TechSpot

AVG won't finish removing threats so I followed your instructions and runned the farbar tool

By gavq89
Apr 24, 2016
  1. ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-24 10:43 - 2016-04-24 10:43 - 00031381 _____ C:\Users\gustavo\Downloads\FRST.txt
    2016-04-24 10:42 - 2016-04-24 10:43 - 00000000 ____D C:\FRST
    2016-04-24 10:40 - 2016-04-24 10:42 - 02375680 _____ (Farbar) C:\Users\gustavo\Downloads\FRST64.exe
    2016-04-23 16:30 - 2016-04-23 16:30 - 00055544 _____ C:\Users\gustavo\Downloads\Libro1.xlsx
    2016-04-23 16:20 - 2016-04-23 16:20 - 00054444 _____ C:\Users\gustavo\Downloads\inf_anual (2).xlsx
    2016-04-23 16:20 - 2016-04-23 16:20 - 00048640 _____ C:\Users\gustavo\Downloads\pib_1950_2013.xls
    2016-04-23 15:46 - 2016-04-23 15:47 - 00000000 ____D C:\Users\gustavo\Desktop\DATA TESIS
    2016-04-23 15:45 - 2016-04-23 15:46 - 00054444 _____ C:\Users\gustavo\Downloads\inf_anual (1).xlsx
    2016-04-23 01:53 - 2016-04-23 01:53 - 00005208 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for GUSTAVO-gustavo Gustavo
    2016-04-22 19:30 - 2016-04-24 09:41 - 00000000 ____D C:\Users\gustavo\AppData\LocalLow\uTorrent
    2016-04-22 18:22 - 2016-04-22 18:22 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Prodiance
    2016-04-22 18:15 - 2016-04-23 14:48 - 00000000 ____D C:\Program Files (x86)\IHeeaWA
    2016-04-22 16:58 - 2016-04-22 16:58 - 00590406 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.pdf
    2016-04-22 16:34 - 2016-04-22 16:35 - 00175142 _____ C:\Users\gustavo\Desktop\Carta de presentacion.pdf
    2016-04-22 10:47 - 2016-04-22 10:47 - 00000000 ____D C:\ProgramData\IHeeaWA
    2016-04-22 10:39 - 2016-04-22 10:39 - 00000007 _____ C:\WINDOWS\SysWOW64\tem1D1.tmp
    2016-04-22 10:39 - 2016-04-22 10:39 - 00000000 ____D C:\Users\gustavo\AppData\Local\IHeeaWA
    2016-04-22 10:38 - 2016-04-23 14:48 - 00014824 _____ C:\WINDOWS\System32\Tasks\IHeeaWABrowserUpdateUA
    2016-04-22 10:38 - 2016-04-23 14:48 - 00003888 _____ C:\WINDOWS\System32\Tasks\IHeeaWABrowserUpdateCore
    2016-04-22 10:38 - 2016-04-22 18:16 - 00002192 _____ C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-04-22 10:38 - 2016-04-22 10:38 - 00000000 ____D C:\Users\Public\Documents\IHeeaWA
    2016-04-22 10:33 - 2016-04-22 10:33 - 00000000 ____D C:\WINDOWS\system32\log
    2016-04-22 10:33 - 2016-04-22 10:33 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Elex-tech
    2016-04-22 10:33 - 2016-04-22 10:33 - 00000000 ____D C:\Program Files (x86)\Elex-tech
    2016-04-22 10:33 - 2016-04-21 22:08 - 00055056 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys
    2016-04-22 10:33 - 2015-06-29 22:20 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
    2016-04-22 00:55 - 2016-04-22 00:55 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
    2016-04-22 00:55 - 2016-04-22 00:55 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
    2016-04-22 00:48 - 2016-04-22 00:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2016-04-20 23:32 - 2016-04-21 21:03 - 00590406 _____ C:\Users\gustavo\Desktop\Resumé - Gustavo Visconti - Español.pdf
    2016-04-20 23:21 - 2016-04-20 23:21 - 00000000 ____D C:\Users\gustavo\Documents\Custom Office Templates
    2016-04-20 22:19 - 2016-04-23 01:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
    2016-04-20 22:18 - 2016-04-20 22:18 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
    2016-04-20 22:17 - 2016-04-20 22:18 - 00000000 ____D C:\Program Files\Microsoft SQL Server
    2016-04-20 22:17 - 2016-04-20 22:17 - 00000000 ____D C:\WINDOWS\PCHEALTH
    2016-04-20 22:14 - 2016-04-20 22:14 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
    2016-04-20 22:14 - 2016-04-20 22:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
    2016-04-20 22:13 - 2016-04-20 22:13 - 00000000 __RHD C:\MSOCache
    2016-04-20 17:41 - 2016-04-20 19:28 - 00000000 ____D C:\Users\gustavo\Downloads\Microsoft Office Professional Plus 2013
    2016-04-20 15:45 - 2016-04-20 15:45 - 00000943 _____ C:\Users\gustavo\Desktop\µTorrent.lnk
    2016-04-20 15:45 - 2016-04-20 15:45 - 00000923 _____ C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
    2016-04-20 15:43 - 2016-04-24 10:44 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\uTorrent
    2016-04-20 15:42 - 2016-04-20 15:42 - 01959424 _____ (BitTorrent Inc.) C:\Users\gustavo\Downloads\uTorrent.exe
    2016-04-20 15:39 - 2016-04-20 15:39 - 00596346 _____ C:\Users\gustavo\Desktop\Microsoft_Office_Professional_Plus_2013_x86_PT-BR__Ativador.zip
    2016-04-20 10:08 - 2016-04-20 10:16 - 00987728 _____ (Google Inc.) C:\Users\gustavo\Downloads\ChromeSetup.exe
    2016-04-19 14:45 - 2016-04-19 14:46 - 00193041 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.docx (2).pdf
    2016-04-19 11:21 - 2016-04-24 09:43 - 00000000 ____D C:\Program Files (x86)\WinZipper
    2016-04-19 11:21 - 2016-04-22 10:27 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\WinZiper
    2016-04-19 11:21 - 2016-04-19 11:21 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\eCyber
    2016-04-19 11:21 - 2016-04-19 11:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
    2016-04-19 11:20 - 2016-04-22 10:28 - 00000000 ____D C:\Program Files (x86)\qksee
    2016-04-19 11:20 - 2016-04-19 11:20 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\qksee
    2016-04-19 11:20 - 2016-04-19 11:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee
    2016-04-19 11:18 - 2016-04-19 11:18 - 00009422 _____ C:\WINDOWS\System32\Tasks\Browser Updater Task(Core)
    2016-04-19 11:18 - 2016-04-19 11:18 - 00000000 ____D C:\ProgramData\lwinpl
    2016-04-19 11:18 - 2016-04-19 11:18 - 00000000 ____D C:\Program Files (x86)\QQBrowser
    2016-04-16 21:28 - 2016-04-16 21:28 - 00180058 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.docx (1).pdf
    2016-04-16 21:28 - 2016-04-16 21:28 - 00180058 _____ C:\Users\gustavo\Desktop\Resumé - Gustavo Visconti - Español.docx (1).pdf
    2016-04-14 17:53 - 2016-04-14 17:53 - 00181898 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.docx.pdf
    2016-04-13 14:02 - 2016-04-13 18:23 - 1902281244 _____ C:\Users\gustavo\Desktop\114- NDR-JohnnyRiley-JJKnight-MarkLong.mp4
    2016-04-13 11:25 - 2016-04-13 14:03 - 1439209589 _____ C:\Users\gustavo\Desktop\08- SC-WinterGetawayDay2720.mp4
    2016-04-13 00:14 - 2016-04-13 10:08 - 1100604134 _____ C:\Users\gustavo\Desktop\376- SC-WinterGetawayDay7720.mp4
    2016-04-13 00:13 - 2016-04-13 00:13 - 00000000 ____D C:\ProgramData\boost_interprocess
    2016-04-13 00:07 - 2016-04-22 19:36 - 00000000 ____D C:\Program Files (x86)\hohobnd
    2016-04-13 00:07 - 2016-04-20 15:50 - 00000000 ____D C:\Program Files (x86)\Sosition
    2016-04-13 00:07 - 2016-04-20 07:38 - 00000000 ____D C:\Users\gustavo\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
    2016-04-13 00:07 - 2016-04-13 00:07 - 00014610 _____ C:\WINDOWS\System32\Tasks\Sosition Reports
    2016-04-13 00:07 - 2016-04-13 00:07 - 00014504 _____ C:\WINDOWS\System32\Tasks\Clteyghuwph System
    2016-04-13 00:07 - 2016-04-13 00:07 - 00000000 ____D C:\Program Files (x86)\Clteyghuwph
    2016-04-13 00:06 - 2016-04-20 15:50 - 00000000 ____D C:\Program Files (x86)\SrpnFiles
    2016-04-13 00:06 - 2016-04-13 00:13 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\SpringFiles
    2016-04-13 00:06 - 2016-04-13 00:07 - 00000000 ____D C:\Users\Public\Documents\dmp
    2016-04-13 00:06 - 2016-04-13 00:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\SrpnFiles
    2016-04-13 00:05 - 2016-04-13 00:06 - 04282368 _____ C:\Users\gustavo\Downloads\MS_Office_2016_Key_Working_For_Activation.iso
    2016-04-12 23:53 - 2016-04-12 23:53 - 00003712 _____ C:\WINDOWS\System32\Tasks\KMSAuto
    2016-04-12 23:53 - 2016-04-12 23:53 - 00002488 _____ C:\WINDOWS\KMSAutoLite.ini
    2016-04-12 23:53 - 2016-04-12 23:49 - 06230776 _____ C:\WINDOWS\KMSAuto.exe
    2016-04-12 23:48 - 2016-04-12 23:48 - 02466502 _____ C:\Users\gustavo\Downloads\ActivadorOffice2016.zip
    2016-04-12 23:41 - 2016-04-12 23:41 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
    2016-04-12 20:46 - 2016-04-01 23:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
    2016-04-12 20:46 - 2016-04-01 22:56 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
    2016-04-12 20:46 - 2016-04-01 22:51 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2016-04-12 20:46 - 2016-04-01 22:49 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
    2016-04-12 20:46 - 2016-04-01 22:48 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
    2016-04-12 20:46 - 2016-04-01 22:45 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
    2016-04-12 20:46 - 2016-04-01 22:44 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
    2016-04-12 20:46 - 2016-04-01 22:39 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
    2016-04-12 20:46 - 2016-04-01 22:37 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
    2016-04-12 20:46 - 2016-04-01 22:37 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2016-04-12 20:46 - 2016-04-01 22:30 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
    2016-04-12 20:46 - 2016-03-29 05:52 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
    2016-04-12 20:46 - 2016-03-29 05:52 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
    2016-04-12 20:46 - 2016-03-29 05:50 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2016-04-12 20:46 - 2016-03-29 05:50 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
    2016-04-12 20:46 - 2016-03-29 05:50 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
    2016-04-12 20:46 - 2016-03-29 05:50 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
    2016-04-12 20:46 - 2016-03-29 05:48 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
    2016-04-12 20:46 - 2016-03-29 05:32 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
    2016-04-12 20:46 - 2016-03-29 05:26 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
    2016-04-12 20:46 - 2016-03-29 05:07 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
    2016-04-12 20:46 - 2016-03-29 04:58 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
    2016-04-12 20:46 - 2016-03-29 04:47 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
    2016-04-12 20:46 - 2016-03-29 04:43 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
    2016-04-12 20:46 - 2016-03-29 04:41 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2016-04-12 20:46 - 2016-03-29 04:38 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
    2016-04-12 20:46 - 2016-03-29 04:14 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
    2016-04-12 20:46 - 2016-03-29 04:11 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
    2016-04-12 20:46 - 2016-03-29 03:56 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
    2016-04-12 20:46 - 2016-03-29 03:36 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
    2016-04-12 20:46 - 2016-03-29 03:32 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
    2016-04-12 20:46 - 2016-03-29 03:31 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
    2016-04-12 20:46 - 2016-03-29 03:28 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
    2016-04-12 20:46 - 2016-03-29 03:28 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
    2016-04-12 20:46 - 2016-03-29 03:16 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
    2016-04-12 20:46 - 2016-03-29 03:09 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
    2016-04-12 20:46 - 2016-03-29 03:08 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
    2016-04-12 20:46 - 2016-03-29 03:07 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
    2016-04-12 20:46 - 2016-03-29 03:06 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
    2016-04-12 20:46 - 2016-03-29 03:04 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
    2016-04-12 20:46 - 2016-03-29 02:58 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
    2016-04-12 20:46 - 2016-03-29 02:57 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
    2016-04-12 20:46 - 2016-03-29 02:53 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
    2016-04-12 20:46 - 2016-03-29 02:52 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
    2016-04-12 20:46 - 2016-03-29 02:50 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
    2016-04-12 20:46 - 2016-03-29 02:49 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
    2016-04-12 20:46 - 2016-03-29 02:49 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
    2016-04-12 20:46 - 2016-03-29 02:46 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
    2016-04-12 20:46 - 2016-03-29 02:46 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
    2016-04-12 20:46 - 2016-03-29 02:45 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
    2016-04-12 20:46 - 2016-03-29 02:45 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
    2016-04-12 20:46 - 2016-03-29 02:44 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
    2016-04-12 20:46 - 2016-03-29 02:44 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
    2016-04-12 20:46 - 2016-03-29 02:44 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
    2016-04-12 20:46 - 2016-03-29 02:43 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
    2016-04-12 20:46 - 2016-03-29 02:42 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
    2016-04-12 20:46 - 2016-03-29 02:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
    2016-04-12 20:46 - 2016-03-29 02:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
    2016-04-12 20:46 - 2016-03-29 02:41 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
    2016-04-12 20:46 - 2016-03-29 02:40 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2016-04-12 20:46 - 2016-03-29 02:40 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
    2016-04-12 20:46 - 2016-03-29 02:37 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
    2016-04-12 20:46 - 2016-03-29 02:37 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
    2016-04-12 20:46 - 2016-03-29 02:36 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
    2016-04-12 20:46 - 2016-03-29 02:35 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
    2016-04-12 20:46 - 2016-03-29 02:32 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
    2016-04-12 20:46 - 2016-03-29 02:32 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
    2016-04-12 20:46 - 2016-03-29 02:32 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
    2016-04-12 20:46 - 2016-03-29 02:30 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
    2016-04-12 20:46 - 2016-03-29 02:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
    2016-04-12 20:46 - 2016-03-29 02:29 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
    2016-04-12 20:46 - 2016-03-29 02:26 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
    2016-04-12 20:46 - 2016-03-29 02:26 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
    2016-04-12 20:46 - 2016-03-29 02:18 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
    2016-04-12 20:46 - 2016-03-29 02:14 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
    2016-04-12 20:46 - 2016-03-29 02:13 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
    2016-04-12 20:46 - 2016-03-29 02:12 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2016-04-12 20:46 - 2016-03-29 02:09 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
    2016-04-12 20:46 - 2016-03-29 02:07 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
    2016-04-12 20:46 - 2016-03-29 02:07 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
    2016-04-12 20:46 - 2016-03-29 02:07 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
    2016-04-12 20:46 - 2016-03-29 02:06 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
    2016-04-12 20:46 - 2016-03-29 02:05 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
    2016-04-12 20:46 - 2016-03-29 02:04 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
    2016-04-12 20:46 - 2016-03-29 02:04 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
    2016-04-12 20:46 - 2016-03-29 02:02 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2016-04-12 20:46 - 2016-03-29 02:02 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
    2016-04-12 20:46 - 2016-03-29 02:01 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2016-04-12 20:46 - 2016-03-29 02:01 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
    2016-04-12 20:46 - 2016-03-29 02:00 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
    2016-04-12 20:46 - 2016-03-29 01:58 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
    2016-04-12 20:46 - 2016-03-29 01:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
    2016-04-12 20:46 - 2016-03-29 01:57 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
    2016-04-12 20:46 - 2016-03-29 01:56 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2016-04-12 20:46 - 2016-03-29 01:49 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2016-04-12 20:46 - 2016-03-29 01:47 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
    2016-04-12 20:46 - 2016-03-29 01:44 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
    2016-04-12 20:46 - 2016-03-29 01:32 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2016-04-12 20:46 - 2016-03-29 01:31 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2016-04-12 20:46 - 2016-03-29 01:28 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
    2016-04-12 20:46 - 2016-03-29 01:26 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2016-04-12 20:46 - 2016-03-29 01:22 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
    2016-04-12 20:46 - 2016-03-29 01:21 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2016-04-12 20:46 - 2016-03-29 01:21 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
    2016-04-12 20:46 - 2016-03-29 01:19 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
    2016-04-12 20:46 - 2016-03-29 01:15 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
    2016-04-12 20:46 - 2016-03-29 01:13 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
    2016-04-12 20:46 - 2016-03-29 01:11 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2016-04-12 20:46 - 2016-03-29 01:11 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2016-04-12 20:46 - 2016-03-29 01:09 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2016-04-12 20:46 - 2016-03-29 01:08 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2016-04-12 20:46 - 2016-03-29 01:08 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
    2016-04-12 20:46 - 2016-03-29 01:07 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2016-04-12 20:46 - 2016-03-29 01:06 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
    2016-04-12 20:46 - 2016-03-29 00:57 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2016-04-12 20:46 - 2016-03-29 00:57 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2016-04-12 20:46 - 2016-03-29 00:56 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
    2016-04-12 20:46 - 2016-03-29 00:55 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
    2016-04-12 20:45 - 2016-04-01 23:40 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
    2016-04-12 20:45 - 2016-04-01 23:40 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
    2016-04-12 20:45 - 2016-04-01 23:40 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
    2016-04-12 20:45 - 2016-04-01 23:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
    2016-04-12 20:45 - 2016-04-01 22:59 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
    2016-04-12 20:45 - 2016-04-01 22:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
    2016-04-12 20:45 - 2016-04-01 22:55 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
    2016-04-12 20:45 - 2016-04-01 22:55 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
    2016-04-12 20:45 - 2016-04-01 22:53 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
    2016-04-12 20:45 - 2016-04-01 22:53 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
    2016-04-12 20:45 - 2016-04-01 22:38 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
    2016-04-12 20:45 - 2016-04-01 22:33 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
    2016-04-12 20:45 - 2016-03-29 05:53 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
    2016-04-12 20:45 - 2016-03-29 05:45 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
    2016-04-12 20:45 - 2016-03-29 05:41 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
    2016-04-12 20:45 - 2016-03-29 05:35 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
    2016-04-12 20:45 - 2016-03-29 05:32 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
    2016-04-12 20:45 - 2016-03-29 04:58 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
    2016-04-12 20:45 - 2016-03-29 04:58 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
    2016-04-12 20:45 - 2016-03-29 04:55 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
    2016-04-12 20:45 - 2016-03-29 04:55 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
    2016-04-12 20:45 - 2016-03-29 04:49 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
    2016-04-12 20:45 - 2016-03-29 04:48 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
    2016-04-12 20:45 - 2016-03-29 04:41 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
    2016-04-12 20:45 - 2016-03-29 04:40 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
    2016-04-12 20:45 - 2016-03-29 04:39 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
    2016-04-12 20:45 - 2016-03-29 04:38 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
    2016-04-12 20:45 - 2016-03-29 04:37 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
    2016-04-12 20:45 - 2016-03-29 04:14 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
    2016-04-12 20:45 - 2016-03-29 04:11 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
    2016-04-12 20:45 - 2016-03-29 04:02 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
    2016-04-12 20:45 - 2016-03-29 03:56 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
    2016-04-12 20:45 - 2016-03-29 03:56 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
    2016-04-12 20:45 - 2016-03-29 03:55 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
    2016-04-12 20:45 - 2016-03-29 03:54 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
    2016-04-12 20:45 - 2016-03-29 03:53 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
    2016-04-12 20:45 - 2016-03-29 03:51 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
    2016-04-12 20:45 - 2016-03-29 03:47 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
    2016-04-12 20:45 - 2016-03-29 03:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
    2016-04-12 20:45 - 2016-03-29 03:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll
    2016-04-12 20:45 - 2016-03-29 03:36 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
    2016-04-12 20:45 - 2016-03-29 03:30 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
    2016-04-12 20:45 - 2016-03-29 03:30 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
    2016-04-12 20:45 - 2016-03-29 03:30 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
    2016-04-12 20:45 - 2016-03-29 03:29 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
    2016-04-12 20:45 - 2016-03-29 03:27 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
    2016-04-12 20:45 - 2016-03-29 03:27 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
    2016-04-12 20:45 - 2016-03-29 03:27 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
    2016-04-12 20:45 - 2016-03-29 03:27 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
    2016-04-12 20:45 - 2016-03-29 03:25 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
    2016-04-12 20:45 - 2016-03-29 03:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
    2016-04-12 20:45 - 2016-03-29 03:25 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
    2016-04-12 20:45 - 2016-03-29 03:24 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
    2016-04-12 20:45 - 2016-03-29 03:23 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
    2016-04-12 20:45 - 2016-03-29 03:22 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
    2016-04-12 20:45 - 2016-03-29 03:21 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
    2016-04-12 20:45 - 2016-03-29 03:21 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
    2016-04-12 20:45 - 2016-03-29 03:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
    2016-04-12 20:45 - 2016-03-29 03:18 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
    2016-04-12 20:45 - 2016-03-29 03:18 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
    2016-04-12 20:45 - 2016-03-29 03:16 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
    2016-04-12 20:45 - 2016-03-29 03:14 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
    2016-04-12 20:45 - 2016-03-29 03:12 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
    2016-04-12 20:45 - 2016-03-29 03:06 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
    2016-04-12 20:45 - 2016-03-29 03:05 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
    2016-04-12 20:45 - 2016-03-29 03:05 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
    2016-04-12 20:45 - 2016-03-29 03:04 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
    2016-04-12 20:45 - 2016-03-29 03:04 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
    2016-04-12 20:45 - 2016-03-29 03:04 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
    2016-04-12 20:45 - 2016-03-29 03:03 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
    2016-04-12 20:45 - 2016-03-29 03:02 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2016-04-12 20:45 - 2016-03-29 03:02 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
    2016-04-12 20:45 - 2016-03-29 03:00 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
    2016-04-12 20:45 - 2016-03-29 03:00 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
    2016-04-12 20:45 - 2016-03-29 02:56 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
    2016-04-12 20:45 - 2016-03-29 02:53 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
    2016-04-12 20:45 - 2016-03-29 02:53 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
    2016-04-12 20:45 - 2016-03-29 02:51 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
    2016-04-12 20:45 - 2016-03-29 02:50 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
    2016-04-12 20:45 - 2016-03-29 02:50 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
    2016-04-12 20:45 - 2016-03-29 02:50 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
    2016-04-12 20:45 - 2016-03-29 02:49 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
    2016-04-12 20:45 - 2016-03-29 02:48 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
    2016-04-12 20:45 - 2016-03-29 02:47 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
    2016-04-12 20:45 - 2016-03-29 02:47 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
    2016-04-12 20:45 - 2016-03-29 02:47 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
    2016-04-12 20:45 - 2016-03-29 02:44 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
    2016-04-12 20:45 - 2016-03-29 02:41 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
    2016-04-12 20:45 - 2016-03-29 02:41 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
    2016-04-12 20:45 - 2016-03-29 02:41 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
    2016-04-12 20:45 - 2016-03-29 02:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
    2016-04-12 20:45 - 2016-03-29 02:41 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
    2016-04-12 20:45 - 2016-03-29 02:39 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
    2016-04-12 20:45 - 2016-03-29 02:39 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
    2016-04-12 20:45 - 2016-03-29 02:39 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
    2016-04-12 20:45 - 2016-03-29 02:38 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
    2016-04-12 20:45 - 2016-03-29 02:38 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
    2016-04-12 20:45 - 2016-03-29 02:38 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
    2016-04-12 20:45 - 2016-03-29 02:36 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2016-04-12 20:45 - 2016-03-29 02:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
    2016-04-12 20:45 - 2016-03-29 02:35 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
    2016-04-12 20:45 - 2016-03-29 02:34 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
    2016-04-12 20:45 - 2016-03-29 02:33 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
    2016-04-12 20:45 - 2016-03-29 02:30 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
    2016-04-12 20:45 - 2016-03-29 02:30 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
    2016-04-12 20:45 - 2016-03-29 02:29 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
    2016-04-12 20:45 - 2016-03-29 02:29 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
    2016-04-12 20:45 - 2016-03-29 02:25 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
    2016-04-12 20:45 - 2016-03-29 02:23 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
    2016-04-12 20:45 - 2016-03-29 02:23 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
    2016-04-12 20:45 - 2016-03-29 02:22 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
    2016-04-12 20:45 - 2016-03-29 02:22 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
    2016-04-12 20:45 - 2016-03-29 02:19 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
    2016-04-12 20:45 - 2016-03-29 02:12 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
    2016-04-12 20:45 - 2016-03-29 02:12 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
    2016-04-12 20:45 - 2016-03-29 02:11 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
    2016-04-12 20:45 - 2016-03-29 02:10 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
    2016-04-12 20:45 - 2016-03-29 02:09 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
    2016-04-12 20:45 - 2016-03-29 02:09 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
    2016-04-12 20:45 - 2016-03-29 02:08 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
    2016-04-12 20:45 - 2016-03-29 02:06 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
    2016-04-12 20:45 - 2016-03-29 02:04 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
    2016-04-12 20:45 - 2016-03-29 02:04 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
    2016-04-12 20:45 - 2016-03-29 02:01 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
    2016-04-12 20:45 - 2016-03-29 02:01 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2016-04-12 20:45 - 2016-03-29 01:59 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
    2016-04-12 20:45 - 2016-03-29 01:59 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
    2016-04-12 20:45 - 2016-03-29 01:58 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
    2016-04-12 20:45 - 2016-03-29 01:57 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
    2016-04-12 20:45 - 2016-03-29 01:57 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
    2016-04-12 20:45 - 2016-03-29 01:57 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
    2016-04-12 20:45 - 2016-03-29 01:53 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
    2016-04-12 20:45 - 2016-03-29 01:52 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
    2016-04-12 20:45 - 2016-03-29 01:43 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
    2016-04-12 20:45 - 2016-03-29 01:40 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
    2016-04-12 20:45 - 2016-03-29 01:36 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
    2016-04-12 20:45 - 2016-03-29 01:35 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
    2016-04-12 20:45 - 2016-03-29 01:35 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
    2016-04-12 20:45 - 2016-03-29 01:34 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
    2016-04-12 20:45 - 2016-03-29 01:34 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
    2016-04-12 20:45 - 2016-03-29 01:31 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
    2016-04-12 20:45 - 2016-03-29 01:30 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
    2016-04-12 20:45 - 2016-03-29 01:15 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
    2016-04-12 20:45 - 2016-03-29 01:13 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
    2016-04-12 20:45 - 2016-03-29 01:05 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
    2016-04-12 20:45 - 2016-03-29 00:58 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
    2016-04-12 20:45 - 2016-03-29 00:57 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
    2016-04-12 20:45 - 2016-03-29 00:56 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
    2016-04-12 20:45 - 2016-03-29 00:55 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
    2016-04-12 20:45 - 2016-03-29 00:51 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002477 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002408 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office 2016
    2016-04-12 19:15 - 2016-04-12 19:15 - 00000000 ____D C:\Program Files\Microsoft Office 15
    2016-04-12 17:44 - 2016-04-12 17:44 - 00004608 _____ C:\WINDOWS\SECOH-QAD.exe
    2016-04-12 17:44 - 2016-04-12 17:44 - 00003584 _____ C:\WINDOWS\SECOH-QAD.dll
    2016-04-12 17:40 - 2016-04-12 17:40 - 01977052 _____ C:\Users\gustavo\Downloads\Activador (By TecnorRoberto.rar
    2016-04-12 17:30 - 2016-04-12 17:33 - 00003804 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
    2016-04-12 17:30 - 2016-04-12 17:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
    2016-04-12 17:29 - 2016-04-12 17:33 - 00000000 ____D C:\Program Files\KMSpico
    2016-04-12 17:27 - 2016-04-12 17:28 - 02939808 _____ C:\Users\gustavo\Downloads\activador by Roberto.rar
    2016-04-12 17:23 - 2016-04-12 17:23 - 00000000 ____D C:\Program Files (x86)\PPRX
    2016-04-12 17:20 - 2016-04-12 17:23 - 08687104 _____ (suprx) C:\Users\gustavo\Downloads\sharewithus-2016.exe
    2016-03-31 16:10 - 2016-03-31 16:10 - 02841957 _____ C:\Users\gustavo\Downloads\Trabajo de Grado Completo (1).pdf
    2016-03-29 22:17 - 2016-04-23 18:27 - 00000000 ____D C:\Users\gustavo\Desktop\TESIS YAYA
    2016-03-29 22:17 - 2016-03-29 22:17 - 00000000 ____D C:\Users\gustavo\Downloads\New folder
    2016-03-29 20:22 - 2016-03-29 20:22 - 00009548 _____ C:\Users\gustavo\Downloads\Gato público total como porcentaje del PIB.xlsx
    2016-03-29 20:10 - 2016-03-29 20:10 - 00074240 _____ C:\Users\gustavo\Downloads\7_1_7.xls
    2016-03-29 20:09 - 2016-03-29 20:09 - 00220672 _____ C:\Users\gustavo\Downloads\CAP1.xls
    2016-03-29 17:12 - 2016-03-29 17:12 - 00051712 _____ C:\Users\gustavo\Downloads\4_5_7.xls
    2016-03-29 17:11 - 2016-03-29 17:11 - 01142272 _____ C:\Users\gustavo\Downloads\4_4_2.xls
    2016-03-29 17:09 - 2016-03-29 17:09 - 00080896 _____ C:\Users\gustavo\Downloads\5_2_2.xls
    2016-03-29 17:08 - 2016-03-29 17:08 - 00991744 _____ C:\Users\gustavo\Downloads\5_2_4 (1).xls
    2016-03-29 17:05 - 2016-04-02 23:45 - 00991744 _____ C:\Users\gustavo\Downloads\5_2_4.xls
    2016-03-25 21:44 - 2016-04-20 10:48 - 00000000 ____D C:\WINDOWS\Minidump
     
  2. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-24 10:06 - 2015-02-22 21:22 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    2016-04-24 09:47 - 2015-10-30 02:51 - 00000000 ____D C:\WINDOWS\INF
    2016-04-24 09:47 - 2015-07-30 22:44 - 00883044 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2016-04-24 09:40 - 2015-12-05 05:57 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2016-04-24 09:40 - 2015-12-04 08:13 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
    2016-04-24 09:40 - 2015-02-22 21:22 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2016-04-24 09:40 - 2014-12-20 11:23 - 00000000 ___RD C:\Users\gustavo\iCloudDrive
    2016-04-24 09:28 - 2015-10-30 01:58 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
    2016-04-24 09:27 - 2016-03-13 22:23 - 00000000 ____D C:\Users\gustavo\AppData\Local\CrashDumps
    2016-04-24 09:26 - 2015-07-19 15:50 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Skype
    2016-04-24 08:54 - 2015-12-04 08:11 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
    2016-04-24 06:14 - 2014-09-12 19:33 - 00004156 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{85027A90-13B9-424E-8FFD-7BA10B70D1D8}
    2016-04-24 03:08 - 2014-10-03 15:18 - 00000000 ____D C:\ProgramData\MFAData
    2016-04-23 16:30 - 2014-09-12 19:07 - 00000000 ____D C:\Users\gustavo\AppData\Local\Packages
    2016-04-23 11:04 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\system32\NDF
    2016-04-23 11:04 - 2015-06-25 09:47 - 00000000 ____D C:\Users\gustavo\AppData\Local\ElevatedDiagnostics
    2016-04-22 19:29 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\AppReadiness
    2016-04-22 17:21 - 2015-12-04 08:14 - 00000000 ____D C:\Users\gustavo
    2016-04-22 10:38 - 2014-09-12 19:35 - 00002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-04-22 10:27 - 2015-12-04 08:11 - 00345952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2016-04-22 01:48 - 2015-10-30 02:54 - 00000000 ____D C:\Program Files\Common Files\System
    2016-04-22 01:48 - 2013-08-22 08:55 - 00000167 _____ C:\WINDOWS\win.ini
    2016-04-22 01:41 - 2015-10-30 02:54 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2016-04-21 18:17 - 2015-10-30 02:54 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-04-21 17:55 - 2015-10-30 01:58 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
    2016-04-20 22:18 - 2015-10-30 04:37 - 00000000 ____D C:\WINDOWS\ShellNew
    2016-04-20 22:17 - 2016-01-28 18:35 - 00000000 ____D C:\Program Files\Microsoft Office
    2016-04-20 22:17 - 2015-10-30 02:54 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-04-20 11:50 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\LiveKernelReports
    2016-04-16 21:41 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\rescache
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\system32\appraiser
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\bcastdvr
    2016-04-13 00:15 - 2016-01-31 22:12 - 00000000 ____D C:\Users\gustavo\Desktop\EXPO
    2016-04-13 00:15 - 2014-10-03 12:30 - 00000000 ____D C:\Users\gustavo\Desktop\My Shared Folder
    2016-04-13 00:14 - 2015-11-15 16:09 - 00000000 ____D C:\Users\gustavo\Desktop\Cancilleria
    2016-04-13 00:07 - 2015-07-30 22:48 - 00000840 __RSH C:\ProgramData\ntuser.pol
    2016-04-12 23:25 - 2015-10-30 02:41 - 00000000 ____D C:\WINDOWS\CbsTemp
    2016-04-12 23:23 - 2014-09-16 06:11 - 00000000 ____D C:\WINDOWS\system32\MRT
    2016-04-12 23:18 - 2014-09-16 06:11 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2016-04-10 13:47 - 2015-07-19 15:50 - 00000000 ___RD C:\Program Files (x86)\Skype
    2016-04-10 13:47 - 2015-07-19 15:50 - 00000000 ____D C:\ProgramData\Skype
    2016-04-06 14:02 - 2015-10-30 02:56 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2016-04-06 14:02 - 2015-10-30 02:56 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
    2016-03-25 21:14 - 2014-11-24 14:53 - 00000000 ____D C:\Users\gustavo\Desktop\Accesos directos

    ==================== Files in the root of some directories =======

    2014-09-12 20:11 - 2015-11-21 08:51 - 0000034 _____ () C:\Users\gustavo\AppData\Roaming\AdobeWLCMCache.dat
    2015-07-16 18:37 - 2015-07-16 18:37 - 0000000 _____ () C:\Users\gustavo\AppData\Local\{C72FDF29-07A6-4B52-BD6E-6198A83CACB9}
    2015-12-04 08:12 - 2015-12-04 08:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
    2016-02-25 07:47 - 2016-02-25 07:47 - 0000016 _____ () C:\ProgramData\mntemp

    Some files in TEMP:
    ====================
    C:\Users\gustavo\AppData\Local\Temp\avguirn_08164994610.exe
    C:\Users\gustavo\AppData\Local\Temp\avguirn_081982142389.exe
    C:\Users\gustavo\AppData\Local\Temp\avguirn_082049670441.exe
    C:\Users\gustavo\AppData\Local\Temp\ReadCubeTray64.exe
    C:\Users\gustavo\AppData\Local\Temp\RemoteMouse.exe


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-04-22 00:26

    ==================== End of FRST.txt ============================
     
  3. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    Additional scan result of Farbar Recovery Scan Tool (x64) Version:18-04-2016
    Ran by gustavo (2016-04-24 10:44:42)
    Running from C:\Users\gustavo\Downloads
    Windows 10 Pro Version 1511 (X64) (2015-12-05 10:32:46)
    Boot Mode: Normal
    ==========================================================


    ==================== Accounts: =============================

    Administrator (S-1-5-21-2067883112-1484101570-4244796366-500 - Administrator - Disabled)
    DefaultAccount (S-1-5-21-2067883112-1484101570-4244796366-503 - Limited - Disabled)
    Guest (S-1-5-21-2067883112-1484101570-4244796366-501 - Limited - Disabled)
    gustavo (S-1-5-21-2067883112-1484101570-4244796366-1001 - Administrator - Enabled) => C:\Users\gustavo
    HomeGroupUser$ (S-1-5-21-2067883112-1484101570-4244796366-1003 - Limited - Enabled)

    ==================== Security Center ========================

    (If an entry is included in the fixlist, it will be removed.)

    AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AV: AVG AntiVirus Free Edition (Enabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
    AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
    AS: AVG AntiVirus Free Edition (Enabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}

    ==================== Installed Programs ======================

    (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

    µTorrent (HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\uTorrent) (Version: 3.4.6.42178 - BitTorrent Inc.)
    Adobe Acrobat 4.0 (HKLM-x32\...\Adobe Acrobat 4.0) (Version: 4.0 - Adobe Systems, Inc.)
    Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.178 - Adobe Systems Incorporated)
    Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.1.474 - Adobe Systems Incorporated)
    Adobe Dreamweaver CC 2014 (HKLM-x32\...\{7F823F8E-4348-11E4-8BF8-81763C49AA32}) (Version: 15.1.0 - Adobe Systems Incorporated)
    Adobe Illustrator CC 2014 (HKLM-x32\...\{2B4B4082-8043-4646-8334-B0A29E641211}) (Version: 18.1.1 - Adobe Systems Incorporated)
    Adobe InDesign CC 2014 (HKLM-x32\...\{CCDCB9C4-72BA-1014-A3F8-D123F2F18BC2}) (Version: 10.2.0.069 - Adobe Systems Incorporated)
    Adobe Muse CC 2014 (HKLM-x32\...\{4FC5F06E-31E5-4C22-9449-CB41B62D1897}) (Version: 2014.3.0.1176 - Adobe Systems Incorporated)
    Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
    Adobe Photoshop Lightroom 5.7.1 64-bit (HKLM\...\{BC86B82C-8C0E-4408-9AC1-6B0F2D636963}) (Version: 5.7.1 - Adobe Systems Incorporated)
    Adobe Touch App Plugins (HKLM-x32\...\{1EC083EE-5B76-4A2A-B95A-CAF460AA29D6}) (Version: 1.0 - Adobe Systems Incorporated)
    Adobe® Content Viewer (HKLM-x32\...\com.adobe.dmp.contentviewer) (Version: 3.4.3 - Adobe Systems, Incorporated)
    Apple Application Support (32-bit) (HKLM-x32\...\{649A1FD9-5892-46AD-8DF0-C4A43FF61CB7}) (Version: 4.1 - Apple Inc.)
    Apple Application Support (64-bit) (HKLM\...\{0DE0A178-AC7B-4650-806C-CF226DE03766}) (Version: 4.1 - Apple Inc.)
    Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
    Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
    Ares 2.2.5 (HKLM-x32\...\Ares) (Version: 2.2.5-Build#3049 - Seekar Ltd)
    AVG (Version: 16.51.7497 - AVG Technologies) Hidden
    AVG 2016 (Version: 16.0.4556 - AVG Technologies) Hidden
    AVG Protection (HKLM\...\AVG) (Version: 2016.51.7497 - AVG Technologies)
    Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
    Cuevana Storm version 0.3b (HKLM-x32\...\{2AFB4518-E1D7-4D74-B4FC-C65AE00E531D}_is1) (Version: 0.3b - Cuevana)
    Dropbox (HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
    Escritorio movistar Latam (HKLM-x32\...\Escritorio movistar Latam) (Version: - Movistar)
    EViews 4 (HKLM-x32\...\{011A5720-AD17-11D4-8B12-00104B1F716F}) (Version: - )
    FMW 1 (Version: 1.73.2 - AVG Technologies) Hidden
    FXCM Trading Station (HKLM-x32\...\FXCM Trading Station) (Version: 011415 - )
    FXCM Trading Station (x32 Version: 011415 - FXCM) Hidden
    Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.75 - Google Inc.)
    Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
    Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
    hohosearch - Uninstall (HKLM-x32\...\Uninstall - epf1) (Version: - )
    HUAWEI DataCard Driver 2.96 (HKLM-x32\...\HUAWEI DataCard Driver) (Version: 2.96 - Huawei technologies Co., Ltd.)
    iCloud (HKLM\...\{4B48E22A-2FB0-4EFA-B99E-954B1E50CD69}) (Version: 5.1.0.34 - Apple Inc.)
    Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)
    iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.)
    KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
    LAV Filters 0.55.3 (HKLM-x32\...\lavfilters_is1) (Version: 0.55.3 - Hendrik Leppkes)
    MATLAB R2010a (HKLM\...\MatlabR2010a) (Version: 7.10 - The MathWorks, Inc.)
    Microsoft Office 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.6769.2017 - Microsoft Corporation)
    Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
    Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
    Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
    Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
    Movavi Video Converter 16 (HKLM-x32\...\Movavi Video Converter 16) (Version: 16.2.0 - Movavi)
    Office 15 Click-to-Run Licensing Component (Version: 15.0.4771.1004 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Extensibility Component (Version: 16.0.6729.1014 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Licensing Component (Version: 16.0.6729.1014 - Microsoft Corporation) Hidden
    Office 16 Click-to-Run Localization Component (Version: 16.0.6729.1014 - Microsoft Corporation) Hidden
    Oracle VM VirtualBox 5.0.2 (HKLM\...\{6CB00039-29CC-42A1-8ED2-820821DA2B8A}) (Version: 5.0.2 - Oracle Corporation)
    Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
    qksee (HKLM-x32\...\qksee) (Version: - Taiwan Shui Mu Chih Ching Technology Limited) <==== ATTENTION
    ReadCube (HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\ReadCube) (Version: - Labtiva, Inc.)
    Remote Mouse version 2.70 (HKLM-x32\...\{01E4BC6D-3ACC-45E1-8928-C2FF626F63F3}_is1) (Version: 2.70 - Remote Mouse)
    Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
    Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
    Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
    Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)
    Software Informer 1.5.1315.0 (HKLM\...\Software Informer_is1) (Version: - Informer Technologies, Inc.)
    Splashtop Software Updater (HKLM-x32\...\Splashtop Software Updater) (Version: 1.5.6.15 - Splashtop Inc.)
    Splashtop Streamer (HKLM-x32\...\{B7C5EA94-B96A-41F5-BE95-25D78B486678}) (Version: 2.6.5.4 - Splashtop Inc.)
    SrpnFiles (HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\SrpnFiles) (Version: 29.16.15 - hxxps://www.www.springfile.biz)
    suprx (HKLM-x32\...\{25B63F3D-7513-4897-9191-95338364336F}) (Version: 1.0.18 - suprx)
    Twitter Hacker Pro 2.8.9 (HKLM-x32\...\Twitter Hacker Pro 2.8.9) (Version: - )
    Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{0FA8AE0C-69AE-4F60-A1AB-F79C6BA5A999}) (Version: - Microsoft)
    Video to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters)
    Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
    Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
    VoiceOver Kit (HKLM\...\{703D47B8-2869-4A50-B988-BDE18772A474}) (Version: 1.43.128.3 - Apple Inc.)
    WinX HD Video Converter Deluxe 5.9.0 (HKLM-x32\...\WinX HD Video Converter Deluxe_is1) (Version: - Digiarty Software, Inc.)
    WinZip (HKLM-x32\...\WinZip) (Version: 2.0.30 - Winzipper Pvt Ltd.) <==== ATTENTION
    YAC(Yet Another Cleaner!) (HKLM-x32\...\iSafe) (Version: - ELEX DO BRASIL PARTICIPAÇÕES LTDA) <==== ATTENTION

    ==================== Custom CLSID (Whitelisted): ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    CustomCLSID: HKU\S-1-5-21-2067883112-1484101570-4244796366-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\FileCoAuth.exe (Microsoft Corporation)
    CustomCLSID: HKU\S-1-5-21-2067883112-1484101570-4244796366-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-2067883112-1484101570-4244796366-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-2067883112-1484101570-4244796366-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
    CustomCLSID: HKU\S-1-5-21-2067883112-1484101570-4244796366-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\gustavo\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)

    ==================== Scheduled Tasks (Whitelisted) =============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    Task: {038C3799-2B2A-46C0-AF1B-18676EA2E669} - System32\Tasks\IHeeaWABrowserUpdateCore => C:\Program Files (x86)\IHeeaWA\IHeeaWA\bin\IHeeaWA_server.exe
    Task: {0B71D37F-DFC3-4C43-B29E-3E091C93C225} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> No File <==== ATTENTION
    Task: {2CD3809D-8F72-41C4-844B-526A96B734ED} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-04-03] (Microsoft Corporation)
    Task: {325383CD-7F91-4608-8B8F-43123870D456} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
    Task: {39368C9B-8036-4C21-A45B-4AC87A2D929F} - System32\Tasks\IHeeaWABrowserUpdateUA => C:\Program Files (x86)\IHeeaWA\IHeeaWA\bin\IHeeaWA_server.exe
    Task: {51BBE300-9A39-4459-BFCA-F3B7E73C6B54} - System32\Tasks\Sosition Reports => C:\Program Files (x86)\Sosition\SstrprTsk.exe
    Task: {522FCD62-B6FA-40F8-B61E-656C059C59DA} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> No File <==== ATTENTION
    Task: {5EB083A7-6C08-4D04-9DFE-6FC78F21AB97} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> No File <==== ATTENTION
    Task: {6913CB75-4BA1-41C0-8145-947B2DED1B12} - System32\Tasks\KMSAuto => C:\Windows\KMSAuto.exe [2016-04-12] ()
    Task: {6956EEEA-5F11-4B67-B96E-3008195F5653} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-22] (Google Inc.)
    Task: {6B5582B3-6198-4E08-89F1-37598072921D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
    Task: {88E9D42A-A3CA-4157-A352-97B8422F3C99} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> No File <==== ATTENTION
    Task: {8C92A4C9-A24D-492D-8F01-F7948857AED2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> No File <==== ATTENTION
    Task: {8DD13D7C-F086-4D6E-AC3F-2446C908CC65} - System32\Tasks\{897BE0C6-4067-4356-929B-739972958433} => launchwinapp.exe hxxp://ui.skype.com/ui/0/7.18.0.112/en/abandoninstall?page=tsProgressBar
    Task: {90285027-F871-48AC-999D-EA1AE11402EB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-22] (Google Inc.)
    Task: {920232D7-4A7D-4491-84C2-72857AF8C9DB} - System32\Tasks\Clteyghuwph System => C:\Program Files (x86)\Clteyghuwph\clteyghuwphSystem.exe [2016-04-12] ()
    Task: {951A5FC5-178A-4FB3-A470-8557BC3A9F8E} - System32\Tasks\Microsoft Office 15 Sync Maintenance for GUSTAVO-gustavo Gustavo => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2015-02-10] (Microsoft Corporation)
    Task: {9570A391-B4B9-4E0D-8F3A-406A8298365C} - System32\Tasks\Browser Updater Task(Core) => C:\Program Files (x86)\QQBrowser\Update\5F640E4F6270B11A2995FE44A2666D39\Update\BrowserUpdate.exe [2016-04-08] (Tencent) <==== ATTENTION
    Task: {9CA4FAD3-DE52-4293-A740-1F3E5ED5D668} - System32\Tasks\SoftwareInformerService => C:\Program Files\Software Informer\softinfo.exe [2015-12-03] (Informer Technologies, Inc.)
    Task: {A3D812A8-D1F7-4085-85E8-BDC6F710E79C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
    Task: {ACAD368E-97EC-4E73-B15E-B72BB0009AB9} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> No File <==== ATTENTION
    Task: {B63F2353-8A25-4CDF-B208-87F05EFFD1D9} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> No File <==== ATTENTION
    Task: {B73862B4-353C-40C6-8FD7-DDE83A5FE8F5} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
    Task: {BA6980F0-E4E4-4038-A288-F1F0E560085D} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2013-12-11] ()
    Task: {BC9B744C-7500-498F-BB63-64046A7B31C0} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> No File <==== ATTENTION
    Task: {E039DD87-49A2-4EEC-BC5D-886725F2C543} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-04-03] (Microsoft Corporation)
    Task: {E45B6CBF-8662-4569-9A19-662B5C2A3380} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
    Task: {E496E459-1718-4BE1-9075-76FB72300080} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-04-12] (Microsoft Corporation)
    Task: {E612931B-00B5-4126-B8FB-37145F4D8343} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> No File <==== ATTENTION
    Task: {EE155EB4-C0C8-4E8C-91C4-C530CBE75F45} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> No File <==== ATTENTION
    Task: {FE0414D2-9590-481E-A979-8B0F49B5A2A0} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2067883112-1484101570-4244796366-1001
    Task: {FFE9FAE2-823B-41FE-9A62-61FC81F620AE} - System32\Tasks\RunAsStdUser Task => C:\Program Files\MATLAB\R2010a\MATLAB R2010a.lnk [2015-08-22] ()

    (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

    Task: C:\WINDOWS\Tasks\0415avtUpdateInfo.job => C:\ProgramData\Avg_Update_0415avt\0415avt_AVG-Secure-Search-Update.exe
    Task: C:\WINDOWS\Tasks\0615avtUpdateInfo.job => C:\ProgramData\Avg_Update_0615avt\0615avt_AVG-Secure-Search-Update.exe
    Task: C:\WINDOWS\Tasks\0715avUpdateInfo.job => C:\ProgramData\Avg_Update_0715av\0715av_AVG-Secure-Search-Update.exe
    Task: C:\WINDOWS\Tasks\0914avUpdateInfo.job => C:\ProgramData\Avg_Update_0914av\0914av_AVG-Secure-Search-Update.exe
    Task: C:\WINDOWS\Tasks\1114avUpdateInfo.job => C:\ProgramData\Avg_Update_1114av\1114av_AVG-Secure-Search-Update.exe
    Task: C:\WINDOWS\Tasks\1214avUpdateInfo.job => C:\ProgramData\Avg_Update_1214av\1214av_AVG-Secure-Search-Update.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
    Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

    ==================== Shortcuts =============================

    (The entries could be listed to be restored or removed.)

    Shortcut: C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe (The IHeeaWA Authors)
    Shortcut: C:\Users\gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe (The IHeeaWA Authors)
    Shortcut: C:\Users\gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe (The IHeeaWA Authors)
    Shortcut: C:\Users\gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk -> C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe (The IHeeaWA Authors)
    Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\IHeeaWA\IHeeaWA\chrome.exe (The IHeeaWA Authors)

    ShortcutWithArgument: C:\Users\gustavo\Desktop\Accesos directos\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> "hxxp://trustedsurf.com/?ssid=1460522176&a=1041104&src=sh&uuid=39a5c7e5-b743-44ba-be6e-6c9b72b10afb"
    ShortcutWithArgument: C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) -> "hxxp://trustedsurf.com/?ssid=1460522176&a=1041104&src=sh&uuid=39a5c7e5-b743-44ba-be6e-6c9b72b10afb"

    ==================== Loaded Modules (Whitelisted) ==============

    2015-10-30 02:48 - 2015-10-30 02:48 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
    2015-02-13 04:20 - 2015-02-13 04:20 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
    2015-10-13 05:45 - 2015-10-13 05:45 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
    2016-04-12 19:15 - 2016-04-03 04:34 - 00172224 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
    2016-04-12 20:46 - 2016-03-29 05:50 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
    2015-02-11 15:13 - 2015-02-11 15:13 - 00997536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
    2015-01-21 15:01 - 2015-01-21 15:01 - 08898728 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
    2016-04-12 20:45 - 2016-04-01 22:28 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
    2016-04-19 11:20 - 2016-04-19 11:22 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    2016-04-12 20:46 - 2016-03-29 05:50 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
    2015-12-18 00:09 - 2015-12-06 23:44 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
    2016-04-12 20:45 - 2016-04-01 22:55 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
    2016-04-12 20:46 - 2016-04-01 22:33 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
    2016-04-12 20:45 - 2016-04-01 22:30 - 00936960 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
    2016-04-12 20:46 - 2016-04-01 22:29 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
    2016-04-12 20:46 - 2016-04-01 22:32 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
    2015-02-10 14:12 - 2015-02-10 14:12 - 02210480 _____ () C:\Program Files\Microsoft Office\Office15\tmpod.dll
    2014-07-07 19:51 - 2014-07-07 19:51 - 00336496 ____N () C:\WINDOWS\system32\TrueColor5.2\LcMft.dll
    2014-07-07 19:51 - 2014-07-07 19:51 - 00749168 ____N () C:\WINDOWS\system32\TrueColor5.2\CAL2.dll
    2014-05-21 12:23 - 2014-05-21 12:23 - 00027304 _____ () C:\Program Files\Microsoft Office\Office15\lynchtmlconvpxy.dll
    2016-04-09 08:46 - 2016-04-09 08:46 - 10875045 _____ () C:\Program Files (x86)\PPRX\pprx.exe
    2016-04-22 18:15 - 2016-04-22 01:32 - 00303016 _____ () C:\ProgramData\IHeeaWA\protect\protect.exe
    2016-04-22 10:33 - 2016-04-21 22:06 - 00065696 _____ () C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll
    2016-04-22 10:33 - 2015-06-29 22:20 - 00176976 _____ () C:\Program Files (x86)\Elex-tech\YAC\tws\unrar.dll
    2016-04-22 10:33 - 2015-06-29 22:20 - 00087744 _____ () C:\Program Files (x86)\Elex-tech\YAC\tws\unacev2.dll
    2016-04-19 11:21 - 2015-12-30 01:04 - 00582144 _____ () C:\Program Files (x86)\WinZipper\curlpp.dll
    2016-04-19 11:21 - 2016-01-26 03:57 - 00066560 _____ () C:\Program Files (x86)\WinZipper\zlib1.dll
    2016-04-19 11:20 - 2016-04-19 11:22 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
    2016-04-19 11:20 - 2016-04-19 11:25 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
    2016-04-22 10:33 - 2016-04-21 22:06 - 00179200 _____ () C:\Program Files (x86)\Elex-tech\YAC\libpng.dll
    2014-07-31 12:16 - 2014-07-31 12:16 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
    2015-10-13 05:45 - 2015-10-13 05:45 - 00237328 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
    2015-10-13 05:46 - 2015-10-13 05:46 - 01040144 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
    2015-10-28 22:07 - 2016-04-10 20:42 - 40500224 _____ () C:\Program Files (x86)\AVG\UiDll\2171\libcef.dll

    ==================== Alternate Data Streams (Whitelisted) =========

    (If an entry is included in the fixlist, only the ADS will be removed.)


    ==================== Safe Mode (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


    ==================== EXE Association (Whitelisted) ===============

    (If an entry is included in the fixlist, the registry item will be restored to default or removed.)

    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Classes\.exe: exefile => <===== ATTENTION
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Classes\exefile: <===== ATTENTION

    ==================== Internet Explorer trusted/restricted ===============

    (If an entry is included in the fixlist, it will be removed from the registry.)


    ==================== Hosts content: ===============================

    (If needed Hosts: directive could be included in the fixlist to reset Hosts.)

    2013-08-22 08:55 - 2014-10-03 15:38 - 00000860 ____A C:\WINDOWS\system32\Drivers\etc\hosts

    127.0.0.1 localhost
    ::1 localhost

    ==================== Other Areas ============================

    (Currently there is no automatic fix for this section.)

    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\gustavo\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img13.jpg
    DNS Servers: 192.168.0.1
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
    Windows Firewall is enabled.

    ==================== MSCONFIG/TASK MANAGER disabled items ==

    (Currently there is no automatic fix for this section.)

    HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
    HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\StartupApproved\StartupFolder: => "Enviar a OneNote.lnk"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\StartupApproved\Run: => "ares"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\StartupApproved\Run: => "Skype"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\StartupApproved\Run: => "ReadCube"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\StartupApproved\Run: => "Remote Mouse"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\StartupApproved\Run: => "Software Informer"

    ==================== FirewallRules (Whitelisted) ===============

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
    FirewallRules: [{FC569416-8C22-4392-9698-B3267DB6D009}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
    FirewallRules: [{D4B29755-F8A3-4C90-8ADA-6A54A958BF4B}] => (Allow) C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe
    FirewallRules: [{77322D15-C089-4F7D-81F8-155087EB05E7}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
    FirewallRules: [{D664CAD6-D522-420B-96E0-EE6AACDE0AAC}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
    FirewallRules: [UDP Query User{35A74A15-156C-421F-B2C4-170DACA312FA}C:\program files\matlab\r2010a\bin\win64\matlab.exe] => (Block) C:\program files\matlab\r2010a\bin\win64\matlab.exe
    FirewallRules: [TCP Query User{2E617372-FF48-49B6-8096-E96FD534D0A8}C:\program files\matlab\r2010a\bin\win64\matlab.exe] => (Block) C:\program files\matlab\r2010a\bin\win64\matlab.exe
    FirewallRules: [UDP Query User{E7E04B37-E9C4-4D4B-8C56-758D2FB6DC75}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
    FirewallRules: [TCP Query User{7A47B1D0-316F-43B5-B9A2-DC1A298539B2}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
    FirewallRules: [{DD9AAB1B-56FD-4938-848D-1DD146E39F73}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
    FirewallRules: [{EAA8D249-708B-4AEA-A56A-0036963BBC72}] => (Allow) C:\Users\gustavo\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
    FirewallRules: [TCP Query User{3D92A0A8-1CE0-4BD8-84CC-1AEA8DD2C101}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
    FirewallRules: [UDP Query User{F1D9F1F8-452D-45DE-853E-1AF25099F596}C:\windows\explorer.exe] => (Block) C:\windows\explorer.exe
    FirewallRules: [TCP Query User{1468103F-82DD-47CE-841D-440E69A8C567}C:\program files (x86)\ares\ares.exe] => (Allow) C:\program files (x86)\ares\ares.exe
    FirewallRules: [UDP Query User{0C3DB24D-8836-4067-803D-F07AFEE8109D}C:\program files (x86)\ares\ares.exe] => (Allow) C:\program files (x86)\ares\ares.exe
    FirewallRules: [TCP Query User{17771E87-A27A-4456-972E-574BEE3DF9E1}C:\program files (x86)\ares\chatserver.exe] => (Block) C:\program files (x86)\ares\chatserver.exe
    FirewallRules: [UDP Query User{36FC04FE-654C-406F-BD09-2E6E99592D33}C:\program files (x86)\ares\chatserver.exe] => (Block) C:\program files (x86)\ares\chatserver.exe
    FirewallRules: [TCP Query User{82257466-074B-484A-9AB8-60DC105FDEA1}C:\program files\common files\microsoft shared\ink\tabtip.exe] => (Allow) C:\program files\common files\microsoft shared\ink\tabtip.exe
    FirewallRules: [UDP Query User{70068778-536B-4DA3-8AD1-7F5B71744421}C:\program files\common files\microsoft shared\ink\tabtip.exe] => (Allow) C:\program files\common files\microsoft shared\ink\tabtip.exe
    FirewallRules: [TCP Query User{C9EE7D3A-63BD-42B1-AAE7-72A27E17F832}C:\program files (x86)\ares\chatserver.exe] => (Allow) C:\program files (x86)\ares\chatserver.exe
    FirewallRules: [UDP Query User{C65F2E79-402F-4EAA-A42B-D7E209EA0312}C:\program files (x86)\ares\chatserver.exe] => (Allow) C:\program files (x86)\ares\chatserver.exe
    FirewallRules: [TCP Query User{562FFDD5-E987-4690-B5F8-ACC75400D31E}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe
    FirewallRules: [UDP Query User{07EB46B6-6D8E-4C1F-8B32-5C6E5F3E50FF}C:\program files (x86)\cuevana storm\cuevana storm.exe] => (Allow) C:\program files (x86)\cuevana storm\cuevana storm.exe
    FirewallRules: [{BC6F587E-E576-4447-A9EA-96DCA437D261}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
    FirewallRules: [{45C25111-3A10-445E-B18D-D73D3CF14409}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
    FirewallRules: [TCP Query User{60755EBD-79F4-4130-985E-5A2C4E1DFB68}C:\program files\adobe\adobe muse cc 2014\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2014\muse.exe
    FirewallRules: [UDP Query User{CD3B2B91-BE13-47D6-A60F-E681CBCCC8E6}C:\program files\adobe\adobe muse cc 2014\muse.exe] => (Allow) C:\program files\adobe\adobe muse cc 2014\muse.exe
    FirewallRules: [TCP Query User{17DBADD5-3175-4208-823B-FC6B72C84E9B}C:\program files\common files\microsoft shared\ink\inputpersonalization.exe] => (Allow) C:\program files\common files\microsoft shared\ink\inputpersonalization.exe
    FirewallRules: [UDP Query User{251EC650-A25A-4904-A63B-7826DB079D17}C:\program files\common files\microsoft shared\ink\inputpersonalization.exe] => (Allow) C:\program files\common files\microsoft shared\ink\inputpersonalization.exe
    FirewallRules: [TCP Query User{7C35EE1A-D1EE-48E3-A936-62D20095F4DC}C:\windows\system32\mobsync.exe] => (Allow) C:\windows\system32\mobsync.exe
    FirewallRules: [UDP Query User{45826E44-E49C-48CA-BE1E-5874A09D3FDC}C:\windows\system32\mobsync.exe] => (Allow) C:\windows\system32\mobsync.exe
    FirewallRules: [{BE0D6739-43C5-4759-A827-33C581E23EF5}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{CC283E6D-5193-4C71-94A1-1B9D158834A6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
    FirewallRules: [{329AC10A-BAB3-4630-9F30-71D7FCDF470E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{55337B9B-C146-4AA9-B51F-2ED16DD2D9B1}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
    FirewallRules: [{025717E7-8E5E-4958-806E-541C6CA23396}] => (Allow) C:\Program Files\iTunes\iTunes.exe
    FirewallRules: [{243EC099-4909-4B06-8DB1-5B75F4705C83}] => (Allow) C:\Program Files (x86)\PPRX\pprx.exe
    FirewallRules: [{06BD66B1-928F-4312-A7B8-FEA91A75B81F}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
    FirewallRules: [{C4C446F4-61F7-4813-AD5E-797B416AAF3A}] => (Allow) C:\Program Files\KMSpico\KMSELDI.exe
    FirewallRules: [{92EDC824-82C9-444F-B98A-0C904FF7B338}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
    FirewallRules: [{1BF35B9B-1F48-4791-96BA-766F499502A3}] => (Allow) C:\Program Files (x86)\SrpnFiles\SrpnFiles.exe
    FirewallRules: [{9CD99E58-D23B-48BF-B8FF-6004855BBDD0}] => (Allow) C:\Program Files (x86)\SrpnFiles\SrpnFiles.exe
    FirewallRules: [{C5B9999F-5F6A-4522-890C-C89B794485A0}] => (Allow) C:\Program Files (x86)\SrpnFiles\downloader.exe
    FirewallRules: [{7359BD18-2B8A-4875-9354-18A56101116E}] => (Allow) C:\Program Files (x86)\SrpnFiles\downloader.exe
    FirewallRules: [{9B3D82FB-7067-4EEC-80C6-4624A5AFE4AE}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
    FirewallRules: [{946BFA5E-78CB-46A9-9486-EF266A663E6B}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
    FirewallRules: [{C731F5A9-562E-4412-BAFC-82AC4F96B970}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
    FirewallRules: [{660613EB-738B-43A0-9589-0A1071A81736}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
    FirewallRules: [{D46F0EF2-4A41-4373-97F0-4D6B1F5BF85F}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
    FirewallRules: [{999D8A7F-A935-4A77-96E1-14C24440ADBE}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe
    FirewallRules: [TCP Query User{297C1949-8FDE-4FE6-BD13-477ECC9FDA9B}C:\program files (x86)\pprx\pprx.exe] => (Block) C:\program files (x86)\pprx\pprx.exe
    FirewallRules: [UDP Query User{39F05A9B-55E4-44F4-BF89-869DCF9BA19E}C:\program files (x86)\pprx\pprx.exe] => (Block) C:\program files (x86)\pprx\pprx.exe
    FirewallRules: [{572DBBF2-EE20-494B-A0E2-E597B85B8E49}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    FirewallRules: [{DB43B940-83AD-46A5-9FEA-CED3A2B12F6E}] => (Allow) C:\Users\gustavo\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{57C9A875-1763-4443-92EC-870A4D7A665C}] => (Allow) C:\Users\gustavo\AppData\Roaming\uTorrent\uTorrent.exe
    FirewallRules: [{8F16A624-0987-4738-BD84-01FA7B2E26D2}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
    FirewallRules: [{A0FDDE52-EA89-4EEC-A252-DBC746858514}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
    FirewallRules: [{78DD54FB-A1D5-4256-A737-B5E96A4CB88E}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
    FirewallRules: [{27964FE0-10A7-49E4-980E-E1D50770B5A7}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
    FirewallRules: [{E91A1010-660B-4BD8-830B-C6EEE78B78F8}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
    FirewallRules: [{7B0A46F0-06D5-429B-90E8-86763CC36BA3}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
    FirewallRules: [{431EDED6-0FE3-4693-88EA-360B1F26ED38}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
    FirewallRules: [{054DB969-5FFF-4612-87D6-A21D9738094E}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
    FirewallRules: [{2BA123CE-6A28-4D7B-B89F-27BCCFC72930}] => (Allow) LPort=1688
    FirewallRules: [{D48B052F-25A3-4226-811F-DC3A01BED85A}] => (Allow) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
    FirewallRules: [{CB6D27A2-FA76-41BA-BA98-771200F5D55C}] => (Allow) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
    FirewallRules: [{A5B78E61-8403-41E1-AB2B-3F88DDB2120F}] => (Allow) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\DataProxy.exe
    FirewallRules: [{AB605D6C-C7BF-40A2-83B6-F2F209A8DBBE}] => (Allow) C:\ProgramData\IHeeaWA\protect\protect.exe

    ==================== Restore Points =========================

    ATTENTION: System Restore is disabled

    ==================== Faulty Device Manager Devices =============

    Name: Surface Pro UEFI
    Description: Surface Pro UEFI
    Class Guid: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
    Manufacturer: Microsoft Corporation
    Service:
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

    Name: Surface Pro Embedded Controller Firmware
    Description: Surface Pro Embedded Controller Firmware
    Class Guid: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
    Manufacturer: Microsoft Corporation
    Service:
    Problem: : This device cannot start. (Code10)
    Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
    On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

    Name: HID-compliant touch screen
    Description: HID-compliant touch screen
    Class Guid: {745a17a0-74d3-11d0-b6fe-00a0c90f57da}
    Manufacturer: (Standard system devices)
    Service:
    Problem: : This device is disabled. (Code 22)
    Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


    ==================== Event log errors: =========================

    Application errors:
    ==================
    Error: (04/24/2016 09:41:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GUSTAVO)
    Description: Activation of app Microsoft.MicrosoftMahjong_8wekyb3d8bbwe!MicrosoftMahjong failed with error: -2144927148 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (04/24/2016 09:40:42 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: Service_KMS.exe, version: 11.0.0.0, time stamp: 0x52a8d15d
    Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
    Exception code: 0x00000000
    Fault offset: 0x00007ffd814c0668
    Faulting process id: 0xbfc
    Faulting application start time: 0xService_KMS.exe0
    Faulting application path: Service_KMS.exe1
    Faulting module path: Service_KMS.exe2
    Report Id: Service_KMS.exe3
    Faulting package full name: Service_KMS.exe4
    Faulting package-relative application ID: Service_KMS.exe5

    Error: (04/24/2016 09:28:18 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: iSafeSvc.exe, version: 4.0.0.1, time stamp: 0x53477040
    Faulting module name: ipcproxy.dll_unloaded, version: 5.5.0.1, time stamp: 0x554730ef
    Exception code: 0xc00001a5
    Fault offset: 0x00014b4b
    Faulting process id: 0x420
    Faulting application start time: 0xiSafeSvc.exe0
    Faulting application path: iSafeSvc.exe1
    Faulting module path: iSafeSvc.exe2
    Report Id: iSafeSvc.exe3
    Faulting package full name: iSafeSvc.exe4
    Faulting package-relative application ID: iSafeSvc.exe5

    Error: (04/24/2016 09:28:08 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GUSTAVO)
    Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (04/24/2016 09:28:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GUSTAVO)
    Description: Activation of app Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (04/24/2016 09:28:00 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: GUSTAVO)
    Description: Activation of app Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI failed with error: -2144927141 See the Microsoft-Windows-TWinUI/Operational log for additional information.

    Error: (04/24/2016 09:27:02 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: microsoftedgecp.exe, version: 11.0.10586.20, time stamp: 0x56540c35
    Faulting module name: iertutil.dll, version: 11.0.10586.122, time stamp: 0x56cbfa23
    Exception code: 0xc0000005
    Fault offset: 0x0000000000029f7c
    Faulting process id: 0xc58
    Faulting application start time: 0xmicrosoftedgecp.exe0
    Faulting application path: microsoftedgecp.exe1
    Faulting module path: microsoftedgecp.exe2
    Report Id: microsoftedgecp.exe3
    Faulting package full name: microsoftedgecp.exe4
    Faulting package-relative application ID: microsoftedgecp.exe5

    Error: (04/24/2016 09:24:51 AM) (Source: Application Error) (EventID: 1000) (User: )
    Description: Faulting application name: iSafeSvc.exe, version: 4.0.0.1, time stamp: 0x53477040
    Faulting module name: MSVCR110.dll, version: 11.0.51106.1, time stamp: 0x5098858e
    Exception code: 0xc0000409
    Fault offset: 0x0009f967
    Faulting process id: 0x5ac
    Faulting application start time: 0xiSafeSvc.exe0
    Faulting application path: iSafeSvc.exe1
    Faulting module path: iSafeSvc.exe2
    Report Id: iSafeSvc.exe3
    Faulting package full name: iSafeSvc.exe4
    Faulting package-relative application ID: iSafeSvc.exe5

    Error: (04/24/2016 06:36:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledSPRetry 2203

    Error: (04/24/2016 06:36:05 AM) (Source: Bonjour Service) (EventID: 100) (User: )
    Description: Task Scheduling Error: m->NextScheduledEvent 2203


    System errors:
    =============
    Error: (04/24/2016 10:39:15 AM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
    Description: application-specificLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)UnavailableUnavailable

    Error: (04/24/2016 09:43:36 AM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
    Description: {784E29F4-5EBE-4279-9948-1E8FE941646D}

    Error: (04/24/2016 09:43:29 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The WFini WdMan Service service terminated unexpectedly. It has done this 1 time(s).

    Error: (04/24/2016 09:42:21 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
    Description: The Service KMSELDI service terminated unexpectedly. It has done this 1 time(s).

    Error: (04/24/2016 09:41:51 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
    Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Service KMSELDI service.

    Error: (04/24/2016 09:41:21 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
    Description: A timeout (30000 milliseconds) was reached while waiting for a transaction response from the Service KMSELDI service.

    Error: (04/24/2016 09:28:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the Sync Host_70a10 service to connect.

    Error: (04/24/2016 09:28:16 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
    Description: A timeout was reached (30000 milliseconds) while waiting for the User Data Storage_70a10 service to connect.

    Error: (04/24/2016 09:28:12 AM) (Source: DCOM) (EventID: 10010) (User: GUSTAVO)
    Description: App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca

    Error: (04/24/2016 09:28:10 AM) (Source: DCOM) (EventID: 10010) (User: GUSTAVO)
    Description: NLInternal.SharedRecoActivation


    CodeIntegrity:
    ===================================
    Date: 2016-04-24 10:43:05.118
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2016-04-24 10:43:05.079
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2016-04-24 10:43:04.633
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2016-04-24 10:43:04.593
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2016-04-24 09:42:39.466
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2016-04-24 09:42:39.438
    Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\AVG\Av\avgidsagent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

    Date: 2016-04-24 09:41:04.341
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\MicRotateAPO.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-04-24 09:41:04.320
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\MicRotateAPO.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-04-24 09:41:04.284
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\MicRotateAPO.dll because the set of per-page image hashes could not be found on the system.

    Date: 2016-04-24 09:41:04.265
    Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\MicRotateAPO.dll because the set of per-page image hashes could not be found on the system.


    ==================== Memory info ===========================

    Processor: Intel(R) Core(TM) i5-4300U CPU @ 1.90GHz
    Percentage of memory in use: 71%
    Total physical RAM: 4001.07 MB
    Available physical RAM: 1142.7 MB
    Total Virtual: 7517.94 MB
    Available Virtual: 4026.4 MB

    ==================== Drives ================================

    Drive c: (Windows) (Fixed) (Total:113.06 GB) (Free:3.7 GB) NTFS

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 119.2 GB) (Disk ID: 71A695BE)

    Partition: GPT.

    ==================== End of Addition.txt ============================
     
  4. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    I really hope you can help me out on this :s I'm in Venezuela and I can't bring my Surface to any official tech support office....
     
  5. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ================================

    [​IMG] FRST.txt log is incomplete. Upper portion is missing. Post entire log.

    [​IMG] Did you disable System Restore for whatever reason?
    Please re-enable it.

    [​IMG] Uninstall following unwanted programs:

    qksee
    WinZip
    (yours is NOT legit WinZip but a malicious pretender)
    YAC(Yet Another Cleaner!)
     
  6. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    Hey, I´m sorry, I thought I had copied it all. Here you go:

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-04-2016
    Ran by gustavo (administrator) on GUSTAVO (25-04-2016 09:17:04)
    Running from C:\Users\gustavo\Downloads
    Loaded Profiles: gustavo (Available Profiles: gustavo)
    Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: Edge)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe
    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe
    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgidsagent.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
    (Informer Technologies, Inc.) C:\Program Files\Software Informer\softinfo.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
    () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
    (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
    (Elex do Brasil Participações Ltda) C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe
    Failed to access process -> Service_KMS.exe
    (Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
    (© 2015 Microsoft Corporation) C:\Users\gustavo\AppData\Local\Microsoft\BingSvc\BingSvc.exe
    (Microsoft Corporation) C:\Windows\System32\StikyNot.exe
    (BitTorrent Inc.) C:\Users\gustavo\AppData\Roaming\uTorrent\uTorrent.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\lync.exe
    (BitTorrent Inc.) C:\Users\gustavo\AppData\Roaming\uTorrent\updates\3.4.6_42178\utorrentie.exe
    (BitTorrent Inc.) C:\Users\gustavo\AppData\Roaming\uTorrent\updates\3.4.6_42178\utorrentie.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
    () C:\Program Files (x86)\PPRX\pprx.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgui.exe
    (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe
    () C:\ProgramData\IHeeaWA\protect\protect.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
    (Microsoft Corporation) C:\Windows\System32\browser_broker.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
    (Microsoft Corporation) C:\Windows\System32\rundll32.exe
    () C:\Program Files (x86)\Clteyghuwph\clteyghuwphSystem.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40891.0_x64__8wekyb3d8bbwe\HxMail.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.6769.40891.0_x64__8wekyb3d8bbwe\HxTsr.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
    (Microsoft Corporation) C:\Program Files\Microsoft Office\Office15\WINWORD.EXE
    (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
    HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-04-14] (AVG Technologies CZ, s.r.o.)
    HKLM-x32\...\Run: [PPRX] => C:\Program Files (x86)\PPRX\start.vbs [179 2016-04-12] ()
    HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [3862440 2016-03-02] (AVG Technologies CZ, s.r.o.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [ares] => C:\Program Files (x86)\Ares\Ares.exe [935936 2013-07-19] (Seekar Ltd)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-11-30] (Apple Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-11-30] (Apple Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-11-30] (Apple Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [BingSvc] => C:\Users\gustavo\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [ReadCube] => C:\Users\gustavo\AppData\Local\com.readcube.Desktop\application\ReadCube.exe [150800 2013-11-17] ()
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2050048 2015-03-09] (RemoteMouse.net)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [GoogleChromeAutoLaunch_451E20CFC91B8D8BB22B70BB388D8326] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-04-13] (Google Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Software Informer] => C:\Program Files\Software Informer\softinfo.exe [1651200 2015-12-03] (Informer Technologies, Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [465920 2015-10-30] (Microsoft Corporation)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [uTorrent] => C:\Users\gustavo\AppData\Roaming\uTorrent\uTorrent.exe [1959424 2016-04-20] (BitTorrent Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office\Office15\lync.exe [22769304 2015-02-10] (Microsoft Corporation)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
    ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
    ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
    ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
    GroupPolicy: Restriction - Chrome <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    AutoConfigURL: [S-1-5-21-2067883112-1484101570-4244796366-1001] => hxxp://un-stop.biz/wpad.dat?2e0dee055385a55a0d06cbc8873420f28807554
    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{3fa7bde8-a018-4f26-bde5-4f81a0621b6a}: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{b62d116d-1e5c-4656-b3e4-4c3b6db20c90}: [DhcpNameServer] 172.20.10.1
    ManualProxies: 0hxxp://un-stop.biz/wpad.dat?2e0dee055385a55a0d06cbc8873420f28807554

    Internet Explorer:
    ==================
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.mystartsearch.com/?type=hp&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344
    HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.mystartsearch.com/web/?type=ds&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344&q={searchTerms}
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.mystartsearch.com/?type=hp&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.mystartsearch.com/web/?type=ds&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344&q={searchTerms}
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SK2M_FRPage
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=SK2G&ocid=SK2GDHP&osmkt=en-us
    SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = www.mystartsearch.com/web/?type=ds&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344&q={searchTerms}
    SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = www.mystartsearch.com/web/?type=ds&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344&q={searchTerms}
    SearchScopes: HKU\S-1-5-21-2067883112-1484101570-4244796366-1001 -> {A96109ED-273B-45EE-A102-176D00F02EDA} URL = hxxp://www.searchbetter.com/web?tpid=ARES-YSP&o=Y10044&pf=V7&p2=^BRK^YYYYYY^YY^VE&gct=&itbv=12.17.1.2481&apn_uid=2E8350DF-6564-46B0-9079-30495018C307&apn_ptnrs=^BRK&apn_dtid=^YYYYYY^YY^VE&apn_dbr=cr_37.0.2062.124&doi=2014-10-03&trgb=CR,IE,FF&q={searchTerms}&psv=&pt=tb
    BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
    BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
    BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
    BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
    BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
    Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
    Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

    FireFox:
    ========
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
    FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
    FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems)
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-05-21] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
    FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-05-21] (Microsoft Corporation)

    Chrome:
    =======
    CHR HomePage: Profile 2 -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
    CHR StartupUrls: Profile 2 -> "hxxp://www.nicesearches.com?type=hp&ts=1461589609&from=86490425&uid=samsungxmzmte128hmgr-000mv_s1f0nyaf682344&z=442e06d713ffc1d55998696gezcq2gbwcbctdqdeat"
    CHR DefaultSearchURL: Profile 2 -> hxxp://www.nicesearches.com/search.php?type=ds&ts=1461589609&from=86490425&uid=samsungxmzmte128hmgr-000mv_s1f0nyaf682344&z=442e06d713ffc1d55998696gezcq2gbwcbctdqdeat&q={searchTerms}
    CHR DefaultSearchKeyword: Profile 2 -> nice
    CHR Profile: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Drive) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
    CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-07-30]
    CHR Extension: (Word Online) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2014-12-20]
    CHR Extension: (iCloud Bookmarks) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2015-07-30]
    CHR Extension: (Google Docs Offline) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-28]
    CHR Extension: (AdBlock) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-27]
    CHR Extension: (Bananatag Email Tracking) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpbnpbfpgjkblmejlgkfkekajajhjcid [2015-11-28]
    CHR Extension: (Little Alchemy) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2016-02-12]
    CHR Extension: (Skype) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-02-12]
    CHR Extension: (Google Maps) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-17]
    CHR Extension: (GoSavee) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgngbpflegmmbgelfgfohjdhehooakhf [2014-10-03]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-30]
    CHR Extension: (Social Analytics) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgckigmaefoaemjpijdepakcghjkggmg [2016-02-13]
    CHR Profile: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1
    CHR Extension: (Google Slides) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-05]
    CHR Extension: (Google Docs) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-05]
    CHR Extension: (Google Drive) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-05]
    CHR Extension: (YouTube) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-05]
    CHR Extension: (Google Search) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
    CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-11-05]
    CHR Extension: (Google Sheets) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-05]
    CHR Extension: (Google Docs Offline) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-06]
    CHR Extension: (Bandera de Venezuela) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kggfbkjocekemalkapifoekgkaikmpji [2015-11-05]
    CHR Extension: (Little Alchemy) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2016-02-13]
    CHR Extension: (Google Maps) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-11-05]
    CHR Extension: (Pocket) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-11-05]
    CHR Extension: (Save to Pocket) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-04-06]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-06]
    CHR Extension: (Quick start) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2015-11-05]
    CHR Extension: (Gmail) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-05]
    CHR Profile: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2
    CHR Extension: (Google Slides) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-05]
    CHR Extension: (Google Docs) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-05]
    CHR Extension: (Google Drive) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-05]
    CHR Extension: (Ancient Map) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bjcjaemihddenoopkkhaamlcoliiiain [2015-11-05]
    CHR Extension: (YouTube) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-05]
    CHR Extension: (Google Search) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
    CHR Extension: (Google Sheets) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-05]
    CHR Extension: (Google Docs Offline) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
    CHR Extension: (Little Alchemy) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2016-02-13]
    CHR Extension: (Google Maps) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-11-05]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
    CHR Extension: (Gmail) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-05]
    CHR HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
    CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]
    CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-10-03]
     
  7. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
    S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [604144 2016-03-02] (AVG Technologies CZ, s.r.o.)
    R2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagent.exe [3934184 2016-03-02] (AVG Technologies CZ, s.r.o.)
    R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1074448 2016-04-14] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvcx.exe [561104 2016-03-02] (AVG Technologies CZ, s.r.o.)
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
    R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2838768 2016-04-03] (Microsoft Corporation)
    S2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373152 2016-01-05] (Intel Corporation)
    R2 IHeeaWA_protect; C:\ProgramData\IHeeaWA\protect\protect.exe [303016 2016-04-22] ()
    R2 iSafeService; C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe [118048 2016-04-21] (Elex do Brasil Participações Ltda)
    S3 ose64; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [242720 2016-04-02] (Microsoft Corporation) [File not signed]
    S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
    R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [184240 2015-11-06] (AVG Technologies CZ, s.r.o.)
    R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [315312 2016-01-26] (AVG Technologies CZ, s.r.o.)
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
    R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [378288 2016-02-03] (AVG Technologies CZ, s.r.o.)
    R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [269232 2016-03-02] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [42416 2015-12-04] (AVG Technologies CZ, s.r.o.)
    R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [23472 2016-01-08] (AVG Technologies CZ, s.r.o.)
    R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
    S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-07] (Intel Corporation)
    S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-07] (Intel Corporation)
    R1 iSafeKrnl; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys [260856 2015-05-13] (Elex do Brasil Participações Ltda)
    S3 iSafeKrnlBoot; C:\Windows\System32\DRIVERS\iSafeKrnlBoot.sys [55056 2016-04-21] (Elex do Brasil Participações Ltda)
    S1 iSafeKrnlKit; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys [110112 2016-04-21] (Elex do Brasil Participações Ltda)
    R1 iSafeKrnlMon; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [52440 2015-08-19] (Elex do Brasil Participações Ltda)
    S1 iSafeKrnlR3; C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys [103904 2015-08-19] (Elex do Brasil Participações Ltda) [File not signed]
    R1 iSafeNetFilter; C:\Windows\System32\DRIVERS\iSafeNetFilter.sys [52392 2015-06-29] (Elex do Brasil Participações Ltda)
    R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-09-30] (Intel Corporation)
    R3 mrvlpcie8897; C:\Windows\System32\drivers\mrvlpcie8897.sys [1037824 2015-10-30] (Marvell Semiconductors Inc.)
    S3 ssudcdf; C:\Windows\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ssuddmgr; C:\Windows\System32\drivers\ssuddmgr.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ssudobex; C:\Windows\System32\drivers\ssudobex.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ssudrmnet; C:\Windows\System32\drivers\ssudrmnet.sys [70400 2014-01-22] (DEVGURU Co., LTD.)
    S3 ssudserd; C:\Windows\System32\drivers\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [26368 2014-01-22] (DEVGURU Co., LTD.)
    R3 SurfaceAccessoryDevice; C:\Windows\System32\drivers\SurfaceAccessoryDevice.sys [51856 2014-05-30] (Microsoft Corporation)
    R3 SurfaceCapacitiveHomeButton; C:\Windows\System32\drivers\SurfaceCapacitiveHomeButton.sys [44152 2014-11-27] (Microsoft Corporation)
    R3 SurfaceDisplayCalibration; C:\Windows\System32\drivers\SurfaceDisplayCalibration.sys [41616 2014-05-02] (Microsoft Corporation)
    R3 SurfaceIntegrationDriver; C:\Windows\System32\drivers\SurfaceIntegrationDriver.sys [63000 2015-09-30] (Microsoft Corporation)
    R0 SurfacePciController; C:\Windows\System32\drivers\SurfacePciController.sys [35440 2014-10-08] (Microsoft Corporation)
    R3 SurfacePenDriver; C:\Windows\System32\drivers\SurfacePenDriver.sys [102552 2016-01-26] (Microsoft Corporation)
    S3 SurfaceTypeCoverV3Integration; C:\Windows\System32\drivers\SurfaceTypeCoverV3Integration.sys [52760 2015-10-28] (Microsoft Corporation)
    R3 TrueColor; C:\Windows\system32\DRIVERS\TrueColor.sys [35952 2014-07-07] ()
    S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-08-13] (Oracle Corporation)
    R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [146072 2015-08-13] (Oracle Corporation)
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
     
  8. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-24 10:44 - 2016-04-24 10:46 - 00047418 _____ C:\Users\gustavo\Downloads\Addition.txt
    2016-04-24 10:43 - 2016-04-25 09:17 - 00032747 _____ C:\Users\gustavo\Downloads\FRST.txt
    2016-04-24 10:42 - 2016-04-25 09:17 - 00000000 ____D C:\FRST
    2016-04-24 10:40 - 2016-04-24 10:42 - 02375680 _____ (Farbar) C:\Users\gustavo\Downloads\FRST64.exe
    2016-04-23 16:30 - 2016-04-23 16:30 - 00055544 _____ C:\Users\gustavo\Downloads\Libro1.xlsx
    2016-04-23 16:20 - 2016-04-23 16:20 - 00054444 _____ C:\Users\gustavo\Downloads\inf_anual (2).xlsx
    2016-04-23 16:20 - 2016-04-23 16:20 - 00048640 _____ C:\Users\gustavo\Downloads\pib_1950_2013.xls
    2016-04-23 15:46 - 2016-04-23 15:47 - 00000000 ____D C:\Users\gustavo\Desktop\DATA TESIS
    2016-04-23 15:45 - 2016-04-23 15:46 - 00054444 _____ C:\Users\gustavo\Downloads\inf_anual (1).xlsx
    2016-04-23 01:53 - 2016-04-24 14:58 - 00005208 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for GUSTAVO-gustavo Gustavo
    2016-04-22 19:30 - 2016-04-24 09:41 - 00000000 ____D C:\Users\gustavo\AppData\LocalLow\uTorrent
    2016-04-22 18:22 - 2016-04-22 18:22 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Prodiance
    2016-04-22 18:15 - 2016-04-23 14:48 - 00000000 ____D C:\Program Files (x86)\IHeeaWA
    2016-04-22 16:58 - 2016-04-22 16:58 - 00590406 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.pdf
    2016-04-22 16:34 - 2016-04-22 16:35 - 00175142 _____ C:\Users\gustavo\Desktop\Carta de presentacion.pdf
    2016-04-22 10:47 - 2016-04-22 10:47 - 00000000 ____D C:\ProgramData\IHeeaWA
    2016-04-22 10:39 - 2016-04-22 10:39 - 00000007 _____ C:\WINDOWS\SysWOW64\tem1D1.tmp
    2016-04-22 10:39 - 2016-04-22 10:39 - 00000000 ____D C:\Users\gustavo\AppData\Local\IHeeaWA
    2016-04-22 10:38 - 2016-04-23 14:48 - 00014824 _____ C:\WINDOWS\System32\Tasks\IHeeaWABrowserUpdateUA
    2016-04-22 10:38 - 2016-04-23 14:48 - 00003888 _____ C:\WINDOWS\System32\Tasks\IHeeaWABrowserUpdateCore
    2016-04-22 10:38 - 2016-04-22 18:16 - 00002192 _____ C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-04-22 10:38 - 2016-04-22 10:38 - 00000000 ____D C:\Users\Public\Documents\IHeeaWA
    2016-04-22 10:33 - 2016-04-22 10:33 - 00000000 ____D C:\WINDOWS\system32\log
    2016-04-22 10:33 - 2016-04-22 10:33 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Elex-tech
    2016-04-22 10:33 - 2016-04-22 10:33 - 00000000 ____D C:\Program Files (x86)\Elex-tech
    2016-04-22 10:33 - 2016-04-21 22:08 - 00055056 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeKrnlBoot.sys
    2016-04-22 10:33 - 2015-06-29 22:20 - 00052392 _____ (Elex do Brasil Participações Ltda) C:\WINDOWS\system32\Drivers\iSafeNetFilter.sys
    2016-04-22 00:55 - 2016-04-22 00:55 - 00000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
    2016-04-22 00:55 - 2016-04-22 00:55 - 00000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
    2016-04-22 00:48 - 2016-04-22 00:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2016-04-20 23:32 - 2016-04-21 21:03 - 00590406 _____ C:\Users\gustavo\Desktop\Resumé - Gustavo Visconti - Español.pdf
    2016-04-20 23:21 - 2016-04-20 23:21 - 00000000 ____D C:\Users\gustavo\Documents\Custom Office Templates
    2016-04-20 22:19 - 2016-04-23 01:54 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
    2016-04-20 22:18 - 2016-04-20 22:18 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server
    2016-04-20 22:17 - 2016-04-20 22:18 - 00000000 ____D C:\Program Files\Microsoft SQL Server
    2016-04-20 22:17 - 2016-04-20 22:17 - 00000000 ____D C:\WINDOWS\PCHEALTH
    2016-04-20 22:14 - 2016-04-20 22:14 - 00000000 ____D C:\Program Files\Microsoft Analysis Services
    2016-04-20 22:14 - 2016-04-20 22:14 - 00000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
    2016-04-20 22:13 - 2016-04-20 22:13 - 00000000 __RHD C:\MSOCache
    2016-04-20 17:41 - 2016-04-20 19:28 - 00000000 ____D C:\Users\gustavo\Downloads\Microsoft Office Professional Plus 2013
    2016-04-20 15:45 - 2016-04-20 15:45 - 00000943 _____ C:\Users\gustavo\Desktop\µTorrent.lnk
    2016-04-20 15:45 - 2016-04-20 15:45 - 00000923 _____ C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
    2016-04-20 15:43 - 2016-04-25 09:17 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\uTorrent
    2016-04-20 15:42 - 2016-04-20 15:42 - 01959424 _____ (BitTorrent Inc.) C:\Users\gustavo\Downloads\uTorrent.exe
    2016-04-20 15:39 - 2016-04-20 15:39 - 00596346 _____ C:\Users\gustavo\Desktop\Microsoft_Office_Professional_Plus_2013_x86_PT-BR__Ativador.zip
    2016-04-20 10:08 - 2016-04-20 10:16 - 00987728 _____ (Google Inc.) C:\Users\gustavo\Downloads\ChromeSetup.exe
    2016-04-19 14:45 - 2016-04-19 14:46 - 00193041 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.docx (2).pdf
    2016-04-19 11:21 - 2016-04-25 09:14 - 00000000 ____D C:\Program Files (x86)\WinZipper
    2016-04-19 11:21 - 2016-04-22 10:27 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\WinZiper
    2016-04-19 11:21 - 2016-04-19 11:21 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\eCyber
    2016-04-19 11:20 - 2016-04-22 10:28 - 00000000 ____D C:\Program Files (x86)\qksee
    2016-04-19 11:20 - 2016-04-19 11:20 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\qksee
    2016-04-19 11:20 - 2016-04-19 11:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee
    2016-04-19 11:18 - 2016-04-19 11:18 - 00009422 _____ C:\WINDOWS\System32\Tasks\Browser Updater Task(Core)
    2016-04-19 11:18 - 2016-04-19 11:18 - 00000000 ____D C:\ProgramData\lwinpl
    2016-04-19 11:18 - 2016-04-19 11:18 - 00000000 ____D C:\Program Files (x86)\QQBrowser
    2016-04-16 21:28 - 2016-04-16 21:28 - 00180058 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.docx (1).pdf
    2016-04-16 21:28 - 2016-04-16 21:28 - 00180058 _____ C:\Users\gustavo\Desktop\Resumé - Gustavo Visconti - Español.docx (1).pdf
    2016-04-14 17:53 - 2016-04-14 17:53 - 00181898 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.docx.pdf
    2016-04-13 14:02 - 2016-04-13 18:23 - 1902281244 _____ C:\Users\gustavo\Desktop\114- NDR-JohnnyRiley-JJKnight-MarkLong.mp4
    2016-04-13 11:25 - 2016-04-13 14:03 - 1439209589 _____ C:\Users\gustavo\Desktop\08- SC-WinterGetawayDay2720.mp4
    2016-04-13 00:14 - 2016-04-13 10:08 - 1100604134 _____ C:\Users\gustavo\Desktop\376- SC-WinterGetawayDay7720.mp4
    2016-04-13 00:13 - 2016-04-13 00:13 - 00000000 ____D C:\ProgramData\boost_interprocess
    2016-04-13 00:07 - 2016-04-22 19:36 - 00000000 ____D C:\Program Files (x86)\hohobnd
    2016-04-13 00:07 - 2016-04-20 15:50 - 00000000 ____D C:\Program Files (x86)\Sosition
    2016-04-13 00:07 - 2016-04-20 07:38 - 00000000 ____D C:\Users\gustavo\AppData\Local\3810282D-6C19-47B0-8283-5C6C29A7E108
    2016-04-13 00:07 - 2016-04-13 00:07 - 00014610 _____ C:\WINDOWS\System32\Tasks\Sosition Reports
    2016-04-13 00:07 - 2016-04-13 00:07 - 00014504 _____ C:\WINDOWS\System32\Tasks\Clteyghuwph System
    2016-04-13 00:07 - 2016-04-13 00:07 - 00000000 ____D C:\Program Files (x86)\Clteyghuwph
    2016-04-13 00:06 - 2016-04-20 15:50 - 00000000 ____D C:\Program Files (x86)\SrpnFiles
    2016-04-13 00:06 - 2016-04-13 00:13 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\SpringFiles
    2016-04-13 00:06 - 2016-04-13 00:07 - 00000000 ____D C:\Users\Public\Documents\dmp
    2016-04-13 00:06 - 2016-04-13 00:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\SrpnFiles
    2016-04-13 00:05 - 2016-04-13 00:06 - 04282368 _____ C:\Users\gustavo\Downloads\MS_Office_2016_Key_Working_For_Activation.iso
    2016-04-12 23:53 - 2016-04-12 23:53 - 00003712 _____ C:\WINDOWS\System32\Tasks\KMSAuto
    2016-04-12 23:53 - 2016-04-12 23:53 - 00002488 _____ C:\WINDOWS\KMSAutoLite.ini
    2016-04-12 23:53 - 2016-04-12 23:49 - 06230776 _____ C:\WINDOWS\KMSAuto.exe
    2016-04-12 23:48 - 2016-04-12 23:48 - 02466502 _____ C:\Users\gustavo\Downloads\ActivadorOffice2016.zip
    2016-04-12 23:41 - 2016-04-12 23:41 - 00000000 ____D C:\Program Files\Common Files\DESIGNER
    2016-04-12 20:46 - 2016-04-01 23:43 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
    2016-04-12 20:46 - 2016-04-01 22:56 - 00630272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
    2016-04-12 20:46 - 2016-04-01 22:51 - 00498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\tileobjserver.dll
    2016-04-12 20:46 - 2016-04-01 22:49 - 01054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
    2016-04-12 20:46 - 2016-04-01 22:48 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SharedStartModel.dll
    2016-04-12 20:46 - 2016-04-01 22:45 - 01090048 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
    2016-04-12 20:46 - 2016-04-01 22:44 - 03994624 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
    2016-04-12 20:46 - 2016-04-01 22:39 - 01832448 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
    2016-04-12 20:46 - 2016-04-01 22:37 - 03575296 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsThresholdAdminFlowUI.dll
    2016-04-12 20:46 - 2016-04-01 22:37 - 02158592 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
    2016-04-12 20:46 - 2016-04-01 22:30 - 01390080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
    2016-04-12 20:46 - 2016-03-29 05:52 - 01030416 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
    2016-04-12 20:46 - 2016-03-29 05:52 - 00874968 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
    2016-04-12 20:46 - 2016-03-29 05:50 - 07474016 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
    2016-04-12 20:46 - 2016-03-29 05:50 - 02656952 _____ C:\WINDOWS\system32\CoreUIComponents.dll
    2016-04-12 20:46 - 2016-03-29 05:50 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
    2016-04-12 20:46 - 2016-03-29 05:50 - 01141504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
    2016-04-12 20:46 - 2016-03-29 05:48 - 02152280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
    2016-04-12 20:46 - 2016-03-29 05:32 - 00989536 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
    2016-04-12 20:46 - 2016-03-29 05:26 - 01297752 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
    2016-04-12 20:46 - 2016-03-29 05:07 - 01862008 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
    2016-04-12 20:46 - 2016-03-29 04:58 - 00696664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
    2016-04-12 20:46 - 2016-03-29 04:47 - 00300104 _____ (Microsoft Corporation) C:\WINDOWS\system32\LockAppHost.exe
    2016-04-12 20:46 - 2016-03-29 04:43 - 00986976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
    2016-04-12 20:46 - 2016-03-29 04:41 - 00605440 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
    2016-04-12 20:46 - 2016-03-29 04:38 - 00358752 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
    2016-04-12 20:46 - 2016-03-29 04:14 - 00502104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
    2016-04-12 20:46 - 2016-03-29 04:11 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
    2016-04-12 20:46 - 2016-03-29 03:56 - 01089888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
    2016-04-12 20:46 - 2016-03-29 03:36 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
    2016-04-12 20:46 - 2016-03-29 03:32 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
    2016-04-12 20:46 - 2016-03-29 03:31 - 00541304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
    2016-04-12 20:46 - 2016-03-29 03:28 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
    2016-04-12 20:46 - 2016-03-29 03:28 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
    2016-04-12 20:46 - 2016-03-29 03:16 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
    2016-04-12 20:46 - 2016-03-29 03:09 - 00550912 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
    2016-04-12 20:46 - 2016-03-29 03:08 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
    2016-04-12 20:46 - 2016-03-29 03:07 - 00617984 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
    2016-04-12 20:46 - 2016-03-29 03:06 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
    2016-04-12 20:46 - 2016-03-29 03:04 - 00641536 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
    2016-04-12 20:46 - 2016-03-29 02:58 - 00460288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
    2016-04-12 20:46 - 2016-03-29 02:57 - 00339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
    2016-04-12 20:46 - 2016-03-29 02:53 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
    2016-04-12 20:46 - 2016-03-29 02:52 - 00438784 _____ (Microsoft Corporation) C:\WINDOWS\system32\AccountsRt.dll
    2016-04-12 20:46 - 2016-03-29 02:50 - 00948736 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
    2016-04-12 20:46 - 2016-03-29 02:49 - 00556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\PsmServiceExtHost.dll
    2016-04-12 20:46 - 2016-03-29 02:49 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
    2016-04-12 20:46 - 2016-03-29 02:46 - 00852480 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
    2016-04-12 20:46 - 2016-03-29 02:46 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
    2016-04-12 20:46 - 2016-03-29 02:45 - 01714688 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
    2016-04-12 20:46 - 2016-03-29 02:45 - 00970752 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
    2016-04-12 20:46 - 2016-03-29 02:44 - 00965632 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
    2016-04-12 20:46 - 2016-03-29 02:44 - 00954368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
    2016-04-12 20:46 - 2016-03-29 02:44 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.dll
    2016-04-12 20:46 - 2016-03-29 02:43 - 00587776 _____ (Microsoft Corporation) C:\WINDOWS\system32\bisrv.dll
    2016-04-12 20:46 - 2016-03-29 02:42 - 00471552 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
    2016-04-12 20:46 - 2016-03-29 02:42 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
    2016-04-12 20:46 - 2016-03-29 02:42 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
    2016-04-12 20:46 - 2016-03-29 02:41 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
    2016-04-12 20:46 - 2016-03-29 02:40 - 01388544 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
    2016-04-12 20:46 - 2016-03-29 02:40 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
    2016-04-12 20:46 - 2016-03-29 02:37 - 01902592 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3.dll
    2016-04-12 20:46 - 2016-03-29 02:37 - 01213440 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
    2016-04-12 20:46 - 2016-03-29 02:36 - 01575936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Speech.dll
    2016-04-12 20:46 - 2016-03-29 02:35 - 01395712 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
    2016-04-12 20:46 - 2016-03-29 02:32 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
    2016-04-12 20:46 - 2016-03-29 02:32 - 01211904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Cred.dll
    2016-04-12 20:46 - 2016-03-29 02:32 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
    2016-04-12 20:46 - 2016-03-29 02:30 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
    2016-04-12 20:46 - 2016-03-29 02:30 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
    2016-04-12 20:46 - 2016-03-29 02:29 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
    2016-04-12 20:46 - 2016-03-29 02:26 - 00821760 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
    2016-04-12 20:46 - 2016-03-29 02:26 - 00415232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
    2016-04-12 20:46 - 2016-03-29 02:18 - 00346624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
    2016-04-12 20:46 - 2016-03-29 02:14 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
    2016-04-12 20:46 - 2016-03-29 02:13 - 00358400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AccountsRt.dll
    2016-04-12 20:46 - 2016-03-29 02:12 - 03592704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
    2016-04-12 20:46 - 2016-03-29 02:09 - 00350720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CredProvDataModel.dll
    2016-04-12 20:46 - 2016-03-29 02:07 - 01444352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
    2016-04-12 20:46 - 2016-03-29 02:07 - 00799744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
    2016-04-12 20:46 - 2016-03-29 02:07 - 00792064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
    2016-04-12 20:46 - 2016-03-29 02:06 - 00649728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.dll
    2016-04-12 20:46 - 2016-03-29 02:05 - 00354304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
    2016-04-12 20:46 - 2016-03-29 02:04 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
    2016-04-12 20:46 - 2016-03-29 02:04 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
    2016-04-12 20:46 - 2016-03-29 02:02 - 01731584 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
    2016-04-12 20:46 - 2016-03-29 02:02 - 01098240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
    2016-04-12 20:46 - 2016-03-29 02:01 - 02275328 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
    2016-04-12 20:46 - 2016-03-29 02:01 - 01946112 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
    2016-04-12 20:46 - 2016-03-29 02:00 - 01139712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
    2016-04-12 20:46 - 2016-03-29 01:58 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
    2016-04-12 20:46 - 2016-03-29 01:57 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
    2016-04-12 20:46 - 2016-03-29 01:57 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
    2016-04-12 20:46 - 2016-03-29 01:56 - 02755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
    2016-04-12 20:46 - 2016-03-29 01:49 - 02635776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
    2016-04-12 20:46 - 2016-03-29 01:47 - 00765952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
    2016-04-12 20:46 - 2016-03-29 01:44 - 01072128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.Http.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 01626624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 01500672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
    2016-04-12 20:46 - 2016-03-29 01:35 - 01388032 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
    2016-04-12 20:46 - 2016-03-29 01:32 - 02229760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
    2016-04-12 20:46 - 2016-03-29 01:31 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
    2016-04-12 20:46 - 2016-03-29 01:28 - 01799680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
    2016-04-12 20:46 - 2016-03-29 01:26 - 16985600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
    2016-04-12 20:46 - 2016-03-29 01:22 - 11545600 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
    2016-04-12 20:46 - 2016-03-29 01:21 - 22378496 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
    2016-04-12 20:46 - 2016-03-29 01:21 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
    2016-04-12 20:46 - 2016-03-29 01:19 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
    2016-04-12 20:46 - 2016-03-29 01:15 - 03078144 _____ (Microsoft Corporation) C:\WINDOWS\system32\esent.dll
    2016-04-12 20:46 - 2016-03-29 01:13 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
    2016-04-12 20:46 - 2016-03-29 01:11 - 24602112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
    2016-04-12 20:46 - 2016-03-29 01:11 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
    2016-04-12 20:46 - 2016-03-29 01:09 - 13382656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
    2016-04-12 20:46 - 2016-03-29 01:08 - 18673664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
    2016-04-12 20:46 - 2016-03-29 01:08 - 02798080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
    2016-04-12 20:46 - 2016-03-29 01:07 - 19340800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
    2016-04-12 20:46 - 2016-03-29 01:06 - 02722816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\esent.dll
    2016-04-12 20:46 - 2016-03-29 00:57 - 07836160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
    2016-04-12 20:46 - 2016-03-29 00:57 - 05662208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
    2016-04-12 20:46 - 2016-03-29 00:56 - 00958976 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemoteNaturalLanguage.dll
    2016-04-12 20:46 - 2016-03-29 00:55 - 00712704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RemoteNaturalLanguage.dll
    2016-04-12 20:45 - 2016-04-01 23:40 - 00770640 _____ (Microsoft Corporation) C:\WINDOWS\system32\iuilp.dll
    2016-04-12 20:45 - 2016-04-01 23:40 - 00730344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Shell.Broker.dll
    2016-04-12 20:45 - 2016-04-01 23:40 - 00374008 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
    2016-04-12 20:45 - 2016-04-01 23:00 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEStoreEventHandlers.dll
    2016-04-12 20:45 - 2016-04-01 22:59 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEDataLayerHelpers.dll
    2016-04-12 20:45 - 2016-04-01 22:59 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEDataLayerHelpers.dll
    2016-04-12 20:45 - 2016-04-01 22:55 - 00278528 _____ (Microsoft Corporation) C:\WINDOWS\system32\NotificationObjFactory.dll
    2016-04-12 20:45 - 2016-04-01 22:55 - 00239104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NotificationObjFactory.dll
    2016-04-12 20:45 - 2016-04-01 22:53 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\VEEventDispatcher.dll
    2016-04-12 20:45 - 2016-04-01 22:53 - 00219648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VEEventDispatcher.dll
    2016-04-12 20:45 - 2016-04-01 22:38 - 02193408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
    2016-04-12 20:45 - 2016-04-01 22:33 - 04774912 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
    2016-04-12 20:45 - 2016-03-29 05:53 - 00277856 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys
    2016-04-12 20:45 - 2016-03-29 05:45 - 00100232 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmapi.dll
    2016-04-12 20:45 - 2016-03-29 05:41 - 00686976 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
    2016-04-12 20:45 - 2016-03-29 05:35 - 01152864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
    2016-04-12 20:45 - 2016-03-29 05:32 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
    2016-04-12 20:45 - 2016-03-29 04:58 - 00535080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
    2016-04-12 20:45 - 2016-03-29 04:58 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
    2016-04-12 20:45 - 2016-03-29 04:55 - 00258912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ufx01000.sys
    2016-04-12 20:45 - 2016-03-29 04:55 - 00058400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
    2016-04-12 20:45 - 2016-03-29 04:49 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
    2016-04-12 20:45 - 2016-03-29 04:48 - 00185184 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys
    2016-04-12 20:45 - 2016-03-29 04:41 - 00074424 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
    2016-04-12 20:45 - 2016-03-29 04:40 - 00110584 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvcli.dll
    2016-04-12 20:45 - 2016-03-29 04:39 - 00078040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wkscli.dll
    2016-04-12 20:45 - 2016-03-29 04:38 - 00261376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe
    2016-04-12 20:45 - 2016-03-29 04:37 - 00081144 _____ (Microsoft Corporation) C:\WINDOWS\system32\netapi32.dll
    2016-04-12 20:45 - 2016-03-29 04:14 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
    2016-04-12 20:45 - 2016-03-29 04:11 - 00051128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.dll
    2016-04-12 20:45 - 2016-03-29 04:02 - 00253088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LockAppHost.exe
    2016-04-12 20:45 - 2016-03-29 03:56 - 02403680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
    2016-04-12 20:45 - 2016-03-29 03:56 - 00073872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srvcli.dll
    2016-04-12 20:45 - 2016-03-29 03:55 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wkscli.dll
    2016-04-12 20:45 - 2016-03-29 03:54 - 00294752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
    2016-04-12 20:45 - 2016-03-29 03:53 - 00069744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netapi32.dll
    2016-04-12 20:45 - 2016-03-29 03:51 - 00378208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
    2016-04-12 20:45 - 2016-03-29 03:47 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
    2016-04-12 20:45 - 2016-03-29 03:46 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\xinputhid.sys
    2016-04-12 20:45 - 2016-03-29 03:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00048128 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenterprisediagnostics.dll
    2016-04-12 20:45 - 2016-03-29 03:37 - 00031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsdchngr.dll
    2016-04-12 20:45 - 2016-03-29 03:36 - 00012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacchooks.dll
    2016-04-12 20:45 - 2016-03-29 03:30 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetCfgNotifyObjectHost.exe
    2016-04-12 20:45 - 2016-03-29 03:30 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveskybackup.dll
    2016-04-12 20:45 - 2016-03-29 03:30 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
    2016-04-12 20:45 - 2016-03-29 03:29 - 00027648 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManagerShellext.exe
    2016-04-12 20:45 - 2016-03-29 03:27 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
    2016-04-12 20:45 - 2016-03-29 03:27 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll
    2016-04-12 20:45 - 2016-03-29 03:27 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
    2016-04-12 20:45 - 2016-03-29 03:27 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\browcli.dll
    2016-04-12 20:45 - 2016-03-29 03:25 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
    2016-04-12 20:45 - 2016-03-29 03:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\serial.sys
    2016-04-12 20:45 - 2016-03-29 03:25 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll
    2016-04-12 20:45 - 2016-03-29 03:24 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mtxoci.dll
    2016-04-12 20:45 - 2016-03-29 03:23 - 00116224 _____ (Microsoft Corporation) C:\WINDOWS\system32\FontProvider.dll
    2016-04-12 20:45 - 2016-03-29 03:22 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe
    2016-04-12 20:45 - 2016-03-29 03:21 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafBth.dll
    2016-04-12 20:45 - 2016-03-29 03:21 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\BdeHdCfgLib.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00088576 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\OnDemandConnRouteHelper.dll
    2016-04-12 20:45 - 2016-03-29 03:20 - 00033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuautoappupdate.dll
    2016-04-12 20:45 - 2016-03-29 03:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\browserbroker.dll
    2016-04-12 20:45 - 2016-03-29 03:18 - 00144896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Devices.dll
    2016-04-12 20:45 - 2016-03-29 03:18 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
    2016-04-12 20:45 - 2016-03-29 03:16 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
    2016-04-12 20:45 - 2016-03-29 03:14 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\DAFWSD.dll
    2016-04-12 20:45 - 2016-03-29 03:12 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
    2016-04-12 20:45 - 2016-03-29 03:06 - 00530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
    2016-04-12 20:45 - 2016-03-29 03:05 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleacc.dll
    2016-04-12 20:45 - 2016-03-29 03:05 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\system32\credprovhost.dll
    2016-04-12 20:45 - 2016-03-29 03:04 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieproxy.dll
    2016-04-12 20:45 - 2016-03-29 03:04 - 00333824 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\portcls.sys
    2016-04-12 20:45 - 2016-03-29 03:04 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsrslvr.dll
    2016-04-12 20:45 - 2016-03-29 03:03 - 00174592 _____ (Microsoft Corporation) C:\WINDOWS\system32\easwrt.dll
    2016-04-12 20:45 - 2016-03-29 03:02 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
    2016-04-12 20:45 - 2016-03-29 03:02 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
    2016-04-12 20:45 - 2016-03-29 03:00 - 00328192 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
    2016-04-12 20:45 - 2016-03-29 03:00 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msorcl32.dll
    2016-04-12 20:45 - 2016-03-29 02:56 - 00169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
    2016-04-12 20:45 - 2016-03-29 02:53 - 00694784 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys
    2016-04-12 20:45 - 2016-03-29 02:53 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXTaskFactory.dll
    2016-04-12 20:45 - 2016-03-29 02:51 - 00330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
    2016-04-12 20:45 - 2016-03-29 02:50 - 00166400 _____ (Microsoft Corporation) C:\WINDOWS\system32\AboveLockAppHost.dll
    2016-04-12 20:45 - 2016-03-29 02:50 - 00080384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SensorsNativeApi.V2.dll
    2016-04-12 20:45 - 2016-03-29 02:50 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsdchngr.dll
    2016-04-12 20:45 - 2016-03-29 02:49 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacchooks.dll
    2016-04-12 20:45 - 2016-03-29 02:48 - 00676352 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDApi.dll
    2016-04-12 20:45 - 2016-03-29 02:47 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
    2016-04-12 20:45 - 2016-03-29 02:47 - 00708608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll
    2016-04-12 20:45 - 2016-03-29 02:47 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\CredProvDataModel.dll
    2016-04-12 20:45 - 2016-03-29 02:44 - 00084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BTHUSB.SYS
    2016-04-12 20:45 - 2016-03-29 02:41 - 00881664 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll
    2016-04-12 20:45 - 2016-03-29 02:41 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
    2016-04-12 20:45 - 2016-03-29 02:41 - 00061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\samlib.dll
    2016-04-12 20:45 - 2016-03-29 02:41 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
    2016-04-12 20:45 - 2016-03-29 02:41 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\browcli.dll
    2016-04-12 20:45 - 2016-03-29 02:39 - 01239552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
    2016-04-12 20:45 - 2016-03-29 02:39 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
    2016-04-12 20:45 - 2016-03-29 02:39 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll
    2016-04-12 20:45 - 2016-03-29 02:38 - 00888320 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
    2016-04-12 20:45 - 2016-03-29 02:38 - 00841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
    2016-04-12 20:45 - 2016-03-29 02:38 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mtxoci.dll
    2016-04-12 20:45 - 2016-03-29 02:36 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
    2016-04-12 20:45 - 2016-03-29 02:36 - 00022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe
    2016-04-12 20:45 - 2016-03-29 02:35 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OnDemandConnRouteHelper.dll
    2016-04-12 20:45 - 2016-03-29 02:34 - 00103936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Devices.dll
    2016-04-12 20:45 - 2016-03-29 02:33 - 00148480 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dfsc.sys
    2016-04-12 20:45 - 2016-03-29 02:30 - 00235008 _____ C:\WINDOWS\system32\MTF.dll
    2016-04-12 20:45 - 2016-03-29 02:30 - 00176128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettings.DeviceEncryptionHandlers.dll
    2016-04-12 20:45 - 2016-03-29 02:29 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
    2016-04-12 20:45 - 2016-03-29 02:29 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
    2016-04-12 20:45 - 2016-03-29 02:25 - 01052160 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsSpellCheckingFacility.dll
    2016-04-12 20:45 - 2016-03-29 02:23 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleacc.dll
    2016-04-12 20:45 - 2016-03-29 02:23 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credprovhost.dll
    2016-04-12 20:45 - 2016-03-29 02:22 - 00306176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieproxy.dll
    2016-04-12 20:45 - 2016-03-29 02:22 - 00141824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\easwrt.dll
    2016-04-12 20:45 - 2016-03-29 02:19 - 00288256 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
    2016-04-12 20:45 - 2016-03-29 02:12 - 01410560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.Http.dll
    2016-04-12 20:45 - 2016-03-29 02:12 - 00250880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
    2016-04-12 20:45 - 2016-03-29 02:11 - 00129024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AboveLockAppHost.dll
    2016-04-12 20:45 - 2016-03-29 02:10 - 00787456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Web.dll
    2016-04-12 20:45 - 2016-03-29 02:09 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSDApi.dll
    2016-04-12 20:45 - 2016-03-29 02:09 - 00496128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll
    2016-04-12 20:45 - 2016-03-29 02:08 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
    2016-04-12 20:45 - 2016-03-29 02:06 - 03351040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
    2016-04-12 20:45 - 2016-03-29 02:04 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
    2016-04-12 20:45 - 2016-03-29 02:04 - 00682496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 01588224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml3.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00854528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00176640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmregistration.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
    2016-04-12 20:45 - 2016-03-29 02:02 - 00128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcsps.dll
    2016-04-12 20:45 - 2016-03-29 02:01 - 01117184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Speech.dll
    2016-04-12 20:45 - 2016-03-29 02:01 - 00705536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
    2016-04-12 20:45 - 2016-03-29 01:59 - 00555520 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncController.dll
    2016-04-12 20:45 - 2016-03-29 01:59 - 00256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\accountaccessor.dll
    2016-04-12 20:45 - 2016-03-29 01:58 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
    2016-04-12 20:45 - 2016-03-29 01:57 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
    2016-04-12 20:45 - 2016-03-29 01:57 - 00162816 _____ C:\WINDOWS\SysWOW64\MTF.dll
    2016-04-12 20:45 - 2016-03-29 01:57 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
    2016-04-12 20:45 - 2016-03-29 01:53 - 00777728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsSpellCheckingFacility.dll
    2016-04-12 20:45 - 2016-03-29 01:52 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
    2016-04-12 20:45 - 2016-03-29 01:43 - 00592384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Web.dll
    2016-04-12 20:45 - 2016-03-29 01:40 - 03671040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
    2016-04-12 20:45 - 2016-03-29 01:36 - 00151040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mdmregistration.dll
    2016-04-12 20:45 - 2016-03-29 01:35 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncController.dll
    2016-04-12 20:45 - 2016-03-29 01:35 - 00361472 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
    2016-04-12 20:45 - 2016-03-29 01:34 - 00848896 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
    2016-04-12 20:45 - 2016-03-29 01:34 - 00688640 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Connectivity.dll
    2016-04-12 20:45 - 2016-03-29 01:31 - 00957952 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
    2016-04-12 20:45 - 2016-03-29 01:30 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
    2016-04-12 20:45 - 2016-03-29 01:15 - 00338432 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll
    2016-04-12 20:45 - 2016-03-29 01:13 - 00521728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Connectivity.dll
    2016-04-12 20:45 - 2016-03-29 01:05 - 00821248 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
    2016-04-12 20:45 - 2016-03-29 00:58 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
    2016-04-12 20:45 - 2016-03-29 00:57 - 00794112 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
    2016-04-12 20:45 - 2016-03-29 00:56 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\FWPUCLNT.DLL
    2016-04-12 20:45 - 2016-03-29 00:55 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FWPUCLNT.DLL
    2016-04-12 20:45 - 2016-03-29 00:51 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\basesrv.dll
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002496 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002477 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002448 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002408 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00002404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
    2016-04-12 20:10 - 2016-04-12 20:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Herramientas de Microsoft Office 2016
    2016-04-12 19:15 - 2016-04-12 19:15 - 00000000 ____D C:\Program Files\Microsoft Office 15
    2016-04-12 17:44 - 2016-04-12 17:44 - 00004608 _____ C:\WINDOWS\SECOH-QAD.exe
    2016-04-12 17:44 - 2016-04-12 17:44 - 00003584 _____ C:\WINDOWS\SECOH-QAD.dll
    2016-04-12 17:40 - 2016-04-12 17:40 - 01977052 _____ C:\Users\gustavo\Downloads\Activador (By TecnorRoberto.rar
    2016-04-12 17:30 - 2016-04-12 17:33 - 00003804 _____ C:\WINDOWS\System32\Tasks\AutoPico Daily Restart
    2016-04-12 17:30 - 2016-04-12 17:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KMSpico
    2016-04-12 17:29 - 2016-04-12 17:33 - 00000000 ____D C:\Program Files\KMSpico
    2016-04-12 17:27 - 2016-04-12 17:28 - 02939808 _____ C:\Users\gustavo\Downloads\activador by Roberto.rar
    2016-04-12 17:23 - 2016-04-12 17:23 - 00000000 ____D C:\Program Files (x86)\PPRX
    2016-04-12 17:20 - 2016-04-12 17:23 - 08687104 _____ (suprx) C:\Users\gustavo\Downloads\sharewithus-2016.exe
    2016-03-31 16:10 - 2016-03-31 16:10 - 02841957 _____ C:\Users\gustavo\Downloads\Trabajo de Grado Completo (1).pdf
    2016-03-29 22:17 - 2016-04-23 18:27 - 00000000 ____D C:\Users\gustavo\Desktop\TESIS YAYA
    2016-03-29 22:17 - 2016-03-29 22:17 - 00000000 ____D C:\Users\gustavo\Downloads\New folder
    2016-03-29 20:22 - 2016-03-29 20:22 - 00009548 _____ C:\Users\gustavo\Downloads\Gato público total como porcentaje del PIB.xlsx
    2016-03-29 20:10 - 2016-03-29 20:10 - 00074240 _____ C:\Users\gustavo\Downloads\7_1_7.xls
    2016-03-29 20:09 - 2016-03-29 20:09 - 00220672 _____ C:\Users\gustavo\Downloads\CAP1.xls
    2016-03-29 17:12 - 2016-03-29 17:12 - 00051712 _____ C:\Users\gustavo\Downloads\4_5_7.xls
    2016-03-29 17:11 - 2016-03-29 17:11 - 01142272 _____ C:\Users\gustavo\Downloads\4_4_2.xls
    2016-03-29 17:09 - 2016-03-29 17:09 - 00080896 _____ C:\Users\gustavo\Downloads\5_2_2.xls
    2016-03-29 17:08 - 2016-03-29 17:08 - 00991744 _____ C:\Users\gustavo\Downloads\5_2_4 (1).xls
    2016-03-29 17:05 - 2016-04-02 23:45 - 00991744 _____ C:\Users\gustavo\Downloads\5_2_4.xls
     
  9. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-25 09:06 - 2015-02-22 21:22 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
    2016-04-25 08:36 - 2014-09-12 19:33 - 00004156 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{85027A90-13B9-424E-8FFD-7BA10B70D1D8}
    2016-04-25 08:35 - 2015-12-04 08:11 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
    2016-04-24 22:06 - 2015-02-22 21:22 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
    2016-04-24 15:31 - 2014-10-03 15:18 - 00000000 ____D C:\ProgramData\MFAData
    2016-04-24 15:01 - 2016-03-13 22:23 - 00000000 ____D C:\Users\gustavo\AppData\Local\CrashDumps
    2016-04-24 09:47 - 2015-10-30 02:51 - 00000000 ____D C:\WINDOWS\INF
    2016-04-24 09:47 - 2015-07-30 22:44 - 00883044 _____ C:\WINDOWS\system32\PerfStringBackup.INI
    2016-04-24 09:40 - 2015-12-05 05:57 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
    2016-04-24 09:40 - 2015-12-04 08:13 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
    2016-04-24 09:40 - 2014-12-20 11:23 - 00000000 ___RD C:\Users\gustavo\iCloudDrive
    2016-04-24 09:28 - 2015-10-30 01:58 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
    2016-04-24 09:26 - 2015-07-19 15:50 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Skype
    2016-04-23 16:30 - 2014-09-12 19:07 - 00000000 ____D C:\Users\gustavo\AppData\Local\Packages
    2016-04-23 11:04 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\system32\NDF
    2016-04-23 11:04 - 2015-06-25 09:47 - 00000000 ____D C:\Users\gustavo\AppData\Local\ElevatedDiagnostics
    2016-04-22 19:29 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\AppReadiness
    2016-04-22 17:21 - 2015-12-04 08:14 - 00000000 ____D C:\Users\gustavo
    2016-04-22 10:38 - 2014-09-12 19:35 - 00002138 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
    2016-04-22 10:27 - 2015-12-04 08:11 - 00345952 _____ C:\WINDOWS\system32\FNTCACHE.DAT
    2016-04-22 01:48 - 2015-10-30 02:54 - 00000000 ____D C:\Program Files\Common Files\System
    2016-04-22 01:48 - 2013-08-22 08:55 - 00000167 _____ C:\WINDOWS\win.ini
    2016-04-22 01:41 - 2015-10-30 02:54 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
    2016-04-21 18:17 - 2015-10-30 02:54 - 00000000 ___HD C:\Program Files\WindowsApps
    2016-04-21 17:55 - 2015-10-30 01:58 - 00032768 ___SH C:\WINDOWS\system32\config\ELAM
    2016-04-20 22:18 - 2015-10-30 04:37 - 00000000 ____D C:\WINDOWS\ShellNew
    2016-04-20 22:17 - 2016-01-28 18:35 - 00000000 ____D C:\Program Files\Microsoft Office
    2016-04-20 22:17 - 2015-10-30 02:54 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
    2016-04-20 11:50 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\LiveKernelReports
    2016-04-20 10:48 - 2016-03-25 21:44 - 00000000 ____D C:\WINDOWS\Minidump
    2016-04-16 21:41 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\rescache
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\system32\appraiser
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\PolicyDefinitions
    2016-04-14 00:22 - 2015-10-30 02:54 - 00000000 ____D C:\WINDOWS\bcastdvr
    2016-04-13 00:15 - 2016-01-31 22:12 - 00000000 ____D C:\Users\gustavo\Desktop\EXPO
    2016-04-13 00:15 - 2014-10-03 12:30 - 00000000 ____D C:\Users\gustavo\Desktop\My Shared Folder
    2016-04-13 00:14 - 2015-11-15 16:09 - 00000000 ____D C:\Users\gustavo\Desktop\Cancilleria
    2016-04-13 00:07 - 2015-07-30 22:48 - 00000840 __RSH C:\ProgramData\ntuser.pol
    2016-04-12 23:25 - 2015-10-30 02:41 - 00000000 ____D C:\WINDOWS\CbsTemp
    2016-04-12 23:23 - 2014-09-16 06:11 - 00000000 ____D C:\WINDOWS\system32\MRT
    2016-04-12 23:18 - 2014-09-16 06:11 - 135176864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
    2016-04-10 13:47 - 2015-07-19 15:50 - 00000000 ___RD C:\Program Files (x86)\Skype
    2016-04-10 13:47 - 2015-07-19 15:50 - 00000000 ____D C:\ProgramData\Skype
    2016-04-06 14:02 - 2015-10-30 02:56 - 00829944 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
    2016-04-06 14:02 - 2015-10-30 02:56 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

    ==================== Files in the root of some directories =======

    2014-09-12 20:11 - 2015-11-21 08:51 - 0000034 _____ () C:\Users\gustavo\AppData\Roaming\AdobeWLCMCache.dat
    2015-07-16 18:37 - 2015-07-16 18:37 - 0000000 _____ () C:\Users\gustavo\AppData\Local\{C72FDF29-07A6-4B52-BD6E-6198A83CACB9}
    2015-12-04 08:12 - 2015-12-04 08:12 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
    2016-02-25 07:47 - 2016-02-25 07:47 - 0000016 _____ () C:\ProgramData\mntemp

    Some files in TEMP:
    ====================
    C:\Users\gustavo\AppData\Local\Temp\avguirn_08164994610.exe
    C:\Users\gustavo\AppData\Local\Temp\avguirn_081982142389.exe
    C:\Users\gustavo\AppData\Local\Temp\avguirn_082049670441.exe
    C:\Users\gustavo\AppData\Local\Temp\ReadCubeTray64.exe
    C:\Users\gustavo\AppData\Local\Temp\RemoteMouse.exe


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\WINDOWS\system32\winlogon.exe => File is digitally signed
    C:\WINDOWS\system32\wininit.exe => File is digitally signed
    C:\WINDOWS\explorer.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
    C:\WINDOWS\system32\svchost.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
    C:\WINDOWS\system32\services.exe => File is digitally signed
    C:\WINDOWS\system32\User32.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
    C:\WINDOWS\system32\userinit.exe => File is digitally signed
    C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
    C:\WINDOWS\system32\rpcss.dll => File is digitally signed
    C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
    C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
    C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


    LastRegBack: 2016-04-22 00:26

    ==================== End of FRST.txt ============================
     
  10. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    I tried to uninstall the programs you mentioned through the control panel. A dialogue box appears when trying to unisntall qksee asking me to allow the app to make some changes to the system. I clicked on yes and nothing happened. It remains installed.
    Something silimilar happens when I try to unistall YAC. A dialogue box appears suggesting me to unistall the app from the control panel.
     
  11. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    And about the System restore, I hadn't disabled it. It appears to never have been enabled... When I tried to enable it, a box appeared saying that Windows Backup didn't find any drives to save backups.
     
  12. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    You have to select some drive. See here: http://www.thewindowsclub.com/system-restore-disabled-turn-on-system-restore-windows

    [​IMG] Download RogueKiller from one of the following links and save it to your Desktop:

    Link 1
    Link 2
    • Close all the running programs
    • Windows Vista/7/8 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again
    [​IMG] Please download Malwarebytes Anti-Malware (MBAM) to your desktop.
    NOTE. If you already have MBAM 2.0 installed scroll down.
    • Double-click mbam-setup-2.0.0.1000.exe and follow the prompts to install the program.
    • At the end, be sure a checkmark is placed next to the following:
    • Launch Malwarebytes Anti-Malware
    • A 14 day trial of the Premium features is pre-selected. You may deselect this if you wish, and it will not diminish the scanning and removal capabilities of the program.
    • Click Finish.
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.
    If you already have MBAM 2.0 installed:
    • On the Dashboard, click the 'Update Now >>' link
    • After the update completes, click the 'Scan Now >>' button.
    • Or, on the Dashboard, click the Scan Now >> button.
    • If an update is available, click the Update Now button.
    • A Threat Scan will begin.
    • When the scan is complete, if there have been detections, click Apply Actions to allow MBAM to clean what was detected.
    • In most cases, a restart will be required.
    • Wait for the prompt to restart the computer to appear, then click on Yes.
    How to get logs:
    (Export log to save as txt)
    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Export'.
    • Click 'Text file (*.txt)'
    • In the Save File dialog box which appears, click on Desktop.
    • In the File name: box type a name for your scan log.
    • A message box named 'File Saved' should appear stating "Your file has been successfully exported".
    • Click Ok
    • Attach that saved log to your next reply.
    (Copy to clipboard for pasting into forum replies or tickets)
    • After the restart once you are back at your desktop, open MBAM once more.
    • Click on the History tab > Application Logs.
    • Double click on the Scan Log which shows the Date and time of the scan just performed.
    • Click 'Copy to Clipboard'
    • Paste the contents of the clipboard into your reply.
    [​IMG] Please download AdwCleaner by Xplode onto your desktop.
    • Close all open programs and internet browsers.
    • Double click on adwcleaner.exe to run the tool.
    • Click on Scan button.
    • When the scan has finished click on Clean button.
    • Your computer will be rebooted automatically. A text file will open after the restart.
    • Please post the contents of that logfile with your next reply.
    • You can find the logfile at C:\AdwCleaner[S1].txt as well.
    [​IMG] Please download Junkware Removal Tool to your desktop.
    • Shut down your protection software now to avoid potential conflicts.
    • Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".
    • The tool will open and start scanning your system.
    • Please be patient as this can take a while to complete depending on your system's specifications.
    • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
    • Post the contents of JRT.txt into your next message.
     
  13. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    Ok, thank you for the help.

    Here are the Logs:

    RogueKiller V12.1.4.0 [Apr 25 2016] (Free) by Adlice Software
    mail : http://www.adlice.com/contact/
    Feedback : http://forum.adlice.com
    Website : http://www.adlice.com/software/roguekiller/
    Blog : http://www.adlice.com

    Operating System : Windows 10 (10.0.10586) 64 bits version
    Started in : Normal mode
    User : gustavo [Administrator]
    Started from : C:\Users\gustavo\Downloads\RogueKiller.exe
    Mode : Delete -- Date : 04/26/2016 08:09:06

    ¤¤¤ Processes : 9 ¤¤¤
    [PUP|VT.FraudTool.YAC] iSafeSvc.exe(1732) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe[7] -> ERROR [0]
    [PUP|VT.FraudTool.YAC] iSafeSvc2.exe(1948) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe[7] -> ERROR [0]
    [VT.HackTool:Win32/AutoKMS] Service_KMS.exe(2908) -- C:\Program Files\KMSpico\Service_KMS.exe[-] -> Killed [TermThr]
    [PUP|VT.FraudTool.YAC] iSafeTray.exe(6604) -- C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe[7] -> ERROR [0]
    [VT.HackTool:Win32/AutoKMS] Service_KMS.exe(3412) -- C:\Program Files\KMSpico\Service_KMS.exe[-] -> Killed [TermProc]
    [PUP|VT.FraudTool.YAC] (SVC) iSafeKrnl -- \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys[7] -> Stopped
    [PUP|VT.FraudTool.YAC] (SVC) iSafeKrnlMon -- \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys[7] -> Stopped
    [PUP|VT.FraudTool.YAC] (SVC) iSafeNetFilter -- system32\DRIVERS\iSafeNetFilter.sys[7] -> Stopped
    [PUP|VT.FraudTool.YAC] (SVC) iSafeService -- C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe[7] -> ERROR [41c]

    ¤¤¤ Registry : 31 ¤¤¤
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Elex-tech -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\hdcode -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\mystartsearchSoftware -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C} -> Not selected
    [PUP] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} (C:\Program Files\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll) -> Not selected
    [PUP] (X86) HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} (C:\Program Files\AVG Web TuneUp\4.2.9.726\AVG Web TuneUp.dll) -> Not selected
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeKrnl (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeKrnlBoot (system32\DRIVERS\iSafeKrnlBoot.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeKrnlKit (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeKrnlMon (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys) -> Deleted
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeKrnlR3 (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeNetFilter (system32\DRIVERS\iSafeNetFilter.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iSafeService (C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeKrnl (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeKrnlBoot (system32\DRIVERS\iSafeKrnlBoot.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeKrnlKit (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeKrnlMon (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys) -> Deleted
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeKrnlR3 (\??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeNetFilter (system32\DRIVERS\iSafeNetFilter.sys) -> ERROR [5]
    [PUP|VT.FraudTool.YAC] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\iSafeService (C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe) -> ERROR [5]
    [PUM.Proxy] (X64) HKEY_USERS\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings | AutoConfigUrl : http://un-stop.biz/wpad.dat?2e0dee055385a55a0d06cbc8873420f28807554 -> Deleted
    [PUM.Proxy] (X86) HKEY_USERS\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings | AutoConfigUrl : http://un-stop.biz/wpad.dat?2e0dee055385a55a0d06cbc8873420f28807554 -> ERROR [2]
    [PUM.Proxy] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NlaSvc\Parameters\Internet\ManualProxies | (default) : 0http://un-stop.biz/wpad.dat?2e0dee055385a55a0d06cbc8873420f28807554 -> Deleted
    [PUM.Proxy] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\NlaSvc\Parameters\Internet\ManualProxies | (default) : 0http://un-stop.biz/wpad.dat?2e0dee055385a55a0d06cbc8873420f28807554 -> Found
    [PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Start Page : www.mystartsearch.com/?type=hp&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344 -> Found
    [PUM.HomePage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Default_Page_URL : www.mystartsearch.com/?type=hp&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344 -> Found
    [PUM.SearchPage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Search Page : www.mystartsearch.com/web/?type=ds&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344&q={searchTerms} -> Found
    [PUM.SearchPage] (X64) HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main | Default_Search_URL : www.mystartsearch.com/web/?type=ds&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344&q={searchTerms} -> Found
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{b62d116d-1e5c-4656-b3e4-4c3b6db20c90} | DhcpNameServer : 172.20.10.1 ([]) -> Replaced ()
    [PUM.Dns] (X64) HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Tcpip\Parameters\Interfaces\{b62d116d-1e5c-4656-b3e4-4c3b6db20c90} | DhcpNameServer : 172.20.10.1 ([]) -> Replaced ()

    ¤¤¤ Tasks : 0 ¤¤¤

    ¤¤¤ Files : 8 ¤¤¤
    [PUP][File] C:\Windows\SECOH-QAD.exe -> Deleted
    [PUP][File] C:\Users\gustavo\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\qksee.lnk [LNK@] C:\PROGRA~2\qksee\qksee.exe -> Deleted
    [PUP][File] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee\qksee.lnk [LNK@] C:\PROGRA~2\qksee\qksee.exe -> Deleted
    [PUP][File] C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qksee\uninstall.lnk [LNK@] C:\PROGRA~2\qksee\UNINST~1.EXE -> Deleted
    [PUP][Folder] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0} -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\instance.dat -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\mia.lib -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.dat -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.exe -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.lan -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.lnk -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.msi -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.par -> Deleted
    [PUP][File] C:\ProgramData\{7BB7ABBD-2203-4523-9D44-DE8C118B09C0}\TS2Install.res -> Deleted
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\bugreport.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\ccc.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\customscan.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\dbucg.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\hyperscan.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\isafe.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\quickscan.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\scanfilter.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\ucg.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\cfg\updatedb.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\cfg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\curlpp.dll -> Removed at reboot [5]
     
  14. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\adb.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\bas.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\bts.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\bwd.dat -> Removed at reboot [20]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\cls.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\clx.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\eas.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\ess.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\fst.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\gcs.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\gcx.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\hs.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\mic.dat -> Removed at reboot [20]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\nlu.dat -> Removed at reboot [20]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\plx.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\rms.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\sta.dat -> Removed at reboot [20]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\stu.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\tbc.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\uis.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\was.dat -> Removed at reboot [20]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\data\ysm.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\data -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\eDelayinfo.edb -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\cache\index.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\engine\cache -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\defs\bs.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\defs\sr.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\defs\vn.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\defs\ws.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\engine\defs -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\quarantine\index.dat -> Removed at reboot [20]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\engine\quarantine -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\engine\trustzone\index.dat -> Removed at reboot [20]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\engine\trustzone -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\engine -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\feedback.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\font\segoeui.ttf -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\font\segoeuib.ttf -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\font -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iCommon.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iCommu.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iddmgr.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iDesk.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iDskDllPatch.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iDskDllPatch64.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iImportLib.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\ipcdl.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\ipcproxy.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafe.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafeadfv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeAdless.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafebase.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafebs.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeBugReport.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeCheckEngine.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafechlp.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafeclc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafeclcv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafeclean.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeDisp.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeEngineBase.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeEngineDisp.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnl.sys -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlBoot.sys -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlCall.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlCall64.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlKit.sys -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMonCall.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlR3.sys -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlShell.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemadwc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafembp.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemclv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemgc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeMon.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeMon64.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemoptv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemsmv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafemvsv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeNetFilter.sys -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafenpf.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafepxy.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeRKScanShell64.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isaferpt.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafesmgr.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafesopt.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafesptv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeSrvMon64.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafesv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeSvc2.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafetbv.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeTHlp.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeTHlp64.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeTray.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\isafeupbiz.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSafeVirusScanner.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iStart.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSvc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iSvc2.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPAutoClean.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPDesk.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPFeedback.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPFloaty.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPMsgCenter.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTpNodisturb.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPProtect.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPPush.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPStartupAssist.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\iTPVirus.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\AdBlock_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\adwclean_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\bugreport.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\clean_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\clean_scanfilter_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\common_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\dsk_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\fblang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\iSafeRKScanShell.lang -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\iSafeSet_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\Lottery_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\NewVirusScan_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\new_clean_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\optimize_lang2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\PCClinicUI_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\plugin_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\SafeProtect_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\shell.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\softmgr_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\startup_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\taskhelper_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\ToolBox_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\tray2_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_appstore_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_desk_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_feedback_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_floaty_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_nodisturb_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_protect_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_startupassist_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\trayplugin_virus_lang.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\lang\uninstall_lang.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\lang -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\libcurl.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\libeay32.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\libpng.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\bugreport.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\bugreport.LOG -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\bugreport.zip -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\ipcdl.log -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\ipcproxy.log -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeBS.log -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeKrnlCall.log -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeKrnlMonCall.log -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeSvc.LOG -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeSvc2.LOG -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeTaskHelper.LOG -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\log\iSafeTHlp64.LOG -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\log -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\main -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\msvcp110.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\msvcr110.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\ouilibx.dll -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\pfdatapfdata\SSL -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\pfdatapfdata -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\AdblockToggle.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\adb_set.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\adb_set_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\adb_set_hide.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\adb_set_hide_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\adb_set_show.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\adb_set_show_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\Add.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\Beta.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\Delete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\edit_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\FilterDesc.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\FilterDesc_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\lock_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\LogDetail.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\LogDetail_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\opt_arrow_down.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\popup_menu_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\popup_menu_itemskin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\Resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\unlocked_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\WhiteList.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default\WhiteList_gray.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\layout\default\AdBlockView.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\style\Style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\AdBlock -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\about_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\activity.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\activity_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\appstore_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\appstore_refresh.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\btn_set.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\check_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\check_indeterminate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\check_uncheck.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\cm_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\combo_browser_dropdown_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\connecting_anim.gif -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\dbup_dlg_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\dbup_dlg_bk_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\dbup_dlg_onekey_up_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\dbup_dlg_reboot_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\bk_bag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\bk_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\bk_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\bk_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\btn_repair.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_adblock_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_back_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_cancel.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_do.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_number_0.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_health_number_hover.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_health_number_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_health_number_pressed.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_health_plus_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_number_hover.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_number_hover_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_number_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_number_normal_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_number_pressed.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_number_pressed_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_ok_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_result_plus_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_rubbish_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_rubbish_icon_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_safe_protect_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_safe_protect_icon_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_scanning_mid.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_scanning_pic.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_scanning_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_softmgr_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_softmgr_icon_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_sys_opt_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_sys_opt_icon_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_tip_wnd_arrow_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_tip_wnd_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_tip_wnd_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_type_btn_bottom_line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_bn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_gb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_health_bn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_health_kn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_health_mn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_kb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_kn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_mb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_unit_mn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\exam_vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\green_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\icon_big_home.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\ignore_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\manual_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\manual_item.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\number_big_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\number_big_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\number_big_red2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\opt_arrow_down.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\opt_arrow_up.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\right_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\score_none.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\warning_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\warning_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\warning_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\warning_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam\yellow_wrong.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\exam -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\head_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\head_indeteminate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\head_unchecked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_adblock.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_adw_clean.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_appstore.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_avira.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_deep_clean.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_exam.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_netmon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_optimize.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_protect.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_recovery.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_softmgr.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_toolbox.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\icon_virusscan.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\if_block.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\if_prompt.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\if_question.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\if_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\language_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\language_selected_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\like.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\like_count.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\line1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\line2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\listctrlbtn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\menu_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\menu_bkg2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\menu_item_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\menu_nation_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\menu_setting_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\msgbox_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\number_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\number_bg2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\pop_sys_button2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\pop_sys_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\progressbar_anim.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\progressbar_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\progressbar_image.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\recovery.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\setting.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\setting_img_list.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\slidebutton_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\small_dl.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\small_download.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\small_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\small_progress.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\small_progress_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\special_line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\startmenu_deepclean.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\sub_toggle_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\sys_imglist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\tab_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\updatedlg_ok_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_cheking.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_chk_err.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_chk_ok.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_client_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_downlodaing.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_error.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_latest.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\update_server_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new\wifi_logo.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image\new -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\aboutdlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\dbupdatedlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\DemoApp.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\language_select.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\maindlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\msgbox.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\slide_button_wnd.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\tipwnd.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new\updatedlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout\new -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\style\style_new.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\app -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\crash_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\detail_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\error_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\input.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\reset_yac_btn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\send_btn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\smell_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\sorry_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\sucess_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\wait.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\waitting_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res\wait_ico.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\res -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default\resource.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\layout\default\detailwnd.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\layout\default\mainwnd.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\bugreport -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_button_bk1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_button_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_button_bk3.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_button_bk4.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_button_bk5.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_button_bk6.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_box_select_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_button_open.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_default_image.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_eye_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_file_browser.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_path_edit.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_progress_animate.gif -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_pop_tipwnd_warnning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\clean_togbtn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\cl_combo_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\cl_down_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\cl_menu_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\cl_menu_item_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res\cl_up_btn_bk.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_pop_res -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\clean_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_advance_item_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_advance_item_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_adware_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_auto_clean_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_clean_smile_face.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_full_scan_virus_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_junk_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_list_header_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_plugin_can_delete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_plugin_can_disable.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_plugin_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_plugin_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_plugin_type_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_privacy_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_quickclean_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_quick_clean_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_registry_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_reg_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_rubbish_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_scan_check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_scan_detail_dlg_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_share_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_sysmenu_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\cl_trace_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\opt_new_ico.png -> Removed at reboot [5]
     
  15. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\opt_rightkeymenu_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default\opt_sendto_ico.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default\NewCleanPFSettingDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default\NewCleanPopDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default\NewCleanView.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default\ScanDetailDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default\Tipswnd.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\style\clean_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\clean -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\arrow_down.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\arrow_up.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\check_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\check_indeterminate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\check_uncheck.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\close_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\color_blue_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\color_green_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\color_red_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\color_yellow_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\common_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\common_dlg_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\common_faq_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\common_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\common_tip_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\feedback_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\head_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\head_indeteminate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\head_unchecked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\if_block.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\if_prompt.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\if_question.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\if_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\min_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\msgbox2_button_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\msgbox2_button_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\msgbox2_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\msgbox_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\msgbox_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\msgbox_close_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\nation_icon_list.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\progressbar_anim.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\progressbar_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\progressbar_image.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\pvb_line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\pvb_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\scanview_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\scan_check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\scan_complete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\scan_scanning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\scan_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\switch_button_off.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\switch_button_on.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\toggle_btn_pop_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default\vscroll.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\layout\msgbox.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\layout\msgbox2.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\style\common_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\common\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\common -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\close_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_add_file_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_add_file_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_btn_bk1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_btn_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_complete_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_ctrl_close_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_edit_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_file_ctrl_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_file_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_live_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_msgbox_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_msgbox_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_pay_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_problem_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_report_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_suggestion_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_tip_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_wait_anim.gif -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_warning_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\fb_yac_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default\tab_bg.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout\default\feedback_view.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout\default\mainwnd2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout\default\msgbox.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\fbSkin -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg\desk_bkg_1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg\desk_bkg_2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg\desk_bkg_3.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg\desk_bkg_4.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg\desk_bkg_5.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg\desk_bkg_default.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\desk_bkg_list.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\foldericon\app.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\foldericon\file.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\foldericon\folder.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\foldericon\picture.ico -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\foldericon -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\add_list_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\add_list_til_line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\app.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\arrange_arrow_b.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\arrange_arrow_l.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\arrange_arrow_r.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\arrange_arrow_t.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\btn_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\btn_green_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\check_uncheck.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop\main_bg.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrangedesktop -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrange_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrow_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\arrow_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\btn_accelerate_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\button_delete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\button_selected.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\check_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\check_uncheck.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\cloud_flash.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\combo_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\combo_skin_op.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\customize.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\default_file.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\delete_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\deskbtnbk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_all_import.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_bkg_default.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_btn_dkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_button_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_cmd_list.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_default_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_dlg_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_edit.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_edit_light.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_fbar.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_import_arrow_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_import_arrow_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_import_button_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_import_gridctrl_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_import_icon_add_other.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_import_icon_list_add.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_list.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_list_light.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_loading.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_main_panel_edge.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_menu.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_more.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_pc.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_plus_import_bkg_a.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_plus_import_bkg_b.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_power_off.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_power_off_light.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_power_off_unlight.png -> Removed at reboot [5]

    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\desk_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\edit_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\edit_skin_op.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\file.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\focus_next.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\focus_prev.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\folder.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\icon_adblock_18-18.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\icon_adblock_22-22.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\icon_arrange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\icon_Tip.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\idesk_pre_view.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\idesk_pre_view_a.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\import_scroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\improve_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\large_add_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\line-foot.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\list_scroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\logo_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menuitem_selbk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_accelerate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_help.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_import.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_noad.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_open.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_quit.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_restore.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_sendto.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\menu_set.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\monitor_button_next.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\monitor_button_pre.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\mousechoose.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\mypc_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\new_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\new_icon_large.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\new_icon_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\new_icon_xp.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\normal_button_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\nothing.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\PageBtnBkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\PageBtnBkg_focus.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\PageNavigate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\pic-error.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\pic-info.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\pic-question.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\pic-warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\picture.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\plus_action_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\search_box.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\search_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\search_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\selected.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\shutdown_button_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\shutdown_more_button_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\start_button_hover.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\start_panel_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\start_shutdown_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\switch_style.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_ctrl_panel.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_imglist.bmp -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_local_driver.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_lock.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_menu_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_net_connect.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_recycle.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_restart.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\sys_sleep.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_firstrun_bottom.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_firstrun_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_firstrun_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_firstrun_top.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_introduce_bottom.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_introduce_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_introduce_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\desk_tip_introduce_top.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_add_focus.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_arrow_bottom.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_arrow_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_arrow_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_arrow_right_large.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_browser_focus.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_focus_mask_point.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_focus_mask_rect.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_item_drag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_guide_item_focus.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip\tip_point.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tip -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\tips_button_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\title_bar.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\user_account_default.bmp -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\WIN7_bjSmall_X.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\WIN7_bjSmall_Y.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\WIN7_bj_X.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\WIN7_bj_Y.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\win8_desk_16_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\win8_desk_32_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\XP_bj_hover.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default\XP_bj_normal.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\add_shortcut_tip.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\arrange_desktop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\desk_bkg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\desk_taskbar_help_tip1.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\desk_taskbar_help_tip2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\main_import_icon.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\main_panel.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\main_setting.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\main_start.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\my_pc_menu.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\plus_import_icon.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\rename.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default\taskbar.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iDesk -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\about.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\adb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\bep.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\bth.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\dse.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\emailprotect.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\fw.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\general.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\iSafeSet_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\jfm.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\lang.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\lang_btn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default\nation_icon_list.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\layout\default\iSafeSetView.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\style\iSafeSet_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\iSafeSet -> Removed at reboot [5]
     
  16. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    [File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_arrow_down.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_arrow_up.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_button_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_close_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_indeterminate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_loading.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_logo.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_minimum_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_num.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_num_percent.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_num_white.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_brush.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_complete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_dl_brush.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_dl_complete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_dl_start.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_install_brush.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_op_complete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_picture_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_point.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_select.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_speed_bar.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_unable.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_unit_b.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_unit_gb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_unit_kb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_unit_mb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\new_clean_unselect.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean\vscroll.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image\newclean -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\layout\newclean\NewCleanDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\layout\newclean\tipsWnd.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\layout\newclean -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\style\new_clean_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\NewClean -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\optimize_btn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\optimize_empty.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\optimize_restore_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_appsvc_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_arrow_down_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_arrow_up_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_boottime_nodata_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_combo.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_combo_bk_bottom.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_combo_bk_top.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_combo_dropdown_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_menu_item_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_startup_app_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_sysmenu_def_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_syssvc_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_taskschedule_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_type_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\opt_vert_line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\pop_OptDlg_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\st_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\st_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\st_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default\syssvc_ico.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\layout\default\OptimizeView.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\layout\default\optimize_popdlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\optimize2 -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default\plugin_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default\plug_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default\plug_norm.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default\plug_sec_level.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default\plug_should_del.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default\plug_should_dis.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\layout\default\PluginView.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\style\plugin_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\plugin -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\bing_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\blank_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\bo.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\bp.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\bw.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\cdbh.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\cdsh.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\chph.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\chrome_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\cseh.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\dp.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\edit_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\edit_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\edit_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\empty.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\exam_dlg_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\exam_radio_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\exam_radio_unchecked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\firefix_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\fr.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\google_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\google_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\ie_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\iph.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\lastsession_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\locked_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\lock_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\oh.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\opera_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\opt.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\opt_vert_line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\popup_menu_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\popup_menu_itemskin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\pop_OptDlg_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\pop_toggle_btn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\pwb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\query_btn_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\SafeProtect_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\savebtn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\syssvc_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\to.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\tp.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\tw.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\unlocked_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\yac_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\yahoo_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default\yahoo_small.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout\default\examdlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout\default\SafeProtectView.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout\default\SafeProtect_popdlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\style\SafeProtect_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\SafeProtect -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_check_arrow_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_close_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_collapse_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_expand_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_folder_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_opt_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_progbar_anim_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_progbar_indicator.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_progbar_indicator_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_search_box_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_search_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_software_def_ico_48.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_step_found.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_step_nofound.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_uninst_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_warning_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm2_whirling_pic.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_common_btn_bk1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_common_btn_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_menu_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_menu_item_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_remain_ctrl_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_software_def_ico_20.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\sm_warning_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default\softmgr_res.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default\SoftMgrView.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default\SoftMgrView2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default\softmgr_guide.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default\softmgr_guide2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default\softmgr_result.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\style\softmgr_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\softmgr -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\btn_bg_1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\btn_bg_2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\smell_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\sorry_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\taskhlp_ac_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\taskhlp_ac_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\wait.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res\wait_ico.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\res -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default\resource.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\layout\default\autoclean_guide.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\layout\default\softuninstallwnd.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\TaskHelper -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image\default\Resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image\default\tb_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image\default\tb_default.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image\default\tb_download.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image\default\tb_new.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\layout\default\ToolBoxView.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\style\Style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\ToolBox -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\if_block.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\if_prompt.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\if_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\notify_bk_dang.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\notify_bk_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\notify_bk_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\pop_sys_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\query_bk_dang.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\query_bk_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\query_bk_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\query_btn_dang.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\query_btn_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\query_btn_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\traymenu_dlg_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image\vscroll.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\layout\pop\tippop.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\layout\pop -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\layout\traydlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\tray2 -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Appstore -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\adblock_guide_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\ad_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\pic_ad_off1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\pic_ad_off2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\pic_ad_on1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\pic_ad_on2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\rubbish.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image\traymenu_iconlist.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\layout\adblockguide.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\layout\cleartrash.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\layout\strongUnist.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\layout\traydlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Feedback -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\arrowdown_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\arrowup_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\clean_junk_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\default_program_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\download.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\download_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\trayF_float_tips_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\trayF_float_tips_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_acc_circle_list_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_acc_circle_list_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_acc_circle_list_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_dec_circle_list_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_dec_circle_list_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_dec_circle_list_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_left_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_left_bk_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_left_bk_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_right_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_round_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_round_bk_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_round_bk_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_shadow_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_shadow_bk_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_shadow_bk_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_whirling_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_whirling_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_anim_whirling_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_btn_close_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_menu_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_net_down_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_net_flow_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_net_up_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_numer.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_percent_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_percent_bk_orange.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_percent_bk_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_shadow_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_shadow_sh_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_shadow_sv_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_speed_test_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_arrow_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_arrow_rb.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_arrow_rb_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_arrow_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_arrow_rt.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_arrow_rt_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_close_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_go_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_wnd_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_float_tip_wnd_bk_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_rope_btn_bk_gl.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_rope_btn_bk_roulette.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_swing_anim_bk_gl.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_swing_anim_bk_roulette.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_throw_anim_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float\tray_throw_anim_round_bk.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\float -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\floattray_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\flow_number.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\flow_unit.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\IPicon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\menu_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\menu_item_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\pop_memory_btn_green_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\pop_memory_btn_yellow_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\pop_network_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\speed_number.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\speed_unit.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\sys_imglist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\testspeed_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\testspeed_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\testspeed_light.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\testspeed_light1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\test_speed_download.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\test_speed_upload.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\trayfloatarrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\trayfloatnetbtnico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\traymenu_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\upload.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\upload_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\upload_gray_mark.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image\yaclogo.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\floatplugin.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\floattipwnd.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\floattipwnd_hide.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\swing_anim.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\throwdlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\traydlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\trayfloaty2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\trayfloatypop2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\trayfloatypop2_bottom.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\trayTaskbar.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout\trayTaskbar_wifi.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Floaty -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\foldericon\app.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\foldericon\file.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\foldericon\folder.ico -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\foldericon\picture.ico -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\foldericon -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\app.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\btn_cancel.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\btn_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\btn_green_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\file.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\folder.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\logo_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\main_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\picture.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop\yac_logo.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\arrangedesktop -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\idesk_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image\traymenu_iconlist.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\layout\arrange_desktop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\layout\traydlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\iDesk -> Removed at reboot [5]
     
  17. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\layout\default\MsgCenterDlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce\default\close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce\default\logo.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce\default\Msg_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce\default\Resource.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\resouce -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\style\Style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\MsgCenter -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\pop_startup_slow_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\pop_startup_warning_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\traymenu_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\traymenu_pop_cancel_btn2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\traymenu_pop_ico_query.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\tray_radio_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image\tray_radio_unchecked.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\layout\traydlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\layout\traymenupop.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Nodisturb -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\bing_16_16.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\chrome_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\combo_browser2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\combo_browser_dropdown_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\combo_pop_modify.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\combo_pop_modify2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\combo_pop_modify_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\combo_skin4.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\firefix_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\google_16_16.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\ie_16_16.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\ie_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\isafe_16.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\pop_startup_slow_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\pop_startup_warning_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\traymenu_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\traymenu_pop_cancel_btn2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\traymenu_pop_ico_query.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\tray_radio_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\tray_radio_unchecked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image\yahoo_16_16.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\accesslink.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\blockblacklist.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\lock_guide.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\querymodify.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\querymodify2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\traydlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout\traymenupop.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Protect -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\Location_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\new_left.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\new_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_assistant_blue_number.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_assistant_yellow_number.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_startupass_comb_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_startupass_vscoll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_startup_fast_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_startup_nomall_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_startup_slow_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_startup_warning_button.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_sys_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_sys_Setting.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\pop_sys_star.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_anim_expand_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_anim_expand_bk_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_char_m.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_char_percent.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_char_s.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_close_btn_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_close_btn_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_combo_drop_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_combo_drop_bk_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_combo_skin_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_combo_skin_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_itemhover_bk_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_itemhover_bk_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_location_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_location_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_news_line_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_news_line_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_number.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_number_fuzzy.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_optimize_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_redpoint_large.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_redpoint_middle.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_redpoint_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_late_night_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_late_night_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_morning_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_morning_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_nightfall_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_nightfall_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_noon_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_time_noon_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_vscoll_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_vscoll_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_cloudy_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_cloudy_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_icon_large.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_icon_small.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_line_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_line_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_rain_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_rain_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_snow_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_snow_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_thunder_blue.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_weather_thunder_yellow.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\sa_yac_logo.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\weather_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image\yellow.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\layout\daily_news.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\layout\startup_assist.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\layout\startup_assist_2.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\layout\startup_assist_3.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\layout\startup_assist_weather.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\StartupAssist -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\Anti_Malware.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\dtk_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\dtk_dlg_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\green1_bk_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\green_bk_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\point.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_safe_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_safe_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_scan.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unknow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unkown_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unkown_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe_clear_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe_clear_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe_clear_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\pop_dp_unsafe_ico.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\vip_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image\vip_dlg_bk.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\detectbrowserriskpop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\detectriskpop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\downloadprotect.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\outdatepop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\premiumuserpop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\PrivilegeTerminateDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\updatevirussuccesspop.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout\virusdboutofdatepop.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin\Virus -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\trayplugin -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\av_authority_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\combo_list.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\custom_check.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\custom_uncheck.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\dl_inst_antymal_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\dl_inst_clean_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\dl_inst_optimize_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\dl_inst_protect_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\exam_tip_wnd_arrow_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\exam_tip_wnd_bk2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\ico_app.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\ico_face.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\ico_upgrade.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\install_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\install_combo_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\install_logo.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\install_prog_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\install_prog_meter.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\inst_cover_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\open_dir.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\popup_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\resource.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\soft_cof_button_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\soft_remove_button_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_3.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_4.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_5.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_6.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninstall_pic_7.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_acc.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_btn_bg1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_btn_bg2.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_clean.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_complete.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_cry.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_func1.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_func3.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_func_intr.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_func_up.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_input.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_progress.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_prog_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_protect.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\uninst_spliter.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\upgrade_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\upgrade_prog_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\upgrade_prog_meter.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\vscroll.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image\yac_side_ico.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\layout\cover.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\layout\install.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\layout\uninstallpro.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\layout\uninstall_logo_fade.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\layout\upgrade.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\style\style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\uninstall -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\avangate.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\avangateflag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\button_blue.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\button_buy.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\button_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\button_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\buy_flag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\centili.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\chooseoption_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\chooseoption_close.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\close_message_box_warning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\cseh.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\edit_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\free_flag_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\general_buy_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\green1_bk_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\green_bk_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\guarantee.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\icoBW.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\icoBW_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\icoDP.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\icoDP_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\icoRS.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\icoRS_gray.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\main_item_status.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\mobileflag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\paypal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\paypaldetail.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\paypalflag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\pay_cancel.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\point.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\premium_button_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\premium_flag_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\radio_checked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\radio_unchecked.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\red_bk_new.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\result_danger.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\result_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\risk_item_see_about_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\skrill.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\skrillflag.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\trail_flag_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virusopt_btn_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virusopt_but_bg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_Btn_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_Loading.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_OptDlg_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_res.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_SetDlg_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_SetDlg_Cancel_BTN_BG.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_SetDlg_EditSkin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\VirusScan_Tab_Vert_Line.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_certification_list_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_common_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_custom_scan.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_custom_scan_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_custom_scan_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_delete_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_expdlg_collapse_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_expdlg_expand_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\Virus_feature.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\Virus_feature_right.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hover_btn_iconlist.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hover_tip_arrow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hover_tip_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hover_tip_iconlist.jpg -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hyper_scan.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hyper_scan_d.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hyper_scan_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_hyper_scan_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_menu_bkg.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_menu_item_over.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_normal.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_quick_scan.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_quick_scan_green.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_quick_scan_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_red.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_restore_btn.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_scan_safe.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_scan_scaning.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_scan_virus.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_setting_icon.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_task_item_combo_skin.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_task_item_edit_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_task_item_save_btn_bk.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_update_db.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_update_db_out.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\virus_yellow.png -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\wait.gif -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default\yellow_bk_new.png -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\image -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\ChooseOptionMessageBox.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\CloseMessageBox.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\explorer_folder_dlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\FinishScanFirstMessageBox.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\InputEmailDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\TrialFeatureDlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\virushovertip.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\VirusScanFeatureView.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\VirusScanView.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\virusscan_popdlg.xml -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default\virusscan_settingdlg.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout\default -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\layout -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\style\VirusScan_style.xml -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan\style -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2\VirusScan -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\skin2 -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\sqlite3.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\sqlite3x64.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\ssleay32.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\antirk.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\common.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\ctools.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\decexp.dll -> Removed at reboot [5]
     
  18. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\base0000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\base0001.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\catalog.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0001.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0002.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0003.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0004.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0005.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0006.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0007.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0008.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0009.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0010.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0011.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0012.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0013.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0014.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0015.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0016.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0017.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0018.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0019.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0020.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0021.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0022.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0023.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0024.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0025.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0026.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0027.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0028.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0029.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0030.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0031.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0032.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0033.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0034.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0035.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0036.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0037.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0038.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0039.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0040.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0041.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0042.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0043.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0044.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0045.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0046.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0047.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0048.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0049.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0050.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0051.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0052.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0053.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0054.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0055.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0056.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0057.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0058.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0059.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0060.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0061.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0062.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0063.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0064.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0065.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0066.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0067.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0068.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0069.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0070.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0071.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0072.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0073.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0074.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0075.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0076.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0077.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0078.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0079.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0080.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0081.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0082.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0083.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0084.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0085.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0086.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0087.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0088.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0089.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0090.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0091.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0092.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0093.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0094.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0095.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0096.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0097.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0098.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0099.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0100.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0101.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0102.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0103.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0104.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0105.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0106.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0107.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0108.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0109.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0110.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0111.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0112.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0113.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0114.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0115.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0116.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0117.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0118.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0119.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0120.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0121.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0122.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0123.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0124.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0125.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0126.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0127.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0128.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0129.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0130.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0131.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0132.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0133.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0134.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0135.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0136.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0137.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0138.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0139.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0140.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0141.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0142.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0143.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0144.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0145.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0146.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0147.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0148.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0149.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0150.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0151.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0152.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0153.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0154.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0155.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0156.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0157.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0158.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0159.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0160.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0161.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0162.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0163.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0164.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0165.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0166.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0167.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0168.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0169.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0170.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0171.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0172.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0173.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0174.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0175.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0176.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0177.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0178.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0179.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0180.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0181.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0182.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0183.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0184.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0185.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0186.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0187.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0188.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0189.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0190.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0191.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0192.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0193.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0194.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0195.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0196.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0197.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0198.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0199.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0200.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0201.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0202.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0203.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0204.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0205.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0206.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0207.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0208.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0209.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0210.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0211.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0212.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0213.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0214.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0215.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0216.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0217.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0218.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0219.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0220.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0221.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0222.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0223.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0224.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0225.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0226.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0227.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0228.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0229.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0230.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0231.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0232.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0233.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0234.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0235.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0236.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0237.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0238.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0239.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0240.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0241.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0242.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0243.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0244.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0245.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0246.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0247.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0248.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0249.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0250.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0251.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0252.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0253.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0254.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0255.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0256.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0257.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0258.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0259.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0260.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0261.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0262.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0263.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0264.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0265.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0266.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0267.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0268.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0269.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0270.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0271.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0272.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0273.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0274.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0275.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0276.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0277.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0278.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0279.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0280.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0281.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0282.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0283.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0284.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0285.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0286.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0287.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0288.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0289.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0290.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0291.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0292.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0293.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0294.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0295.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0296.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0297.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0298.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0299.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0300.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0301.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0302.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0303.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0304.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0305.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0306.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0307.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0308.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0309.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0310.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0311.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0312.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0313.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0314.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0315.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0316.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0317.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0318.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0319.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0320.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0321.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0322.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0323.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0324.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0325.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0326.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0327.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0328.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0329.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0330.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0331.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0332.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0333.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0334.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0335.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\defs\gen0336.dat -> Removed at reboot [5]
     
  19. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\defs -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\emlib.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\falgorit.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\fddsdb.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\fddslog.txt -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\fgui.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filau.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filcmn.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filcpt.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filppi.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filpps.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filup.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filup.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filuplog.txt -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filvss.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filvss.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\figs000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fils000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fols000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwgs000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls000.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls001.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls002.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls003.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls004.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls005.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls006.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls007.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls008.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls009.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls010.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls011.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls\fwls012.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\filwls -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\fsrexc.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\fupd.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\iSafeSvc2.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\leave.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\logs -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\lsf.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\mca.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\message.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\plugins\filavutd.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\plugins\virut.tpl -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\plugins -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\plugmgr.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\psmgr.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\quarantine\catalog.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\quarantine -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\quarantine.dll -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\task -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\temp -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\trace -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\tsc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\twsdk.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\twsupd.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\twsupd.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unacev2.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unchm.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unemb.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unmisc.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unrar.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unsevzip.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\unzip32.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\vfst.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\w32tools.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\x64\psmgr.dll -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws\x64 -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\zipexp.dll -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\tws\zlib1.dll -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\tws -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\uninstall.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\uninstall.inst -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\0 -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\1 -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\Engine -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\update\Engine0\upcfg.ini -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\Engine0 -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\update\Engine1\bs.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\update\Engine1\sr.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\update\Engine1\vn.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\update\Engine1\ws.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\Engine1 -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\Engine2 -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\update\temp\upcfg.ini -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update\temp -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\update -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\brset.ini -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\cbss.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\co.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\sie.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\softcache2.dat -> Removed at reboot [20]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\srd.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\svc2.dat -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\user\svc2_com.dat -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\Elex-tech\YAC\user -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\YACcleaner.exe -> Removed at reboot [5]
    [PUP][File] C:\Program Files (x86)\Elex-tech\YAC\zlib1.dll -> Removed at reboot [5]
    [PUP][Folder] C:\Program Files (x86)\qksee -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\curlpp.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\Delayinfo.edb -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\itools -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\lang\oiviewinstall_lang.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\lang\oiview_lang.xml -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\lang -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\libcurl.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\libeay32.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\log\qkseeSvc.log -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\log -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\main -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\msuser.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\msvcp110.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\msvcr110.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\myuser.exe -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\oi_uninstall.inst -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\qkdl.exe -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\qkdup.exe -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\qksee.exe -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\action_line.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\btn_back.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\btn_screen_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\button_l.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\button_r.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\delete_logo.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\fileinfo_bound.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\guide_arrow.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\guide_catalogue.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\guide_catalogue1.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\icon_arrow.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_auto.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_catalogue.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_enlarge.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_files.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_install_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_more.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_narrow.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_next.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_normal.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_prev.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_rotation_tl.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_rotation_tr.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_update.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_upward.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_view_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_view_max.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_view_min.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_view_res.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_warning.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\ico_zoom.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\input_catalogue.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\input_catalogue_single.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\install_button2.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\install_complete.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\invalid.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\logo_16x16.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\msg_bk.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\OIview_v1_33.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\OIview_v1_66.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\pic-error.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\picfolder_thum_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\pic_back.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\pic_folder.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\pic_thum_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\pic_thum_bg3.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\product\oivu_icon.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\product\thumbnail.ico -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\product\top_logo.png -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview\image\default\product -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\qMenu_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\qMenu_over_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\resource.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\screen_block.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\screen_thum.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\uninstall_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\view_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\vscroll.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\image\default\warning_bg.png -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview\image\default -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview\image -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\fullscreendlg.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\iviewmaindlg.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\messageboxdlg.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\movewnd.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\msgbox.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\my_pc_menu.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\layout\default\oiviewtoolsdlg.xml -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview\layout\default -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview\layout -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oiview\style\style.xml -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview\style -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oiview -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\bk_b.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\btn_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\btn_goon.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\button_delete.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\button_selected.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\checkbox_cancel.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\checkbox_default.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\cover_bk.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\delete_logo.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\edit_skin.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\header_bk.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\icon_edit_pg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_files.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_install_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_uninstall_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_update.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_view_close.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_view_max.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\ico_view_min.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\installbut.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_button2.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_button3.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_check_checked.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_check_intermediate.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_check_uncheck.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_complete.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_progress_bk.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_progress_indicator.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\install_resource.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\massagebox_bkg .png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\menuitem_selbk.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\menu_bkg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\menu_item_over.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\messagebox_btn.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\OIview_v1_66.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\open_dir0.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\pic-error(2).png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\pic-error.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\pic-info.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\pic-question.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\pic-warning.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\product\app_icon.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\product\logo_install.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\product\logo_uninstall.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\product\picexa.ico -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\product -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\progressbar_anim.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\progress_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\progress_install.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\progress_install_glow.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\progress_uninstall.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\progress_uninstall2.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\resource.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\search_button.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\uninstall_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\view_action_bg.png -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default\view_bg.png -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall\image\default -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall\image -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout\default\msgbox.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout\default\oiviewcoverdlg.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout\default\oiviewInstall.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout\default\oiviewunInstall.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout\default\oiviewupgrade.xml -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout\default -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall\layout -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\style\install_style.xml -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\skin\oi_uninstall\style\style.xml -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall\style -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin\oi_uninstall -> Deleted
    [PUP][Folder] C:\Program Files (x86)\qksee\skin -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\ssleay32.dll -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\uninstall.exe -> Deleted
    [PUP][File] C:\Program Files (x86)\qksee\zlib1.dll -> Deleted
    [PUP][Folder] C:\Program Files (x86)\WinZipper -> Deleted

    ¤¤¤ Hosts File : 0 ¤¤¤

    ¤¤¤ Antirootkit : 0 (Driver: Not loaded [0xc000036b]) ¤¤¤

    ¤¤¤ Web browsers : 1 ¤¤¤
    [PUP][CHROME:Addon] Default : MSN Homepage & Bing Search Engine [fcfenmboojpjinhpgggodefccipikbpd] -> Not selected

    ¤¤¤ MBR Check : ¤¤¤
    +++++ PhysicalDrive0: SAMSUNG MZMTE128HMGR-000MV +++++
    --- User ---
    [MBR] 2e9224864c196b4b4e9ed1b384d71bf5
    [BSP] 613dc550e64916c9cdd0f40488545c9e : Empty|VT.Unknown MBR Code
    Partition table:
    0 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 2048 | Size: 350 MB
    1 - [MAN-MOUNT] EFI system partition | Offset (sectors): 718848 | Size: 200 MB
    2 - [MAN-MOUNT] Microsoft reserved partition | Offset (sectors): 1128448 | Size: 128 MB
    3 - Basic data partition | Offset (sectors): 1390592 | Size: 115775 MB
    4 - [SYSTEM][MAN-MOUNT] | Offset (sectors): 238497792 | Size: 450 MB
    5 - [SYSTEM][MAN-MOUNT] Basic data partition | Offset (sectors): 239419392 | Size: 5200 MB
    User = LL1 ... OK
    User = LL2 ... OK
     
  20. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    Malwarebytes Anti-Malware
    www.malwarebytes.org

    Scan Date: 4/26/2016
    Scan Time: 8:58 AM
    Logfile: OTR.txt
    Administrator: Yes

    Version: 2.2.1.1043
    Malware Database: v2016.04.26.03
    Rootkit Database: v2016.04.17.01
    License: Trial
    Malware Protection: Enabled
    Malicious Website Protection: Enabled
    Self-protection: Disabled

    OS: Windows 10
    CPU: x64
    File System: NTFS
    User: gustavo

    Scan Type: Threat Scan
    Result: Completed
    Objects Scanned: 433553
    Time Elapsed: 11 min, 37 sec

    Memory: Enabled
    Startup: Enabled
    Filesystem: Enabled
    Archives: Enabled
    Rootkits: Disabled
    Heuristics: Enabled
    PUP: Enabled
    PUM: Enabled

    Processes: 0
    (No malicious items detected)

    Modules: 0
    (No malicious items detected)

    Registry Keys: 0
    (No malicious items detected)

    Registry Values: 0
    (No malicious items detected)

    Registry Data: 0
    (No malicious items detected)

    Folders: 0
    (No malicious items detected)

    Files: 0
    (No malicious items detected)

    Physical Sectors: 0
    (No malicious items detected)


    (end)
     
  21. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    # AdwCleaner v5.113 - Logfile created 26/04/2016 at 09:29:13
    # Updated 24/04/2016 by Xplode
    # Database : 2016-04-24.3 [Server]
    # Operating system : Windows 10 Pro (X64)
    # Username : gustavo - GUSTAVO
    # Running from : C:\Users\gustavo\Downloads\adwcleaner_5.113.exe
    # Option : Scan
    # Support : http://toolslib.net/forum

    ***** [ Services ] *****

    Service Found : iSafeKrnl
    Service Found : iSafeKrnlBoot
    Service Found : iSafeKrnlKit
    Service Found : iSafeKrnlMon
    Service Found : iSafeKrnlR3
    Service Found : iSafeNetFilter
    Service Found : iSafeService
    Service Found : WtuSystemSupport
    Service Found : vToolbarUpdater40.2.9

    ***** [ Folders ] *****

    Folder Found : C:\ProgramData\apn
    Folder Found : C:\ProgramData\AVG Secure Search
    Folder Found : C:\ProgramData\avg web tuneup
    Folder Found : C:\ProgramData\Avg_Update_0116av
    Folder Found : C:\ProgramData\Avg_Update_0316av
    Folder Found : C:\ProgramData\Avg_Update_0415avt
    Folder Found : C:\ProgramData\Avg_Update_0615avt
    Folder Found : C:\ProgramData\Avg_Update_0715av
    Folder Found : C:\ProgramData\Avg_Update_0914av
    Folder Found : C:\ProgramData\Avg_Update_0915av
    Folder Found : C:\ProgramData\Avg_Update_1015av
    Folder Found : C:\ProgramData\Avg_Update_1114av
    Folder Found : C:\ProgramData\Avg_Update_1214av
    Folder Found : C:\ProgramData\Avg_Update_1215av
    Folder Found : C:\ProgramData\lwinpl
    Folder Found : C:\ProgramData\Application Data\apn
    Folder Found : C:\ProgramData\Application Data\AVG Secure Search
    Folder Found : C:\ProgramData\Application Data\avg web tuneup
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0116av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0316av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0415avt
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0615avt
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0715av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0914av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_0915av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_1015av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_1114av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_1214av
    Folder Found : C:\ProgramData\Application Data\Avg_Update_1215av
    Folder Found : C:\ProgramData\Application Data\lwinpl
    Folder Found : C:\ProgramData\Microsoft\Windows\Start Menu\SrpnFiles
    Folder Found : C:\Program Files (x86)\Elex-tech
    Folder Found : C:\Program Files (x86)\myfree codec
    Folder Found : C:\Program Files (x86)\avg web tuneup
    Folder Found : C:\Program Files (x86)\SrpnFiles
    Folder Found : C:\Program Files (x86)\QQBrowser
    Folder Found : C:\Program Files (x86)\Common Files\AVG Secure Search
    Folder Found : C:\Users\gustavo\AppData\Local\Temp\VideoConverter
    Folder Found : C:\Users\gustavo\AppData\Local\PackageAware
    Folder Found : C:\Users\gustavo\AppData\Local\torch
    Folder Found : C:\Users\gustavo\AppData\Local\avg web tuneup
    Folder Found : C:\Users\gustavo\AppData\Roaming\eCyber
    Folder Found : C:\Users\gustavo\AppData\Roaming\Elex-tech
    Folder Found : C:\Users\gustavo\AppData\Roaming\WinZiper
    Folder Found : C:\Program Files\avg web tuneup
    Folder Found : C:\Program Files\Common Files\AVG Secure Search

    ***** [ Files ] *****

    File Found : C:\WINDOWS\SysNative\log\iSafeKrnlCall.log
    File Found : C:\WINDOWS\SysNative\drivers\iSafeNetFilter.sys

    ***** [ DLL ] *****


    ***** [ Shortcuts ] *****


    ***** [ Scheduled tasks ] *****

    Task Found : RunAsStdUser Task
    Task Found : Browser Updater Task(Core)
    Task Found : Sosition Reports

    ***** [ Registry ] *****

    Key Found : HKLM\SOFTWARE\Google\Chrome\NativeMessagingHosts\avgsh
    Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin
    Key Found : HKLM\SOFTWARE\Classes\s
    Key Found : HKCU\Software\Google\Chrome\Extensions\chfdnecihphmhljaaejmgoiahnihplgn
    Key Found : HKCU\Software\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.bmp
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.gif
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.ico
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.jpeg
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.jpg
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.png
    Key Found : HKLM\SOFTWARE\Classes\qkseeViewer.tif
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.NativeApi.1
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi
    Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1
    Key Found : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj
    Key Found : HKLM\SOFTWARE\Classes\WtuServer.WtuServerObj.1
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{933B95E2-E7B7-4AD9-B952-7AC336682AE3}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
    Key Found : HKLM\SOFTWARE\Classes\CLSID\{CA3A5461-96B5-46DD-9341-5350D3C94615}
    Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}
    Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4BC8AD89-AC5F-4DBD-A38F-C355C7DD33D7}
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B2BC04DF-EFBD-409A-95CA-36874E5AB92A}
    Value Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
    Key Found : HKCU\Software\Softonic
    Key Found : HKCU\Software\WEBAPP
    Key Found : HKCU\Software\SrpnFiles
    Key Found : HKLM\SOFTWARE\Elex-tech
    Key Found : HKLM\SOFTWARE\AVG Tuneup
    Key Found : HKLM\SOFTWARE\SrpnFiles
    Key Found : HKLM\SOFTWARE\qkseeSvc
    Key Found : HKLM\SOFTWARE\qksee
    Key Found : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}
    Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\SrpnFiles
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\iSafe
    Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\qksee
    Key Found : HKU\.DEFAULT\Software\Elex-tech
    Key Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Softonic
    Key Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\WEBAPP
    Key Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\SrpnFiles
    Key Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall\SrpnFiles
    Key Found : HKU\S-1-5-18\Software\Elex-tech
    Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL] - www.mystartsearch.com/?type=hp&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344
    Data Found : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page] - www.mystartsearch.com/?type=hp&ts=1412355660&from=tugs&uid=SAMSUNGXMZMTE128HMGR-000MV_S1F0NYAF682344
    Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{1BF35B9B-1F48-4791-96BA-766F499502A3}]
    Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{9CD99E58-D23B-48BF-B8FF-6004855BBDD0}]
    Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{C5B9999F-5F6A-4522-890C-C89B794485A0}]
    Value Found : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules [{7359BD18-2B8A-4875-9354-18A56101116E}]
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Data Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{A96109ED-273B-45EE-A102-176D00F02EDA}
    Key Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
    Data Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope] - {95B7759C-8C7F-4BF1-B163-73684A933233}
    Key Found : HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\SearchScopes\{A96109ED-273B-45EE-A102-176D00F02EDA}

    ***** [ Web browsers ] *****


    *************************

    C:\AdwCleaner\AdwCleaner[S1].txt - [8649 bytes] - [26/04/2016 09:29:13]

    ########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [8722 bytes] ##########
     
  22. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Junkware Removal Tool (JRT) by Malwarebytes
    Version: 8.0.5 (04.20.2016)
    Operating System: Windows 10 Pro x64
    Ran by gustavo (Administrator) on Tue 04/26/2016 at 11:29:48.12
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




    File System: 6

    Successfully deleted: C:\ProgramData\mntemp (File)
    Successfully deleted: C:\Users\gustavo\AppData\Local\crashrpt (Folder)
    Successfully deleted: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage-journal (File)
    Successfully deleted: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.metrolyrics.com_0.localstorage (File)
    Successfully deleted: C:\Users\gustavo\AppData\Roaming\software informer (Folder)
    Successfully deleted: C:\Program Files\software informer (Folder)



    Registry: 2

    Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_451E20CFC91B8D8BB22B70BB388D8326 (Registry Value)
    Successfully deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Software Informer (Registry Value)




    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Scan was completed on Tue 04/26/2016 at 11:31:30.46
    End of JRT log
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
     
  23. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    I still have problems while browsing. Some pages appear from nowhere when I'm in a webpage
     
  24. Broni

    Broni Malware Annihilator Posts: 52,895   +344

    Which browser is affected?

    Re-run Farbar Recovery Scan Tool (FRST/FRST64) you ran at the very beginning of this topic.

    • Double click to run it.
    • Make sure you checkmark Addition.txt box.
    • Press Scan button.
    • Scan will create two logs, FRST.txt and Addition.txt in the same directory the tool is run. Please copy and paste them to your reply.
     
  25. gavq89

    gavq89 TS Rookie Topic Starter Posts: 28

    Chrome and Explorer.

    Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:18-04-2016
    Ran by gustavo (administrator) on GUSTAVO (27-04-2016 11:18:18)
    Running from C:\Users\gustavo\Downloads
    Loaded Profiles: gustavo (Available Profiles: gustavo)
    Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
    Internet Explorer Version 11 (Default browser: Edge)
    Boot Mode: Normal
    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Processes (Whitelisted) =================

    (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

    (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
    (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
    (Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
    (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
    (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
    (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
    () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRServer.exe
    (Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRFeature.exe
    (Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
    (Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
    (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
    (Microsoft Corporation) C:\Windows\System32\Speech_OneCore\Common\SpeechRuntime.exe
    (Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
    (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.19761.0_x64__8wekyb3d8bbwe\Video.UI.exe
    () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_16.325.12390.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
    (Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgwdsvca.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgnsa.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgemca.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgcsrva.exe
    (AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Av\avgrsa.exe
    (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
    (Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
    (Microsoft Corporation) C:\Windows\System32\sdiagnhost.exe
    (Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe


    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
    HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170256 2015-12-17] (Apple Inc.)
    HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated)
    HKLM-x32\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirnx.exe [186640 2016-04-14] (AVG Technologies CZ, s.r.o.)
    HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\Av\avgui.exe [4883216 2016-04-20] (AVG Technologies CZ, s.r.o.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [ares] => C:\Program Files (x86)\Ares\Ares.exe [935936 2013-07-19] (Seekar Ltd)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [60688 2015-11-30] (Apple Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [61200 2015-11-30] (Apple Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [103696 2015-11-30] (Apple Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [BingSvc] => C:\Users\gustavo\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [ReadCube] => C:\Users\gustavo\AppData\Local\com.readcube.Desktop\application\ReadCube.exe [150800 2013-11-17] ()
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Remote Mouse] => C:\Program Files (x86)\Remote Mouse\RemoteMouse.exe [2050048 2015-03-09] (RemoteMouse.net)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [50670720 2016-03-01] (Skype Technologies S.A.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [uTorrent] => C:\Users\gustavo\AppData\Roaming\uTorrent\uTorrent.exe [1959424 2016-04-20] (BitTorrent Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [Lync] => C:\Program Files\Microsoft Office\Office15\lync.exe [27911888 2016-03-15] (Microsoft Corporation)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\Run: [GoogleChromeAutoLaunch_451E20CFC91B8D8BB22B70BB388D8326] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [881304 2016-04-13] (Google Inc.)
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\...\RunOnce: [Uninstall C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\gustavo\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
    ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
    ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
    ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
    ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
    GroupPolicy: Restriction - Chrome <======= ATTENTION
    CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

    ==================== Internet (Whitelisted) ====================

    (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

    Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
    Tcpip\..\Interfaces\{3fa7bde8-a018-4f26-bde5-4f81a0621b6a}: [DhcpNameServer] 192.168.0.1

    Internet Explorer:
    ==================
    HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
    HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
    HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SK2M_FRPage
    HKU\S-1-5-21-2067883112-1484101570-4244796366-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.msn.com/?pc=SK2G&ocid=SK2GDHP&osmkt=en-us
    BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
    BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
    BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-15] (Microsoft Corporation)
    BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2016-02-09] (Microsoft Corporation)
    BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
    BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2016-03-15] (Microsoft Corporation)
    Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
    Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2016-04-12] (Microsoft Corporation)
    Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
    Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

    FireFox:
    ========
    FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
    FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
    FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems)
    FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-10-14] ()
    FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-18] (Microsoft Corporation)
    FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
    FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
    FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
    FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
    FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems)
    FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-11-18] (Microsoft Corporation)

    Chrome:
    =======
    CHR HomePage: Profile 2 -> msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us
    CHR StartupUrls: Profile 2 -> "hxxps://www.google.co.ve/"
    CHR DefaultSearchURL: Profile 2 -> hxxp://www.google.com/search?hl=en&q={searchTerms}
    CHR DefaultSearchKeyword: Profile 2 -> google.com_
    CHR Profile: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default
    CHR Extension: (Google Drive) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
    CHR Extension: (Word Online) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fiombgjlkfpdpkbhfioofeeinbehmajg [2014-12-20]
    CHR Extension: (iCloud Bookmarks) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2015-07-30]
    CHR Extension: (Google Docs Offline) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-28]
    CHR Extension: (AdBlock) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-27]
    CHR Extension: (Bananatag Email Tracking) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpbnpbfpgjkblmejlgkfkekajajhjcid [2015-11-28]
    CHR Extension: (Little Alchemy) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2016-02-12]
    CHR Extension: (Skype) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2016-02-12]
    CHR Extension: (Google Maps) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-09-17]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-27]
    CHR Extension: (Social Analytics) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgckigmaefoaemjpijdepakcghjkggmg [2016-02-13]
    CHR Profile: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1
    CHR Extension: (Google Slides) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-05]
    CHR Extension: (Google Docs) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-05]
    CHR Extension: (Google Drive) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-05]
    CHR Extension: (YouTube) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-05]
    CHR Extension: (Google Search) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
    CHR Extension: (MSN Homepage & Bing Search Engine) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fcfenmboojpjinhpgggodefccipikbpd [2015-11-05]
    CHR Extension: (Google Sheets) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-05]
    CHR Extension: (Google Docs Offline) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-06]
    CHR Extension: (Bandera de Venezuela) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kggfbkjocekemalkapifoekgkaikmpji [2015-11-05]
    CHR Extension: (Little Alchemy) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2016-02-13]
    CHR Extension: (Google Maps) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-11-05]
    CHR Extension: (Pocket) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mjcnijlhddpbdemagnpefmlkjdagkogk [2015-11-05]
    CHR Extension: (Save to Pocket) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\niloccemoadcdkdjlinkgdfekeahmflj [2016-04-06]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-06]
    CHR Extension: (Quick start) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2015-11-05]
    CHR Extension: (Gmail) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-05]
    CHR Profile: C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2
    CHR Extension: (Google Slides) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-11-05]
    CHR Extension: (Google Docs) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-05]
    CHR Extension: (Google Drive) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-05]
    CHR Extension: (Ancient Map) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bjcjaemihddenoopkkhaamlcoliiiain [2015-11-05]
    CHR Extension: (YouTube) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-05]
    CHR Extension: (Google Search) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-05]
    CHR Extension: (Google Sheets) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-05]
    CHR Extension: (Google Docs Offline) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
    CHR Extension: (Little Alchemy) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2016-02-13]
    CHR Extension: (Google Maps) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh [2015-11-05]
    CHR Extension: (Chrome Web Store Payments) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
    CHR Extension: (Gmail) - C:\Users\gustavo\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-05]
    CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77104 2015-10-07] (Apple Inc.)
    S3 AvgAMPS; C:\Program Files (x86)\AVG\Av\avgamps.exe [638968 2016-04-20] (AVG Technologies CZ, s.r.o.)
    S2 AVGIDSAgent; C:\Program Files (x86)\AVG\Av\avgidsagenta.exe [5155904 2016-04-20] (AVG Technologies CZ, s.r.o.)
    R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1074448 2016-04-14] (AVG Technologies CZ, s.r.o.)
    R2 avgwd; C:\Program Files (x86)\AVG\Av\avgwdsvca.exe [710232 2016-04-20] (AVG Technologies CZ, s.r.o.)
    R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
    R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
    R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [2838768 2016-04-03] (Microsoft Corporation)
    S2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [373152 2016-01-05] (Intel Corporation)
    R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
    R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
    S3 ose64; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [242720 2016-04-02] (Microsoft Corporation) [File not signed]
    S2 Service KMSELDI; C:\Program Files\KMSpico\Service_KMS.exe [1050904 2013-12-11] () [File not signed]
    S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
    S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S0 Avgboota; C:\Windows\System32\DRIVERS\avgboota.sys [21632 2016-01-07] (AVG Technologies CZ, s.r.o.)
    R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162592 2016-02-16] (AVG Technologies CZ, s.r.o.)
    R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [307456 2016-04-20] (AVG Technologies CZ, s.r.o.)
    R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [272304 2016-01-26] (AVG Technologies CZ, s.r.o.)
    R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [284080 2015-10-21] (AVG Technologies CZ, s.r.o.)
    R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360736 2016-02-16] (AVG Technologies CZ, s.r.o.)
    R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [248576 2016-03-29] (AVG Technologies CZ, s.r.o.)
    R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [51968 2016-04-14] (AVG Technologies CZ, s.r.o.)
    R0 Avguniva; C:\Windows\System32\DRIVERS\avguniva.sys [71936 2016-04-18] (AVG Technologies CZ, s.r.o.)
    R1 Avgwfpa; C:\Windows\system32\DRIVERS\avgwfpa.sys [315840 2015-12-16] (AVG Technologies CZ, s.r.o.)
    S3 iaLPSS_GPIO; C:\Windows\System32\drivers\iaLPSS_GPIO.sys [24568 2013-10-07] (Intel Corporation)
    S3 iaLPSS_I2C; C:\Windows\System32\drivers\iaLPSS_I2C.sys [99320 2013-10-07] (Intel Corporation)
    R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
    R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [192216 2016-04-27] (Malwarebytes)
    R3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [65408 2016-03-10] (Malwarebytes Corporation)
    R3 MEIx64; C:\Windows\System32\drivers\TeeDriverW8x64.sys [193336 2015-09-30] (Intel Corporation)
    R3 mrvlpcie8897; C:\Windows\System32\drivers\mrvlpcie8897.sys [1037824 2015-10-30] (Marvell Semiconductors Inc.)
    S3 ssudcdf; C:\Windows\System32\drivers\ssudcdf.sys [36608 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ssuddmgr; C:\Windows\System32\drivers\ssuddmgr.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ssudobex; C:\Windows\System32\drivers\ssudobex.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ssudrmnet; C:\Windows\System32\drivers\ssudrmnet.sys [70400 2014-01-22] (DEVGURU Co., LTD.)
    S3 ssudserd; C:\Windows\System32\drivers\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
    S3 ss_conn_usb_driver; C:\Windows\System32\Drivers\ss_conn_usb_driver.sys [26368 2014-01-22] (DEVGURU Co., LTD.)
    R3 SurfaceAccessoryDevice; C:\Windows\System32\drivers\SurfaceAccessoryDevice.sys [51856 2014-05-30] (Microsoft Corporation)
    R3 SurfaceCapacitiveHomeButton; C:\Windows\System32\drivers\SurfaceCapacitiveHomeButton.sys [44152 2014-11-27] (Microsoft Corporation)
    R3 SurfaceDisplayCalibration; C:\Windows\System32\drivers\SurfaceDisplayCalibration.sys [41616 2014-05-02] (Microsoft Corporation)
    R3 SurfaceIntegrationDriver; C:\Windows\System32\drivers\SurfaceIntegrationDriver.sys [63000 2015-09-30] (Microsoft Corporation)
    R0 SurfacePciController; C:\Windows\System32\drivers\SurfacePciController.sys [35440 2014-10-08] (Microsoft Corporation)
    R3 SurfacePenDriver; C:\Windows\System32\drivers\SurfacePenDriver.sys [102552 2016-01-26] (Microsoft Corporation)
    S3 SurfaceTypeCoverV3Integration; C:\Windows\System32\drivers\SurfaceTypeCoverV3Integration.sys [52760 2015-10-28] (Microsoft Corporation)
    R3 TrueColor; C:\Windows\system32\DRIVERS\TrueColor.sys [35952 2014-07-07] ()
    U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2016-04-26] ()
    S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [117768 2015-08-13] (Oracle Corporation)
    R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [146072 2015-08-13] (Oracle Corporation)
    S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
    S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
    S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
    R3 WinDivert1.1; C:\Program Files\KMSpico\WinDivert.sys [35376 2016-04-12] (Basil Projects)

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2016-04-26 12:12 - 2016-04-26 12:12 - 00000000 ____D C:\Users\gustavo\Desktop\New folder
    2016-04-26 12:11 - 2016-04-26 12:11 - 00031472 _____ C:\Users\gustavo\Downloads\produccionesalan.zip
    2016-04-26 11:31 - 2016-04-26 11:32 - 00001398 _____ C:\Users\gustavo\Desktop\JRT.txt
    2016-04-26 11:08 - 2016-04-26 11:08 - 00005624 _____ C:\Users\gustavo\Desktop\ULTIMATERK.txt
    2016-04-26 09:28 - 2016-04-26 11:19 - 00000000 ____D C:\AdwCleaner
    2016-04-26 09:27 - 2016-04-26 09:28 - 03580480 _____ C:\Users\gustavo\Downloads\adwcleaner_5.113.exe
    2016-04-26 09:27 - 2016-04-26 09:28 - 01610008 _____ (Malwarebytes) C:\Users\gustavo\Downloads\JRT.exe
    2016-04-26 09:24 - 2016-04-26 09:24 - 00001040 _____ C:\Users\gustavo\Desktop\OTR3.txt
    2016-04-26 09:15 - 2016-04-26 09:15 - 00001039 _____ C:\Users\gustavo\Desktop\OTR.txt
    2016-04-26 08:53 - 2016-04-27 11:12 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
    2016-04-26 08:52 - 2016-04-26 09:31 - 00001176 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
    2016-04-26 08:52 - 2016-04-26 08:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
    2016-04-26 08:52 - 2016-04-26 08:52 - 00000000 ____D C:\ProgramData\Malwarebytes
    2016-04-26 08:52 - 2016-04-26 08:52 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
    2016-04-26 08:52 - 2016-03-10 14:09 - 00065408 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
    2016-04-26 08:52 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
    2016-04-26 08:52 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
    2016-04-26 08:49 - 2016-04-26 08:51 - 22851472 _____ (Malwarebytes ) C:\Users\gustavo\Downloads\mbam-setup-2.2.1.1043.exe
    2016-04-26 08:49 - 2016-04-26 08:49 - 00449260 _____ C:\Users\gustavo\Desktop\REPORT2.txt
    2016-04-26 08:18 - 2016-04-26 11:27 - 00000000 ____D C:\Users\gustavo\AppData\LocalLow\uTorrent
    2016-04-26 08:11 - 2016-04-26 08:11 - 00484490 _____ C:\Users\gustavo\Desktop\REPORT.txt
    2016-04-25 21:37 - 2016-04-26 10:40 - 00024688 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
    2016-04-25 21:30 - 2016-04-25 21:36 - 00000000 ____D C:\ProgramData\RogueKiller
    2016-04-25 21:21 - 2016-04-25 21:25 - 19766856 _____ C:\Users\gustavo\Downloads\RogueKiller.exe
    2016-04-25 12:44 - 2016-04-25 12:45 - 00584590 _____ C:\Users\gustavo\Desktop\Resumé - Gustavo Visconti - Español pequeño.pdf
    2016-04-25 12:31 - 2016-04-25 14:58 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
    2016-04-25 09:57 - 2016-04-25 09:57 - 00254668 _____ C:\Users\gustavo\Desktop\Pasaporte.pdf
    2016-04-24 10:44 - 2016-04-24 10:46 - 00047418 _____ C:\Users\gustavo\Downloads\Addition.txt
    2016-04-24 10:43 - 2016-04-27 11:18 - 00027879 _____ C:\Users\gustavo\Downloads\FRST.txt
    2016-04-24 10:42 - 2016-04-27 11:18 - 00000000 ____D C:\FRST
    2016-04-24 10:40 - 2016-04-24 10:42 - 02375680 _____ (Farbar) C:\Users\gustavo\Downloads\FRST64.exe
    2016-04-23 16:30 - 2016-04-23 16:30 - 00055544 _____ C:\Users\gustavo\Downloads\Libro1.xlsx
    2016-04-23 16:20 - 2016-04-23 16:20 - 00054444 _____ C:\Users\gustavo\Downloads\inf_anual (2).xlsx
    2016-04-23 16:20 - 2016-04-23 16:20 - 00048640 _____ C:\Users\gustavo\Downloads\pib_1950_2013.xls
    2016-04-23 15:46 - 2016-04-23 15:47 - 00000000 ____D C:\Users\gustavo\Desktop\DATA TESIS
    2016-04-23 15:45 - 2016-04-23 15:46 - 00054444 _____ C:\Users\gustavo\Downloads\inf_anual (1).xlsx
    2016-04-23 01:53 - 2016-04-24 14:58 - 00005208 _____ C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for GUSTAVO-gustavo Gustavo
    2016-04-22 18:22 - 2016-04-22 18:22 - 00000000 ____D C:\Users\gustavo\AppData\Roaming\Prodiance
    2016-04-22 18:15 - 2016-04-26 07:32 - 00000000 ____D C:\Program Files (x86)\IHeeaWA
    2016-04-22 16:58 - 2016-04-22 16:58 - 00590406 _____ C:\Users\gustavo\Downloads\Resumé - Gustavo Visconti - Español.pdf
    2016-04-22 16:34 - 2016-04-22 16:35 - 00175142 _____ C:\Users\gustavo\Desktop\Carta de presentacion.pdf
    2016-04-22 10:39 - 2016-04-22 10:39 - 00000007 _____ C:\WINDOWS\SysWOW64\tem1D1.tmp
    2016-04-22 10:39 - 2016-04-22 10:39 - 00000000 ____D C:\Users\gustavo\AppData\Local\IHeeaWA
    2016-04-22 10:38 - 2016-04-26 09:32 - 00002168 _____ C:\Users\gustavo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...