Farbar Recovery Scan Tool (x64) Version: 22-12-2019 Ran by Joselu (23-12-2019 21:22:11) Running from C:\Users\Joselu\Desktop Boot Mode: Normal ================== Search Files: "SearchAll: *.au3" ============= File: ======== C:\ProgramData\Intel\Wireless\51053c2\eed2f12.au3 [2019-11-09 13:17][2019-12-23 21:16] 001458601 _____ () 0C56BC7878B48E827CF54EABBDE9F681 [File not signed] C:\FRST\Quarantine\C\bawawm\base.au3 [2019-11-08 13:29][2019-11-08 13:29] 000189334 _____ () 14F1F12E3DD98BCC7D03AED07C5E6EDD [File not signed] folder: ======== Registry: ======== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModel\Origins] "H54eqidNWA3PV3ptVbdApA+yNxH+Idn33AU3wTPNyhI"="2" [$7!KO5ZG{uxg(6l`$01vS3x4_B9DY0AbAZeX^gS{tqC^4amK=G)'DF{~Xsm*?9~@a-b~+anYq,k2HqYP&.W?x=fSr_rpoYN%VPpJ~PFNFtS])W16VNcZ,J$&gWHED}JQUiqOM6As(DjFxD[qnC^zUxfUv~,J=?9+ef{$U0*iBdT,Ws~ZB2*X2GH(zH(zzA3XLeLRnbDL*4kg6wn6FyhDgEK_D^t`pFf^^U[*H.*8,)2iegcd86]y9=$Rrrx=J]!t.Z@l$UC=3D4_DjOfKx(jspBZ=*xBRrnOuEuEtcf4EO1V[is3cQcu5{L'VUM^pqp@eNTvSlK)ENq81bwUhbk+V',u`Nz0mj9btOFlb@g!+vJ}9,-$lx({Yokey!F1UA,}AB)sMe(]~g]yqnXn~[^1Zji(kBAtq9STpWlA'FfD,}KKZ*dWkzjC2UN%JQTIjb(@OMWY%hiK143?,h]HXw.aY5B^jQM}T.Js(qG,*0+o?[1{gm_Langpack_r_nn" [_@Y=*V&Ef@l(Y(h}qg?2aB347%=9r@KKjb}w?Fq(`CfAji6%D!~%*=niVHJ]wEB4*'-qoeNNy?~70,2p^Ch{^%JwuLpMPSok.40V3Dqyge+uX=.PC,`~Mamr[F8H[9E?}bL9rR(3co*FvDm+ey0ktJNWX&,a&+Ga0D!6oSv!6?aC8FFJ2BO5e9!}@!CIb^2gx}bpsW4GS?1W+GehYL[8+VEzkg7V*9TE65!v&zq=_q^-)RTO4@04n*D~1*j@J+_kfOGoy=z)%lYme-~bDZ&jJ(.m9A^Ewsg(ifQ_})D(a]f7O=z]PaN(-nUl&@r*q1vrE9j=H4RNIp=cl+lMaK)ij9}.dVjosmK=,E=uef-SN?e@EncXjMvOq(A)oe]n-A$k6%w?G5?a6oMjlUa^O?dqVYz.-Ms%{xze)Q(O`=FG}7f&'5ua~gl02pI(MCdZ^kLK)+s2q4Omj$W1]B{L'}aqfkSOBPu5Z[DvwDP(I!rmwE`Zu9jj*)1=~CEUR%b15F(P.e7U_E[Q+EcBaNp%ykWD" [HKEY_USERS\S-1-5-21-3954754903-2503222162-3877862055-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-12182019152507074\Software\Microsoft\Windows\CurrentVersion\Run] "c1201b5f"="C:\ProgramData\Intel\Wireless\51053c2\bajkehd.exe C:\ProgramData\Intel\Wireless\51053c2\eed2f12.au3" ====== End of Search ======