top of page
Search
quianapleva083zpp

Setupconsumerc2rolw.exe German Download



Microsoft Starter 2010 works with a virtualization technology like V-App. It does not really install Office on your computer, but a virtualized office (like Office in a virtual machine).To do this it creates a drive Q: which is not user accessable . If you are using drive Q: already, Office 2010 Starter won't work.Office 2010 Starter could be installed using a setup (SetupConsumerC2ROLW.exe) which downloaded the installation files from internet.Sometime around 2012, Microsoft pulled the plug, so the installation files couldn't be downloaded anymore.


I found out that if the installation files are available locally, the setup won't need internet during the installation.However the setup does not keep the files after installation, so I had to figure out how to get the installation files together locally.Monitoring the installation I got some partial information how to download all the installation files needed.




setupconsumerc2rolw.exe german download




This information was used to create the Office 2010 Starter downloader v1.0.Be ware, this script works as is. Not a lot of error checking has been put in place. E.g. I do not check for downlad errors, but every language folder should be about 700 - 900 MB.


Although this Starter edition is free from Microsoft but its not available for download from Microsoft. Starter edition is only available for OEMs (original equipment manufacturers) and comes pre-installed in new Windows PCs only.


PS: You can replace the locale string en-us in the above URL with your own locale string like fr-fr for French, de-de for German, es-es for Spanish and so on to download your localized version.


Update: The installer in the above direct download links is an online installer which will download the actual setup after it is installed in the system. If you want to download the whole Office Starter 2010 offline, you can do so by using this script. Just unzip the file and edit download.cmd file. Change the language string to whatever language you want to download. After editing and saving, run wget.exe. This will download Microsoft Office Starter 2010 for offline usage.Download Office Starter 2010 offline scriptUpdate: Unfortunately the Office 2010 Starter edition download has been restricted by Microsoft and the links given above are not working. We are looking for new updated links. If you find one, please leave us a comment.Update: Now you can download Microsoft Office 2010 from direct download links in all languages and use the trial full version instead of the starter version.


Replace en-us in the URL with own locale string like fr-fr for French, de-de for German, es-es for Spanish and so on to download your localized version.


The above download link will download a 1.6 MB installer which will then download the rest of the files from the Internet. Since the download is huge (over 600 MB), you might like to keep an offline version of the installer so that you can install it on a computer that is not connected to the Internet.


German blogger Caschy has published a batch file that downloads the entire setup package from Microsoft servers. Download the batch file and execute it by double-clicking on it and it will download the full package to your hard disk.


I canceled the download after a few seconds as I only wanted to see if the batch file was working. It was working alright and I could see a partially downloaded installer on my disk. Were you able to begin the download?


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-12-2015Ran by Jorge (administrator) on JORGE-MSI (09-12-2015 15:17:35)Running from C:\Users\Jorge\DesktopLoaded Profiles: Jorge (Available Profiles: Jorge)Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Español (España, internacional)Internet Explorer Version 11 (Default browser: FF)Boot Mode: NormalTutorial for Farbar Recovery Scan Tool: -frst-tutorial-how-to-use-farbar-recovery-scan-tool/==================== Processes (Whitelisted) =================(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)(Microsoft Corporation) C:\Windows\System32\wlanext.exe(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe(Intel Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe(MAGIX AG) C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe() C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe(Micro-Star International Co., Ltd.) C:\Program Files (x86)\S-Bar\MSIService.exe(MSI) C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe(Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe() C:\Windows\SysWOW64\PnkBstrA.exe(Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe(Intel Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe(VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE(Intel Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe(VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe(Intel Corporation) C:\Windows\System32\hkcmd.exe(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Rapid Storage Technology\IAStorIcon.exe(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe(Intel Corporation) C:\Program Files (x86)\Intel\Intel Rapid Storage Technology\IAStorDataMgrSvc.exe(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe(InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe(Microsoft Corporation) C:\Windows\System32\dllhost.exe(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe(Microsoft Corporation) C:\Windows\System32\rundll32.exe(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe==================== Registry (Whitelisted) ===========================(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayAppHKLM\...\Run: [THXCfg64] => C:\windows\system32\RunDLL32.exe C:\windows\system32\THXCfg64.dll,RunDLLEntry THXCfg64HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2655520 2015-11-05] (NVIDIA Corporation)HKLM\...\Run: [ShadowPlay] => C:\windows\system32\rundll32.exe C:\windows\system32\nvspcap64.dll,ShadowPlayOnSystemStartHKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation)HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-04] (Intel Corporation)HKLM-x32\...\Run: [THX Audio Control Panel] => C:\Program Files (x86)\Creative\THX TruStudio Pro\THXAudioCP\THXAudio.exe [1517056 2011-08-29] (Creative Technology Ltd)HKLM-x32\...\Run: [UpdReg] => C:\windows\UpdReg.EXEHKLM-x32\...\Run: [VGAOCAP] => C:\Program Files (x86)\MSI\MSI VGA Overclock Tool\VGAOCAP.exe [88576 2012-01-31] ()HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)HKU\S-1-5-21-3234211791-2759061018-4055047508-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8322328 2015-11-15] (Piriform Ltd)HKU\S-1-5-21-3234211791-2759061018-4055047508-1001\...\Run: [Dropbox Update] => C:\Users\Jorge\AppData\Local\Dropbox\Update\DropboxUpdate.exe [1252720 2015-06-28] (Dropbox, Inc.)HKU\S-1-5-21-3234211791-2759061018-4055047508-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50509440 2015-11-30] (Skype Technologies S.A.)HKU\S-1-5-18\...\Run: [KSS] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe [919296 2015-06-03] (Kaspersky Lab ZAO)AppInit_DLLs: C:\windows\system32\nvinitx.dll => C:\windows\system32\nvinitx.dll [177600 2015-11-05] (NVIDIA Corporation)AppInit_DLLs-x32: C:\windows\SysWOW64\nvinit.dll => C:\windows\SysWOW64\nvinit.dll [155792 2015-11-05] (NVIDIA Corporation)ShellIconOverlayIdentifiers: [ DropboxExt1] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt2] -> FB314EDA-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt3] -> FB314EDD-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt4] -> FB314EDE-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt5] -> FB314EDB-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt6] -> FB314EDF-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt7] -> FB314EDC-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers: [ DropboxExt8] -> FB314EE0-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt1] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt2] -> FB314EDA-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt3] -> FB314EDD-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt4] -> FB314EDE-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt5] -> FB314EDB-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt6] -> FB314EDF-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt7] -> FB314EDC-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [ DropboxExt8] -> FB314EE0-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> FB314ED9-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> FB314EDA-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> FB314EDB-A251-47B7-93E1-CDD82E34AF8B => C:\Users\Jorge\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-04] (Dropbox, Inc.)Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk [2012-04-25]ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ralink Wireless Utility.lnk [2014-09-09]ShortcutTarget: Ralink Wireless Utility.lnk -> C:\Program Files (x86)\RALINK\Common\RaUI.exe (Ralink Technology, Corp.)Startup: C:\Users\Jorge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-10-16]ShortcutTarget: Dropbox.lnk -> C:\Users\Jorge\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)Startup: C:\Users\Jorge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk [2015-08-18]ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)Startup: C:\Users\Jorge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk [2013-06-10]ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)Startup: C:\Users\Jorge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Psi.lnk [2013-07-04]ShortcutTarget: Psi.lnk -> C:\Program Files (x86)\Psi\Psi.exe ()AlternateShell:CHR HKLM\SOFTWARE\Policies\Google: Restriction C7253179-90B7-45E8-8A16-58B517C9EB40 URL = hxxp://www.bing.com/search?q=searchTerms&form=MSITDF&pc=MAM3&src=IE-SearchBoxSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL =SearchScopes: HKLM-x32 -> C7253179-90B7-45E8-8A16-58B517C9EB40 URL = hxxp://www.bing.com/search?q=searchTerms&form=MSITDF&pc=MAM3&src=IE-SearchBoxBHO: Windows Live ID Sign-in Helper -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)BHO: LastPass Vault -> 95D9ECF5-2A4D-4550-BE49-70D42F71296E -> C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-10-12] (LastPass)BHO: Office Document Cache Handler -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)BHO-x32: Java™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-09-03] (Oracle Corporation)BHO-x32: Windows Live ID Sign-in Helper -> 9030D464-4C02-4ABF-8ECC-5164760863C6 -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)BHO-x32: Evernote extension -> 92EF2EAD-A7CE-4424-B0DB-499CF856608E -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll [2015-07-01] (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)BHO-x32: LastPass Vault -> 95D9ECF5-2A4D-4550-BE49-70D42F71296E -> C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-10-12] (LastPass)BHO-x32: Office Document Cache Handler -> B4F3A835-0E21-4959-BA22-42B3008E02FF -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)BHO-x32: Java™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-09-03] (Oracle Corporation)Toolbar: HKLM - LastPass Toolbar - 9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5 - C:\Program Files (x86)\LastPass\LPToolbar_x64.dll [2015-10-12] (LastPass)Toolbar: HKLM-x32 - LastPass Toolbar - 9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5 - C:\Program Files (x86)\LastPass\LPToolbar.dll [2015-10-12] (LastPass)Handler-x32: skype4com - FFC8B962-9B40-4DFF-9458-1830C7DD7F5D - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)FireFox:========FF ProfilePath: C:\Users\Jorge\AppData\Roaming\Mozilla\Firefox\Profiles\qu3tz7k2.default-1441595658464FF NetworkProxy: "backup.ftp", ""FF NetworkProxy: "backup.ftp_port", 0FF NetworkProxy: "backup.socks", "92.36.161.7"FF NetworkProxy: "backup.socks_port", 19940FF NetworkProxy: "backup.ssl", ""FF NetworkProxy: "backup.ssl_port", 0FF NetworkProxy: "ftp", "203.156.126.38"FF NetworkProxy: "ftp_port", 8080FF NetworkProxy: "http", "203.156.126.38"FF NetworkProxy: "http_port", 8080FF NetworkProxy: "share_proxy_settings", trueFF NetworkProxy: "socks", "203.156.126.38"FF NetworkProxy: "socks_port", 8080FF NetworkProxy: "ssl", "203.156.126.38"FF NetworkProxy: "ssl_port", 8080FF NetworkProxy: "type", 0FF Plugin: @adobe.com/FlashPlayer -> C:\windows\system32\Macromed\Flash\NPSWF64_20_0_0_235.dll [2015-12-08] ()FF Plugin: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-10-12] (LastPass)FF Plugin: @microsoft.com/GENUINE -> disabled [No File]FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA1\MICROS2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)FF Plugin-x32: @adobe.com/FlashPlayer -> C:\windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_235.dll [2015-12-08] ()FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1205146.dll [2013-10-25] (Adobe Systems, Inc.)FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-20] ()FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-09-03] (Oracle Corporation)FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-09-03] (Oracle Corporation)FF Plugin-x32: @lastpass.com/NPLastPass -> C:\Program Files (x86)\LastPass\nplastpass64.dll [2015-10-12] (LastPass)FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41105.0\npctrl.dll [2015-11-04] ( Microsoft Corporation)FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA2\MICROS1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA2\MICROS1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-04] (Google Inc.)FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)FF Plugin HKU\S-1-5-21-3234211791-2759061018-4055047508-1001: @citrixonline.com/appdetectorplugin -> C:\Users\Jorge\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2015-05-27] (Citrix Online)FF Plugin HKU\S-1-5-21-3234211791-2759061018-4055047508-1001: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Jorge\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll [2014-07-24] (Skype Limited)FF Plugin HKU\S-1-5-21-3234211791-2759061018-4055047508-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Jorge\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-03-24] (Unity Technologies ApS)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-05-08] (Adobe Systems Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll [2013-01-28] (Apple Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll [2013-01-28] (Apple Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll [2013-01-28] (Apple Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll [2013-01-28] (Apple Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll [2013-01-28] (Apple Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll [2013-01-28] (Apple Inc.)FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll [2013-01-28] (Apple Inc.)FF Extension: User Agent Switcher - C:\Users\Jorge\AppData\Roaming\Mozilla\Firefox\Profiles\qu3tz7k2.default-1441595658464\extensions\e968fc70-8f95-4ab9-9e79-304de2a71ee1.xpi [2015-09-30]FF Extension: LastPass - C:\Users\Jorge\AppData\Roaming\Mozilla\Firefox\Profiles\qu3tz7k2.default-1441595658464\Extensions\support@lastpass.com [2015-12-03]FF Extension: User Agent Overrider - C:\Users\Jorge\AppData\Roaming\Mozilla\Firefox\Profiles\qu3tz7k2.default-1441595658464\Extensions\useragentoverrider@qixinglu.com.xpi [2015-09-30]FF HKLM-x32\...\Firefox\Extensions: [2bf2d136-ab28-4bdd-8c8b-e1838343e631@2e9291c5-67cd-4375-afc8-b2772f9fcf45.com] - C:\Program Files (x86)\\George\2bf2d136-ab28-4bdd-8c8b-e1838343e631@2e9291c5-67cd-4375-afc8-b2772f9fcf45.com.xpiFF Extension: HilariousVideos - C:\Program Files (x86)\\George\2bf2d136-ab28-4bdd-8c8b-e1838343e631@2e9291c5-67cd-4375-afc8-b2772f9fcf45.com.xpi [2013-06-11] [not signed]FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\firefox.cfg [2013-06-10] lpCHR Plugin: (Widevine Content Decryption Module) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.823\_platform_specific\win_x86\widevinecdmadapter.dll => No FileCHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.73\PepperFlash\pepflashplayer.dll ()CHR Profile: C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\DefaultCHR Extension: (Traductor de Google) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-11-17]CHR Extension: (Google Docs) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]CHR Extension: (Google Drive) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]CHR Extension: (YouTube) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]CHR Extension: (Búsqueda de Google) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]CHR Extension: (FB Pixel Helper) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdgfkebogiimcoedlicjlajpkdmockpc [2015-12-03]CHR Extension: (LastPass: Free Password Manager) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdokiejnpimakedhajhdlcegeplioahd [2015-10-26]CHR Extension: (Local SWF) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdmbckedabpbgjagmkgcejooabcdnone [2015-11-25]CHR Extension: (Awesome Screenshot - Screen captura y Anotar ) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlipoenfbbikpbjkfpfillcgkoblgpmj [2015-12-02]CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-27]CHR Extension: (Instagram for Chrome) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\opnbmdkdflhjiclaoiiifmheknpccalb [2015-12-04]CHR Extension: (Gmail) - C:\Users\Jorge\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-03]CHR HKLM\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crxCHR HKLM-x32\...\Chrome\Extension: [hdokiejnpimakedhajhdlcegeplioahd] - hxxp://clients2.google.com/service/update2/crxCHR HKLM-x32\...\Chrome\Extension: [nfnoclbgfccijbdmhjabakjbalaahejm] - C:\Program Files (x86)\\George\hilariousvideos.crx [2013-06-11]==================== Services (Whitelisted) ========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [3465216 2015-12-06] () [File not signed]S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [3764224 2015-12-04] (BlueStack Systems, Inc.) [File not signed]R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384728 2014-08-13] (BlueStack Systems, Inc.)R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [777944 2014-08-13] (BlueStack Systems, Inc.)R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1253376 2009-08-27] (MAGIX AG) [File not signed]S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [3276800 2015-12-08] (MAGIX) [File not signed]S3 FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [4014080 2015-12-08] (Acresso Software Inc.) [File not signed]S3 FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [4825976 2015-12-08] (Flexera Software LLC) [File not signed]R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156384 2015-11-05] (NVIDIA Corporation)S2 gupdate; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2380616 2015-12-04] (Google Inc.) [File not signed]S3 gupdatem; C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2380616 2015-12-04] (Google Inc.) [File not signed]S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2310144 2015-12-08] (Macrovision Corporation) [File not signed]S3 iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2877768 2015-12-06] (Apple Inc.) [File not signed]R2 kss; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe [919296 2015-06-03] (Kaspersky Lab ZAO)R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)S2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)R2 mi-raysat_3dsmax2014_64; C:\Program Files\Autodesk\3ds Max 2014\NVIDIA\Satellite\raysat_3dsmax2014_64server.exe [86016 2011-09-14] () [File not signed]R2 Micro Star SCM; C:\Program Files (x86)\S-Bar\MSIService.exe [160768 2011-11-02] (Micro-Star International Co., Ltd.) [File not signed]S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [172032 2015-12-07] (Mozilla Foundation) [File not signed]R2 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI HOUSE\MSIFoundationService.exe [12800 2010-07-16] (MSI) [File not signed]R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [138768 2012-01-03] (MSI)S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [2510848 2015-12-08] () [File not signed]R2 NIHardwareService; C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe [5352960 2011-03-09] (Native Instruments GmbH) [File not signed]R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2782552 2010-03-05] (Symantec Corporation)R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1873696 2015-11-05] (NVIDIA Corporation)R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [5568288 2015-11-05] (NVIDIA Corporation)S3 OpenVPNService; C:\Program Files (x86)\HMA! Pro VPN\bin\openvpnserv.exe [4510008 2015-12-08] (The OpenVPN Project) [File not signed]S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [3178496 2015-12-07] (Electronic Arts) [File not signed]S3 ose64; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2412544 2015-12-06] (Microsoft Corporation) [File not signed]S3 osppsvc; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [6045696 2015-12-06] (Microsoft Corporation) [File not signed]R2 PnkBstrA; C:\windows\SysWOW64\PnkBstrA.exe [76888 2013-03-26] ()R2 PSI_SVC_2; C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [267552 2010-03-11] (Protexis Inc.) [File not signed]R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [492032 2012-03-07] () [File not signed]S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2015-10-06] (Riverbed Technology, Inc.) [File not signed]S3 Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [1957888 2015-12-08] (Valve Corporation) [File not signed]S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2756608 2015-12-08] (Adobe Systems Incorporated) [File not signed]R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [File not signed]R2 VMAuthdService; C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [79872 2011-08-22] (VMware, Inc.) [File not signed]S3 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [11837440 2015-10-06] () [File not signed]R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-26] (Microsoft Corporation)S4 wlcrasvc; C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [3411968 2015-12-06] (Microsoft Corporation) [File not signed]R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [594704 2011-12-08] (Intel Corporation)S2 FastUserSwitchingCompatibility; C:\windows\installer\AMDEx3.msi [X]===================== Drivers (Whitelisted) ==========================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-13] (Microsoft Corporation)R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [75880 2012-03-07] (Bigfoot Networks, Inc.)R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-08-13] (BlueStack Systems)S3 ck3iusb64; C:\Windows\System32\DRIVERS\ck3iusb64.sys [64000 2010-01-18] (Xecuter)R0 E8655EDC; C:\Windows\System32\drivers\E8655EDC.sys [478392 2015-10-06] (Kaspersky Lab ZAO)S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)S3 ipadtst; C:\Program Files (x86)\MSI\Super-Charger\ipadtst_64.sys [17936 2011-12-12] (Windows Win 7 DDK provider)R3 L1C; C:\Windows\System32\DRIVERS\e22w7x64.sys [161616 2012-03-07] (Qualcomm Atheros, Inc.)S3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [16896 2007-03-20] (hxxp://libusb-win32.sourceforge.net)S3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)S3 MBAMWebAccessControl; C:\windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-02-28] (Riverbed Technology, Inc.)R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [14136 2010-01-18] (MSI)S3 NUMARK_NS6_MIDI; C:\Windows\System32\drivers\ns6_midi.sys [31296 2011-08-10] (Numark)S3 NUMARK_NS6_USB; C:\Windows\System32\Drivers\ns6_usb.sys [416320 2011-08-10] (Ploytec GmbH)S3 NUMARK_NS6_WDM; C:\Windows\System32\drivers\ns6_wdm.sys [54336 2011-08-10] (Numark)R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20768 2015-11-05] (NVIDIA Corporation)R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [50472 2015-11-05] (NVIDIA Corporation)S3 qcusbser-forge; C:\Windows\System32\DRIVERS\qcusbser.sys [247872 2015-06-17] (FORGE Incorporated)U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [30848 2015-12-09] ()R1 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [117768 2015-09-08] (Oracle Corporation)R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [146072 2015-09-08] (Oracle Corporation)S3 catchme; \??\C:\ComboFix\catchme.sys [X]S3 MGHwCtrl; \??\C:\Program Files\MSI\MSI Software Install\MGHwCtrl.sys [X]S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]==================== NetSvcs (Whitelisted) ===================(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)==================== One Month Created files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-12-09 15:15 - 2015-12-09 15:15 - 00000757 _____ C:\Users\Jorge\Desktop\JRT.txt2015-12-09 15:06 - 2015-12-09 15:06 - 00103140 _____ C:\pcre.exe2015-12-09 14:27 - 2015-12-09 14:27 - 01599336 _____ (Malwarebytes) C:\Users\Jorge\Desktop\JRT.exe2015-12-09 14:13 - 2015-12-09 14:13 - 01738240 _____ C:\Users\Jorge\Desktop\adwcleaner_5.024.exe2015-12-09 13:39 - 2015-12-09 15:03 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)2015-12-09 13:34 - 2015-12-09 15:00 - 00000000 ____D C:\Users\Jorge\Desktop\mbar2015-12-09 13:34 - 2015-12-09 13:34 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Jorge\Downloads\mbar-1.09.3.1001.exe2015-12-09 13:10 - 2015-12-09 13:10 - 00105218 ____H C:\Users\Jorge\Desktop\WRL3329.tmp2015-12-09 12:48 - 2015-12-09 12:48 - 00852771 _____ C:\Users\Jorge\Desktop\SecurityCheck.exe2015-12-09 04:50 - 2015-12-09 04:52 - 00088176 _____ C:\Users\Jorge\Desktop\Addition.txt2015-12-09 04:49 - 2015-12-09 15:17 - 00033945 _____ C:\Users\Jorge\Desktop\FRST.txt2015-12-09 04:49 - 2015-12-09 15:17 - 00000000 ____D C:\FRST2015-12-09 04:46 - 2015-12-09 04:46 - 02369024 _____ (Farbar) C:\Users\Jorge\Desktop\FRST64.exe2015-12-09 04:30 - 2015-12-09 04:30 - 00003400 ____N C:\bootsqm.dat2015-12-09 04:28 - 2015-12-09 04:28 - 00000000 __SHD C:\found.0012015-12-09 02:30 - 2015-12-09 02:36 - 00000000 ____D C:\ProgramData\HitmanPro2015-12-09 02:29 - 2015-12-09 03:09 - 00000282 __RSH C:\ProgramData\ntuser.pol2015-12-09 02:11 - 2015-12-09 02:27 - 00000000 ____D C:\ProgramData\RogueKiller2015-12-09 02:11 - 2015-12-09 02:11 - 00030848 _____ C:\windows\system32\Drivers\TrueSight.sys2015-12-09 02:04 - 2015-12-09 02:04 - 00123027 _____ C:\ComboFix.txt2015-12-09 01:33 - 2011-06-26 00:45 - 00256000 _____ C:\windows\PEV.exe2015-12-09 01:33 - 2010-11-07 11:20 - 00208896 _____ C:\windows\MBR.exe2015-12-09 01:33 - 2009-04-19 22:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe2015-12-09 01:33 - 2000-08-30 18:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe2015-12-09 01:33 - 2000-08-30 18:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe2015-12-09 01:33 - 2000-08-30 18:00 - 00098816 _____ C:\windows\sed.exe2015-12-09 01:33 - 2000-08-30 18:00 - 00080412 _____ C:\windows\grep.exe2015-12-09 01:33 - 2000-08-30 18:00 - 00068096 _____ C:\windows\zip.exe2015-12-09 01:32 - 2015-12-09 02:04 - 00000000 ____D C:\Qoobox2015-12-09 01:32 - 2015-12-09 01:58 - 00000000 ____D C:\windows\erdnt2015-12-09 01:26 - 2015-12-09 01:30 - 11337112 _____ (SurfRight B.V.) C:\Users\Jorge\Desktop\HitmanPro_x64.exe2015-12-09 01:25 - 2015-12-09 01:25 - 20829256 _____ C:\Users\Jorge\Desktop\RogueKiller.exe2015-12-09 01:24 - 2015-12-09 01:24 - 05640425 ____R (Swearware) C:\Users\Jorge\Desktop\ComboFix.exe2015-12-08 15:36 - 2015-11-20 12:54 - 03170304 _____ (Microsoft Corporation) C:\windows\system32\wucltux.dll2015-12-08 15:36 - 2015-11-20 12:54 - 02609152 _____ (Microsoft Corporation) C:\windows\system32\wuaueng.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00709632 _____ (Microsoft Corporation) C:\windows\system32\wuapi.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00192512 _____ (Microsoft Corporation) C:\windows\system32\wuwebv.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00140288 _____ (Microsoft Corporation) C:\windows\system32\wuauclt.exe2015-12-08 15:36 - 2015-11-20 12:54 - 00098816 _____ (Microsoft Corporation) C:\windows\system32\wudriver.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00091136 _____ (Microsoft Corporation) C:\windows\system32\WinSetupUI.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wups2.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00037888 _____ (Microsoft Corporation) C:\windows\system32\wuapp.exe2015-12-08 15:36 - 2015-11-20 12:54 - 00036864 _____ (Microsoft Corporation) C:\windows\system32\wups.dll2015-12-08 15:36 - 2015-11-20 12:54 - 00012288 _____ (Microsoft Corporation) C:\windows\system32\wu.upgrade.ps.dll2015-12-08 15:36 - 2015-11-20 12:34 - 00573440 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapi.dll2015-12-08 15:36 - 2015-11-20 12:34 - 00174080 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuwebv.dll2015-12-08 15:36 - 2015-11-20 12:34 - 00093696 _____ (Microsoft Corporation) C:\windows\SysWOW64\wudriver.dll2015-12-08 15:36 - 2015-11-20 12:34 - 00030208 _____ (Microsoft Corporation) C:\windows\SysWOW64\wups.dll2015-12-08 15:36 - 2015-11-20 12:33 - 00035328 _____ (Microsoft Corporation) C:\windows\SysWOW64\wuapp.exe2015-12-08 15:36 - 2015-11-11 15:12 - 00387792 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll2015-12-08 15:36 - 2015-11-11 14:52 - 00341192 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll2015-12-08 15:36 - 2015-11-11 12:53 - 01735680 _____ (Microsoft Corporation) C:\windows\system32\comsvcs.dll2015-12-08 15:36 - 2015-11-11 12:53 - 00525312 _____ (Microsoft Corporation) C:\windows\system32\catsrvut.dll2015-12-08 15:36 - 2015-11-11 12:39 - 01242624 _____ (Microsoft Corporation) C:\windows\SysWOW64\comsvcs.dll2015-12-08 15:36 - 2015-11-11 12:39 - 00487936 _____ (Microsoft Corporation) C:\windows\SysWOW64\catsrvut.dll2015-12-08 15:36 - 2015-11-11 10:21 - 25837568 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll2015-12-08 15:36 - 2015-11-11 10:00 - 12856832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll2015-12-08 15:36 - 2015-11-11 09:44 - 00416256 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll2015-12-08 15:36 - 2015-11-11 09:44 - 00279040 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll2015-12-08 15:36 - 2015-11-11 09:41 - 20366848 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll2015-12-08 15:36 - 2015-11-11 09:12 - 00092160 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll2015-12-08 15:36 - 2015-11-11 08:57 - 00076288 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll2015-12-08 15:36 - 2015-11-10 12:55 - 01648128 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll2015-12-08 15:36 - 2015-11-10 12:55 - 01180160 _____ (Microsoft Corporation) C:\windows\system32\FntCache.dll2015-12-08 15:36 - 2015-11-10 12:55 - 01008640 _____ (Microsoft Corporation) C:\windows\system32\user32.dll2015-12-08 15:36 - 2015-11-10 12:39 - 01251328 _____ (Microsoft Corporation) C:\windows\SysWOW64\DWrite.dll2015-12-08 15:36 - 2015-11-10 12:37 - 00833024 _____ (Microsoft Corporation) C:\windows\SysWOW64\user32.dll2015-12-08 15:36 - 2015-11-10 11:47 - 03211264 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys2015-12-08 15:36 - 2015-11-09 18:24 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb2015-12-08 15:36 - 2015-11-09 18:13 - 00496640 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll2015-12-08 15:36 - 2015-11-09 18:13 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll2015-12-08 15:36 - 2015-11-09 18:12 - 00341504 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec2015-12-08 15:36 - 2015-11-09 18:12 - 00047616 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll2015-12-08 15:36 - 2015-11-09 18:11 - 00064000 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll2015-12-08 15:36 - 2015-11-09 18:08 - 02280448 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll2015-12-08 15:36 - 2015-11-09 18:06 - 00047104 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll2015-12-08 15:36 - 2015-11-09 18:06 - 00030720 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll2015-12-08 15:36 - 2015-11-09 18:04 - 00476160 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll2015-12-08 15:36 - 2015-11-09 18:03 - 00115712 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe2015-12-08 15:36 - 2015-11-09 18:02 - 00663552 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll2015-12-08 15:36 - 2015-11-09 18:02 - 00620032 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll2015-12-08 15:36 - 2015-11-09 17:50 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll2015-12-08 15:36 - 2015-11-09 17:47 - 00168960 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll2015-12-08 15:36 - 2015-11-09 17:46 - 04514816 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll2015-12-08 15:36 - 2015-11-09 17:44 - 00130048 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll2015-12-08 15:36 - 2015-11-09 17:37 - 00230400 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll2015-12-08 15:36 - 2015-11-09 17:36 - 02050560 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl2015-12-08 15:36 - 2015-11-09 17:36 - 00687104 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll2015-12-08 15:36 - 2015-11-09 17:35 - 01155072 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll2015-12-08 15:36 - 2015-11-09 17:17 - 02011136 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll2015-12-08 15:36 - 2015-11-09 17:14 - 01311744 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll2015-12-08 15:36 - 2015-11-09 17:12 - 00710144 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll2015-12-08 15:36 - 2015-11-08 16:33 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb2015-12-08 15:36 - 2015-11-08 16:32 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll2015-12-08 15:36 - 2015-11-08 16:16 - 00066560 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll2015-12-08 15:36 - 2015-11-08 16:15 - 02887168 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll2015-12-08 15:36 - 2015-11-08 16:15 - 00571392 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll2015-12-08 15:36 - 2015-11-08 16:15 - 00417792 _____ (Microsoft Corporation) C:\windows\system32\html.iec2015-12-08 15:36 - 2015-11-08 16:15 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll2015-12-08 15:36 - 2015-11-08 16:14 - 00088064 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll2015-12-08 15:36 - 2015-11-08 16:07 - 00054784 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll2015-12-08 15:36 - 2015-11-08 16:06 - 00034304 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll2015-12-08 15:36 - 2015-11-08 16:04 - 05923840 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll2015-12-08 15:36 - 2015-11-08 16:02 - 00615936 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll2015-12-08 15:36 - 2015-11-08 16:01 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll2015-12-08 15:36 - 2015-11-08 16:01 - 00814080 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll2015-12-08 15:36 - 2015-11-08 16:01 - 00144384 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe2015-12-08 15:36 - 2015-11-08 16:01 - 00114688 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe2015-12-08 15:36 - 2015-11-08 15:52 - 00968704 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe2015-12-08 15:36 - 2015-11-08 15:48 - 00489984 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll2015-12-08 15:36 - 2015-11-08 15:40 - 00077824 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll2015-12-08 15:36 - 2015-11-08 15:35 - 00199680 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll2015-12-08 15:36 - 2015-11-08 15:32 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll2015-12-08 15:36 - 2015-11-08 15:29 - 00152064 _____ (Microsoft Corporation) C:\windows\system32\occache.dll2015-12-08 15:36 - 2015-11-08 15:18 - 00262144 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll2015-12-08 15:36 - 2015-11-08 15:15 - 00798208 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll2015-12-08 15:36 - 2015-11-08 15:15 - 00718336 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe2015-12-08 15:36 - 2015-11-08 15:14 - 14456832 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll2015-12-08 15:36 - 2015-11-08 15:14 - 01359360 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll2015-12-08 15:36 - 2015-11-08 15:13 - 02123264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl2015-12-08 15:36 - 2015-11-08 14:53 - 02487808 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll2015-12-08 15:36 - 2015-11-08 14:41 - 01546752 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll2015-12-08 15:36 - 2015-11-08 14:30 - 00800768 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll2015-12-08 15:36 - 2015-11-05 13:05 - 00017408 _____ (Microsoft Corporation) C:\windows\system32\wshrm.dll2015-12-08 15:36 - 2015-11-05 13:02 - 00014848 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshrm.dll2015-12-08 15:36 - 2015-11-05 13:02 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll2015-12-08 15:36 - 2015-11-05 13:00 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll2015-12-08 15:36 - 2015-11-05 03:53 - 00146944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rmcast.sys2015-12-08 15:36 - 2015-11-03 13:04 - 00802304 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll2015-12-08 15:36 - 2015-11-03 13:04 - 00241664 _____ (Microsoft Corporation) C:\windows\system32\els.dll2015-12-08 15:36 - 2015-11-03 12:56 - 00627712 _____ (Microsoft Corporation) C:\windows\SysWOW64\usp10.dll2015-12-08 15:36 - 2015-11-03 12:55 - 00179712 _____ (Microsoft Corporation) C:\windows\SysWOW64\els.dll2015-12-08 15:36 - 2015-10-08 17:22 - 00069120 _____ (Microsoft Corporation) C:\windows\system32\nlsbres.dll2015-12-08 15:36 - 2015-10-08 17:18 - 00007168 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZE.DLL2015-12-08 15:36 - 2015-10-08 17:18 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\kbdgeoqw.dll2015-12-08 15:36 - 2015-10-08 17:18 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZEL.DLL2015-12-08 15:36 - 2015-10-08 17:18 - 00007168 _____ (Microsoft Corporation) C:\windows\system32\KBDAZE.DLL2015-12-08 15:36 - 2015-10-08 17:18 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\kbdgeoqw.dll2015-12-08 15:36 - 2015-10-08 17:18 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\KBDAZEL.DLL2015-12-08 15:36 - 2015-10-08 17:17 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\nlsbres.dll2015-12-08 15:36 - 2015-10-08 13:13 - 00419928 _____ C:\windows\SysWOW64\locale.nls2015-12-08 15:36 - 2015-10-08 12:52 - 00419928 _____ C:\windows\system32\locale.nls2015-12-04 14:46 - 2015-12-05 01:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox2015-12-04 00:36 - 2015-12-09 14:14 - 00000000 ____D C:\AdwCleaner2015-12-03 03:09 - 2015-12-03 03:09 - 00000572 _____ C:\Users\Public\Desktop\Fraps.lnk2015-12-03 03:09 - 2015-12-03 03:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps2015-12-02 22:43 - 2015-12-02 22:43 - 04264374 _____ C:\Users\Jorge\Downloads\11) LMD-03 u.6 González, M.J. (2007).pdf2015-12-02 22:43 - 2015-12-02 22:43 - 04024951 _____ C:\Users\Jorge\Downloads\13) LMD-03 u. 6 Núñez, M.G., Salón, G., Romero, G. y Rosales, V. (2009).pdf2015-12-02 22:43 - 2015-12-02 22:43 - 04018663 _____ C:\Users\Jorge\Downloads\12) LMD-03 u.6 Martínez, R., Munduate, L. y Medina, F.J. (2008).pdf2015-12-02 22:21 - 2015-12-02 22:21 - 04464456 _____ C:\Users\Jorge\Downloads\8) LMD-03 u.5 Oblitas, L.A. (2010).pdf2015-12-02 22:21 - 2015-12-02 22:21 - 04372388 _____ C:\Users\Jorge\Downloads\9) LMD-03 u.5 Harvard Business Press (2009).pdf2015-12-02 22:21 - 2015-12-02 22:21 - 04017605 _____ C:\Users\Jorge\Downloads\10) LMD-03 u.5 Gabel, R., Peralta, V., Paiva, R.A. y Aguirre, G. (2012).pdf2015-12-02 22:03 - 2015-12-02 22:03 - 00001614 _____ C:\Users\Jorge\Desktop\s.txt2015-12-02 16:33 - 2015-12-02 16:33 - 00000678 _____ C:\Users\Jorge\Desktop\Untitled-1.ai2015-12-02 16:33 - 2015-12-02 16:33 - 00000132 _____ C:\Users\Jorge\AppData\Roaming\Adobe IllExport Filter CS6 Prefs2015-12-02 01:31 - 2015-12-02 01:30 - 00001995 _____ C:\Users\Jorge\Desktop\UserOptions.ini2015-11-30 23:48 - 2015-12-09 15:06 - 00192216 _____ (Malwarebytes) C:\windows\system32\Drivers\MBAMSwissArmy.sys2015-11-30 23:48 - 2015-11-30 23:48 - 00001116 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk2015-11-30 23:48 - 2015-11-30 23:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware2015-11-30 23:47 - 2015-12-09 14:28 - 00109272 _____ (Malwarebytes) C:\windows\system32\Drivers\mbamchameleon.sys2015-11-30 23:47 - 2015-11-30 23:48 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware2015-11-30 23:47 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mwac.sys2015-11-30 23:47 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\windows\system32\Drivers\mbam.sys2015-11-30 03:10 - 2015-11-30 03:12 - 00001544 _____ C:\Users\Jorge\Desktop\Skype.exe.lnk2015-11-27 00:13 - 2015-11-27 00:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi2015-11-27 00:13 - 2015-11-27 00:13 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi2015-11-23 16:46 - 2015-11-23 16:46 - 04378639 _____ C:\Users\Jorge\Downloads\7) LMD-03 u.4 Uribe, S.F. Molina, J.M., Contreras, F., Barbosa, D. y Espinosa, J.C. (2013).pdf2015-11-23 16:46 - 2015-11-23 16:46 - 04339481 _____ C:\Users\Jorge\Downloads\5) LMD-03 u.3 Gil, M.D. (2013).pdf2015-11-23 16:46 - 2015-11-23 16:46 - 04291726 _____ C:\Users\Jorge\Downloads\4) LMD-03 u.3 Shelton, N. y Burton, S. (2009).pdf2015-11-23 16:46 - 2015-11-23 16:46 - 04192316 _____ C:\Users\Jorge\Downloads\6) LMD-02 u.4 Palomo, M.T. (2010).pdf2015-11-18 03:26 - 2015-11-18 03:26 - 04247811 _____ C:\Users\Jorge\Downloads\3) LMD-03 u.2 Publicaciones Vértice (2010).pdf2015-11-15 04:20 - 2015-12-07 23:38 - 02520755 _____ C:\Users\Jorge\AppData\Roaming\jorge-ms_642015-11-15 04:20 - 2015-11-30 03:53 - 10379264 _____ (TMCheats.com) C:\Users\Jorge\Desktop\D6OVwyOG.exe2015-11-15 04:19 - 2015-11-15 04:19 - 08831506 _____ C:\Users\Jorge\Desktop\tmstreamer_v2_x64_2468D2H8R7D2C6DA5V.zip2015-11-13 00:12 - 2015-11-13 00:12 - 00141570 _____ C:\Users\Jorge\Desktop\Price-Sheet-081815.pdf2015-11-10 17:29 - 2015-10-19 19:12 - 05570496 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe2015-11-10 17:29 - 2015-10-19 19:12 - 00154560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys2015-11-10 17:29 - 2015-10-19 19:12 - 00095680 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys2015-11-10 17:29 - 2015-10-19 19:09 - 01730496 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll2015-11-10 17:29 - 2015-10-19 19:06 - 00362496 _____ (Microsoft Corporation) C:\windows\system32\wow64win.dll2015-11-10 17:29 - 2015-10-19 19:06 - 00243712 _____ (Microsoft Corporation) C:\windows\system32\wow64.dll2015-11-10 17:29 - 2015-10-19 19:06 - 00215040 _____ (Microsoft Corporation) C:\windows\system32\winsrv.dll2015-11-10 17:29 - 2015-10-19 19:06 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\wow64cpu.dll2015-11-10 17:29 - 2015-10-19 19:05 - 01461760 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll2015-11-10 17:29 - 2015-10-19 19:05 - 01216512 _____ (Microsoft Corporation) C:\windows\system32\rpcrt4.dll2015-11-10 17:29 - 2015-10-19 19:05 - 01164800 _____ (Microsoft Corporation) C:\windows\system32\kernel32.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00729600 _____ (Microsoft Corporation) C:\windows\system32\kerberos.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00503808 _____ (Microsoft Corporation) C:\windows\system32\srcore.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00424960 _____ (Microsoft Corporation) C:\windows\system32\KernelBase.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00344064 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00315392 _____ (Microsoft Corporation) C:\windows\system32\msv1_0.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00312320 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\rstrui.exe2015-11-10 17:29 - 2015-10-19 19:05 - 00210944 _____ (Microsoft Corporation) C:\windows\system32\wdigest.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00136192 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00112640 _____ (Microsoft Corporation) C:\windows\system32\smss.exe2015-11-10 17:29 - 2015-10-19 19:05 - 00086528 _____ (Microsoft Corporation) C:\windows\system32\TSpkg.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\srclient.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00044032 _____ (Microsoft Corporation) C:\windows\system32\cryptbase.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00043520 _____ (Microsoft Corporation) C:\windows\system32\csrsrv.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00029184 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00028160 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\credssp.dll2015-11-10 17:29 - 2015-10-19 19:05 - 00016384 _____ (Microsoft Corporation) C:\windows\system32\ntvdm64.dll2015-11-10 17:29 - 2015-10-19 19:04 - 00338432 _____ (Microsoft Corporation) C:\windows\system32\conhost.exe2015-11-10 17:29 - 2015-10-19 19:04 - 00064000 _____ (Microsoft Corporation) C:\windows\system32\auditpol.exe2015-11-10 17:29 - 2015-10-19 19:04 - 00031232 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe2015-11-10 17:29 - 2015-10-19 19:00 - 00060416 _____ (Microsoft Corporation) C:\windows\system32\msobjs.dll2015-11-10 17:29 - 2015-10-19 18:59 - 00146432 _____ (Microsoft Corporation) C:\windows\system32\msaudite.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00686080 _____ (Microsoft Corporation) C:\windows\system32\adtschema.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\apisetschema.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00006144 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-security-base-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00005120 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-file-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00004608 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processthreads-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-synch-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localregistry-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00004096 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-localization-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-misc-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-memory-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003584 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-heap-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-util-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-string-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-profile-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-io-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-interlocked-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-handle-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-fibers-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-delayload-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-debug-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-datetime-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:53 - 00003072 ____H (Microsoft Corporation) C:\windows\system32\api-ms-win-core-console-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:52 - 03991488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntkrnlpa.exe2015-11-10 17:29 - 2015-10-19 18:52 - 03935680 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntoskrnl.exe2015-11-10 17:29 - 2015-10-19 18:48 - 01311768 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntdll.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00552960 _____ (Microsoft Corporation) C:\windows\SysWOW64\kerberos.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00259584 _____ (Microsoft Corporation) C:\windows\SysWOW64\msv1_0.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00251392 _____ (Microsoft Corporation) C:\windows\SysWOW64\schannel.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00223232 _____ (Microsoft Corporation) C:\windows\SysWOW64\ncrypt.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00172032 _____ (Microsoft Corporation) C:\windows\SysWOW64\wdigest.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00065536 _____ (Microsoft Corporation) C:\windows\SysWOW64\TSpkg.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\srclient.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00036864 _____ (Microsoft Corporation) C:\windows\SysWOW64\cryptbase.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00025600 _____ (Microsoft Corporation) C:\windows\SysWOW64\setup16.exe2015-11-10 17:29 - 2015-10-19 18:45 - 00022016 _____ (Microsoft Corporation) C:\windows\SysWOW64\secur32.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00017408 _____ (Microsoft Corporation) C:\windows\SysWOW64\credssp.dll2015-11-10 17:29 - 2015-10-19 18:45 - 00014336 _____ (Microsoft Corporation) C:\windows\SysWOW64\ntvdm64.dll2015-11-10 17:29 - 2015-10-19 18:44 - 01114112 _____ (Microsoft Corporation) C:\windows\SysWOW64\kernel32.dll2015-11-10 17:29 - 2015-10-19 18:44 - 00665088 _____ (Microsoft Corporation) C:\windows\SysWOW64\rpcrt4.dll2015-11-10 17:29 - 2015-10-19 18:44 - 00274944 _____ (Microsoft Corporation) C:\windows\SysWOW64\KernelBase.dll2015-11-10 17:29 - 2015-10-19 18:44 - 00096768 _____ (Microsoft Corporation) C:\windows\SysWOW64\sspicli.dll2015-11-10 17:29 - 2015-10-19 18:44 - 00050176 _____ (Microsoft Corporation) C:\windows\SysWOW64\auditpol.exe2015-11-10 17:29 - 2015-10-19 18:44 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\wow32.dll2015-11-10 17:29 - 2015-10-19 18:39 - 00146432 _____ (Microsoft Corporation) C:\windows\SysWOW64\msaudite.dll2015-11-10 17:29 - 2015-10-19 18:39 - 00060416 _____ (Microsoft Corporation) C:\windows\SysWOW64\msobjs.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00686080 _____ (Microsoft Corporation) C:\windows\SysWOW64\adtschema.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00006656 _____ (Microsoft Corporation) C:\windows\SysWOW64\apisetschema.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00005120 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00004096 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 18:35 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 17:41 - 00159232 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb.sys2015-11-10 17:29 - 2015-10-19 17:40 - 00290816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb10.sys2015-11-10 17:29 - 2015-10-19 17:40 - 00129024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxsmb20.sys2015-11-10 17:29 - 2015-10-19 17:29 - 00007680 _____ (Microsoft Corporation) C:\windows\SysWOW64\instnm.exe2015-11-10 17:29 - 2015-10-19 17:29 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\user.exe2015-11-10 17:29 - 2015-10-19 17:27 - 00006144 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 17:27 - 00004608 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 17:27 - 00003584 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll2015-11-10 17:29 - 2015-10-19 17:27 - 00003072 ____H (Microsoft Corporation) C:\windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll2015-11-10 17:29 - 2015-09-23 07:15 - 00460776 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys2015-11-10 17:29 - 2015-09-23 07:15 - 00299632 _____ (Microsoft Corporation) C:\windows\system32\bcryptprimitives.dll2015-11-10 17:29 - 2015-09-23 07:09 - 00251000 _____ (Microsoft Corporation) C:\windows\SysWOW64\bcryptprimitives.dll2015-11-10 17:28 - 2015-10-29 11:50 - 00342016 _____ (Microsoft Corporation) C:\windows\system32\apphelp.dll2015-11-10 17:28 - 2015-10-29 11:50 - 00072192 _____ (Microsoft Corporation) C:\windows\system32\aelupsvc.dll2015-11-10 17:28 - 2015-10-29 11:50 - 00023552 _____ (Microsoft Corporation) C:\windows\system32\sdbinst.exe2015-11-10 17:28 - 2015-10-29 11:50 - 00006656 _____ (Microsoft Corporation) C:\windows\system32\shimeng.dll2015-11-10 17:28 - 2015-10-29 11:50 - 00005120 _____ (Microsoft Corporation) C:\windows\SysWOW64\shimeng.dll2015-11-10 17:28 - 2015-10-29 11:49 - 00295936 _____ (Microsoft Corporation) C:\windows\SysWOW64\apphelp.dll2015-11-10 17:28 - 2015-10-29 11:49 - 00020992 _____ (Microsoft Corporation) C:\windows\SysWOW64\sdbinst.exe2015-11-10 17:28 - 2015-10-13 10:41 - 00497664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys2015-11-10 17:28 - 2015-10-13 10:40 - 00118272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tdx.sys2015-11-10 17:28 - 2015-10-12 22:57 - 00950720 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ndis.sys2015-11-10 17:28 - 2015-10-01 12:00 - 00275456 _____ (Microsoft Corporation) C:\windows\system32\InkEd.dll2015-11-10 17:28 - 2015-10-01 12:00 - 00024576 _____ (Microsoft Corporation) C:\windows\system32\jnwmon.dll2015-11-10 17:28 - 2015-10-01 11:50 - 00216064 _____ (Microsoft Corporation) C:\windows\SysWOW64\InkEd.dll2015-11-10 00:36 - 2015-11-10 00:36 - 00002984 _____ C:\windows\System32\Tasks\9E85CAA0-CAE9-4D74-8EB4-85AA1E4A11BB2015-11-10 00:36 - 2015-11-10 00:36 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\Daybreak Game Company2015-11-10 00:09 - 2015-11-10 00:09 - 00000000 ____D C:\windows\SysWOW64\NV2015-11-10 00:09 - 2015-11-10 00:09 - 00000000 ____D C:\windows\system32\NV2015-11-10 00:08 - 2015-11-05 11:13 - 42914096 _____ C:\windows\system32\nvcompiler.dll2015-11-10 00:08 - 2015-11-05 11:13 - 37882488 _____ C:\windows\SysWOW64\nvcompiler.dll2015-11-10 00:08 - 2015-11-05 11:13 - 22308656 _____ (NVIDIA Corporation) C:\windows\system32\nvoglv64.dll2015-11-10 00:08 - 2015-11-05 11:13 - 18362160 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglv32.dll2015-11-10 00:08 - 2015-11-05 11:13 - 17515208 _____ (NVIDIA Corporation) C:\windows\system32\nvwgf2umx.dll2015-11-10 00:08 - 2015-11-05 11:13 - 16553568 _____ (NVIDIA Corporation) C:\windows\system32\nvopencl.dll2015-11-10 00:08 - 2015-11-05 11:13 - 15717864 _____ (NVIDIA Corporation) C:\windows\system32\nvd3dumx.dll2015-11-10 00:08 - 2015-11-05 11:13 - 15121784 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvwgf2um.dll2015-11-10 00:08 - 2015-11-05 11:13 - 14835872 _____ (NVIDIA Corporation) C:\windows\system32\nvcuda.dll2015-11-10 00:08 - 2015-11-05 11:13 - 13527248 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvopencl.dll2015-11-10 00:08 - 2015-11-05 11:13 - 12770752 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvd3dum.dll2015-11-10 00:08 - 2015-11-05 11:13 - 12034248 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuda.dll2015-11-10 00:08 - 2015-11-05 11:13 - 11130488 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvlddmkm.sys2015-11-10 00:08 - 2015-11-05 11:13 - 02870392 _____ (NVIDIA Corporation) C:\windows\system32\nvcuvid.dll2015-11-10 00:08 - 2015-11-05 11:13 - 02490488 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvcuvid.dll2015-11-10 00:08 - 2015-11-05 11:13 - 01905272 _____ (NVIDIA Corporation) C:\windows\system32\nvdispco6435891.dll2015-11-10 00:08 - 2015-11-05 11:13 - 01564792 _____ (NVIDIA Corporation) C:\windows\system32\nvdispgenco6435891.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00877360 _____ (NVIDIA Corporation) C:\windows\system32\NvFBC64.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00861816 _____ (NVIDIA Corporation) C:\windows\system32\NvIFR64.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00689272 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvFBC.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00673912 _____ (NVIDIA Corporation) C:\windows\SysWOW64\NvIFR.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00151368 _____ (NVIDIA Corporation) C:\windows\system32\nvoglshim64.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00128696 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvoglshim32.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00069416 _____ (NVIDIA Corporation) C:\windows\SysWOW64\nvaudcap32v.dll2015-11-10 00:08 - 2015-11-05 11:13 - 00050472 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvvad64v.sys2015-11-10 00:08 - 2015-11-05 11:13 - 00031352 _____ (NVIDIA Corporation) C:\windows\system32\Drivers\nvpciflt.sys2015-11-09 21:25 - 2015-11-09 21:25 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox==================== One Month Modified files and folders ========(If an entry is included in the fixlist, the file/folder will be moved.)2015-12-09 15:17 - 2012-10-28 23:50 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\Skype2015-12-09 15:16 - 2015-01-18 18:00 - 00000838 _____ C:\windows\Tasks\Adobe Flash Player Updater.job2015-12-09 15:12 - 2009-07-13 22:45 - 00031712 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A02015-12-09 15:12 - 2009-07-13 22:45 - 00031712 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A02015-12-09 15:06 - 2015-06-05 07:09 - 00000634 _____ C:\windows\Tasks\G2MUploadTask-S-1-5-21-3234211791-2759061018-4055047508-1001.job2015-12-09 15:04 - 2014-07-13 17:07 - 00000000 ____D C:\Users\Jorge\AppData\Local\LogMeIn Hamachi2015-12-09 15:04 - 2013-05-06 20:46 - 00000000 ___RD C:\Users\Jorge\Dropbox2015-12-09 15:04 - 2013-05-06 20:45 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\Dropbox2015-12-09 15:04 - 2012-04-25 20:07 - 00000000 ____D C:\ProgramData\Bigfoot Networks2015-12-09 15:03 - 2014-09-07 22:35 - 00000000 ____D C:\ProgramData\VMware2015-12-09 15:03 - 2012-11-30 15:09 - 00001032 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job2015-12-09 15:02 - 2009-07-13 23:08 - 00000006 ____H C:\windows\Tasks\SA.DAT2015-12-09 15:01 - 2015-06-28 14:50 - 00000960 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3234211791-2759061018-4055047508-1001UA.job2015-12-09 15:00 - 2012-10-25 22:59 - 00000000 ___HD C:\Users\Jorge\AppData\Roaming\.purple2015-12-09 15:00 - 2009-07-13 22:45 - 00000000 ____D C:\windows\Setup2015-12-09 14:43 - 2015-05-27 10:07 - 00000538 _____ C:\windows\Tasks\G2MUpdateTask-S-1-5-21-3234211791-2759061018-4055047508-1001.job2015-12-09 14:34 - 2012-11-30 15:09 - 00001036 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job2015-12-09 14:13 - 2013-04-18 21:11 - 00000000 ____D C:\Users\Jorge\AppData\Local\Apps\2.02015-12-09 13:49 - 2013-08-17 03:44 - 00000928 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3234211791-2759061018-4055047508-1001UA.job2015-12-09 04:51 - 2009-07-13 21:20 - 00000000 ____D C:\Windows2015-12-09 04:49 - 2013-08-17 03:44 - 00000906 _____ C:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3234211791-2759061018-4055047508-1001Core.job2015-12-09 04:43 - 2012-04-24 20:35 - 00762104 _____ C:\windows\system32\perfh00A.dat2015-12-09 04:43 - 2012-04-24 20:35 - 00164410 _____ C:\windows\system32\perfc00A.dat2015-12-09 04:43 - 2009-07-13 23:13 - 01717320 _____ C:\windows\system32\PerfStringBackup.INI2015-12-09 04:43 - 2009-07-13 21:20 - 00000000 ____D C:\windows\inf2015-12-09 02:00 - 2015-09-05 01:33 - 00000000 ____D C:\Users\Jorge\AppData\Local\Adobe2015-12-09 01:50 - 2009-07-13 20:34 - 00000252 _____ C:\windows\system.ini2015-12-09 01:19 - 2009-07-13 22:45 - 05028104 _____ C:\windows\system32\FNTCACHE.DAT2015-12-09 01:16 - 2015-06-07 00:23 - 00295518 _____ C:\windows\ntbtlog.txt2015-12-09 01:14 - 2013-03-17 03:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight2015-12-09 01:14 - 2013-03-17 03:00 - 00000000 ____D C:\Program Files\Microsoft Silverlight2015-12-09 01:14 - 2013-03-17 03:00 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight2015-12-09 01:13 - 2012-11-14 22:03 - 00000000 ____D C:\ProgramData\Microsoft Help2015-12-09 01:09 - 2015-08-25 07:40 - 00002016 ____H C:\Users\Jorge\Documents\Default.rdp2015-12-09 01:09 - 2012-10-26 03:02 - 00000000 ____D C:\Program Files (x86)\Steam2015-12-08 23:16 - 2015-01-18 18:00 - 00003776 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater2015-12-08 23:16 - 2012-10-26 02:40 - 00796864 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe2015-12-08 23:16 - 2012-04-25 22:14 - 00142528 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl2015-12-08 21:40 - 2012-12-15 18:58 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\Audacity2015-12-08 17:10 - 2015-06-28 14:50 - 00000908 _____ C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3234211791-2759061018-4055047508-1001Core.job2015-12-08 02:00 - 2013-06-12 00:21 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\TS3Client2015-12-07 22:24 - 2012-10-26 02:19 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service2015-12-07 22:24 - 2009-07-13 23:32 - 00000000 ____D C:\windows\Performance2015-12-07 22:24 - 2009-07-13 21:20 - 00000000 ____D C:\windows\tracing2015-12-07 02:36 - 2013-01-16 22:36 - 00002329 _____ C:\Users\Public\Desktop\Google Chrome.lnk2015-12-04 19:29 - 2012-11-30 15:09 - 00004032 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA2015-12-04 19:29 - 2012-11-30 15:09 - 00003780 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore2015-12-04 02:06 - 2013-07-04 10:29 - 00000000 ____D C:\Users\Jorge\AppData\Local\Psi2015-12-04 00:40 - 2013-01-16 22:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome2015-12-04 00:40 - 2012-10-26 02:04 - 00000000 ____D C:\Users\Jorge2015-12-04 00:28 - 2009-07-13 21:20 - 00000000 ____D C:\windows\PolicyDefinitions2015-12-03 11:25 - 2012-10-28 23:50 - 00000000 ____D C:\ProgramData\Skype2015-12-03 11:08 - 2012-10-26 02:31 - 00000000 ____D C:\Users\Jorge\Documents\Youcam2015-12-03 03:27 - 2009-07-13 21:20 - 00000000 ____D C:\windows\Globalization2015-12-02 03:11 - 2013-05-03 13:02 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\gtk-2.02015-12-01 23:16 - 2009-07-13 21:20 - 00000000 ____D C:\windows\Branding2015-12-01 11:45 - 2015-11-06 20:57 - 00000000 ____D C:\Users\Jorge\Downloads\PopcornTime2015-12-01 00:16 - 2009-07-13 23:32 - 00000000 ____D C:\windows\addins2015-11-30 23:47 - 2012-11-22 03:24 - 00000000 ____D C:\ProgramData\Malwarebytes2015-11-30 23:31 - 2011-02-14 15:43 - 00000000 ____D C:\windows\Panther2015-11-30 23:07 - 2012-10-25 23:04 - 00000000 ____D C:\Users\Jorge\AppData\Roaming\ICQ2015-11-30 10:18 - 2012-04-24 21:11 - 23864880 _____ (Macrovision Corporation) C:\Users\Public\Desktop\TurboBoostMonitor.exe2015-11-30 10:13 - 2015-06-21 16:41 - 01419384 _____ C:\Users\Jorge\Downloads\80176-670969-jdownloader.exe2015-11-30 10:13 - 2015-01-19 12:39 - 07499328 _____ (Tim Kosse) C:\Users\Jorge\Downloads\FileZilla_3.10.0.2_win32-setup.exe2015-11-30 10:13 - 2014-10-09 11:01 - 07176070 _____ (Tim Kosse) C:\Users\Jorge\Downloads\FileZilla_3.9.0.5_win32-setup.exe2015-11-30 10:13 - 2014-09-23 12:29 - 03667488 _____ (VIP Technologies ) C:\Users\Jorge\Downloads\vip72socks-set.exe2015-11-30 10:13 - 2014-08-21 02:04 - 07170737 _____ (Tim Kosse) C:\Users\Jorge\Downloads\FileZilla_3.9.0.3_win32-setup.exe2015-11-30 10:13 - 2014-08-10 17:54 - 06131712 _____ (OpenVPN Technologies) C:\Users\Jorge\Downloads\privatetunnel-win-2.3.exe2015-11-27 03:26 - 2015-03-05 00:43 - 00000000 ____D C:\Users\Jorge\Desktop\Internet Marketing2015-11-27 02:39 - 2015-06-11 15:06 - 00000000 ____D C:\Users\Jorge\AppData\LocalLow\LastPass2015-11-26 23:50 - 2013-09-15 19:49 - 00007616 _____ C:\Users\Jorge\AppData\Local\Resmon.ResmonCfg2015-11-23 22:20 - 2015-03-05 18:42 - 00000000 ____D C:\Users\Jorge\AppData\Local\Popcorn-Time2015-11-13 00:34 - 2013-06-12 00:15 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client2015-11-13 00:09 - 2013-10-25 13:51 - 00000000 ____D C:\Users\Jorge\Desktop\Random2015-11-13 00:06 - 2013-01-21 23:57 - 00000000 ____D C:\Users\Jorge\Desktop\Production2015-11-12 11:51 - 2014-07-13 17:07 - 00034720 ____H (LogMeIn, Inc.) C:\windows\system32\hamachi.sys2015-11-11 16:23 - 2012-04-24 20:23 - 00000000 ____D C:\Program Files\Windows Journal2015-11-11 12:00 - 2012-11-02 11:23 - 01691906 _____ C:\windows\SysWOW64\PerfStringBackup.INI2015-11-10 00:36 - 2012-10-26 02:36 - 00000000 ____D C:\Users\Jorge\AppData\Local\ElevatedDiagnostics2015-11-10 00:09 - 2013-02-14 22:55 - 00000000 ____D C:\Temp2015-11-10 00:09 - 2012-04-25 20:03 - 00000000 ____D C:\ProgramData\NVIDIA==================== Files in the root of some directories =======2015-12-02 16:33 - 2015-12-02 16:33 - 0000132 _____ () C:\Users\Jorge\AppData\Roaming\Adobe IllExport Filter CS6 Prefs2015-09-09 15:28 - 2015-09-13 23:29 - 0000132 _____ () C:\Users\Jorge\AppData\Roaming\Adobe PNG Format CS6 Prefs2013-05-30 13:14 - 2013-05-30 13:14 - 0000000 ____H () C:\Users\Jorge\AppData\Roaming\begin.txt2015-11-15 04:20 - 2015-12-07 23:38 - 2520755 _____ () C:\Users\Jorge\AppData\Roaming\jorge-ms_642013-06-20 22:42 - 2013-06-21 18:55 - 0002391 ____H () C:\Users\Jorge\AppData\Roaming\net.telestream.producer.xml2015-10-05 14:44 - 2015-10-05 14:44 - 0000004 _____ () C:\Users\Jorge\AppData\Roaming\steam_md4.dat2013-12-19 00:48 - 2013-12-19 00:48 - 0000030 ____H () C:\Users\Jorge\AppData\Roaming\WB.CFG2015-09-09 16:54 - 2015-10-20 00:24 - 0001456 _____ () C:\Users\Jorge\AppData\Local\Adobe Save for Web 13.0 Prefs2015-01-23 02:31 - 2015-01-23 02:31 - 0000600 _____ () C:\Users\Jorge\AppData\Local\PUTTY.RND2015-09-11 00:38 - 2015-09-11 00:38 - 0000857 _____ () C:\Users\Jorge\AppData\Local\recently-used.xbel2013-09-15 19:49 - 2015-11-26 23:50 - 0007616 _____ () C:\Users\Jorge\AppData\Local\Resmon.ResmonCfg2015-05-03 04:08 - 2015-05-03 04:08 - 0000000 _____ () C:\Users\Jorge\AppData\Local\7C533208-C60D-4CC0-B0D4-1EEF88698DB02013-02-28 20:55 - 2013-02-28 20:55 - 0000095 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc2015-09-09 03:02 - 2015-09-09 03:02 - 0004973 _____ () C:\ProgramData\uowzbvmm.cjfFiles to move or delete:====================C:\Users\Jorge\SSLLib 1.1.dllSome files in TEMP:====================C:\Users\Jorge\AppData\Local\Temp\dllnt_dump.dllC:\Users\Jorge\AppData\Local\Temp\dropbox_sqlite_ext.5f3e3153-5bce-5766-8f84-3e3e7ecf0d81.tmp_volwz.dllC:\Users\Jorge\AppData\Local\Temp\hrloyc.exeC:\Users\Jorge\AppData\Local\Temp\sprh.exe==================== Bamital & volsnap =================(There is no automatic fix for files that do not pass verification.)C:\windows\system32\winlogon.exe => File is digitally signedC:\windows\system32\wininit.exe => File is digitally signedC:\windows\SysWOW64\wininit.exe => File is digitally signedC:\windows\explorer.exe => File is digitally signedC:\windows\SysWOW64\explorer.exe => File is digitally signedC:\windows\system32\svchost.exe => File is digitally signedC:\windows\SysWOW64\svchost.exe => File is digitally signedC:\windows\system32\services.exe => File is digitally signedC:\windows\system32\User32.dll => File is digitally signedC:\windows\SysWOW64\User32.dll => File is digitally signedC:\windows\system32\userinit.exe => File is digitally signedC:\windows\SysWOW64\userinit.exe => File is digitally signedC:\windows\system32\rpcss.dll => File is digitally signedC:\windows\system32\dnsapi.dll => File is digitally signedC:\windows\SysWOW64\dnsapi.dll => File is digitally signedC:\windows\system32\Drivers\volsnap.sys => File is digitally signedLastRegBack: 2015-10-14 06:56==================== End of FRST.txt ============================ 2ff7e9595c


0 views0 comments

Recent Posts

See All

Gacha club apk tudo ilimitado

Gacha Club APK Unlimited Tudo: um guia completo Se você é fã de jogos no estilo anime, deve ter ouvido falar do Gacha Club, um RPG de...

Comments


bottom of page