Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 28.04.2019 Ran by jofue (administrator) on DESKTOP-EQB5PBG (28-04-2019 14:59:24) Running from C:\Users\jofue\Downloads Loaded Profiles: jofue & (Available Profiles: jofue) Platform: Windows 10 Home Version 1803 17134.706 (X64) Language: Español (España, internacional) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.18112.20010.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18112.14311.0_x64__8wekyb3d8bbwe\Video.UI.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files (x86)\AVAST Software\Browser\Update\1.4.154.333\AvastBrowserCrashHandler64.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.7\GoogleCrashHandler64.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_17.10314.31700.1000_x64__8wekyb3d8bbwe\Office16\OfficeHubTaskHost.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.38.138.0_x64__kzf8qxf38zg5c\SkypeBridge\SkypeBridge.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedlauncher.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\rempl\sedsvc.exe (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [638872 2018-04-12] (Microsoft Windows -> Microsoft Corporation) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261000 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\nvspcap64.dll [1767712 2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] HKU\S-1-5-21-3180699792-3532045423-3535131539-1001\...\Run: [AvastBrowserAutoLaunch_7722D7EF5BD7C5DEC62D2D914B66BCD3] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1948152 2019-04-05] (AVAST Software s.r.o. -> AVAST Software) HKU\S-1-5-21-3180699792-3532045423-3535131539-1001\...\Run: [Spotify] => C:\Users\jofue\AppData\Roaming\Spotify\Spotify.exe [26154216 2019-01-31] (Spotify AB -> Spotify Ltd) HKU\S-1-5-21-3180699792-3532045423-3535131539-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3180699792-3532045423-3535131539-1001\...\MountPoints2: {0fbdf6ee-9cec-11e8-bb53-806e6f6e6963} - "E:\AutoRunMorrowind.exe" HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901\...\Run: [AvastBrowserAutoLaunch_7722D7EF5BD7C5DEC62D2D914B66BCD3] => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1948152 2019-04-05] (AVAST Software s.r.o. -> AVAST Software) HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901\...\Run: [Spotify] => C:\Users\jofue\AppData\Roaming\Spotify\Spotify.exe [26154216 2019-01-31] (Spotify AB -> Spotify Ltd) HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901\...\MountPoints2: {0fbdf6ee-9cec-11e8-bb53-806e6f6e6963} - "E:\AutoRunMorrowind.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.108\Installer\chrmstp.exe [2019-04-25] (Google LLC -> Google Inc.) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A8504530-742B-42BC-895D-2BAD6406F698}] -> C:\Program Files (x86)\AVAST Software\Browser\Application\73.0.1258.87\Installer\chrmstp.exe [2019-04-12] (AVAST Software s.r.o. -> AVAST Software) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {143EF32A-EC54-4217-99A7-568937B73A04} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1195544 2018-12-16] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Task: {1E7A850D-06C1-48AD-888A-895E07FF7C3A} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-08-11] (AVAST Software s.r.o. -> AVAST Software) Task: {288120D1-C844-43AE-91B9-4D761DF70DE9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-08-11] (Google Inc -> Google Inc.) Task: {361D68CD-6D6A-4DFE-AFC3-4F8AF91EF1B7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136056 2019-01-02] (HP Inc. -> HP Inc.) Task: {4A19E5AD-D543-4A0A-84E7-30C63785CE68} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [652664 2019-04-17] (HP Inc. -> HP Inc.) Task: {652A78A6-2A36-46AA-B130-828D46F475B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [219512 2018-12-24] (HP Inc. -> HP Inc.) Task: {6A34991A-518A-4EF8-A504-6919B0895218} - System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1948152 2019-04-05] (AVAST Software s.r.o. -> AVAST Software) Task: {6CC86169-B5EF-40E9-A9B2-632A6115621F} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2016-11-07] (HP Inc. -> HP Inc.) Task: {77529AB6-F266-43A8-8625-3A3216F9699D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1488248 2018-12-10] (HP Inc. -> HP Inc.) Task: {99AC4D5B-E114-4BAC-8748-4818FD235F2F} - System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) => C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe [1948152 2019-04-05] (AVAST Software s.r.o. -> AVAST Software) Task: {9B8A81C8-8724-4574-8E29-CED44A472920} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-08-11] (Google Inc -> Google Inc.) Task: {B6D48624-DE25-47E5-AF69-EAB9B2263CED} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH83T5M0VM => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1073528 2019-04-02] (HP Inc. -> HP Inc.) Task: {BD90B261-1135-431D-99EB-458CA8998F35} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16509040 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd) Task: {D46584AC-6E8E-4ECB-A1E0-78FD595BA184} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1073528 2019-04-02] (HP Inc. -> HP Inc.) Task: {DC17179B-A720-41BB-8CA4-156DC8CCCBFB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd) Task: {E8E9E638-511A-4798-8516-7BA4BF95028A} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2380088 2019-04-09] (AVAST Software s.r.o. -> AVAST Software) Task: {EC455FFE-0F96-42D3-B701-70B8A89A704B} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2925960 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) Task: {EE437354-7289-413B-8B07-553964106A6D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1488248 2018-12-10] (HP Inc. -> HP Inc.) Task: {FAA3D944-C3E1-45EF-BC74-9F684B1BB8BA} - System32\Tasks\HPCeeScheduleForjofue => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97656 2018-09-11] (HP Inc. -> HP Inc.) Task: {FB5F4AC8-2D29-413B-A509-599E0F3BFE2B} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-08-11] (AVAST Software s.r.o. -> AVAST Software) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\HPCeeScheduleForjofue.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{8be7dc8e-7d45-4ebe-bdeb-0cac327f74d6}: [DhcpNameServer] 192.168.1.1 Internet Explorer: ================== SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF DefaultProfile: b758nzkp.default FF ProfilePath: C:\Users\jofue\AppData\Roaming\Mozilla\Firefox\Profiles\b758nzkp.default [2019-04-28] FF Homepage: Mozilla\Firefox\Profiles\b758nzkp.default -> hxxps://www.malwarebytes.org/restorebrowser/ FF Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\jofue\AppData\Roaming\Mozilla\Firefox\Profiles\b758nzkp.default\Extensions\sp@avast.com.xpi [2019-04-28] FF Extension: (Avast Online Security) - C:\Users\jofue\AppData\Roaming\Mozilla\Firefox\Profiles\b758nzkp.default\Extensions\wrc@avast.com.xpi [2018-08-11] FF Extension: (Telemetry coverage) - C:\Users\jofue\AppData\Roaming\Mozilla\Firefox\Profiles\b758nzkp.default\features\{3778d195-155c-4706-9f7e-7e8c42ea68d4}\telemetry-coverage-bug1487578@mozilla.org.xpi [2018-11-02] [Legacy] FF SearchPlugin: C:\Users\jofue\AppData\Roaming\Mozilla\Firefox\Profiles\b758nzkp.default\searchplugins\bing-lavasoft-ff59.xml [2018-10-22] FF HKU\S-1-5-21-3180699792-3532045423-3535131539-1001\...\Firefox\Extensions: [acewebextension@acestream.org] - C:\Users\jofue\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension.xpi => not found FF HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901\...\Firefox\Extensions: [acewebextension@acestream.org] - C:\Users\jofue\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension.xpi => not found FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed] FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-27] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.7\npGoogleUpdate3.dll [2019-03-27] (Google Inc -> Google LLC) FF Plugin-x32: @videolan.org/vlc,version=3.0.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-03-25] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-3180699792-3532045423-3535131539-1001: @acestream.net/acestreamplugin,version=3.1.1 -> C:\Users\jofue\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File] FF Plugin HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901: @acestream.net/acestreamplugin,version=3.1.1 -> C:\Users\jofue\AppData\Roaming\ACEStream\player\npace_plugin.dll [No File] Chrome: ======= CHR HomePage: Default -> hxxp://www.google.com/ CHR StartupUrls: Default -> "hxxps://www.google.es/" CHR Profile: C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default [2019-04-28] CHR Extension: (Presentaciones) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-08-11] CHR Extension: (Documentos) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-08-11] CHR Extension: (Google Drive) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-08-11] CHR Extension: (YouTube) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-08-11] CHR Extension: (Dropbox para Gmail) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpdmhfocilnekecfjgimjdeckachfbec [2019-02-10] CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2019-01-29] CHR Extension: (Hojas de cálculo) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-08-11] CHR Extension: (Documentos de Google sin conexión) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-08-11] CHR Extension: (Avast Online Security) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2019-04-25] CHR Extension: (Bleaner) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\lkadffjmnaiokkdncgdlecdegajoiemi [2019-04-28] CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-08-11] CHR Extension: (Gmail) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-23] CHR Extension: (Chrome Media Router) - C:\Users\jofue\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-25] CHR Profile: C:\Users\jofue\AppData\Local\Google\Chrome\User Data\System Profile [2019-04-28] CHR HKU\S-1-5-21-3180699792-3532045423-3535131539-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-3180699792-3532045423-3535131539-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04282019123419901\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) S2 avast; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-08-11] (AVAST Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) S3 avastm; C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [164984 2018-08-11] (AVAST Software s.r.o. -> AVAST Software) S3 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [57504 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation) R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [347512 2018-12-06] (HP Inc. -> HP Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation) S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4413440 2019-03-14] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [107160 2019-02-16] (Microsoft Corporation -> Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37104 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205400 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [254128 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196000 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320624 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [57888 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R0 aswElam; C:\Windows\System32\drivers\aswElam.sys [15488 2019-01-18] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [257832 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [166848 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1031000 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [476776 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [220640 2019-04-13] (AVAST Software s.r.o. -> AVAST Software) R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [385848 2019-04-22] (AVAST Software s.r.o. -> AVAST Software) S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [198512 2019-04-22] (Malwarebytes Corporation -> Malwarebytes) S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [127136 2019-04-28] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [73912 2019-04-28] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [274416 2019-04-28] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [114040 2019-04-28] (Malwarebytes Corporation -> Malwarebytes) R3 MTsensor; C:\Windows\system32\DRIVERS\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> ) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [56384 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2018-04-12] (Microsoft Windows -> Realtek ) S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44616 2018-04-12] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [331680 2018-04-12] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [44032 2018-04-12] (Microsoft Windows -> Microsoft Corporation) S3 xhunter1; C:\Windows\xhunter1.sys [74552 2019-04-03] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-04-28 14:59 - 2019-04-28 15:01 - 000029122 _____ C:\Users\jofue\Downloads\FRST.txt 2019-04-28 14:59 - 2019-04-28 14:59 - 000000000 ____D C:\FRST 2019-04-28 14:57 - 2019-04-28 14:58 - 002429952 _____ (Farbar) C:\Users\jofue\Downloads\FRST64.exe 2019-04-28 12:35 - 2019-04-28 12:35 - 000073912 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2019-04-28 12:34 - 2019-04-28 12:34 - 000274416 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2019-04-28 12:34 - 2019-04-28 12:34 - 000127136 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2019-04-28 12:34 - 2019-04-28 12:34 - 000114040 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2019-04-27 17:31 - 2019-04-27 17:31 - 000645370 _____ C:\Users\jofue\Downloads\1131.pptx 2019-04-27 17:18 - 2019-04-27 17:24 - 000645370 _____ C:\Users\jofue\Downloads\ID_1131.pptx 2019-04-27 17:17 - 2019-04-27 17:32 - 000626417 _____ C:\Users\jofue\Downloads\ID_1212.pptx 2019-04-27 16:55 - 2019-04-27 17:37 - 001237974 _____ C:\Users\jofue\Downloads\PIIC_malaga_ID_860.pptx 2019-04-27 16:25 - 2019-04-27 16:25 - 000229756 _____ C:\Users\jofue\Downloads\Diptic anunciador XXII Jornada 2019 (2).pdf 2019-04-22 20:01 - 2019-04-22 20:01 - 000229756 _____ C:\Users\jofue\Downloads\Diptic anunciador XXII Jornada 2019 (1).pdf 2019-04-22 20:00 - 2019-04-22 20:01 - 000229756 _____ C:\Users\jofue\Downloads\Diptic anunciador XXII Jornada 2019.pdf 2019-04-22 17:57 - 2019-04-22 17:57 - 007665272 _____ (ESET spol. s r.o.) C:\Users\jofue\Downloads\esetonlinescanner_esn (1).exe 2019-04-22 17:27 - 2019-04-22 17:27 - 000000000 ____D C:\Users\jofue\AppData\Local\NVIDIA Corporation 2019-04-22 17:25 - 2016-11-14 14:30 - 001767712 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2019-04-22 17:25 - 2016-11-14 14:30 - 001756560 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2019-04-22 17:25 - 2016-11-14 14:30 - 001377752 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2019-04-22 17:25 - 2016-11-14 14:30 - 001316136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2019-04-22 17:25 - 2016-11-14 14:30 - 000112168 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2019-04-22 17:25 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll 2019-04-22 17:25 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll 2019-04-22 17:25 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll 2019-04-22 17:25 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll 2019-04-22 17:25 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll 2019-04-22 17:25 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll 2019-04-22 17:24 - 2019-04-22 17:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2019-04-22 17:24 - 2019-04-22 17:24 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies 2019-04-22 17:23 - 2016-11-14 11:45 - 000615992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2019-04-22 17:21 - 2019-04-22 17:22 - 000000000 ____D C:\Windows\LastGood.Tmp 2019-04-22 17:19 - 2016-11-14 14:30 - 031523384 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 024208440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 023000000 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 017559384 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 016128720 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 015301056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 014497712 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 013915720 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 013826968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 011270656 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 011208312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 004253240 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 003995192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 002822568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 001908272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434201.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 001557552 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434201.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000951232 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000913856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000909760 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000876480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000114744 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000104512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2019-04-22 17:19 - 2016-11-14 14:30 - 000056384 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2019-04-22 17:02 - 2019-04-22 17:03 - 306673592 _____ (NVIDIA Corporation) C:\Users\jofue\Downloads\342.01-desktop-win10-64bit-international.exe 2019-04-22 16:52 - 2019-04-22 16:52 - 306673592 _____ (NVIDIA Corporation) C:\Users\jofue\Downloads\342.01-desktop-win8-win7-winvista-64bit-international.exe 2019-04-22 16:22 - 2019-04-22 16:27 - 000000000 ____D C:\AdwCleaner 2019-04-22 16:22 - 2019-04-22 16:22 - 007025360 _____ (Malwarebytes) C:\Users\jofue\Downloads\adwcleaner_7.3.exe 2019-04-22 16:06 - 2019-04-28 12:33 - 000000000 ____D C:\Users\jofue\AppData\Local\ESET 2019-04-22 16:05 - 2019-04-22 16:05 - 007665272 _____ (ESET spol. s r.o.) C:\Users\jofue\Downloads\esetonlinescanner_esn.exe 2019-04-22 15:45 - 2019-04-27 15:31 - 000002988 _____ C:\Windows\System32\Tasks\CCleaner Update 2019-04-22 15:45 - 2019-04-27 15:31 - 000002238 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2019-04-22 15:45 - 2019-04-22 15:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2019-04-22 15:45 - 2019-04-22 15:45 - 000000000 ____D C:\Program Files\CCleaner 2019-04-22 15:38 - 2019-04-22 15:38 - 001780224 _____ (Bleeping Computer, LLC) C:\Users\jofue\Downloads\rkill-unsigned.exe 2019-04-22 15:38 - 2019-04-22 15:38 - 000000000 ____D C:\Users\jofue\AppData\Local\mbam 2019-04-22 15:36 - 2019-04-22 15:36 - 000000000 ____D C:\Users\jofue\AppData\Local\mbamtray 2019-04-22 15:35 - 2019-04-22 15:35 - 000198512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2019-04-22 15:34 - 2019-04-22 15:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-04-22 15:34 - 2019-04-22 15:34 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-04-22 15:34 - 2019-04-22 15:34 - 000000000 ____D C:\Program Files\Malwarebytes 2019-04-22 15:34 - 2019-02-01 12:20 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys 2019-04-22 15:34 - 2019-01-08 16:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys 2019-04-22 15:33 - 2019-04-22 15:34 - 062824224 _____ (Malwarebytes ) C:\Users\jofue\Downloads\mb3-setup-consumer-3.7.1.2839-1.0.563-1.0.10240.exe 2019-04-13 19:34 - 2019-04-13 19:33 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2019-04-13 17:22 - 2019-04-13 17:22 - 000057156 _____ C:\Users\jofue\Downloads\programa-de-viaje.pdf 2019-04-12 19:23 - 2019-04-13 19:39 - 000000077 _____ C:\Windows\system32\Drivers\aswSP.sys.sum 2019-04-12 06:55 - 2019-04-12 06:55 - 000003856 _____ C:\Windows\System32\Tasks\Avast Secure Browser Heartbeat Task (Hourly) 2019-04-12 06:55 - 2019-04-12 06:55 - 000003272 _____ C:\Windows\System32\Tasks\Avast Secure Browser Heartbeat Task (Logon) 2019-04-10 00:50 - 2019-04-02 14:38 - 000094008 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2019-04-10 00:50 - 2019-04-02 14:33 - 001634912 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll 2019-04-10 00:50 - 2019-04-02 14:19 - 012730880 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2019-04-10 00:50 - 2019-04-02 14:12 - 003643904 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2019-04-10 00:50 - 2019-04-02 14:11 - 004053504 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll 2019-04-10 00:50 - 2019-04-02 14:11 - 001857536 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll 2019-04-10 00:50 - 2019-04-02 11:25 - 001454648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll 2019-04-10 00:50 - 2019-04-02 11:11 - 011919360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2019-04-10 00:50 - 2019-04-02 11:08 - 002889216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys 2019-04-10 00:50 - 2019-04-02 11:07 - 001586688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll 2019-04-10 00:50 - 2019-04-02 10:36 - 001035256 _____ (Microsoft Corporation) C:\Windows\system32\ApplyTrustOffline.exe 2019-04-10 00:50 - 2019-04-02 10:24 - 000135184 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll 2019-04-10 00:50 - 2019-04-02 10:23 - 001023800 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe 2019-04-10 00:50 - 2019-04-02 10:22 - 001219896 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe 2019-04-10 00:50 - 2019-04-02 10:21 - 007520136 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll 2019-04-10 00:50 - 2019-04-02 10:21 - 002822160 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2019-04-10 00:50 - 2019-04-02 10:21 - 002467536 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll 2019-04-10 00:50 - 2019-04-02 10:21 - 000735680 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2019-04-10 00:50 - 2019-04-02 10:20 - 000412984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys 2019-04-10 00:50 - 2019-04-02 10:19 - 009083704 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2019-04-10 00:50 - 2019-04-02 10:19 - 000793400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys 2019-04-10 00:50 - 2019-04-02 10:19 - 000786080 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll 2019-04-10 00:50 - 2019-04-02 10:01 - 025857536 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2019-04-10 00:50 - 2019-04-02 09:53 - 022717440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2019-04-10 00:50 - 2019-04-02 09:53 - 004384256 _____ (Microsoft Corporation) C:\Windows\system32\EdgeContent.dll 2019-04-10 00:50 - 2019-04-02 09:51 - 003399680 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2019-04-10 00:50 - 2019-04-02 09:50 - 007591936 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2019-04-10 00:50 - 2019-04-02 09:50 - 000808448 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll 2019-04-10 00:50 - 2019-04-02 09:49 - 001307648 _____ (Microsoft Corporation) C:\Windows\system32\MSVPXENC.dll 2019-04-10 00:50 - 2019-04-02 09:49 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\AppXApplicabilityBlob.dll 2019-04-10 00:50 - 2019-04-02 09:48 - 001559552 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll 2019-04-10 00:50 - 2019-04-02 09:48 - 000154112 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll 2019-04-10 00:50 - 2019-04-02 09:47 - 000894464 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll 2019-04-10 00:50 - 2019-04-02 09:46 - 002174976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll 2019-04-10 00:50 - 2019-04-02 09:44 - 002208768 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2019-04-10 00:50 - 2019-04-02 09:43 - 000542720 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2019-04-10 00:50 - 2019-04-02 07:05 - 001989544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll 2019-04-10 00:50 - 2019-04-02 07:04 - 006572120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-04-10 00:50 - 2019-04-02 07:04 - 000604008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll 2019-04-10 00:50 - 2019-04-02 07:04 - 000560600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2019-04-10 00:50 - 2019-04-02 06:56 - 022018048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2019-04-10 00:50 - 2019-04-02 06:50 - 019404800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2019-04-10 00:50 - 2019-04-02 06:43 - 005788160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2019-04-10 00:50 - 2019-04-02 06:43 - 000608768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll 2019-04-10 00:50 - 2019-04-02 06:43 - 000578560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll 2019-04-10 00:50 - 2019-04-02 06:42 - 001295360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll 2019-04-10 00:50 - 2019-04-02 06:40 - 000534016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2019-04-10 00:50 - 2019-03-14 10:37 - 006043496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll 2019-04-10 00:50 - 2019-03-14 10:37 - 002256248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2019-04-10 00:50 - 2019-03-14 10:26 - 007436016 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll 2019-04-10 00:50 - 2019-03-14 10:26 - 002768448 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2019-04-10 00:50 - 2019-03-14 10:26 - 002421048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2019-04-10 00:50 - 2019-03-14 10:20 - 006661632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2019-04-10 00:50 - 2019-03-14 10:19 - 003711488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2019-04-10 00:50 - 2019-03-14 10:19 - 002969600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll 2019-04-10 00:50 - 2019-03-14 10:18 - 005307392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2019-04-10 00:50 - 2019-03-14 10:18 - 000095744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserDataTimeUtil.dll 2019-04-10 00:50 - 2019-03-14 10:17 - 000561152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2019-04-10 00:50 - 2019-03-14 10:16 - 000392192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll 2019-04-10 00:50 - 2019-03-14 10:16 - 000333824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgeIso.dll 2019-04-10 00:50 - 2019-03-14 10:14 - 000251904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll 2019-04-10 00:50 - 2019-03-14 10:13 - 001468416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2019-04-10 00:50 - 2019-03-14 10:13 - 000669696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2019-04-10 00:50 - 2019-03-14 10:01 - 008188928 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2019-04-10 00:50 - 2019-03-14 09:58 - 004708864 _____ (Microsoft Corporation) C:\Windows\system32\cdp.dll 2019-04-10 00:50 - 2019-03-14 09:57 - 004866560 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2019-04-10 00:50 - 2019-03-14 09:56 - 000120320 _____ (Microsoft Corporation) C:\Windows\system32\UserDataTimeUtil.dll 2019-04-10 00:50 - 2019-03-14 09:54 - 002368000 _____ (Microsoft Corporation) C:\Windows\system32\WebRuntimeManager.dll 2019-04-10 00:50 - 2019-03-14 09:53 - 000787968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdiWiFi.sys 2019-04-10 00:50 - 2019-03-14 09:53 - 000726528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2019-04-10 00:50 - 2019-03-14 09:52 - 002909696 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2019-04-10 00:50 - 2019-03-14 09:50 - 001587712 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2019-04-10 00:50 - 2019-03-14 09:50 - 000847360 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2019-04-10 00:50 - 2019-03-14 09:50 - 000776192 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2019-04-10 00:50 - 2019-03-14 09:50 - 000507392 _____ (Microsoft Corporation) C:\Windows\system32\edgeIso.dll 2019-04-10 00:49 - 2019-04-02 14:33 - 000719984 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2019-04-10 00:49 - 2019-04-02 14:19 - 000064000 _____ (Microsoft Corporation) C:\Windows\system32\iemigplugin.dll 2019-04-10 00:49 - 2019-04-02 14:18 - 000059904 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll 2019-04-10 00:49 - 2019-04-02 14:16 - 001030144 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll 2019-04-10 00:49 - 2019-04-02 14:13 - 001605632 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2019-04-10 00:49 - 2019-04-02 14:12 - 001364992 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll 2019-04-10 00:49 - 2019-04-02 14:11 - 001662976 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll 2019-04-10 00:49 - 2019-04-02 14:10 - 000130048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\luafv.sys 2019-04-10 00:49 - 2019-04-02 14:10 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\sxssrv.dll 2019-04-10 00:49 - 2019-04-02 11:25 - 000607960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2019-04-10 00:49 - 2019-04-02 11:11 - 000046080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll 2019-04-10 00:49 - 2019-04-02 11:07 - 004054528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll 2019-04-10 00:49 - 2019-04-02 11:06 - 001470976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll 2019-04-10 00:49 - 2019-04-02 10:22 - 000567592 _____ (Microsoft Corporation) C:\Windows\system32\tcblaunch.exe 2019-04-10 00:49 - 2019-04-02 10:22 - 000076088 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hvservice.sys 2019-04-10 00:49 - 2019-04-02 10:20 - 002719032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2019-04-10 00:49 - 2019-04-02 10:19 - 000713272 _____ (Microsoft Corporation) C:\Windows\system32\MSVideoDSP.dll 2019-04-10 00:49 - 2019-04-02 09:48 - 000310272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys 2019-04-10 00:49 - 2019-04-02 09:44 - 001724416 _____ (Microsoft Corporation) C:\Windows\system32\rdpserverbase.dll 2019-04-10 00:49 - 2019-04-02 09:44 - 001421312 _____ (Microsoft Corporation) C:\Windows\system32\rdpbase.dll 2019-04-10 00:49 - 2019-04-02 07:04 - 000581832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVideoDSP.dll 2019-04-10 00:49 - 2019-04-02 06:41 - 001540096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpserverbase.dll 2019-04-10 00:49 - 2019-04-02 06:41 - 001235968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpbase.dll 2019-04-10 00:49 - 2019-03-16 14:54 - 001008640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MixedRealityCapture.dll 2019-04-10 00:49 - 2019-03-16 11:03 - 000868864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MixedRealityCapture.dll 2019-04-10 00:49 - 2019-03-14 16:52 - 003933296 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2019-04-10 00:49 - 2019-03-14 16:51 - 000157192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe 2019-04-10 00:49 - 2019-03-14 16:33 - 000182784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpdr.sys 2019-04-10 00:49 - 2019-03-14 16:33 - 000082432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storqosflt.sys 2019-04-10 00:49 - 2019-03-14 16:30 - 000675328 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll 2019-04-10 00:49 - 2019-03-14 16:30 - 000440832 _____ (Microsoft Corporation) C:\Windows\system32\LockAppBroker.dll 2019-04-10 00:49 - 2019-03-14 16:29 - 000882688 _____ (Microsoft Corporation) C:\Windows\system32\SmartcardCredentialProvider.dll 2019-04-10 00:49 - 2019-03-14 16:28 - 000560640 _____ (Microsoft Corporation) C:\Windows\system32\dsound.dll 2019-04-10 00:49 - 2019-03-14 16:08 - 003611264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2019-04-10 00:49 - 2019-03-14 15:53 - 000625664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SmartcardCredentialProvider.dll 2019-04-10 00:49 - 2019-03-14 15:53 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LockAppBroker.dll 2019-04-10 00:49 - 2019-03-14 15:52 - 000502784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dsound.dll 2019-04-10 00:49 - 2019-03-14 10:57 - 000611640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys 2019-04-10 00:49 - 2019-03-14 10:56 - 000375096 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pci.sys 2019-04-10 00:49 - 2019-03-14 10:38 - 000380728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2019-04-10 00:49 - 2019-03-14 10:38 - 000090360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mpr.dll 2019-04-10 00:49 - 2019-03-14 10:37 - 001171568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2019-04-10 00:49 - 2019-03-14 10:28 - 000152072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcifs.sys 2019-04-10 00:49 - 2019-03-14 10:27 - 000436024 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2019-04-10 00:49 - 2019-03-14 10:27 - 000097600 _____ (Microsoft Corporation) C:\Windows\system32\mpr.dll 2019-04-10 00:49 - 2019-03-14 10:26 - 001457576 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi 2019-04-10 00:49 - 2019-03-14 10:26 - 001258688 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe 2019-04-10 00:49 - 2019-03-14 10:26 - 001140984 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi 2019-04-10 00:49 - 2019-03-14 10:26 - 001014344 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2019-04-10 00:49 - 2019-03-14 10:26 - 000983424 _____ (Microsoft Corporation) C:\Windows\system32\winresume.exe 2019-04-10 00:49 - 2019-03-14 10:26 - 000481048 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase_enclave.dll 2019-04-10 00:49 - 2019-03-14 10:26 - 000175416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spacedump.sys 2019-04-10 00:49 - 2019-03-14 10:22 - 002700288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2019-04-10 00:49 - 2019-03-14 10:17 - 002258944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll 2019-04-10 00:49 - 2019-03-14 10:17 - 000261632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll 2019-04-10 00:49 - 2019-03-14 10:17 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntlanman.dll 2019-04-10 00:49 - 2019-03-14 10:15 - 000415744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2019-04-10 00:49 - 2019-03-14 10:15 - 000318464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll 2019-04-10 00:49 - 2019-03-14 10:15 - 000102400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\negoexts.dll 2019-04-10 00:49 - 2019-03-14 10:14 - 001070080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll 2019-04-10 00:49 - 2019-03-14 10:14 - 000856576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe 2019-04-10 00:49 - 2019-03-14 10:14 - 000330752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Graphics.Printing.Workflow.dll 2019-04-10 00:49 - 2019-03-14 10:14 - 000138240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\smartscreenps.dll 2019-04-10 00:49 - 2019-03-14 09:58 - 002509824 _____ (Microsoft Corporation) C:\Windows\system32\smartscreen.exe 2019-04-10 00:49 - 2019-03-14 09:58 - 000150016 _____ (Microsoft Corporation) C:\Windows\system32\fcon.dll 2019-04-10 00:49 - 2019-03-14 09:57 - 000106496 _____ (Microsoft Corporation) C:\Windows\system32\NotificationControllerPS.dll 2019-04-10 00:49 - 2019-03-14 09:56 - 003392000 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2019-04-10 00:49 - 2019-03-14 09:56 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll 2019-04-10 00:49 - 2019-03-14 09:55 - 003601920 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Service.dll 2019-04-10 00:49 - 2019-03-14 09:55 - 002739200 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll 2019-04-10 00:49 - 2019-03-14 09:55 - 000528896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\nwifi.sys 2019-04-10 00:49 - 2019-03-14 09:55 - 000458752 _____ (Microsoft Corporation) C:\Windows\system32\cloudAP.dll 2019-04-10 00:49 - 2019-03-14 09:55 - 000069120 _____ (Microsoft Corporation) C:\Windows\system32\ntlanman.dll 2019-04-10 00:49 - 2019-03-14 09:54 - 000566784 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll 2019-04-10 00:49 - 2019-03-14 09:54 - 000354304 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll 2019-04-10 00:49 - 2019-03-14 09:54 - 000279552 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll 2019-04-10 00:49 - 2019-03-14 09:54 - 000273408 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll 2019-04-10 00:49 - 2019-03-14 09:54 - 000118784 _____ (Microsoft Corporation) C:\Windows\system32\negoexts.dll 2019-04-10 00:49 - 2019-03-14 09:54 - 000110592 _____ (Microsoft Corporation) C:\Windows\system32\ngcpopkeysrv.dll 2019-04-10 00:49 - 2019-03-14 09:53 - 000473600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2019-04-10 00:49 - 2019-03-14 09:53 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Graphics.Printing.Workflow.dll 2019-04-10 00:49 - 2019-03-14 09:52 - 000532992 _____ (Microsoft Corporation) C:\Windows\system32\QuietHours.dll 2019-04-10 00:49 - 2019-03-14 09:52 - 000201728 _____ (Microsoft Corporation) C:\Windows\system32\smartscreenps.dll 2019-04-10 00:49 - 2019-03-14 09:51 - 001216000 _____ (Microsoft Corporation) C:\Windows\system32\NotificationController.dll 2019-04-10 00:49 - 2019-03-14 09:51 - 001058304 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe 2019-04-10 00:49 - 2019-03-14 09:51 - 000226304 _____ (Microsoft Corporation) C:\Windows\system32\TetheringMgr.dll 2019-04-10 00:49 - 2019-03-14 09:50 - 001410560 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll 2019-04-10 00:49 - 2019-03-14 09:50 - 000947200 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll 2019-04-10 00:49 - 2019-03-14 09:50 - 000796672 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll 2019-04-10 00:49 - 2019-03-14 09:50 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe 2019-04-10 00:49 - 2019-03-14 09:50 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll 2019-04-10 00:49 - 2019-03-14 03:57 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2019-04-10 00:49 - 2019-03-14 03:57 - 000340992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll 2019-04-10 00:48 - 2019-04-02 14:15 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\oleprn.dll 2019-04-10 00:48 - 2019-04-02 11:10 - 000117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleprn.dll 2019-04-10 00:48 - 2019-04-02 09:47 - 001214464 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll 2019-04-10 00:48 - 2019-04-02 09:45 - 000323584 _____ (Microsoft Corporation) C:\Windows\system32\AppxAllUserStore.dll 2019-04-10 00:48 - 2019-04-02 08:22 - 000001312 _____ C:\Windows\system32\tcbres.wim 2019-04-10 00:48 - 2019-04-02 06:41 - 000230912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppxAllUserStore.dll 2019-04-10 00:48 - 2019-04-02 06:40 - 001073664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll 2019-04-10 00:48 - 2019-03-14 16:35 - 000011776 _____ (Microsoft Corporation) C:\Windows\system32\appinfoext.dll 2019-04-10 00:48 - 2019-03-14 16:34 - 000127488 _____ (Microsoft Corporation) C:\Windows\system32\AppxSysprep.dll 2019-04-10 00:48 - 2019-03-14 16:33 - 000030208 _____ (Microsoft Corporation) C:\Windows\system32\RpcPing.exe 2019-04-10 00:48 - 2019-03-14 16:31 - 000198656 _____ (Microsoft Corporation) C:\Windows\system32\wincredui.dll 2019-04-10 00:48 - 2019-03-14 15:56 - 000160768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredui.dll 2019-04-10 00:48 - 2019-03-14 15:55 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RpcPing.exe 2019-04-10 00:48 - 2019-03-14 15:53 - 000559104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll 2019-04-10 00:48 - 2019-03-14 10:18 - 000035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credui.dll 2019-04-10 00:48 - 2019-03-14 10:18 - 000002560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll 2019-04-10 00:48 - 2019-03-14 10:17 - 000288768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Search.ProtocolHandler.MAPI2.dll 2019-04-10 00:48 - 2019-03-14 10:17 - 000105472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wcmapi.dll 2019-04-10 00:48 - 2019-03-14 10:15 - 000195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShellCommonCommonProxyStub.dll 2019-04-10 00:48 - 2019-03-14 10:14 - 000735744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll 2019-04-10 00:48 - 2019-03-14 10:14 - 000345088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe 2019-04-10 00:48 - 2019-03-14 10:13 - 000145408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll 2019-04-10 00:48 - 2019-03-14 09:56 - 000055296 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll 2019-04-10 00:48 - 2019-03-14 09:56 - 000002560 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll 2019-04-10 00:48 - 2019-03-14 09:55 - 000414720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cldflt.sys 2019-04-10 00:48 - 2019-03-14 09:55 - 000141312 _____ (Microsoft Corporation) C:\Windows\system32\AppointmentActivation.dll 2019-04-10 00:48 - 2019-03-14 09:55 - 000134656 _____ (Microsoft Corporation) C:\Windows\system32\wcmapi.dll 2019-04-10 00:48 - 2019-03-14 09:55 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\ActiveSyncCsp.dll 2019-04-10 00:48 - 2019-03-14 09:55 - 000062976 _____ (Microsoft Corporation) C:\Windows\system32\EASPolicyManagerBrokerHost.exe 2019-04-10 00:48 - 2019-03-14 09:55 - 000048640 _____ (Microsoft Corporation) C:\Windows\system32\credui.dll 2019-04-10 00:48 - 2019-03-14 09:54 - 000395776 _____ (Microsoft Corporation) C:\Windows\system32\Search.ProtocolHandler.MAPI2.dll 2019-04-10 00:48 - 2019-03-14 09:54 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll 2019-04-10 00:48 - 2019-03-14 09:54 - 000227328 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe 2019-04-10 00:48 - 2019-03-14 09:52 - 000404480 _____ (Microsoft Corporation) C:\Windows\system32\ShellCommonCommonProxyStub.dll 2019-04-10 00:48 - 2019-03-14 03:57 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2019-04-10 00:48 - 2019-03-14 03:57 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll 2019-04-10 00:48 - 2019-03-14 03:57 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll 2019-04-07 18:09 - 2019-04-07 18:09 - 000052608 _____ C:\Users\jofue\Downloads\1570662.pdf 2019-04-03 17:05 - 2019-04-03 17:05 - 000012798 _____ C:\ProgramData\tzxixhsn.rxf 2019-04-03 17:05 - 2019-04-03 17:05 - 000000000 _____ C:\ProgramData\2590367129 2019-04-02 22:34 - 2019-04-03 17:45 - 000074552 _____ (Wellbia.com Co., Ltd.) C:\Windows\xhunter1.sys 2019-04-02 22:34 - 2019-04-03 17:23 - 000000000 ____D C:\Users\jofue\OneDrive\Documentos\Black Desert 2019-04-02 22:34 - 2019-04-02 22:34 - 000012643 _____ C:\ProgramData\pzufaxxm.cmi 2019-04-02 22:34 - 2019-04-02 22:34 - 000000016 _____ C:\ProgramData\mntemp 2019-04-02 22:34 - 2019-04-02 22:34 - 000000000 _____ C:\ProgramData\2114019453 2019-04-02 21:23 - 2019-04-03 17:23 - 000000000 ____D C:\Users\jofue\AppData\Local\BlackDesertOnline 2019-04-02 20:48 - 2019-04-03 17:45 - 000000000 ____D C:\Program Files (x86)\Black Desert Online 2019-04-02 20:48 - 2019-04-02 20:48 - 000002083 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Black Desert Online.lnk 2019-04-02 20:48 - 2019-04-02 20:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Black Desert Online 2019-04-02 20:46 - 2019-04-02 20:46 - 052395976 _____ (Kakao Games Europe B.V.) C:\Users\jofue\Downloads\BlackDesertOnlineSetup_20180524_10010.exe 2019-04-02 20:12 - 2019-04-02 20:30 - 000000000 ____D C:\Users\jofue\AppData\Local\Jagex 2019-04-02 20:12 - 2019-04-02 20:30 - 000000000 ____D C:\ProgramData\Jagex 2019-04-02 19:26 - 2019-04-02 19:26 - 000000000 ____D C:\Windows\SysWOW64\directx 2019-04-02 19:16 - 2019-04-02 19:16 - 005942744 _____ (Jagex Ltd ) C:\Users\jofue\Downloads\RuneScape-Setup.exe 2019-03-31 11:57 - 2019-03-31 11:57 - 000589217 _____ C:\Users\jofue\Downloads\b5e884a4-8ada-4267-a655-60912a438a49.pdf 2019-03-30 15:47 - 2019-03-30 15:47 - 000130818 _____ C:\Users\jofue\Downloads\6AjcJUg90vxS (1).pdf ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-04-28 14:55 - 2018-04-12 01:38 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-04-28 13:12 - 2018-08-10 23:24 - 000000000 ____D C:\Windows\system32\SleepStudy 2019-04-28 13:10 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\AppReadiness 2019-04-28 12:42 - 2018-08-11 00:22 - 000004264 _____ C:\Windows\System32\Tasks\Avast Emergency Update 2019-04-28 12:33 - 2019-01-18 00:29 - 000000364 _____ C:\Windows\Tasks\HPCeeScheduleForjofue.job 2019-04-28 12:33 - 2018-08-11 00:03 - 000000000 ____D C:\ProgramData\NVIDIA 2019-04-28 12:33 - 2018-08-10 23:26 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-04-28 12:32 - 2018-04-11 23:04 - 000524288 _____ C:\Windows\system32\config\BBI 2019-04-28 11:29 - 2018-08-11 00:40 - 000000000 ____D C:\Users\jofue\AppData\Local\Battle.net 2019-04-27 15:31 - 2019-01-18 00:29 - 000002802 _____ C:\Windows\System32\Tasks\HPCeeScheduleForjofue 2019-04-27 15:31 - 2018-12-02 09:34 - 000003482 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task 2019-04-27 15:31 - 2018-08-11 23:39 - 000003546 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2019-04-27 15:31 - 2018-08-11 23:39 - 000003322 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2019-04-27 15:31 - 2018-08-11 08:20 - 000002862 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3180699792-3532045423-3535131539-1001 2019-04-27 15:31 - 2018-08-11 00:23 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software 2019-04-25 01:00 - 2018-08-11 23:39 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-04-24 21:56 - 2018-08-11 00:40 - 000000000 ____D C:\Users\jofue\AppData\Local\Blizzard Entertainment 2019-04-24 21:56 - 2018-08-11 00:38 - 000000000 ____D C:\Users\jofue\AppData\Local\Blizzard 2019-04-22 19:46 - 2018-04-12 01:36 - 000000000 ____D C:\Windows\INF 2019-04-22 17:55 - 2018-08-11 00:02 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2019-04-22 17:25 - 2018-08-11 00:03 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2019-04-22 17:25 - 2018-08-11 00:02 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2019-04-22 17:20 - 2018-09-23 09:24 - 000000000 ____D C:\ProgramData\Package Cache 2019-04-22 16:54 - 2018-08-11 00:04 - 000000000 ____D C:\Users\jofue\AppData\Local\Packages 2019-04-22 16:44 - 2018-12-09 23:17 - 000000000 ____D C:\Users\jofue\AppData\Roaming\Media Player Classic 2019-04-22 16:44 - 2018-10-22 08:31 - 000000000 ____D C:\Users\jofue\AppData\Roaming\BitTorrent 2019-04-22 16:43 - 2019-02-01 23:03 - 000000000 ____D C:\Windows\Minidump 2019-04-22 16:43 - 2018-08-12 19:28 - 000000000 ____D C:\Users\jofue\AppData\Local\CrashDumps 2019-04-22 16:43 - 2018-08-11 00:09 - 000000000 ____D C:\Windows\Panther 2019-04-22 16:43 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\LiveKernelReports 2019-04-22 15:35 - 2018-04-12 01:38 - 000000000 ___HD C:\Windows\ELAMBKUP 2019-04-22 07:05 - 2018-08-11 08:15 - 000000000 ___RD C:\Users\jofue\OneDrive 2019-04-22 07:05 - 2018-08-11 00:01 - 000002401 _____ C:\Users\jofue\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2019-04-22 07:04 - 2018-08-11 00:21 - 000385848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2019-04-13 19:39 - 2018-08-11 00:21 - 000476776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2019-04-13 19:33 - 2019-02-14 00:47 - 000257832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys 2019-04-13 19:33 - 2019-01-18 21:28 - 000057888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys 2019-04-13 19:33 - 2019-01-18 21:28 - 000037104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys 2019-04-13 19:33 - 2018-10-31 22:40 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys 2019-04-13 19:33 - 2018-08-11 00:21 - 001031000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2019-04-13 19:33 - 2018-08-11 00:21 - 000220640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2019-04-13 19:33 - 2018-08-11 00:21 - 000205400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys 2019-04-13 19:33 - 2018-08-11 00:21 - 000166848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2019-04-13 19:33 - 2018-08-11 00:21 - 000112520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2019-04-13 19:33 - 2018-08-11 00:21 - 000088160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2019-04-13 19:32 - 2019-01-19 14:05 - 000254128 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys 2019-04-13 19:32 - 2019-01-18 21:28 - 000320624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys 2019-04-13 19:32 - 2019-01-18 21:28 - 000196000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys 2019-04-13 19:23 - 2018-08-11 00:01 - 000000000 ____D C:\Users\jofue 2019-04-13 11:34 - 2018-12-02 09:32 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-04-13 11:26 - 2018-12-04 19:33 - 000000000 ____D C:\Users\jofue\AppData\Roaming\Spotify 2019-04-12 06:55 - 2018-08-11 00:37 - 000002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Secure Browser.lnk 2019-04-11 06:11 - 2018-08-10 23:24 - 000342688 _____ C:\Windows\system32\FNTCACHE.DAT 2019-04-11 06:08 - 2018-04-12 01:38 - 000000000 ___RD C:\Program Files\Windows Defender 2019-04-11 06:08 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\TextInput 2019-04-11 06:08 - 2018-04-12 01:38 - 000000000 ____D C:\Windows\bcastdvr 2019-04-11 06:06 - 2018-08-10 23:58 - 001679422 _____ C:\Windows\system32\PerfStringBackup.INI 2019-04-11 06:06 - 2018-04-12 18:18 - 000750432 _____ C:\Windows\system32\perfh00A.dat 2019-04-11 06:06 - 2018-04-12 18:18 - 000147354 _____ C:\Windows\system32\perfc00A.dat 2019-04-10 07:13 - 2018-08-11 00:45 - 000000000 ____D C:\Program Files (x86)\World of Warcraft 2019-04-10 01:08 - 2018-04-12 01:30 - 000000000 ____D C:\Windows\CbsTemp 2019-04-10 00:38 - 2018-08-11 14:05 - 000000000 ____D C:\Windows\system32\MRT 2019-04-10 00:21 - 2018-08-11 14:04 - 131129288 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2019-04-05 19:05 - 2018-11-16 07:46 - 000000000 ____D C:\Program Files\rempl 2019-04-03 20:11 - 2018-08-11 00:38 - 000000000 ____D C:\Program Files (x86)\Battle.net 2019-04-02 20:48 - 2018-12-05 20:03 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2019-04-02 20:30 - 2018-04-12 01:38 - 000000000 ___HD C:\Program Files\WindowsApps 2019-04-02 07:06 - 2009-12-02 13:53 - 000407742 __RSH C:\bootmgr 2019-04-01 19:51 - 2018-04-12 01:41 - 000835480 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe 2019-04-01 19:51 - 2018-04-12 01:41 - 000179608 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl ==================== Files in the root of some directories ======= 2018-08-18 09:37 - 2018-12-11 18:02 - 000020480 _____ () C:\Users\jofue\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================