LLC -> )
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-18] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-18] (Microsoft Corporation -> Microsoft Corporation)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [35208 2020-05-26] (Microsoft Windows Hardware Compatibility Publisher -> Dell Inc.)
S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [32568 2017-04-11] (Techporch Incorporated -> Dell Computer Corporation)
R3 DellRbtn; C:\WINDOWS\System32\drivers\DellRbtn.sys [22864 2016-10-27] (WDKTestCert Andy_Chen6,131219483243550933 -> OSR Open Systems Resources, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [135520 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [225432 2017-03-31] (McAfee, Inc. -> McAfee, Inc.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-07-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-07-20] (Malwarebytes Inc -> Malwarebytes)
R3 PCDSRVC{628864C0-331E8A33-06030000}_0; c:\program files\dell\supportassistagent\pcdr\supportassist\6.0.7193.518\pcdsrvc_x64.pkms [55024 2020-07-15] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [158552 2020-04-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166752 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43368 2019-09-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [46472 2019-03-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [333784 2019-03-18] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-18] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) ===================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-07-20 21:49 - 2020-07-20 21:52 - 000038416 _____ C:\Users\Gilberto\Desktop\Addition.txt
2020-07-20 21:47 - 2020-07-20 22:26 - 000023617 _____ C:\Users\Gilberto\Desktop\FRST.txt
2020-07-20 21:46 - 2020-07-20 22:26 - 000000000 ____D C:\FRST
2020-07-20 21:44 - 2020-07-20 21:44 - 002293760 _____ (Farbar) C:\Users\Gilberto\Desktop\FRST64.exe
2020-07-20 21:12 - 2020-07-15 16:17 - 000058520 _____ (Intel Corporation ) C:\WINDOWS\system32\Drivers\iqvw64e.sys
2020-07-20 21:05 - 2020-07-20 21:05 - 000000000 ____D C:\Users\Gil\AppData\Local\Mega Limited
2020-07-20 21:04 - 2020-07-20 21:04 - 000000000 ____D C:\Users\Gil\AppData\Local\conda
2020-07-20 21:02 - 2020-07-20 21:02 - 000000000 ____D C:\Users\Gil\AppData\Roaming\GlarySoft
2020-07-20 21:00 - 2020-07-20 21:00 - 000000000 ____D C:\Users\Gil\AppData\Local\D3DSCache
2020-07-20 20:58 - 2020-07-20 21:02 - 000250946 _____ C:\WINDOWS\ntbtlog.txt
2020-07-20 20:55 - 2020-07-20 20:55 - 000000000 ____D C:\Users\Gil\AppData\Roaming\Intel Corporation
2020-07-20 20:54 - 2020-07-20 20:54 - 000000000 ____D C:\Users\Gil\AppData\Roaming\AnyDesk
2020-07-20 20:53 - 2020-07-20 20:53 - 000000000 ____D C:\Users\Gil\AppData\Local\Publishers
2020-07-20 20:52 - 2020-07-20 21:09 - 000000000 __SHD C:\Users\Gil\IntelGraphicsProfiles
2020-07-20 20:52 - 2020-07-20 21:00 - 000002336 _____ C:\Users\Gil\Desktop\Google Chrome.lnk
2020-07-20 20:52 - 2020-07-20 20:53 - 000000000 ____D C:\Users\Gil\AppData\Local\Packages
2020-07-20 20:52 - 2020-07-20 20:53 - 000000000 ____D C:\Users\Gil\AppData\Local\Intel
2020-07-20 20:52 - 2020-07-20 20:52 - 000000000 ___RD C:\Users\Gil\3D Objects
2020-07-20 20:52 - 2020-07-20 20:52 - 000000000 ____D C:\Users\Gil\AppData\Roaming\Adobe
2020-07-20 20:52 - 2020-07-20 20:52 - 000000000 ____D C:\Users\Gil\AppData\Local\VirtualStore
2020-07-20 20:52 - 2020-07-20 20:52 - 000000000 ____D C:\Users\Gil\AppData\Local\Google
2020-07-20 20:52 - 2020-07-20 20:52 - 000000000 ____D C:\Users\Gil\AppData\Local\Dell
2020-07-20 20:51 - 2020-07-20 20:52 - 000000000 ____D C:\Users\Gil\AppData\Local\ConnectedDevicesPlatform
2020-07-20 20:51 - 2020-07-20 20:52 - 000000000 ____D C:\Users\Gil
2020-07-20 20:51 - 2020-07-20 20:51 - 000000020 ___SH C:\Users\Gil\ntuser.ini
2020-07-20 20:51 - 2019-03-18 23:46 - 000001105 _____ C:\Users\Gil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-07-20 20:46 - 2020-07-20 20:46 - 000000000 ____D C:\WINDOWS\system32\Tasks\S-1-5-21-1505549421-2506334975-1048970357-1001
2020-07-20 20:45 - 2020-07-20 20:45 - 000000000 _____ C:\WINDOWS\invcol.tmp
2020-07-20 20:12 - 2020-07-20 20:12 - 000010139 _____ C:\Users\Gilberto\Desktop\ZHPCleaner (R).html
2020-07-20 20:12 - 2020-07-20 20:12 - 000003337 _____ C:\Users\Gilberto\Desktop\ZHPCleaner (R).txt
2020-07-20 20:05 - 2020-07-20 20:05 - 000009588 _____ C:\Users\Gilberto\Desktop\ZHPCleaner (S).html
2020-07-20 20:05 - 2020-07-20 20:05 - 000002985 _____ C:\Users\Gilberto\Desktop\ZHPCleaner (S).txt
2020-07-20 19:56 - 2020-07-20 20:12 - 000000000 ____D C:\Users\Gilberto\AppData\Roaming\ZHP
2020-07-20 19:56 - 2020-07-20 19:56 - 000000927 _____ C:\Users\Gilberto\Desktop\ZHPCleaner.lnk
2020-07-20 19:56 - 2020-07-20 19:56 - 000000000 ____D C:\Users\Gilberto\AppData\Local\ZHP
2020-07-20 19:44 - 2020-07-20 19:44 - 000000000 ____D C:\Users\Gilberto\AppData\Roaming\Skype
2020-07-20 19:39 - 2020-07-20 19:39 - 000003182 _____ C:\WINDOWS\system32\Tasks\AdwCleaner_onReboot
2020-07-20 19:33 - 2020-07-20 19:38 - 000000000 ____D C:\AdwCleaner
2020-07-20 18:15 - 2020-07-20 18:15 - 000001929 _____ C:\Users\Gilberto\Desktop\malware.txt
2020-07-19 11:05 - 2020-07-19 11:05 - 003310976 _____ (Nicolas Coolman) C:\Users\Gilberto\Downloads\ZHPCleaner.exe
2020-07-19 11:03 - 2020-07-19 11:05 - 008420016 _____ (Malwarebytes) C:\Users\Gilberto\Downloads\adwcleaner_8.0.6.exe
2020-07-19 01:09 - 2020-07-20 20:59 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2020-07-19 00:33 - 2020-07-19 00:33 - 000027855 _____ C:\Users\Gilberto\Downloads\8142E661-67AA-48F3-9C3E-97F5599B1767.pdf
2020-07-19 00:32 - 2020-07-19 00:32 - 000027885 _____ C:\Users\Gilberto\Downloads\BF144A35-4AAE-4CED-9E26-53BB7661DD9C.pdf
2020-07-19 00:32 - 2020-07-19 00:32 - 000027834 _____ C:\Users\Gilberto\Downloads\97A1DCF2-7C91-4B87-9EB1-D87902C79992.pdf
2020-07-19 00:32 - 2020-07-19 00:32 - 000027675 _____ C:\Users\Gilberto\Downloads\6F6184DC-8B04-4D3F-B25F-0622C125726D.pdf
2020-07-19 00:31 - 2020-07-19 00:31 - 000027929 _____ C:\Users\Gilberto\Downloads\CC26E470-6C90-4428-8B38-803C54141AC9.pdf
2020-07-18 18:10 - 2020-07-18 18:10 - 025902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 022641664 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 019851776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 018031104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 008015872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 007823912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 007269376 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 007012864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 006523856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 006292992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 005765648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 005099384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 004129424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 002799104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2020-07-18 18:10 - 2020-07-18 18:10 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001952880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001665728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001581568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Perception.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001495040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001477632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001420328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001397568 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 001346048 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001312256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001307136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\werconcpl.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001265152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001195008 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdengin2.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001125376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CBDHSvc.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 001077048 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000995840 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000967680 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebcamUi.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000945176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Sensors.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000875008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebcamUi.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000783488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000689664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000685384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000673448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000653824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000593408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000538664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000533504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000521728 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinBioDataModel.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\werui.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\MixedReality.Broker.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Picker.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnphost.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000453944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFault.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000442096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.MediaControl.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\WalletService.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000430592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werui.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000411136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000406992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsmf.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000405944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Faultrep.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000388096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.LowLevel.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000387584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000380224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000352256 _____ (Microsoft Corporation) C:\WINDOWS\system32\APHostService.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000345560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsmf.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000338944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Picker.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnphost.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2020-07-18 18:10 - 2020-07-18 18:10 - 000293888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CXHProvisioningServer.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000292864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Diagnostics.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000275968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Lights.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000272384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PickerPlatform.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000268552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ConsoleLogon.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000240640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialclient.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000231424 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000224768 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWWIN.EXE
2020-07-18 18:10 - 2020-07-18 18:10 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2020-07-18 18:10 - 2020-07-18 18:10 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagSvc.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000199496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wermgr.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000196096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000193600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\weretw.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000190056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.HumanInterfaceDevice.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000186880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWWIN.EXE
2020-07-18 18:10 - 2020-07-18 18:10 - 000186368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wdigest.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Clipboard.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000176952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Management.Workplace.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dialclient.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWSDAHost.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000151552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWSD.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000150336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WerFaultSecure.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000143360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowService.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWSD.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wercplsupport.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWSDAHost.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SerialCommunication.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000094208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EaseOfAccessDialog.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000089328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000079360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sethc.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiverExt.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\udhisapi.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\keyiso.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\iemigplugin.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iemigplugin.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Print.Workflow.Source.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\udhisapi.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiverExt.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\upnpcont.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000038912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\werdiagcontroller.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\upnpcont.exe
2020-07-18 18:10 - 2020-07-18 18:10 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintWorkflowProxy.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6r.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin
2020-07-18 18:10 - 2020-07-18 18:10 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin
2020-07-18 18:09 - 2020-07-18 18:10 - 001991592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 014820352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 009931576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 007917408 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 007850288 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 007268640 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 006437376 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 006169088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 006089512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 005946368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 005111808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 004565264 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 004014592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft.Bluetooth.Service.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 003974368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 003800576 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 003748352 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 003743048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2020-07-18 18:09 - 2020-07-18 18:09 - 003084800 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002768984 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002737664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002716672 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2020-07-18 18:09 - 2020-07-18 18:09 - 002576896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002552120 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002505496 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002448712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002357248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Perception.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002285056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.3D.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002264064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002237096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002161664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.PointOfService.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002087168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 002074112 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001946144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001918464 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001885184 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001877504 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFramework.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001827328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001821696 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreShell.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001787392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Globalization.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001743680 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll

2020-07-18 18:09 - 2020-07-18 18:09 - 001737728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001658368 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001655472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001654304 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001604608 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001550336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.Printing.3D.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001540608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001512960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdprt.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001500160 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001486848 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 001484384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001463808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.PointOfService.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001392128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.FaceAnalysis.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001374208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001371136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001357824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Globalization.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001337856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001306944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ContentDeliveryManager.Utilities.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001290192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Sensors.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001284608 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001271296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001247232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001223168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.FaceAnalysis.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001183744 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001159168 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001151304 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputHost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001121792 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001100800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001086776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Services.TargetedContent.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001068544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001055232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.AccountsControl.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001048992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001028336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001014784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001008960 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 001007616 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000958608 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppContracts.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000950272 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000949760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Ocr.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000919880 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000917504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.OnlineId.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000913408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MiracastReceiver.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000904192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnostics.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000895600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MrmCoreR.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000892928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000889416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000882184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000882176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ShareHost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000867840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000848384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000844096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000827904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Import.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000822200 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000821232 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.applicationmodel.datatransfer.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000809984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Input.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000797448 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000793320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputHost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000782848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000779080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Services.TargetedContent.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000778872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppContracts.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000750592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActivationManager.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000750080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000742712 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000737792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Launcher.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000733184 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000717824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.AccountsControl.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000695208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockController.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000687104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Ocr.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000684864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicesFlowBroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000639488 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000630784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.AllJoyn.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000628416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000628024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.LowLevel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000614912 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofmsvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000608256 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SmartCards.Phone.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000605896 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000600064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActivationManager.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000596992 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000594992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000582056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.applicationmodel.datatransfer.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Import.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000565248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Input.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-07-18 18:09 - 2020-07-18 18:09 - 000549048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.MediaControl.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\usosvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000542288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000540672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000534016 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000526848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000524784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000522240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.System.Launcher.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000518656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000518464 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFault.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000513024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Activities.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Cortana.Desktop.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000501760 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\RTMediaFrame.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000478296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudDomainJoinDataModelServer.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000475136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Geolocation.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000467960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Faultrep.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000467456 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000461112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000442368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.AllJoyn.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountExtension.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.NetworkOperators.ESim.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Usb.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000412672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.SmartCards.Phone.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000406992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Lights.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000395264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Gaming.Preview.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000392504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000382976 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.System.Diagnostics.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000374272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PickerPlatform.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Geolocation.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\QuickActionsDataModel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000358912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.WiFiDirect.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnclient.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000354816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RTMediaFrame.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000340328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000335360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000334336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Cortana.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000317440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Midi.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000311608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostBroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000311440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\TDLMigration.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnclient.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000290304 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultcli.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000287744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Gaming.Preview.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000283648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.NetworkOperators.ESim.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000281600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.HumanInterfaceDevice.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Usb.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000274432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Identity.Provider.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000266552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemSettings.DataModel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2020-07-18 18:09 - 2020-07-18 18:09 - 000260288 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\PasswordEnrollmentManager.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000247864 _____ (Microsoft Corporation) C:\WINDOWS\system32\weretw.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000242688 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000239928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Workplace.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.Desktop.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\psmsrv.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wersvc.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\netprofm.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000220992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wermgr.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\MtcModel.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\PeopleBand.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000210944 _____ (Microsoft Corporation) C:\WINDOWS\system32\ErrorDetails.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000206336 _____ (Microsoft Corporation) C:\WINDOWS\system32\useractivitybroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000188928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Identity.Provider.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Energy.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000179512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2020-07-18 18:09 - 2020-07-18 18:09 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWorkflowService.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppExtension.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.CapturePicker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000165840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WerFaultSecure.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ErrorDetails.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000159744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Core.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000152064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\useractivitybroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.SerialCommunication.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Client.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000146232 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyServer.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000144384 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppointmentActivation.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Energy.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayEnhancementManagement.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppExtension.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000132408 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000131584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairingExperienceMEM.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredDialogBroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\CameraCaptureUI.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CaptureService.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000127064 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\EaseOfAccessDialog.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\sethc.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Family.Authentication.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000100352 _____ (Microsoft Corporation) C:\WINDOWS\system32\DiagnosticInvoker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000094720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CameraCaptureUI.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000093184 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000092672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsqmcons.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000091648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\keyiso.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000089600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000086272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkInternalPS.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Print.Workflow.Source.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000075776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DiagnosticInvoker.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000070248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResourcePolicyClient.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Graphics.Display.DisplayColorManagement.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemUWPLauncher.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstUI.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000052152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ResourcePolicyClient.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\npmproxy.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000044544 _____ (Microsoft Corporation) C:\WINDOWS\system32\werdiagcontroller.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000040248 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationFrameworkPS.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIMgrBroker.exe
2020-07-18 18:09 - 2020-07-18 18:09 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmproxy.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintWorkflowProxy.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SystemEventsBrokerClient.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlmsprep.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.Printing.Workflow.Native.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIManagerBrokerps.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2020-07-18 18:09 - 2020-07-18 18:09 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6r.dll
2020-07-18 18:08 - 2020-07-18 18:09 - 007297536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 017792512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 006233080 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 004625192 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2020-07-18 18:08 - 2020-07-18 18:08 - 003712000 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 002060288 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdprt.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001745728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001723392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001640448 _____ (Microsoft Corporation) C:\WINDOWS\system32\TaskFlowDataEngine.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001385696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001335296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MiracastReceiver.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001149712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe
2020-07-18 18:08 - 2020-07-18 18:08 - 001081344 _____ (Microsoft Corporation) C:\WINDOWS\system32\ShareHost.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 001059840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000922624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntime.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000716288 _____ (Microsoft Corporation) C:\WINDOWS\system32\agentactivationruntimewindows.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000656696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2020-07-18 18:08 - 2020-07-18 18:08 - 000502784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.WiFiDirect.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000458240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.ConversationalAgent.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000432128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Midi.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000411640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000399672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DataModel.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000381152 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManager.exe
2020-07-18 18:08 - 2020-07-18 18:08 - 000327168 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.internal.shellcommon.shareexperience.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000316928 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.AppDefaults.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000265728 _____ (Microsoft Corporation) C:\WINDOWS\system32\netman.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerServer.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000217600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Core.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000204608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys
2020-07-18 18:08 - 2020-07-18 18:08 - 000200704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Internal.Input.ExpressiveInput.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\AarSvc.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\splwow64.exe
2020-07-18 18:08 - 2020-07-18 18:08 - 000132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Storage.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000118784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Background.SystemEventsBroker.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000110040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Credentials.UI.CredentialPicker.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemUWPLauncher.exe
2020-07-18 18:08 - 2020-07-18 18:08 - 000076952 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredentialEnrollmentManagerForUser.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemEventsBrokerClient.dll
2020-07-18 18:08 - 2020-07-18 18:08 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\CSystemEventsBrokerClient.dll
2020-07-18 17:41 - 2020-07-18 17:41 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2020-07-18 17:41 - 2020-07-18 17:41 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2020-07-16 21:50 - 2020-07-16 21:50 - 000000000 ____D C:\Users\Gilberto\AppData\Local\CrashDumps
2020-07-13 23:09 - 2020-07-13 23:09 - 000002035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-07-13 23:09 - 2020-07-13 23:09 - 000002023 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-07-13 23:09 - 2020-07-13 23:09 - 000000000 ____D C:\Users\Gilberto\AppData\Local\mbam
2020-07-13 23:08 - 2020-07-20 21:08 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-07-13 23:08 - 2020-07-13 23:08 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-07-13 23:08 - 2020-07-13 23:07 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-07-13 23:08 - 2020-07-13 23:07 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-07-13 23:07 - 2020-07-13 23:07 - 002012560 _____ (Malwarebytes) C:\Users\Gilberto\Downloads\MBSetup.exe
2020-07-13 23:07 - 2020-07-13 23:07 - 000000000 ____D C:\Program Files\Malwarebytes
2020-07-13 23:05 - 2020-07-13 23:06 - 000002000 _____ C:\Users\Gilberto\Desktop\Rkill.txt
2020-07-13 23:05 - 2020-07-13 23:05 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Gilberto\Downloads\iExplore.exe
2020-07-13 23:05 - 2020-07-13 23:05 - 000988112 _____ (Bleeping Computer, LLC) C:\Users\Gilberto\Downloads\iExplore64.exe
2020-07-13 22:29 - 2020-07-13 22:29 - 000000000 ___HD C:\$WinREAgent
2020-07-13 22:09 - 2020-07-13 22:33 - 216006656 _____ C:\Users\Gilberto\Documents\War.of.the.Worlds.2005.ITA.ENG.2160p.UHD.BluRay.x265.10bit.HDR-MeM.mkv
2020-07-13 22:08 - 2020-07-13 22:33 - 2365587456 _____ C:\Users\Gilberto\Documents\Avatar.Extended.Version.(2009).(2160p).(Fantascienza).().mkv
2020-07-13 22:04 - 2020-07-13 22:33 - 1986691072 _____ C:\Users\Gilberto\Documents\Avatar (2009) Extended  [2160p x265 10bit FS80 Joy].mkv
2020-07-12 13:39 - 2020-07-12 13:56 - 000000000 ____D C:\Users\Gilberto\Documents\Independence Day.1996.EXTENDED.4K.HDR.2160p.BDRip Ita Eng x265-NAHOM
2020-07-12 12:44 - 2020-07-13 22:33 - 1702887424 _____ C:\Users\Gilberto\Documents\The.Amazing.Catfish.[Los.Insolitos.Peces.Gato].2013.1080p.BRRip.x264.AC3.HORiZON-ArtSubs.mkv
2020-07-12 12:21 - 2020-07-12 12:21 - 000000916 _____ C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2020-07-12 12:21 - 2020-07-12 12:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2020-07-12 12:21 - 2020-07-12 12:21 - 000000000 ____D C:\Program Files\CPUID
2020-07-12 12:10 - 2020-07-12 12:10 - 001899064 _____ (CPUID, Inc. ) C:\Users\Gilberto\Downloads\cpu-z_1.91-en.exe
2020-07-12 11:42 - 2020-07-12 11:42 - 000000000 ____D C:\Users\Gilberto\Documents\Independence Day (1996)
2020-07-12 11:26 - 2020-07-12 11:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\MEGA
2020-06-29 21:05 - 2020-06-29 21:05 - 002159160 _____ C:\Users\Gilberto\Documents\ACTA CONSTITUTIVA MAPPA.pdf
2020-06-22 21:40 - 2020-06-22 21:40 - 000000000 ____D C:\Users\Gilberto\Documents\Total.Recall.1990.Ultimate.Rekall.Edition.Bluray.1080p.DTS-HD.x264-Grym@BTNET
2020-06-22 21:38 - 2020-06-22 21:38 - 002675197 ____H C:\Users\Gilberto\Documents\.d3de99b6e68602a8d705b8b9fa27f1fd2436a4dd.parts
2020-06-22 21:36 - 2020-06-22 21:52 - 000000000 ____D C:\Users\Gilberto\Documents\Total Recall (1990) [1080p]
2020-06-22 21:26 - 2020-07-19 11:53 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-06-22 21:26 - 2020-07-19 11:53 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2020-06-22 21:26 - 2020-07-15 16:04 - 000003650 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-06-22 21:26 - 2020-07-15 16:04 - 000003526 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-06-22 21:26 - 2020-06-05 16:03 - 000835480 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-06-22 21:26 - 2020-06-05 16:03 - 000179608 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-06-20 19:02 - 2020-06-20 19:02 - 001716758 _____ C:\Users\Gilberto\Downloads\Estado de Cuenta Cuatrimestral_20200524_071431_4638350.pdf
2020-06-20 18:38 - 2020-06-20 18:38 - 000001115 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Waves MaxxAudioPro.lnk
2020-06-20 18:38 - 2020-06-20 18:38 - 000000000 ____D C:\Program Files\Waves
2020-06-20 18:36 - 2020-02-17 23:36 - 024942088 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioCapture64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 024161688 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRenderAVX64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 024063104 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRender64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 003793640 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioMeters64.exe
2020-06-20 18:36 - 2020-02-17 23:36 - 003676960 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2020-06-20 18:36 - 2020-02-17 23:36 - 003159672 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 002930048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 001353216 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 000692056 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 000575080 _____ (Intel Corporation) C:\WINDOWS\system32\tbb_waves.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 000343600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 000240024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTHDASIO64.dll
2020-06-20 18:36 - 2020-02-17 23:36 - 000200600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RTHDASIO.dll
2020-06-20 18:36 - 2020-02-17 23:22 - 038528612 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2020-06-20 18:12 - 2020-06-20 18:12 - 011608064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 009712640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 007760384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 005909504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 004858880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 004610560 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 004470272 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 003822592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 003525608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 003515392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 003398656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 003365376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-06-20 18:12 - 2020-06-20 18:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-06-20 18:12 - 2020-06-20 18:12 - 002281472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 002230240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 002204160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 002184504 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001803776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 001704448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001637888 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001539072 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbengine.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 001467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001410048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 001344512 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMNetMgr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001319936 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001272160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001138688 _____ (Microsoft Corporation) C:\WINDOWS\system32\nettrace.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001112576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMNetMgr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001099608 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001066496 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdosys.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 001012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000992256 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2fs.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tapi3.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000971264 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsregcmd.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000920064 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000868352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2fs.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000850944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tapi3.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000843776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdosys.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000776192 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshwfp.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000747832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000740352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000723968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000705536 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000688640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000674304 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiaaut.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000651264 _____ (Microsoft Corporation) C:\WINDOWS\system32\FXSCOMEX.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000609280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshwfp.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\psisdecd.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000588800 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000575488 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\system32\wvc.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000574464 _____ (Microsoft Corporation) C:\WINDOWS\system32\msTextPrediction.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000571904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wiaaut.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000567808 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2020-06-20 18:12 - 2020-06-20 18:12 - 000562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000555520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000549376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000513536 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi2.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FXSCOMEX.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000500224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2020-06-20 18:12 - 2020-06-20 18:12 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\azroles.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000484864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psisdecd.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000478208 _____ (Microsoft® Windows® Operating System) C:\WINDOWS\SysWOW64\wvc.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000477184 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedRealitySvc.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iassdo.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\system32\termmgr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000423424 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000422400 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswmdm.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000420352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi2.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMM.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000398336 _____ (Microsoft Corporation) C:\WINDOWS\system32\LocationApi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000361472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\termmgr.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iassdo.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000349184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswmdm.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000342528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LocationApi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000299520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WlanMM.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000283136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000267776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000260096 _____ (Microsoft Corporation) C:\WINDOWS\system32\wavemsp.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000259584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2020-06-20 18:12 - 2020-06-20 18:12 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\FileHistory.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\RdpRelayTransport.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wavemsp.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000219136 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmpdxm.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\cic.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2020-06-20 18:12 - 2020-06-20 18:12 - 000204008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBroker.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmidx.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmpdxm.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cic.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000146944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmidx.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000137728 _____ (Microsoft Corporation) C:\WINDOWS\system32\imapi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrecst.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkspbrokerAx.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\imapi.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000099712 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkspbrokerAx.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000098816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmjpegdec.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000093448 _____ (Microsoft Corporation) C:\WINDOWS\system32\devenum.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2020-06-20 18:12 - 2020-06-20 18:12 - 000083600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\devenum.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmjpegdec.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2020-06-20 18:12 - 2020-06-20 18:12 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasads.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeUISrv.exe
2020-06-20 18:12 - 2020-06-20 18:12 - 000041864 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityCenterBrokerPS.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000028368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SecurityCenterBrokerPS.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll
2020-06-20 18:12 - 2020-06-20 18:12 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 005195432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 005004344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 003368104 _____ (Microsoft Corporation) C:\WINDOWS\system32\combase.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 002831872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnroll.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 002583496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\combase.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001683968 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 001393952 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinTypes.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001348096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001314304 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagperf.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001261568 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001260744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001250816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpsharercom.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001215488 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdclt.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001055184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 001003832 _____ (Microsoft Corporation) C:\WINDOWS\system32\DismApi.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000932256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000894024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinTypes.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000892048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000814080 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000777216 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000760296 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000740664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DismApi.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000703488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000696832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidcli.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000692224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000690176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkObjCore.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\configmanager2.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000632320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000619008 _____ (Microsoft Corporation) C:\WINDOWS\system32\azroles.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000572200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000564496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2020-06-20 18:11 - 2020-06-20 18:11 - 000557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\netshell.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000529920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000508720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000508216 _____ (Microsoft Corporation) C:\WINDOWS\system32\spwizeng.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlidcli.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.FileExplorer.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000486912 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000470016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000457216 _____ (Microsoft Corporation) C:\WINDOWS\system32\swprv.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000451864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000440832 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprt.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000435200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wincorlib.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000407864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spwizeng.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000396800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsApi.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000391680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netshell.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000384512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000384000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000357176 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpviewerax.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsApi.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000309248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2020-06-20 18:11 - 2020-06-20 18:11 - 000307712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wincorlib.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\RASMM.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000280376 _____ (Microsoft Corporation) C:\WINDOWS\system32\Dism.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000271360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpviewerax.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000269312 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkEd.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkEd.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000228864 _____ (Microsoft Corporation) C:\WINDOWS\system32\psr.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000223544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Dism.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\psr.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrecst.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000183808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netprofm.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000165888 _____ (Microsoft Corporation) C:\WINDOWS\system32\msaatext.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000165296 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcmnutils.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000165192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NPSM.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdrsvc.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000130112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dmcmnutils.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000129600 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpapi.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkStatus.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\sdshext.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAMM.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000121856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msaatext.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000115712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleprn.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000108856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000090952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WwanRadioManager.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000081408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000080384 _____ (Microsoft Corporation) C:\WINDOWS\system32\RpcEpMap.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000077824 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasads.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtutils.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000063288 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthHost.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtutils.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MdmDiagnosticsTool.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CertEnrollCtrl.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atlthunk.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2020-06-20 18:11 - 2020-06-20 18:11 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll
2020-06-20 18:11 - 2020-06-20 18:11 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 006066808 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 005283264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 003581240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2020-06-20 18:10 - 2020-06-20 18:10 - 003187200 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnroll.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 002656256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 002289664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001751040 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001583104 _____ (Microsoft Corporation) C:\WINDOWS\system32\qmgr.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001466368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpsharercom.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001274128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 001073664 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000931840 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkObjCore.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2020-06-20 18:10 - 2020-06-20 18:10 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000784896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000765440 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2020-06-20 18:10 - 2020-06-20 18:10 - 000716320 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000648192 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpsvc.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000553984 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000548984 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000531768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2020-06-20 18:10 - 2020-06-20 18:10 - 000472064 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000441152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2020-06-20 18:10 - 2020-06-20 18:10 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000425056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000312832 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000294400 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000291328 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceDirectoryClient.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000224256 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtp.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000209216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\NPSM.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000201528 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_SIUF.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000180224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3mm.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpdMtpUS.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleprn.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000128312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2020-06-20 18:10 - 2020-06-20 18:10 - 000104248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanRadioManager.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000067072 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxGipRadioManager.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\CertEnrollCtrl.exe
2020-06-20 18:10 - 2020-06-20 18:10 - 000053760 _____ (Microsoft Corporation) C:\WINDOWS\system32\NfcRadioMedia.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiConfigSP.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\atlthunk.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000016896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanhlp.dll
2020-06-20 18:10 - 2020-06-20 18:10 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-06-20 16:12 - 2020-06-20 16:12 - 000321516 _____ C:\Users\Gilberto\Downloads\reporteOpinion32DContribuyente.pdf

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-07-20 21:16 - 2019-06-05 23:00 - 000000000 ____D C:\Users\Gilberto\AppData\Local\Packages
2020-07-20 21:16 - 2019-03-18 23:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-07-20 21:16 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-07-20 21:13 - 2019-06-05 23:00 - 000000000 __SHD C:\Users\Gilberto\IntelGraphicsProfiles
2020-07-20 21:12 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\Registration
2020-07-20 21:09 - 2019-03-18 23:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-07-20 21:08 - 2019-10-16 20:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-07-20 21:07 - 2019-03-18 23:37 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-07-20 21:07 - 2017-08-02 17:11 - 000000000 ____D C:\Program Files\mcafee
2020-07-20 21:02 - 2020-04-06 17:17 - 000000000 ____D C:\Program Files (x86)\Glarysoft
2020-07-20 20:52 - 2019-03-18 23:52 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2020-07-20 20:52 - 2017-08-02 17:14 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-07-20 20:44 - 2019-03-18 23:50 - 000000000 ____D C:\WINDOWS\INF
2020-07-20 20:15 - 2019-09-06 18:20 - 000000000 ____D C:\Users\Gilberto\AppData\Local\D3DSCache
2020-07-20 20:12 - 2019-06-09 13:15 - 000000000 ____D C:\ProgramData\Lavasoft
2020-07-20 20:12 - 2019-06-09 13:15 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2020-07-20 19:47 - 2017-08-02 17:02 - 000000000 ____D C:\ProgramData\Dell
2020-07-20 19:42 - 2017-08-02 17:11 - 000000000 ____D C:\Program Files (x86)\McAfee
2020-07-20 19:39 - 2017-08-02 16:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dell
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\Users\Gilberto\AppData\Roaming\Lavasoft
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\Users\Gilberto\AppData\Local\Lavasoft
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-07-20 19:29 - 2019-10-16 19:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-07-19 11:02 - 2019-10-16 20:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2020-07-19 11:02 - 2019-03-18 23:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-07-19 11:02 - 2019-03-18 23:37 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2020-07-19 02:37 - 2020-05-30 13:06 - 000000000 ____D C:\Users\Gilberto\AppData\Local\ElevatedDiagnostics
2020-07-18 23:10 - 2019-09-06 17:37 - 000000000 ___RD C:\Users\Gilberto\3D Objects
2020-07-18 22:01 - 2019-10-16 20:13 - 001769446 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-07-18 22:01 - 2019-03-19 06:59 - 000788100 _____ C:\WINDOWS\system32\perfh00A.dat
2020-07-18 22:01 - 2019-03-19 06:59 - 000153974 _____ C:\WINDOWS\system32\perfc00A.dat
2020-07-18 21:54 - 2019-10-16 19:33 - 000440296 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-07-18 21:50 - 2019-10-16 19:46 - 000000000 ____D C:\Users\Gilberto
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\es-MX
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-07-18 21:48 - 2019-03-18 23:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-07-18 18:17 - 2019-03-18 23:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-07-18 15:28 - 2017-08-02 16:52 - 000000000 ____D C:\ProgramData\PCDr
2020-07-16 22:46 - 2019-09-03 23:24 - 000000000 ____D C:\Users\Gilberto\Desktop\YURIMI
2020-07-14 22:32 - 2019-06-09 21:08 - 000000000 ____D C:\Users\Gilberto\Documents\Movies
2020-07-13 23:18 - 2020-05-26 20:51 - 000000000 ____D C:\Program Files\CCleaner
2020-07-13 22:33 - 2019-07-14 14:25 - 000000000 ____D C:\Users\Gilberto\AppData\Roaming\qBittorrent
2020-07-13 22:17 - 2020-05-26 20:51 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-07-12 22:25 - 2019-09-20 20:47 - 000000000 ____D C:\Users\Gilberto\AppData\Local\PlaceholderTileLogoFolder
2020-07-12 12:20 - 2019-06-09 18:14 - 000000000 ____D C:\ProgramData\Packages
2020-07-12 12:20 - 2019-06-05 23:01 - 000000000 ____D C:\Users\Gilberto\AppData\Local\Publishers
2020-07-12 11:33 - 2019-10-16 20:26 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-07-12 11:32 - 2019-07-11 20:41 - 000002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-07-12 11:24 - 2019-06-09 22:05 - 000000000 ____D C:\Users\Gilberto\AppData\Local\Plex Media Server
2020-07-02 20:19 - 2020-04-03 17:39 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2020-06-29 20:42 - 2020-02-11 22:29 - 000002459 _____ C:\Users\Gilberto\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-06-29 20:42 - 2019-10-16 20:26 - 000003386 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1505549421-2506334975-1048970357-1001
2020-06-29 20:42 - 2019-06-05 23:04 - 000000000 ___RD C:\Users\Gilberto\OneDrive
2020-06-23 12:14 - 2019-10-13 14:00 - 000000000 ____D C:\Users\Gilberto\Documents\USB
2020-06-22 21:49 - 2019-10-20 15:07 - 000000000 ____D C:\Users\Gilberto\Desktop\Juegos Wii U
2020-06-22 21:42 - 2019-06-05 23:19 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-06-20 22:34 - 2019-03-19 07:02 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2020-06-20 22:34 - 2019-03-19 07:02 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ___SD C:\WINDOWS\system32\F12
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\Com
2020-06-20 22:34 - 2019-03-18 23:52 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2020-06-20 18:39 - 2017-08-02 16:58 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2020-06-20 18:39 - 2017-08-02 16:58 - 000000000 ____D C:\WINDOWS\system32\RTCOM
2020-06-20 18:10 - 2019-10-16 19:40 - 002876416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

==================== Archivos en la raíz de algunos directorios ========

2020-03-14 23:22 - 2020-03-14 23:22 - 000007606 _____ () C:\Users\Gilberto\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================
Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 19-07-2020
Ejecutado por Gilberto (20-07-2020 22:27:14)
Ejecutado desde C:\Users\Gilberto\Desktop
Windows 10 Home Single Language Versión 1903 18362.959 (X64) (2019-10-17 01:27:32)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-1505549421-2506334975-1048970357-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1505549421-2506334975-1048970357-503 - Limited - Disabled)
Gil (S-1-5-21-1505549421-2506334975-1048970357-1002 - Administrator - Enabled) => C:\Users\Gil
Gilberto (S-1-5-21-1505549421-2506334975-1048970357-1001 - Administrator - Enabled) => C:\Users\Gilberto
Invitado (S-1-5-21-1505549421-2506334975-1048970357-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1505549421-2506334975-1048970357-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 20.009.20074 - Adobe Systems Incorporated)
Adobe Lightroom Classic CC (HKLM-x32\...\LTRM_8_2_1) (Version: 8.2.1 - Adobe Systems Incorporated)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 5.4.2 - philandro Software GmbH)
Atom (HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\atom) (Version: 1.38.2 - GitHub Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.67 - Piriform)
CPUID CPU-Z 1.91 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.91 - CPUID, Inc.)
Dell Digital Delivery (HKLM-x32\...\{4B38FF9D-7308-411D-93BF-CCF259B476ED}) (Version: 3.5.2013.0 - Dell Products, LP)
Dell SupportAssist (HKLM\...\{57CBE96A-3AA5-4421-A87C-6C6C3B6C5ECA}) (Version: 3.6.0.97 - Dell Inc.)
Dell SupportAssist Remediation (HKLM-x32\...\{48253a97-70d4-4166-9a2b-80b3bb2fcc75}) (Version: 4.1.0.6828 - Dell Inc.)
Dell Update - SupportAssist Update Plugin (HKLM-x32\...\{1dbe752f-b00e-4567-9276-141812b20d28}) (Version: 4.0.1.5857 - Dell Inc.)
DSC/AA Factory Installer (HKLM\...\{F7A70D00-F283-45C8-B163-49EC365D7E27}) (Version: 1.3.6855.212 - PC-Doctor, Inc.) Hidden
Eines de correcció del Microsoft Office 2016: català (HKLM\...\{90160000-001F-0403-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Ferramentas de verificación de Microsoft Office 2016 - Galego (HKLM\...\{90160000-001F-0456-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 83.0.4103.116 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11000.2996 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4799 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.0.1020 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Java 8 Update 241 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180241F0}) (Version: 8.0.2410.7 - Oracle Corporation)
Malwarebytes version 4.1.2.73 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.2.73 - Malwarebytes)
Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.12253.1 - Waves Audio Ltd.) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 84.0.522.40 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.133.5 - )
Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\OneDriveSetup.exe) (Version: 20.084.0426.0007 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation)
Overcooked 2 MULTi10 - ElAmigos versión 18.04.2019 (HKLM-x32\...\{37217CDE-B25E-4371-BC16-9AF1A369E395}_is1) (Version: 18.04.2019 - Team17)
Plex Media Server (HKLM-x32\...\{23062b36-eec3-43c5-9437-987990d2b300}) (Version: 1.18.7.2457 - Plex, Inc.)
Plex Media Server (HKLM-x32\...\{7E47A632-E6DD-4853-87F6-F878B731EF9E}) (Version: 1.18.2457 - Plex, Inc.) Hidden
Python 3.7.0 (Miniconda3 4.5.11 64-bit) (HKLM\...\Python 3.7.0 (Miniconda3 4.5.11 64-bit)) (Version: 4.5.11 - Anaconda, Inc.)
qBittorrent 4.2.1 (HKLM-x32\...\qBittorrent) (Version: 4.2.1 - The qBittorrent project)
Qualcomm 11ac Wireless LAN&Bluetooth Installer (HKLM-x32\...\{E7086B15-806E-4519-A876-DBA9FDDE9A13}) (Version: 11.0.0.10454 - Qualcomm)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8895.1 - Realtek Semiconductor Corp.)
Realtek PC Camera (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 10.0.14393.11242 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (HKLM\...\{90160000-001F-0416-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
SmartByte Drivers and Services (HKLM\...\{1E9AE03E-28AC-4FE3-A66B-F3147A47578B}) (Version: 3.0.863 - Rivet Networks)
Software para dispositivos de chipset Intel® (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
StarCraft (HKLM-x32\...\StarCraft) (Version:  - Blizzard Entertainment)
Stopping Plex (HKLM-x32\...\{0FBDB583-4DF5-416A-B787-BD273CA52776}) (Version: 1.18.2457 - Plex, Inc.) Hidden
Streets of Rage 4 MULTi11 - ElAmigos versión 1.0 (HKLM-x32\...\{6EA8DDCE-D4B1-4B34-848D-355B73518385}_is1) (Version: 1.0 - Dotemu)
True Color (HKLM\...\{843D1B75-7A4E-4C8C-8348-BDF6C6EC3333}) (Version: 1.0.1.1 - Entertainment Experience LLC) Hidden
True Color (HKLM-x32\...\{c38d939e-31d4-44fa-a07a-d28915046b7d}) (Version: 7.9.0.0 - Entertainment Experience)
True Color XML Tables (HKLM\...\{EAE8B515-AC0E-46A8-AA41-CAD18E4094CD}) (Version: 7.10.0.0 - Entertainment Experience LLC) Hidden
TrueColorXMLTables (HKLM-x32\...\{bf377b78-c440-4ce9-a962-2fde04e6d4cd}) (Version: 7.10.0.0 - Entertainment Experience)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{2E8B8BDD-03DF-4C1C-8C99-E6A4BCBF43CE}) (Version: 2.51.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{F49D6A65-1AB6-4728-9FDA-DB5BAB631CF6}) (Version: 1.23.0.0 - Microsoft Corporation) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7 - VideoLAN)
Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
Xpadder version 5.7 (HKLM-x32\...\{0DCE54A9-7256-4132-9D4E-1A64AE35E9B1}_is1) (Version: 5.7 - Xpadder, Inc.)
Zoom (HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.)

Packages:
=========
Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-07] (Autodesk Inc.)
Dell Customer Connect -> C:\Program Files\WindowsApps\DellInc.DellCustomerConnect_5.2.40.0_x64__htrsf667h5kn2 [2020-05-10] (Dell Inc)
Dell Product Registration -> C:\Program Files\WindowsApps\DellInc.DellProductRegistration_3.4.6.0_x64__htrsf667h5kn2 [2019-06-06] (Dell Inc)
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_3.6.6.0_x64__htrsf667h5kn2 [2020-07-15] (Dell Inc)
Dropbox - promoción -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2020-02-11] (Dropbox Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa [2020-07-12] (Apple Inc.) [Startup Task]
McAfee® Personal Security -> C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_2.1.39.0_x64__wafk5atnkzcwy [2020-06-16] (McAfee LLC.)
Media Suite Essentials for Dell -> C:\Program Files\WindowsApps\DB6EA5DB.MediaSuiteEssentialsforDell_2.6.4028.0_x86__mcezb6ze687jp [2020-03-29] (CYBERLINK CORPORATION.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-06-05] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-06-05] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-03] (Microsoft Studios) [MS Ad]
MSN El tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-19] (Netflix, Inc.)
Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_3.19.1.0_x64__nfy108tqq3p12 [2020-07-12] (Thumbmunkeys Ltd)
Plex -> C:\Program Files\WindowsApps\CAF9E577.Plex_3.2.20.0_x64__aam28m9va5cke [2019-06-05] (Plex)
Power Media Player for Dell -> C:\Program Files\WindowsApps\DB6EA5DB.PowerMediaPlayerforDell_14.1.9506.0_x86__mcezb6ze687jp [2019-06-06] (CYBERLINK CORPORATION.)
Power2Go for Dell -> C:\Program Files\WindowsApps\DB6EA5DB.Power2GoforDell_8.0.8908.0_x86__mcezb6ze687jp [2019-06-06] (CYBERLINK CORPORATION.) [Startup Task]
PowerDirector for Dell -> C:\Program Files\WindowsApps\DB6EA5DB.PowerDirectorforDell_15.0.4409.0_x64__mcezb6ze687jp [2019-06-06] (CYBERLINK CORPORATION.)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c [2020-07-19] (Skype) [Startup Task]
SmartByte -> C:\Program Files\WindowsApps\RivetNetworks.SmartByte_3.0.869.0_x64__rh07ty8m5nkag [2020-05-10] (Rivet Networks LLC)
Traductor -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2019-09-08] (Microsoft Corporation)
WinZip Universal -> C:\Program Files\WindowsApps\WinZipComputing.WinZipUniversal_1.5.13516.0_x64__3ykzqggjzj4z0 [2019-06-05] (WinZip Computing)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001_Classes\CLSID\{60A40535-2902-46E7-A2E4-773DC0B3E953} -> [MEGAsync] => C:\Users\Gilberto\Documents\MEGAsync [2020-04-30 20:39]
CustomCLSID: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Ningún archivo
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-07-13] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Ningún archivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\k127153.inf_amd64_3f3936d8dec668b8\igfxDTCM.dll [2018-03-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-07-13] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

==================== Módulos cargados (Lista blanca) =============

2016-05-17 14:31 - 2016-05-17 14:31 - 000140288 _____ () [Archivo no firmado] C:\WINDOWS\system32\DPPPlugin.dll
2020-01-13 08:04 - 2020-01-13 08:04 - 001899008 _____ (SQLite Development Team) [Archivo no firmado] C:\Program Files\Dell\SupportAssistAgent\bin\x64\sqlite3.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer sitios de confianza/restringidos ==========

(Si una entrada es incluida en el fixlist, será eliminada del registro.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\localhost -> localhost

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2017-03-18 16:03 - 2017-03-18 16:01 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Control Panel\Desktop\\Wallpaper -> c:\users\gilberto\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{a6342f0a-d85c-46b2-aaad-d3c319d5c23d}.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Firewall de Windows está deshabilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

HKLM\...\StartupApproved\StartupFolder: => "ScpToolkit Tray Notifications.lnk"
HKLM\...\StartupApproved\StartupFolder: => "AnyDesk.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\StartupApproved\Run: => "Plex Media Server"
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{6DABD11B-2F39-4529-B0BC-EA0AA40C98C4}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [Archivo no firmado]
FirewallRules: [{1385B997-D39C-447D-A736-B975B84A6C23}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [Archivo no firmado]
FirewallRules: [{814CFFB4-A796-4386-8D60-0529E9B8BA4E}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc. -> Plex, Inc.)
FirewallRules: [{316A46ED-D11A-4310-8E3E-4CC0F7AEA38F}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc. -> Python Software Foundation)
FirewallRules: [{3DE43ED0-2115-4637-85D3-B3410E922867}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc. -> Plex, Inc.)
FirewallRules: [{4C391CE3-9A60-4E8E-9AC1-28BF8C762EF6}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc. -> )
FirewallRules: [{EC218684-AAB6-4A96-9126-530BC0284542}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [Archivo no firmado]
FirewallRules: [{E2CF29BE-8514-4C36-A64C-AE526DBBE84D}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{E97E45CD-8F79-402B-9BC6-46220BFCAC31}C:\users\gilberto\downloads\anydesk.exe] => (Allow) C:\users\gilberto\downloads\anydesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [UDP Query User{EF6C7EBB-1997-4686-8549-6497DE3DD88C}C:\users\gilberto\downloads\anydesk.exe] => (Allow) C:\users\gilberto\downloads\anydesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{EA6B20D0-D92E-420B-8A6E-6B137B877959}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DA9E26AB-9420-4463-92D7-F9FD9CA866BF}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4CA4122C-52C4-4B22-938E-23DE0FDA1772}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D7A90C99-CB36-4546-A663-D34012049D80}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{75BC7D17-FEC5-4CDA-B087-A345C60F4417}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [UDP Query User{E7F48BF6-3285-4BF9-BA66-8ABEE77B394E}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe (Blizzard Entertainment, Inc. -> )
FirewallRules: [{97AE2742-BA4C-4672-8A7C-B536B2FFC1F1}] => (Allow) C:\Users\Gilberto\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{86CC3CDB-9086-45BF-817E-07E12502FFEB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{A32A2270-59DE-4651-9F22-E9027EF8938F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{93ADEB71-2D98-4B8B-9BDB-98F4BC40F42E}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D69C4B56-A045-447C-B2EB-9EA4CA359A94}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C6F7BFED-913E-42E9-AA39-B41AA0709633}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C6D13E82-E2D0-4124-9F7E-F2B542EE55FA}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5AA22D1C-0431-47D2-AC09-E41B97FD4DB7}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{94FF1D0F-99C1-4755-BDD2-1B73D0B8D0C9}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{88BCF5EC-AAA9-4E17-BCDA-5AE30DB2823B}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12107.3.48019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B35CA39B-15D4-4AF0-8D15-89DE92334CAB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3C89FA4A-24DC-491E-BAC8-5795025AEC85}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{640FC654-7233-447F-81C3-0A79AF773C71}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EDB33B49-9EB6-42E6-A57C-D18AA9AAF198}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2453A9CB-FF9E-4659-986A-A27C7ABB83E0}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{50E266D4-FB86-48D3-BAB8-80D325DDA0FB}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{23BD51A3-9180-432E-B1A4-4BADAB466AF7}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{45062ED0-8B8C-415E-A0D2-09F1869FE7C1}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{8CF36685-EAD4-4448-886A-400126EA8D6A}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{713F0973-49CA-489B-8D6B-3171073F96E0}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)

==================== Puntos de Restauración =========================

20-07-2020 20:08:47 ZHPcleaner

==================== Dispositivos defectuosos en el Administrador de dispositivos ============


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (07/20/2020 10:03:04 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (2216,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 09:51:08 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (9644,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 09:22:03 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4932,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 08:52:31 PM) (Source: ESENT) (EventID: 455) (User: )
Description: Explorer (10936,R,98) TILEREPOSITORYS-1-5-21-1505549421-2506334975-1048970357-1002: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\Users\Gil\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 08:17:22 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7972,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 08:10:41 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (9376,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 07:59:14 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3036,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (07/20/2020 07:49:39 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: MBAMService.exe, versión: 3.2.0.903, marca de tiempo: 0x5ed91d13
Nombre del módulo con errores: MBAMCore.dll, versión: 3.0.0.1041, marca de tiempo: 0x5f04ce0b
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x000000000008b418
Identificador del proceso con errores: 0x117c
Hora de inicio de la aplicación con errores: 0x01d65ef7bf591918
Ruta de acceso de la aplicación con errores: C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
Ruta de acceso del módulo con errores: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MBAMCore.dll
Identificador del informe: f82a641c-2860-4cec-8c8b-d2af164b9b5b
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:


Errores del sistema:
=============
Error: (07/20/2020 09:23:04 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio AnyDesk Service terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio.

Error: (07/20/2020 09:13:43 PM) (Source: Microsoft-Windows-WMPNSS-Service) (EventID: 14338) (User: NT AUTHORITY)
Description: No se puede inicializar un nuevo servidor multimedia debido al error "0x80070422" en CoCreateInstance(CLSID_UPnPRegistrar). Compruebe que el servicio UPnPHost esté en ejecución y que el componente UPnPHost de Windows esté instalado correctamente.

Error: (07/20/2020 09:13:43 PM) (Source: Microsoft-Windows-WMPNSS-Service) (EventID: 14338) (User: NT AUTHORITY)
Description: No se puede inicializar un nuevo servidor multimedia debido al error "0x80070422" en CoCreateInstance(CLSID_UPnPRegistrar). Compruebe que el servicio UPnPHost esté en ejecución y que el componente UPnPHost de Windows esté instalado correctamente.

Error: (07/20/2020 09:13:31 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio McAfee WebAdvisor no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar el archivo especificado.

Error: (07/20/2020 09:13:02 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: El servicio Sincronizar host_5b847 se cerró con el siguiente error: 
Acceso denegado.

Error: (07/20/2020 09:12:24 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Dell Digital Delivery Service no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar el archivo especificado.

Error: (07/20/2020 09:08:50 PM) (Source: Microsoft-Windows-WMPNSS-Service) (EventID: 14338) (User: NT AUTHORITY)
Description: No se puede inicializar un nuevo servidor multimedia debido al error "0x80070422" en CoCreateInstance(CLSID_UPnPRegistrar). Compruebe que el servicio UPnPHost esté en ejecución y que el componente UPnPHost de Windows esté instalado correctamente.

Error: (07/20/2020 09:08:50 PM) (Source: Microsoft-Windows-WMPNSS-Service) (EventID: 14338) (User: NT AUTHORITY)
Description: No se puede inicializar un nuevo servidor multimedia debido al error "0x80070422" en CoCreateInstance(CLSID_UPnPRegistrar). Compruebe que el servicio UPnPHost esté en ejecución y que el componente UPnPHost de Windows esté instalado correctamente.


Windows Defender:
===================================
Date: 2019-11-18 13:49:42.828
Description: 
Antivirus de Windows Defender encontró un error al intentar cargar la inteligencia de seguridad e intentará revertir a una versión que sepa que es correcta.
Inteligencia de seguridad intentada: Actual
Código de error: 0x80070003
Descripción del error: El sistema no puede encontrar la ruta especificada. 
Versión de inteligencia de seguridad: 0.0.0.0;0.0.0.0
Versión del motor: 0.0.0.0

CodeIntegrity:
===================================

Date: 2020-07-20 21:11:20.757
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 21:11:13.542
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 21:11:13.502
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 20:55:49.291
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 20:55:48.935
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 20:55:43.050
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 20:55:42.946
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2020-07-20 20:54:04.973
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

==================== Información de la memoria =========================== 

BIOS: Dell Inc. 1.2.8 05/22/2019
Placa base: Dell Inc. 04M49V
Procesador: Intel(R) Core(TM) i7-7500U CPU @ 2.70GHz
Porcentaje de memoria en uso: 47%
RAM física total: 6042.72 MB
RAM física disponible: 3165.9 MB
Virtual total: 7706.72 MB
Virtual disponible: 4025.79 MB

==================== Unidades ================================

Drive c: (OS) (Fixed) (Total:819.63 GB) (Free:234.14 GB) NTFS

\\?\Volume{f17a2ed9-ed72-4e1d-887b-fddc44dde186}\ (Image) (Fixed) (Total:11.97 GB) (Free:0.16 GB) NTFS
\\?\Volume{4623895b-f90d-45e9-9bce-f69873603400}\ (DELLSUPPORT) (Fixed) (Total:1.17 GB) (Free:0.1 GB) NTFS
\\?\Volume{eec9417d-6a83-44fa-b7fc-51cac9d369c3}\ (ESP) (Fixed) (Total:0.48 GB) (Free:0.42 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: BDB7FAE1)

Partition: GPT.

==================== Final de Addition.txt =======================

Hola @Gilberto_Garcia

Paso 1:

Desinstala con Revo Uninstaller en su Modo Avanzado:

  • Java 8 Update 241
  • SmartByte Drivers and Services y todo lo que veas de SmartByte.
  • McAfee VirusScan
  • Glary

Si alguno no se encontrara continuas con el siguiente.

Luego desde el mismo programa pero de la ventana Windows Apps desinstalas:

  • McAfee® Personal Security
  • SmartByte

Manual de Revo Uninstaller.

Reinicias el equipo.

Paso 2:

Con mucha atención sigue estos pasos:

1.- Muy Importante >>> Realizar una copia de Seguridad de su Registro.

  • Descarga/Ejecuta DelFix desde el escritorio de Windows.
  • Clic Derecho, “Ejecutar como Administrador”.
  • En la ventana principal, marca solamente la casilla “Create Registry Backup”.
  • Clic en Run.

Al terminar se abrirá un reporte llamado DelFix.txt, guárdelo por si fuera necesario y cierre la herramienta…

Luego ve a::

2.- Inicio >>> Ejecutar >>> Escribe notepad.exe o abra un nuevo archivo Notepad y copie y pegue lo siguiente:

Start::
CloseProcesses:
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-22] (Google LLC -> Google LLC)
ShortcutTarget: MEGAsync.lnk -> C:\Users\Gilberto\AppData\Local\MEGAsync\MEGAsync.exe (Ningún archivo)
GroupPolicy: Restricción ? <==== ATENCIÓN
Task: {0CBA4467-48B4-498B-85FE-1E3EF0D66400} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {BF552662-4DC2-49CD-9A85-7A5CE1C21592} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\RunDLC.job => cmd c sc start Dell Help SupportWORKGROUP DESKTOP F9C7RJH
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001 -> DefaultScope {5E3AA19E-3DCC-4208-A973-B757AB47CD6D} URL = 
SearchScopes: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001 -> {5E3AA19E-3DCC-4208-A973-B757AB47CD6D} URL = 
R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7193.518\DSAPI.exe [965104 2020-07-15] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
R3 PCDSRVC{628864C0-331E8A33-06030000}_0; c:\program files\dell\supportassistagent\pcdr\supportassist\6.0.7193.518\pcdsrvc_x64.pkms [55024 2020-07-15] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
C:\Program Files\Dell\SupportAssistAgent\PCDr
2020-07-20 20:12 - 2019-06-09 13:15 - 000000000 ____D C:\ProgramData\Lavasoft
2020-07-20 20:12 - 2019-06-09 13:15 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2020-07-20 19:47 - 2017-08-02 17:02 - 000000000 ____D C:\ProgramData\Dell
2020-07-20 19:42 - 2017-08-02 17:11 - 000000000 ____D C:\Program Files (x86)\McAfee
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\Users\Gilberto\AppData\Roaming\Lavasoft
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\Users\Gilberto\AppData\Local\Lavasoft
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-07-19 11:02 - 2019-10-16 20:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2020-07-18 15:28 - 2017-08-02 16:52 - 000000000 ____D C:\ProgramData\PCDr
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Ningún archivo
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
Task: {9928BC75-3C16-457C-9AE8-71450F672A5C} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
2020-07-20 21:02 - 2020-07-20 21:02 - 000000000 ____D C:\Users\Gil\AppData\Roaming\GlarySoft
2020-07-20 21:02 - 2020-07-20 21:02 - 000000000 ____D C:\Users\Gil\AppData\Roaming\GlarySoft
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-07-13] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"

CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
End::
  • Lo guarda bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.

Nota: Es necesario que el ejecutable Frst.exe/Frst64.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no la herramienta no trabajará.

3.- Inicie su ordenador en >>> Modo Seguro >>> Aplicable a Windows 10. o Windows 7.

  • Ejecute Frst.exe o Frst64.exe. según el caso.
  • Presione el botón Fix/Corregir y aguarde a que termine.
  • La Herramienta guardará el reporte en su escritorio (Fixlog.txt).
  • Reinicia y lo pega en su próxima respuesta.

Paso 3: Actualizas Java a su ultima versión si lo utilizas.

Nos comentas…

Salu2

1 me gusta

Hola muchas gracias por la ayuda hice otra prueba y la velocidad de internet ya es la correcta :star_struck: al parecer se ha corregido el problema. Aquí está el reporte.

Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 19-07-2020
Ejecutado por Gilberto (21-07-2020 18:59:37) Run:1
Ejecutado desde C:\Users\Gilberto\Desktop
Perfiles cargados: Gilberto
Modo de Inicio: Safe Mode (minimal)
==============================================

fixlist contenido:
*****************
CloseProcesses:
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\83.0.4103.116\Installer\chrmstp.exe [2020-06-22] (Google LLC -> Google LLC)
ShortcutTarget: MEGAsync.lnk -> C:\Users\Gilberto\AppData\Local\MEGAsync\MEGAsync.exe (Ningún archivo)
GroupPolicy: Restricción ? <==== ATENCIÓN
Task: {0CBA4467-48B4-498B-85FE-1E3EF0D66400} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {BF552662-4DC2-49CD-9A85-7A5CE1C21592} - System32\Tasks\PCDDataUploadTask => uaclauncher.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\RunDLC.job => cmd c sc start Dell Help SupportWORKGROUP DESKTOP F9C7RJH
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://dell17win10.msn.com/?pc=DCTE
SearchScopes: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001 -> DefaultScope {5E3AA19E-3DCC-4208-A973-B757AB47CD6D} URL = 
SearchScopes: HKU\S-1-5-21-1505549421-2506334975-1048970357-1001 -> {5E3AA19E-3DCC-4208-A973-B757AB47CD6D} URL = 
R2 Dell Hardware Support; C:\Program Files\Dell\SupportAssistAgent\PCDr\SupportAssist\6.0.7193.518\DSAPI.exe [965104 2020-07-15] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
R3 PCDSRVC{628864C0-331E8A33-06030000}_0; c:\program files\dell\supportassistagent\pcdr\supportassist\6.0.7193.518\pcdsrvc_x64.pkms [55024 2020-07-15] (PC-Doctor, Inc. -> PC-Doctor, Inc.)
C:\Program Files\Dell\SupportAssistAgent\PCDr
2020-07-20 20:12 - 2019-06-09 13:15 - 000000000 ____D C:\ProgramData\Lavasoft
2020-07-20 20:12 - 2019-06-09 13:15 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2020-07-20 19:47 - 2017-08-02 17:02 - 000000000 ____D C:\ProgramData\Dell
2020-07-20 19:42 - 2017-08-02 17:11 - 000000000 ____D C:\Program Files (x86)\McAfee
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\Users\Gilberto\AppData\Roaming\Lavasoft
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\Users\Gilberto\AppData\Local\Lavasoft
2020-07-20 19:38 - 2019-06-09 13:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2020-07-19 11:02 - 2019-10-16 20:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\McAfee
2020-07-18 15:28 - 2017-08-02 16:52 - 000000000 ____D C:\ProgramData\PCDr
AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Ningún archivo
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
Task: {9928BC75-3C16-457C-9AE8-71450F672A5C} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
2020-07-20 21:02 - 2020-07-20 21:02 - 000000000 ____D C:\Users\Gil\AppData\Roaming\GlarySoft
2020-07-20 21:02 - 2020-07-20 21:02 - 000000000 ____D C:\Users\Gil\AppData\Roaming\GlarySoft
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-07-13] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Ningún archivo
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:

*****************

Procesos cerrados correctamente.
HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => eliminado correctamente
"C:\Users\Gilberto\AppData\Local\MEGAsync\MEGAsync.exe" => no encontrado
C:\WINDOWS\system32\GroupPolicy\Machine => movido correctamente
C:\WINDOWS\system32\GroupPolicy\GPT.ini => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0CBA4467-48B4-498B-85FE-1E3EF0D66400}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0CBA4467-48B4-498B-85FE-1E3EF0D66400}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\SystemToolsDailyTest => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SystemToolsDailyTest" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF552662-4DC2-49CD-9A85-7A5CE1C21592}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF552662-4DC2-49CD-9A85-7A5CE1C21592}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\PCDDataUploadTask => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PCDDataUploadTask" => eliminado correctamente
C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => movido correctamente
C:\WINDOWS\Tasks\RunDLC.job => movido correctamente
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main\\"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" => valor restaurado correctamente
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\Software\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => valor restaurado correctamente
"HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => eliminado correctamente
HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5E3AA19E-3DCC-4208-A973-B757AB47CD6D} => eliminado correctamente
HKLM\System\CurrentControlSet\Services\Dell Hardware Support => eliminado correctamente
Dell Hardware Support => servicio eliminado correctamente
PCDSRVC{628864C0-331E8A33-06030000}_0 => servicio no encontrado.
C:\Program Files\Dell\SupportAssistAgent\PCDr => movido correctamente
C:\ProgramData\Lavasoft => movido correctamente
C:\Program Files (x86)\Lavasoft => movido correctamente
C:\ProgramData\Dell => movido correctamente
C:\Program Files (x86)\McAfee => movido correctamente
C:\Users\Gilberto\AppData\Roaming\Lavasoft => movido correctamente
C:\Users\Gilberto\AppData\Local\Lavasoft => movido correctamente
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft => movido correctamente
C:\WINDOWS\system32\Tasks\McAfee => movido correctamente
C:\ProgramData\PCDr => movido correctamente
"AS: McAfee VirusScan (Enabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}" => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => invalid subkey removed.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => invalid subkey removed.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => invalid subkey removed.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Pending) => invalid subkey removed.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Synced) => invalid subkey removed.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ MEGA (Syncing) => invalid subkey removed.
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities => eliminado correctamente
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\MEGA (Context menu) => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9928BC75-3C16-457C-9AE8-71450F672A5C}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9928BC75-3C16-457C-9AE8-71450F672A5C}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\GU5SkipUAC => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GU5SkipUAC" => eliminado correctamente
C:\Users\Gil\AppData\Roaming\GlarySoft => movido correctamente
"C:\Users\Gil\AppData\Roaming\GlarySoft" => no encontrado
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Glary Utilities => eliminado correctamente
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\MEGA (Context menu) => eliminado correctamente
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MBAMShlExt => eliminado correctamente
HKLM\Software\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} => no pudo ser eliminado. Acceso Denegado.
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\MEGA (Context menu) => eliminado correctamente
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\MEGA (Context menu) => eliminado correctamente
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities => eliminado correctamente
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => eliminado correctamente
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => eliminado correctamente
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MCODS => eliminado correctamente

========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= Final de CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows


========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

Unable to connect to BITS - 0x8007043c

========= Final de CMD: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= Final de CMD: =========


========= netsh advfirewall reset =========


Error al intentar ponerse en contacto con el servicio Firewall de Windows Defender. Aseg£rate de que el servicio se est  ejecutando e intenta la solicitud de nuevo.


========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========


Error al intentar ponerse en contacto con el servicio Firewall de Windows Defender. Aseg£rate de que el servicio se est  ejecutando e intenta la solicitud de nuevo.


========= Final de CMD: =========


========= netsh int ipv4 reset =========

No hay valores configurados por el usuario para restablecer.


========= Final de CMD: =========


========= netsh int ipv6 reset =========

No hay valores configurados por el usuario para restablecer.


========= Final de CMD: =========


========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-1505549421-2506334975-1048970357-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========

C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.

=========== EmptyTemp: ==========

BITS transfer queue => 11034624 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 13906215 B
Java, Flash, Steam htmlcache => 524 B
Windows/system/drivers => 31549607 B
Edge => 28262 B
Chrome => 406075689 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 13519550 B
systemprofile32 => 13519550 B
LocalService => 13550702 B
NetworkService => 13554864 B
Gilberto => 88104082 B
Gil => 192465740 B

RecycleBin => 24795944 B
EmptyTemp: => 784 MB datos temporales eliminados.

================================

Resultado de los archivos programados para mover (Modo de Inicio: Normal) (Fecha y Hora: 21-07-2020 19:03:11)


Resultado de las claves programadas para eliminar después de reiniciar:

HKLM\Software\Classes\CLSID\{57CE581A-0CB6-4266-9CA0-19364C90A0B3} => eliminado correctamente

==== Final  Fixlog 19:03:11 ====

Hola @Gilberto_Garcia

Que bueno leer eso…:+1:

Hay muchos casos en la red como el tuyo donde se le atribuye el problema a SmartByte

Para eliminar las herramientas utilizadas:

Descargas/Ejecutas >> Delfix, desde tu escritorio.

  • Doble clic para ejecutarlo.(Si usas Windows Vista/7 /8 /10,presiona clic derecho y selecciona >> “Ejecutar como Administrador”)
  • Marca las casilla Remove disinfection tools y Purgue Sistem Restore
  • Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

Nos comentas si todo esta en orden para dar por Solucionado el tema.

PD: Si no quieres quedarte solo con Windows Defender como antivirus, puedes probar Kaspersky Free.

Salu2.

1 me gusta

Muchas gracias ya todo en orden

1 me gusta

Hola @Gilberto_Garcia

Que bueno que hayamos podido resolver tu consulta…:+1:

Para otros problemas, ya sabes donde encontrarnos. :wink:

Tema Solucionado

Salu2.