Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 21-01-2026
Ejecutado por luzhe (administrador) sobre DESKTOP-P16UUNV (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop E406NA_R420NA) (21-01-2026 08:59:31)
Ejecutado desde C:\Users\luzhe\Downloads\FRST64.exe
Perfiles cargados: luzhe
Plataforma: Microsoft Windows 10 Home Single Language Versión 22H2 19045.6466 (X64) Idioma: Español (México)
Navegador predeterminado: Edge
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(6099D0EF-9374-47ED-BDFE-A82136831235 -> File-New-Project) C:\Program Files\WindowsApps\40459File-New-Project.EarTrumpet_2.3.0.0_x86__1sdd7yawvg6ne\EarTrumpet\EarTrumpet.exe
(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusOSD.exe
(C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2601.46121.0_x64__8wekyb3d8bbwe\M365Copilot.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\143.0.3650.139\msedgewebview2.exe <11>
(DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSoftwareManager\AsusSoftwareManager.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <38>
(Lansweeper -> Fing Ltd) C:\Program Files\Fing\Fing.exe <4>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2601.46121.0_x64__8wekyb3d8bbwe\M365Copilot.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\luzhe\AppData\Local\Microsoft\OneDrive\25.238.1204.0001\OneDrive.Sync.Service.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSystemAnalysis\AsusSystemAnalysis.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\DriverStore\FileRepository\icesoundapo64.inf_amd64_22112224b463137a\ICEsoundService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0b214be229a13e84\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e9b40d45ab4dc6b8\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e9b40d45ab4dc6b8\IntelCpHeciSvc.exe
(services.exe ->) (Lansweeper -> Fing Limited) C:\Program Files\Fing\resources\extraResources\fingagent.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe
(services.exe ->) (Qualcomm Atheros -> Qualcomm Technologies Inc.) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.zunemusic_11.2511.5.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKU\S-1-5-21-1233946187-248147954-1153705165-1001\...\Run: [electron.app.Fing] => C:\Program Files\Fing\Fing.exe [136140576 2025-11-17] (Lansweeper -> Fing Ltd)
HKU\S-1-5-21-1233946187-248147954-1153705165-1001\...\Run: [MicrosoftEdgeAutoLaunch_19F26CA284ED623EDF091CFF9F731366] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4314192 2026-01-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [2025-11-06] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\144.0.7559.60\Installer\chrmstp.exe [2026-01-18] (Google LLC -> Google LLC)

==================== Tareas programadas (Lista blanca) =================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {193A3CC1-A6AD-42FC-92A5-478E57253926} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusHotkey.exe [362032 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {785BCE1F-D8B9-4C0F-991D-596C8B5D4368} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSoftwareManager\AsusUpdateChecker.exe [846384 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {9ADB784B-FADF-4236-A706-8B8056662164} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem144.0.7547.0{BD485117-860C-48C8-9675-5B9E57ECEC92} => C:\Program Files (x86)\Google\GoogleUpdater\144.0.7547.0\updater.exe [6123160 2025-11-26] (Google LLC -> Google LLC)
Task: {DDA3F651-DC68-4582-BFA6-53E09A9ACE9C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CDDE44F8-7867-47FC-9A8C-1AD88EE782A4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D6C89785-523A-4892-B46E-2103C4794307} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0DEF4DD9-C9E2-42B2-B40D-923CAC0645FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FA3BEE75-615E-4F92-8992-8BF8A53A5155} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [1145 2021-03-24] () [Archivo no firmado]
Task: {F6B16C27-8DE5-489C-9DE1-9E9D66BDC481} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1233946187-248147954-1153705165-1001 => C:\Users\luzhe\AppData\Local\Microsoft\OneDrive\25.238.1204.0001\OneDriveLauncher.exe [746856 2026-01-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {F7CF51CD-D3EA-4329-B10A-872930D97BD6} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\RtkAudUService64.exe [1140456 2020-08-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)


==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Tcpip\Parameters: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{14f9f023-3ff2-4b56-9f89-08ef0f42f287}: [DhcpNameServer] 192.168.100.1

FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\luzhe\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-21]
Edge Extension: (WA Web Plus by Elbruz Technologies) - C:\Users\luzhe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ekcgkejcjdcmonfpmnljobemcbpnkamh [2026-01-20]
Edge Extension: (Documentos de Google sin conexión) - C:\Users\luzhe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-01-20]
Edge Extension: (Edge relevant text changes) - C:\Users\luzhe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-01-20]
Edge Extension: (AdBlock — block ads across the web) - C:\Users\luzhe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2026-01-21]

Chrome: 
=======
CHR Profile: C:\Users\luzhe\AppData\Local\Google\Chrome\User Data\Default [2026-01-21]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\luzhe\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-01-18]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\luzhe\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-01-18]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\AsusAppService\AsusAppService.exe [1159216 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusOptimization.exe [642608 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSoftwareManager\AsusSoftwareManager.exe [1410096 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSwitch\AsusSwitch.exe [652848 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSystemAnalysis\AsusSystemAnalysis.exe [4471344 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [1598512 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25110.6-0\NisSrv.exe [4426832 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.25110.6-0\MsMpEng.exe [290704 2026-01-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Fing.Agent; "C:\Program Files\Fing\resources\extraResources\fingagent.exe" --servicemode Fing.Agent --agentroot "C:\Users\luzhe\AppData\Roaming"

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [113496 2021-01-14] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSSystemAnalysis\AsusSAIO.sys [51288 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_e2422867901879a2\ASUSOptimization\AsusWmiAcpi.sys [50424 2026-01-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2026-01-19] (Microsoft Windows -> Microsoft Corporation)
R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [71736 2021-08-30] (Insecure.Com LLC -> Insecure.Com LLC.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2026-01-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2026-01-19] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2026-01-19] (Microsoft Windows -> Microsoft Corporation)
U4 npcap_wifi; no ImagePath

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-01-21 08:59 - 2026-01-21 09:00 - 000015992 _____ C:\Users\luzhe\Downloads\FRST.txt
2026-01-21 08:58 - 2026-01-21 09:00 - 000000000 ____D C:\FRST
2026-01-21 08:54 - 2026-01-21 08:54 - 002442752 _____ (Farbar) C:\Users\luzhe\Downloads\FRST64.exe
2026-01-21 08:46 - 2026-01-21 08:46 - 000003756 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2026-01-19 22:30 - 2026-01-19 22:30 - 000000000 ____D C:\Users\luzhe\OneDrive\Desktop\recup_dir.299
2026-01-19 20:04 - 2026-01-19 20:04 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2026-01-19 19:51 - 2026-01-19 19:51 - 000000000 ____D C:\Users\luzhe\AppData\Local\OneDrive
2026-01-19 19:49 - 2026-01-19 19:49 - 000000000 ____D C:\Users\luzhe\OneDrive\Desktop\recup_dir.103
2026-01-19 19:44 - 2026-01-21 08:46 - 000004132 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2026-01-19 19:44 - 2026-01-19 19:44 - 000003228 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2026-01-19 19:00 - 2026-01-19 19:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-01-19 18:59 - 2026-01-19 18:59 - 000000000 ____D C:\Program Files\RUXIM
2026-01-19 17:07 - 2026-01-19 22:00 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\vlc
2026-01-19 17:02 - 2026-01-19 17:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2026-01-19 17:01 - 2026-01-19 17:01 - 000000000 ____D C:\Program Files\VideoLAN
2026-01-19 16:50 - 2026-01-19 16:50 - 000003570 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1233946187-248147954-1153705165-1001
2026-01-19 15:43 - 2026-01-19 15:43 - 000000000 ____D C:\Users\luzhe\AppData\Local\Backup
2026-01-19 09:03 - 2026-01-19 09:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-01-19 00:02 - 2026-01-21 08:15 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Fing
2026-01-19 00:02 - 2026-01-19 16:07 - 000003710 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{A3819295-BD32-48F1-BC9E-AE10BB846458}
2026-01-19 00:02 - 2026-01-19 16:07 - 000003584 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{3472C8CB-EAAD-48D9-82D4-F648C08B677B}
2026-01-19 00:02 - 2026-01-19 00:02 - 000003460 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog
2026-01-19 00:02 - 2026-01-19 00:02 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\FingAgent
2026-01-19 00:01 - 2026-01-19 00:02 - 000000000 ____D C:\Program Files\Npcap
2026-01-19 00:01 - 2026-01-19 00:01 - 000001766 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fing.lnk
2026-01-19 00:01 - 2026-01-19 00:01 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap
2026-01-19 00:01 - 2026-01-19 00:01 - 000000000 ____D C:\WINDOWS\system32\Npcap
2026-01-19 00:01 - 2026-01-19 00:01 - 000000000 ____D C:\Users\luzhe\AppData\Local\fing-updater
2026-01-19 00:01 - 2026-01-19 00:01 - 000000000 ____D C:\ProgramData\Fingagent
2026-01-19 00:01 - 2026-01-19 00:01 - 000000000 ____D C:\Program Files\Fing
2026-01-18 23:41 - 2026-01-19 00:58 - 000005614 _____ C:\Users\luzhe\Documents\route.print.txt
2026-01-18 23:38 - 2026-01-18 23:36 - 000006636 _____ C:\Users\luzhe\Documents\ipconfig.all.txt
2026-01-18 22:59 - 2026-01-18 23:40 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\MMC
2026-01-18 17:31 - 2026-01-19 01:22 - 000004295 _____ C:\Users\luzhe\photorec.cfg
2026-01-18 17:02 - 2026-01-18 17:02 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2026-01-18 16:59 - 2026-01-19 17:02 - 000000000 ____D C:\Users\luzhe\OneDrive\Desktop\testdisk-7.2
2026-01-18 16:57 - 2026-01-21 08:42 - 000000000 ____D C:\Users\luzhe\AppData\Local\D3DSCache
2026-01-18 16:55 - 2026-01-18 16:55 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-01-18 16:55 - 2026-01-18 16:55 - 000000000 ____D C:\Users\luzhe\AppData\Local\Google
2026-01-18 16:55 - 2026-01-18 16:55 - 000000000 ____D C:\Program Files\Google
2026-01-18 16:54 - 2026-01-18 20:37 - 000000000 ____D C:\Users\luzhe\AppData\Local\PlaceholderTileLogoFolder
2026-01-18 16:54 - 2026-01-18 16:54 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-01-18 16:54 - 2026-01-18 16:54 - 000000000 ____D C:\Program Files (x86)\Google
2026-01-18 16:52 - 2026-01-19 22:06 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\Spelling
2026-01-18 16:52 - 2026-01-18 16:52 - 000000000 ____D C:\Users\luzhe\AppData\Local\Comms
2026-01-18 16:49 - 2026-01-19 16:50 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1233946187-248147954-1153705165-1001
2026-01-18 16:48 - 2026-01-19 16:50 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1233946187-248147954-1153705165-1001
2026-01-18 16:45 - 2026-01-18 16:45 - 000000000 ____D C:\Users\luzhe\AppData\Local\ASUS
2026-01-18 16:45 - 2026-01-18 16:45 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2026-01-18 16:42 - 2026-01-19 16:47 - 000000000 ____D C:\ProgramData\Packages
2026-01-18 16:42 - 2026-01-18 16:50 - 000000000 ____D C:\Users\luzhe\AppData\Local\Publishers
2026-01-18 16:42 - 2026-01-18 16:42 - 000000000 ____D C:\Users\luzhe\AppData\Local\VirtualStore
2026-01-18 16:41 - 2026-01-19 22:04 - 000000000 ____D C:\Users\luzhe\AppData\Local\Packages
2026-01-18 16:41 - 2026-01-19 19:45 - 000000000 ____D C:\Users\luzhe\AppData\Local\ConnectedDevicesPlatform
2026-01-18 16:41 - 2026-01-18 16:42 - 000000000 ____D C:\Users\luzhe\AppData\Local\Intel
2026-01-18 16:41 - 2026-01-18 16:41 - 000000020 ___SH C:\Users\luzhe\ntuser.ini
2026-01-18 16:41 - 2026-01-18 16:41 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\Network
2026-01-18 16:41 - 2026-01-18 16:41 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Adobe
2026-01-18 15:41 - 2026-01-19 22:49 - 001677940 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-18 15:36 - 2026-01-19 22:44 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-01-18 15:36 - 2026-01-18 18:43 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\Users\Default\AppData\Local\Historial
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\Users\Default\AppData\Local\Datos de programa
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\Users\Default\AppData\Local\Archivos temporales de Internet
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\Users\Default User
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\Users\All Users
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\ProgramData\Plantillas
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\ProgramData\Menú Inicio
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\ProgramData\Escritorio
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\ProgramData\Documentos
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\ProgramData\Datos de programa
2026-01-18 15:36 - 2026-01-18 15:36 - 000000000 SHDJL C:\Program Files\Archivos comunes
2026-01-18 15:34 - 2026-01-18 15:34 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\SystemCertificates
2026-01-18 15:34 - 2026-01-18 15:34 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\Crypto
2026-01-18 15:33 - 2026-01-18 15:33 - 000000000 ____D C:\ProgramData\Intel
2026-01-18 15:29 - 2026-01-19 16:50 - 000002379 _____ C:\Users\luzhe\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-01-18 15:29 - 2026-01-18 17:31 - 000000000 ____D C:\Users\luzhe
2026-01-18 15:29 - 2026-01-18 17:26 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\Windows
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Reciente
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Plantillas
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Mis documentos
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Menú Inicio
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Impresoras
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Entorno de red
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Documents\Mis vídeos
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Documents\Mis imágenes
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Documents\Mi música
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Datos de programa
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\Configuración local
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\AppData\Local\Historial
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\AppData\Local\Datos de programa
2026-01-18 15:29 - 2026-01-18 15:29 - 000000000 SHDJL C:\Users\luzhe\AppData\Local\Archivos temporales de Internet
2026-01-18 15:23 - 2026-01-19 22:26 - 000000000 ____D C:\ProgramData\ASUS
2026-01-18 15:23 - 2026-01-18 15:23 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2026-01-18 15:21 - 2026-01-20 02:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-01-18 15:21 - 2026-01-18 15:21 - 000262840 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-01-18 15:20 - 2026-01-18 15:50 - 000000000 ____D C:\WINDOWS\Panther
2026-01-18 15:16 - 2026-01-19 01:58 - 000000000 ____D C:\Windows.old
2026-01-18 15:15 - 2026-01-18 15:16 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2026-01-18 15:11 - 2026-01-18 15:11 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2026-01-18 15:10 - 2026-01-18 15:10 - 000000000 ____D C:\WINDOWS\Setup
2026-01-18 15:09 - 2026-01-18 15:50 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\OCR
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\addins
2026-01-18 15:09 - 2026-01-18 15:09 - 000000000 ____D C:\ProgramData\ssh
2026-01-18 15:08 - 2026-01-19 22:49 - 000749542 _____ C:\WINDOWS\system32\perfh00A.dat
2026-01-18 15:08 - 2026-01-19 22:49 - 000145348 _____ C:\WINDOWS\system32\perfc00A.dat
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\es
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\winrm
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\WCN
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\slmgr
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\es
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\0409
2026-01-18 15:08 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\DigitalLocker
2026-01-18 15:03 - 2026-01-21 08:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-18 15:03 - 2026-01-21 08:33 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-01-18 15:03 - 2026-01-21 08:15 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-18 15:03 - 2026-01-19 22:44 - 000000000 ____D C:\WINDOWS\ServiceState
2026-01-18 15:03 - 2026-01-19 22:33 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-01-18 15:03 - 2026-01-19 22:04 - 000000000 ___HD C:\Program Files\WindowsApps
2026-01-18 15:03 - 2026-01-19 15:32 - 000000000 ____D C:\WINDOWS\appcompat
2026-01-18 15:03 - 2026-01-18 23:41 - 000000000 ____D C:\WINDOWS\system32\NDF
2026-01-18 15:03 - 2026-01-18 18:43 - 000000000 ____D C:\Program Files\Windows Defender
2026-01-18 15:03 - 2026-01-18 16:59 - 000000000 ___RD C:\WINDOWS\PrintDialog
2026-01-18 15:03 - 2026-01-18 16:54 - 000000000 ___RD C:\Program Files (x86)
2026-01-18 15:03 - 2026-01-18 16:43 - 000000000 ____D C:\ProgramData\USOPrivate
2026-01-18 15:03 - 2026-01-18 15:50 - 000000000 ____D C:\WINDOWS\system32\spool
2026-01-18 15:03 - 2026-01-18 15:50 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-01-18 15:03 - 2026-01-18 15:36 - 000000000 ____D C:\Program Files\Windows NT
2026-01-18 15:03 - 2026-01-18 15:34 - 000000000 __RHD C:\Users\Public\Libraries
2026-01-18 15:03 - 2026-01-18 15:34 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2026-01-18 15:03 - 2026-01-18 15:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-01-18 15:03 - 2026-01-18 15:21 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2026-01-18 15:03 - 2026-01-18 15:18 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2026-01-18 15:03 - 2026-01-18 15:18 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2026-01-18 15:03 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\SystemResources
2026-01-18 15:03 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-01-18 15:03 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\system32\setup
2026-01-18 15:03 - 2026-01-18 15:09 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ___SD C:\WINDOWS\system32\dsc
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\MUI
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\system32\Com
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\IME
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\WINDOWS\Help
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\Program Files\Common Files\System
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\Program Files (x86)\Windows NT
2026-01-18 15:03 - 2026-01-18 15:08 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2026-01-18 15:03 - 2026-01-18 15:04 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 __SHD C:\Program Files\Windows Sidebar
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 __RSD C:\WINDOWS\Media
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___SD C:\WINDOWS\system32\UNP
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___SD C:\WINDOWS\system32\Nui
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___HD C:\WINDOWS\LanguageOverlayCache
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Web
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\WaaS
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Vss
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\tracing
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\TAPI
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SystemApps
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\winevt
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ti-et
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ta-lk
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ta-in
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\si-lk
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ras
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\osa-Osge-001
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\my-mm
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\Macromed
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\Keywords
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\IME
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\icsxml
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ias
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ff-Adlm-SN
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\DriverState
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\downlevel
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\ContainerSettingsProviders
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\compatrel
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\am-et
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\System
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SKB
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\security
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\schemas
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\SchCache
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Resources
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\rescache
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Registration
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Provisioning
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\PLA
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Performance
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\ModemLogs
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\InputMethod
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\InboxApps
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\IdentityCRL
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Globalization
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Cursors
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Containers
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\Branding
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\ProgramData\USOShared
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files\Windows Security
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files\Windows Portable Devices
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files\ModifiableWindowsApps
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files\Common Files\Services
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2026-01-18 15:03 - 2026-01-18 15:03 - 000000000 ____D C:\inetpub
2026-01-18 15:03 - 2026-01-18 15:00 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2026-01-18 15:03 - 2026-01-18 15:00 - 000003103 _____ C:\WINDOWS\SysWOW64\mmc.exe.config
2026-01-18 15:03 - 2026-01-18 15:00 - 000003103 _____ C:\WINDOWS\system32\mmc.exe.config
2026-01-18 15:03 - 2026-01-18 15:00 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2026-01-18 15:03 - 2026-01-18 15:00 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2026-01-18 15:03 - 2026-01-18 15:00 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2026-01-18 15:01 - 2026-01-21 08:46 - 000000000 ____D C:\WINDOWS\INF
2026-01-18 14:54 - 2026-01-19 18:57 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-01-18 14:52 - 2026-01-19 22:44 - 075235328 _____ C:\WINDOWS\system32\config\SOFTWARE
2026-01-18 14:52 - 2026-01-19 22:44 - 015728640 _____ C:\WINDOWS\system32\config\SYSTEM
2026-01-18 14:52 - 2026-01-19 22:44 - 000786432 _____ C:\WINDOWS\system32\config\DEFAULT
2026-01-18 14:52 - 2026-01-19 22:44 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2026-01-18 14:52 - 2026-01-19 22:44 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2026-01-18 14:52 - 2026-01-19 22:44 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY
2026-01-18 14:52 - 2026-01-19 18:56 - 000000000 ____D C:\WINDOWS\servicing
2026-01-18 14:52 - 2026-01-18 15:03 - 000000000 ____D C:\WINDOWS\system32\SMI
2026-01-18 14:52 - 2026-01-18 14:52 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2026-01-18 14:41 - 2026-01-18 15:20 - 000000000 ___HD C:\$SysReset
2026-01-18 14:22 - 2026-01-18 14:22 - 000000000 ___RD C:\Users\Default\OneDrive
2026-01-16 21:00 - 2026-01-16 21:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2026-01-12 21:29 - 2026-01-12 21:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Renamer
2026-01-12 13:03 - 2026-01-12 13:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice
2026-01-04 11:44 - 2026-01-04 11:44 - 000000000 ___HD C:\OneDriveTemp
2026-01-03 08:32 - 2026-01-03 08:32 - 000023734 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-01-03 08:30 - 2026-01-03 08:30 - 000023734 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-01-03 03:43 - 2026-01-21 08:32 - 000000000 ___RD C:\Users\luzhe\OneDrive
2026-01-03 03:37 - 2026-01-19 22:45 - 000000000 __SHD C:\Users\luzhe\IntelGraphicsProfiles
2026-01-03 03:37 - 2026-01-18 16:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2026-01-03 03:37 - 2026-01-18 16:41 - 000000000 ___RD C:\Users\luzhe\3D Objects
2026-01-03 03:37 - 2026-01-03 03:37 - 000000000 ____D C:\Users\luzhe\AppData\Roaming\Microsoft\Vault
2026-01-03 03:37 - 2026-01-03 03:37 - 000000000 ____D C:\Users\luzhe\AppData\LocalLow\Intel
2026-01-03 03:34 - 2026-01-19 00:04 - 000000000 ___SD C:\Users\luzhe\AppData\Roaming\Microsoft\Credentials
2026-01-03 03:34 - 2026-01-03 03:34 - 000000000 ___SD C:\Users\luzhe\AppData\Roaming\Microsoft\Protect
2026-01-03 03:07 - 2020-08-20 01:09 - 001145480 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2026-01-03 03:07 - 2020-08-20 01:09 - 000468792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2026-01-03 03:07 - 2020-08-20 00:35 - 001140456 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe
2026-01-03 03:07 - 2020-08-20 00:35 - 000854104 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2026-01-03 03:07 - 2020-08-20 00:35 - 000224272 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2026-01-03 03:06 - 2020-06-04 01:33 - 000274736 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTHDASIO64.dll
2026-01-03 03:06 - 2020-06-04 01:33 - 000229680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RTHDASIO.dll
2026-01-03 03:06 - 2017-12-21 22:45 - 000159352 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaLPSS2_SPI.sys
2026-01-03 03:03 - 2020-08-20 00:32 - 006114400 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2026-01-03 03:02 - 2026-01-19 22:44 - 000000000 ____D C:\Intel
2026-01-03 03:00 - 2020-09-17 03:09 - 000306000 _____ C:\WINDOWS\system32\libmfxhw64.dll
2026-01-03 03:00 - 2020-09-17 03:09 - 000254528 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2026-01-03 03:00 - 2020-09-17 03:08 - 001790200 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-01-03 03:00 - 2020-09-17 03:08 - 001790200 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-01-03 03:00 - 2020-09-17 03:08 - 001386240 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-01-03 03:00 - 2020-09-17 03:08 - 001386240 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-01-03 03:00 - 2020-09-17 03:08 - 001096808 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-01-03 03:00 - 2020-09-17 03:08 - 001096808 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-01-03 03:00 - 2020-09-17 03:08 - 000949864 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-01-03 03:00 - 2020-09-17 03:08 - 000949864 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-01-03 03:00 - 2020-09-17 03:08 - 000171472 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2026-01-03 03:00 - 2020-09-17 03:08 - 000146760 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Public\Documents\Mis vídeos
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Public\Documents\Mis imágenes
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Public\Documents\Mi música
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Reciente
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Plantillas
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Mis documentos
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Menú Inicio
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Impresoras
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Entorno de red
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Documents\Mis vídeos
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Documents\Mis imágenes
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Documents\Mi música
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Datos de programa
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\Configuración local
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programas
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Documents and Settings
2026-01-03 02:49 - 2026-01-03 02:49 - 000000000 SHDJL C:\Archivos de programa
2026-01-03 02:46 - 2026-01-19 16:17 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-01-03 02:45 - 2026-01-19 22:44 - 000008192 ___SH C:\DumpStack.log.tmp

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)


==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================