Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24.10.2018
Ran by Usuario_2 (administrator) on EQUIPO_1 (03-11-2018 17:29:12)
Running from C:\Users\Usuario_2\Desktop
Loaded Profiles: Usuario_2 (Available Profiles: Usuario_2 & Invitado)
Platform: Windows 8.1 (Update) (X64) Language: Español (España, internacional)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe
(Stardock Software, Inc) C:\Program Files (x86)\Stardock\Start8\Start8_64.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Amazon.com Inc.) C:\Users\Usuario_2\AppData\Local\Amazon Drive\AmazonPhotos.exe
(Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7199448 2013-09-05] (Realtek Semiconductor)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [134616 2013-08-19] (Intel Corporation)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [402432 2010-07-22] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3784512 2018-10-24] (Dropbox, Inc.)
HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [153296 2018-05-30] (Panda Security, S.L.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-10-06] (Oracle Corporation)
Winlogon\Notify\ScCertProp: 
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-21-3143936811-926489178-1697714602-1004\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3143936811-926489178-1697714602-1004\...\Run: [Amazon Photos] => C:\Users\Usuario_2\AppData\Local\Amazon Drive\AmazonPhotos.exe [8218280 2018-10-25] (Amazon.com Inc.)
HKU\S-1-5-21-3143936811-926489178-1697714602-1004\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19467544 2018-10-23] (Piriform Ltd)
HKU\S-1-5-21-3143936811-926489178-1697714602-1004\Control Panel\Desktop\\SCRNSAVE.EXE -> 
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\GIGABYTE OC_GURU.lnk [2016-02-25]
ShortcutTarget: GIGABYTE OC_GURU.lnk -> C:\Program Files (x86)\GIGABYTE\GIGABYTE OC_GURU II\OC_GURU.exe (GIGABYTE Technology Co.,Ltd.)
Startup: C:\Users\Usuario_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\611b56ec4869990a84c02d88db3715cf.lnk [2018-07-11]
ShortcutTarget: 611b56ec4869990a84c02d88db3715cf.lnk -> C:\EQUIPO_1\hnxoaruvfs.exe (AutoIt Team)
Startup: C:\Users\Usuario_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2018-04-07]
ShortcutTarget: MEGAsync.lnk -> C:\Users\Usuario_2\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited)
Startup: C:\Users\Usuario_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de pantalla e Inicio rápido de OneNote 2007.lnk [2016-07-31]
ShortcutTarget: Recorte de pantalla e Inicio rápido de OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
BootExecute: 
GroupPolicyScripts: Restriction <==== ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{9DF7745C-9573-48FF-ACE6-48406142DF53}: [NameServer] 87.216.1.65,87.216.1.66

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131405767684028557&GUID=1C7F9FD9-C998-400C-918B-F436C0CEB5B4
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-3143936811-926489178-1697714602-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-es/?ocid=iehp
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\ssv.dll [2018-10-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\jp2ssv.dll [2018-10-23] (Oracle Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Usuario_2\AppData\Roaming\Mozilla\Firefox\Profiles\uxr0oehu.default [2018-11-03]
FF Extension: (Firefox Lightbeam) - C:\Users\Usuario_2\AppData\Roaming\Mozilla\Firefox\Profiles\uxr0oehu.default\Extensions\jid1-F9UJ2thwoAm5gQ@jetpack.xpi [2018-02-18]
FF Extension: (Adblock Plus (versión de desarrollo)) - C:\Users\Usuario_2\AppData\Roaming\Mozilla\Firefox\Profiles\uxr0oehu.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2018-11-03]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_31_0_0_122.dll [2018-10-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_31_0_0_122.dll [2018-10-09] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-08-19] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-08-19] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\dtplugin\npDeployJava1.dll [2018-10-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.191.2 -> C:\Program Files (x86)\Java\jre1.8.0_191\bin\plugin2\npjp2.dll [2018-10-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-09-25] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-09-25] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-09-20] (Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=orcl_default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://es.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default [2018-11-03]
CHR Extension: (Presentaciones de Google) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-28]
CHR Extension: (Google Docs) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-28]
CHR Extension: (YouTube) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-29]
CHR Extension: (Búsqueda de Google) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-29]
CHR Extension: (Hojas de cálculo de Google) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-28]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-10-01]
CHR Extension: (Gmail) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-05]
CHR Extension: (Chrome Media Router) - C:\Users\Usuario_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-10-01]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [173472 2017-05-20] (SUPERAntiSpyware.com)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51024 2018-10-24] (Dropbox, Inc.)
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [733696 2013-05-11] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [822232 2013-05-11] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-08-19] (Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes)
R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109024 2017-11-08] (Panda Security, S.L.)
R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [File not signed]
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)
R3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation)
S3 Panda VPN Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\Hydra.Sdk.Windows.Service.exe [320848 2017-11-20] ()
R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [File not signed]
R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48784 2018-05-30] (Panda Security, S.L.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (DEVGURU Co., LTD.)
R2 Start8; C:\Program Files (x86)\Stardock\Start8\Start8Srv.exe [143288 2014-04-04] (Stardock Software, Inc)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 aftap0901; C:\Windows\system32\DRIVERS\aftap0901.sys [48624 2017-11-16] (The OpenVPN Project)
S3 CEDRIVER60; C:\Program Files (x86)\Cheat Engine 6.3\dbk64.sys [64480 2013-06-02] ()
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R3 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-05-14] (Disc Soft Ltd)
S3 massfilter_hs; C:\Windows\system32\drivers\massfilter_hs.sys [20232 2012-06-20] (HandSet Incorporated)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [99288 2013-08-19] (Intel Corporation)
R1 NNSALPC; C:\Windows\System32\DRIVERS\NNSAlpc.sys [107848 2017-11-03] (Panda Security, S.L.)
R1 NNSHTTP; C:\Windows\System32\DRIVERS\NNSHttp.sys [212360 2017-11-03] (Panda Security, S.L.)
R1 NNSHTTPS; C:\Windows\System32\DRIVERS\NNSHttps.sys [121232 2017-11-03] (Panda Security, S.L.)
R1 NNSIDS; C:\Windows\System32\DRIVERS\NNSIds.sys [126352 2017-11-03] (Panda Security, S.L.)
R1 NNSNAHSL; C:\Windows\system32\DRIVERS\NNSNAHSL.sys [99512 2017-09-26] (Panda Security, S.L.)
R1 NNSPICC; C:\Windows\System32\DRIVERS\NNSPicc.sys [118136 2017-11-03] (Panda Security, S.L.)
R1 NNSPIHSW; C:\Windows\System32\DRIVERS\NNSPihsw.sys [91392 2017-11-03] (Panda Security, S.L.)
R1 NNSPOP3; C:\Windows\System32\DRIVERS\NNSPop3.sys [135640 2017-11-03] (Panda Security, S.L.)
R1 NNSPROT; C:\Windows\System32\DRIVERS\NNSProt.sys [337520 2017-11-03] (Panda Security, S.L.)
R1 NNSPRV; C:\Windows\System32\DRIVERS\NNSPrv.sys [249976 2017-11-03] (Panda Security, S.L.)
R1 NNSSMTP; C:\Windows\System32\DRIVERS\NNSSmtp.sys [123304 2017-11-03] (Panda Security, S.L.)
R1 NNSSTRM; C:\Windows\System32\DRIVERS\NNSStrm.sys [281912 2017-11-03] (Panda Security, S.L.)
R1 NNSTLSC; C:\Windows\System32\DRIVERS\NNSTlsc.sys [125840 2017-11-03] (Panda Security, S.L.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31168 2018-03-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [59240 2017-12-15] (NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [65792 2018-07-30] (NVIDIA Corporation)
R2 PSINAflt; C:\Windows\System32\DRIVERS\PSINAflt.sys [190552 2017-11-08] (Panda Security, S.L.)
R2 PSINFile; C:\Windows\System32\DRIVERS\PSINFile.sys [153176 2018-01-23] (Panda Security, S.L.)
R1 PSINKNC; C:\Windows\System32\DRIVERS\psinknc.sys [206424 2018-01-30] (Panda Security, S.L.)
R2 PSINProc; C:\Windows\System32\DRIVERS\PSINProc.sys [146976 2017-11-06] (Panda Security, S.L.)
R2 PSINProt; C:\Windows\System32\DRIVERS\PSINProt.sys [159312 2017-11-06] (Panda Security, S.L.)
R2 PSINReg; C:\Windows\System32\DRIVERS\PSINReg.sys [129448 2017-11-06] (Panda Security, S.L.)
R3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [72280 2017-05-22] (Panda Security, S.L.)
U5 RTSPER; C:\Windows\System32\Drivers\RTSPER.sys [777944 2016-01-13] (Realsil Semiconductor Corporation)
U5 RTSUER; C:\Windows\System32\Drivers\RTSUER.sys [413912 2015-12-22] (Realsil Semiconductor Corporation)
S3 S3XXx64; C:\Windows\system32\DRIVERS\S3XXx64.sys [73856 2015-02-17] (Identiv)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
U3 aswbdisk; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-03 17:29 - 2018-11-03 17:29 - 000021436 _____ C:\Users\Usuario_2\Desktop\FRST.txt
2018-11-03 17:27 - 2018-11-03 17:27 - 002414592 _____ (Farbar) C:\Users\Usuario_2\Desktop\FRST64.exe
2018-11-03 16:49 - 2018-11-03 16:49 - 000010331 _____ C:\Users\Usuario_2\Desktop\a.txt
2018-11-03 16:38 - 2018-11-03 16:02 - 000004312 _____ C:\Users\Usuario_2\Desktop\ZHPCleaner-[R]-03112018-16_02_57.txt
2018-11-03 16:37 - 2018-11-03 16:01 - 000005379 _____ C:\Users\Usuario_2\Desktop\ZHPCleaner-[S]-03112018-16_01_45.txt
2018-11-03 16:28 - 2018-11-03 16:28 - 000000842 _____ C:\Users\Usuario_2\Desktop\ZHPCleaner.lnk
2018-11-03 16:27 - 2018-11-03 16:27 - 003285376 _____ C:\Users\Usuario_2\Desktop\ZHPCleaner.exe
2018-11-03 16:23 - 2018-11-03 16:23 - 000012286 _____ C:\Users\Usuario_2\Documents\cc_20181103_162312.reg
2018-11-03 16:23 - 2018-11-03 16:23 - 000000578 _____ C:\Users\Usuario_2\Documents\cc_20181103_162324.reg
2018-11-03 16:22 - 2018-11-03 16:23 - 000317150 _____ C:\Users\Usuario_2\Documents\cc_20181103_162255.reg
2018-11-03 16:06 - 2017-05-22 11:29 - 000072280 _____ (Panda Security, S.L.) C:\Windows\system32\Drivers\PSKMAD.sys
2018-11-03 15:57 - 2018-11-03 16:33 - 000000000 ____D C:\Users\Usuario_2\AppData\Roaming\ZHP
2018-11-03 15:57 - 2018-11-03 15:57 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\ZHP
2018-11-03 10:51 - 2018-11-03 10:51 - 000001457 _____ C:\Users\Usuario_2\Desktop\AdwCleaner[S02].txt
2018-11-02 20:18 - 2018-11-02 20:18 - 000001528 _____ C:\Users\Usuario_2\Desktop\mbab.txt
2018-11-02 20:02 - 2018-11-02 20:02 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\mbamtray
2018-11-02 20:01 - 2018-11-03 13:57 - 000152688 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2018-11-02 20:01 - 2018-11-02 20:01 - 000001883 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2018-11-02 20:01 - 2018-11-02 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2018-11-02 19:56 - 2018-11-02 19:56 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\mbam
2018-10-27 18:50 - 2018-10-27 18:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2018-10-27 18:49 - 2018-10-27 18:49 - 000001166 _____ C:\Users\Usuario_2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Photos.lnk
2018-10-27 18:48 - 2018-10-27 18:49 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\Amazon Drive
2018-10-24 12:53 - 2018-10-24 12:53 - 000051024 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2018-10-24 12:53 - 2018-10-24 12:53 - 000047768 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2018-10-24 12:53 - 2018-10-24 12:53 - 000047768 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2018-10-24 12:53 - 2018-10-24 12:53 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2018-10-23 01:07 - 2018-10-23 01:07 - 000011258 _____ C:\Users\Usuario_2\Documents\cc_20181023_020710.reg
2018-10-09 22:19 - 2018-09-18 06:52 - 025735168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2018-10-09 22:19 - 2018-09-18 06:25 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2018-10-09 22:19 - 2018-09-18 06:14 - 005779456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2018-10-09 22:19 - 2018-09-18 06:14 - 000794624 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2018-10-09 22:19 - 2018-09-18 05:49 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2018-10-09 22:19 - 2018-09-18 05:42 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2018-10-09 22:19 - 2018-09-18 05:39 - 015283712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2018-10-09 22:19 - 2018-09-18 05:35 - 004510720 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2018-10-09 22:19 - 2018-09-18 05:33 - 020278784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2018-10-09 22:19 - 2018-09-18 05:23 - 001555968 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2018-10-09 22:19 - 2018-09-18 05:21 - 000497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2018-10-09 22:19 - 2018-09-18 05:13 - 000662016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2018-10-09 22:19 - 2018-09-18 05:10 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2018-10-09 22:19 - 2018-09-18 04:57 - 004494848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2018-10-09 22:19 - 2018-09-18 04:55 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2018-10-09 22:19 - 2018-09-18 04:53 - 013679616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2018-10-09 22:19 - 2018-09-18 04:51 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2018-10-09 22:19 - 2018-09-18 04:37 - 004037632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2018-10-09 22:19 - 2018-09-18 04:34 - 001330176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2018-10-09 22:19 - 2018-09-18 04:31 - 000710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2018-10-09 22:19 - 2018-09-18 01:26 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2018-10-09 22:19 - 2018-09-11 17:38 - 004168704 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2018-10-09 22:19 - 2018-09-08 21:53 - 002532552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2018-10-09 22:19 - 2018-09-08 19:40 - 007372224 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2018-10-09 22:19 - 2018-09-08 19:40 - 002014136 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2018-10-09 22:19 - 2018-09-08 19:33 - 001368776 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2018-10-09 22:19 - 2018-09-08 19:22 - 001737696 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2018-10-09 22:19 - 2018-09-08 18:58 - 001902936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2018-10-09 22:19 - 2018-09-08 16:43 - 001085440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2018-10-09 22:19 - 2018-09-08 03:12 - 001549040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2018-10-09 22:19 - 2018-09-08 03:12 - 000388336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2018-10-09 22:19 - 2018-09-07 18:39 - 002902528 _____ (Microsoft Corporation) C:\Windows\system32\themeui.dll
2018-10-09 22:19 - 2018-09-01 17:43 - 000401920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2018-10-09 22:19 - 2018-08-29 14:51 - 002451800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2018-10-09 22:19 - 2018-08-26 04:13 - 015441920 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2018-10-09 22:19 - 2018-08-26 04:08 - 013321728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2018-10-09 22:19 - 2018-08-14 20:04 - 004171264 _____ (Gracenote, Inc.) C:\Windows\SysWOW64\gnsdk_fp.dll
2018-10-09 22:19 - 2018-08-12 21:25 - 000149632 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2018-10-09 22:19 - 2018-08-12 18:07 - 000179200 _____ (Microsoft Corporation) C:\Windows\system32\itss.dll
2018-10-09 22:19 - 2018-08-12 17:32 - 000151040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\itss.dll
2018-10-09 22:19 - 2018-08-12 15:21 - 001633008 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2018-10-09 22:19 - 2018-08-09 14:16 - 004876800 _____ (Gracenote, Inc.) C:\Windows\system32\gnsdk_fp.dll
2018-10-09 22:18 - 2018-09-08 19:22 - 001676152 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2018-10-09 22:18 - 2018-09-08 19:22 - 001536216 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2018-10-09 22:18 - 2018-09-08 19:22 - 001500528 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2018-10-09 22:18 - 2018-09-08 19:22 - 001371448 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe
2018-10-09 22:18 - 2018-09-07 17:51 - 002849280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\themeui.dll
2018-10-09 22:18 - 2018-08-26 05:07 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2018-10-09 22:18 - 2018-08-26 05:07 - 000004608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2018-10-09 08:27 - 2018-10-09 08:27 - 000002903 _____ C:\Windows\SysWOW64\servers.def.vpx
2018-10-08 22:04 - 2018-09-25 18:59 - 000131952 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2018-10-08 22:01 - 2018-09-26 14:44 - 035296816 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 029973104 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 015562680 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 012935304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 001159720 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000956840 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000907480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000547320 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000465344 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000420144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000182552 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000170144 _____ (NVIDIA Corporation) C:\Windows\system32\nvdlistx.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000165088 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000160384 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000148464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvdlist.dll
2018-10-08 22:01 - 2018-09-26 14:44 - 000142584 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2018-10-08 22:01 - 2018-09-26 14:43 - 020893648 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2018-10-08 22:01 - 2018-09-26 14:43 - 019705368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2018-10-08 22:01 - 2018-09-26 14:43 - 017399936 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2018-10-08 22:01 - 2018-09-26 14:43 - 016984336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2018-10-08 22:01 - 2018-09-26 11:46 - 000978096 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2018-10-08 22:01 - 2018-09-26 11:46 - 000978096 _____ C:\Windows\system32\vulkan-1.dll
2018-10-08 22:01 - 2018-09-26 11:46 - 000844976 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2018-10-08 22:01 - 2018-09-26 11:46 - 000844976 _____ C:\Windows\SysWOW64\vulkan-1.dll
2018-10-08 22:01 - 2018-09-26 11:46 - 000267952 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2018-10-08 22:01 - 2018-09-26 11:46 - 000267952 _____ C:\Windows\system32\vulkaninfo.exe
2018-10-08 22:01 - 2018-09-26 11:46 - 000243376 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2018-10-08 22:01 - 2018-09-26 11:46 - 000243376 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2018-10-08 22:01 - 2018-09-26 11:45 - 048343456 _____ (NVIDIA Corp.) C:\Windows\system32\nvoptix.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 039413672 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 029361608 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 020021296 _____ (NVIDIA Corporation) C:\Windows\system32\nvrtum64.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 019898800 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2018-10-08 22:01 - 2018-09-26 11:45 - 001444912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 001115080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 000629008 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2018-10-08 22:01 - 2018-09-26 11:45 - 000518928 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 040439016 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 035312760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 004393320 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 003925736 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 002018048 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6441170.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 001941680 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 001467808 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6441170.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 001457408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2018-10-08 22:01 - 2018-09-26 11:44 - 000489360 _____ (NVIDIA Corporation) C:\Windows\system32\nvcbl64.dll
2018-10-08 22:01 - 2018-09-25 21:12 - 000218968 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2018-10-08 22:01 - 2018-09-25 21:12 - 000038232 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2018-10-08 22:01 - 2018-09-25 21:12 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json
2018-10-08 22:01 - 2018-09-25 21:12 - 000000669 _____ C:\Windows\system32\nv-vk64.json

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-11-03 17:29 - 2018-02-11 17:01 - 000000000 ____D C:\FRST
2018-11-03 17:27 - 2016-12-08 12:41 - 000000000 ____D C:\Users\Usuario_2\AppData\LocalLow\Mozilla
2018-11-03 16:50 - 2014-04-12 12:20 - 000000000 ____D C:\ProgramData\NVIDIA
2018-11-03 16:43 - 2015-06-15 14:33 - 000001016 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2018-11-03 16:30 - 2014-04-12 12:20 - 001862132 _____ C:\Windows\system32\PerfStringBackup.INI
2018-11-03 16:30 - 2013-08-23 00:34 - 000818070 _____ C:\Windows\system32\perfh00A.dat
2018-11-03 16:30 - 2013-08-23 00:34 - 000170752 _____ C:\Windows\system32\perfc00A.dat
2018-11-03 16:30 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2018-11-03 16:29 - 2014-05-09 10:37 - 000003596 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3143936811-926489178-1697714602-1004
2018-11-03 16:24 - 2017-07-05 16:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-11-03 16:24 - 2015-06-15 14:33 - 000001012 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2018-11-03 16:24 - 2014-04-16 18:25 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2018-11-03 16:24 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-11-03 16:21 - 2017-10-28 16:17 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-11-03 16:21 - 2015-12-22 11:54 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\CrashDumps
2018-11-03 16:21 - 2014-10-21 22:56 - 000000834 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-11-03 16:21 - 2014-10-21 22:56 - 000000000 ____D C:\Program Files\CCleaner
2018-11-03 16:16 - 2016-02-25 17:05 - 000001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2018-11-02 20:59 - 2018-01-09 00:04 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\ESET
2018-11-02 20:00 - 2017-10-07 15:46 - 000000000 ____D C:\Program Files\Malwarebytes
2018-11-02 20:00 - 2014-05-07 14:34 - 000000000 ____D C:\ProgramData\Malwarebytes
2018-11-02 19:58 - 2013-08-22 14:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2018-10-27 18:55 - 2014-04-29 11:46 - 000002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-10-27 18:55 - 2014-04-29 11:46 - 000002161 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-10-27 18:53 - 2014-04-30 09:18 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\NVIDIA
2018-10-27 18:51 - 2015-02-02 10:32 - 000003994 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{54504F01-9CB9-4ABE-9DEC-373EF3A57CE3}
2018-10-27 18:50 - 2015-06-15 14:32 - 000000000 ____D C:\Program Files (x86)\Dropbox
2018-10-25 21:27 - 2015-12-18 22:44 - 000007598 _____ C:\Users\Usuario_2\AppData\Local\resmon.resmoncfg
2018-10-25 21:27 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\rescache
2018-10-23 21:47 - 2015-09-06 23:02 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2018-10-23 00:20 - 2016-03-25 01:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-10-23 00:20 - 2014-04-28 19:48 - 000000000 ____D C:\Program Files (x86)\Java
2018-10-23 00:19 - 2016-03-25 01:36 - 000098680 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-10-20 15:25 - 2013-08-22 15:44 - 005043728 _____ C:\Windows\system32\FNTCACHE.DAT
2018-10-16 21:39 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2018-10-16 21:33 - 2014-04-16 18:06 - 000000000 ____D C:\Windows\system32\MRT
2018-10-16 21:25 - 2014-04-16 18:06 - 136745976 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2018-10-09 21:43 - 2018-03-13 14:56 - 000004500 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-10-09 21:43 - 2014-04-21 10:51 - 000004296 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-10-09 21:43 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-10-09 21:43 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Macromed
2018-10-09 08:28 - 2018-07-03 14:06 - 000000000 ____D C:\Users\Usuario_2\AppData\Local\AVAST Software
2018-10-09 08:28 - 2018-03-25 00:45 - 000000000 ____D C:\ProgramData\AVAST Software
2018-10-09 08:25 - 2015-02-01 14:20 - 000000000 ____D C:\Users\Invitado
2018-10-09 08:21 - 2014-04-30 09:18 - 000000000 ____D C:\Users\Usuario_2
2018-10-09 08:21 - 2014-04-29 11:40 - 000000000 ____D C:\Program Files\SUPERAntiSpyware
2018-10-09 00:29 - 2018-07-03 14:05 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2018-10-08 22:07 - 2014-04-12 12:20 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2018-10-08 22:04 - 2014-09-19 22:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2018-10-08 22:04 - 2014-04-12 12:20 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2018-10-06 15:14 - 2016-02-20 15:08 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2018-10-06 15:14 - 2016-02-20 12:52 - 000000000 ____D C:\Program Files\Rockstar Games

==================== Files in the root of some directories =======

2016-04-06 00:27 - 2016-04-06 00:27 - 000000132 _____ () C:\Users\Usuario_2\AppData\Roaming\Adobe PNG Format CS5 Prefs
2015-03-25 23:03 - 2015-04-12 19:09 - 000007859 _____ () C:\Users\Usuario_2\AppData\Roaming\pcouffin.cat
2015-03-25 23:03 - 2015-04-12 19:09 - 000001167 _____ () C:\Users\Usuario_2\AppData\Roaming\pcouffin.inf
2015-03-25 23:03 - 2015-04-12 19:09 - 000000055 _____ () C:\Users\Usuario_2\AppData\Roaming\pcouffin.log
2015-03-25 23:03 - 2015-04-12 19:09 - 000082816 _____ (VSO Software) C:\Users\Usuario_2\AppData\Roaming\pcouffin.sys
2015-12-18 22:44 - 2018-10-25 21:27 - 000007598 _____ () C:\Users\Usuario_2\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-10-26 00:53

==================== End of FRST.txt ============================