Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 26-06-2019 Ran by Absent (administrator) on ABSENTPPC (28-06-2019 16:25:31) Running from C:\Users\Absent\Downloads Loaded Profiles: Absent (Available Profiles: Absent) Platform: Windows 10 Pro Version 1809 17763.557 (X64) Language: Español (España, internacional) Default browser: Chrome Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) () [File not signed] C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19041.16510.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1905.28.0_x64__8wekyb3d8bbwe\Calculator.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.19061.410.0_x64__8wekyb3d8bbwe\YourPhone.exe () [File not signed] C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19031.11411.0_x64__8wekyb3d8bbwe\Video.UI.exe (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsAPHider\AsAPHider.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr64.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (ASUSTeK Computer Inc.) [File not signed] C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanControlService.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.34.11\GoogleCrashHandler64.exe (Google Inc -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20174.0_x64__8wekyb3d8bbwe\HxOutlook.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20174.0_x64__8wekyb3d8bbwe\HxTsr.exe (Microsoft Corporation) [File not signed] C:\Program Files\WindowsApps\Microsoft.WindowsStore_11905.1001.4.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1905.4-0\MsMpEng.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-3126805088-1096401988-3500408547-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22695280 2019-06-18] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3126805088-1096401988-3500408547-1000\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [22695280 2019-06-18] (Piriform Software Ltd -> Piriform Software Ltd) HKU\S-1-5-21-3126805088-1096401988-3500408547-1000\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [731240 2018-12-17] (AVB Disc Soft, SIA -> Disc Soft Ltd) HKU\S-1-5-21-3126805088-1096401988-3500408547-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3148576 2019-06-17] (Valve -> Valve Corporation) HKU\S-1-5-21-3126805088-1096401988-3500408547-1000\...\MountPoints2: {5bfb4346-0eb5-11e9-9c15-7824af4205d3} - "L:\setup.exe" HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\system32\rtvcvfw64.dll [246272 2012-09-28] () [File not signed] HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\i420vfw.dll [70656 2004-01-25] (www.helixcommunity.org) [File not signed] HKLM\...\Drivers32: [VIDC.RTV1] => C:\Windows\SysWOW64\rtvcvfw32.dll [247296 2012-09-28] () [File not signed] HKLM\...\Drivers32: [vidc.yv12] => C:\Windows\SysWOW64\yv12vfw.dll [70656 2004-01-25] (www.helixcommunity.org) [File not signed] HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\75.0.3770.100\Installer\chrmstp.exe [2019-06-28] (Google LLC -> Google LLC) HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> Startup: C:\Users\Absent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2019-05-23] ShortcutTarget: MEGAsync.lnk -> C:\Users\Absent\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {04EEE343-2E78-4D15-857B-B8ED06B4FCEB} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {04FAB3A6-8FD2-46D2-96EF-C1608484FE41} - \Microsoft\Windows\Setup\EOSNotify -> No File <==== ATTENTION Task: {0D3A64E7-0B12-41B6-BED8-BE4A5212A54F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23949600 2019-05-30] (Microsoft Corporation -> Microsoft Corporation) Task: {1A4821D4-6607-4045-8CF7-4FC1AF7502D8} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [781808 2019-04-21] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) Task: {262D62AB-ED07-48D4-8107-27DB60CD368A} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {2B0E7F4A-FB9C-4A83-913B-1BC983721989} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {2B718901-4355-4AB8-9225-16C14DEFE7E6} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1526352 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {391FB0E7-9F20-433D-A6DE-31903925BABC} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [899056 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3D868678-194D-486A-AE3F-03D6343184CC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2409040 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {4498D121-8E93-49D0-86B0-8F7767F036E8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB} Task: {50D6D1FC-E83B-4E93-B97A-D3296DD0B571} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {5407F92A-CD4A-4C8F-9210-FC39DB2B99AE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16667424 2019-06-18] (Piriform Software Ltd -> Piriform Software Ltd) Task: {5551E729-0B3E-4C31-8CF6-A43F4E70EC29} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {5604C9C4-A5A4-4ED5-BBE9-B5F0338E83C5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23949600 2019-05-30] (Microsoft Corporation -> Microsoft Corporation) Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A} Task: {62AFA748-A2D2-4539-AB13-5D8EB274EAB9} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {64808594-C64C-4955-A97E-C95AE78D0C49} - System32\Tasks\Microsoft\Office\OfficeOsfInstaller => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\osfinstaller.exe [87120 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {65066FC7-1E0A-47CF-BAC2-B9B6CFA03AED} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite II\USB 3.0 Boost\U3BoostSvr.exe [90112 2011-09-09] () [File not signed] Task: {665E498B-7220-4D1E-8693-BB4128F0EC35} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-02-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {6C433972-A266-4D36-86D3-E970CC48B06C} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {6CFEC8C8-02E5-4B24-8B0C-4189599B5432} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {6F6F33D0-00A5-46DC-80B8-B86418791FB4} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe Task: {706B5F1C-B5F8-4051-916F-4D1D0F4F1D66} - System32\Tasks\momag\{3EEBF4A5-6BD9-3528-1AD2-066A6C5B7D9E} => C:\Program Files (x86)\Common Files\3eebf4a56b\momag.exe Task: {70A1BDC9-FF5B-4749-99AF-185FFF90BF73} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2409040 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {718F6F25-598D-4764-B4AD-B7A78EA27160} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {7BB8C76D-B0A7-4172-A60C-CCD56E5C3071} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E} Task: {7D91F3FA-FAEF-4A40-A17A-A8EC80299D63} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1} Task: {7F2BA225-210B-4B03-BF2E-A0571A0E0433} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3787304 2019-05-23] (NVIDIA Corporation -> NVIDIA Corporation) Task: {7F333357-407A-4EB2-834F-340F5B56E07F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {835D03BF-4F47-4F82-9AB1-9506678ABF7B} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61} Task: {88E7C4D0-E940-46C0-AD43-CA6AE614F901} - System32\Tasks\ASUS\ASUS AI Suite II Execute => C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe [2935424 2012-03-13] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) Task: {8AEF6ABD-9A96-41BB-8488-E70597D8BAEE} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [899056 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {8F4D3E06-58BA-4200-A334-1270E5F75FFC} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {97A5CF4E-A1C7-4F9D-AE0F-7A7772FDC516} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-06-28] (Google Inc -> Google LLC) Task: {981B47A0-F575-4107-A3E7-5F5D4B9EF6A5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-06-28] (Google Inc -> Google LLC) Task: {A1404501-4D56-4533-97C7-D335686F3B46} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Absent\Downloads\esetonlinescanner_esn.exe Task: {A340D77A-D90D-42F7-AC39-CA31F522F542} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {A6D71B70-7E65-428D-ACC1-3E978139C922} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {AE956413-7C92-47B3-9109-441FB4B21A03} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Absent\Downloads\esetonlinescanner_esn.exe Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371} Task: {BAEA01AB-1F69-4D81-9E30-83155672BF0C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-06-18] (Piriform Software Ltd -> Piriform Software Ltd) Task: {BF7CDC27-7DD5-4B07-BC53-E544B10A4471} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [753448 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {BFD27186-3498-4467-BCA4-DF7FFD2E8756} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C09DBA7F-D6FF-4ED6-AF12-475FAE3D18ED} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe [745480 2019-04-16] (BlueStack Systems, Inc. -> BlueStack Systems, Inc.) Task: {C3A9245F-CF5E-4DF9-99D9-27E59DC0A812} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-02-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {C7F9012F-EF17-4A2D-A08E-14F01723AF49} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {C9FF12E6-D54A-45A7-97E3-404BCF8B318D} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D26B660C-3884-4016-BC07-C68FD8AD4C0C} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {D4722735-8CD2-4EC3-859E-DBE0C2AE8519} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {E3C4CD00-F8D6-4B96-A31C-D025CBAA788E} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1130296 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {EBCA5B75-9823-4BB3-B54D-3487D2627239} - System32\Tasks\ASUS\Easy Update => C:\Program Files (x86)\ASUS\AI Suite II\EasyUpdate\EzUpdt.exe [1426232 2013-10-18] (ASUSTeK Computer Inc. -> ) Task: {F28311E5-9AAE-421E-B085-381FB1821CE3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {F8A0AA56-45A1-468C-ACAC-80BDBB726FAB} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1526352 2019-06-19] (Microsoft Corporation -> Microsoft Corporation) Task: {FB0112B0-9576-40FF-8026-C8FCADA0EF1B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648504 2019-05-22] (NVIDIA Corporation -> NVIDIA Corporation) Task: {FB3023EB-0744-47EF-BA51-D0B53EBFC016} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MpCmdRun.exe [469960 2019-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{1f301755-3dd4-45ed-a1c1-7c4feb1b7485}: [NameServer] 1.1.1.1,1.1.1.2 Tcpip\..\Interfaces\{1f301755-3dd4-45ed-a1c1-7c4feb1b7485}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{29ba199b-d8c1-4878-9cac-12018e4cdee9}: [NameServer] 1.1.1.1,1.1.1.2 Tcpip\..\Interfaces\{29ba199b-d8c1-4878-9cac-12018e4cdee9}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{617e4aa2-297b-4861-a2c8-ec4808106960}: [DhcpNameServer] 192.168.42.129 Internet Explorer: ================== HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131970613020950969&GUID=06F4EC48-6E91-4F5D-B415-C909D30B00DB HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131970613020953399&GUID=06F4EC48-6E91-4F5D-B415-C909D30B00DB HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3126805088-1096401988-3500408547-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2019-06-19] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_211\bin\ssv.dll [2019-04-18] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_211\bin\jp2ssv.dll [2019-04-18] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) FireFox: ======== FF Plugin: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2019-04-18] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2019-04-18] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32.dll [2019-01-31] (Adobe Systems Incorporated -> ) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2019-01-12] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-15] (Google Inc -> Google LLC) Chrome: ======= CHR StartupUrls: Default -> "hxxp://www.google.cl/" CHR Profile: C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default [2019-06-28] CHR Extension: (Presentaciones) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-09-01] CHR Extension: (Material Incognito Dark Theme) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahifcnpnjgbadkjdhagpfjfkmlapfoel [2019-06-21] CHR Extension: (Documentos) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-01] CHR Extension: (Google Drive) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-01] CHR Extension: (YouTube) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-01] CHR Extension: (ChocoChip - Cookie Manager) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\cdllihdpcibkhhkidaicoeeiammjkokm [2018-11-16] CHR Extension: (Hojas de cálculo) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-09-01] CHR Extension: (Documentos de Google sin conexión) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-01] CHR Extension: (AdBlock) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2019-05-28] CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-09-01] CHR Extension: (Gmail) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-26] CHR Extension: (Chrome Media Router) - C:\Users\Absent\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-06-07] ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.19\atkexComSvc.exe [920736 2018-11-16] (ASUSTeK Computer Inc. -> ) R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.20\aaHMSvc.exe [951936 2018-11-16] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.13\AsSysCtrlService.exe [149120 2018-11-16] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.02.00\AsusFanControlService.exe [1632256 2018-11-16] (ASUSTeK Computer Inc.) [File not signed] S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8473200 2019-06-05] (BattlEye Innovations e.K. -> ) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3644008 2018-12-17] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2019-06-05] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) S3 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [53632 2018-11-16] (AnchorFree Inc -> AnchorFree Inc.) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-02-27] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [782136 2019-02-27] (NVIDIA Corporation -> NVIDIA Corporation) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5382448 2019-04-09] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\NisSrv.exe [2433136 2019-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1905.4-0\MsMpEng.exe [109896 2019-06-05] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) S3 AFTrafMgr1.4; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_4_64.sys [56840 2018-11-16] (AnchorFree Inc -> AnchorFree Inc.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2018-11-16] (ASUSTeK Computer Inc. -> ) R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2018-11-16] (ASUSTeK Computer Inc. -> ) S3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2018-11-16] (MCCI Corporation -> MCCI Corporation) S3 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv.sys [303712 2018-11-01] (Bluestack Systems, Inc. -> Bluestack System Inc. ) S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2019-01-04] (Disc Soft Ltd -> Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2019-01-04] (Disc Soft Ltd -> Disc Soft Ltd) R1 e0357e2a3fca78a2; C:\WINDOWS\system32\drivers\e0357e2a3fca78a2.sys [30912 2019-06-21] (BlockChain Advances Ltd -> FsFilter Network) R1 HWiNFO; C:\WINDOWS\system32\drivers\HWiNFO64A.SYS [55960 2018-11-16] (Martin Malik - REALiX -> REALiX(tm)) S3 IObitUnlocker; C:\Users\Absent\Downloads\Programas\IObitUnlockerPortable\App\IObitUnlocker\IObitUnlocker.sys [48672 2017-06-19] (IObit Information Technology -> IObit) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2019-06-28] (Malwarebytes Corporation -> Malwarebytes) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b49751b9038af669\nvlddmkm.sys [21836032 2019-05-23] (NVIDIA Corporation -> NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30336 2019-05-10] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [69840 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [75600 2019-04-17] (NVIDIA Corporation -> NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [605696 2018-09-15] (Microsoft Windows -> Realtek ) R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [14024 2017-08-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project) S3 usbrndis6; C:\WINDOWS\System32\drivers\usb80236.sys [24576 2018-09-15] (Microsoft Windows -> Microsoft Corporation) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [47496 2019-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [337632 2019-06-05] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [53984 2019-06-05] (Microsoft Windows -> Microsoft Corporation) S3 xhunter1; C:\WINDOWS\xhunter1.sys [74552 2019-06-05] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.) U3 idsvc; no ImagePath ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One month (created) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-06-28 13:28 - 2019-06-28 13:28 - 000002375 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2019-06-28 13:28 - 2019-06-28 13:28 - 000002334 _____ C:\Users\Absent\Google Chrome.lnk 2019-06-28 13:27 - 2019-06-28 13:27 - 000003620 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2019-06-28 13:27 - 2019-06-28 13:27 - 000003496 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2019-06-28 13:26 - 2019-06-28 13:26 - 001151544 _____ (Google LLC) C:\Users\Absent\Downloads\ChromeSetup.exe 2019-06-28 13:21 - 2019-06-28 13:21 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2019-06-28 11:45 - 2019-06-28 13:19 - 000000000 ____D C:\Users\Absent\Desktop\Reportes 2019-06-28 11:23 - 2019-06-28 11:39 - 000000000 ____D C:\Users\Absent\AppData\Roaming\ZHP 2019-06-28 11:23 - 2019-06-28 11:23 - 000000915 _____ C:\Users\Absent\ZHPCleaner.lnk 2019-06-28 11:23 - 2019-06-28 11:23 - 000000000 ____D C:\Users\Absent\AppData\Local\ZHP 2019-06-28 11:05 - 2019-06-28 11:05 - 000000000 ____D C:\ProgramData\IObit 2019-06-28 11:00 - 2019-06-28 11:00 - 000000000 _____ C:\Users\Absent\Nuevo documento de texto.txt 2019-06-28 10:46 - 2019-06-28 11:00 - 000002522 _____ C:\Users\Absent\BAM.bat 2019-06-28 09:21 - 2019-06-28 10:46 - 000002524 _____ C:\Users\Absent\Downloads\Buscador fechas.bat 2019-06-28 08:26 - 2019-06-28 09:07 - 000000838 _____ C:\Users\Absent\Aplicaciones extrañas.txt 2019-06-28 08:05 - 2019-06-28 08:05 - 003147648 _____ (Nicolas Coolman) C:\Users\Absent\Downloads\ZHPCleaner.exe 2019-06-28 08:04 - 2019-06-28 11:18 - 000000000 ____D C:\AdwCleaner 2019-06-27 12:18 - 2019-06-27 12:18 - 007025360 _____ (Malwarebytes) C:\Users\Absent\Downloads\adwcleaner_7.3.exe 2019-06-27 12:02 - 2019-06-27 12:02 - 000000338 _____ C:\Users\Absent\Downloads\eset.txt 2019-06-27 10:47 - 2019-06-27 10:48 - 000053513 _____ C:\Users\Absent\Downloads\Addition.txt 2019-06-27 10:45 - 2019-06-28 16:26 - 000034101 _____ C:\Users\Absent\Downloads\FRST.txt 2019-06-27 10:45 - 2019-06-28 16:25 - 000000000 ____D C:\FRST 2019-06-27 10:29 - 2019-06-27 10:29 - 002418688 _____ (Farbar) C:\Users\Absent\Downloads\FRST64.exe 2019-06-27 10:22 - 2019-06-27 10:22 - 000000863 _____ C:\Users\Absent\CCleaner.lnk 2019-06-25 15:51 - 2019-06-25 17:11 - 005660510 _____ (Swearware) C:\Users\Absent\Downloads\ComboFix.exe 2019-06-25 15:19 - 2019-06-25 15:19 - 000002590 _____ C:\Users\Absent\Rkill.txt 2019-06-22 15:05 - 2019-06-22 15:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 5 2019-06-21 20:42 - 2019-06-28 11:05 - 000000000 ____D C:\Users\Absent\Downloads\Programas 2019-06-21 20:28 - 2016-07-12 12:13 - 000003948 ___SH C:\WINDOWS\SysWOW64\ffms2.avsi 2019-06-21 20:27 - 2016-07-12 12:13 - 004646912 ___SH C:\WINDOWS\SysWOW64\ffms2.dll 2019-06-21 20:27 - 2009-09-27 09:39 - 000401920 ___SH (The Public) C:\WINDOWS\SysWOW64\avisynth.dll 2019-06-21 20:27 - 2005-07-14 12:31 - 000032256 ___SH C:\WINDOWS\SysWOW64\AVSredirect.dll 2019-06-21 20:27 - 2004-02-22 10:11 - 000764416 ___SH (Abysmal Software) C:\WINDOWS\SysWOW64\devil.dll 2019-06-21 20:27 - 2004-01-25 00:00 - 000070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\yv12vfw.dll 2019-06-21 20:27 - 2004-01-25 00:00 - 000070656 ___SH (www.helixcommunity.org) C:\WINDOWS\SysWOW64\i420vfw.dll 2019-06-21 20:25 - 2019-06-21 20:25 - 000000000 ____D C:\Users\Absent\Documents\eRightSoft 2019-06-21 18:58 - 2019-06-21 18:58 - 000000000 ____D C:\Users\Absent\AppData\Roaming\Mozilla 2019-06-21 18:56 - 2019-06-21 18:56 - 000126464 _____ C:\Users\Absent\AppData\Local\lobby.dat 2019-06-21 18:55 - 2019-06-21 18:55 - 000825856 _____ C:\Default.xml 2019-06-21 18:55 - 2019-06-21 18:55 - 000722944 _____ C:\Users\Absent\AppData\Local\sha.db 2019-06-21 18:55 - 2019-06-21 18:55 - 000030912 _____ (FsFilter Network) C:\WINDOWS\system32\Drivers\e0357e2a3fca78a2.sys 2019-06-21 18:54 - 2019-06-21 19:05 - 000000000 ____D C:\Program Files (x86)\gujhd 2019-06-21 18:54 - 2019-06-21 18:54 - 000000012 ___SH C:\WINDOWS\65612460883F 2019-06-21 18:54 - 2016-05-05 14:23 - 000556216 __RSH (FFmpeg Project) C:\WINDOWS\SysWOW64\avutil-lav-55.dll 2019-06-21 18:54 - 2016-05-05 14:23 - 000537784 __RSH (FFmpeg Project) C:\WINDOWS\SysWOW64\swscale-lav-4.dll 2019-06-21 18:54 - 2016-05-05 14:23 - 000405176 __RSH (Intel Corp.) C:\WINDOWS\SysWOW64\IntelQuickSyncDecoder.dll 2019-06-21 18:54 - 2016-05-05 14:23 - 000276152 __RSH C:\WINDOWS\SysWOW64\libbluray.dll 2019-06-21 18:54 - 2016-05-05 14:23 - 000000493 __RSH C:\WINDOWS\SysWOW64\LAVFilters.Dependencies.manifest 2019-06-21 18:54 - 2016-05-05 14:22 - 010766520 __RSH (FFmpeg Project) C:\WINDOWS\SysWOW64\avcodec-lav-57.dll 2019-06-21 18:54 - 2016-05-05 14:22 - 001699000 __RSH (FFmpeg Project) C:\WINDOWS\SysWOW64\avformat-lav-57.dll 2019-06-21 18:54 - 2016-05-05 14:22 - 000188088 __RSH (FFmpeg Project) C:\WINDOWS\SysWOW64\avfilter-lav-6.dll 2019-06-21 18:54 - 2016-05-05 14:22 - 000160440 __RSH (FFmpeg Project) C:\WINDOWS\SysWOW64\avresample-lav-3.dll 2019-06-21 18:54 - 2004-10-10 10:50 - 000278528 _____ (Real Networks, Inc) C:\WINDOWS\SysWOW64\pncrt.dll 2019-06-21 18:54 - 2004-07-02 18:33 - 000327749 _____ (RealNetworks, Inc.) C:\WINDOWS\SysWOW64\drvc.dll 2019-06-21 18:54 - 2004-04-05 11:31 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll 2019-06-21 18:54 - 2004-04-05 11:31 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll 2019-06-21 18:53 - 2019-06-25 14:21 - 000000000 ____D C:\Program Files (x86)\eRightSoft 2019-06-20 21:18 - 2019-06-20 21:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office 2019-06-18 12:48 - 2019-06-18 12:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mario Kart 8 2019-06-18 12:32 - 2019-06-18 12:32 - 000000000 ____D C:\Program Files\UNP 2019-06-17 13:20 - 2019-06-17 13:20 - 000000084 _____ C:\WINDOWS\SysWOW64\prime.txt 2019-06-17 13:20 - 2019-06-17 13:20 - 000000065 _____ C:\WINDOWS\SysWOW64\local.txt 2019-06-17 13:19 - 2019-06-17 13:19 - 000000000 ____D C:\Users\Absent\AppData\Roaming\Macromedia 2019-06-17 13:16 - 2019-06-17 13:17 - 000000000 _____ C:\WINDOWS\Path.idx 2019-06-17 13:16 - 2019-06-17 13:16 - 005323632 _____ C:\WINDOWS\PE_Rom.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 026808320 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 023438336 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 022114960 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 020816384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 018999296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 017484800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 015221248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 012869120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 012162048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 009682744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 007884288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 007875072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 007724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 007687576 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 007645392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 006926336 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 006547144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 006441472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 006309256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 006068224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 005764608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 005588184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 005297152 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 005210904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 005112792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 005086208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 004997096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 004883968 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 004661760 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 004627456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 004588544 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 003983872 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeContent.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003906560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003743744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003637248 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 003426816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003385344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003363640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 003344896 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003270144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 003091968 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002999808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002926096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 002777736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002690048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002638336 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 002627600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 002469440 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002422272 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 002323696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002276192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002189312 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002096128 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2019-06-13 12:36 - 2019-06-13 12:36 - 002085168 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 002017280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2019-06-13 12:36 - 2019-06-13 12:36 - 001929216 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001903616 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001899160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001860608 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001860096 ____R (The ICU Project) C:\WINDOWS\system32\icuin.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001761280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001750016 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001701888 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001700312 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2019-06-13 12:36 - 2019-06-13 12:36 - 001670840 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001644544 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001618944 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuin.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001616384 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001605120 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001485312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001483872 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 001466496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001387520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvruserservice.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001342904 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2019-06-13 12:36 - 2019-06-13 12:36 - 001331536 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001315328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationController.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001311744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001309696 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001260048 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2019-06-13 12:36 - 2019-06-13 12:36 - 001256448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001254912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloSI.PCShell.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001219424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001180184 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 001098136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001072640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001054712 _____ (Microsoft Corporation) C:\WINDOWS\system32\ApplyTrustOffline.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 001032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001005056 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 001000448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000998912 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000971776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000927744 _____ (Microsoft Corporation) C:\WINDOWS\system32\assignedaccessmanagersvc.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000924160 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000898048 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000887808 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000872448 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000863544 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000850760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000833024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000804352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000791040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000769536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000758688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000749568 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000735232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000730592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000699392 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000679424 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000676048 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000669184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000663552 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000663040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000651576 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessManager.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000615440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000604344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000586040 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000555232 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppResolver.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000553664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000543744 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000540720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000532992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000531968 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000522752 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000515152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000513904 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000506192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000495616 _____ (Microsoft Corporation) C:\WINDOWS\system32\DDDS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000478720 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskcomp.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000474936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2019-06-13 12:36 - 2019-06-13 12:36 - 000462136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000451104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000430904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Classpnp.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000427688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppResolver.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000424960 _____ (Microsoft Corporation) C:\WINDOWS\system32\SDDS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000419368 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmicmiplugin.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000404792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000398848 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000398208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000389120 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingASDS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000375544 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\esentutl.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000365056 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationControllerPS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000362496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskcomp.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000359936 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000353280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000351744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000351232 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000345600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000340480 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esentutl.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fveapibase.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000287912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SIHClient.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000282424 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000280576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000279040 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000262160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys 2019-06-13 12:36 - 2019-06-13 12:36 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000247608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000246784 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000244224 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpnServiceDS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000237056 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000218624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wdigest.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\spacebridge.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\FilterDS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSrv.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000152896 _____ (Microsoft Corporation) C:\WINDOWS\system32\userenv.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000152400 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000137056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\userenv.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000122680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000114648 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompPkgSup.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\AxInstSv.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingFilterDS.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000091424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CompPkgSup.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000087864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000069120 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\AssignedAccessRuntime.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000051712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2019-06-13 12:36 - 2019-06-13 12:36 - 000047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AssignedAccessRuntime.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000041472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryCore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryCore.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2019-06-13 12:36 - 2019-06-13 12:36 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2019-06-13 12:35 - 2019-06-13 12:36 - 000156984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 002928640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 002707968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 002653696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 001298952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 001253688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2019-06-13 12:35 - 2019-06-13 12:35 - 001229824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 001048592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2019-06-13 12:35 - 2019-06-13 12:35 - 000853504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000773632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000752144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000651064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000386576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000292664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000240128 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000196920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spacedump.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000165376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\spacebridge.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000125528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000101176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000090424 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2019-06-13 12:35 - 2019-06-13 12:35 - 000080400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rndismp6.sys 2019-06-13 12:35 - 2019-06-13 12:35 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll 2019-06-12 13:11 - 2019-06-28 11:09 - 000000000 ____D C:\Users\Absent\AppData\Local\CrashDumps 2019-06-12 12:43 - 2019-06-12 12:43 - 001993528 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcupdate_GenuineIntel.dll 2019-06-10 21:00 - 2019-06-23 21:19 - 000000000 ___RD C:\Users\Absent\Juegos 2019-06-10 17:45 - 2019-06-10 18:09 - 000000000 ____D C:\Users\Absent\AppData\Roaming\Game 2019-06-10 17:45 - 2019-06-10 17:45 - 000000000 ____D C:\Users\Public\Documents\Steam 2019-06-10 17:44 - 2019-06-10 17:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crash Bandicoot N Sane Trilogy 2019-06-09 20:19 - 2019-06-18 16:28 - 000000000 ____D C:\WINDOWS\Minidump 2019-06-09 19:55 - 2019-06-09 19:55 - 000000000 ____D C:\Users\Absent\AppData\Local\Rockstar Games 2019-06-09 19:39 - 2019-06-09 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grand Theft Auto V 2019-06-07 13:13 - 2019-06-07 13:13 - 000001159 _____ C:\Users\Absent\MSI Afterburner.lnk 2019-06-06 15:03 - 2019-06-06 15:03 - 000000000 __SHD C:\Users\Public\Shared Files 2019-06-06 14:56 - 2019-06-06 14:56 - 000000000 ____D C:\Users\Absent\AppData\Local\FortniteGame 2019-06-05 18:09 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll 2019-06-05 18:07 - 2019-06-06 14:56 - 000000000 ____D C:\Users\Absent\AppData\Local\UnrealEngine 2019-06-05 18:07 - 2019-06-05 18:07 - 000000000 ____D C:\Users\Absent\AppData\Local\UnrealEngineLauncher 2019-06-05 18:07 - 2019-06-05 18:07 - 000000000 ____D C:\Users\Absent\AppData\Local\EpicGamesLauncher 2019-06-05 18:07 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll 2019-06-05 18:06 - 2019-06-05 18:10 - 000000000 ____D C:\ProgramData\Epic 2019-06-05 18:06 - 2019-06-05 18:06 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2019-06-05 13:03 - 2019-05-22 18:01 - 005432688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2019-06-05 13:03 - 2019-05-22 18:01 - 002637808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2019-06-05 13:03 - 2019-05-22 18:01 - 001767920 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2019-06-05 13:03 - 2019-05-22 18:01 - 000650608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2019-06-05 13:03 - 2019-05-22 18:01 - 000450872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll 2019-06-05 13:03 - 2019-05-22 18:01 - 000125240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2019-06-05 13:03 - 2019-05-22 18:01 - 000083440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2019-06-05 13:03 - 2019-05-22 11:03 - 008579232 _____ C:\WINDOWS\system32\nvcoproc.bin 2019-06-05 13:03 - 2019-03-08 18:13 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat 2019-06-05 13:02 - 2019-06-05 13:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation 2019-06-05 13:00 - 2019-05-23 12:25 - 000260512 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2019-06-05 13:00 - 2019-05-23 12:25 - 000260512 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2019-06-05 13:00 - 2019-05-23 12:24 - 001007008 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2019-06-05 13:00 - 2019-05-23 12:24 - 001007008 _____ C:\WINDOWS\system32\vulkan-1.dll 2019-06-05 13:00 - 2019-05-23 12:24 - 000870304 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2019-06-05 13:00 - 2019-05-23 12:24 - 000870304 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2019-06-05 13:00 - 2019-05-23 12:24 - 000552352 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2019-06-05 13:00 - 2019-05-23 12:24 - 000457304 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2019-06-05 13:00 - 2019-05-23 12:24 - 000286624 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2019-06-05 13:00 - 2019-05-23 12:24 - 000286624 _____ C:\WINDOWS\system32\vulkaninfo.exe 2019-06-05 13:00 - 2019-05-23 12:23 - 011051968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll 2019-06-05 13:00 - 2019-05-23 12:23 - 009487240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll 2019-06-05 13:00 - 2019-05-23 12:22 - 000821120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll 2019-06-05 13:00 - 2019-05-23 12:22 - 000675016 _____ C:\WINDOWS\system32\nvofapi64.dll 2019-06-05 13:00 - 2019-05-23 12:22 - 000631224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2019-06-05 13:00 - 2019-05-23 12:22 - 000541904 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2019-06-05 13:00 - 2019-05-23 12:22 - 000522120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2019-06-05 13:00 - 2019-05-23 12:21 - 002039768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2019-06-05 13:00 - 2019-05-23 12:21 - 001470856 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2019-06-05 13:00 - 2019-05-23 12:21 - 001133824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2019-06-05 13:00 - 2019-05-23 10:13 - 000046848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll 2019-06-05 13:00 - 2019-05-22 19:39 - 000052456 _____ C:\WINDOWS\system32\nvinfo.pb 2019-06-05 13:00 - 2019-04-17 00:44 - 000075600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvhci.sys 2019-06-05 12:59 - 2019-05-23 12:21 - 005422040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 004759640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 001722456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6443086.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 001542232 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 001467864 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6443086.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 001162200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 000912472 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 000808408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2019-06-05 12:59 - 2019-05-23 12:21 - 000654752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2019-06-05 12:59 - 2019-05-23 12:20 - 040412576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll 2019-06-05 12:59 - 2019-05-23 12:20 - 035269592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll 2019-06-05 12:59 - 2019-05-23 12:20 - 020190808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2019-06-05 12:59 - 2019-05-23 12:20 - 017467024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2019-06-05 12:59 - 2019-05-23 12:14 - 005085672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2019-06-05 12:59 - 2019-05-23 12:14 - 004340480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2019-06-05 12:42 - 2019-06-05 12:42 - 000003976 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2019-06-05 12:42 - 000003940 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2019-06-05 12:42 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2019-06-05 12:42 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2019-06-05 12:42 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2019-06-05 12:42 - 000003858 _____ C:\WINDOWS\System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2019-06-05 12:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2019-06-05 12:42 - 2019-05-22 09:45 - 002785592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2019-06-05 12:42 - 2019-05-22 09:45 - 002164536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2019-06-05 12:42 - 2019-05-22 09:45 - 001316208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll 2019-06-05 12:41 - 2019-04-17 03:42 - 000069840 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys 2019-06-03 11:17 - 2019-06-03 11:17 - 000019680 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\eac_usermode_1439881395652.dll 2019-06-01 09:35 - 2019-06-17 13:14 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2019-06-01 09:35 - 2019-06-01 10:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios 2019-06-01 08:30 - 2019-06-06 21:20 - 000000000 ____D C:\Users\Absent\AppData\Roaming\EasyAntiCheat 2019-06-01 08:30 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll 2019-06-01 08:30 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll 2019-06-01 08:30 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll 2019-06-01 08:30 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll 2019-06-01 08:30 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll 2019-06-01 08:30 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll 2019-06-01 08:30 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll 2019-06-01 08:30 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll 2019-06-01 08:30 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll 2019-06-01 08:30 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll 2019-05-30 15:22 - 2019-05-30 15:22 - 000000000 ____D C:\Users\Absent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2019-05-30 15:15 - 2019-05-30 15:15 - 000000000 ____D C:\Users\Absent\AppData\Local\Steam 2019-05-30 15:12 - 2019-06-21 12:18 - 000000000 ____D C:\Program Files (x86)\Steam 2019-05-30 15:12 - 2019-05-30 15:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam ==================== One month (modified) ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2019-06-28 16:24 - 2018-11-16 13:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2019-06-28 16:13 - 2018-09-15 03:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2019-06-28 13:47 - 2018-11-16 18:22 - 000000000 ____D C:\Users\Absent\AppData\Roaming\.minecraft 2019-06-28 13:40 - 2018-11-16 13:19 - 000000000 ____D C:\Users\Absent 2019-06-28 13:28 - 2018-09-01 12:21 - 000000000 ____D C:\Program Files (x86)\Google 2019-06-28 13:26 - 2018-11-16 13:27 - 001773362 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2019-06-28 13:26 - 2018-09-15 12:37 - 000788392 _____ C:\WINDOWS\system32\perfh00A.dat 2019-06-28 13:26 - 2018-09-15 12:37 - 000155682 _____ C:\WINDOWS\system32\perfc00A.dat 2019-06-28 13:26 - 2018-09-15 03:31 - 000000000 ____D C:\WINDOWS\INF 2019-06-28 13:21 - 2018-09-01 12:41 - 000000000 ____D C:\ProgramData\NVIDIA 2019-06-28 13:20 - 2018-11-19 11:07 - 000003132 _____ C:\WINDOWS\System32\Tasks\MSIAfterburner 2019-06-28 13:20 - 2018-11-16 13:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2019-06-28 13:20 - 2018-09-15 02:09 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2019-06-28 11:35 - 2018-09-15 03:33 - 000000000 ___HD C:\Program Files\WindowsApps 2019-06-28 11:35 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\AppReadiness 2019-06-28 07:50 - 2019-01-04 16:17 - 000004210 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{35C83302-2B05-4DF8-9B0D-47D37575E842} 2019-06-27 10:22 - 2018-11-16 17:47 - 000003936 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2019-06-25 17:13 - 2018-09-01 12:13 - 000007599 _____ C:\Users\Absent\AppData\Local\Resmon.ResmonCfg 2019-06-25 16:54 - 2018-09-15 03:23 - 000000000 ____D C:\WINDOWS\CbsTemp 2019-06-25 15:25 - 2018-09-15 03:33 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2019-06-25 14:46 - 2018-11-16 13:21 - 000000000 ____D C:\Users\Absent\AppData\Local\Packages 2019-06-24 12:40 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\NDF 2019-06-23 18:24 - 2019-01-04 16:28 - 000000000 ____D C:\Users\Absent\Documents\CPY_SAVES 2019-06-22 16:09 - 2018-11-19 10:57 - 000000000 ____D C:\WINDOWS\SysWOW64\directx 2019-06-21 20:45 - 2019-05-02 08:17 - 000000000 ____D C:\Users\Absent\Downloads\Documentos de texto 2019-06-21 20:44 - 2019-05-02 08:11 - 000003691 ___RX C:\Users\Absent\Downloads\Organizador.bat 2019-06-21 20:42 - 2019-05-02 08:18 - 000000000 ____D C:\Users\Absent\Downloads\Rar 2019-06-21 20:42 - 2019-05-02 08:17 - 000000000 ____D C:\Users\Absent\Downloads\Musica 2019-06-21 19:47 - 2019-05-07 13:49 - 000000000 ____D C:\Users\Absent\AppData\Local\ESET 2019-06-21 19:41 - 2019-05-07 16:20 - 000003368 _____ C:\WINDOWS\System32\Tasks\EOSv3 Scheduler onLogOn 2019-06-21 19:41 - 2019-05-07 16:20 - 000003362 _____ C:\WINDOWS\System32\Tasks\EOSv3 Scheduler onTime 2019-06-20 21:18 - 2019-05-22 14:45 - 000002580 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Empresarial.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002531 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002494 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002485 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk 2019-06-20 21:18 - 2019-05-22 14:45 - 000002439 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2019-06-20 21:17 - 2018-11-16 14:31 - 000000000 ____D C:\Program Files (x86)\Microsoft Office 2019-06-20 21:15 - 2018-11-16 13:38 - 000000000 ____D C:\ProgramData\Packages 2019-06-20 18:40 - 2018-11-19 10:55 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner 2019-06-18 12:26 - 2018-12-03 12:21 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2019-06-17 13:23 - 2018-11-16 17:32 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUS 2019-06-14 17:42 - 2019-05-22 14:37 - 000000000 ___RD C:\Users\Absent\Desktop\Tesis 2019-06-14 11:14 - 2018-11-16 13:17 - 000439800 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2019-06-13 17:27 - 2018-09-15 03:33 - 000000000 ___RD C:\Program Files\Windows Defender 2019-06-13 17:27 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\system32\migwiz 2019-06-13 17:27 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\bcastdvr 2019-06-12 12:45 - 2018-09-15 03:36 - 000835688 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2019-06-12 12:45 - 2018-09-15 03:36 - 000179816 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2019-06-12 12:45 - 2018-09-01 14:28 - 000000000 ____D C:\WINDOWS\system32\MRT 2019-06-12 12:43 - 2018-09-01 14:28 - 135349160 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2019-06-07 15:54 - 2019-02-02 17:08 - 000000000 ____D C:\Users\Absent\ansel 2019-06-06 21:16 - 2018-11-16 19:30 - 000000000 ____D C:\Users\Absent\.minecraft 2019-06-06 21:16 - 2018-11-16 11:00 - 000000000 ____D C:\ESD 2019-06-06 21:15 - 2018-09-01 14:27 - 000000000 ____D C:\Users\Absent\AppData\Local\NVIDIA Corporation 2019-06-06 21:15 - 2018-09-01 12:35 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2019-06-06 15:03 - 2018-09-15 03:33 - 000000000 __SHD C:\Users\Public\Libraries 2019-06-06 12:38 - 2019-01-04 16:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Far Cry 5 REPACK JPW 2019-06-05 18:10 - 2018-11-19 13:25 - 000000000 ____D C:\Users\Absent\AppData\Local\D3DSCache 2019-06-05 18:09 - 2018-09-01 12:37 - 000000000 ____D C:\ProgramData\Package Cache 2019-06-05 16:55 - 2019-02-01 18:13 - 000074552 _____ (Wellbia.com Co., Ltd.) C:\WINDOWS\xhunter1.sys 2019-06-05 16:08 - 2018-11-16 18:38 - 000000000 ____D C:\Users\Absent\AppData\Local\NVIDIA 2019-06-05 13:45 - 2018-09-01 12:41 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2019-06-05 13:03 - 2018-09-15 03:33 - 000000000 ____D C:\WINDOWS\Help 2019-06-05 13:03 - 2018-09-01 12:34 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2019-06-05 12:50 - 2018-11-16 13:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2019-06-05 12:43 - 2019-02-01 12:16 - 000000000 ____D C:\Users\Absent\AppData\Local\MEGAsync 2019-06-05 12:42 - 2018-11-16 13:21 - 000004308 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:42 - 2018-11-16 13:21 - 000004106 _____ C:\WINDOWS\System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:41 - 2018-11-16 13:21 - 000003894 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-05 12:41 - 2018-11-16 13:21 - 000003654 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2019-06-01 10:22 - 2019-02-01 12:18 - 000000000 ____D C:\Users\Absent\Documents\MEGAsync Downloads 2019-06-01 09:35 - 2018-11-19 08:07 - 000000000 ____D C:\ProgramData\Hi-Rez Studios 2019-06-01 08:30 - 2019-01-31 18:04 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat 2019-06-01 08:30 - 2018-11-19 12:09 - 000000000 ____D C:\Users\Absent\Documents\My Games 2019-05-30 12:44 - 2018-11-16 13:38 - 000000000 ____D C:\Users\Absent\AppData\Local\Comms ==================== Files in the root of some directories ================ 2019-06-28 10:46 - 2019-06-28 11:00 - 000002522 _____ () C:\Users\Absent\BAM.bat 2018-11-16 19:30 - 2019-02-13 20:29 - 000000245 _____ () C:\Users\Absent\mdatac.dat 2018-11-16 17:17 - 2018-11-18 16:30 - 001999539 _____ () C:\Users\Absent\Test.exe 2019-06-21 18:56 - 2019-06-21 18:56 - 000126464 _____ () C:\Users\Absent\AppData\Local\lobby.dat 2018-09-01 12:13 - 2019-06-25 17:13 - 000007599 _____ () C:\Users\Absent\AppData\Local\Resmon.ResmonCfg 2019-06-21 18:55 - 2019-06-21 18:55 - 000722944 _____ () C:\Users\Absent\AppData\Local\sha.db ==================== SigCheck =============================== (There is no automatic fix for files that do not pass verification.) ==================== End of FRST.txt ============================