• Registrarse
  • Iniciar sesión


  • Página 1 de 2 12 ÚltimoÚltimo
    Resultados 1 al 10 de 16

    Malware Adware.Elex.ShrtCln no se elimina

    Necesito ayuda Malwarebytes me detecta 1 malware y 2 programas potencialmente no deseados. Malwarebytes www.malwarebytes.com -Detalles del registro- Fecha del análisis: 20/11/17 Hora del análisis: 21:37 Archivo de registro: 2502131e-ce54-11e7-82cd-40167ee6ff88.json Administrador: Sí -Información del software- ...

    1. #1
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Malware Adware.Elex.ShrtCln no se elimina

      Necesito ayuda Malwarebytes me detecta 1 malware y 2 programas potencialmente no deseados.

      Malwarebytes
      www.malwarebytes.com

      -Detalles del registro-
      Fecha del análisis: 20/11/17
      Hora del análisis: 21:37
      Archivo de registro: 2502131e-ce54-11e7-82cd-40167ee6ff88.json
      Administrador: Sí

      -Información del software-
      Versión: 3.3.1.2183
      Versión de los componentes: 1.0.236
      Versión del paquete de actualización: 1.0.3306
      Licencia: Gratis

      -Información del sistema-
      SO: Windows 10 (Build 16299.64)
      CPU: x64
      Sistema de archivos: NTFS
      Usuario: CHERNOPC\Gustavo Caro

      -Resumen del análisis-
      Tipo de análisis: Análisis de amenazas
      Resultado: Completado
      Objetos analizados: 371287
      Amenazas detectadas: 3
      Amenazas en cuarentena: 0
      (No hay elementos maliciosos detectados)
      Tiempo transcurrido: 0 min, 35 seg

      -Opciones de análisis-
      Memoria: Activado
      Inicio: Activado
      Sistema de archivos: Activado
      Archivo: Activado
      Rootkits: Desactivado
      Heurística: Activado
      PUP: Detectar
      PUM: Detectar

      -Detalles del análisis-
      Proceso: 0
      (No hay elementos maliciosos detectados)

      Módulo: 0
      (No hay elementos maliciosos detectados)

      Clave del registro: 0
      (No hay elementos maliciosos detectados)

      Valor del registro: 0
      (No hay elementos maliciosos detectados)

      Datos del registro: 0
      (No hay elementos maliciosos detectados)

      Secuencia de datos: 0
      (No hay elementos maliciosos detectados)

      Carpeta: 0
      (No hay elementos maliciosos detectados)

      Archivo: 3
      Adware.Elex.ShrtCln, C:\USERS\GUSTAVO CARO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Sin acciones por parte del usuario, [2306], [454718],1.0.3306
      PUP.Optional.FindWide, C:\USERS\GUSTAVO CARO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Sin acciones por parte del usuario, [7873], [455238],1.0.3306
      PUP.Optional.FindWide, C:\USERS\GUSTAVO CARO\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Sin acciones por parte del usuario, [7873], [455238],1.0.3306

      Sector físico: 0
      (No hay elementos maliciosos detectados)


      (end)


      Los he eliminado muchas veces, viendo otros post, con AdwCleaner, Malwarebytes, JRT y CCleaner, pero siguen apareciendo, que puedo hacer?

    2. #2
      Moderadora Gral.
      Avatar de @Daniela
      Registrado
      abr 2011
      Ubicación
      España
      Mensajes
      24.352

      Re: Malware Adware.Elex.ShrtCln no se elimina

      Hola x3rn0b0k

      Pon los reportes de AdwCleaner y Jrt para revisarlos.

      Descarga Farbar Recovery Scan Tool segun la arquitectura de tu sistema (32 o 64 bits)

      • La guardas en el escritorio >> Esto es muy importante..
      • Doble clic para ejecutar Frst.exe. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona "Ejecutar como Administrador.")
      • En la ventana del Disclaimer, presiona Yes.

      • En la nueva ventana que se abre, presiona el botón Scan y espera paciente a que concluya el análisis.
      • Se abrirán dos (2) archivos (Logs), Frst.txt y Addition.txt, estos estarán grabados en tu escritorio.

      • Para terminar abres los archivos Frst.txt y Addition.Txt copia y pega todo su contenido en tu próxima respuesta. Utiliza dos mensajes si te dice que es muy largo.


      Un saludo
      ✿◕‿◕✿ La impaciencia no es buena compañía ✿◕‿◕✿

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    3. #3
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      ADW Cleaner

      # AdwCleaner 7.0.4.0 - Logfile created on Wed Nov 22 05:06:31 2017
      # Updated on 2017/27/10 by Malwarebytes
      # Running on Windows 10 Pro (X64)
      # Mode: clean
      # Support: https://www.malwarebytes.com/support

      ***** [ Services ] *****

      No malicious services deleted.

      ***** [ Folders ] *****

      No malicious folders deleted.

      ***** [ Files ] *****

      No malicious files deleted.

      ***** [ DLL ] *****

      No malicious DLLs cleaned.

      ***** [ WMI ] *****

      No malicious WMI cleaned.

      ***** [ Shortcuts ] *****

      No malicious shortcuts cleaned.

      ***** [ Tasks ] *****

      No malicious tasks deleted.

      ***** [ Registry ] *****

      No malicious registry entries deleted.

      ***** [ Firefox (and derivatives) ] *****

      No malicious Firefox entries deleted.

      ***** [ Chromium (and derivatives) ] *****

      SearchProvider deleted: FindWide - search.findwide.com


      *************************

      ::Tracing keys deleted
      ::Winsock settings cleared
      ::Additional Actions: 0



      *************************

      C:/AdwCleaner/AdwCleaner[S0].txt - [1126 B] - [2017/11/22 519]


      ########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt ##########

    4. #4
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      JRT

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Junkware Removal Tool (JRT) by Malwarebytes
      Version: 8.1.4 (07.09.2017)
      Operating System: Windows 10 Pro x64
      Ran by Gustavo Caro (Administrator) on 22-11-2017 at 2:08:48,78
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




      File System: 1

      Successfully deleted: C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio (Folder)



      Registry: 0





      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Scan was completed on 22-11-2017 at 2:09:49,06
      End of JRT log
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    5. #5
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      Additional scan result of Farbar Recovery Scan Tool (x64) Version: 19-11-2017
      Ran by Gustavo Caro (22-11-2017 02:12:13)
      Running from C:\Users\Gustavo Caro\Desktop
      Windows 10 Pro Version 1709 16299.64 (X64) (2017-11-11 15:15:46)
      Boot Mode: Normal
      ==========================================================


      ==================== Accounts: =============================

      Administrator (S-1-5-21-4086068796-3168597730-1078569096-500 - Administrator - Disabled)
      DefaultAccount (S-1-5-21-4086068796-3168597730-1078569096-503 - Limited - Disabled)
      Guest (S-1-5-21-4086068796-3168597730-1078569096-501 - Limited - Disabled)
      Gustavo Caro (S-1-5-21-4086068796-3168597730-1078569096-1001 - Administrator - Enabled) => C:\Users\Gustavo Caro
      WDAGUtilityAccount (S-1-5-21-4086068796-3168597730-1078569096-504 - Limited - Disabled)

      ==================== Security Center ========================

      (If an entry is included in the fixlist, it will be removed.)

      AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

      ==================== Installed Programs ======================

      (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

      µTorrent (HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\uTorrent) (Version: 3.5.0.44090 - BitTorrent Inc.)
      Action! (HKLM-x32\...\Mirillis Action!) (Version: 2.8.1 - Mirillis)
      Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
      Adobe Reader XI (11.0.23) - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AB0000000001}) (Version: 11.0.23 - Adobe Systems Incorporated)
      Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.)
      AMD Catalyst Install Manager (HKLM\...\{47F6824F-CA45-FAD2-2F5B-906D36BA3393}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
      AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)
      Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.35.1 - Asmedia Technology)
      Audacity 2.1.3 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.3 - Audacity Team)
      AutoHotkey 1.1.26.01 (HKLM\...\AutoHotkey) (Version: 1.1.26.01 - Lexikos)
      Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
      CCleaner (HKLM\...\CCleaner) (Version: 5.36 - Piriform)
      Classic Shell (HKLM\...\{D4B3454F-7529-4F5F-851D-2C36933F7D64}) (Version: 4.2.5 - IvoSoft)
      Eines de correcció del Microsoft Office 2016: català (HKLM\...\{90160000-001F-0403-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
      Ferramentas de verificación de Microsoft Office 2016 - Galego (HKLM\...\{90160000-001F-0456-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
      Firewatch MULTi2 - ElAmigos versión 1.0 u21 (HKLM-x32\...\{C2071C9A-F290-4576-887A-D6DA3A7AE232}_is1) (Version: 1.0 u21 - Campo Santo)
      Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
      Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
      Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.115 - Google Inc.) Hidden
      Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
      ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
      Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
      Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
      KB4023057 (HKLM\...\{B977A833-7734-41A5-B820-1F23D81DC87B}) (Version: 2.6.0.0 - Microsoft Corporation)
      Lightshot-5.4.0.10 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.10 - Skillbrains)
      Logitech Gaming Software 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
      Malwarebytes versión 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
      Microsoft Office Professional Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
      Microsoft OneDrive (HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
      Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
      Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
      Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
      Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
      Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
      Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
      Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
      Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
      Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
      Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7023 - Realtek Semiconductor Corp.)
      Revisores de Texto do Microsoft Office 2016 – Português (Brasil) (HKLM\...\{90160000-001F-0416-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
      Samsung SideSync (HKLM-x32\...\Samsung SideSync) (Version: 4.7.5.203 - Samsung Electronics Co., Ltd.)
      Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.63.0 - Samsung Electronics Co., Ltd.)
      Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
      Smart View (HKLM-x32\...\{5F8A3D28-643E-4062-80C9-37AD463EB61D}) (Version: 1.0.0.0 - Samsung )
      Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
      Spotify (HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\Spotify) (Version: 1.0.67.582.g19436fa3 - Spotify AB)
      swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
      TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
      TP-LINK Wireless Client Utility (HKLM-x32\...\{B3639A0D-D29C-4F6C-AB59-FCAA34E50589}) (Version: 7.0 - TP-LINK) Hidden
      Update for Skype for Business 2016 (KB3114846) 64-Bit Edition (HKLM\...\{90160000-0011-0000-1000-0000000FF1CE}_Office16.PROPLUS_{286F464B-2FDF-4107-83A5-DEB08D2AD268}) (Version: - Microsoft)
      Update for Skype for Business 2016 (KB3114846) 64-Bit Edition (HKLM\...\{90160000-00C1-0000-1000-0000000FF1CE}_Office16.PROPLUS_{286F464B-2FDF-4107-83A5-DEB08D2AD268}) (Version: - Microsoft)
      Update for Skype for Business 2016 (KB3114846) 64-Bit Edition (HKLM\...\{90160000-012B-0C0A-1000-0000000FF1CE}_Office16.PROPLUS_{286F464B-2FDF-4107-83A5-DEB08D2AD268}) (Version: - Microsoft)
      UpdateAssistant (HKLM-x32\...\{DE45508F-369E-4476-8F19-088F4933340E}) (Version: 1.8.0.0 - Microsoft Corporation) Hidden
      Utilidad de Cliente Inalámbrico TP-LINK (HKLM-x32\...\{E9E37560-9D7F-4BD1-8D07-D747EC67F733}) (Version: - TP-LINK)
      VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)
      WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)

      ==================== Custom CLSID (Whitelisted): ==========================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
      ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
      ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
      ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
      ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-04-24] (Advanced Micro Devices, Inc.)
      ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
      ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
      ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)

      ==================== Scheduled Tasks (Whitelisted) =============

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      Task: {100D15F5-7975-4AB0-BE64-171851E28BBD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
      Task: {31DC88AD-43D2-4115-B194-5D1CB073658A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-10-18] (Piriform Ltd)
      Task: {38B3480C-19FD-427F-B62F-E9DE9D4C342E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated)
      Task: {4F2F060D-4558-48D0-A737-73576F3AE24A} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION
      Task: {6B99F58B-EFEC-4C40-BB54-37C2D2198509} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-10-18] (Piriform Ltd)
      Task: {7A39D8DB-0122-4FC2-8D89-D19687142AC6} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-30] (Google Inc.)
      Task: {7B03574F-8989-4101-9717-01AF3FA78228} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)
      Task: {97F702F8-762D-490F-98DA-54E05F83D3EF} - System32\Tasks\ASUS\RunDAOD => C:\Windows\DAODx.exe [2009-03-30] ()
      Task: {A2C272E3-7756-44B4-99EA-783362203379} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-10-30] (Google Inc.)
      Task: {ECE71396-22B7-4DD2-A867-30175ABF15BF} - System32\Tasks\[email protected]\Windows64Professional => wmic [Argument = path SoftwareLicensingProduct where (ID="2de67392-b7a7-462a-b1ca-108dd189f588") call Activate]
      Task: {F4E0A0FE-9417-4472-9A86-A18373EC8715} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
      Task: {FC4ECBD9-9E9A-4E09-85C3-11D8C1BD80F8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)

      (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


      ==================== Shortcuts & WMI ========================

      (The entries could be listed to be restored or removed.)


      ==================== Loaded Modules (Whitelisted) ==============

      2017-09-29 10:41 - 2017-09-29 10:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
      2017-11-16 02:10 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
      2017-09-29 10:42 - 2017-09-29 11:42 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
      2017-09-29 10:42 - 2017-09-29 11:42 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
      2017-11-17 20:01 - 2017-11-17 20:02 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
      2017-11-17 20:01 - 2017-11-17 20:02 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
      2017-11-17 20:01 - 2017-11-17 20:03 - 025461760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkyWrap.dll
      2017-11-17 20:01 - 2017-11-17 20:02 - 002552832 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\skypert.dll
      2017-11-13 19:57 - 2017-11-10 06:57 - 002871640 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.94\swiftshader\libglesv2.dll
      2017-11-13 19:57 - 2017-11-10 06:57 - 000138072 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.94\swiftshader\libegl.dll

      ==================== Alternate Data Streams (Whitelisted) =========

      (If an entry is included in the fixlist, only the ADS will be removed.)


      ==================== Safe Mode (Whitelisted) ===================

      (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

      ==================== Association (Whitelisted) ===============

      (If an entry is included in the fixlist, the registry item will be restored to default or removed.)


      ==================== Internet Explorer trusted/restricted ===============

      (If an entry is included in the fixlist, it will be removed from the registry.)


      ==================== Hosts content: ===============================

      (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

      2015-10-30 04:24 - 2017-11-17 10:38 - 000000862 _____ C:\WINDOWS\system32\Drivers\etc\hosts

      0.0.0.0 telemetry.malwarebytes.com

      ==================== Other Areas ============================

      (Currently there is no automatic fix for this section.)

      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows Photo Viewer\Papel tapiz de Visualizador de fotos de Windows.jpg
      DNS Servers: 192.168.43.1
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
      Windows Firewall is disabled.

      ==================== MSCONFIG/TASK MANAGER disabled items ==

      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\StartupApproved\Run: => "OneDrive"
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\StartupApproved\Run: => "Skype"

      ==================== FirewallRules (Whitelisted) ===============

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      FirewallRules: [TCP Query User{66684B12-8CC1-460C-A318-8C4DEC37A0BD}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
      FirewallRules: [UDP Query User{2501D582-A8A8-41AD-8BDB-FE3FD5521DEA}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
      FirewallRules: [TCP Query User{1B1B62EC-7465-4306-AC48-E01038139D30}C:\users\gustavo caro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\gustavo caro\appdata\roaming\spotify\spotify.exe
      FirewallRules: [UDP Query User{D9319E13-4A3B-4911-B720-F8364C0C6E75}C:\users\gustavo caro\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\gustavo caro\appdata\roaming\spotify\spotify.exe
      FirewallRules: [TCP Query User{4BEBDF49-503A-47A3-BEF2-A8D94EA60E60}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
      FirewallRules: [UDP Query User{F3C48490-8C22-49D8-A18B-37F3D62CA5E8}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe

      ==================== Restore Points =========================

      ATTENTION: System Restore is disabled
      27-10-2017 12:28:07 Windows Update

      ==================== Faulty Device Manager Devices =============


      ==================== Event log errors: =========================

      Application errors:
      ==================
      Error: (11/22/2017 02:11:33 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
      Description:

      Error: (11/22/2017 02:08:55 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
      Description:

      Error: (11/22/2017 02:08:05 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

      Error: (11/22/2017 02:08:02 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

      Error: (11/22/2017 02:07:27 AM) (Source: KMS-QAD) (EventID: 1001) (User: )
      Description: Event-ID 1001

      Error: (11/22/2017 12:47:02 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

      Error: (11/22/2017 12:46:52 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

      Error: (11/22/2017 12:40:54 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

      Error: (11/22/2017 12:40:46 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

      Error: (11/21/2017 10:42:15 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
      Description: Error de la activación de licencia (slui.exe) con el siguiente código:
      hr=0xC004F074
      Argumentos de línea de comandos:
      RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable


      System errors:
      =============
      Error: (11/22/2017 02:09:58 AM) (Source: DCOM) (EventID: 10016) (User: CHERNOPC)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {D63B10C5-BB46-4990-A94F-E40B9D520160}
      y APPID
      {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
      al usuario CHERNOPC\Gustavo Caro con SID (S-1-5-21-4086068796-3168597730-1078569096-1001) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:08:00 AM) (Source: DCOM) (EventID: 10016) (User: CHERNOPC)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {D63B10C5-BB46-4990-A94F-E40B9D520160}
      y APPID
      {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
      al usuario CHERNOPC\Gustavo Caro con SID (S-1-5-21-4086068796-3168597730-1078569096-1001) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:50 AM) (Source: DCOM) (EventID: 10016) (User: CHERNOPC)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {D63B10C5-BB46-4990-A94F-E40B9D520160}
      y APPID
      {9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
      al usuario CHERNOPC\Gustavo Caro con SID (S-1-5-21-4086068796-3168597730-1078569096-1001) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
      y APPID
      {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
      al usuario NT AUTHORITY\LOCAL SERVICE con SID (S-1-5-19) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
      y APPID
      {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
      al usuario NT AUTHORITY\LOCAL SERVICE con SID (S-1-5-19) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
      y APPID
      {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
      al usuario NT AUTHORITY\LOCAL SERVICE con SID (S-1-5-19) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
      y APPID
      {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
      al usuario NT AUTHORITY\LOCAL SERVICE con SID (S-1-5-19) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
      y APPID
      {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
      al usuario NT AUTHORITY\LOCAL SERVICE con SID (S-1-5-19) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:33 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
      Description: La configuración de permisos application-specific no concede el permiso Activation Local para la aplicación de servidor COM con CLSID
      {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
      y APPID
      {4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
      al usuario NT AUTHORITY\LOCAL SERVICE con SID (S-1-5-19) en la dirección LocalHost (Using LRPC) que se ejecuta en el contenedor de aplicaciones con SID Unavailable (Unavailable). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.

      Error: (11/22/2017 02:07:27 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
      Description: El servicio [email protected] se cerró con el siguiente error:
      El parámetro no es correcto.


      CodeIntegrity:
      ===================================
      Date: 2017-11-16 02:11:57.652
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

      Date: 2017-11-16 0258.476
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

      Date: 2017-11-11 12:16:22.763
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

      Date: 2017-11-11 12:16:22.118
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

      Date: 2017-11-11 12:16:21.999
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

      Date: 2017-11-11 12:16:21.884
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

      Date: 2017-11-11 12:16:21.697
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

      Date: 2017-11-11 12:16:12.095
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

      Date: 2017-11-11 12:16:11.949
      Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.


      ==================== Memory info ===========================

      Processor: AMD FX(tm)-8350 Eight-Core Processor
      Percentage of memory in use: 27%
      Total physical RAM: 8092.84 MB
      Available physical RAM: 5870.86 MB
      Total Virtual: 9500.84 MB
      Available Virtual: 7253.38 MB

      ==================== Drives ================================

      Drive c: () (Fixed) (Total:110.47 GB) (Free:38.06 GB) NTFS
      Drive d: (Reservado para el sistema) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[system with boot components (obtained from drive)]
      Drive f: () (Fixed) (Total:616.08 GB) (Free:90.41 GB) NTFS
      Drive g: (Juegos) (Fixed) (Total:314.9 GB) (Free:89.94 GB) NTFS

      ==================== MBR & Partition Table ==================

      ========================================================
      Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 6670F945)
      Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
      Partition 2: (Not Active) - (Size=110.5 GB) - (Type=07 NTFS)
      Partition 3: (Not Active) - (Size=843 MB) - (Type=27)

      ========================================================
      Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3BAC0390)
      Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
      Partition 2: (Not Active) - (Size=616.1 GB) - (Type=07 NTFS)
      Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
      Partition 4: (Not Active) - (Size=314.9 GB) - (Type=07 NTFS)

      ==================== End of Addition.txt ============================

    6. #6
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-11-2017
      Ran by Gustavo Caro (administrator) on CHERNOPC (22-11-2017 02:11:37)
      Running from C:\Users\Gustavo Caro\Desktop
      Loaded Profiles: Gustavo Caro (Available Profiles: Gustavo Caro)
      Platform: Windows 10 Pro Version 1709 16299.64 (X64) Language: Inglés (Estados Unidos)
      Internet Explorer Version 11 (Default browser: Chrome)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: ***********************************************************************************************************

      ==================== Processes (Whitelisted) =================

      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

      (AMD) C:\Windows\System32\atiesrxx.exe
      (Atheros) C:\Windows\SysWOW64\acs.exe
      (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
      (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
      (DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
      (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
      () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
      (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
      (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
      (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
      (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

      ==================== Registry (Whitelisted) ===========================

      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

      HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
      HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7202520 2013-08-19] (Realtek Semiconductor)
      HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-20] (Logitech Inc.)
      HKLM-x32\...\Run: [TWCU] => C:\Program Files (x86)\TP-LINK\Utilidad de Cliente Inalambrico TP-LINK\TWCU.exe [561263 2011-03-28] ()
      HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
      HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [225944 2017-04-11] ()
      HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10021040 2017-10-18] (Piriform Ltd)
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832272 2017-08-25] (Skype Technologies S.A.)
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\Run: [Spotify] => C:\Users\Gustavo Caro\AppData\Roaming\Spotify\Spotify.exe [21025392 2017-11-10] (Spotify Ltd)
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\...\Run: [Spotify Web Helper] => C:\Users\Gustavo Caro\AppData\Roaming\Spotify\SpotifyWebHelper.exe [777840 2017-11-10] (Spotify Ltd)
      IFEO\OSppSvc.exe: [Debugger] [email protected]

      ==================== Internet (Whitelisted) ====================

      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

      Hosts: 0.0.0.0 telemetry.malwarebytes.com
      Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
      Tcpip\..\Interfaces\{e3de1280-0b9a-4d4e-bb2c-e63c690331c7}: [DhcpNameServer] 192.168.43.1

      Internet Explorer:
      ==================
      BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2016-02-09] (Microsoft Corporation)
      BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_151\bin\ssv.dll [2017-10-30] (Oracle Corporation)
      BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
      BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-30] (Oracle Corporation)
      BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2017-10-30] (Oracle Corporation)
      BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-01-13] (Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2017-10-30] (Oracle Corporation)
      Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
      Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
      Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)
      Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2016-02-09] (Microsoft Corporation)

      FireFox:
      ========
      FF Plugin: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-30] (Oracle Corporation)
      FF Plugin: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-30] (Oracle Corporation)
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
      FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1229199.dll [2017-03-31] (Adobe Systems, Inc.)
      FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-10-30] (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-10-30] (Oracle Corporation)
      FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-02-09] (Microsoft Corporation)
      FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~2\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
      FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-11-01] (Adobe Systems Inc.)

      Chrome:
      =======
      CHR DefaultProfile: Default
      CHR HomePage: Default -> hxxp://google.cl/
      CHR StartupUrls: Default -> "hxxps://boards.4chan.org/w/","hxxps://www.youtube.com/watch?v=EvazDsAWAno","hxxps://www.reddit.com/r/leagueoflegends","hxxp://www.lolskill.net/game/LAS/panconmoco","hxxp://www.probuilds.net/guide/EUW/2310884659/18995872","hxxps://www.facebook.com/groups/SDLG14/?fref=nf","hxxp://boards.4chan.org/wg/","hxxp://boards.4chan.org/wg/thread/6312763/startpage-and-new-tab-thread-3#p6312811","file:///C:/Users/Cherno/Documents/startpage/index.html"
      CHR Profile: C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default [2017-11-22]
      CHR Extension: (YouTube) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-30]
      CHR Extension: (Form Filler) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\bnjjngeaknajbdcgpfkgnonkmififhfo [2017-10-30]
      CHR Extension: (Proxy SwitchySharp) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplabbmogkhghncfbfdeeokoefdjegm [2017-10-30]
      CHR Extension: (LoL Stream Browser) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\edidfaijmhpefkbnobdcepampbncgejp [2017-10-30]
      CHR Extension: (Sketch Toy) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednofnkligfbacmlfggaccfhpkfopojb [2017-10-30]
      CHR Extension: (Musixmatch Lyrics for YouTube) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gfenjblodoldnbiddmggcbkcapiolbig [2017-10-30]
      CHR Extension: (Documentos de Google sin conexión) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-31]
      CHR Extension: (AdBlock) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-11-13]
      CHR Extension: (Google Keep: notas y listas) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmjkmjkepdijhoojdojkdfohbdgmmhki [2017-11-20]
      CHR Extension: (Flying Paint) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\iaddkdiibkddhdbcmmplkhcpgeinggfo [2017-10-30]
      CHR Extension: (InstaG Downloader) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnkdcmgmnegofdddphijckfagibepdlb [2017-11-17]
      CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-30]
      CHR Extension: (Gmail) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-30]
      CHR Extension: (Chrome Media Router) - C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-11-15]

      ==================== Services (Whitelisted) ====================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      R2 ACS; C:\Windows\SysWOW64\acs.exe [499796 2011-04-01] (Atheros) [File not signed]
      S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1548808 2017-10-31] ()
      S2 [email protected]; C:\Windows\[email protected] [26112 2017-10-30] () [File not signed]
      R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc.)
      R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
      S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4297920 2017-09-29] (Microsoft Corporation)
      R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (DEVGURU Co., LTD.)
      R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [355304 2017-09-29] (Microsoft Corporation)
      R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [105944 2017-09-29] (Microsoft Corporation)

      ===================== Drivers (Whitelisted) ======================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      R3 amdkmdag; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmdag.sys [36558208 2017-05-16] (Advanced Micro Devices, Inc.)
      R3 amdkmdap; C:\WINDOWS\System32\DriverStore\FileRepository\c0313676.inf_amd64_96bbc33bec5c7fae\atikmpag.sys [528760 2017-05-16] (Advanced Micro Devices, Inc.)
      R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110104 2016-09-28] (Advanced Micro Devices)
      S3 CMUSBDAC; C:\WINDOWS\system32\DRIVERS\CMUSBDAC.sys [3792904 2016-11-30] (C-MEDIA)
      R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
      R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-10-20] (Logitech Inc.)
      R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2017-11-22] (Malwarebytes)
      R1 MpKsl055b75a2; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9A14A74D-E894-47F9-A893-5DF4DE62780C}\MpKsl055b75a2.sys [58120 2017-11-21] (Microsoft Corporation)
      R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
      S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44608 2017-09-29] (Microsoft Corporation)
      R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [309144 2017-09-29] (Microsoft Corporation)
      R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [119192 2017-09-29] (Microsoft Corporation)
      S3 WSIMD; C:\WINDOWS\system32\DRIVERS\wsimdx.sys [75776 2011-04-01] (Atheros Communications, Inc.)

      ==================== NetSvcs (Whitelisted) ===================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


      ==================== One Month Created files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2017-11-22 02:11 - 2017-11-22 02:11 - 000015034 _____ C:\Users\Gustavo Caro\Desktop\FRST.txt
      2017-11-22 02:11 - 2017-11-22 02:11 - 000000000 ____D C:\FRST
      2017-11-22 02:10 - 2017-11-22 02:10 - 002391552 _____ (Farbar) C:\Users\Gustavo Caro\Desktop\FRST64.exe
      2017-11-22 02:09 - 2017-11-22 02:09 - 000000698 _____ C:\Users\Gustavo Caro\Desktop\JRT.txt
      2017-11-22 01:59 - 2017-11-22 02:03 - 000000000 ____D C:\AdwCleaner
      2017-11-21 01:10 - 2017-11-21 01:10 - 001020677 _____ C:\Users\Gustavo Caro\Downloads\Ps. Organizacional Simon.pptx
      2017-11-20 21:34 - 2017-11-20 21:35 - 008261584 _____ (Malwarebytes) C:\Users\Gustavo Caro\Desktop\AdwCleaner.exe
      2017-11-20 21:34 - 2017-11-20 21:34 - 001790024 _____ (Malwarebytes) C:\Users\Gustavo Caro\Desktop\JRT.exe
      2017-11-20 21:31 - 2017-11-20 21:31 - 000000473 _____ C:\DelFix.txt
      2017-11-20 19:01 - 2017-11-20 20:06 - 000000000 ____D C:\Users\Gustavo Caro\Desktop\Solemne 2 Organizacional
      2017-11-18 00:41 - 2017-11-18 00:41 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\yetanotherstest
      2017-11-17 10:48 - 2017-10-25 06:11 - 017083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll
      2017-11-17 10:48 - 2017-10-25 06:11 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicRuntimes.dll
      2017-11-17 10:48 - 2017-10-25 06:09 - 021753344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll
      2017-11-17 10:48 - 2017-10-25 05:57 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe
      2017-11-17 10:48 - 2017-10-25 05:57 - 000882688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Mirage.Internal.dll
      2017-11-17 10:48 - 2017-10-25 05:56 - 000665600 _____ (Microsoft Corporation) C:\WINDOWS\system32\DHolographicDisplay.dll
      2017-11-17 10:48 - 2017-10-25 03:36 - 000618496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll
      2017-11-17 10:48 - 2017-10-25 01:41 - 000362176 _____ (Microsoft Corporation) C:\WINDOWS\system32\BioIso.exe
      2017-11-17 10:48 - 2017-10-25 01:40 - 001634288 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
      2017-11-17 10:48 - 2017-10-25 01:40 - 000612760 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
      2017-11-17 10:48 - 2017-10-25 01:40 - 000269696 _____ C:\WINDOWS\system32\FaceProcessorCore.dll
      2017-11-17 10:48 - 2017-10-25 01:39 - 007831248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
      2017-11-17 10:48 - 2017-10-25 01:39 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll
      2017-11-17 10:48 - 2017-10-25 01:39 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
      2017-11-17 10:48 - 2017-10-25 01:37 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
      2017-11-17 10:48 - 2017-10-25 01:37 - 000610712 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
      2017-11-17 10:48 - 2017-10-25 01:36 - 008590744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
      2017-11-17 10:48 - 2017-10-25 01:36 - 002400664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
      2017-11-17 10:48 - 2017-10-25 01:36 - 000187288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
      2017-11-17 10:48 - 2017-10-25 01:34 - 002573208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
      2017-11-17 10:48 - 2017-10-25 01:34 - 000839928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Perception.Stub.dll
      2017-11-17 10:48 - 2017-10-25 01:34 - 000710920 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
      2017-11-17 10:48 - 2017-10-25 01:32 - 000559512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys
      2017-11-17 10:48 - 2017-10-25 01:32 - 000147864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys
      2017-11-17 10:48 - 2017-10-25 01:31 - 000436120 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
      2017-11-17 10:48 - 2017-10-25 01:31 - 000045464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys
      2017-11-17 10:48 - 2017-10-25 01:30 - 004487968 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
      2017-11-17 10:48 - 2017-10-25 01:30 - 000555416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
      2017-11-17 10:48 - 2017-10-25 01:29 - 002269080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
      2017-11-17 10:48 - 2017-10-25 01:29 - 001507736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
      2017-11-17 10:48 - 2017-10-25 01:29 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
      2017-11-17 10:48 - 2017-10-25 01:28 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
      2017-11-17 10:48 - 2017-10-25 01:27 - 006791472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
      2017-11-17 10:48 - 2017-10-25 01:27 - 001970520 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
      2017-11-17 10:48 - 2017-10-25 01:27 - 001426152 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
      2017-11-17 10:48 - 2017-10-25 01:27 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
      2017-11-17 10:48 - 2017-10-25 01:24 - 000428952 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys
      2017-11-17 10:48 - 2017-10-25 01:20 - 002717392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
      2017-11-17 10:48 - 2017-10-25 00:52 - 001615720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
      2017-11-17 10:48 - 2017-10-25 00:50 - 001528904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
      2017-11-17 10:48 - 2017-10-25 00:36 - 025246208 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
      2017-11-17 10:48 - 2017-10-25 00:30 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
      2017-11-17 10:48 - 2017-10-25 00:30 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
      2017-11-17 10:48 - 2017-10-25 00:28 - 004648528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
      2017-11-17 10:48 - 2017-10-25 00:28 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
      2017-11-17 10:48 - 2017-10-25 00:28 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
      2017-11-17 10:48 - 2017-10-25 00:27 - 001454568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
      2017-11-17 10:48 - 2017-10-25 00:27 - 001377080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
      2017-11-17 10:48 - 2017-10-25 00:27 - 001015008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
      2017-11-17 10:48 - 2017-10-25 00:24 - 000506256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Perception.Stub.dll
      2017-11-17 10:48 - 2017-10-25 00:22 - 006015200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
      2017-11-17 10:48 - 2017-10-25 00:22 - 002465848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
      2017-11-17 10:48 - 2017-10-25 00:19 - 003670016 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
      2017-11-17 10:48 - 2017-10-25 00:19 - 000097792 _____ C:\WINDOWS\system32\runexehelper.exe
      2017-11-17 10:48 - 2017-10-25 00:18 - 000975872 _____ C:\WINDOWS\system32\FaceProcessor.dll
      2017-11-17 10:48 - 2017-10-25 00:18 - 000328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
      2017-11-17 10:48 - 2017-10-25 00:18 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcLayers.dll
      2017-11-17 10:48 - 2017-10-25 00:18 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_CapabilityAccess.dll
      2017-11-17 10:48 - 2017-10-25 00:18 - 000095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManagerClient.dll
      2017-11-17 10:48 - 2017-10-25 00:18 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll
      2017-11-17 10:48 - 2017-10-25 00:16 - 023658496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
      2017-11-17 10:48 - 2017-10-25 00:16 - 000227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\CapabilityAccessManager.dll
      2017-11-17 10:48 - 2017-10-25 00:16 - 000114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmCx.sys
      2017-11-17 10:48 - 2017-10-25 00:16 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
      2017-11-17 10:48 - 2017-10-25 00:15 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
      2017-11-17 10:48 - 2017-10-25 00:14 - 000541184 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
      2017-11-17 10:48 - 2017-10-25 00:14 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdrleakdiag.exe
      2017-11-17 10:48 - 2017-10-25 00:13 - 013655552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wmp.dll
      2017-11-17 10:48 - 2017-10-25 00:13 - 002972672 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
      2017-11-17 10:48 - 2017-10-25 00:12 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
      2017-11-17 10:48 - 2017-10-25 00:12 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
      2017-11-17 10:48 - 2017-10-25 00:12 - 000599040 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
      2017-11-17 10:48 - 2017-10-25 00:12 - 000568832 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
      2017-11-17 10:48 - 2017-10-25 00:11 - 000768512 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
      2017-11-17 10:48 - 2017-10-25 00:10 - 008099328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
      2017-11-17 10:48 - 2017-10-25 00:10 - 004742144 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
      2017-11-17 10:48 - 2017-10-25 00:10 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
      2017-11-17 10:48 - 2017-10-25 00:09 - 002862080 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
      2017-11-17 10:48 - 2017-10-25 00:09 - 002106368 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
      2017-11-17 10:48 - 2017-10-25 00:09 - 001806336 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
      2017-11-17 10:48 - 2017-10-25 00:09 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 002905600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
      2017-11-17 10:48 - 2017-10-25 00:08 - 002781696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 002633216 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 002392576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 001667584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll
      2017-11-17 10:48 - 2017-10-25 00:08 - 000465408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
      2017-11-17 10:48 - 2017-10-25 00:07 - 018914304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
      2017-11-17 10:48 - 2017-10-25 00:07 - 003478016 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
      2017-11-17 10:48 - 2017-10-25 00:07 - 001485824 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
      2017-11-17 10:48 - 2017-10-25 00:07 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
      2017-11-17 10:48 - 2017-10-25 00:07 - 000372224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcLayers.dll
      2017-11-17 10:48 - 2017-10-25 00:07 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CapabilityAccessManagerClient.dll
      2017-11-17 10:48 - 2017-10-25 00:06 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
      2017-11-17 10:48 - 2017-10-25 00:05 - 019339776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
      2017-11-17 10:48 - 2017-10-25 00:05 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
      2017-11-17 10:48 - 2017-10-25 00:05 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthmodem.sys
      2017-11-17 10:48 - 2017-10-25 00:05 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdtcVSp1res.dll
      2017-11-17 10:48 - 2017-10-25 00:04 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\luafv.sys
      2017-11-17 10:48 - 2017-10-25 00:04 - 000041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdrleakdiag.exe
      2017-11-17 10:48 - 2017-10-25 00:03 - 000450048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
      2017-11-17 10:48 - 2017-10-25 00:02 - 000591872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
      2017-11-17 10:48 - 2017-10-25 00:01 - 012687360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wmp.dll
      2017-11-17 10:48 - 2017-10-25 00:01 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
      2017-11-17 10:48 - 2017-10-24 23:59 - 003679232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
      2017-11-17 10:48 - 2017-10-24 23:59 - 000664576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
      2017-11-17 10:48 - 2017-10-24 23:58 - 002467840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
      2017-11-17 10:48 - 2017-10-24 23:58 - 001322496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
      2017-11-17 10:48 - 2017-10-24 23:58 - 001280000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
      2017-11-17 10:48 - 2017-10-24 23:57 - 006035968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
      2017-11-17 10:48 - 2017-10-24 23:55 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
      2017-11-17 10:48 - 2017-10-24 23:54 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
      2017-11-17 10:48 - 2017-10-21 09:25 - 003313968 _____ C:\WINDOWS\system32\Windows.Mirage.dll
      2017-11-17 10:48 - 2017-10-20 11:17 - 002474584 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
      2017-11-17 10:48 - 2017-10-20 02:08 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
      2017-11-16 02:11 - 2017-11-16 02:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
      2017-11-16 02:10 - 2017-11-22 02:07 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
      2017-11-16 02:10 - 2017-11-16 02:10 - 000000000 ____D C:\Users\Gustavo Caro\Downloads\Malwabytes Premium 3.2.2 Activado
      2017-11-16 02:10 - 2017-11-16 02:10 - 000000000 ____D C:\Program Files\Malwarebytes
      2017-11-16 02:10 - 2017-11-01 08:54 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
      2017-11-14 18:25 - 2017-11-14 18:25 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
      2017-11-14 00:50 - 2017-11-14 00:50 - 001018886 _____ C:\Users\Gustavo Caro\Downloads\Entrevista simon.amr
      2017-11-13 01:47 - 2017-11-22 02:07 - 000000000 ____D C:\ProgramData\Logishrd
      2017-11-13 01:47 - 2017-11-13 01:47 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Logitech
      2017-11-13 01:46 - 2017-11-13 01:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
      2017-11-13 01:45 - 2017-11-13 01:46 - 000000000 ____D C:\Program Files\Logitech Gaming Software
      2017-11-13 01:45 - 2017-11-13 01:45 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Logitech
      2017-11-13 01:45 - 2017-11-13 01:45 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Logishrd
      2017-11-12 18:48 - 2017-11-12 18:48 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Cuphead
      2017-11-12 18:22 - 2017-11-12 18:22 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\MK10
      2017-11-12 16:35 - 2017-11-12 16:35 - 000000132 _____ C:\Users\Gustavo Caro\AppData\Roaming\Prefs. de formato PNG de Adobe CC
      2017-11-12 16:31 - 2017-11-12 16:31 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
      2017-11-12 16:31 - 2017-11-12 16:31 - 000000000 ____D C:\Program Files\Common Files\Adobe
      2017-11-12 15:24 - 2017-11-12 15:24 - 000000000 ____D C:\Users\Gustavo Caro\AppData\LocalLow\Adobe
      2017-11-12 15:08 - 2017-11-12 15:08 - 000000000 ____D C:\WINDOWS\Minidump
      2017-11-12 14:56 - 2017-11-12 14:56 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\SKIDROW
      2017-11-12 01:06 - 2017-11-12 01:06 - 000000000 ____D C:\ProgramData\MB3CoreBackup
      2017-11-11 17:04 - 2017-11-11 12:15 - 000000000 ____D C:\Windows.old
      2017-11-11 17:01 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
      2017-11-11 17:00 - 2017-11-11 17:01 - 000000000 ____D C:\WINDOWS\ServiceProfiles
      2017-11-11 16:59 - 2017-11-11 16:59 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
      2017-11-11 16:59 - 2017-11-11 16:59 - 000000000 ____D C:\WINDOWS\containers
      2017-11-11 16:58 - 2017-11-11 16:58 - 005906264 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 002869248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001856000 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001664000 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001587200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001554216 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001547264 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001463856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001436432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001323840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001261864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 001200024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
      2017-11-11 16:58 - 2017-11-11 16:58 - 001053592 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
      2017-11-11 16:58 - 2017-11-11 16:58 - 000925184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
      2017-11-11 16:58 - 2017-11-11 16:58 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000677280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000649304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
      2017-11-11 16:58 - 2017-11-11 16:58 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000542208 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000478208 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000464416 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000461312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000442880 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000418712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000353688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000326144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000232344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000184984 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000177664 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000139672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000123520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000060824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\urscx01000.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000058880 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
      2017-11-11 16:58 - 2017-11-11 16:58 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
      2017-11-11 16:58 - 2017-11-11 16:58 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
      2017-11-11 16:55 - 2017-11-21 20:15 - 001053278 _____ C:\WINDOWS\system32\perfh00A.dat
      2017-11-11 16:55 - 2017-11-21 20:15 - 000232580 _____ C:\WINDOWS\system32\perfc00A.dat
      2017-11-11 16:55 - 2017-11-11 17:01 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
      2017-11-11 16:55 - 2017-11-11 16:57 - 000000000 ____D C:\WINDOWS\system32\es
      2017-11-11 16:55 - 2017-11-11 16:55 - 000346834 _____ C:\WINDOWS\system32\perfi00A.dat
      2017-11-11 16:55 - 2017-11-11 16:55 - 000043954 _____ C:\WINDOWS\system32\perfd00A.dat
      2017-11-11 16:55 - 2017-11-11 16:55 - 000000000 ____D C:\WINDOWS\SysWOW64\es
      2017-11-11 16:52 - 2017-11-11 16:52 - 009893376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons000a.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 009893376 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons000a.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 009674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData000a.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 009559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData000a.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 001166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 000778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 000124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 000103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
      2017-11-11 16:52 - 2017-11-11 16:52 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
      2017-11-11 16:52 - 2017-11-11 16:52 - 000035456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
      2017-11-11 16:52 - 2017-11-11 16:52 - 000000000 ____D C:\Program Files\Reference Assemblies
      2017-11-11 16:52 - 2017-11-11 16:52 - 000000000 ____D C:\Program Files\MSBuild
      2017-11-11 16:52 - 2017-11-11 16:52 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
      2017-11-11 16:52 - 2017-11-11 16:52 - 000000000 ____D C:\Program Files (x86)\MSBuild
      2017-11-11 12:17 - 2017-11-11 12:17 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
      2017-11-11 12:16 - 2017-11-21 20:15 - 002313608 _____ C:\WINDOWS\system32\PerfStringBackup.INI
      2017-11-11 12:16 - 2017-11-11 12:16 - 000000000 ___HD C:\Users\Gustavo Caro\MicrosoftEdgeBackups
      2017-11-11 12:16 - 2017-11-11 12:16 - 000000000 ____D C:\ProgramData\USOShared
      2017-11-11 12:15 - 2017-11-11 12:15 - 000000020 ___SH C:\Users\Gustavo Caro\ntuser.ini
      2017-11-11 12:14 - 2017-11-11 12:14 - 000007623 _____ C:\WINDOWS\diagwrn.xml
      2017-11-11 12:14 - 2017-11-11 12:14 - 000007623 _____ C:\WINDOWS\diagerr.xml
      2017-11-11 12:13 - 2017-11-22 02:07 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
      2017-11-11 12:13 - 2017-11-22 02:04 - 000004234 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{D44B91F8-5A3D-4DF8-B6B9-F3C21C2DE21F}
      2017-11-11 12:13 - 2017-11-14 01:43 - 000003554 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
      2017-11-11 12:13 - 2017-11-14 01:43 - 000003430 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
      2017-11-11 12:13 - 2017-11-11 12:18 - 000003378 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4086068796-3168597730-1078569096-1001
      2017-11-11 12:13 - 2017-11-11 12:13 - 000002886 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
      2017-11-11 12:13 - 2017-11-11 12:13 - 000002220 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
      2017-11-11 12:13 - 2017-11-11 12:13 - 000002146 _____ C:\WINDOWS\System32\Tasks\StartCN
      2017-11-11 12:13 - 2017-11-11 12:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\[email protected]
      2017-11-11 12:13 - 2017-11-11 12:13 - 000000000 ____D C:\WINDOWS\System32\Tasks\ASUS
      2017-11-11 12:09 - 2017-11-11 12:09 - 000001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
      2017-11-11 12:09 - 2017-09-29 10:41 - 002241024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
      2017-11-11 12:08 - 2017-11-21 01:11 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Packages
      2017-11-11 12:08 - 2017-11-19 19:36 - 000000000 ____D C:\Users\Gustavo Caro
      2017-11-11 12:08 - 2017-11-11 12:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
      2017-11-11 12:06 - 2017-11-22 01:12 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
      2017-11-11 12:06 - 2017-11-18 00:34 - 000390080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
      2017-11-10 13:44 - 2017-11-10 14:00 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Mirillis
      2017-11-10 13:44 - 2017-11-10 13:44 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Mirillis
      2017-11-10 13:44 - 2017-11-10 13:44 - 000000000 ____D C:\ProgramData\Mirillis
      2017-11-10 13:44 - 2017-11-10 13:44 - 000000000 ____D C:\Action!
      2017-11-10 13:43 - 2017-11-11 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mirillis
      2017-11-10 13:43 - 2017-11-10 13:43 - 000000000 ____D C:\Program Files (x86)\Mirillis
      2017-11-10 12:24 - 2017-11-17 10:53 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
      2017-11-08 22:02 - 2017-11-08 22:02 - 000004608 _____ C:\WINDOWS\SECOH-QAD.exe
      2017-11-08 22:02 - 2017-11-08 22:02 - 000003584 _____ C:\WINDOWS\SECOH-QAD.dll
      2017-11-08 22:01 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
      2017-11-08 22:01 - 2017-11-11 12:11 - 000000000 ____D C:\Program Files\KMSpico
      2017-11-08 22:01 - 2010-12-05 23:16 - 000090112 _____ (Vestris Inc.) C:\WINDOWS\system32\Vestris.ResourceLib.dll
      2017-11-08 21:24 - 2017-11-08 21:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
      2017-11-08 21:22 - 2017-11-11 17:04 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office 2016
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002729 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002662 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive para la Empresa.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Empresarial 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002656 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002648 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002642 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
      2017-11-08 21:22 - 2017-11-08 21:22 - 000002628 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
      2017-11-08 21:21 - 2017-11-08 21:21 - 000000000 ____D C:\Program Files\Microsoft SQL Server
      2017-11-08 21:21 - 2017-11-08 21:21 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
      2017-11-08 21:21 - 2017-11-08 21:21 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
      2017-11-08 21:18 - 2017-11-08 21:21 - 000000000 ____D C:\Program Files\Microsoft Office
      2017-11-08 21:18 - 2017-11-08 21:18 - 000000000 __RHD C:\MSOCache
      2017-11-08 21:18 - 2017-11-08 21:18 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Microsoft Help
      2017-11-08 21:18 - 2017-11-08 21:18 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
      2017-11-08 21:18 - 2017-11-08 21:18 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
      2017-11-08 21:18 - 2017-11-08 21:18 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
      2017-11-07 20:05 - 2017-11-07 20:05 - 000000000 ____D C:\Users\Gustavo Caro\AppData\LocalLow\Temp
      2017-11-02 22:54 - 2017-11-02 22:54 - 000000000 ____D C:\Users\Gustavo Caro\AppData\LocalLow\CampoSanto
      2017-11-02 22:51 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firewatch
      2017-11-02 22:08 - 2017-11-11 12:15 - 000000000 ___RD C:\Users\Gustavo Caro\3D Objects
      2017-11-02 20:49 - 2017-11-11 00:22 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\TS3Client
      2017-11-02 20:47 - 2017-11-02 20:47 - 000000970 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
      2017-11-02 20:47 - 2017-11-02 20:47 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client
      2017-11-02 00:34 - 2017-11-02 00:34 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\SmartView2
      2017-11-02 00:31 - 2017-11-02 00:31 - 000000000 ____D C:\Program Files (x86)\Smart View
      2017-11-02 00:15 - 2017-11-02 00:15 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Samsung
      2017-11-02 00:14 - 2017-11-11 17:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
      2017-11-02 00:14 - 2017-11-02 00:14 - 000000000 ____D C:\ProgramData\Samsung
      2017-11-02 00:14 - 2017-11-02 00:14 - 000000000 ____D C:\Program Files\Samsung
      2017-11-02 00:14 - 2017-11-02 00:14 - 000000000 ____D C:\Program Files (x86)\Samsung
      2017-11-01 21:03 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\ShellNew
      2017-11-01 21:03 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey
      2017-11-01 21:03 - 2017-11-01 21:03 - 000000000 ____D C:\Program Files\AutoHotkey
      2017-11-01 18:50 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightshot
      2017-11-01 18:50 - 2017-11-01 18:50 - 000000425 _____ C:\Users\Gustavo Caro\AppData\Local\UserProducts.xml
      2017-11-01 18:50 - 2017-11-01 18:50 - 000000000 ____D C:\Program Files (x86)\Skillbrains
      2017-11-01 14:46 - 2017-11-01 14:46 - 000000000 ____D C:\ProgramData\Malwarebytes
      2017-11-01 12:52 - 2017-11-11 12:15 - 000000000 ___DC C:\WINDOWS\Panther
      2017-11-01 01:24 - 2017-11-01 01:24 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\DBG
      2017-11-01 00:50 - 2017-11-01 00:50 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\ConnectedDevicesPlatform
      2017-11-01 00:29 - 2017-11-11 12:13 - 000022840 _____ C:\WINDOWS\system32\emptyregdb.dat

    7. #7
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      2017-11-01 00:22 - 2017-11-12 18:22 - 000000000 ____D C:\ProgramData\Package Cache
      2017-11-01 00:22 - 2017-11-01 00:22 - 000000000 ____D C:\Program Files (x86)\AMD
      2017-11-01 00:21 - 2017-11-22 02:06 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
      2017-11-01 00:21 - 2017-11-11 17:01 - 000000000 ____D C:\Program Files\Realtek
      2017-11-01 00:21 - 2017-11-11 17:01 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
      2017-11-01 00:21 - 2017-11-11 12:08 - 000000000 ____D C:\Program Files\AMD
      2017-11-01 00:21 - 2017-11-11 12:07 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
      2017-11-01 00:21 - 2017-11-01 00:21 - 000000000 _____ C:\ProgramData\DP45977C.lfl
      2017-10-31 23:59 - 2017-10-31 23:59 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\ElevatedDiagnostics
      2017-10-31 23:17 - 2017-11-12 14:54 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\UnrealEngine
      2017-10-31 23:17 - 2017-10-31 23:17 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\TslGame
      2017-10-31 23:17 - 2017-10-31 23:17 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\NVIDIA Corporation
      2017-10-31 21:05 - 2017-11-18 15:48 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\vlc
      2017-10-31 12:26 - 2017-10-31 12:26 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\NetworkTiles
      2017-10-31 10:14 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
      2017-10-31 10:14 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
      2017-10-31 10:14 - 2017-11-01 14:47 - 000000000 ____D C:\Program Files\CCleaner
      2017-10-31 10:14 - 2017-10-31 10:14 - 000000000 ____D C:\Program Files\Speccy
      2017-10-31 09:54 - 2017-10-31 09:54 - 000000000 ____D C:\Program Files (x86)\ASM104xUSB3
      2017-10-31 09:27 - 2017-10-31 09:27 - 000001051 _____ C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Funciones opcionales.lnk
      2017-10-31 02:49 - 2017-10-31 02:49 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\ClassicShell
      2017-10-31 02:49 - 2017-10-31 02:49 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\ClassicShell
      2017-10-31 02:30 - 2017-11-01 00:26 - 000000000 ____D C:\Program Files\Classic Shell
      2017-10-31 02:29 - 2017-10-31 02:29 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\PeerDistRepub
      2017-10-31 02:06 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
      2017-10-31 02:06 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
      2017-10-31 02:06 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
      2017-10-31 02:06 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
      2017-10-31 02:06 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
      2017-10-31 02:06 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 002526056 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
      2017-10-31 02:06 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
      2017-10-31 02:06 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
      2017-10-31 02:06 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
      2017-10-31 02:06 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
      2017-10-31 02:06 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
      2017-10-31 02:06 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
      2017-10-31 02:06 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
      2017-10-31 02:06 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
      2017-10-31 02:06 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
      2017-10-31 02:06 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
      2017-10-31 02:06 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
      2017-10-31 02:06 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
      2017-10-31 02:06 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
      2017-10-31 02:06 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
      2017-10-31 02:06 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
      2017-10-31 02:06 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
      2017-10-31 02:06 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
      2017-10-31 02:06 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
      2017-10-31 02:06 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
      2017-10-31 02:06 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
      2017-10-31 02:06 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
      2017-10-31 02:06 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
      2017-10-31 02:06 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
      2017-10-31 02:06 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
      2017-10-31 02:06 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
      2017-10-31 02:06 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
      2017-10-31 02:06 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
      2017-10-31 02:06 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
      2017-10-31 02:06 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
      2017-10-31 02:06 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
      2017-10-31 02:06 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
      2017-10-31 02:06 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
      2017-10-31 02:06 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
      2017-10-31 02:06 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
      2017-10-31 02:06 - 2008-07-10 11:01 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
      2017-10-31 02:06 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
      2017-10-31 02:06 - 2008-07-10 11:00 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
      2017-10-31 02:06 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
      2017-10-31 02:06 - 2008-07-10 11:00 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
      2017-10-31 02:06 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
      2017-10-31 02:06 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
      2017-10-31 02:06 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
      2017-10-31 02:06 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
      2017-10-31 02:06 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
      2017-10-31 02:06 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
      2017-10-31 02:06 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
      2017-10-31 02:06 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
      2017-10-31 02:06 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
      2017-10-31 02:06 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
      2017-10-31 02:06 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
      2017-10-31 02:06 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
      2017-10-31 02:06 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
      2017-10-31 02:06 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
      2017-10-31 02:06 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
      2017-10-31 02:06 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
      2017-10-31 02:06 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
      2017-10-31 02:06 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
      2017-10-31 02:06 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
      2017-10-31 02:06 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
      2017-10-31 02:06 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
      2017-10-31 02:06 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
      2017-10-31 02:06 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
      2017-10-31 02:06 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
      2017-10-31 02:06 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
      2017-10-31 02:06 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
      2017-10-31 02:06 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
      2017-10-31 02:06 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
      2017-10-31 02:06 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
      2017-10-31 02:06 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
      2017-10-31 02:06 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
      2017-10-31 02:06 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
      2017-10-31 02:06 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
      2017-10-31 02:06 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
      2017-10-31 02:06 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
      2017-10-31 02:06 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
      2017-10-31 02:06 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
      2017-10-31 02:06 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
      2017-10-31 02:06 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
      2017-10-31 02:06 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
      2017-10-31 02:06 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
      2017-10-31 02:06 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
      2017-10-31 02:06 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
      2017-10-31 02:06 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
      2017-10-31 02:06 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
      2017-10-31 02:06 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
      2017-10-31 02:06 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
      2017-10-31 02:06 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
      2017-10-31 02:06 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
      2017-10-31 02:06 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
      2017-10-31 02:06 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
      2017-10-31 02:06 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
      2017-10-31 02:06 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
      2017-10-31 02:06 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
      2017-10-31 02:06 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
      2017-10-31 02:06 - 2007-04-04 18:54 - 000107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
      2017-10-31 02:06 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
      2017-10-31 02:06 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
      2017-10-31 02:06 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
      2017-10-31 02:06 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
      2017-10-31 02:06 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
      2017-10-31 02:06 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
      2017-10-31 02:06 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
      2017-10-31 02:06 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
      2017-10-31 02:06 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
      2017-10-31 02:06 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
      2017-10-31 02:06 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
      2017-10-31 02:06 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
      2017-10-31 02:06 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
      2017-10-31 02:06 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
      2017-10-31 02:06 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
      2017-10-31 02:06 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
      2017-10-31 02:06 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
      2017-10-31 02:06 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
      2017-10-31 02:06 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
      2017-10-31 02:06 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
      2017-10-31 02:06 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
      2017-10-31 02:06 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
      2017-10-31 02:06 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
      2017-10-31 02:06 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
      2017-10-31 02:06 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
      2017-10-31 02:06 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
      2017-10-31 02:06 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
      2017-10-31 02:06 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
      2017-10-31 02:06 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
      2017-10-31 02:06 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
      2017-10-31 02:06 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
      2017-10-31 02:06 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
      2017-10-31 02:06 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
      2017-10-31 02:06 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
      2017-10-31 02:06 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
      2017-10-31 02:06 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
      2017-10-31 02:06 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
      2017-10-31 02:06 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
      2017-10-31 02:06 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
      2017-10-31 02:06 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
      2017-10-31 02:06 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
      2017-10-31 02:06 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
      2017-10-31 02:06 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
      2017-10-31 02:06 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
      2017-10-31 02:06 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
      2017-10-31 02:06 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
      2017-10-31 02:06 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
      2017-10-31 02:06 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
      2017-10-31 02:06 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
      2017-10-31 01:42 - 2017-11-15 23:02 - 000000000 ____D C:\Games
      2017-10-31 00:44 - 2017-10-31 00:44 - 000000000 ____D C:\WINDOWS\UpdateAssistant
      2017-10-31 00:35 - 2017-10-31 00:35 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\WinRAR
      2017-10-31 00:34 - 2017-11-15 15:18 - 000000000 ____D C:\Users\Gustavo Caro\Desktop\UST2017
      2017-10-31 00:18 - 2017-11-01 13:43 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Skype
      2017-10-31 00:18 - 2017-10-31 00:18 - 000000000 ____D C:\Users\Gustavo Caro\Tracing
      2017-10-31 00:13 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\SysWOW64\BestPractices
      2017-10-31 00:13 - 2017-11-11 17:01 - 000000000 ____D C:\WINDOWS\system32\BestPractices
      2017-10-30 23:48 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
      2017-10-30 23:48 - 2017-10-30 23:48 - 000000000 ___RD C:\Program Files (x86)\Skype
      2017-10-30 23:48 - 2017-10-30 23:48 - 000000000 ____D C:\ProgramData\Skype
      2017-10-30 23:46 - 2017-11-22 02:07 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Spotify
      2017-10-30 23:46 - 2017-11-22 02:07 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Spotify
      2017-10-30 23:46 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
      2017-10-30 23:46 - 2017-10-30 23:46 - 000001871 _____ C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
      2017-10-30 23:45 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
      2017-10-30 23:45 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
      2017-10-30 23:45 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn
      2017-10-30 23:45 - 2017-11-11 12:10 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
      2017-10-30 23:45 - 2017-10-30 23:45 - 000001950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ImgBurn.lnk
      2017-10-30 23:45 - 2017-10-30 23:45 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
      2017-10-30 23:45 - 2017-10-30 23:45 - 000000000 ____D C:\Program Files\WinRAR
      2017-10-30 23:45 - 2017-10-30 23:45 - 000000000 ____D C:\Program Files\VideoLAN
      2017-10-30 23:45 - 2017-10-30 23:45 - 000000000 ____D C:\Program Files (x86)\ImgBurn
      2017-10-30 23:45 - 2017-10-30 23:45 - 000000000 ____D C:\Program Files (x86)\Audacity
      2017-10-30 23:42 - 2017-10-30 23:42 - 000110144 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
      2017-10-30 23:42 - 2017-10-30 23:42 - 000000000 ____D C:\Program Files\Java
      2017-10-30 23:41 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
      2017-10-30 23:41 - 2017-10-30 23:41 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Sun
      2017-10-30 23:41 - 2017-10-30 23:41 - 000000000 ____D C:\ProgramData\Riot Games
      2017-10-30 23:41 - 2017-10-30 23:40 - 000097856 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
      2017-10-30 23:40 - 2017-10-30 23:40 - 000000000 ____D C:\ProgramData\Oracle
      2017-10-30 23:40 - 2017-10-30 23:40 - 000000000 ____D C:\Program Files (x86)\Java
      2017-10-30 23:35 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
      2017-10-30 23:34 - 2017-10-30 23:34 - 000000000 ____D C:\Program Files\Microsoft Silverlight
      2017-10-30 23:34 - 2017-10-30 23:34 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
      2017-10-30 23:33 - 2017-11-14 08:09 - 000000000 ____D C:\ProgramData\Adobe
      2017-10-30 23:33 - 2017-11-12 15:24 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Adobe
      2017-10-30 23:33 - 2017-11-10 12:24 - 000000000 ____D C:\Program Files (x86)\Adobe
      2017-10-30 23:33 - 2017-10-30 23:43 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Steam
      2017-10-30 23:33 - 2017-10-30 23:43 - 000000000 ____D C:\Program Files\rempl
      2017-10-30 23:33 - 2017-10-30 23:33 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Macromedia
      2017-10-30 23:33 - 2017-10-30 23:33 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\CEF
      2017-10-30 23:33 - 2017-10-30 23:33 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
      2017-10-30 23:33 - 2017-10-30 23:33 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
      2017-10-30 23:32 - 2017-10-30 23:32 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
      2017-10-30 23:31 - 2017-11-21 20:16 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
      2017-10-30 23:28 - 2017-10-30 23:28 - 000000000 ____D C:\Riot Games
      2017-10-30 23:25 - 2017-11-18 22:23 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\uTorrent
      2017-10-30 23:25 - 2017-10-31 09:17 - 000000000 ____D C:\ProgramData\AVAST Software
      2017-10-30 23:21 - 2017-11-11 17:04 - 000000000 ____D C:\WINDOWS\system32\MRT
      2017-10-30 23:21 - 2017-10-30 23:21 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\UNP
      2017-10-30 23:20 - 2017-10-30 23:20 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
      2017-10-30 23:20 - 2017-10-30 23:20 - 126925120 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
      2017-10-30 23:13 - 2017-10-30 23:13 - 000000000 ____D C:\Users\Gustavo Caro\AppData\LocalLow\AMD
      2017-10-30 23:11 - 2017-03-04 02:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
      2017-10-30 23:09 - 2017-11-11 17:04 - 000000000 ____D C:\Program Files\UNP
      2017-10-30 22:46 - 2017-11-01 00:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Radeon Settings
      2017-10-30 22:46 - 2017-10-30 22:46 - 000000000 ____D C:\Users\Default\AppData\Roaming\ATI
      2017-10-30 22:46 - 2017-10-30 22:46 - 000000000 ____D C:\Users\Default\AppData\Local\ATI
      2017-10-30 22:46 - 2017-10-30 22:46 - 000000000 ____D C:\Users\Default User\AppData\Roaming\ATI
      2017-10-30 22:46 - 2017-10-30 22:46 - 000000000 ____D C:\Users\Default User\AppData\Local\ATI
      2017-10-30 22:45 - 2017-11-11 12:10 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
      2017-10-30 22:45 - 2017-11-11 12:07 - 000000000 ____D C:\AMD
      2017-10-30 22:43 - 2017-10-30 22:43 - 000001051 _____ C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optional Features.lnk
      2017-10-30 22:43 - 2017-10-30 22:43 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Google
      2017-10-30 22:37 - 2017-10-30 22:37 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\MicrosoftEdge
      2017-10-30 22:32 - 2011-03-31 23:50 - 001847296 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\athurx.sys
      2017-10-30 22:30 - 2013-08-21 01:50 - 003591000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
      2017-10-30 22:30 - 2013-08-20 09:17 - 002809048 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
      2017-10-30 22:30 - 2013-08-20 09:17 - 002585304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkAPO64.dll
      2017-10-30 22:30 - 2013-08-20 07:48 - 000633381 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
      2017-10-30 22:30 - 2013-08-20 07:31 - 000148184 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
      2017-10-30 22:30 - 2013-08-20 02:51 - 031488000 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoRes64.dat
      2017-10-30 22:30 - 2013-08-19 23:02 - 004848920 _____ (ASUSTeKcomputer.Inc Inc) C:\WINDOWS\system32\RTKSMlfx.dll
      2017-10-30 22:30 - 2013-08-16 04:46 - 000818008 _____ (ASUSTeKcomputer.Inc Inc) C:\WINDOWS\system32\RTKSMSettingsIPC.dll
      2017-10-30 22:30 - 2013-08-14 05:36 - 000662784 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVolumeSDAPO.dll
      2017-10-30 22:30 - 2013-08-14 05:35 - 000907008 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxVoiceAPO2064.dll
      2017-10-30 22:30 - 2013-08-12 18:21 - 001019136 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\slcnt64.dll
      2017-10-30 22:30 - 2013-08-12 18:21 - 000899328 _____ (DTS, Inc.) C:\WINDOWS\system32\sl3apo64.dll
      2017-10-30 22:30 - 2013-08-12 18:21 - 000720128 _____ (DTS, Inc.) C:\WINDOWS\system32\sltech64.dll
      2017-10-30 22:30 - 2013-08-12 18:21 - 000244480 _____ (TODO: <Company name>) C:\WINDOWS\system32\slprp64.dll
      2017-10-30 22:30 - 2013-08-07 06:34 - 000765184 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxSpeechAPO64.dll
      2017-10-30 22:30 - 2013-08-05 22:47 - 000947248 _____ (Sony Corporation) C:\WINDOWS\system32\SFSS_APO.dll
      2017-10-30 22:30 - 2013-08-02 09:16 - 001005784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64.dll
      2017-10-30 22:30 - 2013-07-31 23:59 - 005694760 _____ C:\WINDOWS\system32\Drivers\rtvienna.dat
      2017-10-30 22:30 - 2013-07-27 23:48 - 027518208 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnA64.dll
      2017-10-30 22:30 - 2013-07-26 03:05 - 000617176 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
      2017-10-30 22:30 - 2013-07-23 04:40 - 003610880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioVnN64.dll
      2017-10-30 22:30 - 2013-07-23 04:40 - 002103040 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\WavesGUILib64.dll
      2017-10-30 22:30 - 2013-07-23 04:39 - 014048512 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek64.dll
      2017-10-30 22:30 - 2013-07-11 03:15 - 000557880 _____ C:\WINDOWS\system32\audioLibVc.dll
      2017-10-30 22:30 - 2013-06-25 01:47 - 000871856 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tossaeapo64.dll
      2017-10-30 22:30 - 2013-06-25 01:47 - 000162224 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\toseaeapo64.dll
      2017-10-30 22:30 - 2013-06-25 01:46 - 000582056 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosasfapo64.dll
      2017-10-30 22:30 - 2013-04-24 06:16 - 001662024 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
      2017-10-30 22:30 - 2013-02-20 07:55 - 001284680 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
      2017-10-30 22:30 - 2012-08-31 08:18 - 007164176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEP64A.dll
      2017-10-30 22:30 - 2012-08-31 08:17 - 000434960 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EED64A.dll
      2017-10-30 22:30 - 2012-08-31 08:17 - 000141584 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEL64A.dll
      2017-10-30 22:30 - 2012-08-31 08:17 - 000124176 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEA64A.dll
      2017-10-30 22:30 - 2012-08-31 08:17 - 000075024 _____ (Dolby Laboratories) C:\WINDOWS\system32\R4EEG64A.dll
      2017-10-30 22:30 - 2012-01-30 00:43 - 000836544 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo264.dll
      2017-10-30 22:30 - 2012-01-09 23:20 - 000065944 _____ (TOSHIBA CORPORATION.) C:\WINDOWS\system32\tepeqapo64.dll
      2017-10-30 22:30 - 2011-12-20 04:32 - 000331880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
      2017-10-30 22:30 - 2011-11-22 05:28 - 000014952 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCoLDR64.dll
      2017-10-30 22:30 - 2011-09-02 03:21 - 000221024 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFNHK64.dll
      2017-10-30 22:30 - 2011-09-02 03:21 - 000081248 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFCOM64.dll
      2017-10-30 22:30 - 2011-09-02 03:21 - 000078688 _____ (Synopsys, Inc.) C:\WINDOWS\system32\SFAPO64.dll
      2017-10-30 22:30 - 2011-08-11 05:55 - 000001332 _____ C:\WINDOWS\system32\Drivers\DTSU2P.DAT
      2017-10-30 22:30 - 2011-03-17 01:17 - 001361336 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tosade.dll
      2017-10-30 22:30 - 2011-03-07 06:11 - 000148416 _____ (TOSHIBA Corporation) C:\WINDOWS\system32\tadefxapo.dll
      2017-10-30 22:30 - 2010-11-07 20:31 - 000375128 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
      2017-10-30 22:30 - 2010-11-07 20:31 - 000310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
      2017-10-30 22:30 - 2010-11-07 20:31 - 000310104 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
      2017-10-30 22:30 - 2010-11-07 20:31 - 000204120 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
      2017-10-30 22:30 - 2010-11-07 20:31 - 000101208 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
      2017-10-30 22:30 - 2010-11-07 20:31 - 000078680 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
      2017-10-30 22:30 - 2010-11-03 07:30 - 000149608 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
      2017-10-30 22:30 - 2010-07-22 05:48 - 000074064 _____ (Virage Logic Corporation / Sonic Focus) C:\WINDOWS\SysWOW64\SFCOM.dll
      2017-10-30 22:30 - 2009-11-23 22:55 - 000518896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
      2017-10-30 22:30 - 2009-11-23 22:55 - 000211184 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
      2017-10-30 22:30 - 2009-11-23 22:55 - 000198896 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
      2017-10-30 22:30 - 2009-11-23 22:55 - 000155888 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
      2017-10-30 22:29 - 2017-11-13 19:57 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2017-10-30 22:29 - 2017-10-31 00:35 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Google
      2017-10-30 22:29 - 2017-10-30 22:30 - 000000000 ___HD C:\Program Files (x86)\Temp
      2017-10-30 22:29 - 2017-10-30 22:29 - 000000000 ____D C:\Program Files (x86)\Realtek
      2017-10-30 22:29 - 2017-10-30 22:29 - 000000000 ____D C:\Program Files (x86)\Google
      2017-10-30 22:29 - 2013-08-14 05:36 - 001325312 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO5064.dll
      2017-10-30 22:29 - 2013-08-14 05:35 - 001084160 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO4064.dll
      2017-10-30 22:29 - 2013-08-14 05:35 - 000663296 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO30.dll
      2017-10-30 22:29 - 2013-08-08 08:57 - 002080472 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtlExUpd.dll
      2017-10-30 22:29 - 2013-08-07 06:41 - 000113576 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
      2017-10-30 22:29 - 2013-08-05 17:56 - 006219096 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPP64A.dll
      2017-10-30 22:29 - 2013-08-05 17:56 - 001908568 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPD64A.dll
      2017-10-30 22:29 - 2013-08-05 17:56 - 000312152 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPO64A.dll
      2017-10-30 22:29 - 2013-08-05 17:56 - 000261464 _____ (Dolby Laboratories) C:\WINDOWS\system32\DDPA64.dll
      2017-10-30 22:29 - 2013-08-05 07:11 - 002743328 _____ (Fortemedia Corporation) C:\WINDOWS\system32\FMAPO64.dll
      2017-10-30 22:29 - 2013-07-23 23:07 - 002032896 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioEQ64.dll
      2017-10-30 22:29 - 2013-07-23 04:39 - 001916672 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioRealtek264.dll
      2017-10-30 22:29 - 2013-07-23 04:39 - 000922880 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPOShell64.dll
      2017-10-30 22:29 - 2013-06-21 00:01 - 000109848 _____ C:\WINDOWS\system32\AcpiServiceVnA64.dll
      2017-10-30 22:29 - 2013-06-05 10:42 - 000208072 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAC64.dll
      2017-10-30 22:29 - 2013-04-03 03:13 - 000906800 _____ (Sony Corporation) C:\WINDOWS\system32\MISS_APO.dll
      2017-10-30 22:29 - 2012-10-02 03:41 - 000501192 _____ (DTS) C:\WINDOWS\system32\DTSU2PLFX64.dll
      2017-10-30 22:29 - 2012-10-02 03:41 - 000487368 _____ (DTS) C:\WINDOWS\system32\DTSU2PGFX64.dll
      2017-10-30 22:29 - 2012-10-02 03:41 - 000415688 _____ (DTS) C:\WINDOWS\system32\DTSU2PREC64.dll
      2017-10-30 22:29 - 2012-03-08 00:47 - 000108640 _____ (Andrea Electronics Corporation) C:\WINDOWS\system32\AERTAR64.dll
      2017-10-30 22:29 - 2011-08-23 06:00 - 000603984 _____ (Knowles Acoustics ) C:\WINDOWS\system32\KAAPORT64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 001756264 _____ (DTS) C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 001568360 _____ (DTS) C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 001486952 _____ (DTS) C:\WINDOWS\system32\DTSBoostDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000728680 _____ (DTS) C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000712296 _____ (DTS) C:\WINDOWS\system32\DTSSymmetryDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000693352 _____ (DTS) C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000491112 _____ (DTS) C:\WINDOWS\system32\DTSNeoPCDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000432744 _____ (DTS) C:\WINDOWS\system32\DTSLimiterDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000428648 _____ (DTS) C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000242792 _____ (DTS) C:\WINDOWS\system32\DTSLFXAPO64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000242792 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPO64.dll
      2017-10-30 22:29 - 2011-05-30 22:42 - 000241768 _____ (DTS) C:\WINDOWS\system32\DTSGFXAPONS64.dll
      2017-10-30 22:29 - 2010-09-26 22:34 - 000318808 _____ (Waves Audio Ltd.) C:\WINDOWS\system32\MaxxAudioAPO20.dll
      2017-10-30 22:28 - 2017-10-30 22:28 - 000026297 _____ C:\WINDOWS\Ascd_tmp.ini
      2017-10-30 22:28 - 2017-10-30 22:28 - 000001769 _____ C:\WINDOWS\Language_trs.ini
      2017-10-30 22:28 - 2009-04-02 09:30 - 000010296 _____ C:\WINDOWS\SysWOW64\Drivers\ASUSHWIO.SYS
      2017-10-30 22:28 - 2009-03-30 03:32 - 000032768 _____ C:\WINDOWS\DAODx.exe
      2017-10-30 22:23 - 2017-11-11 17:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TP-LINK
      2017-10-30 22:23 - 2017-10-30 22:23 - 000000000 ____D C:\Program Files (x86)\TP-LINK
      2017-10-30 22:23 - 2011-06-16 14:18 - 000081920 _____ C:\WINDOWS\SysWOW64\wgapiloc.dll
      2017-10-30 22:23 - 2011-04-01 10:51 - 000499796 _____ (Atheros) C:\WINDOWS\SysWOW64\acs.exe
      2017-10-30 22:23 - 2011-04-01 10:51 - 000262216 _____ () C:\WINDOWS\SysWOW64\IPTests.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 001269854 _____ (Devicescape) C:\WINDOWS\SysWOW64\dsa.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000422000 _____ C:\WINDOWS\SysWOW64\wgapi.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000405504 _____ (Atheros) C:\WINDOWS\SysWOW64\wcapi.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000360539 _____ (Atheros) C:\WINDOWS\SysWOW64\wcapiU.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000311390 _____ (Atheros) C:\WINDOWS\SysWOW64\athcfg20U.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000254022 _____ (Atheros Communications, Inc.) C:\WINDOWS\SysWOW64\wsfwDS.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000249924 _____ (Atheros Communications, Inc.) C:\WINDOWS\SysWOW64\wsimd.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000237568 _____ (Atheros) C:\WINDOWS\SysWOW64\athcfg20.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000127079 _____ (Atheros Communications, Inc.) C:\WINDOWS\SysWOW64\athcfg20resU.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000127053 _____ (Atheros Communications, Inc.) C:\WINDOWS\SysWOW64\athcfg20res.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000082017 _____ (Devicescape, Inc.) C:\WINDOWS\SysWOW64\dsaNac.dll
      2017-10-30 22:23 - 2011-04-01 10:50 - 000075776 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\wsimdx.sys
      2017-10-30 22:23 - 2011-04-01 10:50 - 000075776 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\Drivers\wsimdx.sys
      2017-10-30 22:23 - 2011-04-01 10:50 - 000042516 _____ C:\WINDOWS\system32\wsimdpx.cat
      2017-10-30 22:23 - 2011-04-01 10:50 - 000042079 _____ C:\WINDOWS\system32\wsimdx.cat
      2017-10-30 22:22 - 2017-10-31 09:30 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Comms
      2017-10-30 22:22 - 2017-10-30 22:22 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\mpress
      2017-10-30 22:21 - 2017-10-31 00:21 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\AMD
      2017-10-30 22:21 - 2017-10-30 22:21 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\ATI
      2017-10-30 22:21 - 2017-10-30 22:21 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\ATI
      2017-10-30 22:19 - 2017-10-30 22:19 - 000000000 ____D C:\Program Files (x86)\AMD AVT
      2017-10-30 22:18 - 2017-10-30 22:46 - 000000000 ____D C:\ProgramData\AMD

    8. #8
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      2017-10-30 22:17 - 2017-10-30 22:17 - 000000000 ____D C:\Program Files\ATI
      2017-10-30 22:13 - 2017-10-30 22:29 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
      2017-10-30 22:13 - 2017-10-30 22:23 - 000000000 ____D C:\ProgramData\TP-LINK
      2017-10-30 22:13 - 2017-10-30 22:13 - 000000000 ____D C:\WINDOWS\Options
      2017-10-30 22:13 - 2011-04-01 10:50 - 002375968 _____ (Atheros Communications, Inc.) C:\WINDOWS\system32\athuwx.sys
      2017-10-30 22:13 - 2011-04-01 10:50 - 000007546 _____ C:\WINDOWS\system32\netathuwx.cat
      2017-10-30 22:11 - 2017-10-30 22:11 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\ActiveSync
      2017-10-30 22:10 - 2017-11-11 12:18 - 000002388 _____ C:\Users\Gustavo Caro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
      2017-10-30 22:10 - 2017-11-11 12:18 - 000000000 ___RD C:\Users\Gustavo Caro\OneDrive
      2017-10-30 22:09 - 2017-11-12 16:31 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Roaming\Adobe
      2017-10-30 22:09 - 2017-11-11 12:15 - 000000000 __RHD C:\Users\Public\AccountPictures
      2017-10-30 22:09 - 2017-11-11 12:15 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\TileDataLayer
      2017-10-30 22:09 - 2017-10-30 22:09 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\VirtualStore
      2017-10-30 22:09 - 2017-10-30 22:09 - 000000000 ____D C:\Users\Gustavo Caro\AppData\Local\Publishers
      2017-10-30 22:08 - 2017-10-30 22:08 - 000026112 _____ C:\WINDOWS\[email protected]
      2017-10-30 22:08 - 2017-10-30 22:08 - 000005120 _____ C:\WINDOWS\[email protected]
      2017-10-30 22:08 - 2017-10-30 22:08 - 000000000 ____D C:\WINDOWS\CSC
      2017-10-30 22:06 - 2017-10-30 22:06 - 000000000 _SHDL C:\Documents and Settings
      2017-10-30 22:04 - 2017-10-30 22:04 - 000000000 _____ C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

      ==================== One Month Modified files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2017-11-22 02:06 - 2017-09-29 05:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
      2017-11-21 20:27 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
      2017-11-21 00:56 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\rescache
      2017-11-20 21:49 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\NDF
      2017-11-19 20:03 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\AppReadiness
      2017-11-18 17:24 - 2017-09-29 10:46 - 000000000 ___HD C:\Program Files\WindowsApps
      2017-11-18 12:22 - 2017-09-29 10:44 - 000000000 ____D C:\WINDOWS\INF
      2017-11-18 00:32 - 2017-09-29 10:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
      2017-11-18 00:32 - 2017-09-29 10:46 - 000000000 ___SD C:\WINDOWS\system32\F12
      2017-11-18 00:32 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\TextInput
      2017-11-18 00:32 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
      2017-11-18 00:32 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
      2017-11-18 00:32 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
      2017-11-18 00:32 - 2017-09-29 05:45 - 000000000 ____D C:\WINDOWS\system32\Dism
      2017-11-17 10:50 - 2017-09-29 10:37 - 000000000 ____D C:\WINDOWS\CbsTemp
      2017-11-12 13:40 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\appcompat
      2017-11-11 17:06 - 2017-09-29 10:46 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
      2017-11-11 17:04 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
      2017-11-11 17:04 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\WCN
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\spool
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\IME
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ____D C:\Program Files\Common Files\system
      2017-11-11 17:04 - 2017-09-29 10:46 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
      2017-11-11 17:04 - 2017-03-18 18:03 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
      2017-11-11 17:03 - 2017-09-29 10:49 - 000000000 ____D C:\WINDOWS\Setup
      2017-11-11 17:03 - 2017-09-29 10:46 - 000000000 __RHD C:\Users\Public\Libraries
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\winrm
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\slmgr
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
      2017-11-11 17:01 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\OCR
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ___SD C:\WINDOWS\system32\dsc
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\oobe
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\MUI
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\Help
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\Program Files\Windows Photo Viewer
      2017-11-11 17:01 - 2017-09-29 10:46 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\zu-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\yo-NG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\xh-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\wo-SN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\uz-Latn-UZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tn-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tk-TM
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ti-ET
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\tg-Cyrl-TJ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sw-KE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-RS
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sr-Cyrl-BA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\si-LK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\sd-Arab-PK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\rw-RW
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\quc-Latn-GT
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\prs-AF
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-Arab-PK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nso-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mn-MN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ky-KG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ku-Arab-IQ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ig-NG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ha-Latn-NG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\chr-CHER-US
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES-valencia
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bs-Latn-BA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-BD
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\az-Latn-AZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\zu-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\yo-NG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\xh-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\wo-SN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\vi-VN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\uz-Latn-UZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ur-PK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ug-CN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\tt-RU
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\tn-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\tk-TM
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ti-ET
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\tg-Cyrl-TJ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\te-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ta-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\sw-KE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-RS
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\sr-Cyrl-BA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\sq-AL
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\si-LK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\sd-Arab-PK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\rw-RW
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\quz-PE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\quc-Latn-GT
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\prs-AF
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\pa-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\pa-Arab-PK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\or-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\nso-ZA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\nn-NO
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ne-NP
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\mt-MT
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\mr-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\mn-MN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ml-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\mk-MK
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\lo-LA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\lb-LU
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ky-KG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ku-Arab-IQ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\kok-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\kn-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\km-KH
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ka-GE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\is-IS
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ig-NG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\id-ID
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\hy-AM
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ha-Latn-NG
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\gu-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\gd-GB
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ga-IE
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\fil-PH
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\fa-IR
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\cy-GB
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\chr-CHER-US
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\ca-ES-valencia
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\bs-Latn-BA
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\bn-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\bn-BD
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\be-BY
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\az-Latn-AZ
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\as-IN
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\am-ET
      2017-11-11 16:59 - 2017-09-29 11:41 - 000000000 ____D C:\WINDOWS\system32\af-ZA
      2017-11-11 16:57 - 2017-09-29 11:42 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
      2017-11-11 16:57 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\migwiz
      2017-11-11 16:57 - 2017-09-29 10:46 - 000000000 ____D C:\Program Files (x86)\Windows Defender
      2017-11-11 16:55 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
      2017-11-11 16:55 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\SysWOW64\com
      2017-11-11 16:55 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\es-MX
      2017-11-11 16:55 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\system32\com
      2017-11-11 16:55 - 2017-09-29 10:46 - 000000000 ____D C:\Program Files\Windows Defender
      2017-11-11 16:55 - 2017-09-29 05:45 - 000000000 ____D C:\WINDOWS\servicing
      2017-11-11 12:32 - 2017-09-29 10:46 - 000000000 ___RD C:\WINDOWS\PrintDialog
      2017-11-11 12:15 - 2017-09-29 10:46 - 000000000 ____D C:\ProgramData\USOPrivate
      2017-11-11 12:14 - 2017-09-29 10:46 - 000000000 ____D C:\WINDOWS\Registration
      2017-11-11 12:14 - 2017-09-29 05:45 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
      2017-11-11 12:09 - 2017-09-29 10:46 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
      2017-11-11 12:08 - 2017-09-29 05:45 - 000000000 ____D C:\WINDOWS\system32\Sysprep
      2017-11-08 21:19 - 2015-10-30 04:24 - 000000167 _____ C:\WINDOWS\win.ini
      2017-11-03 22:25 - 2017-09-29 10:49 - 000835568 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
      2017-11-03 22:25 - 2017-09-29 10:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
      2017-10-31 23:45 - 2016-06-07 17:39 - 000793184 _____ C:\WINDOWS\system32\perfh019.dat
      2017-10-31 23:45 - 2016-06-07 17:39 - 000156958 _____ C:\WINDOWS\system32\perfc019.dat
      2017-10-30 23:18 - 2015-10-30 04:19 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
      2017-10-30 23:18 - 2015-10-30 04:19 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll

      ==================== Files in the root of some directories =======

      2017-11-12 16:35 - 2017-11-12 16:35 - 000000132 _____ () C:\Users\Gustavo Caro\AppData\Roaming\Prefs. de formato PNG de Adobe CC
      2017-11-01 18:50 - 2017-11-01 18:50 - 000000003 _____ () C:\Users\Gustavo Caro\AppData\Local\updater.log
      2017-11-01 18:50 - 2017-11-01 18:50 - 000000425 _____ () C:\Users\Gustavo Caro\AppData\Local\UserProducts.xml

      ==================== Bamital & volsnap ======================

      (There is no automatic fix for files that do not pass verification.)

      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\wininit.exe => File is digitally signed
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => File is digitally signed
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => File is digitally signed
      C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

      LastRegBack: 2017-11-21 20:21

      ==================== End of FRST.txt ============================

    9. #9
      Moderadora Gral.
      Avatar de @Daniela
      Registrado
      abr 2011
      Ubicación
      España
      Mensajes
      24.352

      Re: Malware Adware.Elex.ShrtCln no se elimina

      Hola

      Sigue estos pasos, MUY Importante ~ Realiza una copia de seguridad del registro :

      • Para hacerlo descarga >> DelFix en tu escritorio.
        • Doble clic para ejecutarlo.(Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona "Ejecutar como Administrador.")
        • Marca unicamente la casilla "Create registry backup".
      • Pulsar en Run.

        Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.


      A continuación inicia tu equipo desde el >> Modo Seguro de Windows con función de red.

      Si tu SO es Windows 8/8.1/10 usa el 2º MÉTODO: de esta Faq de Windows 8 (aplicable a Windows 10) >> ¿Cómo iniciar Windows 8/8.1 en Modo Seguro?, para trabajar desde ese modo de windows.


      Con los demás programas cerrados ve a >> Inicio >> Ejecutar >> y escribe notepad.exe.

      Ahora copia y pega estos archivos dentro del Notepad: (Se excluye la palabra código)

      Código:
      Start
      CreateRestorePoint:
      CloseProcesses:
      
      HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
      IFEO\OSppSvc.exe: [Debugger] [email protected]
      CHR StartupUrls: Default -> "hxxps://boards.4chan.org/w/","hxxps://www.youtube.com/watch?v=EvazDsAWAno","hxxps://www.reddit.com/r/leagueoflegends","hxxp://www.lolskill.net/game/LAS/panconmoco","hxxp://www.probuilds.net/guide/EUW/2310884659/18995872","hxxps://www.facebook.com/groups/SDLG14/?fref=nf","hxxp://boards.4chan.org/wg/","hxxp://boards.4chan.org/wg/thread/6312763/startpage-and-new-tab-thread-3#p6312811","file:///C:/Users/Cherno/Documents/startpage/index.html"
      CHR Profile: C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default [2017-11-22]
      2017-11-08 22:02 - 2017-11-08 22:02 - 000004608 _____ C:\WINDOWS\SECOH-QAD.exe
      2017-11-08 22:02 - 2017-11-08 22:02 - 000003584 _____ C:\WINDOWS\SECOH-QAD.dll
      ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
      Task: {4F2F060D-4558-48D0-A737-73576F3AE24A} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION 
      
      CMD: ipconfig /flushdns
      CMD: ipconfig /renew
      CMD: bitsadmin /reset /allusers
      RemoveProxy:
      EmptyTemp:
      Hosts:
      end
      • Lo guardas bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.

      Nota: Es necesario que el ejecutable Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no la herramienta no trabajara.

      ATENCION!!!! El siguiente Script de reparación fue hecho específicamente por un miembro del staff para este usuario, si tiene un problema similar por favor abra su propio tema para recibir ayuda personalizada. Usar Scripts de otros usuarios puede causar daños a su equipo

      • Ejecutas Frst.exe.
      • Presionas el botón Fix y aguardas a que termine.
      • La Herramienta guardara el reporte en tu escritorio (Fixlog.txt).
      • Lo pegas en tu próxima respuesta.


      Pon el reporte y comenta como sigue el problema.

      Un saludo
      ✿◕‿◕✿ La impaciencia no es buena compañía ✿◕‿◕✿

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    10. #10
      Usuario Avatar de x3rn0b0k
      Registrado
      oct 2011
      Ubicación
      Chile
      Mensajes
      112

      Re: Malware Adware.Elex.ShrtCln no se elimina

      Fix result of Farbar Recovery Scan Tool (x64) Version: 23-11-2017
      Ran by Gustavo Caro (23-11-2017 19:24:50) Run:1
      Running from C:\Users\Gustavo Caro\Desktop
      Loaded Profiles: Gustavo Caro (Available Profiles: Gustavo Caro)
      Boot Mode: Safe Mode (with Networking)
      ==============================================

      fixlist content:
      *****************
      Start
      CreateRestorePoint:
      CloseProcesses:

      HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
      IFEO\OSppSvc.exe: [Debugger] [email protected]
      CHR StartupUrls: Default -> "hxxps://boards.4chan.org/w/","hxxps://www.youtube.com/watch?v=EvazDsAWAno","hxxps://www.reddit.com/r/leagueoflegends","hxxp://www.lolskill.net/game/LAS/panconmoco","hxxp://www.probuilds.net/guide/EUW/2310884659/18995872","hxxps://www.facebook.com/groups/SDLG14/?fref=nf","hxxp://boards.4chan.org/wg/","hxxp://boards.4chan.org/wg/thread/6312763/startpage-and-new-tab-thread-3#p6312811","file:///C:/Users/Cherno/Documents/startpage/index.html"
      CHR Profile: C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default [2017-11-22]
      2017-11-08 22:02 - 2017-11-08 22:02 - 000004608 _____ C:\WINDOWS\SECOH-QAD.exe
      2017-11-08 22:02 - 2017-11-08 22:02 - 000003584 _____ C:\WINDOWS\SECOH-QAD.dll
      ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
      Task: {4F2F060D-4558-48D0-A737-73576F3AE24A} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION

      CMD: ipconfig /flushdns
      CMD: ipconfig /renew
      CMD: bitsadmin /reset /allusers
      RemoveProxy:
      EmptyTemp:
      Hosts:
      end
      *****************

      Error: Restore point can only be created in normal mode.
      Processes closed successfully.
      HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION => restored successfully
      HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\OSppSvc.exe => key removed successfully
      Chrome StartupUrls => removed successfully
      C:\Users\Gustavo Caro\AppData\Local\Google\Chrome\User Data\Default => moved successfully
      C:\WINDOWS\SECOH-QAD.exe => moved successfully
      C:\WINDOWS\SECOH-QAD.dll => moved successfully
      HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => key removed successfully
      HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => key not found.
      HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4F2F060D-4558-48D0-A737-73576F3AE24A} => key removed successfully
      HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4F2F060D-4558-48D0-A737-73576F3AE24A} => key removed successfully
      HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => key not found.

      ========= ipconfig /flushdns =========


      Configuraci¢n IP de Windows

      Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

      ========= End of CMD: =========


      ========= ipconfig /renew =========


      Configuraci¢n IP de Windows

      No se puede realizar ninguna operaci¢n en Ethernet mientras los medios
      est‚n desconectados.
      No se puede realizar ninguna operaci¢n en Local Area Connection* 3 mientras los medios
      est‚n desconectados.

      Adaptador de Ethernet Ethernet:

      Estado de los medios. . . . . . . . . . . : medios desconectados
      Sufijo DNS espec¡fico para la conexi¢n. . :

      Adaptador de LAN inal*mbrica Local Area Connection* 3:

      Estado de los medios. . . . . . . . . . . : medios desconectados
      Sufijo DNS espec¡fico para la conexi¢n. . :

      Adaptador de LAN inal*mbrica Wi-Fi:

      Sufijo DNS espec¡fico para la conexi¢n. . : Home
      V¡nculo: direcci¢n IPv6 local. . . : fe80::7017:5955:4ab2:ecee%17
      Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.1.2
      M*scara de subred . . . . . . . . . . . . : 255.255.255.0
      Puerta de enlace predeterminada . . . . . : 192.168.1.1

      ========= End of CMD: =========


      ========= bitsadmin /reset /allusers =========


      BITSADMIN version 3.0
      BITS administration utility.
      (C) Copyright 2000-2006 Microsoft Corp.

      BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
      Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

      Unable to connect to BITS - 0x8007043c

      ========= End of CMD: =========


      ========= RemoveProxy: =========

      HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
      HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => value removed successfully
      HKU\S-1-5-21-4086068796-3168597730-1078569096-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => value removed successfully


      ========= End of RemoveProxy: =========

      C:\Windows\System32\Drivers\etc\hosts => moved successfully
      Hosts restored successfully.

      =========== EmptyTemp: ==========

      BITS transfer queue => 7364608 B
      DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 89245960 B
      Java, Flash, Steam htmlcache => 207214631 B
      Windows/system/drivers => 103529 B
      Edge => 27648 B
      Chrome => 0 B
      Firefox => 0 B
      Opera => 0 B

      Temp, IE cache, history, cookies, recent:
      Default => 6656 B
      Users => 0 B
      ProgramData => 0 B
      Public => 0 B
      systemprofile => 0 B
      systemprofile32 => 2104 B
      LocalService => 0 B
      NetworkService => 1650 B
      Gustavo Caro => 10977034 B

      RecycleBin => 0 B
      EmptyTemp: => 300.4 MB temporary data Removed.

      ================================


      The system needed a reboot.

      ==== End of Fixlog 19:25:01 ====

    Página 1 de 2 12 ÚltimoÚltimo