Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 29-07-2020
Ejecutado por Admin (administrador) sobre FER-PC (MSI MS-7996) (07-08-2020 17:31:00)
Ejecutado desde C:\Users\Fer 2_2\Desktop
Perfiles cargados: Fer 2_2 & Admin
Platform: Windows 7 Home Premium Service Pack 1 (X64) Idioma: Español (España, internacional)
Internet Explorer Versión 11 (Navegador predeterminado: IE)
Modo de Inicio: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Procesos (Lista blanca) =================
(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Christiaan Ghijselinck -> Micro-Star Int'l Co., Ltd.) C:\Windows\SysWOW64\RAMDiskImage.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI RAMDisk\MSI_RAMDisk_Service.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
==================== Registro (Lista blanca) ===================
(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)
HKLM\...\Run: [Cmaudio8788] => C:\Windows\Syswow64\cmicnfgp.dll [12935168 2012-11-20] (C-Media Corporation) [Archivo no firmado]
HKLM\...\Run: [Cmaudio8788GX] => C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] () [Archivo no firmado]
HKLM\...\Run: [Cmaudio8788GX64] => C:\Windows\system\HsMgr64.exe [282112 2008-07-11] () [Archivo no firmado]
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [2109064 2020-04-27] (Logitech Inc -> Logitech, Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [296216 2015-06-15] (Intel Corporation - Software and Firmware Products -> Intel Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-12-19] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-570404620-873943029-220001324-1004\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [28990136 2020-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-570404620-873943029-220001324-1005\...\Run: [uTorrent] => C:\Users\Admin\AppData\Roaming\uTorrent\uTorrent.exe [1893104 2020-05-18] (BitTorrent Inc -> BitTorrent Inc.)
HKU\S-1-5-21-570404620-873943029-220001324-1005\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [28990136 2020-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-18\...\Run: [KSS] => "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" autorun
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2016-04-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C511 Status Monitor: C:\Windows\system32\hpinkstsC511LM.dll [333496 2013-01-25] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.105\Installer\chrmstp.exe [2020-07-28] (Google LLC -> Google LLC)
Startup: C:\Users\Fer 2\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Microsoft Security Essentials.lnk [2016-04-15]
ShortcutTarget: Microsoft Security Essentials.lnk -> C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation -> Microsoft Corporation)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
==================== Tareas programadas (Lista blanca) ============
(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)
Task: {03897561-BE10-41EE-96B8-0D20D7BABD46} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1331792 2020-05-07] (Adobe Inc. -> Adobe Inc.)
Task: {0EE54A22-B400-42C0-9043-A284411CD3DA} - System32\Tasks\{B266CC71-D486-41E6-BA29-F41AE2927BCE} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.17.0.106&LastError=404
Task: {2147C284-CB09-48A7-9A49-58B2765091A2} - System32\Tasks\{5F99CCBD-3403-4955-81D2-B9E02FA1538C} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.22.0.109/es/go/help.faq.installer?LastError=1603
Task: {2C57DBF0-78CA-495C-922B-2117B7B85AD1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [24584376 2020-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {3C4F244D-C159-49FC-AC1F-5A4C3424E6AB} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {3DC3B870-6D87-4AC6-8265-B0765918BBF6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_403_Plugin.exe [1475640 2020-07-15] (Adobe Inc. -> Adobe)
Task: {4C5CB531-41AB-4117-85DD-28999D6EACD2} - System32\Tasks\{1F15607F-8A16-4F3A-B374-E9A3654A55C8} => C:\Windows\system32\pcalua.exe -a E:\Descargas\Xbox360_64Esp.exe -d E:\Descargas
Task: {57674DF0-DAA4-4C50-8ABA-97B2E2468C34} - System32\Tasks\{222AFB30-5690-416A-84DD-CAF912E837A2} => C:\Users\Fer 2_2\Desktop\CCleaner.exe [25838336 2020-07-31] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {5BDF11ED-424F-45F9-814E-5D31D7A187D7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-15] (Adobe Inc. -> Adobe)
Task: {711A782B-61F5-46AE-B180-65D14AFA39A5} - System32\Tasks\{93BAEC50-88A8-4C49-AB88-61872235CCDF} => C:\Windows\system32\pcalua.exe -a "D:\OtherDriver\Intel SBA\IntelSba_4.0.40.exe" -d "D:\OtherDriver\Intel SBA" -c -silent
Task: {71813E16-99C2-47B7-BAC5-13BCDAF5E935} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-04-23] (Google Inc -> Google Inc.)
Task: {7BBC2B83-D340-4418-88DD-7C75F7AB721C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-06-17] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {8DB9422B-9DBD-4763-BD5F-9B3D1362CBEE} - System32\Tasks\AdwCleaner_onReboot => C:\Users\Fer 2_2\Desktop\adwcleaner_8.0.7.exe [8414384 2020-07-31] (Malwarebytes Inc -> Malwarebytes)
Task: {AFFE5551-6479-4263-87A7-7CFB4FF00FFB} - System32\Tasks\{F9D6761A-D299-4EA5-8275-CA6B26370472} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=7.17.0.106&LastError=404
Task: {B7D83565-A1D4-4E93-A23E-EF24F7E7FADC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-04-23] (Google Inc -> Google Inc.)
Task: {E0D78689-56A1-4403-B3DD-EF82AFDC0AF2} - System32\Tasks\{174BA62B-B699-4F39-98D9-F5FF62D51231} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.22.0.109/es/go/help.faq.installer?LastError=1603
Task: {FD753E27-41DC-42E9-AF14-0D80025C807B} - System32\Tasks\{6424C860-4833-4C3B-9266-86976B5533C9} => C:\Windows\system32\pcalua.exe -a C:\Users\Fer\Desktop\wlsetup-web.exe -d C:\Users\Fer\Desktop
(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)
==================== Internet (Lista blanca) ====================
(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)
Tcpip\..\Interfaces\{1940C649-A191-42BE-9668-E6F571B77886}: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{5E352B32-046B-48D7-9B8A-BFD41343A35C}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-570404620-873943029-220001324-1004\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-es/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_161\bin\ssv.dll [2018-02-26] (Oracle America, Inc. -> Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_161\bin\jp2ssv.dll [2018-02-26] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office16\URLREDIR.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office16\GROOVEEX.DLL [2018-07-22] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2019-03-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {3459B272-CC19-4448-86C9-DDC3B4B2FAD3} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2019-03-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\Office16\MSOSB.DLL [2019-03-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\Office16\MSOSB.DLL [2019-03-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~2\mcafee\SITEAD~1\mcieplg.dll Ningún archivo
FireFox:
========
FF DefaultProfile: e3s140rg.default
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\e3s140rg.default [2019-12-22]
FF NewTab: Mozilla\Firefox\Profiles\e3s140rg.default -> hxxps://defaultsearch.co/homepage?hp=1&pId=BT171001&iDate=2019-12-22 07:44:14&bName=&bitmask=0300
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\cai9e4w4.default-release [2020-07-31]
FF Homepage: Mozilla\Firefox\Profiles\cai9e4w4.default-release -> hxxps://www.google.com/
FF NewTab: Mozilla\Firefox\Profiles\cai9e4w4.default-release -> hxxps://defaultsearch.co/homepage?hp=1&pId=BT171001&iDate=2019-12-22 07:44:14&bName=&bitmask=0300
FF HKU\S-1-5-21-570404620-873943029-220001324-1004\...\Firefox\Extensions: [[email protected]] - C:\Users\Fer 2_2\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => no encontrado
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_403.dll [2020-07-15] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\dtplugin\npDeployJava1.dll [2018-02-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.161.2 -> C:\Program Files\Java\jre1.8.0_161\bin\plugin2\npjp2.dll [2018-02-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [Ningún archivo]
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_403.dll [2020-07-15] (Adobe Inc. -> )
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Ningún archivo]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-570404620-873943029-220001324-1004: @acestream.net/acestreamplugin,version=3.1.16.1 -> C:\Users\Fer 2_2\AppData\Roaming\ACEStream\player\npace_plugin.dll [Ningún archivo]
Chrome:
=======
CHR Profile: C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default [2020-07-31]
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/search?fr=mcafee&type=E210ES91082G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR DefaultSuggestURL: Default -> hxxps://es.search.yahoo.com/sugg/gossip/gossip-es-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
CHR Extension: (Presentaciones) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-06-27]
CHR Extension: (Documentos) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-06-27]
CHR Extension: (Google Drive) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-06-27]
CHR Extension: (YouTube) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-06-27]
CHR Extension: (Adobe Acrobat) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-03-08]
CHR Extension: (Hojas de cálculo) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-06-27]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-16]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-08]
CHR Extension: (Gmail) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-27]
CHR Extension: (Chrome Media Router) - C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-07-31]
CHR HKU\S-1-5-21-570404620-873943029-220001324-1004\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKU\S-1-5-21-570404620-873943029-220001324-1004\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Servicios (Lista blanca) ===================
(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-07-15] (Adobe Inc. -> Adobe)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8348064 2019-01-14] (BattlEye Innovations e.K. -> )
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1443520 2016-04-04] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2020-02-28] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [350312 2015-09-04] (Intel Corporation - pGFX -> Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [202872 2018-03-19] (Logitech Inc -> Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6970968 2020-07-27] (Malwarebytes Inc -> Malwarebytes)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [105296 2015-06-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_RAMDisk_Service; C:\Program Files (x86)\MSI\MSI RAMDisk\MSI_RAMDisk_Service.exe [70480 2015-09-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2510136 2020-07-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3462464 2020-07-30] (Electronic Arts, Inc. -> Electronic Arts)
R2 RAMDrivService; C:\Windows\SysWOW64\RAMDiskImage.exe [343032 2012-12-28] (Christiaan Ghijselinck -> Micro-Star Int'l Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-07-22] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S3 VBoxSDS; E:\VirtualBox\VBoxSDS.exe [692992 2019-04-16] (Oracle Corporation -> Oracle Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2016-03-25] (Microsoft Windows -> Microsoft Corporation)
S2 kss; "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan\kss.exe" -r [X]
S2 McAfee WebAdvisor; "C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe" [X]
===================== Controladores (Lista blanca) ===================
(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)
R3 cmudaxp; C:\Windows\System32\drivers\cmudaxp.sys [2734080 2013-04-11] (C-MEDIA ELECTRONICS INC. -> C-Media Inc)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2016-04-16] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2016-04-16] (Disc Soft Ltd -> Disc Soft Ltd)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
S3 LGJoyHidFilter; C:\Windows\System32\drivers\LGJoyHidFilter.sys [57368 2018-03-19] (Logitech Inc -> Logitech Inc.)
S3 LGJoyHidLo; C:\Windows\System32\drivers\LGJoyHidLo.sys [47256 2018-03-19] (Logitech Inc -> Logitech Inc.)
R3 LGJoyXlCore; C:\Windows\System32\drivers\LGJoyXlCore.sys [67736 2018-03-19] (Logitech Inc -> Logitech Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [216056 2020-07-27] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248968 2020-07-27] (Malwarebytes Inc -> Malwarebytes)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
S3 Netaapl; C:\Windows\System32\DRIVERS\netaapl64.sys [23040 2015-11-05] (Apple Inc.) [Archivo no firmado]
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 RAMDriv; C:\Windows\System32\DRIVERS\ramdriv.sys [81912 2012-12-27] (Christiaan Ghijselinck -> Micro-Star Int'l Co., Ltd.)
R2 RAMDriv; C:\Windows\SysWOW64\DRIVERS\ramdriv.sys [81912 2012-12-27] (Christiaan Ghijselinck -> Micro-Star Int'l Co., Ltd.)
R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [164992 2016-07-22] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Apple, Inc.) [Archivo no firmado]
R3 VBoxNetAdp; C:\Windows\System32\DRIVERS\VBoxNetAdp6.sys [236560 2019-04-16] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\System32\DRIVERS\VBoxNetLwf.sys [247952 2019-04-16] (Oracle Corporation -> Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [467368 2017-05-13] (IDRIX -> IDRIX)
S3 BEDaisy; \??\C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
==================== NetSvcs (Lista blanca) ===================
(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)
==================== Tres meses (creado) ===================
(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)
2020-08-07 17:27 - 2020-08-07 17:31 - 000023473 _____ C:\Users\Fer 2_2\Desktop\FRST.txt
2020-08-07 17:27 - 2020-08-07 17:27 - 000044370 _____ C:\Users\Fer 2_2\Desktop\Addition.txt
2020-08-07 17:26 - 2020-08-07 17:31 - 000000000 ____D C:\FRST
2020-08-07 17:26 - 2020-08-07 17:30 - 000000554 _____ C:\Users\Admin\Desktop\JRT.txt
2020-08-07 17:23 - 2020-08-07 17:23 - 000003102 _____ C:\Windows\system32\Tasks\AdwCleaner_onReboot
2020-08-07 17:21 - 2020-08-07 17:23 - 000000000 ____D C:\AdwCleaner
2020-08-04 11:14 - 2020-08-04 11:14 - 008388672 _____ C:\Users\Fer 2_2\Downloads\Configurador_FNMT_RCM.exe
2020-07-31 17:11 - 2020-07-31 17:11 - 000029646 _____ C:\Users\Fer 2_2\Desktop\cc_20200731_171118.reg
2020-07-31 17:01 - 2020-07-31 17:01 - 000000000 ____D C:\Users\Admin\AppData\Local\CEF
2020-07-31 17:00 - 2020-08-07 17:26 - 000004128 _____ C:\Windows\system32\Tasks\CCleaner Update
2020-07-31 17:00 - 2020-07-31 17:00 - 000002804 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-07-31 17:00 - 2020-07-31 17:00 - 000000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-07-31 17:00 - 2020-07-31 17:00 - 000000822 _____ C:\ProgramData\Desktop\CCleaner.lnk
2020-07-31 17:00 - 2020-07-31 17:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-07-31 17:00 - 2020-07-31 17:00 - 000000000 ____D C:\Program Files\CCleaner
2020-07-31 16:59 - 2020-07-31 16:59 - 025838336 _____ (Piriform Software Ltd) C:\Users\Admin\Downloads\ccsetup568.exe
2020-07-31 14:39 - 2020-07-31 14:39 - 000002940 _____ C:\Windows\system32\Tasks\{222AFB30-5690-416A-84DD-CAF912E837A2}
2020-07-31 14:23 - 2020-07-31 14:23 - 000000000 ____D C:\Users\Admin\AppData\Roaming\Logishrd
2020-07-31 14:08 - 2020-07-31 14:08 - 002296832 _____ (Farbar) C:\Users\Fer 2_2\Desktop\FRST64.exe
2020-07-31 14:07 - 2020-07-31 14:07 - 008414384 _____ (Malwarebytes) C:\Users\Fer 2_2\Desktop\adwcleaner_8.0.7.exe
2020-07-31 14:07 - 2020-07-31 14:07 - 001790024 _____ (Malwarebytes) C:\Users\Fer 2_2\Desktop\JRT.exe
2020-07-31 14:05 - 2020-07-31 14:05 - 025838336 _____ (Piriform Software Ltd) C:\Users\Fer 2_2\Desktop\CCleaner.exe
2020-07-28 12:07 - 2020-07-28 12:07 - 000000000 _____ C:\Users\Fer 2_2\Desktop\Mirar forospyware.txt
2020-07-27 13:05 - 2020-07-27 13:05 - 000000000 ____D C:\Users\Fer 2_2\AppData\Roaming\Opera Software
2020-07-27 13:05 - 2020-07-27 13:05 - 000000000 ____D C:\Users\Fer 2_2\AppData\Local\Opera Software
2020-07-27 13:02 - 2020-07-27 13:02 - 000248968 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2020-07-27 13:02 - 2020-07-27 13:02 - 000216056 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2020-07-27 13:02 - 2020-07-27 13:02 - 000001960 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-07-26 20:33 - 2020-07-26 20:33 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_netaapl64_01009.Wdf
2020-07-16 11:16 - 2020-08-07 17:20 - 000000750 _____ C:\Users\Fer 2_2\Desktop\lista empresas.txt
2020-07-15 17:18 - 2020-07-15 17:18 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\Oracle
2020-07-15 11:38 - 2020-07-15 11:38 - 009585208 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2020-07-13 11:33 - 2020-07-13 11:33 - 000000000 ____D C:\Program Files\Logitech
2020-07-13 10:11 - 2020-07-13 10:11 - 000000000 ____D C:\Users\Fer 2_2\AppData\LocalLow\Temp
2020-07-08 17:08 - 2020-07-08 17:08 - 000000000 _____ C:\Users\Fer 2_2\Desktop\CIDEAD.txt
2020-06-18 18:15 - 2020-06-18 18:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2020-06-18 18:15 - 2020-06-18 18:15 - 000000000 ____D C:\Program Files\VideoLAN
2020-05-27 17:46 - 2013-04-11 19:21 - 002734080 _____ (C-Media Inc) C:\Windows\system32\Drivers\cmudaxp.sys
2020-05-18 09:16 - 2020-05-22 09:25 - 000000000 ____D C:\Users\Admin\Downloads\opera autoupdate
==================== Tres meses (modificado) ==================
(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)
2020-08-07 17:28 - 2009-07-14 11:31 - 000747396 _____ C:\Windows\system32\perfh00A.dat
2020-08-07 17:28 - 2009-07-14 11:31 - 000158868 _____ C:\Windows\system32\perfc00A.dat
2020-08-07 17:28 - 2009-07-14 07:13 - 001676890 _____ C:\Windows\system32\PerfStringBackup.INI
2020-08-07 17:28 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2020-08-07 17:24 - 2016-04-15 17:43 - 000000180 _____ C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-08-07 17:23 - 2016-04-17 09:34 - 033555456 _____ C:\Windows\SysWOW64\RAMDiskImage.data
2020-08-07 17:23 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-08-07 13:51 - 2017-04-17 21:37 - 000000000 ___RD C:\Users\Fer 2_2\Google Drive
2020-08-07 11:48 - 2009-07-14 06:45 - 000023376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-08-07 11:48 - 2009-07-14 06:45 - 000023376 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-08-06 21:08 - 2019-02-07 02:57 - 000000000 ____D C:\Program Files (x86)\Origin
2020-08-06 16:39 - 2019-08-05 17:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-08-06 12:33 - 2017-04-17 21:17 - 000000000 ____D C:\Users\Fer 2_2
2020-08-06 09:39 - 2017-12-02 14:22 - 000000000 ____D C:\Users\Fer 2_2\AppData\LocalLow\Mozilla
2020-07-31 17:09 - 2017-11-05 18:18 - 000000000 ____D C:\Users\Fer 2_2\AppData\Roaming\DAEMON Tools Lite
2020-07-31 17:09 - 2016-04-16 04:56 - 000000000 ____D C:\Program Files (x86)\Steam
2020-07-31 17:00 - 2016-04-24 16:55 - 000000000 ____D C:\ProgramData\AVG
2020-07-31 16:59 - 2019-12-22 21:43 - 000000000 ____D C:\Users\Admin\AppData\Roaming\uTorrent
2020-07-31 16:58 - 2019-12-22 21:44 - 000000000 ____D C:\Users\Admin\AppData\Local\BitTorrentHelper
2020-07-28 11:17 - 2017-04-17 21:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2020-07-27 21:05 - 2017-04-17 22:08 - 000000000 ____D C:\Users\Fer 2_2\AppData\Roaming\uTorrent
2020-07-27 20:45 - 2019-03-30 04:06 - 000000000 ____D C:\Users\Fer 2_2\AppData\Local\BitTorrentHelper
2020-07-27 18:49 - 2017-04-17 21:56 - 000000000 ____D C:\Users\Fer 2_2\AppData\Local\Spotify
2020-07-27 18:43 - 2017-04-17 21:55 - 000000000 ____D C:\Users\Fer 2_2\AppData\Roaming\Spotify
2020-07-27 13:15 - 2016-05-02 22:51 - 000000000 ____D C:\Users\Fer 2
2020-07-27 13:08 - 2017-04-17 22:21 - 000000000 ____D C:\Users\Fer 2_2\AppData\Roaming\vlc
2020-07-27 13:04 - 2016-07-24 17:13 - 000000000 ____D C:\ProgramData\Apple
2020-07-27 13:01 - 2019-05-11 18:32 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-07-15 11:39 - 2018-03-14 01:39 - 000004492 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-07-15 11:39 - 2018-01-21 18:57 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-07-15 11:39 - 2018-01-21 18:57 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-07-15 11:39 - 2018-01-21 18:57 - 000004332 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-07-15 11:38 - 2018-01-21 18:57 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-07-15 11:38 - 2018-01-21 18:57 - 000000000 ____D C:\Windows\system32\Macromed
2020-07-13 15:29 - 2018-04-05 03:11 - 000000000 ____D C:\Users\Fer 2_2\AppData\Local\Logitech
2020-07-13 15:29 - 2018-04-05 03:11 - 000000000 ____D C:\ProgramData\LogiShrd
2020-07-13 11:34 - 2018-04-05 03:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-07-13 11:34 - 2018-04-05 03:09 - 000000000 ____D C:\Users\Fer 2_2\AppData\Roaming\Logishrd
2020-07-13 10:19 - 2020-04-13 18:06 - 000000114 _____ C:\Users\Fer 2_2\Desktop\Lista compra.txt
2020-07-08 12:18 - 2016-04-17 06:17 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2020-07-08 12:18 - 2016-04-17 06:16 - 000002059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Archivos en la raíz de algunos directorios ========
2013-02-26 08:28 - 2013-02-26 08:28 - 000027762 _____ () C:\Program Files\changes.txt
2015-09-05 10:11 - 2015-09-05 10:11 - 002671376 _____ (Beepa P/L) C:\Program Files\fraps.exe
2015-09-05 10:05 - 2015-09-05 10:05 - 000255760 _____ (Beepa P/L) C:\Program Files\fraps32.dll
2015-09-05 10:11 - 2015-09-05 10:11 - 000102160 _____ (Beepa P/L) C:\Program Files\fraps64.dat
2015-09-05 10:05 - 2015-09-05 10:05 - 000215824 _____ (Beepa P/L) C:\Program Files\fraps64.dll
2015-09-05 10:09 - 2015-09-05 10:09 - 000174080 _____ (Beepa P/L) C:\Program Files\frapslcd.dll
2013-02-26 08:27 - 2013-02-26 08:27 - 000001894 _____ () C:\Program Files\README.HTM
2017-11-22 02:21 - 2017-11-22 02:21 - 000036079 _____ (Beepa Pty Ltd) C:\Program Files\uninstall.exe
==================== SigCheckExt =========================
2016-04-16 04:54 - 2012-09-28 15:45 - 000465408 ____N (C-Media Electronics Inc.) C:\Windows\system32\cmasiopx.dll
2016-04-16 04:53 - 2013-03-21 11:11 - 000827904 ____N C:\Windows\system32\Cmeauoxy.exe
2016-04-15 19:57 - 2009-08-19 16:00 - 000359424 ____N C:\Windows\system32\CmiInstallResAll64.dll
2016-04-16 04:54 - 2007-12-13 18:12 - 000122880 ____N (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2015-09-05 10:09 - 2015-09-05 10:09 - 000105984 _____ (Beepa P/L) C:\Windows\system32\frapsv64.dll
2016-04-16 04:54 - 2020-05-27 17:49 - 000111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000246272 _____ C:\Windows\system32\rtvcvfw64.dll
2016-04-16 04:54 - 2020-05-27 17:49 - 000419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2015-09-05 10:11 - 2015-09-05 10:11 - 002671376 _____ (Beepa P/L) C:\Program Files\fraps.exe
2015-09-05 10:05 - 2015-09-05 10:05 - 000255760 _____ (Beepa P/L) C:\Program Files\fraps32.dll
2015-09-05 10:05 - 2015-09-05 10:05 - 000215824 _____ (Beepa P/L) C:\Program Files\fraps64.dll
2015-09-05 10:09 - 2015-09-05 10:09 - 000174080 _____ (Beepa P/L) C:\Program Files\frapslcd.dll
2017-11-22 02:21 - 2017-11-22 02:21 - 000036079 _____ (Beepa Pty Ltd) C:\Program Files\uninstall.exe
2016-04-16 04:54 - 2012-09-28 15:45 - 000303104 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\cmasiop.dll
2016-04-16 04:53 - 2012-11-20 12:24 - 012935168 ____N (C-Media Corporation) C:\Windows\SysWOW64\CmiCnfgp.dll
2016-04-16 04:53 - 2006-09-13 10:21 - 000200704 ____N (C-Media) C:\Windows\SysWOW64\Cmpaoxy.dll
2016-04-16 04:54 - 2007-12-13 18:12 - 000122880 ____N (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2019-12-10 15:28 - 2008-08-18 20:18 - 000077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL
2015-09-05 10:09 - 2015-09-05 10:09 - 000094208 _____ (Beepa P/L) C:\Windows\SysWOW64\frapsvid.dll
2016-04-16 04:53 - 2008-07-11 09:04 - 000200704 ____N C:\Windows\SysWOW64\HsMgr.exe
2016-04-16 04:54 - 2012-02-06 09:15 - 000212992 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv.dll
2016-04-16 04:54 - 2012-01-06 10:30 - 000212992 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv2.dll
2015-05-22 01:00 - 2015-05-22 01:00 - 000002560 _____ (Intel(R) Corporation) C:\Windows\SysWOW64\IusEventLog.dll
2016-04-16 04:54 - 2020-05-27 17:49 - 000102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000247296 _____ C:\Windows\SysWOW64\rtvcvfw32.dll
2016-04-16 04:53 - 2012-06-06 09:56 - 000143360 ____N C:\Windows\SysWOW64\VmixP8.dll
2016-04-16 04:54 - 2020-05-27 17:49 - 000413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2015-06-15 10:00 - 2015-06-15 10:00 - 000041984 ____R (Intel Corporation) C:\Windows\system32\Drivers\USB3Ver.dll
2020-07-31 14:08 - 2020-07-31 14:08 - 002296832 _____ (Farbar) C:\Users\Fer 2_2\Desktop\FRST64.exe
==================== SigCheck ============================
(No existe una corrección automática para los archivos que no pasan la verificación.)
==================== BCD ================================
Administrador de arranque de Windows
----------------------------------
Identificador {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale es-ES
inherit {globalsettings}
default {current}
resumeobject {e60f6a22-bc40-11e5-b8b4-aee462b7eb80}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Cargador de arranque de Windows
-----------------------------
Identificador {e60f6a20-bc40-11e5-b8b4-aee462b7eb80}
device ramdisk=[C:]\Recovery\e60f6a20-bc40-11e5-b8b4-aee462b7eb80\Winre.wim,{e60f6a21-bc40-11e5-b8b4-aee462b7eb80}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\e60f6a20-bc40-11e5-b8b4-aee462b7eb80\Winre.wim,{e60f6a21-bc40-11e5-b8b4-aee462b7eb80}
systemroot \windows
nx OptIn
winpe Yes
Cargador de arranque de Windows
-----------------------------
Identificador {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale es-ES
inherit {bootloadersettings}
recoverysequence {e60f6a24-bc40-11e5-b8b4-aee462b7eb80}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {e60f6a22-bc40-11e5-b8b4-aee462b7eb80}
nx OptIn
Cargador de arranque de Windows
-----------------------------
Identificador {e60f6a24-bc40-11e5-b8b4-aee462b7eb80}
device ramdisk=[C:]\Recovery\e60f6a24-bc40-11e5-b8b4-aee462b7eb80\Winre.wim,{e60f6a25-bc40-11e5-b8b4-aee462b7eb80}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\e60f6a24-bc40-11e5-b8b4-aee462b7eb80\Winre.wim,{e60f6a25-bc40-11e5-b8b4-aee462b7eb80}
systemroot \windows
nx OptIn
winpe Yes
Reanudar tras hibernaci�n
-------------------------
Identificador {e60f6a22-bc40-11e5-b8b4-aee462b7eb80}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale es-ES
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No
Herramienta de comprobaci�n de memoria de Windows
-------------------------------------------------
Identificador {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Herramienta de diagn�stico de memoria de Windows
locale es-ES
inherit {globalsettings}
badmemoryaccess Yes
Configuraci�n de EMS
--------------------
Identificador {emssettings}
bootems Yes
Configuraci�n del depurador
---------------------------
Identificador {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Defectos de RAM
---------------
Identificador {badmemory}
Configuraci�n global
--------------------
Identificador {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Configuraci�n del cargador de arranque
------------------------------------
Identificador {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Configuraci�n de hipervisor
-------------------
Identificador {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Reanudar la configuraci�n del cargador
--------------------------------------
Identificador {resumeloadersettings}
inherit {globalsettings}
Opciones de dispositivo
-----------------------
Identificador {e60f6a21-bc40-11e5-b8b4-aee462b7eb80}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\e60f6a20-bc40-11e5-b8b4-aee462b7eb80\boot.sdi
Opciones de dispositivo
-----------------------
Identificador {e60f6a25-bc40-11e5-b8b4-aee462b7eb80}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\e60f6a24-bc40-11e5-b8b4-aee462b7eb80\boot.sdi
LastRegBack: 2020-08-05 10:55
==================== Final de FRST.txt ========================
Desactiva temporalmente el Antivirus 
[
) todas las herramientas que vamos a utilizar en este procedimiento (pero no las ejecutes todavía) :
revisa en detalle el manual, 
Como saber si Mi Windows es de 32 o 64 Bits ?.
Ejecutas las herramientas de una en una y en el orden indicado :
encontrarás el informe de MBAM, que debes copiar y pegar en tu próxima respuesta, para poder analizarlo.
Poner los informes en tu próxima respuesta de :
Con los demás programas cerrados ve a 
Nota