Additional scan result of Farbar Recovery Scan Tool (x64) Version: 25-01-2017 01 Ran by [removed] (27-01-2017 20:28:09) Running from C:\Users\[removed]\Downloads Windows 7 Professional Service Pack 1 (X64) (2013-12-20 09:28:18) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrador (S-1-5-21-374155167-3560257060-3864837840-500 - Administrator - Disabled) => C:\Users\Administrador HomeGroupUser$ (S-1-5-21-374155167-3560257060-3864837840-1005 - Limited - Enabled) Invitado (S-1-5-21-374155167-3560257060-3864837840-501 - Limited - Disabled) wmartinez (S-1-5-21-374155167-3560257060-3864837840-1000 - Administrator - Enabled) => C:\Users\wmartinez ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: ThreatTrack Security VIPRE (Enabled - Up to date) {A328C8F0-22BE-AEDA-2D52-6C8A3089160A} AV: 360 Total Security (Enabled - Up to date) {0371CA44-3F80-A1D3-BECE-910620B58D50} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ThreatTrack Security VIPRE (Enabled - Up to date) {18492914-0484-A154-17E2-57F84B0E5CB7} AS: 360 Total Security (Enabled - Up to date) {B8102BA0-19BA-AE5D-847E-AA745B32C7ED} FW: ThreatTrack Security VIPRE (Disabled) {9B1349D5-68D1-AF82-060D-C5BFCE5A5171} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) 360 Total Security (HKLM-x32\...\360TotalSecurity) (Version: 9.0.0.1115 - 360 Security Center) 7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov) Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 15.023.20056 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated) Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.2 - Adobe Systems Incorporated) Adobe Flash Player 24 ActiveX (HKLM-x32\...\{22AF9D99-A980-4071-A0BD-1D0BB956B9EA}) (Version: 24.0.0.194 - Adobe Systems Incorporated) Adobe Flash Player 24 NPAPI (HKLM-x32\...\{1D95F7C4-A547-4FC9-91A4-A35B19F597C0}) (Version: 24.0.0.194 - Adobe Systems Incorporated) Amazon Kindle (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\Amazon Kindle) (Version: - Amazon) AmpliTube X-GEAR (HKLM-x32\...\{21E77392-C30A-4AA2-8CA7-5728316939D6}) (Version: 1.1.0 - IK Multimedia) Anderton Content Collection (HKLM\...\Anderton Content Collection_is1) (Version: 1.0 - Cakewalk, Inc.) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) ARIA Engine v1.6.2.0 (HKLM-x32\...\ARIA Engine_is1) (Version: v1.6.2.0 - Plogue Art et Technologie, Inc) ARIA Engine v1.8.4.6 (HKLM\...\ARIA Engine_is1) (Version: v1.8.4.6 - Plogue Art et Technologie, Inc) ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.11 Beta1 - Michael Tippach) Asistencia de seguridad de TOSHIBA (HKLM-x32\...\{1E63ACB5-D45E-4856-8FC9-78F4B0D7BB80}) (Version: 2.0.10 - TOSHIBA) Athena ASEDrive x64 4.1.0.1 (HKLM\...\{D2DB3E09-5E1F-4F32-B51F-1F71552D8D02}) (Version: 4.1.0.1 - Athena Smartcard Solutions) Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team) AZARDI 32.0 (HKLM-x32\...\AZARDI_is1) (Version: - Infogrid Pacific Pte. Ltd.) Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v9.10.32(T) - TOSHIBA CORPORATION) Cakewalk Boutique FX Suite (HKLM\...\SONAR Boutique FX Suite_is1) (Version: 1.0 - Cakewalk, Inc.) Cakewalk Classic Creative FX Suite (HKLM\...\SONAR Classic Creative FX Suite_is1) (Version: 1.0 - Cakewalk, Inc.) Cakewalk Engineering FX Suite (HKLM\...\SONAR Engineering FX Suite_is1) (Version: 1.0 - Cakewalk, Inc.) Cakewalk Platinum Instrument Collection (HKLM\...\SONAR Platinum Instrument Collection_is1) (Version: 1.0 - Cakewalk, Inc.) Cakewalk Rapture 1.2.1 (HKLM\...\Cakewalk Rapture_is1) (Version: 1.2.1.0 - Cakewalk Music Software) Cakewalk Rapture 1.2.1 (HKLM-x32\...\Cakewalk Rapture_is1) (Version: 1.2.1.0 - Cakewalk Music Software) Cakewalk Sound Center (HKLM\...\Cakewalk Sound Center_is1) (Version: 1.0 - Cakewalk, Inc.) Cakewalk Studio Mixing FX Suite (HKLM\...\SONAR Studio Mixing FX Suite_is1) (Version: 1.0 - Cakewalk, Inc.) CCleaner (HKLM-x32\...\CCleaner) (Version: 4.01 - Piriform) Cisco Systems VPN Client 5.0.07.0290 (HKLM\...\{467D5E81-8349-4892-9E81-C3674ED8E451}) (Version: 5.0.7 - Cisco Systems, Inc.) Cisco WebEx Meetings (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\ActiveTouchMeetingClient) (Version: - Cisco WebEx LLC) Citrix Online Launcher (HKLM-x32\...\{DB014C85-A264-4BCA-A66F-6DD1FCF8EC36}) (Version: 1.0.335 - Citrix) Command Center (HKLM-x32\...\{B5C98C54-097A-4B4C-8189-FEF1C79F3638}_is1) (Version: 1.1.2.2 - Cakewalk Music Software) CSR Hall (HKLM-x32\...\{5201A854-5EC2-4B23-BB01-941ADDCF1DDE}) (Version: 1.1.0 - IK Multimedia) CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.) Digital Sound Factory E-MU Virtuoso (HKLM-x32\...\Digital Sound Factory E-MU Virtuoso_is1) (Version: 1.1 - Digital Sound Factory) Digital Sound Factory Sound Center Guitars (HKLM-x32\...\Digital Sound Factory Sound Center Guitars_is1) (Version: 1.0 - Digital Sound Factory) Digital Sound Factory Sound Center Steinway Grand Piano (HKLM-x32\...\Digital Sound Factory Sound Center Steinway Grand Piano_is1) (Version: 1.0 - Digital Sound Factory) Digital Sound Factory Volume 3 Vocal Expressions (HKLM-x32\...\Digital Sound Factory Volume 3 Vocal Expressions_is1) (Version: 1.1 - Digital Sound Factory) Dimension Pro 1.5 (HKLM-x32\...\DimensionPro_x64_is1) (Version: 18.0 - Cakewalk Music Software) DreamStation DXi2 (HKLM-x32\...\DreamStation DXi2) (Version: - ) Dropbox (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\Dropbox) (Version: 18.4.32 - Dropbox, Inc.) EZdrummer (HKLM-x32\...\{43E8D9E7-AFC9-4BA3-8106-B95E02B87AB7}) (Version: 1.3.2 - Toontrack) EZXCocktail (HKLM-x32\...\{147567F0-8575-4BE0-B5B3-62706C67FA5A}) (Version: 1.2.4 - Toontrack) Facebook Gameroom 1.2.1.0 (HKLM-x32\...\{EB8940C0-28CF-4A2B-8D79-2AC06D2BD64B}) (Version: 1.2.1.0 - Facebook) Facebook Gameroom 1.2.1.1 (HKLM-x32\...\{C0CC7E04-39D6-48DC-8BCB-9D9FCD255996}) (Version: 1.2.1.1 - Facebook) Finale NotePad 2012 (HKLM-x32\...\Finale NotePad 2012) (Version: 2012..r1.5 - MakeMusic) Firma Digital - Analizador de Bitácoras (HKLM-x32\...\{38F3FE3E-2DBA-4A01-8FB0-7CD1277CB1B2}) (Version: 1.0.0 - Network Communications S.A. (NETCOM)) Flip PDF (HKLM-x32\...\Flip PDF_is1) (Version: - FlipBuilder Solution) Garritan ARIA Player v1.620 (HKLM-x32\...\__ARIA_1012___is1) (Version: v1.6.2.0 - Garritan) Garritan ARIA Player v1.846 (HKLM\...\__ARIA_1012___is1) (Version: v1.846 - Garritan) Garritan Concert and Marching Band 2.0 (HKLM\...\__ARIA_2003___is1) (Version: v1.0.0.6 - Garritan) Garritan World Instruments 0.003 (HKLM\...\__ARIA_2001___is1) (Version: v0.0.0.4 - Garritan) Garritan World Instruments 0.003 (HKLM-x32\...\__ARIA_2001___is1) (Version: v0.0.0.4 - Garritan) Git version 1.9.4-preview20140611 (HKLM-x32\...\Git_is1) (Version: 1.9.4-preview20140611 - The Git Development Community) Google Chrome (HKLM-x32\...\{DD550B1D-C176-3E11-AB0C-85C8077C86B8}) (Version: 55.0.2883.87 - Google, Inc.) Google Drive (HKLM-x32\...\{07A12123-B717-496B-B471-48AF6407B433}) (Version: 1.32.4066.7445 - Google, Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden GoToMeeting 7.31.0.6291 (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\GoToMeeting) (Version: 7.31.0.6291 - CitrixOnline) GridinSoft Anti-Malware (HKLM\...\GridinSoft Anti-Malware) (Version: 3.0.73 - GridinSoft LLC) HandBrake 0.9.9.1 (HKLM-x32\...\HandBrake) (Version: 0.9.9.1 - ) HeidiSQL (HKLM\...\HeidiSQL_is1) (Version: - Ansgar Becker) Hermes Digital Signature Activex Control (HKLM-x32\...\{B6E7A10A-3262-4E76-A9FB-AC86BA34F0FE}) (Version: 1.44.0000 - Nombre de su organización) IDProtect Clientx64 6.32.00 (HKLM\...\{2AB75A10-5243-4D3E-9F45-62C492BB5C60}) (Version: 6.32.00 - Athena Smartcard Solutions) ImageMagick 6.9.1-3 Q16 (64-bit) (2015-05-15) (HKLM\...\ImageMagick 6.9.1 Q16 (64-bit)_is1) (Version: 6.9.1 - ImageMagick Studio LLC) Inkscape 0.91 (HKLM-x32\...\Inkscape) (Version: 0.91 - ) Intel(R) Manageability Engine Firmware Recovery Agent (HKLM-x32\...\{A6C48A9F-694A-4234-B3AA-62590B668927}) (Version: 1.0.0.35342 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.23.1766 - Intel Corporation) Intel(R) Network Connections Drivers (HKLM\...\PROSet) (Version: 16.8 - Intel) Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2712 - Intel Corporation) Intel(R) Rapid Start Technology (HKLM-x32\...\3D073343-CEEB-4ce7-85AC-A69A7631B5D6) (Version: 1.0.0.1022 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.0.0.1032 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.4.220 - Intel Corporation) ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version: - isotousb.com) Java 8 Update 121 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180121F0}) (Version: 8.0.1210.13 - Oracle Corporation) Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation) Java SE Development Kit 7 Update 71 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170710}) (Version: 1.7.0.710 - Oracle) Java SE Development Kit 8 Update 60 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180600}) (Version: 8.0.600.27 - Oracle Corporation) Java(TM) SE Development Kit 6 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0160450}) (Version: 1.6.0.450 - Oracle) join.me (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\JoinMe) (Version: 3.0.0.4190 - LogMeIn, Inc.) join.me.launcher (x32 Version: 1.0.624.0 - LogMeIn, Inc.) Hidden Jutoh 2.27 (HKLM-x32\...\Jutoh_is1) (Version: 2.27 - Anthemion Software Ltd.) Kindle Previewer (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\KindlePreviewer) (Version: 2.94 - Amazon) Laplink PCmover Professional (HKLM-x32\...\{916004D0-C2E2-4242-B4A5-E6B07F190E72}) (Version: 10.00.639 - Laplink Software, Inc.) LEGO Education WeDo v1.0 (HKLM-x32\...\{8700AECC-19D8-4C01-B8C4-830320DCF4F5}) (Version: 1.0.0 - LEGO Company) Malwarebytes versión 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) Melodyne Runtime 4.1 (x64) (HKLM\...\{53EE2829-E9DB-4913-B3EA-96F10F84E98B}) (Version: 1.0.1 - Celemony Software GmbH) Melodyne singletrack (HKLM-x32\...\{16DF894D-FC3F-4B87-908D-671E201CD7A8}) (Version: 2.01.0202 - Celemony Software GmbH) Microsoft .NET Framework 2.0 SDK (x64) - ENU (HKLM\...\Microsoft .NET Framework 2.0 SDK (x64) - ENU) (Version: - Microsoft Corporation) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{5CBFF3F3-2D40-34EE-BCA5-A95BC19E400D}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.5 SDK (HKLM-x32\...\{1948E039-EC79-4591-951D-9867A8C14C90}) (Version: 4.5.50709 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.6.01055 - Microsoft Corporation) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft ASP.NET MVC 3 (HKLM-x32\...\{D32EF103-4016-4C15-BCB0-700C0A7A2309}) (Version: 3.0.50813.0 - Microsoft Corporation) Microsoft ASP.NET Web Pages (HKLM-x32\...\{631471BE-DEAB-454B-A9AC-CE3EB42C28B3}) (Version: 1.0.20105.0 - Microsoft Corporation) Microsoft CAPICOM 2.1.0.2 SDK (HKLM-x32\...\{2FF43F5D-5729-4E02-A548-310E30A5F29B}) (Version: 2.1.0.2 - Microsoft Corporation) Microsoft Expression Encoder 4 (HKLM-x32\...\Encoder_4.0.3205.0) (Version: 4.0.3205.0 - Microsoft Corporation) Microsoft Expression Encoder 4 Screen Capture Codec (HKLM-x32\...\{F9EC30D1-F688-4708-9850-CB5120074AAA}) (Version: 4.0.3205.0 - Microsoft Corporation) Microsoft Help Viewer 2.0 (HKLM-x32\...\Microsoft Help Viewer 2.0) (Version: 2.0.50727 - Microsoft Corporation) Microsoft Office 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.7571.2109 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\OneDriveSetup.exe) (Version: 17.3.5951.0827 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation) Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41105.0 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (HKLM-x32\...\{E2082604-4BA5-44BB-BBFB-AF0F3CB8C6AB}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{F1949145-EB64-4DE7-9D81-E6D27937146C}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{db012557-340e-4a46-adae-81a6b0f6a1e9}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.51106 (HKLM-x32\...\{8e70e4e1-06d7-470b-9f74-a51bef21088e}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual J# 2.0 Redistributable Package (HKLM-x32\...\Microsoft Visual J# 2.0 Redistributable Package) (Version: - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Web Deploy 3.5 (HKLM\...\{3674F088-9B90-473A-AAC3-20A00D8D810C}) (Version: 3.1237.1762 - Microsoft Corporation) Microsoft Web Deploy dbSqlPackage Provider - enu (HKLM-x32\...\{E4C33F5B-1B2F-466E-957E-B274F08151A0}) (Version: 10.3.20225.0 - Microsoft Corporation) Microsoft Web Platform Installer 4.0 (HKLM\...\{E2B8249D-895C-4685-8C83-00F3B1A13028}) (Version: 4.0.1622 - Microsoft Corporation) MiniTool Partition Wizard Free 9.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.) Mozilla Firefox 51.0.1 (x86 es-ES) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 es-ES)) (Version: 51.0.1 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla) Mozilla Thunderbird 45.7.0 (x86 en-US) (HKLM-x32\...\Mozilla Thunderbird 45.7.0 (x86 en-US)) (Version: 45.7.0 - Mozilla) MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MyLogoMaker 2.0 (HKLM-x32\...\MyLogoMaker_is1) (Version: - Avanquest USA, Inc.) MySQL Server 5.1 (HKLM-x32\...\{880CAB9F-7D16-40F4-A74C-383364CCA344}) (Version: 5.1.73 - Oracle Corporation) Network Recording Player (HKLM-x32\...\{EA7547D9-708C-4496-BF2D-8623FB3C4F13}) (Version: 29.8.2.10049 - Cisco WebEx LLC) NewBlue Cartoonr for Vegas (HKLM-x32\...\NewBlue Cartoonr for Vegas) (Version: - ) NewBlue VideoFX MSPP (HKLM-x32\...\NewBlue VideoFX MSPP) (Version: - ) Nitro Pro 10 (HKLM-x32\...\{bae3fb4c-e211-4772-a621-456af9059131}) (Version: 10.5.9.9 - Nitro) Nitro Pro 10 (Version: 10.5.9.9 - Nitro) Hidden Node.js (HKLM\...\{B9AEF158-B4F9-45FF-BF91-F65F24F72F3C}) (Version: 0.12.4 - Joyent, Inc. and other Node contributors) Norton Anti-Theft (HKLM-x32\...\NAT) (Version: 1.10.0.9 - Symantec Corporation) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.3.1 - Notepad++ Team) Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7571.2109 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7571.2109 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.7571.2109 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7571.2109 - Microsoft Corporation) Hidden paint.net (HKLM\...\{6AC1101E-7561-43C9-BEEA-4AB1D220D8FF}) (Version: 4.0.13 - dotPDN LLC) Paquete de controladores de Windows - Athena Smartcard Solutions (ATHENA3) SmartCardReader (03/02/2014 2.0.0.1) (HKLM\...\CA118A453C54BB2215BA66438080EC961DADB323) (Version: 03/02/2014 2.0.0.1 - Athena Smartcard Solutions) Paquete de controladores de Windows - Athena Smartcard Solutions (UMPass) SmartCard (01/07/2014 6.1.3.5) (HKLM\...\83AF5FD6EA1DC2355197BC3CEFC72754D17A6F61) (Version: 01/07/2014 6.1.3.5 - Athena Smartcard Solutions) Paquete de controladores de Windows - Athena Smartcard Solutions (UMPass) SmartCard (01/07/2014 6.1.3.5) (HKLM\...\D9D9DE28C5260A43C16218CB2451872722D69558) (Version: 01/07/2014 6.1.3.5 - Athena Smartcard Solutions) Paquete de controladores de Windows - Athena Smartcard Solutions (UmPass) SmartCard (12/15/2013 6.1.3.5) (HKLM\...\361CB4DC418CA06F3E7CFE8F2D060668CA6A597D) (Version: 12/15/2013 6.1.3.5 - Athena Smartcard Solutions) Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation) Platinum Core Plugins (HKLM\...\Platinum Core Plugins_is1) (Version: 1.0 - Cakewalk, Inc.) PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation) Prerequisites for SSDT (HKLM-x32\...\{9169C939-ED01-446A-BD0C-29873BAF4E48}) (Version: 11.0.2100.60 - Microsoft Corporation) PrimoPDF -- brought to you by Nitro PDF Software (HKLM-x32\...\PrimoPDF) (Version: 5 - Nitro PDF Software) ProjectLibre (HKLM-x32\...\{73C751CF-B4B9-4757-BDBC-0B3A5B16B531}) (Version: 1.5.17.0 - ProjectLibre) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) RAD Studio (HKLM-x32\...\RAD Studio) (Version: - CodeGear) RAD Studio (x32 Version: 5.0 - CodeGear) Hidden Rad Studio Help System (HKLM-x32\...\Rad Studio Help System) (Version: - CodeGear) Rad Studio Help System (x32 Version: 5.0 - CodeGear) Hidden Rapture Session (x64) (HKLM\...\RaptureSession_x64_is1) (Version: 2.0 - Cakewalk, Inc.) Rave Reports 7.5.2 BE (HKLM-x32\...\Rave Reports 7.5.2 BE_is1) (Version: - Nevrona Designs) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6591 - Realtek Semiconductor Corp.) Redis on Windows (HKLM\...\{91B35148-10BA-4850-BFC1-088D3480F6FA}) (Version: 2.8.2103 - MSOpenTech) rgc:audio sfz+ DXi v1.01 (HKLM-x32\...\rgc:audio sfz+ DXi_is1) (Version: - ) rgc:audio sfz+ VSTi v1.01 (HKLM-x32\...\rgc:audio sfz+ VSTi_is1) (Version: - ) rgcAudio Square I VSTi v1.2 (HKLM-x32\...\Square I VSTi_is1) (Version: - ) RICOH Media Driver v2.15.17.02 (HKLM-x32\...\{FE041B02-234C-4AAA-9511-80DF6482A458}) (Version: 2.15.17.02 - RICOH) Skype™ 7.30 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.30.105 - Skype Technologies S.A.) Software Intel® PROSet/Wireless WiFi (HKLM\...\{E2D0B67F-8032-4E11-87C6-C8C721D331B3}) (Version: 15.01.0500.0875 - Intel Corporation) SONAR Platinum (HKLM\...\SONAR Platinum_is1) (Version: 21.10 - Cakewalk, Inc.) SONAR X1 Essential (HKLM-x32\...\SONARX1Essential_is1) (Version: 18.0 - Cakewalk Music Software) SONAR X1 Studio (HKLM-x32\...\SONARX1Studio_is1) (Version: 18.0 - Cakewalk Music Software) Sony DVD Architect Studio 4.5 (HKLM-x32\...\{B7C7A59F-CF70-481E-A94F-7C2563AA5ADD}) (Version: 4.5.107 - Sony) Sony Sound Forge Audio Studio 9.0 (HKLM-x32\...\{20207CCE-A8FA-44A7-AA3D-1E43EB307B27}) (Version: 9.0.232 - Sony) Sophos SSL VPN Client 2.1 (HKLM-x32\...\Sophos SSL VPN Client) (Version: 2.1 - ) SourceTree (HKLM-x32\...\SourceTree 1.8.2) (Version: 1.8.2 - Atlassian) SourceTree (HKLM-x32\...\SourceTree 1.8.2.2) (Version: 1.8.2.2 - Atlassian) SourceTree (HKLM-x32\...\SourceTree 1.8.2.3) (Version: 1.8.2.3 - Atlassian) SourceTree (HKLM-x32\...\SourceTree 1.9.10.0) (Version: 1.9.10.0 - Atlassian) SourceTree (HKLM-x32\...\SourceTree 1.9.6.1) (Version: 1.9.6.1 - Atlassian) SourceTree (x32 Version: 1.9.10.0 - Atlassian) Hidden SRS Premium Sound Control Panel (HKLM\...\{3007FF9F-5B2C-41FF-8BFC-08BF25DB2681}) (Version: 1.12.1800 - SRS Labs, Inc.) SSH Secure Shell (HKLM-x32\...\{74E2CD0C-D4A2-11D3-95A6-0000E86CFDE5}) (Version: - ) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.27.1 - Synaptics Incorporated) TagScanner 6.0.14 (HKLM-x32\...\TagScanner_is1) (Version: - Sergey Serkov) TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - ) Toontrack solo (HKLM-x32\...\{5866520C-8857-4986-833A-039F4584C3F7}) (Version: 1.3.2 - Toontrack) TortoiseGit 1.8.9.0 (64 bit) (HKLM\...\{D270F72A-913D-421E-AD56-5477132B1EC6}) (Version: 1.8.9.0 - TortoiseGit) TortoiseSVN 1.9.5.27581 (64 bit) (HKLM\...\{1655E9E4-04C9-414E-8581-6D1162DFB802}) (Version: 1.9.27581 - TortoiseSVN) TOSHIBA Application Installer (HKLM\...\{21A63CA3-75C0-4E56-B602-B7CD2EF6B621}) (Version: 9.0.2.8 - Toshiba Corporation) TOSHIBA Application Installer (HKLM-x32\...\{970472D0-F5F9-4158-A6E3-1AE49EFEF2D3}) (Version: 9.0.1.3 - TOSHIBA) TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.2.3.1 - TOSHIBA CORPORATION) TOSHIBA Battery Check Utility (HKLM-x32\...\{5468E297-7EF8-4CB3-A091-F8714147793F}) (Version: 1.00.01.01 - Toshiba Corporation) TOSHIBA ConfigFree (HKLM-x32\...\{EAF55C99-A493-4373-A8C5-09ACC5DCD7EF}) (Version: 8.0.43 - TOSHIBA CORPORATION) TOSHIBA eco Utility (HKLM\...\{F5AFF327-9B52-4E96-B5A0-BD2488A8EEC9}) (Version: 1.3.21.64 - TOSHIBA Corporation) TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.18.64 - TOSHIBA Corporation) TOSHIBA HDD/SSD Alert (HKLM\...\{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.14 - TOSHIBA Corporation) TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.87.5 - TOSHIBA CORPORATION) TOSHIBA PC Health Monitor (HKLM\...\{9DECD0F9-D3E8-48B0-A390-1CF09F54E3A4}) (Version: 1.7.17.64 - TOSHIBA Corporation) TOSHIBA Quality Application (HKLM-x32\...\{E69992ED-A7F6-406C-9280-1C156417BC49}) (Version: 1.0.4 - TOSHIBA) TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.7.52020010 - TOSHIBA CORPORATION) TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.4.01 - TOSHIBA Corporation) TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.15.0 - TOSHIBA) TOSHIBA Sleep Utility (HKLM-x32\...\{654F7484-88C5-46DC-AB32-C66BCB0E2102}) (Version: 1.4.0024.000101 - TOSHIBA Corporation) TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.6.0027.640202 - TOSHIBA Corporation) TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.3.33 - TOSHIBA Corporation) TotalMovieConverter (HKLM-x32\...\Total Movie Converter_is1) (Version: - Softplicity, Inc.) TweetDeck (HKLM-x32\...\{C4ADB67B-C908-4D94-B85E-585D2F3F9118}) (Version: 3.3.7 - Twitter) Unity Web Player (HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\UnityWebPlayer) (Version: - Unity Technologies ApS) Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation) Vegas Movie Studio Platinum 9.0 (HKLM-x32\...\{97E038E1-41AD-4C93-BCDC-6A2394AEE352}) (Version: 9.0.92 - Sony) VIPRE Internet Security (HKLM-x32\...\{C1D1FC57-3EB9-4B21-BCA3-F1C927508200}) (Version: 9.3.4.3 - ThreatTrack Security Inc.) VIPRE Internet Security (x32 Version: 9.3.4.3 - ThreatTrack Security, Inc.) Hidden WCF RIA Services V1.0 SP2 (HKLM-x32\...\{3A523AF9-D32F-4C85-8388-0335731F3405}) (Version: 4.1.61829.0 - Microsoft Corporation) WeDo Activity Pack 1.0 (HKLM-x32\...\WeDo Activity Pack 1.0) (Version: - ) WinPcap 4.0.2 (HKLM-x32\...\WinPcapInst) (Version: 4.0.0.1040 - CACE Technologies) XnView 2.32 (HKLM-x32\...\XnView_is1) (Version: 2.32 - Gougelet Pierre-e) ZipRecover (HKLM-x32\...\ZipRecover) (Version: - ) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\wmartinez\AppData\Local\Citrix\GoToMeeting\4007\G2MOutlookAddin64.dll (Citrix Online, a division of Citrix Systems, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{ca586c80-7c84-4b88-8537-726724df6929}\InprocServer32 -> C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll () CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) CustomCLSID: HKU\S-1-5-21-374155167-3560257060-3864837840-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\DropboxExt64.11.0.dll (Dropbox, Inc.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1C19B13F-3E52-4D4C-87F1-9066D27CFEAF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {1E97E9FB-5649-46B1-8F24-4D4116610887} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-14] (Adobe Systems Incorporated) Task: {20A55EB6-2AE6-407D-BA08-CC0164F194F3} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-374155167-3560257060-3864837840-1000UA => C:\Users\wmartinez\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {2C62CE01-FFFF-41AB-9784-3F3B5F70C7A3} - \{515B33BB-8831-43C8-9DFE-7481BB5AE84B} -> No File <==== ATTENTION Task: {328903D7-163F-4217-A3B8-852C5615D294} - System32\Tasks\Norton Anti-Theft\Norton Error Analyzer => C:\Program Files (x86)\Norton Anti-Theft\Engine\1.10.0.9\SymErr.exe [2013-08-01] (Symantec Corporation) Task: {37E6126B-A7AD-42EE-BFBB-ED8DA5D2E223} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {4C14C533-C02A-498F-8004-9C7BC51B698E} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {4DF5FB9A-5B2D-4ED0-A1B0-0BD78C64C019} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-29] (Google Inc.) Task: {51587626-865C-469B-ADF2-EDFDADBA5797} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-12-19] (Adobe Systems Incorporated) Task: {5B7F5A3D-DF21-4ABC-B0E2-15464753DC08} - System32\Tasks\ConfigFree Startup Programs => C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe [2011-10-24] (TOSHIBA CORPORATION) Task: {5FEDADF0-AFFA-49CB-90A8-0707852368D8} - System32\Tasks\{B29BE9D9-36AF-4AF3-ABA8-A58680D4A988} => pcalua.exe -a C:\Users\WMARTI~1\AppData\Local\Temp\jre-8u60-windows-au.exe -d C:\windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ATTENTION Task: {6727BB2B-5678-4FE5-82C9-68CB499B9F8E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-28] (Microsoft Corporation) Task: {7ED513AD-DCB6-4057-AEA6-119B461CAF24} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-374155167-3560257060-3864837840-1000Core => C:\Users\wmartinez\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-05] (Dropbox, Inc.) Task: {825D3A50-AEB1-4CB0-B524-CFB8A214A7F3} - System32\Tasks\G2MUpdateTask-S-1-5-21-374155167-3560257060-3864837840-1000 => C:\Users\wmartinez\AppData\Local\Citrix\GoToMeeting\6291\g2mupdate.exe [2017-01-26] (Citrix Online, a division of Citrix Systems, Inc.) Task: {8884C32A-8E7F-4524-8D60-4A15E9B5780F} - System32\Tasks\G2MUploadTask-S-1-5-21-374155167-3560257060-3864837840-1000 => C:\Users\wmartinez\AppData\Local\Citrix\GoToMeeting\6291\g2mupload.exe [2017-01-26] (Citrix Online, a division of Citrix Systems, Inc.) Task: {8FD370B2-A66E-4112-B9A6-E0EA5FE0063F} - System32\Tasks\{E9057713-1FC0-416E-840B-BCDF806F0406} => pcalua.exe -a "D:\LEGO\WEDO\WEDOActivitiesSetup (1).exe" -d D:\LEGO\WEDO Task: {917456A0-F940-482A-8E20-2987DE25D216} - System32\Tasks\GridinSoft Anti-Malware => C:\Program Files\GridinSoft Anti-Malware\gsam.exe Task: {B0848136-5873-47DA-9CC2-3D1DB9F4BCDB} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-12-28] (Microsoft Corporation) Task: {C2BC8AFF-3249-4D09-841E-48C067D8C6F3} - System32\Tasks\{C12462EC-4680-42C8-85DA-188DE3DCE7A4} => pcalua.exe -a "C:\vpn\VPNCISCO\Cisco VPN Client v5.0.07.0290 x32 - Setup.exe" -d C:\vpn\VPNCISCO Task: {DB8FB416-36B1-44DB-A137-762CA3D82C4C} - System32\Tasks\Norton Anti-Theft\Norton Error Processor => C:\Program Files (x86)\Norton Anti-Theft\Engine\1.10.0.9\SymErr.exe [2013-08-01] (Symantec Corporation) Task: {F5F25CD2-5F61-441C-809B-648A1BC166A0} - System32\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe [2011-11-25] (Intel Corporation) Task: {FDB6430B-10EA-416F-84B9-15AFD1A39887} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-12-28] (Microsoft Corporation) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-374155167-3560257060-3864837840-1000Core.job => C:\Users\wmartinez\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\windows\Tasks\DropboxUpdateTaskUserS-1-5-21-374155167-3560257060-3864837840-1000UA.job => C:\Users\wmartinez\AppData\Local\Dropbox\Update\DropboxUpdate.exe Task: C:\windows\Tasks\G2MUpdateTask-S-1-5-21-374155167-3560257060-3864837840-1000.job => C:\Users\wmartinez\AppData\Local\Citrix\GoToMeeting\6291\g2mupdate.exe Task: C:\windows\Tasks\G2MUploadTask-S-1-5-21-374155167-3560257060-3864837840-1000.job => C:\Users\wmartinez\AppData\Local\Citrix\GoToMeeting\6291\g2mupload.exe Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d-Logon.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\windows\Tasks\ISM-UpdateService-4e00205a-2ab1-4423-8f77-cc25b82cde1d.job => C:\Program Files (x86)\Intel\Intel(R) ME FW Recovery Agent\bin\Bootstrap.exe Task: C:\windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe Task: C:\windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\Users\wmartinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SQuirreL SQL Client\SQuirreL SQL Client.lnk -> C:\Dev\squirrel-sql-3.5.3\squirrel-sql.bat () ShortcutWithArgument: C:\Users\wmartinez\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Node.js\Node.js command prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> /k "C:\Program Files\nodejs\nodevars.bat" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --ssl-version-min=tls1 ==================== Loaded Modules (Whitelisted) ============== 2014-08-31 16:28 - 2013-09-06 17:25 - 00122888 _____ () C:\windows\System32\KVPrinterMon.dll 2014-03-31 14:42 - 2011-02-28 16:37 - 00095008 _____ () C:\windows\System32\Primomonnt.dll 2013-11-06 03:41 - 2013-11-06 03:41 - 06115328 _____ () C:\Program Files (x86)\MySQL\MySQL Server 5.1\bin\mysqld.exe 2016-07-22 17:26 - 2016-07-22 17:26 - 00417944 _____ () C:\Program Files\Nitro\Pro 10\Nitro_UpdateService.exe 2016-07-22 17:26 - 2016-07-22 17:26 - 02546840 _____ () C:\Program Files\Nitro\Pro 10\Nitro_KissMetrics.dll 2014-06-09 23:00 - 2014-06-09 23:00 - 00772456 _____ () C:\Program Files\TortoiseGit\bin\libgit2_tgit.dll 2014-06-09 23:00 - 2014-06-09 23:00 - 00087400 _____ () C:\Program Files\TortoiseGit\bin\zlib1_tgit.dll 2016-11-26 14:48 - 2016-11-26 14:48 - 00095184 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll 2017-01-26 17:05 - 2017-01-22 00:16 - 00785320 _____ () C:\Program Files (x86)\360\Total Security\MenuEx64.dll 2014-06-25 17:54 - 2014-06-12 16:09 - 00736450 _____ () C:\Program Files (x86)\Git\git-cheetah\git_shell_ext64.dll 2012-03-26 19:33 - 2012-03-26 19:33 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll 2012-03-02 18:08 - 2012-03-02 18:08 - 00595840 _____ () C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe 2011-08-22 17:19 - 2011-08-22 17:19 - 11204992 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll 2010-11-30 12:37 - 2010-11-30 12:37 - 00048504 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnZ.dll 2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF10.dll 2010-03-03 16:15 - 2010-03-03 16:15 - 00019256 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\FnF11.dll 2010-12-15 17:19 - 2010-12-15 17:19 - 00124320 _____ () C:\Program Files\TOSHIBA\TECO\MUIHelp.dll 2011-08-12 16:57 - 2011-08-12 16:57 - 00437632 _____ () C:\Program Files\TOSHIBA\FlashCards\Hotkey\TcrdKBB.exe 2015-03-23 05:02 - 2015-03-23 05:02 - 00480992 _____ () C:\Program Files (x86)\Sophos\Sophos SSL VPN Client\bin\openvpn-gui.exe 2012-04-11 19:05 - 2012-04-11 19:05 - 00079784 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll 2014-06-25 17:55 - 2014-06-12 11:24 - 00008704 _____ () C:\Program Files (x86)\Git\cmd\git.exe 2017-01-26 17:05 - 2017-01-22 00:16 - 00099240 _____ () C:\Program Files (x86)\360\Total Security\deepscan\qutmload.dll 2010-03-23 13:26 - 2010-03-23 13:26 - 00201512 _____ () C:\Program Files (x86)\Cisco Systems\VPN Client\vpnapi.dll 2014-06-09 22:52 - 2014-06-09 22:52 - 00578920 _____ () C:\Program Files\TortoiseGit\bin\libgit232_tgit.dll 2014-06-09 22:52 - 2014-06-09 22:52 - 00076648 _____ () C:\Program Files\TortoiseGit\bin\zlib132_tgit.dll 2015-10-27 21:25 - 2015-10-27 21:25 - 00213936 _____ () C:\Users\wmartinez\AppData\Local\join.me.launcher\ExternalLibs\x86\JoinMe.Launcher.Win.Wrapper.dll 2017-01-23 15:28 - 2017-01-18 12:39 - 00801600 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\dropbox_watchdog.dll 2015-12-10 19:44 - 2016-12-21 02:44 - 00035792 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd 2015-12-10 19:44 - 2016-12-21 02:44 - 00100296 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\_ctypes.pyd 2015-12-10 19:44 - 2016-12-21 02:44 - 00018888 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\select.pyd 2015-12-10 19:44 - 2017-01-18 12:42 - 00019776 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd 2015-12-10 19:44 - 2016-12-21 02:44 - 00694224 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\unicodedata.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00020824 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd 2015-12-10 19:44 - 2016-12-21 02:45 - 00123856 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 01682768 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00020816 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd 2017-01-23 15:28 - 2016-12-21 02:44 - 00145864 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\pyexpat.pyd 2017-01-23 15:28 - 2016-12-21 02:45 - 00019408 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\faulthandler.pyd 2017-01-23 15:28 - 2016-12-21 02:44 - 00116688 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\pywintypes27.dll 2015-12-10 19:44 - 2016-12-21 02:46 - 00105928 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32api.pyd 2016-08-05 12:04 - 2017-01-18 12:42 - 00022864 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.crt.compiled._winffi_crt.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00052032 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00038712 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\fastpath.pyd 2017-01-23 15:28 - 2016-12-21 02:44 - 00392144 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\pythoncom27.dll 2017-01-23 15:28 - 2016-12-21 02:46 - 00020936 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\mmapfile.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00024528 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32event.pyd 2015-12-10 19:44 - 2016-12-21 02:47 - 00116176 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32security.pyd 2015-12-10 19:44 - 2017-01-18 12:42 - 00381760 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00124880 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32file.pyd 2016-08-05 12:04 - 2017-01-18 12:42 - 00026456 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.kernel32.compiled._winffi_kernel32.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00024016 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32clipboard.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00175560 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32gui.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00030160 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32pipe.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00043472 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32process.pyd 2015-12-10 19:44 - 2016-12-21 02:47 - 00048592 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32service.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00057808 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32evtlog.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00024016 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32profile.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00246608 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00027488 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd 2016-08-05 12:04 - 2016-12-21 02:45 - 00241104 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\_jpegtran.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00022336 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd 2015-12-10 19:44 - 2016-12-21 02:47 - 00028616 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32ts.pyd 2015-12-10 19:44 - 2017-01-18 12:42 - 00025432 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00022872 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00021848 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.winerror.compiled._winffi_winerror.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00022872 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.wininet.compiled._winffi_wininet.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 01826104 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd 2015-12-10 19:44 - 2016-12-21 02:45 - 00083912 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\sip.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00531264 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 03928896 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 01972536 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00133432 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00224064 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00207680 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00021840 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.user32.compiled._winffi_user32.pyd 2015-12-10 19:44 - 2016-12-21 02:47 - 00350152 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winxpgui.pyd 2016-02-18 15:44 - 2017-01-18 12:42 - 00023896 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00025936 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd 2017-01-23 15:28 - 2016-12-21 02:42 - 00036296 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\librsync.dll 2017-01-23 15:28 - 2017-01-18 12:42 - 00084288 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL 2017-01-23 15:28 - 2016-12-21 02:50 - 00017864 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\libEGL.dll 2017-01-23 15:28 - 2016-12-21 02:50 - 01631184 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\libGLESv2.dll 2017-01-23 15:28 - 2017-01-18 12:42 - 00042816 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtWebChannel.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00171336 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtWebEngineWidgets.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00357688 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd 2015-12-10 19:44 - 2016-12-21 02:46 - 00060880 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\win32print.pyd 2016-08-05 12:04 - 2017-01-18 12:42 - 00026456 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\winffi.winhttp.compiled._winffi_winhttp.pyd 2017-01-23 15:28 - 2017-01-18 12:42 - 00546104 _____ () C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00098816 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32api.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00110080 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\pywintypes27.dll 2017-01-27 15:15 - 2017-01-27 15:15 - 00364544 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\pythoncom27.dll 2017-01-27 15:15 - 2017-01-27 15:15 - 00320512 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32com.shell.shell.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00914432 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_hashlib.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 01176576 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._core_.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00806400 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._gdi_.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00816128 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._windows_.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 01067008 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._controls_.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00733184 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._misc_.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00682496 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\pysqlite2._sqlite.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00088064 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_ctypes.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00686080 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\unicodedata.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00119808 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32file.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00108544 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32security.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00007168 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\hashobjs_ext.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00017920 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\thumbnails_ext.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00088064 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\usb_ext.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00012800 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\common.time34.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00018432 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32event.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00167936 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32gui.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00046080 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_socket.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 01303552 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_ssl.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00128512 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_elementtree.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00127488 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\pyexpat.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00038912 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32inet.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00036864 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_psutil_windows.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00524248 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\windows._lib_cacheinvalidation.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00011264 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32crypt.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00123392 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._wizard.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00077312 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._html2.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00027648 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_multiprocessing.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00020480 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\_yappi.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00035840 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32process.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00078848 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\wx._animate.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00024064 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32pipe.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00010240 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\select.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00025600 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32pdh.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00017408 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32profile.pyd 2017-01-27 15:15 - 2017-01-27 15:15 - 00022528 ____R () C:\Users\wmartinez\AppData\Local\Temp\_MEI55322\win32ts.pyd 2016-02-29 14:56 - 2016-02-29 14:56 - 00237056 _____ () C:\Program Files (x86)\VIPRE\unrar.dll 2016-04-11 12:56 - 2015-06-26 03:13 - 00184184 _____ () C:\Program Files (x86)\VIPRE\Definitions\libBase64.dll 2016-04-11 12:56 - 2015-06-26 03:13 - 00175992 _____ () C:\Program Files (x86)\VIPRE\Definitions\libMachoUniv.dll 2012-05-07 11:55 - 2012-05-07 11:55 - 00178104 _____ () C:\Program Files (x86)\Toshiba\Bluetooth Toshiba Stack\TosGatt.dll 2017-01-26 17:05 - 2017-01-22 00:16 - 00497576 _____ () C:\Program Files (x86)\360\Total Security\safemon\wdui2.dll 2015-04-29 08:46 - 2013-12-09 15:26 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2016-12-16 08:59 - 2016-12-08 01:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll 2016-12-16 08:59 - 2016-12-08 01:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll 2014-06-25 17:55 - 2014-06-25 17:55 - 01724229 _____ () C:\Program Files (x86)\Git\bin\libcrypto.dll 2014-06-25 17:55 - 2014-06-25 17:55 - 00390494 _____ () C:\Program Files (x86)\Git\bin\libssl.dll 2016-07-22 17:26 - 2016-07-22 17:26 - 00011928 _____ () C:\Program Files (x86)\Common Files\Nitro\Pro\10\Nitro.OfficeAddin.Net.Aggregator.10.dll 2016-07-22 17:26 - 2016-07-22 17:26 - 00047256 _____ () C:\Program Files (x86)\Common Files\Nitro\Pro\10\Nitro.OfficeAddin.Net.Common.10.dll 2016-07-22 17:26 - 2016-07-22 17:26 - 00955544 _____ () C:\Program Files (x86)\Common Files\Nitro\Pro\10\Nitro.OfficeAddin.Net.UI.10.dll 2016-07-22 17:26 - 2016-07-22 17:26 - 00081560 _____ () C:\Program Files (x86)\Common Files\Nitro\Pro\10\Nitro.PdfCommon.Net.10.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\Windows:nlsPreferences [386] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBAMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SBPIMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBAMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SBPIMSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\VipreEdgeProtection => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WebExaminer => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WebProxy => ""="service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\aresep.go.cr -> hxxps://www.aresep.go.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\aresep.go.cr -> hxxp://www.aresep.go.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bac.net -> hxxps://www.bac.net IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bac.net -> hxxp://www.bac.net IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\banacio.com -> hxxp://www.banacio.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\banacio.com -> hxxps://www.banacio.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancobcr.com -> hxxps://www.bancobcr.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancobcr.com -> hxxp://www.bancobcr.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancobcr.com -> hxxp://www.bancobcr.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancobcr.com -> hxxps://www.bancobcr.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\banconacionalcostarica.com -> hxxp://www.banconacionalcostarica.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\banconacionalcostarica.com -> hxxps://www.banconacionalcostarica.com IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancopopular.fi.cr -> hxxps://www.bancopopular.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancopopular.fi.cr -> hxxp://www.bancopopular.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancopopular.fi.cr -> hxxp://www.bancopopular.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bancopopular.fi.cr -> hxxps://www.bancopopular.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bccr.fi.cr -> hxxps://www.bccr.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bccr.fi.cr -> hxxp://www.bccr.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bccr.fi.cr -> hxxp://www.bccr.fi.cr IE trusted site: HKU\S-1-5-21-374155167-3560257060-3864837840-1000\...\bccr.fi.cr -> hxxps://www.bccr.fi.cr There are 191 more sites. ==================== Hosts content: ========================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 20:34 - 2016-12-28 15:02 - 00001014 ____A C:\windows\system32\Drivers\etc\hosts 199.231.56.212 stage-fw1.kromephotos.local 199.231.56.164 prod-fw1.kromephotos.local 199.231.56.164 krome-prod-vpn.santaclara.enki.co 199.231.56.212 krome-stage-vpn.santaclara.enki.co ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-374155167-3560257060-3864837840-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\wmartinez\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is disabled. ==================== MSCONFIG/TASK MANAGER disabled items == ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [SPPSVC-In-TCP] => %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP-NoScope] => %SystemRoot%\system32\sppsvc.exe FirewallRules: [VirtualPC-In-UDP-1] => %SystemRoot%\System32\vpc.exe FirewallRules: [VirtualPC-In-UDP-2] => %SystemRoot%\System32\vpc.exe FirewallRules: [VirtualPC-In-TCP-1] => %SystemRoot%\System32\vpc.exe FirewallRules: [{A176A46A-FE89-4ACA-A31E-EA7262E84C5E}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{7DBA5D2B-52A0-4ACA-970A-B746BE0275C0}] => C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [{04C65F45-D604-4E81-8529-60CC730B8A39}] => C:\Users\wmartinez\AppData\Roaming\Dropbox\bin\Dropbox.exe FirewallRules: [TCP Query User{808E1BE7-98B4-4CDB-AF37-F95F806EC7AA}C:\users\wmartinez\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\wmartinez\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [UDP Query User{9FE6328F-AEF8-4346-AF37-0543D0BA5CA8}C:\users\wmartinez\appdata\roaming\dropbox\bin\dropbox.exe] => C:\users\wmartinez\appdata\roaming\dropbox\bin\dropbox.exe FirewallRules: [{C492F238-436B-49B6-A62C-B30D331060DF}] => C:\Users\wmartinez\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{F0F3C288-20E9-4EF9-AB5F-1AC763D5A3F1}] => C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{2A8AFA8D-DAEF-45DD-8A6C-220D34E38736}] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{791AF8BE-EA2E-44F2-938F-0A3BC54F9F73}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D9236148-2BB2-4D1D-B667-BA26DAA35BC4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{E90703A2-7564-436E-8E73-87C40E407AEC}] => C:\Program Files\Redis\redis-server.exe FirewallRules: [{A7F2F0D5-75A3-4D63-AF3F-9637DB9D5982}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{FBDB14A6-4B2E-42BF-876A-B935A3EF7C4F}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{A5876021-DB4F-4625-8A0D-4885C61D9862}] => C:\Program Files (x86)\Laplink\PCmover\pcmover.exe FirewallRules: [{74CC2248-E490-4084-9401-9881353C26E5}] => D:\Program Files\Cakewalk\Shared Utilities\StartPage\CakewalkStartScreen.exe FirewallRules: [{B010C85B-EC8A-408B-A3CA-6C5D1321025C}] => D:\Program Files\Cakewalk\Shared Utilities\StartPage\CakewalkStartScreen.exe FirewallRules: [{55967A1D-6485-4F47-A6F9-141E82632989}] => C:\Program Files (x86)\Cakewalk\Command Center\Cakewalk-Command-Center.exe FirewallRules: [{11A65260-2A5B-4F6F-936F-3E2CE438F7CE}] => C:\Program Files (x86)\Cakewalk\Command Center\Cakewalk-Command-Center.exe FirewallRules: [{B11CEDBF-87BB-4479-866D-82EF0382AB9D}] => C:\ProgramData\VIPRE\PatchManagement\VIPRE.PMAgent.exe FirewallRules: [{6FD7B80E-20C3-4D50-A862-7C231DE1049B}] => C:\ProgramData\VIPRE\PatchManagement\VIPRE.PMAgent.exe FirewallRules: [{3C91D18D-93AB-41A0-94FF-3D8C81E5B795}] => C:\ProgramData\VIPRE\PatchManagement\VIPRE.PMAgent.exe FirewallRules: [{7C8B726A-A196-41F6-A3A9-9AD022153E00}] => C:\ProgramData\VIPRE\PatchManagement\VIPRE.PMAgent.exe FirewallRules: [{6D3726E7-3CD0-4737-A59F-17B2164791E4}] => C:\ProgramData\VIPRE\PatchManagement\VIPRE.PMAgent.exe FirewallRules: [{460F6822-2940-42C3-A64F-4C46F1534681}] => C:\ProgramData\VIPRE\PatchManagement\VIPRE.PMAgent.exe FirewallRules: [{ED6F2FB9-569D-4C90-8B86-D2A579F1C0E9}] => C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{C21440E4-2EB5-4B07-AE86-0325CF2E3744}] => C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{8F6F7806-4D14-4D7C-96B2-4133DEFBDC4B}] => C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{2C45AD0F-D292-43CE-BFEF-5E8CEC45A8BD}] => C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{B053B351-79A9-4331-8E00-D89387837127}] => C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{81D7ECE1-8075-47CB-9604-3A16A9B8DE8B}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{9B8A522B-0B93-40FA-81B5-39B3F817520F}] => C:\Program Files (x86)\360\Total Security\softmgr\360InstantSetup.exe FirewallRules: [{F83E6974-6D71-4C49-BDB9-392A32C79960}] => C:\Program Files (x86)\360\Total Security\softmgr\360InstantSetup.exe FirewallRules: [{4F6C8766-6190-4C75-99FE-6A3763CA9A9B}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe FirewallRules: [{737EB593-95BA-46CA-861E-364A9D751451}] => C:\Program Files (x86)\360\Total Security\LiveUpdate360.exe FirewallRules: [{1EC666D5-39FA-4BCC-AD2D-D81814BE1704}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe FirewallRules: [{23908AFA-EEEC-4D34-B4B5-919069219BC3}] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe ==================== Restore Points ========================= ==================== Faulty Device Manager Devices ============= Name: Cisco Systems VPN Adapter for 64-bit Windows Description: Cisco Systems VPN Adapter for 64-bit Windows Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: CVirtA Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: ZAM Helper Driver Description: ZAM Helper Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: ZAM Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: ZAM Guard Driver Description: ZAM Guard Driver Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: ZAM_Guard Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Adaptador de minipuerto WiFi virtual de Microsoft Description: Adaptador de minipuerto WiFi virtual de Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Microsoft Virtual WiFi Miniport Adapter #2 Description: Adaptador de minipuerto WiFi virtual de Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vwifimp Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: SBRE Description: SBRE Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1} Manufacturer: Service: SBRE Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Event log errors: ========================= Application errors: ================== Error: (01/27/2017 03:16:30 PM) (Source: Estación de servicio TOSHIBA) (EventID: 0) (User: ) Description: TSS Load: could not communicate with TMachInfo service Error: (01/27/2017 03:16:30 PM) (Source: Estación de servicio TOSHIBA) (EventID: 0) (User: ) Description: El servicio TMachInfo no se encontró en el equipo '.'. Error: (01/27/2017 03:15:18 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: No se pudo reactivar el filtro de eventos con la consulta "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" en el espacio de nombres "//./root/CIMV2" por el error 0x80041003. Los eventos no se podrán entregar a través de este filtro hasta que se corrija este problema. Error: (01/27/2017 07:56:28 AM) (Source: Estación de servicio TOSHIBA) (EventID: 0) (User: ) Description: TSS Load: could not communicate with TMachInfo service Error: (01/27/2017 07:56:28 AM) (Source: Estación de servicio TOSHIBA) (EventID: 0) (User: ) Description: El servicio TMachInfo no se encontró en el equipo '.'. Error: (01/27/2017 07:55:17 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: No se pudo reactivar el filtro de eventos con la consulta "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" en el espacio de nombres "//./root/CIMV2" por el error 0x80041003. Los eventos no se podrán entregar a través de este filtro hasta que se corrija este problema. Error: (01/27/2017 07:53:55 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: No se pudo reactivar el filtro de eventos con la consulta "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" en el espacio de nombres "//./root/CIMV2" por el error 0x80041003. Los eventos no se podrán entregar a través de este filtro hasta que se corrija este problema. Error: (01/27/2017 07:06:02 AM) (Source: Windows Search Service) (EventID: 3100) (User: ) Description: No se puede inicializar el proceso de host de filtro. Finalizando. Detalles: Acceso denegado. (HRESULT : 0x80070005) (0x80070005) Error: (01/27/2017 06:14:48 AM) (Source: Estación de servicio TOSHIBA) (EventID: 0) (User: ) Description: TSS Load: could not communicate with TMachInfo service Error: (01/27/2017 06:14:48 AM) (Source: Estación de servicio TOSHIBA) (EventID: 0) (User: ) Description: El servicio TMachInfo no se encontró en el equipo '.'. System errors: ============= Error: (01/27/2017 03:16:20 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} y APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes. Error: (01/27/2017 03:15:19 PM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: El siguiente controlador de inicio del sistema o de inicio del arranque no se cargó correctamente: cdrom SBRE Error: (01/27/2017 03:14:26 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: El servidor {F9717507-6651-4EDB-BFF7-AE615179BCCF} no se registró con DCOM dentro del tiempo de espera requerido. Error: (01/27/2017 07:56:18 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID {C97FCC79-E628-407D-AE68-A06AD6D8B4D1} y APPID {344ED43D-D086-4961-86A6-1106F4ACAD9B} al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes. Error: (01/27/2017 07:55:18 AM) (Source: Service Control Manager) (EventID: 7026) (User: ) Description: El siguiente controlador de inicio del sistema o de inicio del arranque no se cargó correctamente: cdrom SBRE Error: (01/27/2017 07:54:10 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: Error de DCOM "1084" al intentar iniciar el servicio VipreEdgeProtection con argumentos "-Service" para ejecutar el servidor: {B8653312-46D3-4132-811F-433E762EE0BE} Error: (01/27/2017 07:54:02 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: El servicio Enumerador de bus IP PnP-X depende del servicio Host de proveedor de detección de función, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia. Error: (01/27/2017 07:52:39 AM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: El servicio Servicio de lista de redes depende del servicio Reconocimiento de ubicación de red, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia. Error: (01/27/2017 07:52:39 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: Error de DCOM "1068" al intentar iniciar el servicio fdPHost con argumentos "" para ejecutar el servidor: {D3DCB472-7261-43CE-924B-0704BD730D5F} Error: (01/27/2017 07:52:39 AM) (Source: DCOM) (EventID: 10005) (User: ) Description: Error de DCOM "1068" al intentar iniciar el servicio fdPHost con argumentos "" para ejecutar el servidor: {145B4335-FE2A-4927-A040-7C35AD3180EF} CodeIntegrity: =================================== Date: 2014-06-16 18:11:09.173 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 17:40:44.568 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 17:24:11.793 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 17:14:01.443 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 17:03:33.834 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 16:47:49.470 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 16:24:15.546 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 16:11:53.424 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 15:51:58.369 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. Date: 2014-06-16 15:45:18.324 Description: Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\l3codeca.acm porque el conjunto de hashes de imagen por página no se encuentra en el sistema. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i7-3687U CPU @ 2.10GHz Percentage of memory in use: 75% Total physical RAM: 6038.17 MB Available physical RAM: 1481.42 MB Total Virtual: 12074.52 MB Available Virtual: 6265.36 MB ==================== Drives ================================ Drive c: (Base) (Fixed) (Total:230.62 GB) (Free:47.9 GB) NTFS ==>[system with boot components (obtained from drive)] ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 238.5 GB) (Disk ID: 75F0994E) Partition 1: (Active) - (Size=1.5 GB) - (Type=27) Partition 2: (Not Active) - (Size=230.6 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=6.3 GB) - (Type=84) ==================== End of Addition.txt ============================