Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 14-09-2019 Ran by DANYSOHO (administrator) on DANYSOHO-PC (16-09-2019 00:12:40) Running from C:\Users\danys\descargas Opera Loaded Profiles: DANYSOHO & danys (Available Profiles: DANYSOHO & danys & elisa) Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: Español (España, internacional) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (Adobe Inc. -> Adobe Systems) C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswEngSrv.exe (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe (Google Inc -> Google LLC) C:\Program Files\Google\Update\1.3.34.11\GoogleCrashHandler.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera.exe (Opera Software AS -> Opera Software) C:\Users\danys\AppData\Local\Programs\Opera\63.0.3368.71\opera_crashreporter.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [279984 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-2758037267-3932966379-2764919300-1000\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe [26624 2010-11-20] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-2758037267-3932966379-2764919300-1000\...\Winlogon: [Shell] C:\Windows\Explorer.exe [2972672 2016-08-29] (Microsoft Windows -> Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-2758037267-3932966379-2764919300-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-13] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-2758037267-3932966379-2764919300-1001\...\Run: [EPSON Stylus CX5600 Series] => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICAL.EXE [180736 2007-03-01] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) HKU\S-1-5-21-2758037267-3932966379-2764919300-1001\...\Run: [WinPatrol] => C:\Program Files\Ruiware\WinPatrol\winpatrol.exe HKU\S-1-5-21-2758037267-3932966379-2764919300-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-13] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-18\...\Run: [Nokia.PCSync] => C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [1294336 2007-11-07] (Time Information Services Ltd.) [File not signed] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\76.0.3809.132\Installer\chrmstp.exe [2019-08-26] (Google LLC -> Google LLC) Startup: C:\Users\danys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Firefox.lnk [2018-12-18] ShortcutTarget: Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) Startup: C:\Users\danys\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Navegador Opera.lnk [2019-06-17] ShortcutTarget: Navegador Opera.lnk -> C:\Users\DANYSOHO\AppData\Local\Programs\Opera\launcher.exe (Opera Software AS -> Opera Software) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {0101845D-56A4-49C5-89DD-7F5E25080E85} - System32\Tasks\SlimDrivers Scan => C:\Program Files\SlimDrivers\SlimDrivers.exe Task: {3343A731-6B93-4473-8414-FA08AEEB02F4} - System32\Tasks\Opera scheduled Autoupdate 1519180871 => C:\Users\DANYSOHO\AppData\Local\Programs\Opera\launcher.exe [1348632 2019-09-03] (Opera Software AS -> Opera Software) Task: {3EB246D9-0F17-44D7-85EE-900DF050E5F0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1236048 2019-07-24] (Adobe Inc. -> Adobe Systems) Task: {6D000811-0ECF-45F7-8043-3E40A9F326FA} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [3278256 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) Task: {73CA10EF-353F-436C-88DA-05D178BB6C63} - System32\Tasks\{D176175D-418C-4089-9C5A-38D8D12829D8} => C:\Program Files\Ares\Ares.exe Task: {80C2A35B-CB56-44AF-B1EF-DA453CB1DB1F} - System32\Tasks\{EA1C007E-21C1-48C2-A85C-7521030ED3D7} => C:\Windows\twain_32\escndv\escndv.exe [118784 2006-03-08] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORP.) Task: {83870642-818D-4022-A5FA-D8A8469D1D01} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-09-10] (Adobe Inc. -> Adobe) Task: {99191280-A6C7-4A52-B597-950D2F6C531A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-02-09] (Google Inc -> Google Inc.) Task: {A152FB64-27D9-4CFF-AC86-3BB6F50B08B6} - System32\Tasks\Opera scheduled Autoupdate 1560750552 => C:\Users\danys\AppData\Local\Programs\Opera\launcher.exe [1348632 2019-09-03] (Opera Software AS -> Opera Software) Task: {A1F3F09E-4ED4-4232-BFAE-7AB3A41F573D} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_255_pepper.exe [1453112 2019-09-10] (Adobe Inc. -> Adobe) Task: {AA27F6A4-A7A8-44C3-AAF2-85A2DBDBF57F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-02-09] (Google Inc -> Google Inc.) Task: {BCD1418E-C2EC-4C32-A9D9-F9DD97CC8FEF} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1724848 2019-08-19] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) Task: {C05519EE-1123-44C6-B3C8-9FBC6EA4C36B} - System32\Tasks\{47EB7374-266E-4F3C-871D-D1D87E14F96B} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUnin.exe" -d "C:\Program Files\VS Revo Group\Revo Uninstaller" Task: {E1010B6D-8FF7-4646-858C-012251D6DADD} - System32\Tasks\{E4F1B717-FA83-4817-94F5-07349262550E} => C:\Program Files\Ares\Ares.exe Task: {F1543801-0A04-426F-8555-36888375CA52} - System32\Tasks\Opera scheduled Autoupdate 1518660658 => C:\Users\elisa\AppData\Local\Programs\Opera\launcher.exe [1131096 2018-06-12] (Opera Software AS -> Opera Software) Task: {F1FE003A-B45A-40AD-A236-875DC5D50EC6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\system32\Macromed\Flash\FlashUtil32_32_0_0_255_Plugin.exe [1457720 2019-09-10] (Adobe Inc. -> Adobe) Task: {F5ADDC82-1EF4-45BD-A9C4-AB2C67058584} - System32\Tasks\DivXUpdate => C:\Program Files\Common Files\DivX Shared\DivX Update\DivXUpdate.exe [68568 2017-08-02] (DivX, LLC -> DivX, LLC) Task: {F70C83E2-2521-4C62-9CD7-B703C129C56F} - System32\Tasks\{EA082438-5228-4372-A03B-48118BA45FA5} => C:\Program Files\Ares\Ares.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\SlimDrivers Scan.job => C:\Program Files\SlimDrivers\SlimDrivers.exe Task: C:\Windows\Tasks\{537C7AE7-D823-4C35-4FF3-649BA5EDB819}.job => C:\Users\danys\AppData\Local\UPDATE~1\LASILE~1.EXE <==== ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.100.1 Tcpip\..\Interfaces\{8C772692-F163-47FB-8671-57DACF4162AD}: [DhcpNameServer] 192.168.100.1 Internet Explorer: ================== HKU\S-1-5-21-2758037267-3932966379-2764919300-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxps://outlook.live.com/owa/?authRedirect=true BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_221\bin\ssv.dll [2019-07-25] (Oracle America, Inc. -> Oracle Corporation) BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2018-02-10] (Google Inc -> Google Inc.) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_221\bin\jp2ssv.dll [2019-07-25] (Oracle America, Inc. -> Oracle Corporation) Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2018-02-10] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-2758037267-3932966379-2764919300-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2018-02-10] (Google Inc -> Google Inc.) Toolbar: HKU\S-1-5-21-2758037267-3932966379-2764919300-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2018-02-10] (Google Inc -> Google Inc.) FireFox: ======== FF DefaultProfile: fn469p1n.default FF ProfilePath: C:\Users\DANYSOHO\AppData\Roaming\Mozilla\Firefox\Profiles\fn469p1n.default [2019-09-13] FF Homepage: Mozilla\Firefox\Profiles\fn469p1n.default -> www.google.com FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_32_0_0_255.dll [2019-09-10] (Adobe Inc. -> ) FF Plugin: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1231201.dll [2017-11-02] (Adobe Systems, Inc.) [File not signed] FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [No File] FF Plugin: @java.com/DTPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\dtplugin\npDeployJava1.dll [2019-07-25] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.221.2 -> C:\Program Files\Java\jre1.8.0_221\bin\plugin2\npjp2.dll [2019-07-25] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-07-31] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR HomePage: Default -> hxxps://www.google.com/ CHR StartupUrls: Default -> "hxxps://www.google.com/" CHR Profile: C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default [2019-09-12] CHR Extension: (Presentaciones) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-05-24] CHR Extension: (Documentos) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-05-24] CHR Extension: (Google Drive) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-05-24] CHR Extension: (YouTube) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-05-24] CHR Extension: (Adobe Acrobat) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2019-09-11] CHR Extension: (Hojas de cálculo) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-05-24] CHR Extension: (Documentos de Google sin conexión) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-01-04] CHR Extension: (AVG SafePrice | Comparaciones, ofertas y cupones) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn [2019-09-11] CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-24] CHR Extension: (Gmail) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-09-11] CHR Extension: (Chrome Media Router) - C:\Users\DANYSOHO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-09-11] CHR HKLM\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 AdobeARMservice; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [88136 2019-07-24] (Adobe Inc. -> Adobe Systems) R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [356848 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [4917456 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RP7.EXE [113664 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [5394136 2019-06-26] (Malwarebytes Corporation -> Malwarebytes) S3 ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [353280 2007-12-10] (Nokia.) [File not signed] S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Windows -> Microsoft Corporation) ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 Afc; C:\Windows\System32\drivers\Afc.sys [11776 2005-02-23] (Arcsoft, Inc.) [File not signed] R3 Atc002; C:\Windows\System32\DRIVERS\l260x86.sys [29184 2009-07-13] (Microsoft Windows -> Atheros Communications, Inc.) R0 avgArDisk; C:\Windows\System32\drivers\avgArDisk.sys [34744 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R1 avgArPot; C:\Windows\System32\drivers\avgArPot.sys [174520 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R1 avgbidsdriver; C:\Windows\System32\drivers\avgbidsdriver.sys [226384 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R0 avgbidsh; C:\Windows\System32\drivers\avgbidsh.sys [171784 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R0 avgbuniv; C:\Windows\System32\drivers\avgbuniv.sys [56576 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R1 avgKbd; C:\Windows\System32\drivers\avgKbd.sys [40952 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R2 avgMonFlt; C:\Windows\System32\drivers\avgMonFlt.sys [140640 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R1 avgRdr; C:\Windows\System32\drivers\avgRdr2.sys [101248 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R0 avgRvrt; C:\Windows\System32\drivers\avgRvrt.sys [73064 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R1 avgSnx; C:\Windows\System32\drivers\avgSnx.sys [783288 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R1 avgSP; C:\Windows\System32\drivers\avgSP.sys [404360 2019-08-27] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R2 avgStm; C:\Windows\System32\drivers\avgStm.sys [176512 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R0 avgVmm; C:\Windows\System32\drivers\avgVmm.sys [314112 2019-08-24] (AVG Technologies USA, Inc. -> AVG Technologies CZ, s.r.o.) R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [173512 2019-09-11] (Malwarebytes Corporation -> Malwarebytes) R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [241760 2019-09-15] (Malwarebytes Corporation -> Malwarebytes) R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] (Microsoft Windows Hardware Compatibility Publisher -> ) S3 nmwcd; C:\Windows\System32\drivers\ccdcmb.sys [18560 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia) S3 nmwcdc; C:\Windows\System32\drivers\ccdcmbo.sys [23168 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia) S3 SWDUMon; C:\Windows\System32\DRIVERS\SWDUMon.sys [11232 2019-06-07] (SlimWare Utilities Inc. -> ) S3 upperdev; C:\Windows\System32\DRIVERS\usbser_lowerflt.sys [8192 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia) S3 UsbserFilt; C:\Windows\System32\DRIVERS\usbser_lowerfltj.sys [8192 2013-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Nokia) S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X] S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-09-16 00:12 - 2019-09-16 00:12 - 000000000 ____D C:\FRST 2019-09-15 23:05 - 2019-09-15 23:05 - 000241760 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys 2019-09-15 17:49 - 2019-09-15 17:49 - 000024233 _____ C:\Users\danys\Desktop\divx troyano.odt 2019-09-15 00:27 - 2019-09-15 00:27 - 000014782 _____ C:\Users\danys\Desktop\nota elisa.odt 2019-09-14 03:31 - 2019-09-14 03:32 - 000000000 ____D C:\Users\danys\Desktop\Facebook Carpetas para Preparar Material de Trabajo 2019-09-13 19:51 - 2019-09-13 19:51 - 000020113 _____ C:\Users\danys\Desktop\basquet argemntino.odt 2019-09-13 18:53 - 2019-09-13 18:54 - 000000000 ____D C:\Users\danys\Desktop\marga primaverta 2019 2019-09-12 22:00 - 2019-09-14 17:32 - 000000000 ____D C:\Users\danys\Documents\Virus, malrware, troyanos, etc 2019-09-11 20:44 - 2019-09-11 20:44 - 000000000 ____D C:\Users\DANYSOHO\AppData\Local\mbamtray 2019-09-11 20:40 - 2019-09-11 20:40 - 000000000 ____D C:\Users\DANYSOHO\AppData\Roaming\PC Suite 2019-09-11 18:06 - 2019-09-11 18:06 - 000173512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys 2019-09-11 17:59 - 2019-09-11 18:06 - 000129056 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae.sys 2019-09-11 17:59 - 2019-09-11 17:59 - 000001969 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2019-09-11 17:59 - 2019-09-11 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2019-09-11 17:30 - 2019-09-11 17:30 - 000000000 ____D C:\Program Files\Malwarebytes 2019-09-11 01:36 - 2019-09-11 01:38 - 000000000 ____D C:\Users\danys\Desktop\escritorio textos 2019-09-10 22:32 - 2019-09-14 03:34 - 000000000 ____D C:\Users\danys\Desktop\setiembre 2019-09-06 13:18 - 2019-09-06 19:00 - 000000000 ____D C:\Program Files\Mozilla Firefox 2019-08-30 13:07 - 2019-08-30 13:07 - 000001373 _____ C:\Users\danys\Desktop\Navegador Opera.lnk 2019-08-28 14:21 - 2019-08-28 14:21 - 000000000 ____D C:\d55b0a5917fb36cb4c2825cb12a0 2019-08-28 14:01 - 2019-08-28 14:03 - 000000000 ____D C:\969f54a689408716ba4dbfced35400 2019-08-28 13:58 - 2019-08-28 14:01 - 000000000 ____D C:\72c87985d347b05af71dac 2019-08-28 13:50 - 2019-08-28 13:52 - 000000000 ____D C:\8deb83110aa8dfef27f5e43548c8 2019-08-28 13:48 - 2019-08-28 13:49 - 000000000 ____D C:\2353a417d2376ffacb727932 2019-08-28 13:46 - 2019-08-28 13:47 - 000000000 ____D C:\590e0566bd5b582c79b8 2019-08-28 13:44 - 2019-08-28 13:46 - 000000000 ____D C:\5eab2071a8fea799dc000155e1f774 2019-08-28 13:42 - 2019-08-28 13:43 - 000000000 ____D C:\a5b7dd43e3f985f001e14029b307 2019-08-28 13:39 - 2019-08-28 13:42 - 000000000 ____D C:\7357a364016bad71913bf6ed 2019-08-28 13:37 - 2019-08-28 13:39 - 000000000 ____D C:\05e2b9984352412e05ae6db9cee4 2019-08-28 13:34 - 2019-08-28 13:37 - 000000000 ____D C:\6207d2d1fab3ca8a406b20 2019-08-26 20:17 - 2019-08-26 20:17 - 000000000 ____D C:\Users\DANYSOHO\AppData\Local\ElevatedDiagnostics 2019-08-26 18:58 - 2019-08-26 19:04 - 000024485 _____ C:\Users\danys\Documents\restoro 2.odt 2019-08-26 14:45 - 2019-09-10 23:58 - 000034608 _____ C:\urls.set 2019-08-24 14:47 - 2019-08-24 14:47 - 000047768 _____ () C:\Windows\system32\Drivers\staport.sys 2019-08-24 14:45 - 2019-08-24 14:44 - 000176512 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgStm.sys 2019-08-24 14:45 - 2019-08-24 14:43 - 000312240 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe 2019-08-24 14:44 - 2019-08-24 14:44 - 000140640 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgMonFlt.sys 2019-08-24 14:34 - 2019-08-24 14:35 - 000447489 ____C C:\unp30759586851504085i-manual.mdmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000783288 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw842a61f759ce35e9.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000404568 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\aswd4018ae3dba13de5.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000314112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw2f48476b84d17136.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000176512 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw6eed62536548267c.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000174520 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\aswb47e2e22426b89bc.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000140640 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw39c1a0fefd3aca7b.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000101248 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw6ff0fbe1bf900683.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000073064 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\aswe5bad1c830f1f2e0.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000040952 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw49a311f688c032ae.tmp 2019-08-24 14:34 - 2019-08-24 14:33 - 000034744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\aswecd6f9b54b9a1c79.tmp 2019-08-24 14:34 - 2019-08-24 14:32 - 000226384 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw9e528c7716130708.tmp 2019-08-24 14:34 - 2019-08-24 14:32 - 000171784 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asw524ae190274eaa4c.tmp 2019-08-24 14:34 - 2019-08-24 14:32 - 000056576 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\asweaa98b8cfbc08ebe.tmp 2019-08-22 22:55 - 2019-08-22 23:02 - 000000000 ____D C:\Users\danys\agosto fondos nokia E5 2019-08-17 20:33 - 2019-09-13 21:11 - 000000000 ____D C:\ProgramData\InstallMate 2019-08-17 20:33 - 2019-08-17 20:34 - 000000000 ____D C:\Users\danys\AppData\Roaming\WinPatrol ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-09-16 00:12 - 2018-04-06 15:41 - 000000000 ____D C:\Users\danys\descargas Opera 2019-09-15 23:20 - 2009-07-14 01:34 - 000024272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2019-09-15 23:20 - 2009-07-14 01:34 - 000024272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2019-09-15 23:08 - 2018-02-21 00:02 - 000000000 ____D C:\Users\danys\AppData\LocalLow\Mozilla 2019-09-15 23:05 - 2009-07-14 01:53 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2019-09-15 20:48 - 2019-06-06 20:48 - 000000446 _____ C:\Windows\Tasks\SlimDrivers Scan.job 2019-09-14 06:39 - 2019-06-24 22:43 - 000000000 ____D C:\Users\DANYSOHO\AppData\Local\Gtarcade 2019-09-14 05:32 - 2018-03-18 23:23 - 000000000 ___RD C:\Users\danys\Descargas Mozilla 2019-09-14 03:32 - 2018-03-26 22:46 - 000000000 ___RD C:\Users\danys\marga 2019-09-14 03:30 - 2019-01-04 01:24 - 000000000 ____D C:\Users\danys\Documents\comentarios politicos grupos o paginas 2019-09-13 18:49 - 2018-02-10 02:58 - 000000000 ___RD C:\Users\danys\Temas generales 2019-09-13 18:48 - 2018-05-30 21:40 - 000000000 ____D C:\Users\danys\SHAPIRA GATA 2019-09-13 18:47 - 2018-10-30 13:50 - 000000000 ___RD C:\Users\danys\NACHULITO TOY 2019-09-12 22:44 - 2018-05-21 21:37 - 000000000 ____D C:\Users\danys\Documents\Anotaciones y Datos Mensulaes 2019-09-12 22:24 - 2018-03-23 13:42 - 000000000 ___RD C:\Users\danys\Nokia E 5 2019-09-12 22:02 - 2018-08-31 12:59 - 000000000 ____D C:\Users\danys\Documents\TV LED PHILLIPS 24 pulgadas blanco 2019-09-12 22:02 - 2018-04-20 15:11 - 000000000 ____D C:\Users\danys\Documents\PAMI elisa MEDICAMENTOS 2019-09-11 22:45 - 2018-04-05 13:27 - 000000000 ____D C:\Program Files\Argente Utilities 2019-09-11 22:44 - 2009-07-13 23:37 - 000000000 ____D C:\Windows\inf 2019-09-11 22:28 - 2018-02-12 19:18 - 000000000 ___RD C:\Users\danys\PROGRAMAS 2019-09-11 20:53 - 2019-01-24 21:11 - 000000000 ____D C:\Users\danys\Documents\Gas Natural 2019-09-11 19:24 - 2018-10-28 16:14 - 000000000 ____D C:\Users\DANYSOHO\AppData\Local\WallpaperSuite 2019-09-11 17:30 - 2018-04-15 01:15 - 000000000 ____D C:\ProgramData\Malwarebytes 2019-09-11 02:33 - 2018-02-16 15:50 - 000000000 ____D C:\ProgramData\DivX 2019-09-11 02:23 - 2018-02-20 23:49 - 000001655 _____ C:\Users\DANYSOHO\Desktop\DivX Movies.lnk 2019-09-11 02:22 - 2018-02-16 15:54 - 000000000 ____D C:\Program Files\Common Files\DivX Shared 2019-09-10 23:55 - 2019-01-04 02:55 - 000420018 _____ C:\Windows\system32\perfh012.dat 2019-09-10 23:55 - 2018-12-26 14:44 - 000120042 _____ C:\Windows\system32\perfc012.dat 2019-09-10 23:55 - 2018-12-23 01:39 - 000675348 _____ C:\Windows\system32\perfh00E.dat 2019-09-10 23:55 - 2018-12-23 01:39 - 000170932 _____ C:\Windows\system32\perfc00E.dat 2019-09-10 23:55 - 2018-12-23 00:37 - 000383938 _____ C:\Windows\system32\perfh00D.dat 2019-09-10 23:55 - 2018-12-23 00:37 - 000084416 _____ C:\Windows\system32\perfc00D.dat 2019-09-10 23:55 - 2018-12-15 04:16 - 000598582 _____ C:\Windows\system32\perfh008.dat 2019-09-10 23:55 - 2018-12-15 04:16 - 000110786 _____ C:\Windows\system32\perfc008.dat 2019-09-10 23:55 - 2018-12-06 18:47 - 000655314 _____ C:\Windows\system32\perfh01D.dat 2019-09-10 23:55 - 2018-12-06 18:47 - 000142132 _____ C:\Windows\system32\perfc01D.dat 2019-09-10 23:55 - 2018-12-06 17:34 - 000716194 _____ C:\Windows\system32\perfh019.dat 2019-09-10 23:55 - 2018-12-06 17:34 - 000150500 _____ C:\Windows\system32\perfc019.dat 2019-09-10 23:55 - 2018-12-05 14:30 - 000648276 _____ C:\Windows\system32\perfh01F.dat 2019-09-10 23:55 - 2018-12-05 14:30 - 000139658 _____ C:\Windows\system32\perfc01F.dat 2019-09-10 23:55 - 2018-12-04 14:12 - 000473096 _____ C:\Windows\system32\perfh00B.dat 2019-09-10 23:55 - 2018-12-04 14:12 - 000101178 _____ C:\Windows\system32\perfc00B.dat 2019-09-10 23:55 - 2018-12-01 18:58 - 000501008 _____ C:\Windows\system32\perfh006.dat 2019-09-10 23:55 - 2018-12-01 18:58 - 000098316 _____ C:\Windows\system32\perfc006.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000660434 _____ C:\Windows\system32\perfh005.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000470608 _____ C:\Windows\system32\perfh001.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000389936 _____ C:\Windows\system32\prfh0404.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000372764 _____ C:\Windows\system32\prfh0804.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000141084 _____ C:\Windows\system32\perfc005.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000119250 _____ C:\Windows\system32\prfc0804.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000114748 _____ C:\Windows\system32\prfc0404.dat 2019-09-10 23:55 - 2018-12-01 16:25 - 000094430 _____ C:\Windows\system32\perfc001.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000737310 _____ C:\Windows\system32\perfh00C.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000731640 _____ C:\Windows\system32\perfh010.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000720612 _____ C:\Windows\system32\prfh0816.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000705470 _____ C:\Windows\system32\prfh0416.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000688802 _____ C:\Windows\system32\perfh007.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000152564 _____ C:\Windows\system32\prfc0816.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000149238 _____ C:\Windows\system32\perfc00C.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000148774 _____ C:\Windows\system32\perfc007.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000147314 _____ C:\Windows\system32\prfc0416.dat 2019-09-10 23:55 - 2018-09-22 01:18 - 000146504 _____ C:\Windows\system32\perfc010.dat 2019-09-10 23:55 - 2011-04-11 22:30 - 000747396 _____ C:\Windows\system32\perfh00A.dat 2019-09-10 23:55 - 2011-04-11 22:30 - 000158868 _____ C:\Windows\system32\perfc00A.dat 2019-09-10 23:55 - 2010-11-20 18:01 - 014222128 _____ C:\Windows\system32\PerfStringBackup.INI 2019-09-10 22:51 - 2019-03-26 17:05 - 000000000 ____D C:\Users\danys\Desktop\fotos 26 03 2019 2019-09-10 22:48 - 2018-05-01 19:53 - 000000000 ___RD C:\Users\danys\Face Material publicado 2019-09-10 22:44 - 2018-04-29 17:29 - 000000000 ___RD C:\Users\danys\Descargas Internet Explorer 2019-09-10 22:44 - 2018-04-16 19:03 - 000000000 ____D C:\Users\danys\Documents\telecom 2019-09-10 22:43 - 2018-03-19 19:13 - 000000000 ___RD C:\Users\danys\Descargas Google Chrome 2019-09-10 20:01 - 2018-02-09 20:12 - 000842296 _____ (Adobe) C:\Windows\system32\FlashPlayerApp.exe 2019-09-10 20:01 - 2018-02-09 20:12 - 000175160 _____ (Adobe) C:\Windows\system32\FlashPlayerCPLApp.cpl 2019-09-10 20:01 - 2018-02-09 20:11 - 000000000 ____D C:\Windows\system32\Macromed 2019-09-10 01:31 - 2009-07-14 01:53 - 000032630 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2019-09-09 00:49 - 2018-06-12 22:25 - 000000000 ___RD C:\Users\danys\fuentes 2019-09-09 00:45 - 2018-04-16 19:04 - 000000000 ____D C:\Users\danys\Documents\EDENOR 2019-09-06 22:47 - 2018-11-15 16:18 - 000000000 ___RD C:\Users\danys\hot sex 2019-09-06 19:00 - 2018-02-09 20:39 - 000000000 ____D C:\Program Files\Mozilla Maintenance Service 2019-09-03 22:54 - 2009-07-13 23:37 - 000000000 ____D C:\Windows\system32\NDF 2019-09-03 22:50 - 2018-02-10 01:40 - 000084024 _____ C:\Users\DANYSOHO\AppData\Local\GDIPFONTCACHEV1.DAT 2019-09-03 17:18 - 2018-02-09 19:18 - 000000000 ____D C:\Users\danys 2019-09-01 22:50 - 2019-02-28 01:32 - 000000000 ____D C:\Users\danys\Desktop\tarjetas con msjes p publicar y trabajar 2019-08-31 16:28 - 2018-07-03 18:57 - 000000000 ____D C:\Users\danys\Desktop\flores rosas ya pajaros y mariposas 2019-08-27 06:47 - 2018-02-10 01:49 - 000404360 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSP.sys 2019-08-26 19:19 - 2018-02-09 19:46 - 000002189 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-08-26 19:19 - 2018-02-09 19:46 - 000002148 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2019-08-24 22:05 - 2018-02-10 17:26 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2019-08-24 14:44 - 2018-10-22 21:13 - 000040952 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgKbd.sys 2019-08-24 14:44 - 2018-02-10 01:49 - 000314112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgVmm.sys 2019-08-24 14:44 - 2018-02-10 01:49 - 000101248 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRdr2.sys 2019-08-24 14:44 - 2018-02-10 01:49 - 000073064 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgRvrt.sys 2019-08-24 14:43 - 2019-01-16 17:12 - 000226384 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsdriver.sys 2019-08-24 14:43 - 2019-01-16 17:02 - 000034744 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArDisk.sys 2019-08-24 14:43 - 2019-01-16 17:01 - 000171784 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbidsh.sys 2019-08-24 14:43 - 2019-01-16 17:01 - 000056576 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgbuniv.sys 2019-08-24 14:43 - 2018-02-10 01:49 - 000783288 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgSnx.sys 2019-08-24 14:43 - 2018-02-10 01:49 - 000174520 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgArPot.sys 2019-08-22 16:59 - 2019-06-21 19:17 - 000000000 ____D C:\Users\danys\Desktop\junio 2019 2019-08-20 14:31 - 2019-06-13 16:51 - 000000222 _____ C:\Users\danys\advanced_ip_scanner_MAC.bin 2019-08-20 14:31 - 2019-06-13 16:51 - 000000015 _____ C:\Users\danys\advanced_ip_scanner_Comments.bin 2019-08-20 14:31 - 2019-06-13 16:51 - 000000015 _____ C:\Users\danys\advanced_ip_scanner_Aliases.bin 2019-08-20 02:27 - 2018-03-21 14:21 - 000000000 ____D C:\Windows\pss ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) LastRegBack: 2019-09-13 21:53 ==================== End of FRST.txt ============================