• Registrarse
  • Iniciar sesión


  • Página 1 de 5 12345 ÚltimoÚltimo
    Resultados 1 al 10 de 46

    Acer Aspire 7745G lentísimo.(Solucionado)

    Buenos días, a ver si alguien me puede echar una mano. Mi portátil Acer Aspie 7745G va desesperadamente lento, tanto al arrancar como al abrir programas, google chrome, libreoffice,... Paso habitualmente el malwarebytes y ccleaner ...

          
    1. #1
      Usuario Avatar de flordechimenea
      Registrado
      may 2012
      Ubicación
      Irun
      Mensajes
      49

      Acer Aspire 7745G lentísimo.(Solucionado)

      Buenos días, a ver si alguien me puede echar una mano.

      Mi portátil Acer Aspie 7745G va desesperadamente lento, tanto al arrancar como al abrir programas, google chrome, libreoffice,...

      Paso habitualmente el malwarebytes y ccleaner pero no noto mejoría.

      Gracias de antemano.

    2. #2
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Via Lactea.
      Mensajes
      23.248

      Re: Acer Aspire 7745G lentísimo

      Buenas flordechimenea.

      Para revisar tu máquina, sigue estos pasos, en el orden indicado y leyendo todo lo explicado.

      Paso 1.- Desactiva temporalmente el Antivirus >> Cómo deshabilitar temporalmente su Antivirus, mientras realizamos TODOS los pasos.

      Vamos a descargar en TU ESCRITORIO(y NO en otro lugar ) todas las herramientas que vamos a utilizar en este procedimiento (pero no las ejecutes todavía) :


      Una vez descargadas, desconectas tu equipo de Internet(apaga el router) << Muy Importante, y Cierras también cualquier otro programa que tengas abierto.

      Paso 2.- Ejecutas las herramientas de una en una y en el orden indicado :

      Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas "Ejecutar como Administrador" para Todos los programas.
      CCleaner.-
      • Instalas y Ejecutas CCleaner siguiendo los pasos indicados en el manual.
      • Úsalo primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que te muestre como obsoletos.
      • Después usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

      Malwarebytes.-
      • Instalas y Ejecutas MBAM siguiendo los pasos indicados en el manual.
      • Realiza un Análisis Completo.
      • Seleccionando "TODOS a Cuarentena" para enviarlo a la cuarentena y Reinicias el sistema.
      • En el apartado del manual "Historial" encontrarás el informe del MBAM, que debes copiar y pegar en tu próxima respuesta, para analizarlo.

      AdwCleaner.-
      • Ejecuta Adwcleaner.exe.
      • Pulsamos en el botón Analizar ahora, y espera a que se realice el proceso, inmediatamente pulsa siempre sobre el botón Iniciar Reparación.
      • Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
      • El log/informe lo encontramos en la pestaña “Informes”, volviendo a abrir el programa si fuese necesario, para poder copiarlo y pegarlo en tu próxima respuesta.
      • El informe también se puede encontrar en "C:\AdwCleaner\Logs\AdwCleaner[C00].txt"

      Junkware Removal Tool.-
      • Ejecuta JRT.exe.
      • Y pulsar cualquier tecla para continuar, esperar pacientemente a que termine el proceso.
      • Si en algún momento te pide Reiniciar hazlo.
      • Al finalizar, un registro/informe (JRT.txt) se guardara en el escritorio y se abrirá automáticamente.
      • Copia y pega el contenido de JRT.txt en tu próxima respuesta.

      Farbar Recovery Scan Tool.-
      • Ejecuta FRST.exe.
      • En el mensaje de la ventana del Disclaimer, pulsamos Yes.
      • En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el análisis.
      • Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

      Paso 3.- Poner los informes en tu próxima respuesta de :

      • Malwarebytes, AdwCleaner, JRT, FRST + Addition.txt, y en ese orden.


      Debes copiarlos y pegarlos con todo su contenido y usaras varios mensajes si recibes un mensaje de error indicando que es muy largo.

      - Y nos cuentas como funciona tu equipo, en relación al problema planteado.

      Saludos, Javier.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    3. #3
      Usuario Avatar de flordechimenea
      Registrado
      may 2012
      Ubicación
      Irun
      Mensajes
      49

      Re: Acer Aspire 7745G lentísimo

      Hola Javier, gracias por la respuesta. Me voy a poner a ello. Pero tengo una pregunta, si tengo alguno de los programas ya en el ordenador, ¿lo desinstalo previamente?

      Otra cosa; cuando dices descargar en el escritorio, ¿puedo descargarlo a mi carpeta de descargar y luego moverlo al escritorio?

      Gracias

    4. #4
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Via Lactea.
      Mensajes
      23.248

      Re: Acer Aspire 7745G lentísimo

      Hola.

      No hace falta que desinstales, con descargarte el nuevo instalador y realizar la nueva instalación se actualizara automáticamente y los que NO llevan instalación(Adwcleaner, JRT, FRST o cualquier otro) con borrar el anterior y usar el ultimo descargado es suficiente.

      Saludos.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    5. #5
      Usuario Avatar de flordechimenea
      Registrado
      may 2012
      Ubicación
      Irun
      Mensajes
      49

      Re: Acer Aspire 7745G lentísimo

      Perdón, he editado el mensaje anterior sin darme cuenta de que ya me habías contestado.

      Había añadido esto:

      Otra cosa; cuando dices descargar en el escritorio, ¿puedo descargarlo a mi carpeta de descargar y luego moverlo al escritorio?

      Gracias

    6. #6
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Via Lactea.
      Mensajes
      23.248

      Re: Acer Aspire 7745G lentísimo

      Hola.

      Efectivamente, descargar se pueden descargar donde a uno le parezca bien, LO IMPORTANTE es TRASLADAR las herramientas al ESCRITORIO y EJECUTARLAS desde él para garantizar que se ejecutan correctamente.

      Nosotros indicamos el realizar la descarga YA directamente en el escritorio para NO complicar la vida a los usuarios con pasos extras, que YA suficientes "tochos" de explicación les damos.

      Saludos.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    7. #7
      Usuario Avatar de flordechimenea
      Registrado
      may 2012
      Ubicación
      Irun
      Mensajes
      49

      Re: Acer Aspire 7745G lentísimo

      Gracias, me pongo ya a ello.

    8. #8
      Moderador Gral.
      Avatar de @Javier_HF
      Registrado
      jun 2006
      Ubicación
      Via Lactea.
      Mensajes
      23.248

      Re: Acer Aspire 7745G lentísimo

      Perfecto...... en cuanto tengas TODOS los pasos realizados nos pones los informes , y dinos también cuantos años tiene tu equipo.
      Quien no lo intenta no lo consigue | ;-)

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    9. #9
      Usuario Avatar de flordechimenea
      Registrado
      may 2012
      Ubicación
      Irun
      Mensajes
      49
      Hola de nuevo. Pongo los informes:


      Malwarebytes
      www.malwarebytes.com

      -Detalles del registro-
      Fecha del análisis: 14/5/18
      Hora del análisis: 12:43
      Archivo de registro: 9b664d84-5763-11e8-b62c-c80aa97d4e32.json
      Administrador: Sí

      -Información del software-
      Versión: 3.5.1.2522
      Versión de los componentes: 1.0.365
      Versión del paquete de actualización: 1.0.5098
      Licencia: Prueba

      -Información del sistema-
      SO: Windows 10 (Build 16299.248)
      CPU: x64
      Sistema de archivos: NTFS
      Usuario: Casa-PC\Casa

      -Resumen del análisis-
      Tipo de análisis: Análisis de amenazas
      Análisis iniciado por:: Manual
      Resultado: Completado
      Objetos analizados: 373293
      Amenazas detectadas: 0
      (No hay elementos maliciosos detectados)
      Amenazas en cuarentena: 0
      (No hay elementos maliciosos detectados)
      Tiempo transcurrido: 27 min, 42 seg

      -Opciones de análisis-
      Memoria: Activado
      Inicio: Activado
      Sistema de archivos: Activado
      Archivo: Activado
      Rootkits: Desactivado
      Heurística: Activado
      PUP: Detectar
      PUM: Detectar

      -Detalles del análisis-
      Proceso: 0
      (No hay elementos maliciosos detectados)

      Módulo: 0
      (No hay elementos maliciosos detectados)

      Clave del registro: 0
      (No hay elementos maliciosos detectados)

      Valor del registro: 0
      (No hay elementos maliciosos detectados)

      Datos del registro: 0
      (No hay elementos maliciosos detectados)

      Secuencia de datos: 0
      (No hay elementos maliciosos detectados)

      Carpeta: 0
      (No hay elementos maliciosos detectados)

      Archivo: 0
      (No hay elementos maliciosos detectados)

      Sector físico: 0
      (No hay elementos maliciosos detectados)

      WMI: 0
      (No hay elementos maliciosos detectados)


      (end)

      # -------------------------------
      # Malwarebytes AdwCleaner 7.1.1.0
      # -------------------------------
      # Build: 04-27-2018
      # Database: 2018-04-24.1
      # Support: https://www.malwarebytes.com/support
      #
      # -------------------------------
      # Mode: Clean
      # -------------------------------
      # Start: 05-14-2018
      # Duration: 00:00:04
      # OS: Windows 10 Home
      # Cleaned: 17
      # Failed: 0


      ***** [ Services ] *****

      No malicious services cleaned.

      ***** [ Folders ] *****

      Deleted C:\ProgramData\IObit\Advanced SystemCare V8
      Deleted C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare V8
      Deleted C:\Users\Casa\AppData\Roaming\IObit\Advanced SystemCare V8
      Deleted C:\Program Files\DriverUpdate
      Deleted C:\Users\Public\Documents\Downloaded Installers
      Deleted C:\Program Files\SlimWare Utilities
      Deleted C:\Users\Casa\AppData\Local\slimware utilities inc

      ***** [ Files ] *****

      No malicious files cleaned.

      ***** [ DLL ] *****

      No malicious DLLs cleaned.

      ***** [ WMI ] *****

      No malicious WMI cleaned.

      ***** [ Shortcuts ] *****

      No malicious shortcuts cleaned.

      ***** [ Tasks ] *****

      No malicious tasks cleaned.

      ***** [ Registry ] *****

      Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
      Deleted HKLM\Software\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
      Deleted HKLM\Software\Wow6432Node\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
      Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
      Deleted HKLM\Software\Classes\Installer\UpgradeCodes\50D2BAFD096C90345A82B25A790BDF69
      Deleted HKCU\Software\SlimWare Utilities Inc
      Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc
      Deleted HKLM\Software\SlimWare Utilities Inc
      Deleted HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-3928675743-3556806615-4196771940-1000\Software\SweetIM
      Deleted HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Userinit

      ***** [ Chromium (and derivatives) ] *****

      No malicious Chromium entries cleaned.

      ***** [ Chromium URLs ] *****

      No malicious Chromium URLs cleaned.

      ***** [ Firefox (and derivatives) ] *****

      No malicious Firefox entries cleaned.

      ***** [ Firefox URLs ] *****

      No malicious Firefox URLs cleaned.


      *************************

      [+] Delete Tracing Keys
      [+] Reset Winsock

      *************************


      ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Junkware Removal Tool (JRT) by Malwarebytes
      Version: 8.1.4 (07.09.2017)
      Operating System: Windows 10 Home x64
      Ran by Casa (Administrator) on 14/05/2018 at 13:28:37,97
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




      File System: 7

      Failed to delete: C:\Program Files (x86)\hamster soft (Folder)
      Successfully deleted: C:\ProgramData\productdata (Folder)
      Successfully deleted: C:\Users\Casa\AppData\Roaming\alawarentertainment (Folder)
      Successfully deleted: C:\Users\Casa\AppData\Roaming\hamstersoft (Folder)
      Successfully deleted: C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\[email protected] (File)
      Successfully deleted: C:\WINDOWS\system32\Tasks\Driver Booster SkipUAC (Casa) (Task)
      Successfully deleted: C:\WINDOWS\wininit.ini (File)



      Registry: 1

      Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} (Registry Key)




      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
      Scan was completed on 14/05/2018 at 13:34:54,46
      End of JRT log
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    10. #10
      Usuario Avatar de flordechimenea
      Registrado
      may 2012
      Ubicación
      Irun
      Mensajes
      49

      Re: Acer Aspire 7745G lentísimo

      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.05.2018
      Ran by Casa (administrator) on CASA-PC (14-05-2018 13:37:18)
      Running from C:\Users\Casa\Desktop
      Loaded Profiles: Casa (Available Profiles: Casa)
      Platform: Windows 10 Home Version 1709 16299.248 (X64) Language: Español (España, internacional)
      Internet Explorer Version 11 (Default browser: Chrome)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: ***********************************************************************************************************

      ==================== Processes (Whitelisted) =================

      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

      (AMD) C:\Windows\System32\atiesrxx.exe
      (Microsoft Corporation) C:\Windows\System32\wlanext.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
      (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
      (Plays.tv, LLC) C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe
      (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe
      (pdfforge GbR) C:\Program Files (x86)\PDF Architect\ConversionService.exe
      (pdfforge GbR) C:\Program Files (x86)\PDF Architect\HelperService.exe
      (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe
      (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
      () C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
      (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
      (Solid Documents, LLC) C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe
      () C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
      (Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
      (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
      (Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
      (NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
      () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
      (Microsoft Corporation) C:\Windows\System32\Locator.exe
      (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
      (Microsoft Corporation) C:\Windows\System32\mqsvc.exe
      (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\MsMpEng.exe
      (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe
      (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe
      (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe
      () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1813.286.0_x64__kzf8qxf38zg5c\SkypeHost.exe
      (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
      (Intel Corporation) C:\Windows\System32\hkcmd.exe
      (Panda Security, S.L.) C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe
      (Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.12.17007.18011-0\NisSrv.exe
      (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      (Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

      ==================== Registry (Whitelisted) ===========================

      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

      HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
      HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-09-05] (Realtek Semiconductor)
      HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489920 2017-09-05] (Realtek Semiconductor)
      HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [496160 2010-03-10] (Acer Incorporated)
      HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4866760 2015-11-29] (Advanced Micro Devices, Inc.)
      HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation)
      HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1300560 2010-03-03] (Dritek System Inc.)
      HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3642688 2018-04-23] (Dropbox, Inc.)
      HKLM-x32\...\Run: [PlaysTV] => C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe [71440 2016-03-25] (Plays.tv, LLC)
      HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1314432 2016-06-09] (CANON INC.)
      HKLM-x32\...\Run: [Aimersoft Helper Compact.exe] => C:\Program Files (x86)\Common Files\Aimersoft\Aimersoft Helper Compact\ASHelper.exe [2138272 2016-10-08] (AimerSoft)
      HKLM-x32\...\Run: [S6000Mnt] => C:\WINDOWS\SysWOW64\Rundll32.exe S6000Rmv.dll,WinMainRmv /StartStillMnt
      HKLM-x32\...\Run: [PSUAMain] => C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAMain.exe [151224 2017-11-23] (Panda Security, S.L.)
      HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [588704 2018-03-28] (Oracle Corporation)
      Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
      HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\...\Run: [HP Deskjet 3050 J610 series (NET)] => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett-Packard Co.)
      HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18334528 2018-04-12] (Piriform Ltd)
      HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [46214128 2018-04-12] ()
      HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\...\Policies\Explorer: [NolowDiskSpaceChecks] 1
      GroupPolicy: Restriction <==== ATTENTION
      GroupPolicyScripts: Restriction <==== ATTENTION
      GroupPolicyScripts-x32: Restriction <==== ATTENTION
      CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION

      ==================== Internet (Whitelisted) ====================

      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

      ProxyServer: [S-1-5-21-3928675743-3556806615-4196771940-1000] => 83.231.34.133:80
      Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
      Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
      Tcpip\..\Interfaces\{089add93-581b-468c-bac6-c304611b31a7}: [DhcpNameServer] 192.168.1.1
      Tcpip\..\Interfaces\{dcf34afd-7835-43db-833b-ffd87f519a87}: [DhcpNameServer] 192.168.1.1

      Internet Explorer:
      ==================
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Google
      HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
      HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google
      HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.es/?gws_rd=ssl#cns=0&gws_rd=ssl&spf=78
      SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
      BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
      BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (CANON INC.)
      BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\ssv.dll [2018-04-25] (Oracle Corporation)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\jp2ssv.dll [2018-04-25] (Oracle Corporation)
      Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
      Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)
      Toolbar: HKU\S-1-5-21-3928675743-3556806615-4196771940-1000 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (CANON INC.)

      FireFox:
      ========
      FF ProfilePath: C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027 [2018-05-14]
      FF Homepage: Mozilla\Firefox\Profiles\x1t977be.default-1436423621027 -> hxxps://www.google.es/
      FF Extension: (Adblock Plus Pop-up Addon) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\[email protected] [2016-04-27] [Legacy]
      FF Extension: (YouTube mp3) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\[email protected] [2016-04-27] [Legacy]
      FF Extension: (S3.Google Translator) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\[email protected] [2017-05-07] [Legacy]
      FF Extension: (SQLite Manager) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\[email protected]*************.xpi [2016-05-07] [Legacy]
      FF Extension: (Google Translator for Firefox) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\[email protected] [2017-05-06] [Legacy]
      FF Extension: (Administrador de sesiones) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi [2017-05-06] [Legacy]
      FF Extension: (Adblock Plus) - C:\Users\Casa\AppData\Roaming\Mozilla\Firefox\Profiles\x1t977be.default-1436423621027\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-11-23] [Legacy]
      FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
      FF Extension: (No Name) - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2015-10-24] [not signed]
      FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-10] ()
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-10] ()
      FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2015-10-29] (CANON INC.)
      FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2017-12-01] (Foxit Corporation)
      FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2017-12-01] (Foxit Corporation)
      FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2017-12-01] (Foxit Corporation)
      FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll [2017-12-01] (Foxit Corporation)
      FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
      FF Plugin-x32: @java.com/DTPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\dtplugin\npDeployJava1.dll [2018-04-25] (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=11.171.2 -> C:\Program Files (x86)\Java\jre1.8.0_171\bin\plugin2\npjp2.dll [2018-04-25] (Oracle Corporation)
      FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8081.0709 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2009-07-10] (Microsoft Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-14] (Google Inc.)
      FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN)
      FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-02-12] (Adobe Systems Inc.)
      FF Plugin HKU\S-1-5-21-3928675743-3556806615-4196771940-1000: @rocketlife.com/RocketLife Secure Plug-In Layer;version=1.0.5 -> C:\Users\Casa\AppData\Roaming\Visan\plugins\npRLSecurePluginLayer.dll [2011-05-13] (RocketLife, LLP)
      FF Plugin HKU\S-1-5-21-3928675743-3556806615-4196771940-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Casa\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-07] (Unity Technologies ApS)
      FF Plugin ProgramFiles/Appdata: C:\Users\Casa\AppData\Roaming\mozilla\plugins\npatgpc.dll [2018-02-02] (Cisco WebEx LLC)

      Chrome:
      =======
      CHR DefaultProfile: Default
      CHR HomePage: Default -> hxxps://www.google.es/
      CHR StartupUrls: Default -> "hxxps://www.google.es/","hxxps://www.google.es/"
      CHR Profile: C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default [2018-05-14]
      CHR Extension: (Traductor de Google) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-10-23]
      CHR Extension: (Presentaciones) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-23]
      CHR Extension: (Documentos) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-23]
      CHR Extension: (Google Drive) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-02]
      CHR Extension: (YouTube) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-02]
      CHR Extension: (Adblock Plus) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2018-04-19]
      CHR Extension: (Session Buddy) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2018-05-12]
      CHR Extension: (Hojas de cálculo) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-23]
      CHR Extension: (Documentos de Google sin conexión) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-02]
      CHR Extension: (Cisco WebEx Extension) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2018-04-08]
      CHR Extension: (SaveMoney.es) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\leeehaiahjbjphomahecfnfneehcdalp [2018-01-25]
      CHR Extension: (Kindle Cloud Reader) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\lolflkiacpkijeinkicebbhjcjjdhchf [2017-02-01]
      CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-08]
      CHR Extension: (Gmail) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-02]
      CHR Extension: (Chrome Media Router) - C:\Users\Casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-05-02]
      CHR HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [dhdgffkkebhmkfjojejmpbldmpobfkfo] - hxxp://clients2.google.com/service/update2/crx
      CHR HKU\S-1-5-21-3928675743-3556806615-4196771940-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
      CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

      ==================== Services (Whitelisted) ====================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
      S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
      R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [51024 2018-04-23] (Dropbox, Inc.)
      S3 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [820768 2010-03-10] (Acer Incorporated)
      R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [190784 2018-03-13] () [File not signed]
      R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [387144 2016-02-04] ()
      R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-09-30] (Intel Corporation) [File not signed]
      S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6541008 2018-05-09] (Malwarebytes)
      S4 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-02-01] (Egis Technology Inc.)
      R2 NanoServiceMain; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSANHost.exe [109024 2017-11-08] (Panda Security, S.L.)
      R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [250368 2010-03-09] (NewTech Infosystems, Inc.) [File not signed]
      S3 Panda VPN Service; C:\Program Files (x86)\Panda Security\Panda Security Protection\Hydra.Sdk.Windows.Service.exe [320848 2017-11-20] ()
      R2 PandaAgent; C:\Program Files (x86)\Panda Security\Panda Devices Agent\AgentSvc.exe [86104 2016-07-19] (Panda Security, S.L.)
      R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1324104 2013-01-09] (pdfforge GbR)
      R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [795208 2013-01-09] (pdfforge GbR)
      R2 PlaysService; C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe [32528 2016-03-25] (Plays.tv, LLC)
      R2 PSUAService; C:\Program Files (x86)\Panda Security\Panda Security Protection\PSUAService.exe [48784 2017-10-18] (Panda Security, S.L.)
      R2 RichVideo; C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe [244904 2010-02-03] () [File not signed]
      R2 SCPDFReadSpool; C:\Program Files (x86)\SolidDocuments\Solid Converter PDF\SCPDF\SolidConverterPDFServicex64.exe [209920 2011-10-04] (Solid Documents, LLC) [File not signed]
      R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-03] (DEVGURU Co., LTD.)
      R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [269400 2017-01-17] (Synaptics Incorporated)
      R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-09-30] (Intel Corporation) [File not signed]
      R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\NisSrv.exe [356168 2018-01-25] (Microsoft Corporation)
      R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MsMpEng.exe [105792 2018-01-25] (Microsoft Corporation)

      ===================== Drivers (Whitelisted) ======================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      R3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2017-11-16] (The OpenVPN Project)
      S3 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [40720 2015-07-28] (Advanced Micro Devices, Inc.)
      R0 amdkmpfd; C:\WINDOWS\System32\drivers\amdkmpfd.sys [73976 2015-06-04] (Advanced Micro Devices, Inc.)
      S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [110096 2016-04-18] (Advanced Micro Devices)
      S3 AtiHdmiService; C:\WINDOWS\System32\drivers\AtiHdmi.sys [116736 2010-01-28] (ATI Technologies, Inc.) [File not signed]
      S3 cecsvad; C:\WINDOWS\System32\drivers\cecvad.sys [23040 2011-12-08] () [File not signed]
      R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [152184 2018-04-26] (Malwarebytes)
      R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-09-05] (ELAN Microelectronic Corp.)
      S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2017-08-11] (Huawei Technologies Co., Ltd.)
      R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-09-05] (REALiX(tm))
      U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2018-03-13] (Huawei Technologies Co., Ltd.)
      R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (EZB Systems, Inc.)
      R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [190696 2018-05-14] (Malwarebytes)
      S3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [112864 2018-05-14] (Malwarebytes)
      S3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [44768 2018-05-14] (Malwarebytes)
      S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [253664 2018-05-14] (Malwarebytes)
      S3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [103648 2018-05-14] (Malwarebytes)
      R1 NNSALPC; C:\WINDOWS\system32\DRIVERS\NNSALPC.sys [108000 2017-11-06] (Panda Security, S.L.)
      R1 NNSHTTP; C:\WINDOWS\system32\DRIVERS\NNSHTTP.sys [211936 2017-11-06] (Panda Security, S.L.)
      R1 NNSHTTPS; C:\WINDOWS\system32\DRIVERS\NNSHTTPS.sys [121312 2017-11-06] (Panda Security, S.L.)
      R1 NNSIDS; C:\WINDOWS\system32\DRIVERS\NNSIDS.sys [126432 2017-11-06] (Panda Security, S.L.)
      R1 NNSNAHSL; C:\WINDOWS\system32\DRIVERS\NNSNAHSL.sys [99512 2017-09-26] (Panda Security, S.L.)
      R1 NNSPICC; C:\WINDOWS\system32\DRIVERS\NNSPICC.sys [118240 2017-11-06] (Panda Security, S.L.)
      R1 NNSPIHSW; C:\WINDOWS\system32\DRIVERS\NNSPIHSW.sys [91616 2017-11-06] (Panda Security, S.L.)
      R1 NNSPOP3; C:\WINDOWS\system32\DRIVERS\NNSPOP3.sys [135648 2017-11-06] (Panda Security, S.L.)
      R1 NNSPROT; C:\WINDOWS\system32\DRIVERS\NNSPROT.sys [336352 2017-11-06] (Panda Security, S.L.)
      R1 NNSPRV; C:\WINDOWS\system32\DRIVERS\NNSPRV.sys [249312 2017-11-06] (Panda Security, S.L.)
      R1 NNSSMTP; C:\WINDOWS\system32\DRIVERS\NNSSMTP.sys [123360 2017-11-06] (Panda Security, S.L.)
      R1 NNSSTRM; C:\WINDOWS\system32\DRIVERS\NNSSTRM.sys [281056 2017-11-06] (Panda Security, S.L.)
      R1 NNSTLSC; C:\WINDOWS\system32\DRIVERS\NNSTLSC.sys [125920 2017-11-06] (Panda Security, S.L.)
      R2 PSINAflt; C:\WINDOWS\system32\DRIVERS\PSINAflt.sys [191448 2017-11-09] (Panda Security, S.L.)
      R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [153992 2018-01-23] (Panda Security, S.L.)
      R1 PSINKNC; C:\WINDOWS\system32\DRIVERS\PSINKNC.sys [207248 2018-01-30] (Panda Security, S.L.)
      R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [146912 2017-10-17] (Panda Security, S.L.)
      R2 PSINProt; C:\WINDOWS\system32\DRIVERS\PSINProt.sys [159200 2017-10-17] (Panda Security, S.L.)
      R2 PSINReg; C:\WINDOWS\system32\DRIVERS\PSINReg.sys [129504 2017-10-17] (Panda Security, S.L.)
      U3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [72648 2017-05-22] (Panda Security, S.L.)
      S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
      S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
      S3 RtkBtFilter; C:\WINDOWS\System32\DRIVERS\RtkBtfilter.sys [585944 2014-12-31] (Realtek Semiconductor Corporation)
      R3 S6000KNT; C:\WINDOWS\System32\Drivers\S6000KNT.sys [190232 2015-09-05] (Windows (R) Win 7 DDK provider)
      S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33960 2017-05-07] (Synaptics Incorporated)
      R2 TurboB; C:\WINDOWS\System32\DRIVERS\TurboB.sys [13784 2009-11-02] ()
      S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [46072 2018-01-25] (Microsoft Corporation)
      R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [288848 2018-01-25] (Microsoft Corporation)
      R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2018-01-25] (Microsoft Corporation)
      U3 idsvc; no ImagePath

      ==================== NetSvcs (Whitelisted) ===================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


      ==================== One Month Created files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2018-05-14 13:37 - 2018-05-14 13:38 - 000025202 _____ C:\Users\Casa\Desktop\FRST.txt
      2018-05-14 13:36 - 2018-05-14 13:37 - 000000000 ____D C:\FRST
      2018-05-14 13:34 - 2018-05-14 13:34 - 000001221 _____ C:\Users\Casa\Desktop\JRT.txt
      2018-05-14 13:25 - 2018-05-14 13:25 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
      2018-05-14 12:40 - 2018-05-14 12:40 - 000190696 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
      2018-05-14 12:40 - 2018-05-14 12:40 - 000112864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
      2018-05-14 12:40 - 2018-05-14 12:40 - 000044768 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
      2018-05-14 12:39 - 2018-05-14 12:39 - 000253664 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
      2018-05-14 12:39 - 2018-05-14 12:39 - 000103648 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
      2018-05-14 12:39 - 2018-05-14 12:39 - 000001916 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
      2018-05-14 12:39 - 2018-05-14 12:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
      2018-05-14 12:37 - 2018-05-14 12:37 - 000001264 _____ C:\Users\Casa\Documents\cc_20180514_123707.reg
      2018-05-14 12:36 - 2018-05-14 12:36 - 000030222 _____ C:\Users\Casa\Documents\cc_20180514_123633.reg
      2018-05-14 12:28 - 2018-05-14 12:28 - 000000867 _____ C:\Users\Public\Desktop\CCleaner.lnk
      2018-05-14 12:20 - 2018-05-14 12:20 - 002404864 _____ (Farbar) C:\Users\Casa\Desktop\FRST64.exe
      2018-05-14 12:19 - 2018-05-14 12:19 - 001790024 _____ (Malwarebytes) C:\Users\Casa\Desktop\JRT.exe
      2018-05-14 12:18 - 2018-05-14 12:21 - 075127256 _____ (Malwarebytes ) C:\Users\Casa\Desktop\mb3-setup-consumer-3.5.1.2522-1.0.365-1.0.5088.exe
      2018-05-14 12:18 - 2018-05-14 12:19 - 007271632 _____ (Malwarebytes) C:\Users\Casa\Downloads\AdwCleaner (1).exe
      2018-05-14 12:18 - 2018-05-14 12:18 - 015813864 _____ (Piriform Ltd) C:\Users\Casa\Desktop\ccsetup542 (1).exe
      2018-05-14 11:38 - 2018-05-14 11:39 - 007271632 _____ (Malwarebytes) C:\Users\Casa\Desktop\AdwCleaner.exe
      2018-05-13 10:06 - 2018-05-13 10:06 - 003435475 _____ C:\Users\Casa\Downloads\Dual Space Multiple Accounts Parallel APP_v1.3.3_apkpure.com.apk
      2018-05-13 09:30 - 2018-05-13 09:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HiSuite
      2018-05-13 09:29 - 2018-03-13 09:51 - 000287232 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbnet.sys
      2018-05-13 09:29 - 2018-03-13 09:51 - 000127360 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_cdcacm.sys
      2018-05-13 09:28 - 2018-05-13 09:30 - 000000000 ____D C:\Program Files (x86)\HiSuite
      2018-05-13 09:28 - 2018-03-13 09:51 - 000226560 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_quusbmdm.sys
      2018-05-13 09:28 - 2018-03-13 09:51 - 000116864 _____ (Huawei Technologies Co., Ltd.) C:\WINDOWS\system32\Drivers\hw_usbdev.sys
      2018-05-13 09:18 - 2018-05-13 09:18 - 000000000 ____D C:\Users\Casa\Desktop\parallel_intl
      2018-05-12 09:43 - 2018-05-12 10:44 - 000000000 ____D C:\Users\Casa\Desktop\libros andoni
      2018-05-11 07:59 - 2018-05-11 07:59 - 000042662 _____ C:\Users\Casa\Desktop\lab.pdf
      2018-05-10 12:55 - 2018-05-10 12:56 - 044688732 _____ C:\Users\Casa\Downloads\optimizilla (2).zip
      2018-05-10 12:41 - 2018-05-10 12:41 - 043071360 _____ C:\Users\Casa\Downloads\optimizilla (1).zip
      2018-05-10 12:21 - 2018-05-10 12:21 - 033943288 _____ C:\Users\Casa\Downloads\optimizilla.zip
      2018-05-09 12:22 - 2018-05-09 12:22 - 000000000 ____D C:\Program Files (x86)\Seagate
      2018-05-09 12:13 - 2018-05-10 07:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Seagate
      2018-05-09 12:11 - 2018-05-09 12:11 - 026043408 _____ (Seagate Technology LLC) C:\Users\Casa\Downloads\SeaToolsforWindowsSetup.exe
      2018-05-09 09:57 - 2018-05-09 09:57 - 013506656 _____ (Alzex software ) C:\Users\Casa\Downloads\PersonalFinancesPro_setup (2).exe
      2018-05-08 19:29 - 2018-05-08 19:29 - 000060540 _____ C:\Users\Casa\Downloads\la-vida-es-bella-microhd-720-px.torrent
      2018-05-08 18:49 - 2018-05-08 23:23 - 000000000 ____D C:\Users\Casa\AppData\LocalLow\BitTorrent
      2018-05-08 18:48 - 2018-05-08 18:49 - 000028359 _____ C:\Users\Casa\Downloads\La-vida-es-bella-(ARCHIVO).torrent
      2018-05-07 16:07 - 2018-05-07 16:07 - 000124770 _____ C:\Users\Casa\Downloads\doc-1525702033537.pdf
      2018-05-06 13:38 - 2018-05-06 13:38 - 000000000 ____D C:\Users\Casa\AppData\Local\FUJIFILM MEDICAL
      2018-05-06 10:41 - 2018-05-06 10:41 - 000060479 _____ C:\Users\Casa\Desktop\CarlosagendaetxaideB.ods
      2018-05-06 09:16 - 2018-05-06 10:41 - 000060479 _____ C:\Users\Casa\Desktop\Carlosagendaetxaide.ods
      2018-05-05 19:51 - 2018-05-05 19:51 - 000034502 _____ C:\Users\Casa\Downloads\[email protected]
      2018-05-05 19:35 - 2018-05-05 19:35 - 000025073 _____ C:\Users\Casa\Downloads\work-schedule-with-icons.xlsx
      2018-05-05 19:23 - 2018-05-05 19:29 - 000032654 _____ C:\Users\Casa\Downloads\agendacarlos1.ods
      2018-05-05 18:27 - 2018-05-05 18:27 - 000036590 _____ C:\Users\Casa\Downloads\appointment-schedule.xlsx
      2018-05-05 14:08 - 2018-05-05 18:24 - 000061035 _____ C:\Users\Casa\Desktop\agenda semanal carlos.ods
      2018-05-05 13:35 - 2018-05-05 13:35 - 000156242 _____ C:\Users\Casa\Downloads\weekly-calendar-2018-landscape-time-management-30-minutes.xlsx
      2018-05-05 13:33 - 2018-05-05 13:33 - 000102237 _____ C:\Users\Casa\Downloads\weekly-calendar-2018-landscape-time-management.xlsx
      2018-05-05 13:28 - 2018-05-05 13:28 - 000139625 _____ C:\Users\Casa\Downloads\semanal.xlsx
      2018-05-05 13:21 - 2018-05-05 13:21 - 000087124 _____ C:\Users\Casa\Downloads\tf03107663.xltx
      2018-05-05 13:13 - 2018-05-05 13:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 6.0
      2018-05-05 13:12 - 2018-05-05 13:13 - 000000000 ____D C:\Program Files\LibreOffice
      2018-05-05 10:23 - 2018-05-05 10:23 - 000002023 _____ C:\Users\Casa\Downloads\LibreOffice_6.0.3_Win_x64_helppack_es.msi.torrent
      2018-05-05 10:22 - 2018-05-05 10:28 - 273985536 _____ C:\Users\Casa\Downloads\LibreOffice_6.0.3_Win_x64.msi
      2018-05-05 10:07 - 2018-05-05 10:07 - 000207709 _____ C:\Users\Casa\Downloads\Calendar LoCalc.ots
      2018-05-05 09:57 - 2018-05-05 10:16 - 000000000 ____D C:\Program Files (x86)\WinCalendar V4
      2018-05-05 09:56 - 2018-05-05 09:57 - 008996776 _____ C:\Users\Casa\Downloads\SetupWinCalendarV4.exe
      2018-05-05 09:41 - 2018-05-05 09:41 - 000022013 _____ C:\Users\Casa\Downloads\weekly-schedule.ods
      2018-05-05 09:34 - 2018-05-05 09:34 - 000077130 _____ C:\Users\Casa\Downloads\weekly-planner.xlsx
      2018-05-02 15:52 - 2018-05-02 15:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google
      2018-05-02 15:51 - 2018-05-02 15:51 - 001129816 _____ (Google Inc.) C:\Users\Casa\Downloads\installbackupandsync (1).exe
      2018-05-02 15:28 - 2018-05-02 15:28 - 000020644 _____ C:\Users\Casa\Downloads\borrador contrato carlos-felipe.odt
      2018-05-02 10:08 - 2018-05-14 12:32 - 000000000 ____D C:\Users\Casa\AppData\Roaming\XnView
      2018-05-02 10:07 - 2018-05-02 10:07 - 005323283 _____ (Gougelet Pierre-e ) C:\Users\Casa\Downloads\XnView-win-1.95.4.exe
      2018-05-02 09:14 - 2018-05-02 09:16 - 000000000 ____D C:\Users\Casa\Desktop\basefotos
      2018-05-02 09:13 - 2018-05-02 10:06 - 000000000 ____D C:\Users\Casa\.imgseek
      2018-05-02 09:13 - 2018-05-02 09:13 - 000000000 ____D C:\Users\Casa\.thumbnails
      2018-05-02 09:12 - 2018-05-02 10:07 - 000000000 ____D C:\Program Files (x86)\imgSeek
      2018-05-02 09:11 - 2018-05-02 09:11 - 005007054 _____ C:\Users\Casa\Downloads\imgSeek-0.8.5-win32.exe
      2018-05-01 18:14 - 2018-04-26 05:36 - 000152184 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
      2018-04-30 19:06 - 2018-04-30 19:06 - 000102780 _____ C:\Users\Casa\Downloads\sfr-facture-1.pdf
      2018-04-30 19:03 - 2018-04-30 19:03 - 000102954 _____ C:\Users\Casa\Downloads\sfr-facture-0 (1).pdf
      2018-04-30 10:42 - 2018-04-30 10:46 - 000000000 ____D C:\Users\Casa\Desktop\pruebaagendaex
      2018-04-30 10:25 - 2018-04-30 10:25 - 000001366 _____ C:\Users\Casa\Documents\cc_20180430_102503.reg
      2018-04-30 10:24 - 2018-04-30 10:24 - 000014228 _____ C:\Users\Casa\Documents\cc_20180430_102407.reg
      2018-04-30 10:24 - 2018-04-30 10:24 - 000002806 _____ C:\Users\Casa\Documents\cc_20180430_102439.reg
      2018-04-30 10:18 - 2018-04-30 10:18 - 015813864 _____ (Piriform Ltd) C:\Users\Casa\Downloads\ccsetup542.exe
      2018-04-29 19:53 - 2018-05-02 16:12 - 000000000 ___HD C:\Users\Casa\Documents\.tmp.drivedownload
      2018-04-29 19:31 - 2018-04-29 19:31 - 001129816 _____ (Google Inc.) C:\Users\Casa\Downloads\installbackupandsync.exe
      2018-04-27 17:48 - 2018-04-27 17:48 - 000365468 _____ C:\Users\Casa\Downloads\INFORMACION PRECONTRACTUAL DV.pdf
      2018-04-27 17:40 - 2018-04-27 17:42 - 000000000 ___RD C:\Users\Casa\Desktop\CARLOS
      2018-04-27 17:35 - 2018-04-27 17:35 - 000018657 _____ C:\Users\Casa\Downloads\NUEVO CONTRATO DE ARRENDAMIENTO DE SERVICIOS 2018.odt
      2018-04-27 08:58 - 2018-04-27 08:58 - 001102131 _____ C:\Users\Casa\Documents\osteo.pdf
      2018-04-27 08:51 - 2018-04-27 08:51 - 001060411 _____ C:\Users\Casa\Documents\mdcoe.pdf
      2018-04-26 08:08 - 2018-04-26 08:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
      2018-04-24 08:18 - 2018-04-24 08:18 - 000000000 ____D C:\Program Files (x86)\FNMT-RCM
      2018-04-24 08:11 - 2018-04-24 08:11 - 000024163 _____ C:\Users\Casa\Downloads\CVCarlos.pdf
      2018-04-23 13:02 - 2018-04-23 13:02 - 000124529 _____ C:\Users\Casa\Downloads\CUENTA DE AHORRO.pdf
      2018-04-23 13:01 - 2018-04-23 13:01 - 000365468 _____ C:\Users\Casa\Downloads\INFORMACION PRECONTRACTUAL CUENTA A LA VISTA.pdf
      2018-04-23 12:15 - 2018-04-23 12:15 - 000051024 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
      2018-04-23 12:15 - 2018-04-23 12:15 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
      2018-04-23 12:15 - 2018-04-23 12:15 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
      2018-04-23 12:15 - 2018-04-23 12:15 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
      2018-04-21 19:15 - 2018-04-21 19:15 - 000786531 _____ C:\Users\Casa\Downloads\Scan 2018-04-21 18.44.53.pdf
      2018-04-21 08:22 - 2018-04-21 08:22 - 000001735 _____ C:\Users\Casa\Downloads\telcompte (2).csv
      2018-04-21 08:21 - 2018-04-21 08:21 - 000001735 _____ C:\Users\Casa\Downloads\telcompte (1).csv
      2018-04-21 08:18 - 2018-04-21 08:18 - 000001735 _____ C:\Users\Casa\Downloads\telcompte.csv
      2018-04-20 08:11 - 2018-04-20 08:11 - 000313718 _____ C:\Users\Casa\Documents\(movimientos)Banque en Ligne Kutxabank - Relevé d'opérations.pdf
      2018-04-20 08:10 - 2018-04-20 08:10 - 000100953 _____ C:\Users\Casa\Documents\(Hipoteca2)Banque en Ligne Kutxabank - Caractéristiques.pdf
      2018-04-20 08:09 - 2018-04-20 08:09 - 000182290 _____ C:\Users\Casa\Documents\(Hipoteca)Banque en Ligne Kutxabank - Tableau d'amortissement.pdf
      2018-04-19 12:45 - 2018-04-19 12:45 - 000002302 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Dome.lnk
      2018-04-19 12:45 - 2018-04-19 12:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Dome
      2018-04-18 09:53 - 2018-04-18 09:53 - 001041135 _____ C:\Users\Casa\Downloads\2018_04_180992000175335.pdf
      2018-04-16 18:12 - 2018-04-16 18:12 - 000000751 _____ C:\Users\Casa\Downloads\DisabledPackage.zip
      2018-04-15 09:31 - 2018-04-15 09:31 - 000000000 ____D C:\Users\Casa\AppData\Local\CrystalDiskMark
      2018-04-15 09:07 - 2018-04-15 09:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark6
      2018-04-15 09:07 - 2018-04-15 09:07 - 000000000 ____D C:\Program Files\CrystalDiskMark6
      2018-04-15 09:05 - 2018-04-15 09:05 - 002902288 _____ (Crystal Dew World ) C:\Users\Casa\Downloads\CrystalDiskMark6_0_0.exe
      2018-04-15 08:35 - 2018-04-15 08:36 - 000035873 _____ C:\Users\Casa\Downloads\FlashBench.zip

      ==================== One Month Modified files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2018-05-14 13:30 - 2018-01-19 21:39 - 000004210 _____ C:\WINDOWS\System32\Tasks\CCleaner Update
      2018-05-14 13:25 - 2018-01-19 21:39 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
      2018-05-14 13:24 - 2017-09-29 10:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI
      2018-05-14 13:23 - 2015-09-05 15:29 - 000000000 ____D C:\Users\Casa\AppData\Roaming\IObit
      2018-05-14 13:23 - 2015-09-05 15:29 - 000000000 ____D C:\ProgramData\IObit
      2018-05-14 13:23 - 2015-06-17 23:51 - 000000000 ____D C:\AdwCleaner
      2018-05-14 13:18 - 2018-01-19 21:02 - 000571272 _____ C:\WINDOWS\system32\FNTCACHE.DAT
      2018-05-14 13:18 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF
      2018-05-14 13:03 - 2018-01-19 21:02 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
      2018-05-14 12:32 - 2013-04-08 16:42 - 000000000 ____D C:\Users\Casa\AppData\Roaming\BitTorrent
      2018-05-14 12:17 - 2018-01-19 21:39 - 000004202 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{A2BCE974-A0A1-40F8-80E4-B3A2FAEAF3D3}
      2018-05-14 11:38 - 2016-09-25 09:32 - 000000000 ____D C:\Users\Casa\AppData\LocalLow\Mozilla
      2018-05-14 10:29 - 2017-04-19 17:00 - 000000000 ___RD C:\Users\Casa\Desktop\APARATOS
      2018-05-14 09:19 - 2012-09-11 09:58 - 000000000 ____D C:\Users\Casa\Documents\Personal Finances
      2018-05-13 11:57 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
      2018-05-13 11:56 - 2017-09-29 15:46 - 000000000 ___HD C:\Program Files\WindowsApps
      2018-05-13 11:56 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\AppReadiness
      2018-05-13 09:31 - 2016-09-19 09:52 - 000000000 ____D C:\Users\Casa\AppData\Local\Hisuite
      2018-05-10 15:12 - 2017-10-23 14:43 - 000000000 ____D C:\Users\Casa\Desktop\musi
      2018-05-10 11:36 - 2017-03-30 19:08 - 000000000 ____D C:\Users\Casa\Desktop\facturas2016
      2018-05-10 11:32 - 2017-04-02 15:34 - 000000000 ____D C:\ProgramData\CanonIJPLM
      2018-05-10 07:34 - 2018-01-19 21:39 - 000004608 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
      2018-05-10 07:34 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
      2018-05-10 07:34 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
      2018-05-10 07:33 - 2018-03-13 21:48 - 000004600 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player NPAPI Notifier
      2018-05-09 12:15 - 2015-11-15 15:05 - 000000000 ____D C:\ProgramData\Package Cache
      2018-05-09 09:58 - 2012-09-11 10:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Personal Finances Pro
      2018-05-09 09:58 - 2012-09-11 09:58 - 000000000 ____D C:\Program Files (x86)\Personal Finances Pro
      2018-05-02 15:52 - 2012-06-22 06:36 - 000000000 ____D C:\Users\Casa\AppData\Local\Google
      2018-05-02 15:52 - 2010-04-19 12:56 - 000000000 ____D C:\Program Files\Google
      2018-05-02 09:13 - 2018-01-19 21:15 - 000000000 ____D C:\Users\Casa
      2018-05-02 09:01 - 2016-12-02 15:03 - 000002303 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2018-05-01 12:31 - 2018-01-19 21:39 - 000003360 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3928675743-3556806615-4196771940-1000
      2018-05-01 12:31 - 2015-09-11 22:02 - 000002437 _____ C:\Users\Casa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
      2018-05-01 12:31 - 2015-09-11 22:02 - 000000000 ___RD C:\Users\Casa\OneDrive
      2018-04-30 10:21 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
      2018-04-29 21:05 - 2018-04-09 15:47 - 000000000 ____D C:\Users\Casa\AppData\Roaming\vlc
      2018-04-29 20:19 - 2012-07-20 19:10 - 000000000 ___RD C:\Users\Casa\Google Drive
      2018-04-27 12:36 - 2015-11-21 19:57 - 041825780 _____ C:\Users\Casa\Desktop\Backup Agenda MSD 12.5.bck
      2018-04-26 08:09 - 2015-10-01 17:44 - 000000000 ____D C:\Program Files (x86)\Dropbox
      2018-04-25 07:58 - 2014-08-05 10:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
      2018-04-25 07:58 - 2014-07-07 21:47 - 000000000 ____D C:\Program Files (x86)\Java
      2018-04-25 07:54 - 2014-08-05 10:03 - 000098760 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
      2018-04-24 08:02 - 2017-06-09 19:38 - 000000282 __RSH C:\ProgramData\ntuser.pol
      2018-04-23 22:04 - 2013-11-04 19:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
      2018-04-23 22:04 - 2013-11-04 19:56 - 000000000 ____D C:\Program Files\Calibre2
      2018-04-21 23:01 - 2013-12-01 12:44 - 000000000 ____D C:\Users\Casa\AppData\Local\ElevatedDiagnostics
      2018-04-21 19:27 - 2018-03-04 15:00 - 000000000 ___RD C:\Users\Casa\Desktop\ventacasa
      2018-04-19 09:01 - 2018-01-19 21:10 - 002559892 _____ C:\WINDOWS\system32\PerfStringBackup.INI
      2018-04-19 09:01 - 2017-09-30 16:41 - 001157310 _____ C:\WINDOWS\system32\perfh00A.dat
      2018-04-19 09:01 - 2017-09-30 16:41 - 000274572 _____ C:\WINDOWS\system32\perfc00A.dat
      2018-04-19 08:56 - 2016-12-04 11:23 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
      2018-04-19 08:56 - 2014-05-24 19:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
      2018-04-15 09:01 - 2012-06-21 23:00 - 000000000 ____D C:\Users\Casa\AppData\Local\VirtualStore

      ==================== Files in the root of some directories =======

      2013-07-13 09:15 - 2013-06-28 03:54 - 000573440 _____ () C:\Program Files (x86)\1026.mst
      2013-07-13 09:15 - 2013-06-28 03:54 - 000454656 _____ () C:\Program Files (x86)\1028.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000385024 _____ () C:\Program Files (x86)\1029.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000253952 _____ () C:\Program Files (x86)\1030.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000274432 _____ () C:\Program Files (x86)\1031.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000675840 _____ () C:\Program Files (x86)\1032.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000020480 _____ () C:\Program Files (x86)\1033.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000270336 _____ () C:\Program Files (x86)\1034.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000294912 _____ () C:\Program Files (x86)\1036.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000401408 _____ () C:\Program Files (x86)\1038.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000253952 _____ () C:\Program Files (x86)\1040.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000643072 _____ () C:\Program Files (x86)\1041.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 001290240 _____ () C:\Program Files (x86)\1042.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000233472 _____ () C:\Program Files (x86)\1043.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000307200 _____ () C:\Program Files (x86)\1045.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000278528 _____ () C:\Program Files (x86)\1046.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000565248 _____ () C:\Program Files (x86)\1049.mst
      2013-07-13 09:15 - 2013-06-28 03:55 - 000380928 _____ () C:\Program Files (x86)\1051.mst
      2013-07-13 09:14 - 2013-06-28 03:55 - 000278528 _____ () C:\Program Files (x86)\1053.mst
      2013-07-13 09:14 - 2013-06-28 03:55 - 000372736 _____ () C:\Program Files (x86)\1055.mst
      2013-07-13 09:14 - 2013-06-28 03:55 - 000491520 _____ () C:\Program Files (x86)\1058.mst
      2013-07-13 09:14 - 2013-06-28 03:55 - 000212992 _____ () C:\Program Files (x86)\1061.mst
      2013-07-13 09:14 - 2013-06-28 03:55 - 000569344 _____ () C:\Program Files (x86)\1066.mst
      2013-07-13 09:14 - 2013-06-28 03:54 - 000466944 _____ () C:\Program Files (x86)\2052.mst
      2013-07-13 09:14 - 2013-06-28 04:22 - 009451008 _____ () C:\Program Files (x86)\ABBYY FineReader 11 Corporate Edition.msi
      2013-07-13 09:14 - 2013-06-28 03:36 - 000651792 _____ (ABBYY InfoPoisk LLC) C:\Program Files (x86)\AdminSetup.exe
      2013-07-13 09:14 - 2011-07-05 15:48 - 000000253 _____ () C:\Program Files (x86)\AdminSetup.ini
      2013-07-13 09:14 - 2013-06-28 03:51 - 191320815 _____ () C:\Program Files (x86)\Asian.cab
      2013-07-13 09:14 - 2013-06-28 03:36 - 001146384 _____ (ABBYY InfoPoisk LLC) C:\Program Files (x86)\AutoRun.exe
      2013-07-13 09:14 - 2011-05-17 20:16 - 000000093 _____ () C:\Program Files (x86)\AutoRun.inf
      2013-07-13 09:14 - 2013-06-28 03:51 - 015597178 _____ () C:\Program Files (x86)\BCR.cab
      2013-07-13 09:14 - 2013-06-28 03:52 - 084334758 _____ () C:\Program Files (x86)\Bin.cab
      2013-07-13 09:14 - 2013-06-28 03:54 - 032526522 _____ () C:\Program Files (x86)\DictLang.cab
      2013-07-13 09:14 - 2013-06-28 03:52 - 001096488 _____ () C:\Program Files (x86)\HotFol~1.cab
      2013-07-13 09:14 - 2009-07-07 18:12 - 001822520 _____ (Microsoft Corporation) C:\Program Files (x86)\instmsiw.exe
      2013-07-13 09:14 - 2013-06-28 03:52 - 001556149 _____ () C:\Program Files (x86)\Screen~1.cab
      2013-07-13 09:14 - 2013-06-28 03:36 - 000651792 _____ (ABBYY InfoPoisk LLC) C:\Program Files (x86)\Setup.exe
      2013-07-13 09:14 - 2012-08-21 16:49 - 000000635 _____ () C:\Program Files (x86)\setup.ini
      2013-07-13 09:14 - 2009-07-07 18:12 - 000245408 _____ (Microsoft Corporation) C:\Program Files (x86)\unicows.dll
      2012-07-24 09:53 - 2012-07-24 09:53 - 000007176 _____ () C:\Users\Casa\AppData\Roaming\pcouffin.cat
      2012-07-24 09:53 - 2012-07-24 09:53 - 000001167 _____ () C:\Users\Casa\AppData\Roaming\pcouffin.inf
      2012-07-24 09:53 - 2012-07-24 09:54 - 000000034 _____ () C:\Users\Casa\AppData\Roaming\pcouffin.log
      2012-07-24 09:53 - 2012-07-24 09:53 - 000082048 _____ (VSO Software) C:\Users\Casa\AppData\Roaming\pcouffin.sys
      2013-05-04 10:03 - 2013-05-04 10:03 - 000001181 _____ () C:\Users\Casa\AppData\Roaming\trace_FilterInstaller.1.txt
      2013-05-04 10:03 - 2013-06-03 19:35 - 000000919 _____ () C:\Users\Casa\AppData\Roaming\trace_FilterInstaller.txt
      2013-05-04 10:03 - 2013-06-03 19:35 - 000000000 _____ () C:\Users\Casa\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
      2015-10-13 10:40 - 2016-02-05 19:07 - 000000506 _____ () C:\Users\Casa\AppData\Roaming\wklnhst.dat
      2013-11-10 14:10 - 2013-11-10 14:28 - 000006656 _____ () C:\Users\Casa\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2012-07-02 13:08 - 2012-07-02 13:08 - 000000292 _____ () C:\Users\Casa\AppData\Local\HamsterBookConverter.cfg
      2015-09-12 09:46 - 2015-09-12 09:46 - 000005083 _____ () C:\Users\Casa\AppData\Local\HWVendorDetection.log
      2012-07-02 13:02 - 2012-07-02 13:10 - 000000035 _____ () C:\Users\Casa\AppData\Local\installLang.ini
      2014-12-09 11:40 - 2014-12-09 11:40 - 000000001 _____ () C:\Users\Casa\AppData\Local\llftool.4.12.agreement
      2014-03-26 11:46 - 2014-05-15 18:59 - 000000600 _____ () C:\Users\Casa\AppData\Local\PUTTY.RND
      2015-11-14 19:32 - 2015-11-14 19:32 - 000000218 _____ () C:\Users\Casa\AppData\Local\recently-used.xbel
      2013-04-25 12:45 - 2017-10-23 15:41 - 000007635 _____ () C:\Users\Casa\AppData\Local\Resmon.ResmonCfg
      2015-04-20 14:06 - 2015-05-01 00:19 - 000000798 _____ () C:\Users\Casa\AppData\Local\Temp-log.txt

      ==================== Bamital & volsnap ======================

      (There is no automatic fix for files that do not pass verification.)

      C:\WINDOWS\system32\winlogon.exe => File is digitally signed
      C:\WINDOWS\system32\wininit.exe => File is digitally signed
      C:\WINDOWS\explorer.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
      C:\WINDOWS\system32\svchost.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
      C:\WINDOWS\system32\services.exe => File is digitally signed
      C:\WINDOWS\system32\User32.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
      C:\WINDOWS\system32\userinit.exe => File is digitally signed
      C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
      C:\WINDOWS\system32\rpcss.dll => File is digitally signed
      C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
      C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
      C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

      LastRegBack: 2018-05-08 10:17

      ==================== End of FRST.txt ============================

    Página 1 de 5 12345 ÚltimoÚltimo