Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 30.01.2019
Ran by flipp (administrator) on DESKTOP-95LCTQ8 (31-01-2019 13:25:55)
Running from C:\Users\flipp\Desktop
Loaded Profiles: flipp (Available Profiles: flipp)
Platform: Windows 10 Home Single Language Version 1803 17134.523 (X64) Language: Español (España, internacional)
Default browser: FF
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Google Inc.) C:\ProgramData\localNETService\localNETService.exe
(McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(McAfee, LLC) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(McAfee, LLC) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe
(McAfee, LLC) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe
(McAfee, Inc.) C:\Program Files\McAfee\MfeAV\MfeAVSvc.exe
(McAfee, LLC) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\VSCore_18_9\mcapexe.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\McCSPServiceHost.exe
(McAfee LLC.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.37.98.0_x64__kzf8qxf38zg5c\SkypeApp.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.37.98.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Anvsoft\Syncios\androidnotifier.exe
() C:\Program Files (x86)\Anvsoft\Syncios\adb.exe
(Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.37.98.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18112.20010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1811.3241.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(McAfee, Inc.) C:\Program Files\McAfee\CoreUI\Launch.exe
(McAfee, Inc.) C:\Program Files\Common Files\McAfee\ChromiumContainer\delegate.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SecurityHealth] => C:\Program Files\WINDOWS DEFENDER\MSASCUIL.EXE [638872 2018-04-11] (Microsoft Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\PROGRAM FILES\REALTEK\AUDIO\HDA\RTKNGUI64.EXE [9226752 2017-05-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\PROGRAM FILES\REALTEK\AUDIO\HDA\RAVBG64.EXE [1485312 2017-05-04] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_PushButton] => C:\PROGRAM FILES\REALTEK\AUDIO\HDA\RAVBG64.EXE [1485312 2017-05-04] (Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\PROGRAM FILES\WAVES\MAXXAUDIO\WAVESSVC64.EXE [723928 2017-01-26] (Waves Audio Ltd.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc.)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3282000 2019-01-09] (Dominik Reichl)
HKLM-x32\...\Run: [Syncios device service] => C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe [2443384 2018-06-29] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle Corporation)
HKU\S-1-5-21-1103162910-2907697783-2557054662-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19645800 2019-01-10] (Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2018-12-13] (Google Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 200.52.196.196 189.194.232.137 200.77.146.137
Tcpip\..\Interfaces\{6823bab8-6e7f-4a27-a705-8f4dd7538a32}: [DhcpNameServer] 200.52.196.196 189.194.232.137 200.77.146.137

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1103162910-2907697783-2557054662-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-1103162910-2907697783-2557054662-1001 -> {BDF61FAE-9D19-40F0-8F34-688DEB334CA9} URL = hxxp://securedsearch.lavasoft.com/results.php?pr=vmn&id=webcompa&ent=ch_WCYID10420__181028&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2018-12-25] (Microsoft Corporation)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2019-01-03] (McAfee, Inc.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2018-06-12] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2019-01-23] (Oracle Corporation)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2019-01-03] (McAfee, Inc.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2018-07-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-23] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2018-03-14] (Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\program files\mcafee\msc\mcsniepl64.dll [2018-11-27] (McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\program files (x86)\mcafee\msc\mcsniepl.dll [2018-11-27] (McAfee, Inc.)

FireFox:
========
FF DefaultProfile: cx2o2eim.default-1544736125481
FF ProfilePath: C:\Users\flipp\AppData\Roaming\Mozilla\Firefox\Profiles\cx2o2eim.default-1544736125481 [2019-01-31]
FF Extension: (Flagfox) - C:\Users\flipp\AppData\Roaming\Mozilla\Firefox\Profiles\cx2o2eim.default-1544736125481\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2019-01-05]
FF Extension: (Malwarebytes Browser Extension) - C:\Users\flipp\AppData\Roaming\Mozilla\Firefox\Profiles\cx2o2eim.default-1544736125481\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2019-01-31]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2019-01-29]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin: @mcafee.com/MSC,version=10 -> c:\program files\mcafee\msc\npmcsnffpl64.dll [2018-11-27] ()
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-23] (Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\program files (x86)\mcafee\msc\npmcsnffpl.dll [2018-11-27] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2018-06-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-11-14] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-11-14] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-12-04] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://mx.search.yahoo.com/search?fr=mcafee&type=E211MX105G91208&p={searchTerms}
CHR DefaultSearchKeyword: Default -> McAfee
CHR Profile: C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default [2018-12-13]
CHR Extension: (Presentaciones) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-11-14]
CHR Extension: (Documentos) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-11-14]
CHR Extension: (Google Drive) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-14]
CHR Extension: (YouTube) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-14]
CHR Extension: (Adobe Acrobat) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2018-11-14]
CHR Extension: (Hojas de cálculo) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-11-14]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2018-11-14]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-11-14]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-14]
CHR Extension: (Gmail) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-14]
CHR Extension: (Chrome Media Router) - C:\Users\flipp\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-11-14]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - hxxp://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc.)
S3 ClientAnalyticsService; C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe [1508656 2018-05-31] (McAfee, Inc.)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373744 2016-11-01] (Intel Corporation)
R2 localNETService; C:\ProgramData\localNETService\localNETService.exe [718128 2018-12-13] (Google Inc.)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [905336 2019-01-03] (McAfee, Inc.)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_18_9\McApExe.exe [744312 2018-11-13] (McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\3.0.127.0\\McCSPServiceHost.exe [2159464 2018-06-29] (McAfee, Inc.)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe [366960 2018-08-27] (McAfee, LLC)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [590712 2018-08-27] (McAfee, LLC)
R3 mfevtp; C:\Windows\system32\mfevtps.exe [499576 2018-08-27] (McAfee, LLC)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1705968 2018-11-15] (McAfee, Inc.)
R2 PEFService; C:\Program Files\Common Files\McAfee\PEF\CORE\PEFService.exe [1333064 2018-10-25] (McAfee, Inc.)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324608 2017-05-04] (Realtek Semiconductor)
S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [495616 2018-03-10] ()
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [265784 2017-12-19] (Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\NisSrv.exe [3880120 2019-01-09] (Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1812.3-0\MsMpEng.exe [114208 2019-01-09] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (Apple Inc.)
R3 athr; C:\Windows\System32\drivers\athw10x.sys [4325808 2016-07-28] (Qualcomm Atheros Communications, Inc.)
R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [77120 2018-10-04] (McAfee, LLC)
R3 DellRbtn; C:\Windows\System32\drivers\DellRbtn.sys [29160 2018-07-26] (OSR Open Systems Resources, Inc.)
S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [235784 2018-10-03] (McAfee, Inc.)
R3 mfeaack; C:\Windows\System32\drivers\mfeaack.sys [508736 2018-10-04] (McAfee, LLC)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [371520 2018-10-04] (McAfee, LLC)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [85632 2018-10-04] (McAfee, LLC)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [515392 2018-10-04] (McAfee, LLC)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [975168 2018-10-04] (McAfee, LLC)
R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [560944 2018-10-02] (McAfee LLC.)
S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [108840 2018-10-02] (McAfee LLC.)
R3 mfeplk; C:\Windows\System32\drivers\mfeplk.sys [117568 2018-10-04] (McAfee, LLC)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [253760 2018-10-04] (McAfee, LLC)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2018-04-11] (Realtek )
S3 RTSUER; C:\Windows\system32\Drivers\RtsUer.sys [427528 2016-10-17] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [66104 2017-12-19] (Synaptics Incorporated)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [46680 2019-01-09] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [330936 2019-01-09] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62136 2019-01-09] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-31 13:25 - 2019-01-31 13:26 - 000018550 _____ C:\Users\flipp\Desktop\FRST.txt
2019-01-31 13:25 - 2019-01-31 13:25 - 000000000 ____D C:\FRST
2019-01-31 13:19 - 2019-01-31 13:20 - 002428928 _____ (Farbar) C:\Users\flipp\Desktop\FRST64.exe
2019-01-31 11:58 - 2019-01-31 13:16 - 000003606 _____ C:\Windows\System32\Tasks\McAfee DAT Built in test
2019-01-31 00:00 - 2019-01-31 00:14 - 001149889 _____ C:\Users\flipp\Desktop\Copia de CONTROL DE ANTIBIOICO.xlsx
2019-01-30 23:57 - 2019-01-30 23:57 - 001159266 _____ C:\Users\flipp\Documents\Copia de CONTROL DE ANTIBIOICO.xlsx
2019-01-30 22:19 - 2019-01-30 22:19 - 001244642 _____ C:\Users\flipp\Downloads\CONTROL DE ANTIBIOICO.xlsx
2019-01-30 22:17 - 2019-01-30 22:17 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-29 14:15 - 2019-01-29 14:15 - 000001816 _____ C:\Users\Public\Desktop\iTunes.lnk
2019-01-29 14:15 - 2019-01-29 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2019-01-29 14:15 - 2019-01-29 14:15 - 000000000 ____D C:\Program Files\iPod
2019-01-29 14:14 - 2019-01-29 14:15 - 000000000 ____D C:\Program Files\iTunes
2019-01-23 17:12 - 2019-01-23 17:12 - 003298344 _____ (Dominik Reichl ) C:\Users\flipp\Downloads\KeePass-2.41-Setup.exe
2019-01-23 14:37 - 2019-01-23 14:38 - 000001278 _____ C:\Users\flipp\Desktop\cmd.exe.lnk
2019-01-22 17:10 - 2019-01-29 14:26 - 000004210 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-01-22 17:10 - 2019-01-22 17:11 - 000000000 ____D C:\Program Files\CCleaner
2019-01-22 17:10 - 2019-01-22 17:10 - 000002888 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC
2019-01-22 17:10 - 2019-01-22 17:10 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2019-01-22 17:10 - 2019-01-22 17:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2019-01-18 15:57 - 2019-01-18 15:57 - 000004608 _____ C:\Users\flipp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-18 15:26 - 2019-01-18 15:26 - 000230366 _____ C:\Users\flipp\Downloads\cedula-bti_100511.pdf
2019-01-15 18:29 - 2019-01-15 18:29 - 000000000 ___HD C:\$WINDOWS.~BT
2019-01-10 17:26 - 2018-09-19 22:12 - 001483576 _____ (Microsoft Corporation) C:\Windows\system32\mcupdate_GenuineIntel.dll
2019-01-10 10:52 - 2019-01-10 10:52 - 000289423 _____ C:\Users\flipp\Downloads\document.pdf
2019-01-09 12:59 - 2019-01-01 07:46 - 012710912 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2019-01-09 12:59 - 2019-01-01 07:20 - 011902976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2019-01-09 12:59 - 2019-01-01 01:14 - 001221432 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-01-09 12:59 - 2019-01-01 01:14 - 001029944 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-01-09 12:59 - 2019-01-01 01:14 - 000134968 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-01-09 12:59 - 2019-01-01 01:13 - 003292152 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2019-01-09 12:59 - 2019-01-01 01:13 - 001363536 _____ (Microsoft Corporation) C:\Windows\system32\WinTypes.dll
2019-01-09 12:59 - 2019-01-01 01:13 - 000709728 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2019-01-09 12:59 - 2019-01-01 01:13 - 000170808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2019-01-09 12:59 - 2019-01-01 01:12 - 009084216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-01-09 12:59 - 2019-01-01 01:12 - 002765344 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2019-01-09 12:59 - 2019-01-01 01:12 - 002465792 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-01-09 12:59 - 2019-01-01 01:12 - 002421288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-01-09 12:59 - 2019-01-01 01:12 - 000713272 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll
2019-01-09 12:59 - 2019-01-01 00:50 - 004383744 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll
2019-01-09 12:59 - 2019-01-01 00:47 - 000808448 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-01-09 12:59 - 2019-01-01 00:46 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2019-01-09 12:59 - 2019-01-01 00:45 - 007573504 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-01-09 12:59 - 2019-01-01 00:45 - 002368512 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll
2019-01-09 12:59 - 2019-01-01 00:44 - 001549824 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2019-01-09 12:59 - 2019-01-01 00:43 - 001805312 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2019-01-09 12:59 - 2019-01-01 00:42 - 000717312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2019-01-09 12:59 - 2019-01-01 00:41 - 001159680 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll
2019-01-09 12:59 - 2019-01-01 00:37 - 002478664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2019-01-09 12:59 - 2019-01-01 00:37 - 002253696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2019-01-09 12:59 - 2019-01-01 00:37 - 001989040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-01-09 12:59 - 2019-01-01 00:16 - 005775872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-01-09 12:59 - 2019-01-01 00:14 - 004514816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-01-09 12:59 - 2019-01-01 00:13 - 001628160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2019-01-09 12:58 - 2019-01-01 07:50 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll
2019-01-09 12:58 - 2019-01-01 07:47 - 000225792 _____ (Microsoft Corporation) C:\Windows\system32\windowslivelogin.dll
2019-01-09 12:58 - 2019-01-01 07:45 - 000714752 _____ (Microsoft Corporation) C:\Windows\system32\wlidcli.dll
2019-01-09 12:58 - 2019-01-01 07:45 - 000285184 _____ (Microsoft Corporation) C:\Windows\system32\wlidcredprov.dll
2019-01-09 12:58 - 2019-01-01 07:43 - 001364992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-01-09 12:58 - 2019-01-01 07:20 - 000165888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windowslivelogin.dll
2019-01-09 12:58 - 2019-01-01 07:18 - 000500736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcli.dll
2019-01-09 12:58 - 2019-01-01 07:17 - 000231936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidcredprov.dll
2019-01-09 12:58 - 2019-01-01 01:14 - 001063224 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2019-01-09 12:58 - 2019-01-01 01:14 - 000566568 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe
2019-01-09 12:58 - 2019-01-01 01:14 - 000076088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys
2019-01-09 12:58 - 2019-01-01 01:13 - 000436024 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-01-09 12:58 - 2019-01-01 01:12 - 007520104 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-01-09 12:58 - 2019-01-01 01:12 - 000268304 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2019-01-09 12:58 - 2019-01-01 01:12 - 000128824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tm.sys
2019-01-09 12:58 - 2019-01-01 01:12 - 000043536 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-01-09 12:58 - 2019-01-01 00:55 - 025856512 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-01-09 12:58 - 2019-01-01 00:50 - 022715392 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-01-09 12:58 - 2019-01-01 00:48 - 000342528 _____ (Microsoft Corporation) C:\Windows\system32\browserexport.exe
2019-01-09 12:58 - 2019-01-01 00:48 - 000081920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wanarp.sys
2019-01-09 12:58 - 2019-01-01 00:48 - 000079360 _____ (Microsoft Corporation) C:\Windows\system32\Print.Workflow.Source.dll
2019-01-09 12:58 - 2019-01-01 00:47 - 000433152 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2019-01-09 12:58 - 2019-01-01 00:46 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\MicrosoftAccountTokenProvider.dll
2019-01-09 12:58 - 2019-01-01 00:46 - 000153088 _____ (Microsoft Corporation) C:\Windows\system32\dssvc.dll
2019-01-09 12:58 - 2019-01-01 00:45 - 000352768 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2019-01-09 12:58 - 2019-01-01 00:44 - 001708544 _____ (Microsoft Corporation) C:\Windows\system32\MSPhotography.dll
2019-01-09 12:58 - 2019-01-01 00:44 - 000894464 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-01-09 12:58 - 2019-01-01 00:44 - 000662528 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2019-01-09 12:58 - 2019-01-01 00:44 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll
2019-01-09 12:58 - 2019-01-01 00:42 - 004939776 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-01-09 12:58 - 2019-01-01 00:42 - 002247680 _____ (Microsoft Corporation) C:\Windows\system32\wlidsvc.dll
2019-01-09 12:58 - 2019-01-01 00:42 - 001371136 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2019-01-09 12:58 - 2019-01-01 00:41 - 000899072 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2019-01-09 12:58 - 2019-01-01 00:41 - 000895488 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.OnlineId.dll
2019-01-09 12:58 - 2019-01-01 00:41 - 000505344 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll
2019-01-09 12:58 - 2019-01-01 00:37 - 006571584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-01-09 12:58 - 2019-01-01 00:37 - 000880048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WinTypes.dll
2019-01-09 12:58 - 2019-01-01 00:37 - 000581808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll
2019-01-09 12:58 - 2019-01-01 00:37 - 000381240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-01-09 12:58 - 2019-01-01 00:29 - 022016512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-01-09 12:58 - 2019-01-01 00:22 - 019405312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-01-09 12:58 - 2019-01-01 00:17 - 000153088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MicrosoftAccountTokenProvider.dll
2019-01-09 12:58 - 2019-01-01 00:16 - 001361408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSPhotography.dll
2019-01-09 12:58 - 2019-01-01 00:16 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincorlib.dll
2019-01-09 12:58 - 2019-01-01 00:15 - 005307392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2019-01-09 12:58 - 2019-01-01 00:15 - 000608768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-01-09 12:58 - 2019-01-01 00:15 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll
2019-01-09 12:58 - 2019-01-01 00:15 - 000317440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2019-01-09 12:58 - 2019-01-01 00:14 - 000578560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-01-09 12:58 - 2019-01-01 00:14 - 000330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll
2019-01-09 12:58 - 2019-01-01 00:13 - 000594432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2019-01-09 12:58 - 2019-01-01 00:13 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll
2019-01-09 12:58 - 2019-01-01 00:12 - 001036288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2019-01-09 12:58 - 2019-01-01 00:12 - 000795648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.OnlineId.dll
2019-01-09 12:58 - 2019-01-01 00:12 - 000778240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2019-01-09 12:58 - 2019-01-01 00:12 - 000516608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2019-01-09 12:58 - 2018-12-31 23:23 - 000001310 _____ C:\Windows\system32\tcbres.wim
2019-01-09 12:58 - 2018-12-18 22:49 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-01-05 15:05 - 2019-01-05 15:05 - 000000009 _____ C:\Users\flipp\rstr2.ini
2019-01-03 15:35 - 2019-01-03 15:38 - 000296226 _____ C:\Users\flipp\Downloads\CONTRATO DE COMPRAVENTA EJIDAL.pdf
2019-01-03 13:13 - 2019-01-03 13:13 - 000000009 _____ C:\Users\flipp\rstr1.ini

==================== One month (modified) ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-31 13:26 - 2018-12-20 17:42 - 000000004 _____ C:\ProgramData\lock.dat
2019-01-31 13:23 - 2018-08-16 14:33 - 000000000 ____D C:\Users\flipp\AppData\LocalLow\Mozilla
2019-01-31 13:16 - 2018-08-16 05:15 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-01-31 13:16 - 2018-04-11 17:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-01-31 12:12 - 2018-08-16 05:27 - 001679422 _____ C:\Windows\system32\PerfStringBackup.INI
2019-01-31 12:12 - 2018-04-12 10:18 - 000751674 _____ C:\Windows\system32\perfh00A.dat
2019-01-31 12:12 - 2018-04-12 10:18 - 000147560 _____ C:\Windows\system32\perfc00A.dat
2019-01-31 12:12 - 2018-04-11 17:36 - 000000000 ____D C:\Windows\INF
2019-01-31 12:09 - 2018-12-20 17:42 - 000000016 _____ C:\ProgramData\irw.atsd
2019-01-31 12:08 - 2018-08-16 12:37 - 000000000 __SHD C:\Users\flipp\IntelGraphicsProfiles
2019-01-31 12:08 - 2018-08-16 12:36 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2019-01-31 12:07 - 2018-08-16 05:16 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-01-31 12:07 - 2018-04-11 15:04 - 000786432 _____ C:\Windows\system32\config\BBI
2019-01-31 10:00 - 2018-04-11 17:38 - 000000000 ____D C:\Windows\LiveKernelReports
2019-01-31 09:58 - 2018-08-18 12:54 - 000004220 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{EF6952BD-0DDF-4BB2-906F-92C8797B7E79}
2019-01-31 09:52 - 2018-08-16 14:33 - 000000000 ____D C:\Program Files\Mozilla Firefox
2019-01-31 09:52 - 2018-08-16 14:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-01-31 09:52 - 2018-04-11 15:04 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-01-30 22:32 - 2018-04-11 17:30 - 000000000 ____D C:\Windows\CbsTemp
2019-01-30 22:25 - 2018-08-16 12:37 - 000000000 ____D C:\Users\flipp\AppData\Local\Packages
2019-01-30 22:17 - 2018-08-16 14:33 - 000001005 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-01-29 10:35 - 2018-04-11 17:38 - 000000000 ____D C:\Windows\AppReadiness
2019-01-28 08:42 - 2018-08-16 14:18 - 000000000 ____D C:\Users\flipp\AppData\Roaming\KeePass
2019-01-27 13:00 - 2018-08-16 12:43 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1103162910-2907697783-2557054662-1001
2019-01-27 13:00 - 2018-08-16 12:41 - 000000000 ___RD C:\Users\flipp\OneDrive
2019-01-27 13:00 - 2018-08-16 12:30 - 000002401 _____ C:\Users\flipp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2019-01-27 12:50 - 2018-08-16 12:54 - 000000000 ____D C:\ProgramData\Packages
2019-01-27 12:50 - 2018-04-11 17:38 - 000000000 ___HD C:\Program Files\WindowsApps
2019-01-23 20:57 - 2018-12-01 19:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-01-23 20:57 - 2018-12-01 19:30 - 000000000 ____D C:\Program Files (x86)\Java
2019-01-23 20:55 - 2018-12-01 19:31 - 000099192 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2019-01-23 17:13 - 2018-08-16 13:59 - 000001190 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2019-01-23 17:13 - 2018-08-16 13:59 - 000001178 _____ C:\Users\flipp\Desktop\KeePass 2.lnk
2019-01-23 17:13 - 2018-08-16 13:59 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2
2019-01-18 16:00 - 2018-08-16 14:02 - 000000000 ____D C:\Users\flipp\Documents\Camtasia Studio
2019-01-18 13:19 - 2018-11-16 20:32 - 000000000 ____D C:\Program Files\rempl
2019-01-15 18:30 - 2018-08-16 06:15 - 000000000 ____D C:\Windows\Panther
2019-01-15 11:00 - 2018-08-16 12:30 - 000000000 ____D C:\Users\flipp
2019-01-09 17:45 - 2018-08-16 05:16 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-01-09 17:35 - 2018-08-16 15:17 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-01-09 17:29 - 2018-08-18 10:53 - 000000000 ____D C:\Program Files (x86)\McAfee
2019-01-09 17:25 - 2018-04-11 17:38 - 000000000 ____D C:\Windows\TextInput
2019-01-09 17:25 - 2018-04-11 17:38 - 000000000 ____D C:\Windows\bcastdvr
2019-01-09 13:14 - 2018-08-16 15:38 - 000000000 ____D C:\Windows\system32\MRT
2019-01-09 13:10 - 2018-08-18 12:11 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2019-01-09 13:10 - 2018-08-16 15:38 - 132790320 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-01-09 13:09 - 2018-04-11 17:38 - 000000167 _____ C:\Windows\win.ini
2019-01-08 10:48 - 2018-08-18 11:53 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-01-02 13:41 - 2018-11-13 20:27 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-01-02 13:41 - 2018-11-13 20:27 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2018-12-20 17:42 - 2019-01-31 13:26 - 000000004 _____ () C:\ProgramData\lock.dat
2018-12-20 17:42 - 2018-12-20 17:42 - 000000008 _____ () C:\ProgramData\ts.dat
2019-01-18 15:57 - 2019-01-18 15:57 - 000004608 _____ () C:\Users\flipp\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-12-13 17:02 - 2018-12-13 17:02 - 006161408 _____ () C:\Users\flipp\AppData\Local\dump007.dat
1601-01-03 21:26 - 1601-01-03 21:26 - 000178688 ____N (Microsoft Corporation) C:\Users\flipp\AppData\Local\sEoWcJYdYjE.exe
2018-12-13 15:12 - 2018-12-13 15:12 - 000000003 _____ () C:\Users\flipp\AppData\Local\wbem.ini

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\dllhost.exe => File is digitally signed
C:\Windows\SysWOW64\dllhost.exe => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-08-16 05:15

==================== End of FRST.txt ============================