Jump to content

Bitcoin trojan

thesuker

By thesuker
in Resolved Malware Removal Logs

 Share

Recommended Posts

thesuker

thesuker

Posted
Posted

Hi, yesterday I noticed my pc was running sluggishsly and after using malwarebytes anti-malware discovered I have a bitcoin mining trojan in C:/Users/USUARIO/AppData/Roaming/Microsoft/SystemCertificates/My/Updater.  Unfortunately the programme was unable to remove it.  I can terminate it easily in the system task manager, but I have to do it every time I turn on the PC.  Could you please help me remove it completely?

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

Hello and post-32477-1261866970.gif

 

P2P/Piracy Warning:

 

   

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.

Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Kevin

Link to post
Share on other sites
thesuker

thesuker

Posted
  • Author
Posted

The trojan wasn't running at the moment of the scan, terminated the process myself to use the pc.

 

-----------------------------------------------------------------------------------------------------------------------------------------------

 

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-12-2013
Ran by USUARIO (administrator) on USUARIO-TOSH on 29-12-2013 18:34:30
Running from C:\Users\USUARIO\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Spanish Modern Sort
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\TecoService.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TECO\Teco.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
() C:\Users\USUARIO\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(TOSHIBA Corporation) C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [] - [x]
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12446824 2012-01-31] (Realtek Semiconductor)
HKLM\...\Run: [synTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2867984 2011-12-22] (Synaptics Incorporated)
HKLM\...\Run: [sRS Premium Sound HD] - C:\Program Files\SRS Labs\SRS Control Panel\SRS_Premium_Sound_HD.zip [223180 2012-02-06] ()
HKLM\...\Run: [TPwrMain] - C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe [590256 2011-09-22] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] - C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [989056 2011-12-13] (TOSHIBA Corporation)
HKLM\...\Run: [Teco] - C:\Program Files\TOSHIBA\TECO\Teco.exe [1548208 2011-11-24] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] - C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710560 2011-11-25] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] - C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] - C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [Toshiba Registration] - C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2012-03-05] (Toshiba Europe GmbH)
HKLM\...\Run: [XboxStat] - C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe [825184 2009-09-30] (Microsoft Corporation)
HKLM\...\Run: [start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech Inc.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NBAgent] - C:\Program Files (x86)\Nero\Nero 11\Nero BackItUp\NBAgent.exe [1492264 2011-11-18] (Nero AG)
HKLM-x32\...\Run: [iTSecMng] - C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe [80840 2011-04-01] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [uSB3MON] - C:\Program Files (x86)\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-05] (Intel Corporation)
HKLM-x32\...\Run: [ToshibaServiceStation] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-11] (TOSHIBA Corporation)
HKLM-x32\...\Run: [TSleepSrv] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Sleep Utility\TSleepSrv.exe [253312 2011-11-21] (TOSHIBA)
HKLM-x32\...\Run: [bCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM-x32\...\Run: [startCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642656 2013-03-28] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [sunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3671872 2012-04-17] (DT Soft Ltd)
HKCU\...\Run: [spotify Web Helper] - C:\Users\USUARIO\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1193176 2012-10-13] ()
HKCU\...\Run: [] - C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
MountPoints2: {a1c3f928-c9ed-11e1-9ca6-00266c14aca8} - F:\Setup.exe
HKU\Default\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
HKU\Default User\...\Run: [TOPI.EXE] - C:\Program Files (x86)\TOSHIBA\TOSHIBA Online Product Information\TOPI.exe [846936 2011-05-16] (TOSHIBA)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com/ig/redirectdomain?brand=TEUA&bmod=TEUA
SearchScopes: HKLM - DefaultScope {59E665BB-E872-4580-AE8A-43896E814AEA} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {59E665BB-E872-4580-AE8A-43896E814AEA} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM-x32 - DefaultScope {59E665BB-E872-4580-AE8A-43896E814AEA} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {59E665BB-E872-4580-AE8A-43896E814AEA} URL = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7TEUA;
SearchScopes: HKCU - DefaultScope {59E665BB-E872-4580-AE8A-43896E814AEA} URL =
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\x64\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Aplicación auxiliar de inicio de sesión de Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: TOSHIBA Media Controller Plug-in - {F3C88694-EFFA-4d78-B409-54B7B2535B14} - C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll (<TOSHIBA>)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 212.89.0.31

FireFox:
========
FF ProfilePath: C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*'))%20%7B%20return%20'PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.0 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.0 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: 4game.com/plugin - C:\Program Files (x86)\4game\4game\npplugin4game.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll (Ubisoft)
FF Extension: DownloadHelper - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
FF Extension: Bitdefender QuickScan - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF Extension: feedly - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\feedly@devhd.xpi
FF Extension: Image Download Ⅱ - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\imagedownload@Merci.chao.xpi
FF Extension: ProxMate - Proxy on steroids! - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\jid1-QpHD8URtZWJC2A@jetpack.xpi
FF Extension: Fox To Phone - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\sendtophone@martinezdelizarrondo.com.xpi
FF Extension: Adblock Plus - C:\Users\USUARIO\AppData\Roaming\Mozilla\Firefox\Profiles\q9r4gviv.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome:
=======


CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Nero Kwik Media Helper) - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (VLC Web Plugin) - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 7.0.50.255) - C:\windows\SysWOW64\npDeployJava1.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll No File
CHR Extension: (Adblock Plus) - C:\Users\USUARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.6.1_0
CHR Extension: (Allow copy-paste action on websites.) - C:\Users\USUARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\mkklbhjangmgebkkjkgcaehkjiemjkpm\0.958_0
CHR Extension: (Google Wallet) - C:\Users\USUARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (Bitdefender QuickScan) - C:\Users\USUARIO\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdnkcidphdcakpkheohlhocaicfamjie\0.9.9.131_0

==================== Services (Whitelisted) =================

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
S2 PinnacleUpdateSvc; C:\Program Files (x86)\PowerUp Software\Pinnacle Game Profiler\pinnacle_updater.exe [430080 2011-05-09] (PowerUp Software, LLC)
S3 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)

==================== Drivers (Whitelisted) ====================

S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2012-07-10] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-07-09] (DT Soft Ltd)
S3 L6UX1; C:\Windows\System32\Drivers\L6UX164.sys [772224 2012-06-29] (Line 6)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2012-07-10] ()
R3 SmbDrv; C:\Windows\System32\DRIVERS\Smb_driver.sys [21264 2011-12-22] (Synaptics Incorporated)
S3 Tosrfcom; No ImagePath
R3 TS_ARN5416; C:\Windows\System32\DRIVERS\ts_athrx.sys [3543752 2013-07-10] (TamoSoft)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-29 18:34 - 2013-12-29 18:35 - 00022248 _____ C:\Users\USUARIO\Desktop\FRST.txt
2013-12-29 18:34 - 2013-12-29 18:34 - 00000000 ____D C:\FRST
2013-12-29 18:33 - 2013-12-29 18:33 - 01931262 _____ (Farbar) C:\Users\USUARIO\Desktop\FRST64.exe
2013-12-29 10:26 - 2013-12-29 10:39 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-28 23:40 - 2013-12-29 10:26 - 00117464 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-28 23:38 - 2013-12-29 10:39 - 00000000 ____D C:\Users\USUARIO\Desktop\mbar
2013-12-28 23:38 - 2013-12-29 10:26 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-12-28 23:37 - 2013-12-28 23:38 - 12582688 _____ (Malwarebytes Corp.) C:\Users\USUARIO\Downloads\mbar-1.07.0.1008.exe
2013-12-28 23:34 - 2013-12-28 23:36 - 47286211 _____ (pcsafedoctor.com, Inc.                                      ) C:\Users\USUARIO\Downloads\PCSafeDoctor_Setup.exe
2013-12-28 23:24 - 2013-12-28 23:50 - 00000000 ____D C:\Program Files (x86)\Bit Coin Miner Removal Tool
2013-12-28 23:24 - 2013-10-14 11:57 - 01122304 _____ (The OpenSSL Project, http://www.openssl.org/) C:\windows\SysWOW64\libeay32.dll
2013-12-28 23:24 - 2013-10-14 11:57 - 00356352 _____ (eSellerate Inc.) C:\windows\eSellerateEngine.dll
2013-12-28 23:24 - 2013-10-14 11:57 - 00274432 _____ (The OpenSSL Project, http://www.openssl.org/) C:\windows\SysWOW64\ssleay32.dll
2013-12-28 23:24 - 2013-10-14 11:57 - 00081920 _____ (eSellerate Inc.) C:\windows\eSellerateControl350.dll
2013-12-28 23:23 - 2013-12-28 23:23 - 04557608 _____ (Security Stronghold                                         ) C:\Users\USUARIO\Downloads\BitCoinMinerRemovalTool.exe
2013-12-28 23:20 - 2013-12-28 23:20 - 00000221 _____ C:\Users\USUARIO\Desktop\Dungeon Defenders.url
2013-12-28 23:03 - 2013-12-28 23:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\USUARIO\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-28 23:03 - 2013-12-28 23:03 - 00001084 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-28 23:03 - 2013-12-28 23:03 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\Malwarebytes
2013-12-28 23:03 - 2013-12-28 23:03 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-28 23:03 - 2013-12-28 23:03 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-28 23:03 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-12-28 21:30 - 2012-02-19 17:24 - 00062761 ____N C:\Users\USUARIO\Desktop\Ronal.The.Barbarian.2011.1080p.BluRay.x264-FRWL.srt
2013-12-28 17:52 - 2013-12-28 17:52 - 00038317 _____ C:\Users\USUARIO\Downloads\pg61.epub
2013-12-28 17:07 - 2013-12-28 17:07 - 02405624 _____ (Trend Micro Inc.) C:\Users\USUARIO\Downloads\HousecallLauncher64.exe
2013-12-28 17:07 - 2013-12-28 17:07 - 00000036 _____ C:\Users\USUARIO\AppData\Local\housecall.guid.cache
2013-12-27 19:50 - 2013-12-27 19:50 - 00357076 _____ C:\Users\USUARIO\Downloads\Recount-v4.0.1_release.zip
2013-12-27 12:53 - 2013-12-27 12:53 - 00002521 _____ C:\Users\USUARIO\Desktop\Dungeon Defenders.lnk
2013-12-26 15:18 - 2013-12-26 15:19 - 00698357 _____ C:\Users\USUARIO\Downloads\GatherMate-v.1.25.zip
2013-12-26 13:11 - 2013-12-26 13:11 - 00000219 _____ C:\Users\USUARIO\Desktop\Left 4 Dead 2.url
2013-12-24 14:23 - 2013-12-24 14:23 - 00000000 ____D C:\Users\USUARIO\AppData\Local\UWebKit
2013-12-22 16:37 - 2013-12-22 18:43 - 620242130 _____ C:\Users\USUARIO\Downloads\Fort Apache - Nuevos conservadores ¿Halcones o buitres_(720p_H.264-AAC).mp4
2013-12-22 16:37 - 2013-12-22 18:39 - 576638304 _____ C:\Users\USUARIO\Downloads\Fort Apache - Venezuela, ¿hacia un chavismo sin Chávez_(720p_H.264-AAC).mp4
2013-12-22 16:37 - 2013-12-22 18:38 - 602845215 _____ C:\Users\USUARIO\Downloads\Fort Apache - Y en eso llegó Fidel, pasado y presente de la Revolución Cubana(720p_H.264-AAC).mp4
2013-12-21 13:36 - 2013-12-21 13:36 - 00170201 _____ C:\Users\USUARIO\Downloads\OneBag3-r131.zip
2013-12-20 15:48 - 2013-12-20 15:52 - 03178998 _____ C:\Users\USUARIO\Downloads\8.DANIEL.zip
2013-12-20 14:37 - 2013-12-20 14:37 - 02106154 _____ C:\Users\USUARIO\Downloads\Carbonite334.zip
2013-12-20 14:17 - 2013-12-20 14:17 - 00216934 _____ C:\Users\USUARIO\Downloads\GearScore.zip
2013-12-19 21:56 - 2013-12-19 21:56 - 00262830 _____ C:\Users\USUARIO\Downloads\Chatter-v1.2.11-4-g76cd1e5.zip
2013-12-19 21:53 - 2013-12-19 21:53 - 00254790 _____ C:\Users\USUARIO\Downloads\Bartender4-4.4.2-12-g94f3b58.zip
2013-12-19 21:47 - 2013-12-19 21:47 - 00805919 _____ C:\Users\USUARIO\Downloads\PitBull4-v4.0.0-beta11-12-ga36962c.zip
2013-12-19 21:45 - 2013-12-19 21:46 - 00287136 _____ C:\Users\USUARIO\Downloads\Grid-r1318.zip
2013-12-19 21:45 - 2013-12-19 21:45 - 00010862 _____ C:\Users\USUARIO\Downloads\PitBull4_ThreatLine-r7.zip
2013-12-19 21:43 - 2013-12-19 21:43 - 00104079 _____ C:\Users\USUARIO\Downloads\Ace2-r1101.zip
2013-12-19 21:36 - 2013-12-19 21:36 - 00011989 _____ C:\Users\USUARIO\Downloads\GridStatusHots-3.32.zip
2013-12-17 19:51 - 2013-12-17 19:52 - 46772224 _____ C:\Users\USUARIO\Downloads\La cadena perpetua no sirve para proteger a la sociedad - Pablo Iglesias_sd.mp4
2013-12-17 19:50 - 2013-12-17 19:55 - 529177726 _____ C:\Users\USUARIO\Downloads\Fort Apache - España en el purgatorio, 2 años de Rajoy(720p_H.264-AAC).mp4
2013-12-17 19:49 - 2013-12-17 19:55 - 551922591 _____ C:\Users\USUARIO\Downloads\Fort Apache - Europa, ¿infierno o tierra prometida_(720p_H.264-AAC).mp4
2013-12-16 19:34 - 2013-12-16 19:46 - 00001118 _____ C:\Users\USUARIO\Desktop\wow.lnk
2013-12-16 19:25 - 2013-12-16 19:25 - 20891616 _____ C:\Users\USUARIO\Downloads\WoW-3.3.3.11723-to-3.3.5.12213-esES-patch.exe
2013-12-16 19:25 - 2013-12-16 19:25 - 13078192 _____ C:\Users\USUARIO\Downloads\WoW-3.3.5.12213-to-3.3.5.12340-esES-patch.exe
2013-12-16 19:25 - 2013-12-16 19:25 - 02710424 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.5.12213-to-3.3.5.12340-esES-downloader.exe
2013-12-16 19:24 - 2013-12-16 19:24 - 05088256 _____ C:\Users\USUARIO\Downloads\WoW-3.3.3.11685-to-3.3.3.11723-esES-patch.exe
2013-12-16 19:24 - 2013-12-16 19:24 - 02711024 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.3.11723-to-3.3.5.12213-esES-downloader.exe
2013-12-16 19:23 - 2013-12-16 19:23 - 02640192 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.3.11685-to-3.3.3.11723-esES-downloader.exe
2013-12-16 19:21 - 2013-12-16 19:21 - 00000000 ____D C:\Users\USUARIO\Downloads\Updates
2013-12-16 19:20 - 2013-12-16 19:20 - 02654376 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.2.11403-to-3.3.3.11685-esES-downloader.exe
2013-12-16 19:16 - 2013-12-16 19:20 - 189290651 _____ C:\Users\USUARIO\Downloads\WoW-3.3.0.11159-to-3.3.2.11403-esES-patch.exe
2013-12-16 19:16 - 2013-12-16 19:16 - 02350144 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.0.11159-to-3.3.2.11403-esES-downloader.exe
2013-12-16 19:15 - 2013-12-16 19:16 - 05501944 _____ C:\Users\USUARIO\Downloads\WoW-3.3.0.10958-to-3.3.0.11159-esES-patch.exe
2013-12-16 19:15 - 2013-12-16 19:15 - 02336088 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.0.10958-to-3.3.0.11159-esES-downloader.exe
2013-12-16 15:32 - 2013-12-16 15:32 - 02400016 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.2.10505-to-3.3.0.10958-esES-downloader.exe
2013-12-16 15:31 - 2013-12-16 15:31 - 08381240 _____ C:\Users\USUARIO\Downloads\WoW-3.2.2.10482-to-3.2.2.10505-esES-patch.exe
2013-12-16 15:31 - 2013-12-16 15:31 - 02067208 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.2.10482-to-3.2.2.10505-esES-downloader.exe
2013-12-16 14:58 - 2013-12-16 15:31 - 66352480 _____ C:\Users\USUARIO\Downloads\WoW-3.2.0.10314-to-3.2.2.10482-esES-patch.exe
2013-12-16 14:56 - 2013-12-16 14:58 - 02071656 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.0.10314-to-3.2.2.10482-esES-downloader.exe
2013-12-16 13:32 - 2013-12-16 13:32 - 08400600 _____ C:\Users\USUARIO\Downloads\WoW-3.2.0.10192-to-3.2.0.10314-esES-patch.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 02067232 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.0.10192-to-3.2.0.10314-esES-downloader.exe
2013-12-16 13:30 - 2013-12-16 15:31 - 00262144 _____ C:\Users\USUARIO\Downloads\bad.piece
2013-12-16 12:54 - 2013-12-16 13:31 - 1739803131 _____ C:\Users\USUARIO\Downloads\WoW-3.2.0-esES-patch.exe
2013-12-16 12:54 - 2013-12-16 12:54 - 02199256 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.0-esES-downloader.exe
2013-12-16 11:45 - 2013-12-16 12:53 - 00000000 ____D C:\Users\Public\Games
2013-12-16 11:44 - 2013-12-16 11:44 - 01663656 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\InstallWoW.exe
2013-12-16 10:24 - 2013-12-16 10:41 - 00000000 ____D C:\Users\USUARIO\Documents\dd
2013-12-15 21:25 - 2013-12-15 21:26 - 53979648 _____ C:\Users\USUARIO\Downloads\calibre-1.15.0.msi
2013-12-14 10:22 - 2013-12-14 09:48 - 00967156 ____N C:\Users\USUARIO\Desktop\The_Long_Walk_to_Freedom_-_Nelson_Mandela.epub
2013-12-13 18:03 - 2013-12-13 18:03 - 00000222 _____ C:\Users\USUARIO\Desktop\Strike Suit Infinity.url
2013-12-13 13:19 - 2013-12-13 13:22 - 00000000 ____D C:\Users\USUARIO\Downloads\Star Wars XWA Win7x64
2013-12-13 11:31 - 2013-12-27 21:05 - 00000000 ____D C:\teamspeak3-server_win64
2013-12-13 11:31 - 2013-12-13 11:31 - 05009890 _____ C:\Users\USUARIO\Downloads\teamspeak3-server_win64-3.0.10.2.zip
2013-12-12 19:20 - 2013-12-12 19:20 - 00000000 ____D C:\Users\USUARIO\Documents\vampiro
2013-12-12 11:53 - 2013-12-12 11:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-11 22:24 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-11 22:24 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-11 22:24 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-11 22:24 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-11 22:23 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-11 22:23 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-11 22:23 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-11 22:23 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-11 22:23 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-11 22:23 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-11 22:23 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-11 22:23 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-11 22:23 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-11 22:23 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-11 22:23 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-11 22:23 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-11 22:23 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-11 22:23 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-11 22:23 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-11 22:23 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-11 22:23 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-11 22:23 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-11 22:23 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-11 22:23 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-11 22:23 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-11 22:23 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-11 22:23 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-11 22:23 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-11 22:23 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-11 22:23 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-11 22:23 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-11 22:23 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-11 22:23 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-11 22:23 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-11 22:23 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-11 21:42 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-11 21:42 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-11 21:42 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-11 21:42 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-11 21:42 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-11 21:42 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-11 21:42 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-11 21:42 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-11 21:42 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-11 21:42 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-11 21:42 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-11 21:42 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-11 21:42 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-11 21:42 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-11 21:42 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-11 21:42 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-11 21:42 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-11 21:42 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-11 21:42 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-10 10:40 - 2013-12-10 10:40 - 00002714 _____ C:\Users\USUARIO\Desktop\Cutting Edge Third Edition Intermediate DVD-ROM.lnk
2013-12-10 10:40 - 2013-12-10 10:40 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2013-12-10 10:40 - 2013-12-10 10:40 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pearson
2013-12-09 21:15 - 2013-12-09 21:15 - 01572138 _____ (Egosoft                                                     ) C:\Users\USUARIO\Downloads\x3tc_bonus_package_4.1.01.exe
2013-12-09 20:58 - 2013-12-09 20:58 - 17853294 _____ C:\Users\USUARIO\Downloads\PSCO1_CockpitMod_v1.32(1).rar
2013-12-09 20:55 - 2013-12-09 20:55 - 08379915 _____ (Cycrow                                                      ) C:\Users\USUARIO\Downloads\XPluginManager_Installer.exe
2013-12-09 20:55 - 2012-07-25 19:31 - 01414144 _____ C:\windows\SysWOW64\spk.dll
2013-12-09 20:55 - 2011-03-02 12:43 - 00175616 _____ C:\windows\SysWOW64\unrar.dll
2013-12-09 20:53 - 2013-12-09 20:54 - 17853294 _____ C:\Users\USUARIO\Downloads\PSCO1_CockpitMod_v1.32.rar
2013-12-09 12:49 - 2013-12-09 15:20 - 00000000 ____D C:\Starbound
2013-12-09 11:10 - 2013-12-09 11:10 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\dvdcss
2013-12-08 23:32 - 2013-12-08 23:32 - 00533649 ____R C:\Users\USUARIO\Downloads\Xpadder [5.7].rar
2013-12-08 23:21 - 2013-12-08 23:22 - 00467904 _____ C:\Users\USUARIO\Downloads\XBCDv107.exe
2013-12-08 17:41 - 2013-12-09 20:55 - 00000000 ____D C:\Program Files (x86)\Egosoft
2013-12-05 11:31 - 2013-12-09 12:48 - 00000000 ____D C:\Program Files (x86)\Starbound
2013-12-04 20:17 - 2013-12-04 20:17 - 00000000 ____D C:\Program Files (x86)\Pearson
2013-12-04 18:51 - 2013-12-04 18:51 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-04 13:49 - 2013-12-04 13:49 - 00000022 _____ C:\Users\USUARIO\Documents\gw2jewelry.txt
2013-12-03 23:42 - 2013-10-14 18:00 - 00028368 _____ (Microsoft Corporation) C:\windows\system32\IEUDINIT.EXE
2013-12-03 23:36 - 2013-12-03 23:36 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-03 23:36 - 2013-12-03 23:36 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-03 23:36 - 2013-12-03 23:36 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-03 23:36 - 2013-12-03 23:36 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-03 23:36 - 2013-12-03 23:36 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-03 23:36 - 2013-12-03 23:36 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-03 23:36 - 2013-12-03 23:36 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-03 23:34 - 2013-12-03 23:42 - 00014704 _____ C:\windows\IE11_main.log
2013-12-03 19:47 - 2013-12-20 21:01 - 00000000 ____D C:\Users\USUARIO\Desktop\8.DANIEL
2013-12-03 12:38 - 2013-12-03 12:39 - 08944890 _____ C:\Users\USUARIO\Downloads\Bruce Springsteen~Born in the U.S.A (Demo)(360p_DASH_H.264-AAC).mp4
2013-12-03 12:38 - 2013-12-03 12:38 - 05571516 _____ C:\Users\USUARIO\Downloads\Bruce Springsteen - Born In The U.S.A.(240p_DASH_H.264-AAC).mp4
2013-12-03 10:19 - 2013-12-03 10:20 - 131013409 _____ C:\Users\USUARIO\Downloads\sound-20120514101059(1).zip
2013-12-03 10:15 - 2012-02-07 11:58 - 21056152 _____ C:\Users\USUARIO\Downloads\TC50118300E.exe
2013-12-03 10:15 - 2012-02-06 09:11 - 131613192 _____ C:\Users\USUARIO\Downloads\TC50118100C.exe
2013-12-03 10:15 - 2012-01-30 14:03 - 39922336 _____ C:\Users\USUARIO\Downloads\TC50115200C.exe
2013-12-03 10:09 - 2013-12-03 10:11 - 20938150 _____ C:\Users\USUARIO\Downloads\sound-20120514101514.zip
2013-12-03 10:07 - 2013-12-03 10:12 - 131013409 _____ C:\Users\USUARIO\Downloads\sound-20120514101059.zip
2013-12-03 10:07 - 2013-12-03 10:11 - 39673346 _____ C:\Users\USUARIO\Downloads\sound-20120514090628.zip
2013-12-02 23:31 - 2013-12-02 23:31 - 00000000 ____D C:\Users\Public\Documents\Line 6
2013-12-01 15:18 - 2013-12-01 15:18 - 00003180 _____ C:\windows\System32\Tasks\{22FA125C-8BCD-4AF7-B543-A80CAFBA6A6A}
2013-12-01 14:11 - 2013-12-01 14:43 - 35730180 _____ (Realtek Semiconductor Corp.) C:\Users\USUARIO\Downloads\64bit_Win7_Win8_Win81_R273.exe
2013-11-30 16:13 - 2013-11-30 16:13 - 05877760 _____ C:\Users\USUARIO\Downloads\hamachi(1).msi

==================== One Month Modified Files and Folders =======

2013-12-29 18:35 - 2013-12-29 18:34 - 00022248 _____ C:\Users\USUARIO\Desktop\FRST.txt
2013-12-29 18:34 - 2013-12-29 18:34 - 00000000 ____D C:\FRST
2013-12-29 18:33 - 2013-12-29 18:33 - 01931262 _____ (Farbar) C:\Users\USUARIO\Desktop\FRST64.exe
2013-12-29 18:31 - 2012-05-04 12:33 - 02014096 _____ C:\windows\WindowsUpdate.log
2013-12-29 18:14 - 2012-03-05 22:43 - 00000838 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-12-29 17:53 - 2012-03-05 22:53 - 00001114 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-29 17:26 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-29 17:26 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-29 17:21 - 2012-12-15 17:06 - 00002896 _____ C:\windows\System32\Tasks\AutoKMS
2013-12-29 17:21 - 2012-12-15 17:05 - 00000266 _____ C:\windows\Tasks\AutoKMS.job
2013-12-29 17:21 - 2012-08-26 01:11 - 00000000 ____D C:\Users\USUARIO\AppData\Local\LogMeIn Hamachi
2013-12-29 17:20 - 2012-03-05 22:53 - 00001110 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-29 17:20 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-12-29 17:20 - 2009-07-14 05:51 - 00185187 _____ C:\windows\setupact.log
2013-12-29 14:05 - 2012-07-12 19:15 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\vlc
2013-12-29 12:32 - 2010-11-21 08:09 - 00745938 _____ C:\windows\system32\perfh00A.dat
2013-12-29 12:32 - 2010-11-21 08:09 - 00158148 _____ C:\windows\system32\perfc00A.dat
2013-12-29 12:32 - 2009-07-14 06:13 - 01672138 _____ C:\windows\system32\PerfStringBackup.INI
2013-12-29 10:39 - 2013-12-29 10:26 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-12-29 10:39 - 2013-12-28 23:38 - 00000000 ____D C:\Users\USUARIO\Desktop\mbar
2013-12-29 10:26 - 2013-12-28 23:40 - 00117464 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\MBAMSwissArmy.sys
2013-12-29 10:26 - 2013-12-28 23:38 - 00089304 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbamchameleon.sys
2013-12-29 10:22 - 2012-11-02 16:09 - 00119296 _____ C:\windows\SysWOW64\zlib.dll
2013-12-29 01:19 - 2013-03-05 12:00 - 00000000 ____D C:\Program Files (x86)\Steam
2013-12-28 23:55 - 2010-11-21 04:47 - 00086574 _____ C:\windows\PFRO.log
2013-12-28 23:50 - 2013-12-28 23:24 - 00000000 ____D C:\Program Files (x86)\Bit Coin Miner Removal Tool
2013-12-28 23:38 - 2013-12-28 23:37 - 12582688 _____ (Malwarebytes Corp.) C:\Users\USUARIO\Downloads\mbar-1.07.0.1008.exe
2013-12-28 23:36 - 2013-12-28 23:34 - 47286211 _____ (pcsafedoctor.com, Inc.                                      ) C:\Users\USUARIO\Downloads\PCSafeDoctor_Setup.exe
2013-12-28 23:23 - 2013-12-28 23:23 - 04557608 _____ (Security Stronghold                                         ) C:\Users\USUARIO\Downloads\BitCoinMinerRemovalTool.exe
2013-12-28 23:20 - 2013-12-28 23:20 - 00000221 _____ C:\Users\USUARIO\Desktop\Dungeon Defenders.url
2013-12-28 23:03 - 2013-12-28 23:03 - 10285040 _____ (Malwarebytes Corporation                                    ) C:\Users\USUARIO\Downloads\mbam-setup-1.75.0.1300.exe
2013-12-28 23:03 - 2013-12-28 23:03 - 00001084 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-12-28 23:03 - 2013-12-28 23:03 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\Malwarebytes
2013-12-28 23:03 - 2013-12-28 23:03 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-12-28 23:03 - 2013-12-28 23:03 - 00000000 ____D C:\Program Files (x86)\Malwarebytes' Anti-Malware
2013-12-28 17:59 - 2012-07-10 11:51 - 00000000 ____D C:\Users\USUARIO\Documents\Biblioteca de calibre
2013-12-28 17:52 - 2013-12-28 17:52 - 00038317 _____ C:\Users\USUARIO\Downloads\pg61.epub
2013-12-28 17:07 - 2013-12-28 17:07 - 02405624 _____ (Trend Micro Inc.) C:\Users\USUARIO\Downloads\HousecallLauncher64.exe
2013-12-28 17:07 - 2013-12-28 17:07 - 00000036 _____ C:\Users\USUARIO\AppData\Local\housecall.guid.cache
2013-12-27 21:54 - 2012-11-14 13:39 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\TS3Client
2013-12-27 21:05 - 2013-12-13 11:31 - 00000000 ____D C:\teamspeak3-server_win64
2013-12-27 21:03 - 2013-09-17 18:35 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-12-27 19:50 - 2013-12-27 19:50 - 00357076 _____ C:\Users\USUARIO\Downloads\Recount-v4.0.1_release.zip
2013-12-27 12:53 - 2013-12-27 12:53 - 00002521 _____ C:\Users\USUARIO\Desktop\Dungeon Defenders.lnk
2013-12-27 10:05 - 2013-08-10 00:53 - 00000000 ____D C:\Games
2013-12-26 15:19 - 2013-12-26 15:18 - 00698357 _____ C:\Users\USUARIO\Downloads\GatherMate-v.1.25.zip
2013-12-26 13:11 - 2013-12-26 13:11 - 00000219 _____ C:\Users\USUARIO\Desktop\Left 4 Dead 2.url
2013-12-24 15:50 - 2013-06-05 20:07 - 00000000 ____D C:\Users\USUARIO\Documents\Telltale Games
2013-12-24 14:23 - 2013-12-24 14:23 - 00000000 ____D C:\Users\USUARIO\AppData\Local\UWebKit
2013-12-23 17:26 - 2012-03-05 22:46 - 00064039 _____ C:\windows\DirectX.log
2013-12-23 17:25 - 2012-07-09 19:54 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\uTorrent
2013-12-22 22:24 - 2009-07-14 06:08 - 00032518 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-12-22 19:50 - 2013-10-26 19:59 - 00001041 _____ C:\Users\Public\Desktop\VLC media player.lnk
2013-12-22 18:43 - 2013-12-22 16:37 - 620242130 _____ C:\Users\USUARIO\Downloads\Fort Apache - Nuevos conservadores ¿Halcones o buitres_(720p_H.264-AAC).mp4
2013-12-22 18:39 - 2013-12-22 16:37 - 576638304 _____ C:\Users\USUARIO\Downloads\Fort Apache - Venezuela, ¿hacia un chavismo sin Chávez_(720p_H.264-AAC).mp4
2013-12-22 18:38 - 2013-12-22 16:37 - 602845215 _____ C:\Users\USUARIO\Downloads\Fort Apache - Y en eso llegó Fidel, pasado y presente de la Revolución Cubana(720p_H.264-AAC).mp4
2013-12-21 13:36 - 2013-12-21 13:36 - 00170201 _____ C:\Users\USUARIO\Downloads\OneBag3-r131.zip
2013-12-20 21:01 - 2013-12-03 19:47 - 00000000 ____D C:\Users\USUARIO\Desktop\8.DANIEL
2013-12-20 15:52 - 2013-12-20 15:48 - 03178998 _____ C:\Users\USUARIO\Downloads\8.DANIEL.zip
2013-12-20 14:37 - 2013-12-20 14:37 - 02106154 _____ C:\Users\USUARIO\Downloads\Carbonite334.zip
2013-12-20 14:17 - 2013-12-20 14:17 - 00216934 _____ C:\Users\USUARIO\Downloads\GearScore.zip
2013-12-19 21:56 - 2013-12-19 21:56 - 00262830 _____ C:\Users\USUARIO\Downloads\Chatter-v1.2.11-4-g76cd1e5.zip
2013-12-19 21:53 - 2013-12-19 21:53 - 00254790 _____ C:\Users\USUARIO\Downloads\Bartender4-4.4.2-12-g94f3b58.zip
2013-12-19 21:47 - 2013-12-19 21:47 - 00805919 _____ C:\Users\USUARIO\Downloads\PitBull4-v4.0.0-beta11-12-ga36962c.zip
2013-12-19 21:46 - 2013-12-19 21:45 - 00287136 _____ C:\Users\USUARIO\Downloads\Grid-r1318.zip
2013-12-19 21:45 - 2013-12-19 21:45 - 00010862 _____ C:\Users\USUARIO\Downloads\PitBull4_ThreatLine-r7.zip
2013-12-19 21:43 - 2013-12-19 21:43 - 00104079 _____ C:\Users\USUARIO\Downloads\Ace2-r1101.zip
2013-12-19 21:36 - 2013-12-19 21:36 - 00011989 _____ C:\Users\USUARIO\Downloads\GridStatusHots-3.32.zip
2013-12-17 19:55 - 2013-12-17 19:50 - 529177726 _____ C:\Users\USUARIO\Downloads\Fort Apache - España en el purgatorio, 2 años de Rajoy(720p_H.264-AAC).mp4
2013-12-17 19:55 - 2013-12-17 19:49 - 551922591 _____ C:\Users\USUARIO\Downloads\Fort Apache - Europa, ¿infierno o tierra prometida_(720p_H.264-AAC).mp4
2013-12-17 19:52 - 2013-12-17 19:51 - 46772224 _____ C:\Users\USUARIO\Downloads\La cadena perpetua no sirve para proteger a la sociedad - Pablo Iglesias_sd.mp4
2013-12-17 16:03 - 2013-03-04 14:02 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\Dropbox
2013-12-17 16:03 - 2012-07-09 16:11 - 00000000 ___RD C:\Users\USUARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-12-17 09:51 - 2013-03-04 14:04 - 00000000 ___RD C:\Users\USUARIO\Dropbox
2013-12-16 19:46 - 2013-12-16 19:34 - 00001118 _____ C:\Users\USUARIO\Desktop\wow.lnk
2013-12-16 19:25 - 2013-12-16 19:25 - 20891616 _____ C:\Users\USUARIO\Downloads\WoW-3.3.3.11723-to-3.3.5.12213-esES-patch.exe
2013-12-16 19:25 - 2013-12-16 19:25 - 13078192 _____ C:\Users\USUARIO\Downloads\WoW-3.3.5.12213-to-3.3.5.12340-esES-patch.exe
2013-12-16 19:25 - 2013-12-16 19:25 - 02710424 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.5.12213-to-3.3.5.12340-esES-downloader.exe
2013-12-16 19:24 - 2013-12-16 19:24 - 05088256 _____ C:\Users\USUARIO\Downloads\WoW-3.3.3.11685-to-3.3.3.11723-esES-patch.exe
2013-12-16 19:24 - 2013-12-16 19:24 - 02711024 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.3.11723-to-3.3.5.12213-esES-downloader.exe
2013-12-16 19:23 - 2013-12-16 19:23 - 02640192 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.3.11685-to-3.3.3.11723-esES-downloader.exe
2013-12-16 19:21 - 2013-12-16 19:21 - 00000000 ____D C:\Users\USUARIO\Downloads\Updates
2013-12-16 19:20 - 2013-12-16 19:20 - 02654376 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.2.11403-to-3.3.3.11685-esES-downloader.exe
2013-12-16 19:20 - 2013-12-16 19:16 - 189290651 _____ C:\Users\USUARIO\Downloads\WoW-3.3.0.11159-to-3.3.2.11403-esES-patch.exe
2013-12-16 19:16 - 2013-12-16 19:16 - 02350144 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.0.11159-to-3.3.2.11403-esES-downloader.exe
2013-12-16 19:16 - 2013-12-16 19:15 - 05501944 _____ C:\Users\USUARIO\Downloads\WoW-3.3.0.10958-to-3.3.0.11159-esES-patch.exe
2013-12-16 19:15 - 2013-12-16 19:15 - 02336088 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.3.0.10958-to-3.3.0.11159-esES-downloader.exe
2013-12-16 15:32 - 2013-12-16 15:32 - 02400016 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.2.10505-to-3.3.0.10958-esES-downloader.exe
2013-12-16 15:31 - 2013-12-16 15:31 - 08381240 _____ C:\Users\USUARIO\Downloads\WoW-3.2.2.10482-to-3.2.2.10505-esES-patch.exe
2013-12-16 15:31 - 2013-12-16 15:31 - 02067208 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.2.10482-to-3.2.2.10505-esES-downloader.exe
2013-12-16 15:31 - 2013-12-16 14:58 - 66352480 _____ C:\Users\USUARIO\Downloads\WoW-3.2.0.10314-to-3.2.2.10482-esES-patch.exe
2013-12-16 15:31 - 2013-12-16 13:30 - 00262144 _____ C:\Users\USUARIO\Downloads\bad.piece
2013-12-16 14:58 - 2013-12-16 14:56 - 02071656 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.0.10314-to-3.2.2.10482-esES-downloader.exe
2013-12-16 14:17 - 2012-08-13 16:59 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2013-12-16 13:32 - 2013-12-16 13:32 - 08400600 _____ C:\Users\USUARIO\Downloads\WoW-3.2.0.10192-to-3.2.0.10314-esES-patch.exe
2013-12-16 13:31 - 2013-12-16 13:31 - 02067232 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.0.10192-to-3.2.0.10314-esES-downloader.exe
2013-12-16 13:31 - 2013-12-16 12:54 - 1739803131 _____ C:\Users\USUARIO\Downloads\WoW-3.2.0-esES-patch.exe
2013-12-16 12:54 - 2013-12-16 12:54 - 02199256 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\WoW-3.2.0-esES-downloader.exe
2013-12-16 12:53 - 2013-12-16 11:45 - 00000000 ____D C:\Users\Public\Games
2013-12-16 11:44 - 2013-12-16 11:44 - 01663656 _____ (Blizzard Entertainment) C:\Users\USUARIO\Downloads\InstallWoW.exe
2013-12-16 10:41 - 2013-12-16 10:24 - 00000000 ____D C:\Users\USUARIO\Documents\dd
2013-12-15 21:46 - 2013-09-23 20:47 - 00000000 ____D C:\Program Files (x86)\Razor
2013-12-15 21:46 - 2013-09-23 20:46 - 00000000 ____D C:\Program Files (x86)\Ultima Online
2013-12-15 21:29 - 2012-07-10 10:13 - 00000000 ____D C:\Program Files (x86)\Calibre2
2013-12-15 21:26 - 2013-12-15 21:25 - 53979648 _____ C:\Users\USUARIO\Downloads\calibre-1.15.0.msi
2013-12-14 23:57 - 2013-07-16 19:23 - 00000000 ____D C:\windows\system32\MRT
2013-12-14 23:55 - 2012-07-09 16:50 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-14 09:48 - 2013-12-14 10:22 - 00967156 ____N C:\Users\USUARIO\Desktop\The_Long_Walk_to_Freedom_-_Nelson_Mandela.epub
2013-12-13 22:03 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-13 18:03 - 2013-12-13 18:03 - 00000222 _____ C:\Users\USUARIO\Desktop\Strike Suit Infinity.url
2013-12-13 13:51 - 2012-10-22 19:43 - 00000000 ____D C:\Users\USUARIO\Downloads\p
2013-12-13 11:31 - 2013-12-13 11:31 - 05009890 _____ C:\Users\USUARIO\Downloads\teamspeak3-server_win64-3.0.10.2.zip
2013-12-12 19:20 - 2013-12-12 19:20 - 00000000 ____D C:\Users\USUARIO\Documents\vampiro
2013-12-12 19:10 - 2012-10-11 17:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-12 11:54 - 2013-12-12 11:53 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-11 23:22 - 2009-07-14 05:45 - 00417640 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-11 22:24 - 2012-10-19 12:36 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 22:19 - 2012-07-21 12:56 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\Skype
2013-12-11 21:14 - 2012-03-05 22:43 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 21:14 - 2012-03-05 22:43 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 21:14 - 2012-03-05 22:43 - 00003776 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 21:10 - 2012-09-05 12:01 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-11 21:10 - 2012-03-05 22:54 - 00000000 ____D C:\ProgramData\Skype
2013-12-10 10:40 - 2013-12-10 10:40 - 00002714 _____ C:\Users\USUARIO\Desktop\Cutting Edge Third Edition Intermediate DVD-ROM.lnk
2013-12-10 10:40 - 2013-12-10 10:40 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2013-12-10 10:40 - 2013-12-10 10:40 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pearson
2013-12-09 21:15 - 2013-12-09 21:15 - 01572138 _____ (Egosoft                                                     ) C:\Users\USUARIO\Downloads\x3tc_bonus_package_4.1.01.exe
2013-12-09 20:58 - 2013-12-09 20:58 - 17853294 _____ C:\Users\USUARIO\Downloads\PSCO1_CockpitMod_v1.32(1).rar
2013-12-09 20:57 - 2012-07-10 19:27 - 00000000 ____D C:\Users\USUARIO\Documents\Egosoft
2013-12-09 20:55 - 2013-12-09 20:55 - 08379915 _____ (Cycrow                                                      ) C:\Users\USUARIO\Downloads\XPluginManager_Installer.exe
2013-12-09 20:55 - 2013-12-08 17:41 - 00000000 ____D C:\Program Files (x86)\Egosoft
2013-12-09 20:54 - 2013-12-09 20:53 - 17853294 _____ C:\Users\USUARIO\Downloads\PSCO1_CockpitMod_v1.32.rar
2013-12-09 15:20 - 2013-12-09 12:49 - 00000000 ____D C:\Starbound
2013-12-09 12:48 - 2013-12-05 11:31 - 00000000 ____D C:\Program Files (x86)\Starbound
2013-12-09 11:10 - 2013-12-09 11:10 - 00000000 ____D C:\Users\USUARIO\AppData\Roaming\dvdcss
2013-12-08 23:32 - 2013-12-08 23:32 - 00533649 ____R C:\Users\USUARIO\Downloads\Xpadder [5.7].rar
2013-12-08 23:22 - 2013-12-08 23:21 - 00467904 _____ C:\Users\USUARIO\Downloads\XBCDv107.exe
2013-12-06 21:48 - 2012-03-05 22:53 - 00004110 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-06 21:48 - 2012-03-05 22:53 - 00003858 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-04 20:17 - 2013-12-04 20:17 - 00000000 ____D C:\Program Files (x86)\Pearson
2013-12-04 18:51 - 2013-12-04 18:51 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-04 13:49 - 2013-12-04 13:49 - 00000022 _____ C:\Users\USUARIO\Documents\gw2jewelry.txt
2013-12-04 12:52 - 2012-07-09 16:13 - 00001412 _____ C:\Users\USUARIO\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-12-04 12:51 - 2012-03-05 22:03 - 00000000 ____D C:\windows\SysWOW64\gl-ES
2013-12-04 12:51 - 2012-03-05 22:03 - 00000000 ____D C:\windows\system32\gl-ES
2013-12-04 12:51 - 2012-03-05 22:02 - 00000000 ____D C:\windows\SysWOW64\eu-ES
2013-12-04 12:51 - 2012-03-05 22:02 - 00000000 ____D C:\windows\system32\eu-ES
2013-12-04 12:51 - 2012-03-05 22:00 - 00000000 ____D C:\windows\SysWOW64\ca-ES
2013-12-04 12:51 - 2012-03-05 22:00 - 00000000 ____D C:\windows\system32\ca-ES
2013-12-04 12:51 - 2009-07-14 04:20 - 00000000 ____D C:\windows\PolicyDefinitions
2013-12-03 23:42 - 2013-12-03 23:34 - 00014704 _____ C:\windows\IE11_main.log
2013-12-03 23:36 - 2013-12-03 23:36 - 01228800 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 01051136 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmlmedia.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00942592 _____ (Microsoft Corporation) C:\windows\system32\jsIntl.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00940032 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00774144 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00645120 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsIntl.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00626176 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00616104 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dat
2013-12-03 23:36 - 2013-12-03 23:36 - 00616104 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dat
2013-12-03 23:36 - 2013-12-03 23:36 - 00610304 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00548352 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00454656 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00453120 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00413696 _____ (Microsoft Corporation) C:\windows\system32\html.iec
2013-12-03 23:36 - 2013-12-03 23:36 - 00367104 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtmsft.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00337408 _____ (Microsoft Corporation) C:\windows\SysWOW64\html.iec
2013-12-03 23:36 - 2013-12-03 23:36 - 00296960 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00263376 _____ (Microsoft Corporation) C:\windows\system32\iedkcs32.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\msls31.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00244736 _____ (Microsoft Corporation) C:\windows\SysWOW64\dxtrans.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00243200 _____ (Microsoft Corporation) C:\windows\system32\webcheck.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00238288 _____ (Microsoft Corporation) C:\windows\SysWOW64\iedkcs32.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00235520 _____ (Microsoft Corporation) C:\windows\system32\url.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00235008 _____ (Microsoft Corporation) C:\windows\system32\elshyph.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00233472 _____ (Microsoft Corporation) C:\windows\SysWOW64\url.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00208384 _____ (Microsoft Corporation) C:\windows\SysWOW64\webcheck.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00195584 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00194048 _____ (Microsoft Corporation) C:\windows\SysWOW64\elshyph.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00182272 _____ (Microsoft Corporation) C:\windows\SysWOW64\msls31.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00167424 _____ (Microsoft Corporation) C:\windows\system32\iexpress.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00164864 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00151552 _____ (Microsoft Corporation) C:\windows\SysWOW64\iexpress.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00147968 _____ (Microsoft Corporation) C:\windows\system32\occache.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00143872 _____ (Microsoft Corporation) C:\windows\system32\wextract.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00139264 _____ (Microsoft Corporation) C:\windows\SysWOW64\wextract.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00135680 _____ (Microsoft Corporation) C:\windows\system32\iepeers.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00131072 _____ (Microsoft Corporation) C:\windows\system32\IEAdvpack.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00127488 _____ (Microsoft Corporation) C:\windows\SysWOW64\occache.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00116736 _____ (Microsoft Corporation) C:\windows\SysWOW64\iepeers.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00112128 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieUnatt.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00111616 _____ (Microsoft Corporation) C:\windows\SysWOW64\IEAdvpack.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00105984 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00101376 _____ (Microsoft Corporation) C:\windows\system32\inseng.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00090112 _____ (Microsoft Corporation) C:\windows\system32\SetIEInstalledDate.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00086016 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00084992 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\MshtmlDac.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00083456 _____ (Microsoft Corporation) C:\windows\SysWOW64\inseng.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\icardie.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00077312 _____ (Microsoft Corporation) C:\windows\system32\tdc.ocx
2013-12-03 23:36 - 2013-12-03 23:36 - 00074240 _____ (Microsoft Corporation) C:\windows\SysWOW64\SetIEInstalledDate.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00071680 _____ (Microsoft Corporation) C:\windows\SysWOW64\RegisterIEPKEYs.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00069632 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmled.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00069120 _____ (Microsoft Corporation) C:\windows\SysWOW64\icardie.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00062464 _____ (Microsoft Corporation) C:\windows\SysWOW64\tdc.ocx
2013-12-03 23:36 - 2013-12-03 23:36 - 00062464 _____ (Microsoft Corporation) C:\windows\system32\pngfilt.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\MshtmlDac.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00061952 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00056832 _____ (Microsoft Corporation) C:\windows\SysWOW64\pngfilt.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00052224 _____ (Microsoft Corporation) C:\windows\system32\msfeedsbs.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00051200 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieetwproxystub.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00048640 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtmler.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\mshtmler.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00048128 _____ (Microsoft Corporation) C:\windows\system32\imgutil.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedsbs.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00040448 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00036352 _____ (Microsoft Corporation) C:\windows\SysWOW64\imgutil.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00034816 _____ (Microsoft Corporation) C:\windows\SysWOW64\JavaScriptCollectionAgent.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00032768 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00030208 _____ (Microsoft Corporation) C:\windows\system32\licmgr10.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00024576 _____ (Microsoft Corporation) C:\windows\SysWOW64\licmgr10.dll
2013-12-03 23:36 - 2013-12-03 23:36 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\mshta.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00013312 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshta.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00013312 _____ (Microsoft Corporation) C:\windows\system32\msfeedssync.exe
2013-12-03 23:36 - 2013-12-03 23:36 - 00012800 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeedssync.exe
2013-12-03 12:37 - 2012-07-10 09:52 - 00000000 ____D C:\Program Files (x86)\JDownloader
2013-12-03 10:58 - 2012-07-15 16:57 - 00000000 ____D C:\Users\USUARIO\AppData\Local\PMB Files
2013-12-03 10:22 - 2012-05-04 12:42 - 00000000 ____D C:\windows\SysWOW64\RTCOM
2013-12-03 10:20 - 2013-12-03 10:19 - 131013409 _____ C:\Users\USUARIO\Downloads\sound-20120514101059(1).zip
2013-12-03 10:17 - 2013-07-29 11:27 - 00000000 ____D C:\Users\USUARIO\AppData\Local\Downloaded Installations
2013-12-03 10:12 - 2013-12-03 10:07 - 131013409 _____ C:\Users\USUARIO\Downloads\sound-20120514101059.zip
2013-12-03 10:11 - 2013-12-03 10:09 - 20938150 _____ C:\Users\USUARIO\Downloads\sound-20120514101514.zip
2013-12-03 10:11 - 2013-12-03 10:07 - 39673346 _____ C:\Users\USUARIO\Downloads\sound-20120514090628.zip
2013-12-02 23:31 - 2013-12-02 23:31 - 00000000 ____D C:\Users\Public\Documents\Line 6
2013-12-01 15:18 - 2013-12-01 15:18 - 00003180 _____ C:\windows\System32\Tasks\{22FA125C-8BCD-4AF7-B543-A80CAFBA6A6A}
2013-12-01 14:43 - 2013-12-01 14:11 - 35730180 _____ (Realtek Semiconductor Corp.) C:\Users\USUARIO\Downloads\64bit_Win7_Win8_Win81_R273.exe
2013-11-30 16:13 - 2013-11-30 16:13 - 05877760 _____ C:\Users\USUARIO\Downloads\hamachi(1).msi
2013-11-30 00:16 - 2013-11-09 12:12 - 00000000 ____D C:\Program Files (x86)\Guild Wars 2

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 09:01

==================== End Of Log ============================

 

 

Addition.txt

Link to post
Share on other sites
kevinf80

kevinf80

Posted
Posted

I guess you ignore the opening alert regarding regarding P2P, also having illegal/cracked software, the following entries are confirmation of such action:

 

C:\windows\System32\Tasks\AutoKMS
C:\windows\Tasks\AutoKMS.job
C:\Windows\AutoKMS\AutoKMS.exe.

 

AutoKMS was originally designed to crack MS office, it also has other illegal functions to crack OS. Your thread will be locked and closed,

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.