• Registrarse
  • Iniciar sesión


  • Página 1 de 2 12 ÚltimoÚltimo
    Resultados 1 al 10 de 12

    CPU al 100% por culpa de System

    ...

    1. #1
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      CPU al 100% por culpa de System

      Hola.

      Mi CPU está casi siempre al 100%.

      En administrador de tareas veo que el programa System es el que causa que se ponga al 100%.


      Que puedo hacer para limpiar mi pc?


      Gracias.

    2. #2
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.886

      Re: CPU al 100% por culpa de System

      Hola

      Realiza los siguientes pasos, sin cambiar el orden:

      Deshabilitá temporalmente Tu Antivirus. Cerrá todos los programas que tengas abiertos.


      Descargá a Tu escritorio las siguientes herramientas:



      Seguí paso a paso las acciones ....

      Malwarebytes

      Instalalo y actualizalo.
      Realiza un Análisis Completo. Pulsa en “Eliminar Seleccionados” para enviarlo a la cuarentena.
      Reinicias el sistema.
      En el apartado del manual "Historial" >> Registros de Aplicación >> Scan Log/Registro de Análisis encontrarás el informe del MBAM, que debes copiar y pegar en tu próxima respuesta.


      ZHPcleaner

      Cerra todos los navegadores. Doble clic para ejecutarlo y Presiona el Botón Scánner. Espera a que termine.
      Se va a generar un reporte en el escritorio llamado ZHPcleaner.
      Presiona el Botón Reparar. Cuando termine, reinicia el ordenador.
      Copias y pegas en Tu próxima respuesta el contenido del reporte que se había generado.


      Adwcleaner

      Ejecutalo. (Clic derecho y selecciona Ejecutar como Administrador).
      Pulsa en el botón Escanear y espera a que se realice el proceso. Luego pulsa sobre el botón Limpiar.
      Espera a que se complete. Si te pidiera reiniciar el sistema Aceptas.
      Guardas el reporte que te aparecerá para copiarlo y pegarlo en tu próxima respuesta. El informe también se puede encontrar en "C:\AdwCleaner\AdwCleaner.txt"


      Ccleaner

      Instalalo y ejecutalo.
      En la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine > clic en ejecutar limpiador.
      Clic en la pestaña Registro > clic en buscar problemas esperas que termine > clic en Reparar Seleccionadas y haces una copia de seguridad.

      En Tu próxima respuesta, Pega los reportes de Malwarebytes, AdwCleaner y Zhpcleaner y comentas como va el problema.


      Saludos
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    3. #3
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      Re: CPU al 100% por culpa de System

      Cita Originalmente publicado por @Leosolari Ver Mensaje
      Hola
      En Tu próxima respuesta, Pega los reportes de Malwarebytes, AdwCleaner y Zhpcleaner y comentas como va el problema.
      Malwarebytes
      www.malwarebytes.com

      -Detalles del registro-
      Fecha del análisis: 10/2/18
      Hora del análisis: 23:04
      Archivo de registro: 53b751ca-0eae-11e8-8a2e-40b034bf8c5c.json
      Administrador: Sí

      -Información del software-
      Versión: 3.3.1.2183
      Versión de los componentes: 1.0.262
      Versión del paquete de actualización: 1.0.3914
      Licencia: Gratis

      -Información del sistema-
      SO: Windows 10 (Build 16299.192)
      CPU: x64
      Sistema de archivos: NTFS
      Usuario: DESKTOP-18KLQ7E\a1a2

      -Resumen del análisis-
      Tipo de análisis: Análisis de amenazas
      Resultado: Completado
      Objetos analizados: 311614
      Amenazas detectadas: 2
      Amenazas en cuarentena: 2
      Tiempo transcurrido: 4 min, 2 seg

      -Opciones de análisis-
      Memoria: Activado
      Inicio: Activado
      Sistema de archivos: Activado
      Archivo: Activado
      Rootkits: Desactivado
      Heurística: Activado
      PUP: Detectar
      PUM: Detectar

      -Detalles del análisis-
      Proceso: 0
      (No hay elementos maliciosos detectados)

      Módulo: 0
      (No hay elementos maliciosos detectados)

      Clave del registro: 0
      (No hay elementos maliciosos detectados)

      Valor del registro: 0
      (No hay elementos maliciosos detectados)

      Datos del registro: 0
      (No hay elementos maliciosos detectados)

      Secuencia de datos: 0
      (No hay elementos maliciosos detectados)

      Carpeta: 0
      (No hay elementos maliciosos detectados)

      Archivo: 2
      RiskWare.BitCoinMiner, C:\PROGRAM FILES (X86)\AEON WALLET GUI\SIMPLEWALLET.EXE, En cuarentena, [82], [442052],1.0.3914
      RiskWare.BitCoinMiner, C:\USERS\A1A2\DOWNLOADS\CCMINER-X64-2.2.2-CUDA9.7Z, En cuarentena, [82], [487147],1.0.3914

      Sector físico: 0
      (No hay elementos maliciosos detectados)


      (end)


      --------------------------------------------------------------------------

      ~ ZHPCleaner v2018.2.8.26 by Nicolas Coolman (2018/02/08)
      ~ Run by a1a2 (Administrator) (10/02/2018 23:25:39)
      ~ Web: https://www.nicolascoolman.com
      ~ Blog: https://nicolascoolman.eu/
      ~ Facebook : https://www.facebook.com/nicolascoolman1
      ~ State version : Version OK
      ~ Certificate ZHPCleaner: Legal
      ~ Type : Reparar
      ~ Report : C:\Users\a1a2\Desktop\ZHPCleaner.txt
      ~ Quarantine : C:\Users\a1a2\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
      ~ UAC : Activate
      ~ Boot Mode : Normal (Normal boot)
      Windows 10 Home, 64-bit (Build 16299)


      ---\\ Alternate Data Stream (ADS). (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Servicios (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Navegadores de Internet (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Hosts carpeta (2)
      REEMPLAZO: 174.120.130.173 proxy.jrimsoftware.com
      Número de redirecciones encontrados 1/29


      ---\\ Tareas automáticas programadas. (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Explorador ( Archivos, Carpetas ) (23)
      MOVIDO carpeta: C:\Users\a1a2\Downloads\Babylon10_setup_ns.exe [Babylon Software Ltd. - Babylon Setup SE] =>Adware.Babylon
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign038066e90a0aa1c9 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign211c5c7a0d3a2de5 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign25ce4ec897cc6202 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign2c9ca0e259825b7d =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign32549a2ec4d41512 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign3da02a4a3270262d =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign44be2258a7548864 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign4e3bce61e475ddc9 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign61540ea5642f346a =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign7e74125573ec3234 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign89fb7dbe0cb9222c =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsign91e8aa2d942115b6 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignad225b35aaad3e91 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignad2c1676a212149f =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignadda6861bda66521 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignc25c406a31159ad7 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignc435823fdec8ec02 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignd05218cf231dcddc =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignea286a8a777dfbd8 =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsignebdd1aa79a9fc4cf =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsigned2cbb48eeaa3cdd =>.SUP.Temporary
      MOVIDO archivo*: C:\Users\a1a2\AppData\Local\Tempzxpsigneef9899857ca0cd0 =>.SUP.Temporary


      ---\\ Registro ( Claves, Valores, Datos) (7)
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE [] =>Adware.Babylon
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin64 [OfficeAddin Class] =>Adware.Babylon
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\BabylonOfficeAddin.OfficeAddin64.1 [OfficeAddin Class] =>Adware.Babylon
      BORRADOS clave*: HKLM\SYSTEM\CurrentControlSet\Services\BITCOMET_HELPER_SERVICE [] =>.SUP.Elex
      BORRADOS clave: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\BabylonHelper.EXE [] =>Adware.Babylon
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\CLSID\{B5E7C3E9-37BF-4b5c-8234-F5DC02111B23} [OfficeAddin Class] =>Adware.Babylon
      BORRADOS clave: [X64] HKLM\SOFTWARE\Classes\CLSID\{B5E7C3E9-37BF-4b5c-8234-F5DC02111B23}\InprocServer32 [C:\Program Files (x86)\Babylon\Babylon-Pro\Utils\BabylonOffice64PI.dll (Not File)] =>Adware.Babylon


      ---\\ Resumen de elementos en su estación de trabajo (3)
      https://nicolascoolman.eu/2017/03/03/adware-babylon/ =>Adware.Babylon
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>.SUP.Temporary
      https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.SUP.Elex


      ---\\ Limpieza adicional. (21)
      ~ Clave de registro Tracing borrados (21)
      ~ Quitar los antiguos informes de ZHPCleaner. (0)


      ---\\ Resultado de la reparación.
      ~ Reparación llevada a cabo con éxito


      ---\\ Statistiques
      ~ Items escaneado : 1126
      ~ Items encontrado : 0
      ~ artículos cancelados : 0
      ~ Items opciones : 0/7
      ~ Ahorro de espacio (bytes) : 0


      ~ End of clean in 00h00mn35s
      ~====================
      ZHPCleaner-[S]-10022018-23_24_45.txt
      ZHPCleaner-[R]-10022018-23_26_14.txt


      -------------------------------------------------------------------------------------------------


      # AdwCleaner 7.0.8.0 - Logfile created on Sat Feb 10 22:31:42 2018
      # Updated on 2018/08/02 by Malwarebytes
      # Running on Windows 10 Home (X64)
      # Mode: clean
      # Support: https://www.malwarebytes.com/support

      ***** [ Services ] *****

      No malicious services deleted.

      ***** [ Folders ] *****

      No malicious folders deleted.

      ***** [ Files ] *****

      No malicious files deleted.

      ***** [ DLL ] *****

      No malicious DLLs cleaned.

      ***** [ WMI ] *****

      No malicious WMI cleaned.

      ***** [ Shortcuts ] *****

      No malicious shortcuts cleaned.

      ***** [ Tasks ] *****

      No malicious tasks deleted.

      ***** [ Registry ] *****

      Deleted: [Key] - HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Reason\ReasonByteFence


      ***** [ Firefox (and derivatives) ] *****

      No malicious Firefox entries deleted.

      ***** [ Chromium (and derivatives) ] *****

      No malicious Chromium entries deleted.

      *************************

      ::Tracing keys deleted
      ::Winsock settings cleared
      ::Additional Actions: 0



      *************************

      C:/AdwCleaner/AdwCleaner[C0].txt - [1737 B] - [2017/9/26 10:27:14]
      C:/AdwCleaner/AdwCleaner[S0].txt - [1654 B] - [2017/9/26 10:25:48]
      C:/AdwCleaner/AdwCleaner[S1].txt - [1149 B] - [2018/2/10 22:31:10]


      ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt ##########

    4. #4
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      Re: CPU al 100% por culpa de System

      Después de un día de uso normal, el ordenador va igual de lento y System se pone a consumir muchos recursos de la CPU

    5. #5
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.886

      Re: CPU al 100% por culpa de System

      Hola

      Verificaste si el sistema esta haciendo alguna actualización en 2do plano ?
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    6. #6
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      Re: CPU al 100% por culpa de System

      Cita Originalmente publicado por @Leosolari Ver Mensaje
      Hola

      Verificaste si el sistema esta haciendo alguna actualización en 2do plano ?
      Si, lo verifiqué.

      Lleva así como 3 semanas.

      Despues de la limpieza ha mejorado un poquito el rendimiento, pero la CPU se pone como mínimo al 60% todo el rato.

    7. #7
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.886

      Re: CPU al 100% por culpa de System

      Hola



      Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

      Descarga Farbar Recovery Scan Tool considerando la versión adecuada para tu equipo.

      ¿Cómo saber si mi Windows es de 32 o 64 bits?

      La guardas en el escritorio >> Esto es muy importante..

      Doble clic para ejecutar Frst.exe. En la ventana del Disclaimer, presiona Yes.

      En la nueva ventana que se abre, presiona el botón Scan y espera a que concluya el análisis.

      Se abrirán dos (2) archivos (Logs), Frst.txt y Addition.txt, estos estarán grabados en Tu escritorio.

      Para terminar abre el archivo Frst.txt y copia y pega todo su contenido en tu próxima respuesta. Utiliza dos mensajes si te dice que es muy largo.



      Saludos
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    8. #8
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      Re: CPU al 100% por culpa de System

      Cita Originalmente publicado por @Leosolari Ver Mensaje

      Para terminar abre el archivo Frst.txt y copia y pega todo su contenido en tu próxima respuesta. Utiliza dos mensajes si te dice que es muy largo.
      Saludos
      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.02.2018
      Ran by a1a2 (administrator) on DESKTOP-18KLQ7E (15-02-2018 10:56:57)
      Running from C:\Users\a1a2\Desktop
      Loaded Profiles: a1a2 (Available Profiles: a1a2)
      Platform: Windows 10 Home Version 1709 16299.248 (X64) Language: Español (España, internacional)
      Internet Explorer Version 11 (Default browser: Chrome)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: ***********************************************************************************************************

      ==================== Processes (Whitelisted) =================

      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

      (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxCUIService.exe
      (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
      (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
      (Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
      (Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
      (Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
      (Intel Corporation) C:\Windows\System32\ibtsiva.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
      (VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
      (Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
      (VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
      () C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe
      (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe
      (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
      (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\MsMpEng.exe
      (Privax Limited) C:\Program Files (x86)\HMA! Pro VPN\vpnsvc.exe
      () C:\xampp\mysql\bin\mysqld.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
      (VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
      (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      (Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
      (Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
      (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
      (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\igfxEM.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
      () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeHost.exe
      (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
      (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
      (Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
      () C:\Program Files (x86)\Google\Drive\googledrivesync.exe
      (Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
      (Blacksun Software) C:\Program Files (x86)\Mousotron\Mousotron.exe
      (Netpeak Software) C:\Users\a1a2\AppData\Local\Apps\Netpeak Software\Netpeak Launcher\NetpeakLauncher.exe
      (Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSATray.exe
      () C:\Program Files (x86)\Google\Drive\googledrivesync.exe
      (RescueTime, Inc.) C:\Program Files (x86)\RescueTime\RescueTime.exe
      (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
      (Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\119748.inf_amd64_8e3972f5c88264c0\IntelCpHeciSvc.exe
      (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
      (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      () C:\Program Files (x86)\SpeedFan\speedfan.exe
      (Don HO [email protected]) C:\Program Files\Notepad++\notepad++.exe
      (Microsoft) C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1803.279.0_x64__kzf8qxf38zg5c\SkypeApp.exe
      (Microsoft Corporation) C:\Program Files\Microsoft Office\Office16\OUTLOOK.EXE
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8827.21855.0_x64__8wekyb3d8bbwe\HxTsr.exe
      (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8827.21855.0_x64__8wekyb3d8bbwe\HxOutlook.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
      (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe

      ==================== Registry (Whitelisted) ===========================

      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

      HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
      HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8903176 2016-10-04] (Realtek Semiconductor)
      HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17662072 2017-07-10] (Logitech Inc.)
      HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
      HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [131360 2017-09-18] (Intel)
      HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-09-05] (Oracle Corporation)
      HKU\S-1-5-21-2221359099-2426054925-774135096-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [41100328 2018-01-29] ()
      HKU\S-1-5-21-2221359099-2426054925-774135096-1001\...\Run: [Mousotron] => C:\Program Files (x86)\Mousotron\Mousotron.exe [2316544 2017-02-02] (Blacksun Software)
      HKU\S-1-5-21-2221359099-2426054925-774135096-1001\...\Run: [Netpeak Launcher] => C:\Users\a1a2\AppData\Local\Apps\Netpeak Software\Netpeak Launcher\NetpeakLauncher.exe [941224 2018-02-05] (Netpeak Software)
      HKU\S-1-5-21-2221359099-2426054925-774135096-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10257872 2018-01-09] (Piriform Ltd)
      Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RescueTime.lnk [2017-08-28]
      ShortcutTarget: RescueTime.lnk -> C:\Program Files (x86)\RescueTime\RescueTime.exe (RescueTime, Inc.)
      GroupPolicy: Restriction <==== ATTENTION

      ==================== Internet (Whitelisted) ====================

      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

      Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
      Tcpip\Parameters: [DhcpNameServer] 192.168.3.1 8.8.8.8
      Tcpip\..\Interfaces\{006de425-a85f-4bac-9c2e-9f06e0ece2e0}: [DhcpNameServer] 192.168.5.1 8.8.8.8
      Tcpip\..\Interfaces\{280a5e88-7b38-4abe-8b10-90496b2a9263}: [NameServer] 77.234.40.79
      Tcpip\..\Interfaces\{4041d99a-55d3-4f8c-99b6-ec72d762b231}: [DhcpNameServer] 192.168.3.1 8.8.8.8
      Tcpip\..\Interfaces\{b6b77290-2ff4-45d9-9d63-a2c73737b192}: [DhcpNameServer] 62.81.29.254 62.81.16.213

      Internet Explorer:
      ==================
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
      SearchScopes: HKU\S-1-5-21-2221359099-2426054925-774135096-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
      BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office16\OCHelper.dll [2017-02-01] (Microsoft Corporation)
      BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-16] (Microsoft Corporation)
      BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office16\OCHelper.dll [2015-07-31] (Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\ssv.dll [2018-01-02] (Oracle Corporation)
      BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2016-11-16] (Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\jp2ssv.dll [2018-01-02] (Oracle Corporation)
      Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-02-01] (Microsoft Corporation)
      Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-02-01] (Microsoft Corporation)
      Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2017-02-01] (Microsoft Corporation)
      Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2017-02-01] (Microsoft Corporation)

      FireFox:
      ========
      FF DefaultProfile: ej2c7fgf.default
      FF ProfilePath: C:\Users\a1a2\AppData\Roaming\Mozilla\Firefox\Profiles\ej2c7fgf.default [2018-02-15]
      FF Extension: (azid - Amazon Zoom Image Downloader) - C:\Users\a1a2\AppData\Roaming\Mozilla\Firefox\Profiles\ej2c7fgf.default\Extensions\[email protected] [2017-07-26] [Legacy]
      FF Extension: (iMacros for Firefox) - C:\Users\a1a2\AppData\Roaming\Mozilla\Firefox\Profiles\ej2c7fgf.default\Extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}.xpi [2017-05-26] [Legacy]
      FF Extension: (Adblock Plus) - C:\Users\a1a2\AppData\Roaming\Mozilla\Firefox\Profiles\ej2c7fgf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-12-23]
      FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-19] ()
      FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
      FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
      FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-19] ()
      FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2018-01-02] (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2018-01-02] (Oracle Corporation)
      FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-02-01] (Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-16] (Google Inc.)
      FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-11] (Adobe Systems Inc.)
      FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)

      Chrome:
      =======
      CHR DefaultSearchURL: Default -> hxxp://srch.bar/{searchTerms}
      CHR DefaultSuggestURL: Default -> hxxp://srch.bar/?s={searchTerms}
      CHR Profile: C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default [2018-02-15]
      CHR Extension: (Presentaciones) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
      CHR Extension: (SEOquake) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\akdgnmcogleenhbclghghlkkdndkjdjc [2018-02-01]
      CHR Extension: (h264ify) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aleakchihdccplidncghkekgioiakgal [2017-09-25]
      CHR Extension: (Documentos) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
      CHR Extension: (Redirect Path) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\aomidfkchockcldhbkggjokdkkebmdll [2017-10-19]
      CHR Extension: (Google Drive) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-24]
      CHR Extension: (RescueTime for Chrome and Chrome OS) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\bdakmnplckeopfghnlpocafcepegjeap [2018-02-10]
      CHR Extension: (Web Developer) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2017-10-21]
      CHR Extension: (ColorZilla) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2017-12-05]
      CHR Extension: (YouTube) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-24]
      CHR Extension: (NoFollow) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfogidghaigoomjdeacndafapdijmiid [2017-10-20]
      CHR Extension: (GreenAddress) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgbimgjoijjemhdamicmljbncacfndmp [2018-02-07]
      CHR Extension: (MozBar) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2018-02-07]
      CHR Extension: (Hi-Res Image Downloader for Merch By Amazon) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ehbjiffeoicjoibcmcadogclcbagjhjf [2017-07-26]
      CHR Extension: (WooZone Chrome Extension) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ekbgeoeppoglfpdbdfdgccnancajoecm [2018-02-07]
      CHR Extension: (Block Yourself from Analytics) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadgflmigmogfionelcpalhohefbnehm [2017-11-29]
      CHR Extension: (Hojas de cálculo) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
      CHR Extension: (Page Analytics (by Google)) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnbdnhhicmebfgdgglcdacdapkcihcoh [2017-05-16]
      CHR Extension: (Documentos de Google sin conexión) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-04-24]
      CHR Extension: (AdBlock) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2018-02-07]
      CHR Extension: (Wappalyzer) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2018-02-09]
      CHR Extension: (Keywords Everywhere - Keyword Tool) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbapdpeemoojbophdfndmlgdhppljgmp [2017-11-09]
      CHR Extension: (SimilarWeb - Traffic Rank & Website Analysis) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\hoklmmgfnpapgjgcpechhaamimifchmp [2018-02-01]
      CHR Extension: (Copy Css Selector) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\kemkenbgbgodoglfkkejbdcpojnodnkg [2017-12-27]
      CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2017-04-24]
      CHR Extension: (Boomerang for Gmail) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2017-09-29]
      CHR Extension: (Screencastify - Screen Video Recorder) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmeijimgabbpbgpdklnllpncmdofkcpn [2018-02-06]
      CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23]
      CHR Extension: (Responsive Web Design Tester) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\objclahbaimlfnbjdeobicmmlnbhamkg [2017-09-13]
      CHR Extension: (Google Publisher Toolbar) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\omioeahgfecgfpfldejlnideemfidnkc [2018-02-09]
      CHR Extension: (Gmail) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-24]
      CHR Extension: (Chrome Media Router) - C:\Users\a1a2\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-07]
      CHR HKU\S-1-5-21-2221359099-2426054925-774135096-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx

      Opera:
      =======
      OPR Extension: (SEO Tools) - C:\Users\a1a2\AppData\Roaming\Opera Software\Opera Stable\Extensions\ddgknphabgpfbjedajaondamhejkohkd [2018-02-05]
      OPR Extension: (Login Helper) - C:\Users\a1a2\AppData\Roaming\Opera Software\Opera Stable\Extensions\elaejmpopanncofaaaphapibnahkkgjb [2017-05-22]
      StartMenuInternet: (HKLM) OperaStable - C:\Program Files\Opera\Launcher.exe

      ==================== Services (Whitelisted) ====================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [25600 2017-11-03] (Apache Software Foundation) [File not signed]
      R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [22816 2017-09-18] (Intel)
      S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [400656 2017-02-05] (EasyAntiCheat Ltd)
      R2 esifsvc; C:\WINDOWS\SysWOW64\esif_uf.exe [1419424 2016-05-20] (Intel Corporation)
      S3 ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [824592 2017-03-07] ()
      R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3418024 2017-06-29] (LogMeIn Inc.)
      R2 HmaProVpn; C:\Program Files (x86)\HMA! Pro VPN\VpnSvc.exe [5266016 2017-12-13] (Privax Limited)
      R2 ibtsiva; C:\WINDOWS\system32\ibtsiva.exe [542320 2017-12-06] (Intel Corporation)
      R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc.)
      R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-07-10] (Logitech Inc.)
      R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
      R2 mysql; C:\xampp\mysql\bin\mysqld.exe [11511240 2017-12-21] ()
      R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [317960 2016-10-04] (Realtek Semiconductor)
      R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-03] (DEVGURU Co., LTD.)
      R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [278616 2017-08-18] (Synaptics Incorporated)
      R2 SystemUsageReportSvc_QUEENCREEK; C:\Program Files\Intel Driver and Support Assistant\SUR\SurSvc.exe [157456 2017-03-07] ()
      R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH)
      S3 USER_ESRV_SVC_QUEENCREEK; C:\Program Files\Intel\SUR\QUEENCREEK\esrv_svc.exe [824592 2017-03-07] ()
      S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\NisSrv.exe [356168 2018-01-20] (Microsoft Corporation)
      R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MsMpEng.exe [105792 2018-01-20] (Microsoft Corporation)

      ===================== Drivers (Whitelisted) ======================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      S3 CM_VENDER_CMD; C:\Program Files\Common Files\Logitech\G430Install\CMVC64.sys [17104 2014-07-30] (Windows (R) Win 7 DDK provider)
      R3 dptf_cpu; C:\WINDOWS\System32\drivers\dptf_cpu.sys [52208 2016-05-20] (Intel Corporation)
      R3 esif_lf; C:\WINDOWS\system32\DRIVERS\esif_lf.sys [260080 2016-05-20] (Intel Corporation)
      R3 Hamachi; C:\WINDOWS\System32\drivers\Hamdrv.sys [45680 2017-02-27] (LogMeIn Inc.)
      R3 hmatap; C:\WINDOWS\System32\drivers\hmatap.sys [36456 2017-07-12] (The OpenVPN Project)
      R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [136128 2017-12-06] (Intel Corporation)
      R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
      R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-07-10] (Logitech Inc.)
      R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253880 2018-02-10] (Malwarebytes)
      R1 MpKsl46d7937e; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B4508C5E-F191-4E34-A329-9595C220C71E}\MpKsl46d7937e.sys [58120 2018-02-14] (Microsoft Corporation)
      R1 MpKsl64e138e9; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{31AA0D2E-9545-4C24-80AD-ED01DB7B6EA4}\MpKsl64e138e9.sys [58120 2018-02-14] (Microsoft Corporation)
      R3 Netwtw04; C:\WINDOWS\system32\DRIVERS\Netwtw04.sys [7647232 2017-10-17] (Intel Corporation)
      R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek )
      S3 semav6msr64; C:\Windows\system32\drivers\semav6msr64.sys [21984 2016-10-18] ()
      R3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [55384 2017-08-18] (Synaptics Incorporated)
      R0 vsock; C:\WINDOWS\system32\DRIVERS\vsock.sys [91712 2016-09-30] (VMware, Inc.)
      S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-01-20] (Microsoft Corporation)
      R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288848 2018-01-20] (Microsoft Corporation)
      S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2018-01-20] (Microsoft Corporation)
      R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [30368 2017-06-21] (HP)

      ==================== NetSvcs (Whitelisted) ===================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


      ================

      ==================== One Month Created files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2018-02-15 10:56 - 2018-02-15 10:57 - 000026182 _____ C:\Users\a1a2\Desktop\FRST.txt
      2018-02-15 10:56 - 2018-02-15 10:56 - 000000000 ____D C:\FRST
      2018-02-15 10:56 - 2018-02-15 10:55 - 002405376 _____ (Farbar) C:\Users\a1a2\Desktop\FRST64.exe
      2018-02-15 10:55 - 2018-02-15 10:55 - 002405376 _____ (Farbar) C:\Users\a1a2\Downloads\FRST64.exe
      2018-02-14 21:19 - 2018-02-14 21:19 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
      2018-02-14 18:15 - 2018-02-14 18:15 - 1048576000 _____ C:\Users\a1a2\Downloads\7DMBF59390.part1 (2).rar
      2018-02-14 18:14 - 2018-02-14 18:14 - 1048576000 _____ C:\Users\a1a2\Downloads\7DMBF59390.part1 (1).rar
      2018-02-14 16:49 - 2018-02-14 16:49 - 001149926 _____ C:\Users\a1a2\Downloads\images (3).pdf
      2018-02-14 16:09 - 2018-02-14 16:09 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign18f8d1a4dd5f30fa
      2018-02-14 16:08 - 2018-02-14 16:08 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign6159250f27603e1f
      2018-02-14 16:08 - 2018-02-14 16:08 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign3b1f4bdcb5741505
      2018-02-14 13:31 - 2018-02-14 13:31 - 000152013 _____ C:\Users\a1a2\Downloads\html5blank-stable.zip
      2018-02-14 10:56 - 2018-02-14 10:56 - 001034294 _____ C:\Users\a1a2\Downloads\images (2).pdf
      2018-02-14 10:48 - 2018-02-10 07:24 - 000270744 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
      2018-02-14 10:48 - 2018-02-10 07:23 - 001577880 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
      2018-02-14 10:48 - 2018-02-10 07:23 - 000758168 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
      2018-02-14 10:48 - 2018-02-10 07:23 - 000613272 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
      2018-02-14 10:48 - 2018-02-10 07:23 - 000138136 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
      2018-02-14 10:48 - 2018-02-10 07:22 - 000662936 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
      2018-02-14 10:48 - 2018-02-10 07:22 - 000460696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll
      2018-02-14 10:48 - 2018-02-10 07:22 - 000387480 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
      2018-02-14 10:48 - 2018-02-10 07:22 - 000272800 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
      2018-02-14 10:48 - 2018-02-10 07:22 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll
      2018-02-14 10:48 - 2018-02-10 07:19 - 001133888 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
      2018-02-14 10:48 - 2018-02-10 07:16 - 008603032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
      2018-02-14 10:48 - 2018-02-10 07:16 - 002406456 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
      2018-02-14 10:48 - 2018-02-10 07:14 - 004504464 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe
      2018-02-14 10:48 - 2018-02-10 07:14 - 002395032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
      2018-02-14 10:48 - 2018-02-10 07:13 - 001416392 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
      2018-02-14 10:48 - 2018-02-10 07:12 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
      2018-02-14 10:48 - 2018-02-10 07:10 - 002447768 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
      2018-02-14 10:48 - 2018-02-10 07:10 - 000614160 _____ (Microsoft Corporation) C:\WINDOWS\system32\StateRepository.Core.dll
      2018-02-14 10:48 - 2018-02-10 07:09 - 003904296 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
      2018-02-14 10:48 - 2018-02-10 07:08 - 021351624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
      2018-02-14 10:48 - 2018-02-10 07:08 - 007675784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
      2018-02-14 10:48 - 2018-02-10 07:08 - 003010248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
      2018-02-14 10:48 - 2018-02-10 07:07 - 004506576 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
      2018-02-14 10:48 - 2018-02-10 07:07 - 002710728 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
      2018-02-14 10:48 - 2018-02-10 07:06 - 004486904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
      2018-02-14 10:48 - 2018-02-10 07:06 - 000824896 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipSVC.dll
      2018-02-14 10:48 - 2018-02-10 07:06 - 000594048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
      2018-02-14 10:48 - 2018-02-10 07:06 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
      2018-02-14 10:48 - 2018-02-10 07:04 - 007384576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
      2018-02-14 10:48 - 2018-02-10 07:04 - 006791984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
      2018-02-14 10:48 - 2018-02-10 07:04 - 001254144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
      2018-02-14 10:48 - 2018-02-10 07:03 - 001619808 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
      2018-02-14 10:48 - 2018-02-10 07:03 - 000722616 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppwinob.dll
      2018-02-14 10:48 - 2018-02-10 06:18 - 001384288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
      2018-02-14 10:48 - 2018-02-10 06:17 - 002255112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
      2018-02-14 10:48 - 2018-02-10 06:17 - 000211864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll
      2018-02-14 10:48 - 2018-02-10 06:15 - 001145624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
      2018-02-14 10:48 - 2018-02-10 06:09 - 006092152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
      2018-02-14 10:48 - 2018-02-10 06:09 - 003485392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
      2018-02-14 10:48 - 2018-02-10 06:09 - 002338776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
      2018-02-14 10:48 - 2018-02-10 06:08 - 003980720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
      2018-02-14 10:48 - 2018-02-10 06:08 - 002193168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
      2018-02-14 10:48 - 2018-02-10 06:07 - 025253376 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
      2018-02-14 10:48 - 2018-02-10 06:07 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
      2018-02-14 10:48 - 2018-02-10 06:07 - 000527864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StateRepository.Core.dll
      2018-02-14 10:48 - 2018-02-10 06:06 - 006481640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
      2018-02-14 10:48 - 2018-02-10 06:06 - 006014688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
      2018-02-14 10:48 - 2018-02-10 06:06 - 004670728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
      2018-02-14 10:48 - 2018-02-10 05:50 - 003665408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
      2018-02-14 10:48 - 2018-02-10 05:50 - 001313792 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll
      2018-02-14 10:48 - 2018-02-10 05:50 - 001294848 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
      2018-02-14 10:48 - 2018-02-10 05:47 - 017160704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
      2018-02-14 10:48 - 2018-02-10 05:47 - 013704192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
      2018-02-14 10:48 - 2018-02-10 05:46 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
      2018-02-14 10:48 - 2018-02-10 05:45 - 007545344 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
      2018-02-14 10:48 - 2018-02-10 05:43 - 018923008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
      2018-02-14 10:48 - 2018-02-10 05:43 - 008020480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll
      2018-02-14 10:48 - 2018-02-10 05:43 - 006466560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
      2018-02-14 10:48 - 2018-02-10 05:42 - 023671808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
      2018-02-14 10:48 - 2018-02-10 05:42 - 001015296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
      2018-02-14 10:48 - 2018-02-10 05:41 - 019352576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
      2018-02-14 10:48 - 2018-02-10 05:40 - 012831744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
      2018-02-14 10:48 - 2018-02-10 05:40 - 008110080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
      2018-02-14 10:48 - 2018-02-10 05:40 - 004498432 _____ (Microsoft Corporation) C:\WINDOWS\system32\xpsrchvw.exe
      2018-02-14 10:48 - 2018-02-10 05:40 - 004113408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
      2018-02-14 10:48 - 2018-02-10 05:40 - 003405824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 011925504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 004748288 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 004592640 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 002976256 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 002741248 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssrch.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 002677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
      2018-02-14 10:48 - 2018-02-10 05:39 - 001669120 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 006567936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 005833216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 004815360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 003169280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 003125760 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 002857984 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 002184192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssrch.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 002086400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
      2018-02-14 10:48 - 2018-02-10 05:38 - 001228800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
      2018-02-14 10:48 - 2018-02-10 05:38 - 000939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasapi32.dll
      2018-02-14 10:48 - 2018-02-10 05:37 - 004772352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ExplorerFrame.dll
      2018-02-14 10:48 - 2018-02-10 05:37 - 003678720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
      2018-02-14 10:48 - 2018-02-10 05:37 - 003578368 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
      2018-02-14 10:48 - 2018-02-10 05:37 - 002784256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
      2018-02-14 10:48 - 2018-02-10 05:37 - 001822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
      2018-02-14 10:48 - 2018-02-10 05:37 - 001488384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
      2018-02-14 10:48 - 2018-02-10 05:36 - 006031360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
      2018-02-14 10:48 - 2018-02-10 05:36 - 002464768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
      2018-02-14 10:48 - 2018-02-10 05:36 - 001759744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
      2018-02-14 10:48 - 2018-02-10 05:34 - 004249600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
      2018-02-14 10:48 - 2018-02-10 05:34 - 002983936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcndmgr.dll
      2018-02-14 10:48 - 2018-02-10 05:33 - 001936384 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
      2018-02-14 10:48 - 2018-02-10 05:33 - 001557504 _____ (Microsoft Corporation) C:\WINDOWS\system32\VSSVC.exe
      2018-02-14 10:48 - 2018-02-09 04:35 - 004959688 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
      2018-02-14 10:48 - 2018-02-02 04:36 - 003903944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
      2018-02-14 10:47 - 2018-02-10 07:22 - 002003352 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
      2018-02-14 10:47 - 2018-02-10 07:22 - 000035224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
      2018-02-14 10:47 - 2018-02-10 07:21 - 001092016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
      2018-02-14 10:47 - 2018-02-10 07:21 - 000479912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase_enclave.dll
      2018-02-14 10:47 - 2018-02-10 07:21 - 000279456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys
      2018-02-14 10:47 - 2018-02-10 07:20 - 001206680 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
      2018-02-14 10:47 - 2018-02-10 07:20 - 001055640 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
      2018-02-14 10:47 - 2018-02-10 07:20 - 000924648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
      2018-02-14 10:47 - 2018-02-10 07:20 - 000599448 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
      2018-02-14 10:47 - 2018-02-10 07:20 - 000077208 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll
      2018-02-14 10:47 - 2018-02-10 07:18 - 001193192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryPS.dll
      2018-02-14 10:47 - 2018-02-10 07:18 - 000319864 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
      2018-02-14 10:47 - 2018-02-10 07:18 - 000098272 _____ (Microsoft Corporation) C:\WINDOWS\system32\FsIso.exe
      2018-02-14 10:47 - 2018-02-10 07:18 - 000022400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
      2018-02-14 10:47 - 2018-02-10 07:17 - 001209240 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
      2018-02-14 10:47 - 2018-02-10 07:16 - 000739696 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
      2018-02-14 10:47 - 2018-02-10 07:15 - 002514944 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
      2018-02-14 10:47 - 2018-02-10 07:15 - 001954048 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
      2018-02-14 10:47 - 2018-02-10 07:15 - 001415296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
      2018-02-14 10:47 - 2018-02-10 07:15 - 000471968 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
      2018-02-14 10:47 - 2018-02-10 07:14 - 001002592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
      2018-02-14 10:47 - 2018-02-10 07:13 - 000535960 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
      2018-02-14 10:47 - 2018-02-10 07:13 - 000408984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys
      2018-02-14 10:47 - 2018-02-10 07:13 - 000373656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
      2018-02-14 10:47 - 2018-02-10 07:12 - 004537040 _____ (Microsoft Corporation) C:\WINDOWS\system32\setupapi.dll
      2018-02-14 10:47 - 2018-02-10 07:12 - 001313016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Taskmgr.exe
      2018-02-14 10:47 - 2018-02-10 07:12 - 001277848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
      2018-02-14 10:47 - 2018-02-10 07:11 - 001029528 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
      2018-02-14 10:47 - 2018-02-10 07:11 - 000711432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
      2018-02-14 10:47 - 2018-02-10 07:11 - 000677784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
      2018-02-14 10:47 - 2018-02-10 07:11 - 000494496 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll
      2018-02-14 10:47 - 2018-02-10 07:10 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
      2018-02-14 10:47 - 2018-02-10 07:10 - 000246168 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
      2018-02-14 10:47 - 2018-02-10 07:10 - 000154520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryClient.dll
      2018-02-14 10:47 - 2018-02-10 07:09 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
      2018-02-14 10:47 - 2018-02-10 07:09 - 000525208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
      2018-02-14 10:47 - 2018-02-10 07:09 - 000491264 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll

    9. #9
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      Re: CPU al 100% por culpa de System

      2018-02-14 10:47 - 2018-02-10 07:09 - 000075160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 07:08 - 002574232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
      2018-02-14 10:47 - 2018-02-10 07:08 - 000687552 _____ (Microsoft Corporation) C:\WINDOWS\system32\StructuredQuery.dll
      2018-02-14 10:47 - 2018-02-10 07:08 - 000398824 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
      2018-02-14 10:47 - 2018-02-10 07:08 - 000096200 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbrand.dll
      2018-02-14 10:47 - 2018-02-10 07:08 - 000048112 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
      2018-02-14 10:47 - 2018-02-10 07:07 - 000705944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
      2018-02-14 10:47 - 2018-02-10 07:07 - 000436632 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHostCommon.dll
      2018-02-14 10:47 - 2018-02-10 07:06 - 000727448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\fvevol.sys
      2018-02-14 10:47 - 2018-02-10 07:06 - 000519144 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
      2018-02-14 10:47 - 2018-02-10 07:06 - 000494488 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
      2018-02-14 10:47 - 2018-02-10 07:06 - 000356952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll
      2018-02-14 10:47 - 2018-02-10 07:06 - 000189336 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll
      2018-02-14 10:47 - 2018-02-10 07:06 - 000100248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryBroker.dll
      2018-02-14 10:47 - 2018-02-10 07:06 - 000087384 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
      2018-02-14 10:47 - 2018-02-10 07:05 - 000688064 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
      2018-02-14 10:47 - 2018-02-10 07:05 - 000413888 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
      2018-02-14 10:47 - 2018-02-10 07:05 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
      2018-02-14 10:47 - 2018-02-10 07:05 - 000070856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wldp.dll
      2018-02-14 10:47 - 2018-02-10 07:04 - 001430760 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
      2018-02-14 10:47 - 2018-02-10 07:04 - 001426672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
      2018-02-14 10:47 - 2018-02-10 07:04 - 001170008 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
      2018-02-14 10:47 - 2018-02-10 07:04 - 000614296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
      2018-02-14 10:47 - 2018-02-10 07:04 - 000603920 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
      2018-02-14 10:47 - 2018-02-10 07:04 - 000374032 _____ (Microsoft Corporation) C:\WINDOWS\system32\vac.exe
      2018-02-14 10:47 - 2018-02-10 07:04 - 000339872 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkBindingEngineMigPlugin.dll
      2018-02-14 10:47 - 2018-02-10 07:04 - 000260896 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
      2018-02-14 10:47 - 2018-02-10 07:04 - 000212880 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsensorgroup.dll
      2018-02-14 10:47 - 2018-02-10 07:04 - 000093592 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
      2018-02-14 10:47 - 2018-02-10 07:03 - 000849304 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingWinRT.dll
      2018-02-14 10:47 - 2018-02-10 07:03 - 000706600 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeManagerObj.dll
      2018-02-14 10:47 - 2018-02-10 07:03 - 000404888 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
      2018-02-14 10:47 - 2018-02-10 07:03 - 000098712 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceReactivation.dll
      2018-02-14 10:47 - 2018-02-10 07:02 - 002773400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
      2018-02-14 10:47 - 2018-02-10 07:02 - 001103768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
      2018-02-14 10:47 - 2018-02-10 07:02 - 000628632 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp_win.dll
      2018-02-14 10:47 - 2018-02-10 07:02 - 000617304 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
      2018-02-14 10:47 - 2018-02-10 06:22 - 001930224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
      2018-02-14 10:47 - 2018-02-10 06:21 - 001615712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
      2018-02-14 10:47 - 2018-02-10 06:17 - 000597160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
      2018-02-14 10:47 - 2018-02-10 06:17 - 000542856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryPS.dll
      2018-02-14 10:47 - 2018-02-10 06:12 - 004382032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setupapi.dll
      2018-02-14 10:47 - 2018-02-10 06:11 - 001250528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Taskmgr.exe
      2018-02-14 10:47 - 2018-02-10 06:10 - 000422592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
      2018-02-14 10:47 - 2018-02-10 06:09 - 001123456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
      2018-02-14 10:47 - 2018-02-10 06:09 - 000559976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StructuredQuery.dll
      2018-02-14 10:47 - 2018-02-10 06:09 - 000354200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudExperienceHostCommon.dll
      2018-02-14 10:47 - 2018-02-10 06:08 - 000592792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
      2018-02-14 10:47 - 2018-02-10 06:07 - 000543920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
      2018-02-14 10:47 - 2018-02-10 06:07 - 000284112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll
      2018-02-14 10:47 - 2018-02-10 06:07 - 000123808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryClient.dll
      2018-02-14 10:47 - 2018-02-10 06:07 - 000089504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryBroker.dll
      2018-02-14 10:47 - 2018-02-10 06:07 - 000083216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winbrand.dll
      2018-02-14 10:47 - 2018-02-10 06:07 - 000061024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wldp.dll
      2018-02-14 10:47 - 2018-02-10 06:06 - 000982528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 001246432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 001149272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000718232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicensingWinRT.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000654456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeManagerObj.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000551672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000386424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000193248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsensorgroup.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000129184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000079256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DeviceReactivation.dll
      2018-02-14 10:47 - 2018-02-10 06:05 - 000077552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe
      2018-02-14 10:47 - 2018-02-10 06:05 - 000074992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
      2018-02-14 10:47 - 2018-02-10 06:03 - 000505160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp_win.dll
      2018-02-14 10:47 - 2018-02-10 05:50 - 000849920 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
      2018-02-14 10:47 - 2018-02-10 05:50 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
      2018-02-14 10:47 - 2018-02-10 05:49 - 001664512 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
      2018-02-14 10:47 - 2018-02-10 05:49 - 000848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
      2018-02-14 10:47 - 2018-02-10 05:49 - 000536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll
      2018-02-14 10:47 - 2018-02-10 05:49 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cldflt.sys
      2018-02-14 10:47 - 2018-02-10 05:49 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcGenral.dll
      2018-02-14 10:47 - 2018-02-10 05:49 - 000326656 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
      2018-02-14 10:47 - 2018-02-10 05:49 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\system32\convertvhd.exe
      2018-02-14 10:47 - 2018-02-10 05:49 - 000211456 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
      2018-02-14 10:47 - 2018-02-10 05:49 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
      2018-02-14 10:47 - 2018-02-10 05:48 - 002890240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
      2018-02-14 10:47 - 2018-02-10 05:48 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mskssrv.sys
      2018-02-14 10:47 - 2018-02-10 05:48 - 000025088 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtClient.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000331264 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserexport.exe
      2018-02-14 10:47 - 2018-02-10 05:47 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000201216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedPCCSP.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000143872 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\virtdisk.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys
      2018-02-14 10:47 - 2018-02-10 05:47 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcimage.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
      2018-02-14 10:47 - 2018-02-10 05:47 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzres.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 002393600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcGenral.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 001470976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 001008640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys
      2018-02-14 10:47 - 2018-02-10 05:46 - 000199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDeviceRegistration.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000173568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepositoryUpgrade.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000135680 _____ (Microsoft Corporation) C:\WINDOWS\system32\shsetup.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000082432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\setup16.exe
      2018-02-14 10:47 - 2018-02-10 05:46 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCShellCommonProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 05:46 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user.exe
      2018-02-14 10:47 - 2018-02-10 05:45 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\system32\FSClient.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\system32\authz.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsku.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlaapi.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\nshhttp.dll
      2018-02-14 10:47 - 2018-02-10 05:45 - 000016384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EnterpriseAppMgmtClient.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 001498112 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebRuntimeManager.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Magnify.exe
      2018-02-14 10:47 - 2018-02-10 05:44 - 000579072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000539136 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000503296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_User.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreCommonProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Search.ProtocolHandler.MAPI2.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000336896 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppLockerCSP.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000302592 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseAppMgmtSvc.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000276992 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000276480 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssprxy.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\virtdisk.dll
      2018-02-14 10:47 - 2018-02-10 05:44 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tzres.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 003756032 _____ (Microsoft Corporation) C:\WINDOWS\system32\bootux.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000566272 _____ (Microsoft Corporation) C:\WINDOWS\system32\DevicePairing.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000394752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
      2018-02-14 10:47 - 2018-02-10 05:43 - 000391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000311808 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000247296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winsku.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000181248 _____ (Microsoft Corporation) C:\WINDOWS\system32\twext.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepositoryUpgrade.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shsetup.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000084480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
      2018-02-14 10:47 - 2018-02-10 05:43 - 000013312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCShellCommonProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 001425408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.Handlers.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 001216000 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 001113600 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
      2018-02-14 10:47 - 2018-02-10 05:42 - 000975872 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasgcw.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000813568 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000792064 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssvp.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000731136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Magnify.exe
      2018-02-14 10:47 - 2018-02-10 05:42 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000634880 _____ (Microsoft Corporation) C:\WINDOWS\system32\efswrt.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpAXHolder.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000397824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000270336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ListSvc.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000236032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FSClient.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkDesktopSettings.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000233984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppLockerCSP.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000228352 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
      2018-02-14 10:47 - 2018-02-10 05:42 - 000225280 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFilterHost.exe
      2018-02-14 10:47 - 2018-02-10 05:42 - 000184832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authz.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockScreenContent.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000160256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserDeviceRegistration.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\rshx32.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\IdCtrls.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000035328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nshhttp.dll
      2018-02-14 10:47 - 2018-02-10 05:42 - 000024064 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvr32.exe
      2018-02-14 10:47 - 2018-02-10 05:41 - 001495552 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000859648 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
      2018-02-14 10:47 - 2018-02-10 05:41 - 000820224 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000815616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000504832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DevicePairing.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000466432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\efswrt.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000451072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TileDataRepository.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncsi.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000377856 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchProtocolHost.exe
      2018-02-14 10:47 - 2018-02-10 05:41 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Search.ProtocolHandler.MAPI2.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000255488 _____ (Microsoft Corporation) C:\WINDOWS\system32\edputil.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netplwiz.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sendmail.dll
      2018-02-14 10:47 - 2018-02-10 05:41 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\nlaapi.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 003367936 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncCenter.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 002873344 _____ (Microsoft Corporation) C:\WINDOWS\system32\themeui.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 001234432 _____ (Microsoft Corporation) C:\WINDOWS\system32\SEMgrSvc.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 001002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000940544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000939520 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasdlg.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000930816 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000886784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
      2018-02-14 10:47 - 2018-02-10 05:40 - 000856576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasgcw.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000756736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000691200 _____ (Microsoft Corporation) C:\WINDOWS\system32\dsreg.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000601088 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000508416 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
      2018-02-14 10:47 - 2018-02-10 05:40 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\system32\rastls.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
      2018-02-14 10:47 - 2018-02-10 05:40 - 000421376 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputSwitch.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000366080 _____ (Microsoft Corporation) C:\WINDOWS\system32\nlasvc.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000343040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000298496 _____ (Microsoft Corporation) C:\WINDOWS\system32\netplwiz.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000232960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edputil.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000195072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreCommonProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 05:40 - 000177152 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditionUpgradeHelper.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 005500928 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 002490880 _____ (Microsoft Corporation) C:\WINDOWS\system32\themecpl.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 002209280 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000908800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontext.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssvp.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000680960 _____ (Microsoft Corporation) C:\WINDOWS\system32\sud.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000658432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000648704 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserLanguagesCpl.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\hgcpl.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000462848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000447488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rastls.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sysdm.cpl
      2018-02-14 10:47 - 2018-02-10 05:39 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twext.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000096256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IdCtrls.dll
      2018-02-14 10:47 - 2018-02-10 05:39 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\regsvr32.exe
      2018-02-14 10:47 - 2018-02-10 05:38 - 006722560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
      2018-02-14 10:47 - 2018-02-10 05:38 - 002082304 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
      2018-02-14 10:47 - 2018-02-10 05:38 - 001968640 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 001597952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 001547776 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 001353728 _____ (Microsoft Corporation) C:\WINDOWS\system32\usercpl.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 001167360 _____ (Microsoft Corporation) C:\WINDOWS\system32\ISM.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 001166336 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 001057792 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000982016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchIndexer.exe
      2018-02-14 10:47 - 2018-02-10 05:38 - 000885248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000863744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
      2018-02-14 10:47 - 2018-02-10 05:38 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000668160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000653312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sud.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000598528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000556544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppBroker.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.immersiveshell.serviceprovider.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000509440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll

    10. #10
      Usuario Avatar de solocom
      Registrado
      sep 2017
      Ubicación
      España
      Mensajes
      12

      Re: CPU al 100% por culpa de System

      2018-02-14 10:47 - 2018-02-10 05:38 - 000506880 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000401920 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll
      2018-02-14 10:47 - 2018-02-10 05:38 - 000324608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchProtocolHost.exe
      2018-02-14 10:47 - 2018-02-10 05:38 - 000174592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditionUpgradeHelper.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 004839424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 003419136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xpsrchvw.exe
      2018-02-14 10:47 - 2018-02-10 05:37 - 003287040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncCenter.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 002523648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameux.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontext.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000862208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasdlg.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppBroker.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000417792 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000365568 _____ (Microsoft Corporation) C:\WINDOWS\system32\srchadmin.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000308224 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
      2018-02-14 10:47 - 2018-02-10 05:37 - 000199680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchFilterHost.exe
      2018-02-14 10:47 - 2018-02-10 05:37 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingMonitor.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 002462208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themecpl.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 002035712 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 001739264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 001559552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 001342464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 001230848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usercpl.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000915968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000695296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000685056 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000599552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000576512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hgcpl.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserLanguagesCpl.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000403968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcomapi.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000383488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000141824 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
      2018-02-14 10:47 - 2018-02-10 05:36 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 005388800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 004384768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ExplorerFrame.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 002814976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\themeui.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 002413568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gameux.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 002349568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 002013184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
      2018-02-14 10:47 - 2018-02-10 05:35 - 001474560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000963584 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000943104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.BackgroundMediaPlayback.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000941568 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.BackgroundMediaPlayer.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.MediaPlayer.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000862208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rasapi32.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000842240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000826880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SearchIndexer.exe
      2018-02-14 10:47 - 2018-02-10 05:35 - 000796160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000667136 _____ (Microsoft Corporation) C:\WINDOWS\system32\FrameServer.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000455680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000433664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000402944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000332288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srchadmin.dll
      2018-02-14 10:47 - 2018-02-10 05:35 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputSwitch.dll
      2018-02-14 10:47 - 2018-02-10 05:34 - 006532096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
      2018-02-14 10:47 - 2018-02-10 05:34 - 000624640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVXENCD.DLL
      2018-02-14 10:47 - 2018-02-10 05:34 - 000464384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
      2018-02-14 10:47 - 2018-02-10 05:34 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVSENCD.DLL
      2018-02-14 10:47 - 2018-02-10 05:34 - 000111104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Playback.ProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 001661440 _____ (Microsoft Corporation) C:\WINDOWS\system32\vssapi.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 001570816 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
      2018-02-14 10:47 - 2018-02-10 05:33 - 001509888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000621568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.BackgroundMediaPlayback.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000620544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.BackgroundMediaPlayer.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000604672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.MediaPlayer.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000482816 _____ (Microsoft Corporation) C:\WINDOWS\system32\srcore.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmcbase.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\rstrui.exe
      2018-02-14 10:47 - 2018-02-10 05:33 - 000217088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
      2018-02-14 10:47 - 2018-02-10 05:33 - 000093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\davclnt.dll
      2018-02-14 10:47 - 2018-02-10 05:32 - 002427904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcndmgr.dll
      2018-02-14 10:47 - 2018-02-10 05:32 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVXENCD.DLL
      2018-02-14 10:47 - 2018-02-10 05:32 - 000392704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVSENCD.DLL
      2018-02-14 10:47 - 2018-02-10 05:32 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\npfs.sys
      2018-02-14 10:47 - 2018-02-10 05:32 - 000056832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Playback.ProxyStub.dll
      2018-02-14 10:47 - 2018-02-10 05:32 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe
      2018-02-14 10:47 - 2018-02-10 05:31 - 001488896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmc.exe
      2018-02-14 10:47 - 2018-02-10 05:31 - 001159680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vssapi.dll
      2018-02-14 10:47 - 2018-02-10 05:31 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmcbase.dll
      2018-02-14 10:47 - 2018-02-10 05:31 - 000190464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
      2018-02-14 10:47 - 2018-02-10 05:31 - 000078848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\davclnt.dll
      2018-02-14 10:47 - 2018-02-10 03:59 - 000804240 _____ C:\WINDOWS\SysWOW64\locale.nls
      2018-02-14 10:47 - 2018-02-10 03:59 - 000804240 _____ C:\WINDOWS\system32\locale.nls
      2018-02-14 10:47 - 2018-02-09 04:35 - 001234888 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
      2018-02-14 10:47 - 2018-02-09 04:35 - 001002952 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
      2018-02-14 10:47 - 2018-02-09 04:35 - 000892872 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
      2018-02-14 10:47 - 2018-02-09 04:35 - 000065992 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
      2018-02-14 10:47 - 2018-02-02 04:36 - 000921032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
      2018-02-14 10:47 - 2018-02-02 04:36 - 000854976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
      2018-02-14 10:47 - 2018-02-02 04:36 - 000649672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
      2018-02-14 10:47 - 2018-02-02 04:36 - 000054720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
      2018-02-14 10:27 - 2018-02-14 10:27 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign6006e3e0eb054fc3
      2018-02-14 10:17 - 2018-02-14 10:17 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsigna3344a729e64a8b2
      2018-02-14 10:17 - 2018-02-14 10:17 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign8a5909e70288d22e
      2018-02-14 10:17 - 2018-02-14 10:17 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign0a6372561d155ef4
      2018-02-14 10:16 - 2018-02-14 10:16 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign1f0a72a9773453ba
      2018-02-14 10:15 - 2018-02-14 10:15 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign530c5ae77ee72533
      2018-02-14 10:15 - 2018-02-14 10:15 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign0b6d95e14fb7ecf7
      2018-02-13 16:40 - 2018-02-13 16:40 - 000906978 _____ C:\Users\a1a2\Downloads\images (1).pdf
      2018-02-13 16:18 - 2018-02-13 16:18 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign2cfd8b9ed0aeb010
      2018-02-13 14:04 - 2018-02-13 14:04 - 000115588 _____ C:\Users\a1a2\Downloads\ajax-dropdowns.0.9.8.zip
      2018-02-13 13:50 - 2018-02-13 13:50 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign5524bfbcd6b2f2d0
      2018-02-13 13:41 - 2018-02-13 13:41 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsignecc875da56f06c28
      2018-02-13 13:41 - 2018-02-13 13:41 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign5ade07b580000e68
      2018-02-13 13:41 - 2018-02-13 13:41 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign53fa7c8efcaa535c
      2018-02-13 09:53 - 2018-02-13 09:53 - 000937028 _____ C:\Users\a1a2\Downloads\images.pdf
      2018-02-13 09:43 - 2018-02-13 09:43 - 000246343 _____ C:\Users\a1a2\Downloads\ilovepdf_jpg_to_pdf (1).pdf
      2018-02-12 21:51 - 2018-02-12 21:51 - 288528974 _____ C:\Users\a1a2\Downloads\J1781SE65O.part2.rar
      2018-02-12 21:51 - 2018-02-12 21:51 - 1048576000 _____ C:\Users\a1a2\Downloads\J1781SE65O.part1.rar
      2018-02-12 21:33 - 2018-02-12 21:33 - 000245070 _____ C:\Users\a1a2\Downloads\ilovepdf_jpg_to_pdf.pdf
      2018-02-12 20:55 - 2018-02-12 20:55 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsignfca05e344b50954a
      2018-02-12 20:54 - 2018-02-12 20:54 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsignaaa17debebe47c19
      2018-02-12 20:02 - 2018-02-12 20:02 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsignbed06f8a5fff8a96
      2018-02-12 20:00 - 2018-02-12 20:00 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsignbe9f345bb7efe765
      2018-02-12 20:00 - 2018-02-12 20:00 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign889cd926bba8b97c
      2018-02-12 20:00 - 2018-02-12 20:00 - 000000000 ____D C:\Users\a1a2\AppData\Local\Tempzxpsign4777d7645cf2ca19
      2018-02-12 18:42 - 2018-02-12 18:43 - 1048576000 _____ C:\Users\a1a2\Downloads\7DMBF59390.part3.rar
      2018-02-12 18:40 - 2018-02-12 18:40 - 1048576000 _____ C:\Users\a1a2\Downloads\7DMBF59390.part4.rar
      2018-02-12 18:38 - 2018-02-12 18:38 - 1048576000 _____ C:\Users\a1a2\Downloads\7DMBF59390.part2.rar
      2018-02-12 18:32 - 2018-02-12 18:32 - 1048576000 _____ C:\Users\a1a2\Downloads\7DMBF59390.part1.rar
      2018-02-12 18:22 - 2018-02-12 18:22 - 158173780 _____ C:\Users\a1a2\Downloads\7DMBF59390.part5.rar
      2018-02-12 18:12 - 2018-02-12 18:12 - 019334341 _____ C:\Users\a1a2\Downloads\graphicriver-3583781-gstudio-clean-invoices-template.zip
      2018-02-11 11:30 - 2018-02-11 11:31 - 068737828 _____ C:\Users\a1a2\Downloads\69225_legenda-351.zip
      2018-02-10 23:59 - 2018-02-10 23:59 - 000001674 _____ C:\Users\a1a2\Desktop\mal.txt
      2018-02-10 23:35 - 2018-02-10 23:35 - 000148460 _____ C:\Users\a1a2\Documents\cc_20180210_233547.reg
      2018-02-10 23:24 - 2018-02-10 23:26 - 000004955 _____ C:\Users\a1a2\Desktop\ZHPCleaner.txt
      2018-02-10 23:12 - 2018-02-10 23:26 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\ZHP
      2018-02-10 23:12 - 2018-02-10 23:12 - 000000874 _____ C:\Users\a1a2\Desktop\ZHPCleaner.lnk
      2018-02-10 23:12 - 2018-02-10 23:12 - 000000000 ____D C:\Users\a1a2\AppData\Local\ZHP
      2018-02-10 23:03 - 2018-02-10 23:03 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys
      2018-02-10 23:03 - 2018-02-10 23:03 - 000000000 ____D C:\Program Files\Common Files\Avast Software
      2018-02-10 23:00 - 2018-02-10 23:44 - 000000000 ____D C:\ProgramData\AVAST Software
      2018-02-10 23:00 - 2018-02-10 23:00 - 000003938 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
      2018-02-10 23:00 - 2018-02-10 23:00 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
      2018-02-10 22:58 - 2018-02-10 22:59 - 011205832 _____ (Piriform Ltd) C:\Users\a1a2\Downloads\ccsetup539.exe
      2018-02-10 22:57 - 2018-02-10 22:57 - 008222496 _____ (Malwarebytes) C:\Users\a1a2\Downloads\AdwCleaner (1).exe
      2018-02-10 22:57 - 2018-02-10 22:57 - 008222496 _____ (Malwarebytes) C:\Users\a1a2\Desktop\AdwCleaner (1).exe
      2018-02-10 22:56 - 2018-02-10 22:56 - 003058048 _____ C:\Users\a1a2\Downloads\ZHPCleaner.exe
      2018-02-10 22:56 - 2018-02-10 22:56 - 003058048 _____ C:\Users\a1a2\Desktop\ZHPCleaner.exe
      2018-02-10 22:47 - 2018-02-10 22:47 - 000253880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
      2018-02-10 22:46 - 2018-02-10 22:46 - 000001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
      2018-02-10 22:46 - 2018-02-10 22:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
      2018-02-10 22:46 - 2018-02-10 22:46 - 000000000 ____D C:\ProgramData\MB3CoreBackup
      2018-02-10 22:46 - 2017-11-29 09:11 - 000077432 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
      2018-02-10 11:15 - 2018-02-10 11:15 - 001595512 _____ C:\Users\a1a2\Downloads\Ejercicio-03.pdf
      2018-02-10 10:43 - 2018-02-10 10:43 - 001461329 _____ C:\Users\a1a2\Downloads\Ejercicio-02.pdf
      2018-02-09 11:05 - 2018-02-09 11:05 - 000001261 _____ C:\Users\Public\Desktop\VMware Workstation 12 Player.lnk
      2018-02-09 11:05 - 2018-02-09 11:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VMware
      2018-02-09 11:05 - 2018-02-09 11:05 - 000000000 ____D C:\Program Files\Common Files\VMware
      2018-02-09 11:05 - 2018-01-08 23:22 - 001149416 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll
      2018-02-09 11:05 - 2018-01-08 23:22 - 000400872 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe
      2018-02-09 11:05 - 2018-01-08 23:21 - 000366568 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe
      2018-02-09 11:05 - 2018-01-08 23:16 - 000088496 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys
      2018-02-09 11:05 - 2018-01-08 23:05 - 000066520 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetinst.dll
      2018-02-09 11:05 - 2018-01-08 23:05 - 000043992 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmnetuserif.sys
      2018-02-08 13:14 - 2018-02-08 13:14 - 000000000 ____D C:\WINDOWS\SysWOW64\SCDRV
      2018-02-08 13:14 - 2018-02-08 13:14 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
      2018-02-08 13:11 - 2018-02-08 13:12 - 025993145 _____ (SHARP CORPORATION) C:\Users\a1a2\Downloads\MX_D25_PCL6_PS_1505a_English_64bit.exe
      2018-02-08 13:01 - 2018-02-08 13:02 - 003794377 _____ C:\Users\a1a2\Downloads\[Wedevs]WP.User.Frontend.Pro.v2.3.13.zip
      2018-02-08 12:40 - 2018-02-08 12:40 - 000028825 _____ C:\Users\a1a2\Downloads\dokan-store-support-1.3.6.zip
      2018-02-08 12:32 - 2018-02-08 12:32 - 002993838 _____ C:\Users\a1a2\Downloads\dokan250pack.rar
      2018-02-08 12:18 - 2018-02-08 12:18 - 000725672 _____ C:\Users\a1a2\Downloads\dokan-pro-3.7-Deviran.com.zip
      2018-02-07 19:33 - 2018-02-07 19:33 - 001488271 _____ C:\Users\a1a2\Downloads\Ejercicio-01.pdf
      2018-02-07 17:15 - 2018-02-07 17:15 - 000004919 _____ C:\Users\a1a2\Downloads\actividades-infantiles-wpuf-wpuf_forms-2018-02-07.json
      2018-02-07 13:48 - 2018-02-07 13:48 - 003477880 _____ C:\Users\a1a2\Downloads\woocommerce.3.3.1.zip
      2018-02-07 12:06 - 2018-02-07 12:06 - 000271849 _____ C:\Users\a1a2\Downloads\Factura 147 - Web lagmanrestaurant (1).pdf
      2018-02-07 12:03 - 2018-02-07 12:03 - 000272969 _____ C:\Users\a1a2\Downloads\Factura 147 - Web lagmanrestaurant.pdf
      2018-02-07 09:40 - 2018-02-07 09:40 - 000278621 _____ C:\Users\a1a2\Downloads\Factura 146 - Remodelación International School Link 2.pdf
      2018-02-06 18:09 - 2018-02-06 18:09 - 000001126 _____ C:\Users\a1a2\Downloads\zoom.svg
      2018-02-06 16:58 - 2018-02-06 16:58 - 001016001 _____ C:\Users\a1a2\Downloads\Happy-businessman-making-thumbs-up-sign.zip
      2018-02-06 16:58 - 2018-02-06 16:58 - 001016001 _____ C:\Users\a1a2\Downloads\Happy-businessman-making-thumbs-up-sign (1).zip
      2018-02-06 12:36 - 2018-02-06 12:36 - 000001102 _____ C:\Users\Public\Desktop\paint.net.lnk
      2018-02-06 10:24 - 2018-02-06 10:25 - 007925111 _____ C:\Users\a1a2\Downloads\codecanyon-6892199-ultimate-addons-for-visual-composer-V3.16.21.zip
      2018-02-05 19:01 - 2018-02-05 19:01 - 000002105 _____ C:\Users\a1a2\Downloads\businessman.svg
      2018-02-05 17:34 - 2018-02-05 17:35 - 178639157 _____ C:\Users\a1a2\Downloads\themeforest-7758048-betheme-responsive-multipurpose-wordpress-theme-20.8.4.zip
      2018-02-05 16:24 - 2018-02-05 16:24 - 000170421 _____ C:\Users\a1a2\Downloads\Extension-V204 (1).zip
      2018-02-05 12:54 - 2018-02-05 12:54 - 001924758 _____ C:\Users\a1a2\Downloads\Advanced_Custom_Fields_Pro-[v5.6.5].zip
      2018-02-05 12:39 - 2018-02-05 12:39 - 000011463 _____ C:\Users\a1a2\Downloads\acf-button.zip
      2018-02-05 12:25 - 2018-02-05 12:29 - 251441780 _____ C:\Users\a1a2\Downloads\55158_Legenda_[v3.3].zip
      2018-02-05 11:57 - 2018-02-05 11:57 - 106270344 _____ C:\Users\a1a2\Downloads\error_log (1)
      2018-02-05 11:42 - 2018-02-05 11:42 - 000005764 _____ C:\Users\a1a2\Downloads\acf-button-field.1.0.zip
      2018-02-05 10:36 - 2018-02-05 10:36 - 000277292 _____ C:\Users\a1a2\Downloads\Factura 145 - Modificaciones radio horta-guinardo.pdf
      2018-02-05 10:26 - 2018-02-05 10:26 - 000160764 _____ C:\Users\a1a2\Downloads\Extension-V204.zip
      2018-02-02 13:14 - 2018-02-02 13:14 - 000692378 _____ C:\Users\a1a2\Downloads\dokan-theme-develop.zip
      2018-02-02 12:29 - 2018-02-02 12:29 - 000017093 _____ C:\Users\a1a2\Downloads\post-meta-inspector.1.1.1.zip
      2018-02-02 10:45 - 2018-02-02 10:45 - 000798383 _____ C:\Users\a1a2\Downloads\Dokan_Pro_[v2.7.1].rar
      2018-02-01 18:05 - 2018-02-01 18:06 - 000152865 _____ C:\Users\a1a2\Downloads\Apuntes-4-1.pdf
      2018-02-01 17:59 - 2018-02-01 17:59 - 000141253 _____ C:\Users\a1a2\Downloads\Ejercicio-4-3.pdf
      2018-02-01 13:24 - 2018-02-01 13:24 - 000344910 _____ C:\Users\a1a2\Downloads\internationalschoollink.wordpress.2018-02-01.xml
      2018-02-01 13:22 - 2018-02-01 13:22 - 000069652 _____ C:\Users\a1a2\Downloads\export-featured-images.zip
      2018-02-01 13:17 - 2018-02-01 13:17 - 000000047 _____ C:\Users\a1a2\Downloads\settings_aioseop.ini
      2018-01-31 17:09 - 2018-01-31 17:09 - 000024831 _____ C:\Users\a1a2\Downloads\API_PHP.zip
      2018-01-31 17:08 - 2018-01-31 17:08 - 000296320 _____ C:\Users\a1a2\Downloads\Guia de integracion.pdf
      2018-01-31 15:02 - 2018-01-31 15:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
      2018-01-31 14:54 - 2018-02-07 20:06 - 000000000 ____D C:\xampp
      2018-01-31 14:53 - 2018-01-31 14:54 - 128629728 _____ (Bitnami) C:\Users\a1a2\Downloads\xampp-win32-7.2.1-0-VC15-installer.exe
      2018-01-31 13:22 - 2018-01-31 13:22 - 000014482 _____ C:\Users\a1a2\Downloads\icomoon.zip
      2018-01-31 09:30 - 2018-01-31 09:30 - 000271245 _____ C:\Users\a1a2\Downloads\Factura 144 - Oir Vital 12.pdf
      2018-01-31 09:29 - 2018-01-31 09:29 - 000272556 _____ C:\Users\a1a2\Downloads\Factura 143 - Metropolitan S.L. 17.pdf
      2018-01-30 20:33 - 2018-01-30 20:33 - 000000228 _____ C:\Users\a1a2\Downloads\Ejemplo-6.txt
      2018-01-30 20:27 - 2018-01-30 20:27 - 000145147 _____ C:\Users\a1a2\Downloads\Apuntes-5-1.pdf
      2018-01-30 18:26 - 2018-01-30 18:26 - 000183599 _____ C:\Users\a1a2\Downloads\Factura 142 - Web Plasticostiana.pdf
      2018-01-30 14:50 - 2018-01-30 14:50 - 011142414 _____ C:\Users\a1a2\Downloads\ct_resi_7ensr.sql
      2018-01-30 12:39 - 2018-01-30 12:39 - 002854471 _____ C:\Users\a1a2\Downloads\card2.psd
      2018-01-30 12:38 - 2018-01-30 12:38 - 001315965 _____ C:\Users\a1a2\Downloads\InfoCORE.psd
      2018-01-26 15:18 - 2018-01-26 15:18 - 020223770 _____ C:\Users\a1a2\Downloads\internat_web (1).sql
      2018-01-26 15:18 - 2018-01-26 15:18 - 020219652 _____ C:\Users\a1a2\Downloads\internat_web (2).sql
      2018-01-26 15:15 - 2018-01-26 15:15 - 023323122 _____ C:\Users\a1a2\Downloads\tuwebya_sch.sql
      2018-01-26 12:33 - 2018-01-26 12:33 - 020225645 _____ C:\Users\a1a2\Downloads\internat_web.sql
      2018-01-26 11:55 - 2018-02-06 10:18 - 000002519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
      2018-01-26 11:55 - 2018-02-06 10:18 - 000002507 _____ C:\Users\Public\Desktop\Safari.lnk
      2018-01-26 11:55 - 2018-01-26 11:55 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\Apple Computer
      2018-01-26 11:55 - 2018-01-26 11:55 - 000000000 ____D C:\Users\a1a2\AppData\Local\Apple Computer
      2018-01-26 11:54 - 2018-01-26 11:55 - 000000000 ____D C:\Program Files (x86)\Safari
      2018-01-26 11:54 - 2018-01-26 11:54 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
      2018-01-26 11:54 - 2018-01-26 11:54 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
      2018-01-26 11:54 - 2018-01-26 11:54 - 000000000 ____D C:\Users\a1a2\AppData\Local\Apple
      2018-01-26 11:54 - 2018-01-26 11:54 - 000000000 ____D C:\ProgramData\Apple Computer
      2018-01-26 11:54 - 2018-01-26 11:54 - 000000000 ____D C:\ProgramData\Apple
      2018-01-26 11:54 - 2018-01-26 11:54 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
      2018-01-26 11:52 - 2018-01-26 11:52 - 038494576 _____ (Apple Inc.) C:\Users\a1a2\Downloads\safari-5-1-7-es-en-fr-de-it-win.exe
      2018-01-26 11:06 - 2018-01-26 11:06 - 008738916 _____ C:\Users\a1a2\Downloads\internationalschoollink.wordpress.2018-01-26.xml
      2018-01-26 10:55 - 2018-01-26 10:55 - 000184656 _____ C:\Users\a1a2\Downloads\Factura 141 - Servicios RDR .pdf
      2018-01-24 17:45 - 2018-01-24 17:46 - 000007667 _____ C:\Users\a1a2\Downloads\24012018174525.pdf
      2018-01-24 16:45 - 2018-01-24 16:45 - 000000850 _____ C:\Users\a1a2\AppData\Local\single.php
      2018-01-24 10:18 - 2018-01-24 10:18 - 005008723 _____ C:\Users\a1a2\Downloads\10.Produccion - converted with Clipchamp.mp4
      2018-01-22 17:08 - 2018-01-22 17:08 - 000476236 _____ C:\Users\a1a2\Downloads\SOCIAL MEDIA OÍR VITAL FACEBOOK Y TWITTER oct%2Fdic 2017.pdf
      2018-01-22 12:57 - 2018-01-22 12:57 - 000902991 _____ C:\Users\a1a2\Downloads\wp-user-frontend-pro.2.6.0.zip
      2018-01-19 17:11 - 2018-01-19 17:11 - 044854057 _____ C:\Users\a1a2\Downloads\themeforest-15208793-service-finder-service-and-business-listing-wordpress-theme-3.2.zip
      2018-01-19 15:58 - 2018-01-19 15:58 - 000013928 _____ C:\Users\a1a2\Downloads\redux_options_service_finder_options_backup_19-01-2018.json
      2018-01-18 11:41 - 2014-12-03 03:01 - 001490656 _____ (Microsoft Corporation) C:\WINDOWS\system32\WdfCoInstaller01007.dll
      2018-01-18 11:41 - 2014-12-03 03:01 - 000708168 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinUSBCoInstaller.dll
      2018-01-18 11:41 - 2014-12-03 03:01 - 000206104 _____ (DEVGURU Co., LTD.(데브구루 | 데브구루에 오ì‹*것을 환영합니다.)) C:\WINDOWS\system32\Drivers\ssudmdm.sys
      2018-01-18 11:41 - 2014-12-03 03:01 - 000110488 _____ (DEVGURU Co., LTD.(데브구루 | 데브구루에 오ì‹*것을 환영합니다.)) C:\WINDOWS\system32\Drivers\ssudbus.sys
      2018-01-18 11:40 - 2018-01-18 11:40 - 000000000 ____D C:\ProgramData\Samsung
      2018-01-18 11:40 - 2018-01-18 11:40 - 000000000 ____D C:\Program Files\SAMSUNG
      2018-01-18 11:39 - 2018-01-18 11:39 - 016044077 _____ C:\Users\a1a2\Downloads\SAMSUNG_USB_Driver_for_Mobile_Phones.zip
      2018-01-18 11:38 - 2018-01-18 11:38 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_WinUSB_01007.Wdf
      2018-01-18 11:01 - 2018-01-18 11:01 - 000000000 ____D C:\Users\a1a2\AppData\Local\Android
      2018-01-18 10:59 - 2018-01-18 10:59 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\JetBrains
      2018-01-18 10:58 - 2018-01-18 10:59 - 000000000 ____D C:\Users\a1a2\.AndroidStudio2.3
      2018-01-18 10:58 - 2018-01-18 10:58 - 000000000 ____D C:\Users\a1a2\.android
      2018-01-18 10:58 - 2018-01-18 10:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Android Studio
      2018-01-18 10:54 - 2018-01-18 10:54 - 000000000 ____D C:\Program Files\Android
      2018-01-18 10:02 - 2018-01-18 10:02 - 000001266 _____ C:\Users\Public\Desktop\Mozilla Thunderbird.lnk
      2018-01-18 09:50 - 2018-01-18 09:51 - 040191288 _____ (Mozilla) C:\Users\a1a2\Downloads\Thunderbird Setup 52.5.2.exe
      2018-01-17 23:06 - 2018-01-17 23:06 - 000004642 _____ C:\Users\a1a2\Downloads\17012018230618.pdf
      2018-01-17 23:05 - 2018-01-17 23:05 - 000113950 _____ C:\Users\a1a2\Downloads\17012018230435.pdf
      2018-01-17 23:05 - 2018-01-17 23:05 - 000113932 _____ C:\Users\a1a2\Downloads\17012018230456.pdf
      2018-01-17 23:04 - 2018-01-17 23:07 - 000000000 ____D C:\Users\a1a2\Desktop\Cafur
      2018-01-17 23:03 - 2018-01-17 23:03 - 000113943 _____ C:\Users\a1a2\Downloads\17012018230309.pdf
      2018-01-17 18:58 - 2018-01-17 18:58 - 000173067 _____ C:\Users\a1a2\Downloads\zapfino (1).zip
      2018-01-17 18:58 - 2018-01-17 18:58 - 000169531 _____ C:\Users\a1a2\Downloads\zapfino.zip
      2018-01-17 18:52 - 2018-01-17 18:52 - 000274899 _____ C:\Users\a1a2\Downloads\Factura 140 - Modifiaciones Arianal 3.pdf
      2018-01-17 18:52 - 2018-01-17 18:52 - 000274899 _____ C:\Users\a1a2\Downloads\Factura 140 - Modifiaciones Arianal 3 (1).pdf
      2018-01-17 17:44 - 2018-01-17 17:44 - 000113966 _____ C:\Users\a1a2\Downloads\17012018174409.pdf
      2018-01-17 11:26 - 2018-01-17 11:26 - 001883782 _____ C:\Users\a1a2\Downloads\tuwebya_lagman.sql
      2018-01-16 11:22 - 2018-01-16 11:22 - 000424791 _____ C:\Users\a1a2\Downloads\Factura 139 - Web loveandclothes.pdf

      ==================== One Month Modified files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2018-02-15 09:47 - 2017-10-19 13:58 - 000000000 ____D C:\Program Files (x86)\SpeedFan
      2018-02-15 09:47 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
      2018-02-15 09:47 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
      2018-02-15 09:44 - 2017-12-01 10:20 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
      2018-02-14 21:36 - 2017-12-01 10:26 - 000004562 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
      2018-02-14 21:36 - 2017-04-28 10:07 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
      2018-02-14 21:27 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
      2018-02-14 21:25 - 2017-12-01 10:29 - 002645720 _____ C:\WINDOWS\system32\PerfStringBackup.INI
      2018-02-14 21:25 - 2017-09-30 15:41 - 001235930 _____ C:\WINDOWS\system32\perfh00A.dat
      2018-02-14 21:25 - 2017-09-30 15:41 - 000283236 _____ C:\WINDOWS\system32\perfc00A.dat
      2018-02-14 21:25 - 2017-04-24 14:46 - 000000000 ___RD C:\Users\a1a2\Google Drive
      2018-02-14 21:19 - 2017-12-01 10:28 - 000000000 ___RD C:\Users\a1a2\3D Objects
      2018-02-14 21:19 - 2017-12-01 10:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
      2018-02-14 21:19 - 2017-12-01 10:20 - 000391224 _____ C:\WINDOWS\system32\FNTCACHE.DAT
      2018-02-14 21:19 - 2017-06-26 12:26 - 000000000 ____D C:\ProgramData\VMware
      2018-02-14 21:19 - 2017-04-24 14:08 - 000000000 __SHD C:\Users\a1a2\IntelGraphicsProfiles
      2018-02-14 21:19 - 2017-04-24 11:18 - 000000000 __RHD C:\Users\Public\AccountPictures
      2018-02-14 21:18 - 2017-09-29 09:45 - 000786432 _____ C:\WINDOWS\system32\config\BBI
      2018-02-14 21:14 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
      2018-02-14 21:14 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\oobe
      2018-02-14 21:14 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
      2018-02-14 21:14 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\ShellExperiences
      2018-02-14 21:14 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\bcastdvr
      2018-02-14 18:25 - 2017-04-24 14:41 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\TeamViewer
      2018-02-14 16:27 - 2017-12-01 10:22 - 000000000 ____D C:\Users\a1a2\AppData\Local\Packages
      2018-02-14 15:55 - 2017-04-26 16:58 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\FileZilla
      2018-02-14 12:06 - 2017-04-30 15:45 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\BitComet
      2018-02-14 11:58 - 2017-09-25 15:57 - 000000000 ____D C:\Program Files (x86)\Intel Driver and Support Assistant
      2018-02-14 10:57 - 2017-04-24 14:10 - 000000000 ____D C:\WINDOWS\system32\MRT
      2018-02-14 10:54 - 2017-10-11 09:58 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
      2018-02-14 10:54 - 2017-04-24 14:10 - 130067560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
      2018-02-14 10:51 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
      2018-02-14 09:37 - 2017-04-24 14:02 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2018-02-13 16:48 - 2017-05-24 14:40 - 000000000 ____D C:\Users\a1a2\.ScreamingFrogSEOSpider
      2018-02-13 09:32 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
      2018-02-12 18:49 - 2017-04-28 11:48 - 000000000 ____D C:\Users\a1a2\Desktop\temp
      2018-02-12 11:16 - 2017-04-24 14:41 - 000000000 ____D C:\Program Files (x86)\TeamViewer
      2018-02-12 11:16 - 2017-04-24 12:04 - 000000000 ____D C:\Users\a1a2\AppData\Local\Comms
      2018-02-12 10:00 - 2017-06-26 12:27 - 000000000 ____D C:\Users\a1a2\AppData\Local\VMware
      2018-02-12 09:44 - 2017-05-02 18:38 - 000000000 ____D C:\Users\a1a2\AppData\LocalLow\Mozilla
      2018-02-12 09:38 - 2017-04-24 14:26 - 000000000 ____D C:\Program Files (x86)\Steam
      2018-02-12 09:35 - 2017-08-14 10:24 - 000000000 ____D C:\Users\a1a2\AppData\Local\PokerStars.ES
      2018-02-12 09:35 - 2017-08-14 10:24 - 000000000 ____D C:\Program Files (x86)\PokerStars.ES
      2018-02-12 09:35 - 2017-06-26 12:27 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\VMware
      2018-02-11 03:36 - 2017-09-18 09:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
      2018-02-11 00:22 - 2017-05-22 11:23 - 000000000 ____D C:\Program Files (x86)\Oxygen Not Included
      2018-02-11 00:20 - 2017-05-01 10:10 - 000000000 ____D C:\Program Files\Subnautica Dev
      2018-02-10 23:37 - 2017-05-01 13:27 - 000000000 ____D C:\Users\a1a2\AppData\Local\LogMeIn Hamachi
      2018-02-10 23:34 - 2017-11-21 12:24 - 000000000 ___DC C:\WINDOWS\Panther
      2018-02-10 23:34 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
      2018-02-10 23:34 - 2017-04-25 22:45 - 000000000 ____D C:\Users\a1a2\AppData\Local\CrashDumps
      2018-02-10 23:31 - 2017-09-26 11:24 - 000000000 ____D C:\AdwCleaner
      2018-02-10 23:09 - 2018-01-10 20:13 - 000000000 ____D C:\Program Files (x86)\Aeon wallet GUI
      2018-02-10 23:00 - 2017-07-03 11:16 - 000000000 ____D C:\Program Files\CCleaner
      2018-02-09 12:03 - 2017-04-26 16:58 - 000000000 ____D C:\Users\a1a2\AppData\Local\FileZilla
      2018-02-09 11:14 - 2017-10-16 12:26 - 000001507 _____ C:\Users\a1a2\Desktop\Netpeak Launcher.lnk
      2018-02-09 11:14 - 2017-10-16 12:26 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Netpeak Software
      2018-02-09 11:05 - 2017-06-26 12:26 - 002425436 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
      2018-02-07 20:06 - 2017-05-23 16:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
      2018-02-07 20:06 - 2017-05-23 16:29 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
      2018-02-07 20:06 - 2017-05-02 18:37 - 000000000 ____D C:\Program Files\Mozilla Firefox
      2018-02-06 12:36 - 2017-05-25 13:09 - 000001114 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
      2018-02-06 12:36 - 2017-05-25 13:09 - 000000000 ____D C:\Program Files\paint.net
      2018-02-06 12:04 - 2017-04-28 16:22 - 000000000 ____D C:\Users\a1a2\Desktop\Procesadas
      2018-02-06 03:49 - 2017-09-29 14:49 - 000835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
      2018-02-06 03:49 - 2017-09-29 14:49 - 000177648 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
      2018-02-05 11:01 - 2017-05-02 18:37 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
      2018-02-03 12:33 - 2017-09-27 15:59 - 000000000 ____D C:\Users\a1a2\AppData\Local\GoToMeeting
      2018-02-02 11:49 - 2018-01-08 10:01 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\MangoApps
      2018-02-02 11:49 - 2017-07-13 10:10 - 000000000 ____D C:\ProgramData\Package Cache
      2018-01-30 12:18 - 2017-08-28 18:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RescueTime
      2018-01-30 12:18 - 2017-08-28 18:23 - 000000000 ____D C:\Program Files (x86)\RescueTime
      2018-01-26 13:05 - 2017-12-18 12:12 - 000000000 ____D C:\Webs descargadas
      2018-01-26 11:55 - 2017-04-24 11:18 - 000000000 ____D C:\Users\a1a2\AppData\Local\VirtualStore
      2018-01-26 11:27 - 2017-12-01 10:26 - 000003374 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2221359099-2426054925-774135096-1001
      2018-01-26 11:27 - 2017-04-24 11:20 - 000002392 _____ C:\Users\a1a2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
      2018-01-26 11:27 - 2017-04-24 11:20 - 000000000 ___RD C:\Users\a1a2\OneDrive
      2018-01-24 18:28 - 2017-04-24 14:01 - 000548000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
      2018-01-24 10:23 - 2017-07-23 17:36 - 000000000 ____D C:\Users\a1a2\AppData\Roaming\vlc
      2018-01-23 17:55 - 2017-12-01 10:26 - 000003966 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1495474163
      2018-01-23 17:55 - 2017-06-29 15:12 - 000001078 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navegador Opera.lnk
      2018-01-23 17:55 - 2017-05-22 18:29 - 000000000 ____D C:\Program Files\Opera
      2018-01-20 11:16 - 2017-07-27 12:34 - 000000000 ____D C:\Users\a1a2\AppData\Local\TeamViewer
      2018-01-18 11:49 - 2018-01-08 10:01 - 000003652 _____ C:\WINDOWS\System32\Tasks\TinyTakeUpgrade
      2018-01-18 11:34 - 2017-09-27 15:59 - 000000656 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-2221359099-2426054925-774135096-1001.job
      2018-01-18 11:34 - 2017-09-27 15:59 - 000000560 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-2221359099-2426054925-774135096-1001.job
      2018-01-18 10:58 - 2017-12-01 10:21 - 000000000 ____D C:\Users\a1a2
      2018-01-18 10:02 - 2017-05-23 16:29 - 000001278 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird.lnk
      2018-01-18 09:28 - 2017-12-01 10:26 - 000003822 _____ C:\WINDOWS\System32\Tasks\G2MUploadTask-S-1-5-21-2221359099-2426054925-774135096-1001
      2018-01-18 09:28 - 2017-12-01 10:26 - 000003726 _____ C:\WINDOWS\System32\Tasks\G2MUpdateTask-S-1-5-21-2221359099-2426054925-774135096-1001

      ==================== Files in the root of some directories =======

      2017-05-01 09:52 - 2017-05-01 09:52 - 000000045 _____ () C:\Users\a1a2\AppData\Roaming\WB.CFG
      2017-07-17 19:01 - 2017-08-08 14:04 - 000017862 _____ () C:\Users\a1a2\AppData\Roaming\WinSCP.ini
      2017-07-17 19:00 - 2017-08-08 14:04 - 000000600 _____ () C:\Users\a1a2\AppData\Roaming\winscp.rnd
      2017-05-04 14:04 - 2017-05-04 14:04 - 000000020 _____ () C:\Users\a1a2\AppData\Local\.bash_logout
      2017-09-19 11:27 - 2017-09-19 11:27 - 000002759 _____ () C:\Users\a1a2\AppData\Local\aalb_activator.php
      2017-08-01 18:42 - 2017-08-01 18:42 - 000001262 _____ () C:\Users\a1a2\AppData\Local\data.xml
      2017-10-18 19:33 - 2017-10-18 19:33 - 000489254 _____ () C:\Users\a1a2\AppData\Local\elpatineteelectrico.net-Oct-2017.gz
      2017-09-18 09:56 - 2017-09-18 09:56 - 000016698 _____ () C:\Users\a1a2\AppData\Local\error_log
      2017-06-20 12:39 - 2017-06-20 12:39 - 000015323 _____ () C:\Users\a1a2\AppData\Local\framework.php
      2017-07-25 17:06 - 2017-07-25 17:06 - 000001049 _____ () C:\Users\a1a2\AppData\Local\index.html
      2017-09-20 10:20 - 2017-09-20 10:20 - 000000418 _____ () C:\Users\a1a2\AppData\Local\index.php
      2017-08-30 13:54 - 2017-08-30 13:54 - 000925875 _____ () C:\Users\a1a2\AppData\Local\logo02.png
      2017-08-29 11:24 - 2017-08-29 11:24 - 000297812 _____ () C:\Users\a1a2\AppData\Local\MainLogo.png
      2017-10-25 23:00 - 2017-10-25 23:00 - 000003946 _____ () C:\Users\a1a2\AppData\Local\NOTICE.txt
      2017-05-23 16:00 - 2017-05-23 16:00 - 000027976 _____ () C:\Users\a1a2\AppData\Local\php2t0l2U
      2017-05-18 13:05 - 2017-05-18 13:05 - 000008993 _____ () C:\Users\a1a2\AppData\Local\readme.txt
      2017-08-08 15:51 - 2017-08-08 15:51 - 000001243 _____ () C:\Users\a1a2\AppData\Local\recently-used.xbel
      2018-01-24 16:45 - 2018-01-24 16:45 - 000000850 _____ () C:\Users\a1a2\AppData\Local\single.php
      2017-07-31 09:30 - 2017-07-31 09:31 - 028222208 _____ () C:\Users\a1a2\AppData\Local\The_Special_Speciment_Media_Assets.zip
      2017-12-12 17:42 - 2017-12-12 17:42 - 000000001 _____ () C:\Users\a1a2\AppData\Local\visitas.txt
      2017-05-25 15:39 - 2017-05-25 15:39 - 000003144 _____ () C:\Users\a1a2\AppData\Local\wp-config.php
      2017-07-31 09:31 - 2017-07-31 09:31 - 000005353 _____ () C:\Users\a1a2\AppData\Local\_data.xml
      2017-08-30 19:46 - 2017-08-30 19:46 - 000000000 _____ () C:\Users\a1a2\AppData\Local\{F916BB8A-5804-47CB-B829-7A4A047AED65}

      Some files in TEMP:
      ====================
      2018-02-14 10:12 - 2018-02-14 10:12 - 001845056 _____ ( ) C:\Users\a1a2\AppData\Local\Temp\BitB587.tmp.exe
      2018-02-15 09:47 - 2018-02-15 09:47 - 000192512 _____ () C:\Users\a1a2\AppData\Local\Temp\sfamcc00001.dll
      2018-02-15 09:47 - 2018-02-15 09:47 - 000158720 _____ () C:\Users\a1a2\AppData\Local\Temp\sfareca00001.dll
      2018-02-12 09:35 - 2017-08-14 10:24 - 000390144 _____ (Rational Intellectual Holdings Ltd.) C:\Users\a1a2\AppData\Local\Temp\_unps.exe

      ==================== Bamital & volsnap ======================

      (There is no automatic fix for files that do not pass verification.)

      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\wininit.exe => File is digitally signed
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => File is digitally signed
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => File is digitally signed
      C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

      LastRegBack: 2017-12-01 10:20

      ==================== End of FRST.txt ============

    Página 1 de 2 12 ÚltimoÚltimo