Doble Tilde, duplica busquedas en bing, Haleng, GUMFIK 1

Marr0n · 19 Marzo, 2021 00:28

OK.

Respecto IFS >> tienes un poco de fragmentación en la unidad C. Y veo restos de algún que otro antivirus.

Desactivas tu antivirus Como deshabilitar temporalmente un antivirus y cualquier programa de seguridad que tengas activado.

LO DESCARGAS EN TU ESCRITORIO MUY IMPORTANTE (y no en otro sitio).

Descargas Farbar Recovery Scan Tool MUY IMPORTANTE >> seleccionas la versión adecuada para la arquitectura correspondiente de tu Ordenador (32 o 64bits). ¿Cómo saber si mi Windows es de 32 o 64 bits.?

Una vez descargado FRST, desconectas tu equipo de completamente de Internet (apagas el router) >> Super Importante. Acto seguido, cierras también cualquier otro programa que tengas abierto.

Farbar Recovery Scan Tool

Ejecutas el FRST.exe (Si utilizas Windows Vista/7/8 o 10, presionas click derecho y seleccionas Ejecutar como Administrador).
Aparecerá una ventana con un mensaje de Disclaimer/Responsabilidad, presionas sobre Si o Yes.
En la ventana principal del programa presionas sobre Analizar/Scan y esperas a que finalice el análisis.
Aparecerán dos logs/reportes que serán: Frst.txt y Addition.txt, estos quedarán guardados en el escritorio.

Activas de nuevo tu antivirus y cualquier programa de seguridad que tengas activado. También conectas nuevamente tu equipo a Internet.

PRÓXIMA RESPUESTA

Pegas los reportes de FRST y Addition.txt. Debes de poner ambos reportes todos enteros con absolutamente todo su contenido. Deberás de realizar varios mensajes si recibes un mensaje de error/advertencia indicando que es muy largo dicho reporte que formará el mensaje (más de 50.000 carácteres aprox.).

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:

No realices pasos/acciones que NOSOTROS no te hayamos indicado.

No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.

No instales NADA (programas/software/complementos/extensiones del navegador…).

No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…).

No realices por tu cuenta otros procedimientos.

Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

Muy Importante Coloca los diferentes reportes que te he pedido como se muestra en la siguiente imagen:

Salu2.

negrosorolla · 19 Marzo, 2021 00:57

Hola @Marr0n , gracias por tu ayuda

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 17-03-2021
Ejecutado por JoseAntonio (administrador) sobre MANOMAESTRA (SAMSUNG ELECTRONICS CO., LTD. 3570R/370R/470R/450R/510R/4450RV) (18-03-2021 21:47:46)
Ejecutado desde C:\Users\JoseAntonio\Desktop
Perfiles cargados: JoseAntonio
Platform: Windows 8.1 Single Language (Update) (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Chrome
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems, Incorporated -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.) C:\Users\JoseAntonio\AppData\Local\Akamai\netsession_win.exe <2>
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Autodesk, Inc -> Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) [Archivo no firmado] C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Huawei Technologies Co., Ltd. -> ) C:\ProgramData\MobileBrServ\mbbService.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel(R) Corporation) [Archivo no firmado] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Memeo) [Archivo no firmado] C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe <3>
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Qualcomm Atheros -> ) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Atheros Communications) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(WDC) [Archivo no firmado] C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353432 2013-09-26] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2793200 2013-11-28] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [175504 2020-11-03] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [331064 2020-10-16] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel® Services Manager -> Intel Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-06] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5571944 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Archivo no firmado]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] (Qualcomm Atheros -> Atheros Communications) [Archivo no firmado]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [Akamai NetSession Interface] => C:\Users\JoseAntonio\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [Google Update] => C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\GoogleUpdateCore.exe [216392 2021-02-05] (Google LLC -> Google LLC)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [31867792 2020-05-19] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\MountPoints2: {dcf57f3d-3e86-11e3-be93-48d2241beca8} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1510768 2013-03-06] (Samsung Electronics CO., LTD. -> Samsung)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [Akamai NetSession Interface] => C:\Users\JoseAntonio\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc -> Autodesk, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [Google Update] => C:\Users\JoseAntonio\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Policies\Explorer: [] 
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\MountPoints2: {dcf57f3d-3e86-11e3-be93-48d2241beca8} - "D:\WD SmartWare.exe" autoplay=true
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [55872 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\EPSON L210 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMI2E.DLL [120320 2015-01-14] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L355 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMI4E.DLL [120320 2014-07-29] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-16] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk [2017-05-25]
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital Technologies Inc. -> WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk [2017-05-25]
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital Technologies Inc. -> Western Digital)
Startup: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RUNDLL32.EXE.lnk [2021-03-08]
ShortcutAndArgument: RUNDLL32.EXE.lnk -> C:\Windows\System32\rundll32.exe => C:\Users\JOSEAN~1\AppData\Local\Temp\GUMFIK~1.DLL,DwkG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {009CFA17-0143-48EB-83A6-8BE68EE1DDC3} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {048A8141-1B4B-4236-89CF-D40D9F6F99FB} - System32\Tasks\Microsoft\system.web.security.singlesignon.perient => RUNDLL32 C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll,eog_Pjaosih
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {11CC128F-B86F-4FB5-BF58-82F0E3E177DA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3605969310-3002992618-3777335900-1001Core => C:\Users\JoseAntonio\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {11EFA489-534F-4F81-97A1-1809DF8491D6} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {18092F69-DE36-4B7C-9A80-D26AC2D4198F} - System32\Tasks\Firefox Default Browser Agent E6BC3156D8733D97 => C:\Users\JoseAntonio\AppData\Roaming\rftgevu.exe <==== ATENCIÓN
Task: {276A1BAC-64F8-4165-A600-E94F44D9CB07} - System32\Tasks\SamsungLinkPC => C:\Program Files (x86)\Samsung\HomeSync Lite\RefreshToken.exe
Task: {5764D2E2-CB54-47BD-8465-90BE9A11CE52} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3605969310-3002992618-3777335900-1001UA => C:\Users\JoseAntonio\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {74AA02F1-B3F0-4913-8491-DEEBEBC5A45D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {7F57BA2F-6AD1-48F6-96B5-9DAF6A0D659C} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [876320 2016-07-05] (Samsung Electronics CO., LTD. -> SEC)
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {8E84E97B-6FFF-4EF3-812A-6B0637E0BA45} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {92212E9E-454F-4DB3-AFFA-10092C6ECBF9} - System32\Tasks\SUPatchForW10Up => C:\ProgramData\Samsung\SamsungUpdatePatch\SUPatchForW10Up.exe [3148800 2015-08-18] (Samsung Electronics CO., LTD.) [Archivo no firmado]
Task: {A608479D-78D6-4107-AC3C-5B84E6EFEE8B} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {AB8BBF2E-CDD9-41C3-988C-298659B2A9E6} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2059272 2015-07-27] (Symantec Corporation -> Symantec Corporation)
Task: {AC2DB710-542D-45C6-91B6-604676412AAE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {AE18C675-040D-48C9-AEF2-1E7876755A12} - \Microsoft\Windows\Setup\EOSNotify -> Ningún archivo <==== ATENCIÓN
Task: {B1E4E6BE-8B26-45EC-8C7F-525D454C8B38} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {B324FD4D-13F7-4B9C-AEE0-541C98C12B09} - System32\Tasks\Services\Diagnostic => C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\AutoIt3_x64.exe -> "C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\Settings.au3"
Task: {B961F7B9-8453-49C4-A399-315587E0FD54} - System32\Tasks\SideSyncAutoRun => C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe
Task: {BF1741AF-11B3-449E-A706-63EE2C89AE65} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {C5FA61B4-0605-4DD6-BC68-75BCC36586D5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {E46D0364-A2CF-4405-8CB9-C44CFD818FF9} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\JoseAntonio\Downloads\eset antivirus\2021\esetonlinescanner.exe [15019488 2021-03-08] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {F41B9620-A28B-4C2D-A753-72E09265A23E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {F8290952-F0E1-4573-A652-0055A8244672} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\JoseAntonio\Downloads\eset antivirus\2021\esetonlinescanner.exe [15019488 2021-03-08] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {FF0BC8D8-746A-4EAE-A417-9D6FE9B3623B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-05] (Piriform Software Ltd -> Piriform)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 190.160.0.15 200.83.1.5 190.160.0.13
Tcpip\..\Interfaces\{9D641420-7B7F-4E74-BCD1-D06AECADC8B9}: [DhcpNameServer] 190.160.0.15 200.83.1.5 190.160.0.13

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\JoseAntonio\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-18]
Edge HomePage: Default -> hxxp://home.sii.cl/

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2019-08-09] [Heredado] [no firmado]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-03] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-03] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: www.sii.cl/CSignedXmlAutII -> C:\Program Files (x86)\Firma Electronica SII\npCSignedXmlAutII.dll [2013-08-21] (Servicio de Impuestos Internos -> Servicio de Impuestos Internos) [Archivo no firmado]
FF Plugin HKU\S-1-5-21-3605969310-3002992618-3777335900-500: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2012-07-13] (Intel) [Archivo no firmado]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default [2021-03-18]
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxp://www.google.com"
CHR Extension: (Google Drive) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Búsqueda de Google) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-08]
CHR Extension: (Norton Identity Safe) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\iikflkcanblccfahdhdonehdalibjnif [2014-08-28]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-04]
CHR Extension: (Gmail) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-04]
CHR Extension: (VCleanDoc) - C:\ProgramData\Zaroqr\Oyvw [2021-03-08]
CHR HKLM\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path/update_url>
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk, Inc -> Autodesk Inc.)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-09-24] (Apple Inc. -> Apple Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-06-17] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Archivo no firmado]
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [Archivo no firmado]
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593664 2015-06-19] (Samsung Electronics CO., LTD. -> Samsung Electronics CO., LTD.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-11-03] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-11-03] (ESET, spol. s r.o. -> ESET)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Archivo no firmado]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-03-18] (Malwarebytes Inc -> Malwarebytes)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [242256 2014-08-20] (Huawei Technologies Co., Ltd. -> )
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4369680 2016-01-22] (Symantec Corporation -> Symantec Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Archivo no firmado]
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3298600 2018-03-02] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1049464 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [129536 2009-11-13] (WDC) [Archivo no firmado]
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [314744 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-05-10] (Microsoft Corporation -> Microsoft Corporation)
R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [Archivo no firmado]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-05-10] (Microsoft Corporation -> Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.242\WsAppService.exe [495720 2018-08-29] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [Archivo no firmado]

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
R3 BTATH_HID; C:\WINDOWS\system32\DRIVERS\btath_hid.sys [223432 2014-06-17] (Qualcomm Atheros -> Qualcomm Atheros)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation -> EldoS Corporation)
R1 ccSet_NARA; C:\WINDOWS\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation -> Symantec Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [160992 2020-10-27] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [109360 2020-10-27] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [190464 2020-10-27] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43720 2020-10-27] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70048 2020-10-27] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107784 2020-10-27] (ESET, spol. s r.o. -> ESET)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-03-18] (Malwarebytes Inc -> Malwarebytes)
S3 Netaapl; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [23040 2014-08-15] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation -> Corel Corporation)
R3 RadioHIDMini; C:\WINDOWS\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Samsung Electronics CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-05-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-05-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-05-10] (Microsoft Windows -> Microsoft Corporation)
U1 avgbdisk; no ImagePath
U4 dmwappushservice; no ImagePath
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2021-03-18 21:47 - 2021-03-18 21:50 - 000033836 _____ C:\Users\JoseAntonio\Desktop\FRST.txt
2021-03-18 21:45 - 2021-03-18 21:45 - 002300928 _____ (Farbar) C:\Users\JoseAntonio\Desktop\FRST64.exe
2021-03-18 19:19 - 2021-03-18 19:25 - 000000000 ____D C:\FSTool
2021-03-18 19:18 - 2021-03-18 19:18 - 001599815 _____ C:\Users\JoseAntonio\Desktop\IFS.exe
2021-03-18 10:26 - 2021-03-18 10:26 - 000000000 ___RD C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2021-03-18 00:33 - 2021-03-18 00:33 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-03-18 00:33 - 2021-03-18 00:33 - 000001976 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-03-18 00:33 - 2021-03-18 00:33 - 000001964 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-03-18 00:33 - 2021-03-18 00:32 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-03-18 00:30 - 2021-03-18 00:31 - 000007220 _____ C:\Users\JoseAntonio\Desktop\cc_20210318_003047.reg
2021-03-17 23:56 - 2021-03-17 23:56 - 000003870 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-03-17 23:56 - 2021-03-17 23:56 - 000002826 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-03-17 23:55 - 2021-03-18 11:56 - 000000000 ____D C:\Program Files\CCleaner
2021-03-17 23:55 - 2021-03-17 23:55 - 000000834 _____ C:\ProgramData\Desktop\CCleaner.lnk
2021-03-17 23:55 - 2021-03-17 23:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-03-17 16:01 - 2021-03-18 19:15 - 002808322 _____ C:\Users\JoseAntonio\Desktop\Archivos recuperados.xlsx
2021-03-16 15:27 - 2021-03-17 21:32 - 028964182 _____ C:\Users\JoseAntonio\Desktop\deleted_files.txt
2021-03-16 13:07 - 2021-03-16 13:27 - 000000000 ____D C:\Program Files\Recuva
2021-03-16 13:07 - 2021-03-16 13:07 - 000001670 _____ C:\ProgramData\Desktop\Recuva.lnk
2021-03-16 13:07 - 2021-03-16 13:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2021-03-16 13:06 - 2021-03-16 13:06 - 005562976 _____ (Piriform Ltd) C:\Users\JoseAntonio\Desktop\rcsetup153-1.53.1087.exe
2021-03-16 09:43 - 2021-03-16 13:08 - 000001863 _____ C:\ProgramData\Desktop\UsbFix Anti-Malware.lnk
2021-03-16 09:30 - 2021-03-16 09:30 - 004868504 _____ (SOSVirus) C:\Users\JoseAntonio\Desktop\UsbFix_2020.exe
2021-03-16 08:48 - 2021-03-16 08:50 - 008463216 _____ (Malwarebytes) C:\Users\JoseAntonio\Desktop\adwcleaner_8.1.exe
2021-03-15 15:52 - 2021-03-15 15:52 - 000000000 ____D C:\Program Files\Malwarebytes
2021-03-15 15:49 - 2021-03-15 15:49 - 002532872 _____ C:\Users\JoseAntonio\Desktop\Manual de Malwarebytes Anti-Malware - Guías, manuales, tutoriales y más - ForoSpyware.pdf
2021-03-15 15:48 - 2021-03-15 15:48 - 002084016 _____ (Malwarebytes) C:\Users\JoseAntonio\Desktop\MBSetup.exe
2021-03-15 15:44 - 2021-03-15 15:44 - 000015666 _____ C:\Users\JoseAntonio\Desktop\cc_20210315_154425.reg
2021-03-15 14:56 - 2021-03-15 14:56 - 030972600 _____ (Piriform Software Ltd) C:\Users\JoseAntonio\Desktop\ccsetup577.exe
2021-03-15 14:55 - 2021-03-15 14:55 - 000721728 _____ C:\Users\JoseAntonio\Desktop\CCleaner. Manual de uso simple y avanzado - Guías, manuales, tutoriales y más - ForoSpyware.pdf
2021-03-15 09:22 - 2021-03-15 09:25 - 000000000 ____D C:\AdwCleaner
2021-03-15 08:55 - 2021-03-18 21:50 - 000000000 ____D C:\FRST
2021-03-12 18:33 - 2021-03-12 18:35 - 000013030 _____ C:\DT-kill.txt
2021-03-12 18:32 - 2021-03-12 18:32 - 000000000 ____D C:\_DT-Kill
2021-03-11 16:43 - 2021-03-11 16:43 - 003129462 _____ C:\Users\JoseAntonio\Desktop\OGUC-Junio-2020-D.S.-N°32-D.O.-13-06-2020.pdf
2021-03-11 01:23 - 2021-03-11 01:23 - 000000000 ___HD C:\$AV_AVG
2021-03-09 19:13 - 2021-02-12 23:12 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-03-09 19:12 - 2021-02-12 23:24 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-03-09 19:04 - 2021-02-12 23:47 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-03-09 19:04 - 2021-02-12 23:26 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-03-08 19:14 - 2021-03-08 19:14 - 000003778 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2021-03-08 19:14 - 2021-03-08 19:14 - 000003338 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2021-03-08 18:30 - 2021-03-08 18:30 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\mbam
2021-03-08 18:28 - 2021-03-08 18:28 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-03-08 14:59 - 2021-03-18 17:24 - 000000000 ___HD C:\ProgramData\Zaroqr
2021-03-08 13:45 - 2021-03-18 10:22 - 000008192 _____ C:\WINDOWS\SysWOW64\WDPABKP.dat
2021-03-08 12:51 - 2021-03-08 12:51 - 000163310 _____ C:\ProgramData\141983.141983
2021-03-08 12:50 - 2021-03-18 09:39 - 000000000 ____D C:\Users\JoseAntonio\Documents\VlcpVideoV1.0.1
2021-03-08 12:50 - 2021-03-08 16:21 - 000003640 _____ C:\WINDOWS\system32\Tasks\Firefox Default Browser Agent E6BC3156D8733D97
2021-03-08 12:50 - 2021-03-08 12:52 - 000000000 ___HD C:\ProgramData\Windows Host
2021-03-08 12:50 - 2021-03-08 12:51 - 000000000 ____D C:\ProgramData\72
2021-03-08 12:50 - 2021-03-08 12:50 - 001564823 _____ C:\ProgramData\7271
2021-03-08 12:48 - 2021-03-08 12:48 - 000000000 __SHD C:\Users\JoseAntonio\AppData\Local\Disk
2021-03-08 12:48 - 2021-03-08 12:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\Services
2021-03-08 12:48 - 2021-03-08 12:48 - 000000000 ____D C:\ProgramData\Riate
2021-03-08 12:48 - 2021-03-08 12:48 - 000000000 ____D C:\ProgramData\Posse
2021-03-08 12:47 - 2021-03-08 12:47 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Bazertu
2021-03-08 12:44 - 2021-03-08 12:44 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Konteres
2021-03-02 19:14 - 2021-03-02 19:14 - 000000000 ____D C:\Users\JoseAntonio\Desktop\varios
2021-03-01 17:36 - 2021-03-01 17:38 - 495184352 _____ (Dimension5 Techs, Inc.) C:\Users\JoseAntonio\Downloads\D5_Render_installer-1.8.0.0277.exe
2021-02-25 15:29 - 2005-03-22 18:29 - 000089089 _____ C:\Users\JoseAntonio\Downloads\Sobrecarga_CI32B.pdf
2021-02-25 15:28 - 2021-02-25 15:28 - 000072593 _____ C:\Users\JoseAntonio\Downloads\NCh1537._Sobrecarga.zip
2021-02-18 12:44 - 2021-02-18 12:44 - 000000000 ____D C:\Users\JoseAntonio\Documents\Zoom
2021-02-18 12:42 - 2021-02-18 12:42 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2021-03-18 19:15 - 2014-06-26 18:20 - 000000000 ____D C:\Manomaestra
2021-03-18 10:51 - 2017-05-10 23:39 - 000000000 ___DO C:\Users\JoseAntonio\OneDrive
2021-03-18 10:27 - 2013-12-07 12:09 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\CrashDumps
2021-03-18 10:27 - 2013-04-20 04:18 - 000000000 ____D C:\ProgramData\WinClon
2021-03-18 10:26 - 2013-04-20 04:30 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-03-18 10:18 - 2013-08-22 11:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-18 10:07 - 2019-10-03 06:40 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2021-03-18 10:01 - 2013-08-22 10:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2021-03-18 09:39 - 2016-03-08 16:32 - 000000000 ____D C:\Users\JoseAntonio\Downloads\eset antivirus
2021-03-18 08:52 - 2013-12-07 01:35 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3605969310-3002992618-3777335900-1001
2021-03-18 07:13 - 2013-12-07 01:30 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\Adobe
2021-03-18 00:34 - 2013-10-27 13:08 - 013577728 ___SH C:\Users\JoseAntonio\Desktop\Thumbs.db
2021-03-18 00:29 - 2013-08-22 10:36 - 000000000 ____D C:\WINDOWS\Inf
2021-03-17 15:51 - 2020-04-09 13:23 - 000000000 ____D C:\Users\JoseAntonio\log
2021-03-16 21:11 - 2013-12-07 02:56 - 000002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-16 21:11 - 2013-12-07 02:56 - 000002161 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-03-16 13:42 - 2017-05-10 22:35 - 000000000 ____D C:\Users\JoseAntonio
2021-03-15 10:38 - 2020-07-02 00:19 - 000002205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-15 10:38 - 2020-07-02 00:19 - 000002164 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-03-15 09:41 - 2019-04-08 20:32 - 000000000 ____D C:\ProgramData\Wondershare
2021-03-15 09:41 - 2019-04-08 20:32 - 000000000 ____D C:\Program Files\Wondershare
2021-03-15 09:25 - 2013-04-20 04:07 - 000000000 ____D C:\ProgramData\Samsung
2021-03-15 09:25 - 2013-04-20 01:42 - 000000000 ____D C:\Program Files (x86)\Samsung
2021-03-15 07:16 - 2018-09-04 13:23 - 000015824 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
2021-03-12 17:49 - 2017-05-12 15:03 - 000000000 ____D C:\WINDOWS\Minidump
2021-03-12 16:30 - 2018-04-10 02:30 - 000000000 ____D C:\Program Files (x86)\AVG
2021-03-12 16:30 - 2018-04-10 02:27 - 000000000 ____D C:\ProgramData\AVG
2021-03-12 16:28 - 2018-04-10 02:28 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\Avg
2021-03-12 16:17 - 2018-04-10 02:31 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\AVG
2021-03-10 15:06 - 2012-07-26 04:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-10 10:26 - 2013-08-22 12:36 - 000000000 ____D C:\WINDOWS\rescache
2021-03-10 08:05 - 2013-08-22 11:44 - 005193064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-09 22:09 - 2013-08-22 12:36 - 000000000 ___RD C:\WINDOWS\ToastData
2021-03-09 22:09 - 2013-08-22 12:36 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-09 22:09 - 2013-08-22 12:36 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-09 17:36 - 2013-12-08 23:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-09 17:19 - 2013-12-08 23:33 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-08 22:12 - 2019-05-20 16:45 - 000000000 ____D C:\Program Files (x86)\TNod
2021-03-08 22:12 - 2017-05-10 22:35 - 000000000 ____D C:\Users\Administrator
2021-03-08 12:51 - 2019-07-08 18:12 - 000007600 _____ C:\Users\JoseAntonio\AppData\Local\Resmon.ResmonCfg
2021-03-05 11:44 - 2019-10-03 06:40 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-03-04 08:31 - 2020-07-02 00:18 - 000003552 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-04 08:31 - 2020-07-02 00:18 - 000003424 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-02 16:07 - 2019-06-11 19:26 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Abvent_Artlantis5
2021-02-18 12:42 - 2020-07-30 17:07 - 000001953 _____ C:\Users\JoseAntonio\Desktop\Zoom.lnk
2021-02-18 12:42 - 2020-05-29 21:14 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Zoom

==================== Archivos en la raíz de algunos directorios ========

2018-09-28 10:06 - 2018-09-28 10:06 - 000000000 _____ () C:\Users\JoseAntonio\AppData\Local\oobelibMkey.log
2019-07-08 18:12 - 2021-03-08 12:51 - 000007600 _____ () C:\Users\JoseAntonio\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)


LastRegBack: 2021-03-18 08:52
==================== Final de FRST.txt ========================

negrosorolla · 19 Marzo, 2021 01:00

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 17-03-2021
Ejecutado por JoseAntonio (18-03-2021 21:50:55)
Ejecutado desde C:\Users\JoseAntonio\Desktop
Windows 8.1 Single Language (Update) (X64) (2017-05-11 02:28:14)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-3605969310-3002992618-3777335900-500 - Administrator - Disabled) => C:\Users\Administrator
HomeGroupUser$ (S-1-5-21-3605969310-3002992618-3777335900-1008 - Limited - Enabled)
Invitado (S-1-5-21-3605969310-3002992618-3777335900-501 - Limited - Disabled)
JoseAntonio (S-1-5-21-3605969310-3002992618-3777335900-1001 - Administrator - Enabled) => C:\Users\JoseAntonio

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: ESET Security (Disabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: ESET Security (Disabled - Up to date) {32D4BD20-1EBB-773C-2B52-7CE89BB0522B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.16 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version:  - Adobe)
Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Akamai NetSession Interface (HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{E1E7E13D-EE28-979F-1303-E1E3DBD2CE77}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32 bits) (HKLM-x32\...\{9738288C-21BC-4F54-AB4F-72F059339376}) (Version: 8.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{DEB339C1-2687-43AB-816A-8714F3E26846}) (Version: 8.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{F9CEF01A-3907-4614-824F-CF5D3E4675EF}) (Version: 14.1.0.35 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Artlantis Studio 5.1.2.5 (64 bit) (HKLM\...\Artlantis Studio 5 (64 bit)) (Version: 5.1.2.5 - Abvent R&D)
AutoCAD 2014 - English (HKLM\...\{5783F2D7-D001-0000-0102-0060B0CE6BBA}) (Version: 19.1.18.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.0.27.1 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.14 - Autodesk)
Autodesk AutoCAD 2014 - English (HKLM\...\AutoCAD 2014 - English) (Version: 19.1.18.0 - Autodesk)
Autodesk BIM 360 Revit 2016 Add-in 64 bit (HKLM\...\{C5A83116-8654-47A3-A3B1-B76905C8A198}) (Version: 4.35.3969 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk)
Autodesk Content Service Language Pack (HKLM-x32\...\{62F029AB-85F2-0001-866A-9FC0DD99DDBC}) (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk)
Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2016 (HKLM-x32\...\{FA5DF4D1-CD59-4183-B3D4-779A56498786}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\...\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.18 - Autodesk)
Autodesk Revit 2016 (HKLM\...\Autodesk Revit 2016) (Version: 16.0.490.0 - Autodesk)
Autodesk Revit Content Libraries 2016 - Español (Spanish) (HKLM\...\Autodesk Revit Content Libraries 2016 - Español (Spanish)) (Version: 16.0.490.0 - Autodesk)
Autodesk Workflows 2016 (HKLM\...\{535CDED0-D690-4738-83EE-09056A365BAC}) (Version: 6.3.0.18 - Autodesk, Inc.)
Bitcasa version 0.9.20.4135 (HKLM\...\{EDA09459-AD7D-4434-BA0C-647F6703EA12}_is1) (Version: 0.9.20.4135 - Bitcasa Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Drawing Purge (HKLM-x32\...\{F1BF1334-162A-407F-8CDD-73D9917E2AF9}) (Version: 8.0.0.0 - Ajilal Vijayan)
Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.6 - Samsung Electronics CO.,LTD.)
Epic Games Launcher (HKLM-x32\...\{3A595C95-121D-4EB0-8D57-C7A309BA6C09}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.)
EPSON L210 Series Printer Uninstall (HKLM\...\EPSON L210 Series) (Version:  - SEIKO EPSON Corporation)
EPSON L355 Series Printer Uninstall (HKLM\...\EPSON L355 Series) (Version:  - SEIKO EPSON Corporation)
ESET Security (HKLM\...\{0813F772-F554-4DA9-9CEA-ABCE6321BDFD}) (Version: 14.0.22.0 - ESET, spol. s r.o.)
FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)
Firma Electronica SII versión 1.3 (HKLM-x32\...\{A6B16D24-EF9D-40D6-8F4D-0D96AE815ACB}_is1) (Version: 1.3 - Servicio de Impuestos Internos)
Foto-galerija (HKLM-x32\...\{175B4B56-63F1-464E-8286-4309E0A52395}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (HKLM-x32\...\{35FA69FA-49DD-4BDF-8140-7DC2C4472C45}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galeria de Fotos (HKLM-x32\...\{46AEE281-3436-46EF-A36D-163F7125A290}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galería de fotos (HKLM-x32\...\{959BC6D1-38C8-441F-9466-9ECCD4E68413}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.90 - Google LLC)
Google Earth Pro (HKLM\...\{FB8010D4-05F4-420D-8DFC-2F911A6DD100}) (Version: 7.3.3.7786 - Google)
Google Video Support Plugin (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 19.12.1000.0 - Google, LLC.)
Help Desk (HKLM\...\{AEC9D273-E162-4614-83F1-722B8C74B185}) (Version: 1.0.96 - Samsung Electronics CO., LTD.)
Icecream Screen Recorder versión 6.16 (HKLM-x32\...\{7ADEC622-3230-4C9A-9DCE-9BD462B74095}_is1) (Version: 6.16 - Icecream Apps)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33070) (Version: 3.6.1.33070.11 - Intel)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{3DAC4F8C-80E6-4204-8A58-747FA4CBAA03}) (Version: 16.0.246 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3368 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
iTunes (HKLM\...\{AAAFBE40-9E14-491D-B619-70828F693077}) (Version: 12.10.10.2 - Apple Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lumion 8.0 (HKLM\...\Lumion 8.0_is1) (Version: 8.0 - Act-3D B.V.)
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.54 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.26.01.03 - Huawei Technologies Co.,Ltd)
Movie Maker (HKLM-x32\...\{18FE3424-7C22-4EDE-A3FD-414760CC363B}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{302933F3-E6AD-414D-AB96-A18DBB979B1D}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{61889FC7-9738-439A-96B3-17AF981BDDEF}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{AEBE7912-AA50-42EB-BBDA-AB352C4D8FAA}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{D71BC54E-A4E6-4E06-866C-FD6EE16EA187}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{E1DA4302-1C06-4533-AF6D-9D68B01FCB34}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Norton Online Backup (HKLM-x32\...\{652C1CDF-C61D-4525-9348-8C272CC2DB24}) (Version: 2.10.3.20 - Symantec Corporation)
Norton Online Backup ARA (HKLM-x32\...\NARA) (Version: 4.1.0.14 - Symantec Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{18599B4F-A533-7A4A-7A56-EEE5C77B0EEE}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Paquete de controladores de Windows - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass  (08/23/2013 6.2.8400.4218) (HKLM\...\26BFE384C802803107F583AE1A739E4FEB56134B) (Version: 08/23/2013 6.2.8400.4218 - Samsung Electronics Co. Ltd.)
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Phone Screen Sharing (HKLM-x32\...\{DF02C515-40B5-45AC-A601-5DC69D03885C}) (Version: 2.0.0.21 - RSUPPORT)
PSE11 STI Installer (HKLM-x32\...\{98CE8819-87AA-4814-8167-ADDDD513485F}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.326 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Quick Starter (HKLM\...\{EC36E2BC-86F7-44C9-84B2-93930F0FBDBF}) (Version: 1.0.2 - Samsung Electronics CO., LTD.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7055 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.1.0.3 - Samsung Electronics CO., LTD.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Revit 2016 (HKLM\...\{7346B4A0-1600-0510-0000-705C0D862004}) (Version: 16.0.490.0 - Autodesk) Hidden
Revit Content Libraries 2016 - Español (Spanish) (HKLM\...\{941030D0-1600-0410-0000-818BB38A95FC}) (Version: 16.0.490.0 - Autodesk) Hidden
Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.)
Samsung Link (HKLM-x32\...\{82EC241F-DFCA-4166-A8C3-EA5D2B9A41C4}) (Version: 1.8.0.44 - Samsung Electronics CO., LTD.)
Samsung Update (HKLM-x32\...\{0722F60B-FF4E-4999-9AEA-901B28237768}) (Version: 2.2.53 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.25.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SideSync (HKLM-x32\...\{59687468-8CE9-4ABF-9C6A-5C31F0E09F8B}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
SketchUp 2015 (HKLM\...\{7C62B699-5E17-48F4-BF4E-9250FFCE5E72}) (Version: 15.3.331 - Trimble Navigation Limited)
SketchUp 2019 (HKLM\...\{0FB756F3-A84B-E5F8-387F-B9F186E6D497}) (Version: 19.0.685.20289 - Trimble, Inc.)
SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SuBridge2015 (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\SuBridge2015) (Version: 1.00.01.00 - Tecnobit)
SuBridge2015 (HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\SuBridge2015) (Version: 1.00.01.00 - Tecnobit)
Support Center (HKLM\...\{711DE117-767F-48A8-9864-66C525B9539F}) (Version: 2.1.1223 - Samsung Electronics CO., LTD.)
Support Center FAQ (HKLM-x32\...\{661544AE-C07F-4EAD-B187-7A217E69A426}) (Version: 1.0.17 - Samsung Electronics CO., LTD.) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.0.0 - Synaptics Incorporated)
User Guide (HKLM-x32\...\{0A380831-981C-4922-BCFE-37FD5D938404}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
WD Quick View (HKLM-x32\...\{E83047E3-B85C-40E4-A421-017B264AB761}) (Version: 2.4.16.16 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{02D359F8-1DEF-41DD-8561-99C7321BFE00}) (Version: 2.4.16.16 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{604CB4FC-3D32-405F-A109-165F170529B6}) (Version: 1.2.0.8 - Western Digital)
WD SmartWare Installer (HKLM-x32\...\{4555885d-a64c-4234-9aac-72a8a6b5590b}) (Version: 2.4.16.16 - Western Digital Technologies, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Zoom (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\ZoomUMX) (Version: 5.5.2 (12494.0204) - Zoom Video Communications, Inc.)

Packages:
=========
Adera -> C:\Program Files\WindowsApps\Microsoft.Adera_2.5.2.34894_x86__8wekyb3d8bbwe [2017-05-11] (Microsoft Studios)
Bitcasa for Samsung -> C:\Program Files\WindowsApps\Bitcasa.BitcasaforSamsung_3.2.2.84_neutral__t064hbck1pfne [2017-05-11] (Bitcasa, Inc)
ChatON -> C:\Program Files\WindowsApps\6E04A0BD.3483954CEF3A0_2.1.5.1_neutral__ez4k4b2fwzhzt [2017-05-11] (SAMSUNG ELECTRONICS CO,. LTD.)
Evernote Touch -> C:\Program Files\WindowsApps\Evernote.Evernote_3.3.0.102_x86__q4d96b2w5wcc2 [2017-05-11] (Evernote)
Fresh Paint -> C:\Program Files\WindowsApps\Microsoft.FreshPaint_2.0.15133.0_x86__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation)
HP All-in-One Printer Remote -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_55.1.43.0_x86__v10z8vjag6ke6 [2017-05-11] (Hewlett-Packard Company)
Jamie's Recipes -> C:\Program Files\WindowsApps\Zolmo.JamiesRecipes_1.2.0.0_x64__40cj6885yhw56 [2017-05-11] (Zolmo)
Juegos -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2014-11-22] (Microsoft Corporation) [MS Ad]
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2017-05-11] (AMZN Mobile LLC)
Merriam-Webster Dictionary -> C:\Program Files\WindowsApps\D22CCC44.Merriam-WebsterDictionary_1.0.1.1_neutral__mbv6ra3y34fnr [2013-12-07] (Merriam-Webster, Inc.)
MSN Deportes -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Dinero -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN El tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Noticias -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Recetas -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Salud -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Viajes -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_2.3.1055.0_x64__a2t3txkz9j1jw [2017-06-09] (MAGIX)
Música -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2017-05-11] (Symantec Corporation)
Pinball FX2 -> C:\Program Files\WindowsApps\Microsoft.Studios.PinballFx2_1.8.1.957_x86__8wekyb3d8bbwe [2017-05-11] (Microsoft Studios)
S Camera -> C:\Program Files\WindowsApps\CyberLinkCorp.ss.SCamera_1.0.1903.26021_x86__h7cwzt5medr84 [2017-05-11] (CYBERLINKCOM)
S Gallery -> C:\Program Files\WindowsApps\CyberLinkCorp.ss.SGallery_1.0.1903.26021_x86__h7cwzt5medr84 [2017-05-11] (CYBERLINKCOM)
S Player -> C:\Program Files\WindowsApps\CyberLinkCorp.ss.SPlayer_1.0.2216.21222_x86__h7cwzt5medr84 [2017-05-11] (CYBERLINKCOM)
Samsung Story -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungStory_1.0.0.32_neutral__3c1yjt4zspk6g [2017-05-11] (SAMSUNG ELECTRONICS CO., LTD)
Shark Dash -> C:\Program Files\WindowsApps\GAMELOFTSA.SharkDash_1.3.6.9_x64__0pp20fcewvvtj [2017-05-11] (GAMELOFT  SA)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2017-05-11] (Skype) [MS Ad]
Taptiles -> C:\Program Files\WindowsApps\Microsoft.Taptiles_2.6.288.0_x86__8wekyb3d8bbwe [2018-10-25] (Microsoft Studios) [MS Ad]
Vídeo -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
Xbox 360 SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxCompanion_1.4.3.0_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\en-US\acadficn.dll (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll (Google LLC -> Google LLC)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation -> EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects-x32: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} => C:\windows\SysWow64\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers: [1EldosIconOverlay] -> {BC54C168-B8F2-478A-B907-602399B62231} => C:\windows\SYSTEM32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [BitcasaIconOverlay] -> {A6975448-A999-49BB-B3E4-7730CF6A82C0} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ShellIconOverlayIdentifiers: [BitcasaProgressOverlay] -> {6FB8D52A-0064-45B2-B687-F596FEAD09C2} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [1EldosIconOverlay] -> {BC54C168-B8F2-478A-B907-602399B62231} => C:\windows\SYSTEM32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2013-02-08] (Autodesk, Inc -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => C:\Program Files (x86)\Bluetooth Suite\BtvAppExt.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
ContextMenuHandlers1: [Bitcasa] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-11-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WDBackupMenuHandler] -> {C752BC82-C19A-4827-9C15-0996BA85C180} => C:\Program Files\Western Digital\WD SmartWare\\WDContextMenuHandler.dll [2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Bitcasa] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers2: [BitcasaExtension] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers2: [CWDDriveMenuHandler] -> {CCEFA845-DCDB-4A2F-8BED-DBE87CD198EC} => C:\Program Files\Western Digital\WD SmartWare\\WDContextMenuHandler.dll [2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-11-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [FTShellContext] -> {AFF81F7B-6942-40c4-AADA-7214EF7B6DD1} => C:\Program Files (x86)\Bluetooth Suite\ShellContextExt.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-18] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2013-08-30] (Advanced Micro Devices, Inc.) [Archivo no firmado]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2013-11-29] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [Bitcasa] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers6: [BitcasaExtension] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-11-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-18] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [WDBackupMenuHandler] -> {C752BC82-C19A-4827-9C15-0996BA85C180} => C:\Program Files\Western Digital\WD SmartWare\\WDContextMenuHandler.dll [2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

ShortcutWithArgument: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --load-extension="C:\ProgramData\Zaroqr\Oyvw\C64ED0D6"
ShortcutWithArgument: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --load-extension="C:\ProgramData\Zaroqr\Oyvw\C64ED0D6"
ShortcutWithArgument: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4557e6e244e2b347\MonkiBu TV y Radios Online.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=phimhnckkaofkllcoledjilakgbeohli

==================== Módulos cargados (Lista blanca) =============

2015-11-11 06:54 - 2015-06-15 09:24 - 000224768 _____ () [Archivo no firmado] [El archivo está en uso] C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000011264 _____ () [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000086016 _____ () [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-04-20 04:34 - 2012-12-27 04:58 - 000570880 _____ (Bitcasa, Inc) [Archivo no firmado] C:\Program Files\Bitcasa\ExplorerMenu.dll
2013-08-07 15:24 - 2013-08-07 15:24 - 000286720 _____ (Intel Corporation) [Archivo no firmado] [El archivo está en uso] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2013-08-07 15:24 - 2013-08-07 15:24 - 000514048 _____ (Intel Corporation) [Archivo no firmado] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2009-06-16 09:58 - 2009-06-16 09:58 - 000028672 _____ (Memeo) [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\MemeoRemoteCore.dll
2017-05-10 22:48 - 2017-05-10 22:48 - 001654784 _____ (Microsoft Corporation) [Archivo no firmado] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\MFC80U.DLL
2014-06-17 09:35 - 2014-06-17 09:35 - 000107648 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\BtvAppExt.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000033408 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\CommApi.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000203392 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\FolderViewImpl.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000085632 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\GattI.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000126592 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\gatts.DLL
2014-06-17 09:36 - 2014-06-17 09:36 - 000083072 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Handsfree.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000034432 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ipc.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000063104 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ModuleManager.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 001067648 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\OutlookLib.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000291456 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ShellContextExt.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000130176 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\skypeagent.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000027264 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000116352 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\utils.dll
2014-06-17 09:30 - 2014-06-17 09:30 - 000308224 _____ (Qualcomm Atheros Commnucations) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000210432 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\Audio\audio.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000162304 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\BasicPrintProfile\BPP.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000177152 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\BIP\BIP.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000018432 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\DID\DId.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000035840 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\FAX\Fax.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000421888 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\FileTransfer\FileTransfer.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000096256 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\GapSdp\GapSdp.dll
2014-06-17 09:26 - 2014-06-17 09:26 - 000097792 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\goep\goep.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000029696 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\HCRP\Hcrp.dll
2014-06-17 09:30 - 2014-06-17 09:30 - 000064512 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\HumanInterfaceDevice\hid.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000091136 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\l2caplib.dll
2014-06-17 09:26 - 2014-06-17 09:26 - 000181248 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\ObjPush.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000066048 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\OppOperation.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000067072 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\pbap\pbap.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000063488 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\RfcommLib\rfcommlib.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000097280 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\sap\sap.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000087552 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\SesMgr\sesmgr.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000055296 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\spp\spp.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000064512 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll
2016-04-19 12:02 - 2016-04-19 12:02 - 001006080 ____R (Robert Simpson, et al.) [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\Western Digital\WD SmartWare\System.Data.SQLite.dll
2015-06-19 14:55 - 2015-06-19 14:55 - 000022920 _____ (Samsung Electronics CO., LTD. -> Samsung Electronics Co. Ltd.) [Archivo no firmado] C:\Program Files (x86)\Samsung\Settings\CmdServer\WSABI.dll

==================== Alternate Data Streams (Lista blanca) ========

(Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.)

AlternateDataStreams: C:\ProgramData\Reprise:whfqrelwxjetvcsjehf`dbeq`3126jfi [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado.)

HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"

==================== Internet Explorer (Lista blanca) ==========

HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sii.cl/
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
SearchScopes: HKLM -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Sin Nombre - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Ningún archivo
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> Sin Nombre - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Ningún archivo
IE Session Restore: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> está habilitado.

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2012-07-26 02:26 - 2019-08-09 19:52 - 000001171 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       down.baidu2016.com
127.0.0.1       123.sogou.com
127.0.0.1       www.czzsyzgm.com
127.0.0.1       www.czzsyzxl.com
127.0.0.1                   activate.adobe.com
127.0.0.1                   practivate.adobe.com
127.0.0.1                   lmlicenses.wip4.adobe.com
127.0.0.1                   lm.licenses.adobe.com

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64_win\compiler;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Common Files\Autodesk Shared\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\JoseAntonio\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\logo.jpg
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: El medio no está conectado a internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Ningún archivo)
Firewall de Windows está habilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: Bitcasa => C:\Program Files\Bitcasa\Bitcasa.exe /startup
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKLM\...\StartupApproved\StartupFolder: => "WDDMStatus.lnk"
HKLM\...\StartupApproved\StartupFolder: => "WDSmartWare.lnk"
HKLM\...\StartupApproved\StartupFolder: => "CodeMeter Control Center.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Servidor de Red.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Bitcasa"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Adobe Reader Speed Launcher"
HKLM\...\StartupApproved\Run32: => "WD Quick View"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "haleng"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\StartupFolder: => "SmartClock.lnk"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\StartupFolder: => "RUNDLL32.EXE.lnk"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\StartupApproved\Run: => "Skype"

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{E82478CE-0DC1-4242-88CD-F6877E8484E4}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{3734B2E6-1CDF-4BEE-AD43-CEBF38AEC0A6}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe (Symantec Corporation -> Symantec Corporation)
FirewallRules: [TCP Query User{C222D5C0-F5D8-4031-82C4-0AA4F74E84E2}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe (Symantec Corporation -> Symantec Corporation)
FirewallRules: [{F952FDE1-C4C5-4F3E-A1D9-3C195E86B19C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7756B647-F149-4601-A415-9ED7A156FFE3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{402006FE-82E6-4B84-AF6D-4353F95F7098}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{8D26B8D7-5965-46C6-B354-9EB9E7CF006D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{E8D7582C-D8F6-4410-9207-FDE0FC2F62AF}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe (Symantec Corporation -> Symantec Corporation)
FirewallRules: [TCP Query User{6EED281F-B678-4173-8C03-110D3D873C12}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe (Symantec Corporation -> Symantec Corporation)
FirewallRules: [UDP Query User{DE90130A-6978-43AF-AEF2-836ECE5F5C38}C:\users\joseantonio\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\joseantonio\appdata\local\akamai\netsession_win.exe (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
FirewallRules: [TCP Query User{FFC9EDDE-D761-4DBC-B748-7AC2D8F11277}C:\users\joseantonio\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\joseantonio\appdata\local\akamai\netsession_win.exe (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
FirewallRules: [{F014B099-4352-4CB1-86AA-6933695986E1}] => (Allow) LPort=50248
FirewallRules: [{A370C288-1714-4336-9F58-F5E39F9F2CF7}] => (Allow) LPort=1900
FirewallRules: [{FFB9BF64-177A-43F9-86E1-B00D9862BD72}] => (Allow) LPort=2869
FirewallRules: [{EC66BB59-0B5E-46EF-AE26-0AD0911FE485}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A21D73CB-CE6C-44A9-86B2-B3CAC9582E74}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE (CyberLink -> CyberLink Corp.)
FirewallRules: [{9D4604B2-1C1A-4829-974B-89CCCC0EA482}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe (CyberLink -> CyberLink Corp.)
FirewallRules: [{ECB44388-3C09-4F92-85C9-845F8187DA7C}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{2B9A1FE0-D7F1-459A-B8EE-B4F42D208943}C:\program files\artlantis studio 5\artlantis license manager.exe] => (Allow) C:\program files\artlantis studio 5\artlantis license manager.exe (ABVENT -> Abvent R&D)
FirewallRules: [UDP Query User{2B3FCB22-15EC-48E2-B932-B3F9E882DF23}C:\program files\artlantis studio 5\artlantis license manager.exe] => (Allow) C:\program files\artlantis studio 5\artlantis license manager.exe (ABVENT -> Abvent R&D)
FirewallRules: [{118E8264-1DB5-4EEE-9DF1-38D17883200A}] => (Block) C:\Program Files\Lumion 8.0\Lumion.exe () [Archivo no firmado]
FirewallRules: [{7FED1423-C88A-4E44-9F64-4937CBD31253}] => (Block) C:\Program Files\Lumion 8.0\Lumion.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{87D91C10-4837-4418-B45C-6BCBBFFAB297}C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games)
FirewallRules: [UDP Query User{04C200B9-5E59-4C62-BA56-4D34877B554D}C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games)
FirewallRules: [TCP Query User{4D61F93A-108B-4E04-B8B3-21B3D03FD76E}C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games)
FirewallRules: [UDP Query User{82A7B67F-6E88-4031-B104-C81F9BC8C6BC}C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe] => (Allow) C:\program files\epic games\twinmotion2020.1edu\twinmotion\binaries\win64\twinmotion-win64-shipping.exe (Epic Games, Inc. -> Epic Games)
FirewallRules: [{8ABA1911-519A-40CA-83D4-C4B10FBF6C96}] => (Allow) C:\Users\JoseAntonio\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{00871287-D2DC-4EC9-BC20-EF98F1BD2779}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DFA4D067-EA46-4BFD-994A-A2CEA4A2790F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Puntos de Restauración =========================

15-03-2021 09:24:35 AdwCleaner_BeforeCleaning_15/03/2021_09:24:34
16-03-2021 08:53:28 AdwCleaner_BeforeCleaning_16/03/2021_08:53:25
18-03-2021 09:59:35 AdwCleaner_BeforeCleaning_18/03/2021_09:59:29
18-03-2021 10:15:14 AdwCleaner_BeforeCleaning_18/03/2021_10:15:09

==================== Dispositivos defectuosos en el Administrador de dispositivos ============


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (03/18/2021 07:17:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: Explorer.EXE, versión: 6.3.9600.18460, marca de tiempo: 0x57c1b8c1
Nombre del módulo con errores: QtCore_Ad_SyncNs_4.dll_unloaded, versión: 4.8.2.0, marca de tiempo: 0x50d3fca7
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x00000000000265fe
Identificador del proceso con errores: 0x9b4
Hora de inicio de la aplicación con errores: 0x01d71bf943761581
Ruta de acceso de la aplicación con errores: C:\WINDOWS\Explorer.EXE
Ruta de acceso del módulo con errores: QtCore_Ad_SyncNs_4.dll
Identificador del informe: c142077d-8837-11eb-8200-48d2241beca8
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (03/18/2021 10:26:03 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: mbamtray.exe, versión: 4.0.0.918, marca de tiempo: 0x60418179
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.3.9600.19678, marca de tiempo: 0x5e82c88a
Código de excepción: 0xc0000142
Desplazamiento de errores: 0x00000000000ecf40
Identificador del proceso con errores: 0xc88
Hora de inicio de la aplicación con errores: 0x01d71bfa364757f6
Ruta de acceso de la aplicación con errores: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Ruta de acceso del módulo con errores: KERNELBASE.dll
Identificador del informe: 7c0fe0d7-87ed-11eb-8200-48d2241beca8
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (03/18/2021 10:25:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: ig.exe, versión: 1.0.1.1, marca de tiempo: 0x5f43d0e0
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.3.9600.19678, marca de tiempo: 0x5e82c0f7
Código de excepción: 0xc0000142
Desplazamiento de errores: 0x0009d452
Identificador del proceso con errores: 0xb8c
Hora de inicio de la aplicación con errores: 0x01d71bfa1a5427a4
Ruta de acceso de la aplicación con errores: C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\ig.exe
Ruta de acceso del módulo con errores: KERNELBASE.dll
Identificador del informe: 684c2434-87ed-11eb-8200-48d2241beca8
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (03/18/2021 10:19:43 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Error con excepción en la configuración remota 'System.Reflection.TargetInvocationException: Se produjo una excepción en el destino de la invocación. ---> System.Security.Principal.IdentityNotMappedException: No se pudieron convertir algunas o todas las referencias de identidad.
   en System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   en System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   en System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Fin del seguimiento de la pila de la excepción interna ---
   en System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   en System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   en System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   en System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)'.   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   en System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   en RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (03/18/2021 10:18:29 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start

Error: (03/18/2021 10:06:28 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Error del procedimiento de apertura para el servicio "BITS" en el archivo DLL "C:\Windows\System32\bitsperf.dll". Los datos de rendimiento para este servicio no estarán disponibles. Los primeros cuatro bytes (DWORD) de la sección de datos contienen el código de error.

Error: (03/18/2021 10:03:43 AM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Error con excepción en la configuración remota 'System.Reflection.TargetInvocationException: Se produjo una excepción en el destino de la invocación. ---> System.Security.Principal.IdentityNotMappedException: No se pudieron convertir algunas o todas las referencias de identidad.
   en System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   en System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   en System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Fin del seguimiento de la pila de la excepción interna ---
   en System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   en System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   en System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   en System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)'.   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   en System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   en RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (03/18/2021 10:02:14 AM) (Source: ATIeRecord) (EventID: 16386) (User: )
Description: ATI EEU Client has failed to start


Errores del sistema:
=============
Error: (03/18/2021 10:23:21 AM) (Source: DCOM) (EventID: 10010) (User: MANOMAESTRA)
Description: El servidor {1B1F472E-3221-4826-97DB-2C2324D389AE} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (03/18/2021 10:20:55 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio ZAtheros Bt and Wlan Coex Agent.

Error: (03/18/2021 10:20:08 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Wondershare Application Framework Service.

negrosorolla · 19 Marzo, 2021 01:01

Segunda parte

Error: (03/18/2021 10:17:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Apple Mobile Device Service no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar la ruta especificada.

Error: (03/18/2021 10:16:42 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio WD SmartWare Background Service se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (03/18/2021 10:16:42 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio WD Drive Manager se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (03/18/2021 10:16:42 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Autodesk Content Service terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 10000 milisegundos: Reiniciar el servicio.

Error: (03/18/2021 10:16:42 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio WD Backup terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio.


Windows Defender:
================
Date: 2019-05-20 13:50:11.012
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {4D051564-7820-4EEA-8F6A-274383D10F5B}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2018-08-01 11:36:57.328
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {72F23AA8-826B-4168-9B75-D467103CF062}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2018-08-01 11:02:56.864
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {A93C17E6-AFE0-4E21-A0DD-F239E813555B}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2018-08-01 10:19:49.486
Description: 
Windows Defender detectó malware u otro software potencialmente no deseado.
Para obtener más información consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nombre: Trojan:Win32/Bluteal.B!rfn
Id.: 2147727314
Gravedad: Grave
Categoría: Caballo de Troya
Ruta de acceso: file:_C:\Program Files (x86)\TNod\TNODUP.exe;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Actualizar licencia.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Configurar.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Descargar Licencias.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Ejecutar oculto.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Insertar licencia con mayor fecha de caducidad.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Recuperar la licencia actual.lnk;regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\TNOD UP;runkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\TNOD UP;startup:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Actualizar licencia.lnk;startup:_C:\ProgramData\Microsoft\Windo
Origen de detección: Equipo local
Tipo de detección: Concreto
Fuente de detección: Protección en tiempo real
Usuario: manomaestra\JoseAntonio
Nombre de proceso: C:\Users\JoseAntonio\Downloads\eset antivirus\TNod-1.6.5.0-beta-setup.exe
Versión de firma: AV: 1.273.665.0, AS: 1.273.665.0, NIS: 0.0.0.0
Versión de motor: AM: 1.1.15100.1, NIS: 0.0.0.0

Date: 2018-08-01 10:19:10.444
Description: 
Windows Defender detectó malware u otro software potencialmente no deseado.
Para obtener más información consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nombre: Trojan:Win32/Bluteal.B!rfn
Id.: 2147727314
Gravedad: Grave
Categoría: Caballo de Troya
Ruta de acceso: file:_C:\Program Files (x86)\TNod\TNODUP.exe
Origen de detección: Equipo local
Tipo de detección: Concreto
Fuente de detección: Protección en tiempo real
Usuario: manomaestra\JoseAntonio
Nombre de proceso: C:\Users\JoseAntonio\Downloads\eset antivirus\TNod-1.6.5.0-beta-setup.exe
Versión de firma: AV: 1.273.665.0, AS: 1.273.665.0, NIS: 119.0.0.0
Versión de motor: AM: 1.1.15100.1, NIS: 2.1.14600.4

Date: 2019-05-20 13:46:00.697
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

Date: 2019-05-20 13:46:00.696
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

Date: 2019-05-20 13:46:00.641
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Servidor de Microsoft Update
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x8024402c
Descripción del error: Se produjo un problema inesperado mientras se buscaban actualizaciones. Para obtener más información sobre cómo instalar o solucionar problemas en las actualizaciones, consulte Ayuda y soporte técnico. 

Date: 2019-05-20 13:39:15.383
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 
Date: 2019-05-20 13:39:15.382
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

==================== Información de la memoria =========================== 

BIOS: American Megatrends Inc. P15RAN.208.140429.ZW 04/29/2014
Placa base: SAMSUNG ELECTRONICS CO., LTD. NP470R5E-X02CL
Procesador: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Porcentaje de memoria en uso: 33%
RAM física total: 8077.6 MB
RAM física disponible: 5341.35 MB
Virtual total: 10125.6 MB
Virtual disponible: 7537.27 MB

==================== Unidades ================================

Drive c: () (Fixed) (Total:907.02 GB) (Free:472.79 GB) NTFS
Drive d: (WD SmartWare) (CDROM) (Total:0.6 GB) (Free:0 GB) UDF

\\?\Volume{a66a147f-4469-4862-92e1-0c30651c74fa}\ (Windows RE tools) (Fixed) (Total:0.49 GB) (Free:0.15 GB) NTFS
\\?\Volume{6c2acf3d-fd71-48ac-84b5-8a549d62008e}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{28120cea-692b-4dd7-9425-ab3d8ea37c4c}\ () (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS
\\?\Volume{001acc82-cbe9-4263-8cf2-0d0bf18c1632}\ (SAMSUNG_REC2) (Fixed) (Total:21.81 GB) (Free:0.94 GB) NTFS
\\?\Volume{d54203c8-f0aa-4779-4173-636c65706975}\ (SAMSUNG_REC) (Fixed) (Total:1 GB) (Free:0.4 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: B0D01F9B)

Partition: GPT.
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 1.

==================== Final de Addition.txt =======================

Marr0n · 19 Marzo, 2021 01:13

OK, estoy analizando logs. Tardaré un poco.

Marr0n · 19 Marzo, 2021 03:14

Hola @negrosorolla

Ahora debes de hacer una COPIA DE SEGURIDAD DEL REGISTRO, para ello:

Reinicias el ordenador en Modo Normal.
Descargas DelFix en tu escritorio.
Doble clic para ejecutarlo. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador)
Marcas solamente la casilla de Create registry backup, el resto te aseguras de que no estén seleccionadas.
Presionas en Run.

Se abrirá el informe (DelFix.txt), puedes cerrarlo. Pero lo guardas por si en el futuro te lo pido/hace falta.

Seguidamente, CIERRAS TODOS LOS PROGRAMAS, vas a Inicio >> Ejecutar y escribes Notepad.exe

Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.

START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\MountPoints2: {dcf57f3d-3e86-11e3-be93-48d2241beca8} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\MountPoints2: {dcf57f3d-3e86-11e3-be93-48d2241beca8} - "D:\WD SmartWare.exe" autoplay=true
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RUNDLL32.EXE.lnk [2021-03-08]
ShortcutAndArgument: RUNDLL32.EXE.lnk -> C:\Windows\System32\rundll32.exe => C:\Users\JOSEAN~1\AppData\Local\Temp\GUMFIK~1.DLL,DwkG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN
Task: {048A8141-1B4B-4236-89CF-D40D9F6F99FB} - System32\Tasks\Microsoft\system.web.security.singlesignon.perient => RUNDLL32 C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll,eog_Pjaosih
Task: {18092F69-DE36-4B7C-9A80-D26AC2D4198F} - System32\Tasks\Firefox Default Browser Agent E6BC3156D8733D97 => C:\Users\JoseAntonio\AppData\Roaming\rftgevu.exe <==== ATENCIÓN
Task: {AE18C675-040D-48C9-AEF2-1E7876755A12} - \Microsoft\Windows\Setup\EOSNotify -> Ningún archivo <==== ATENCIÓN
Task: {B1E4E6BE-8B26-45EC-8C7F-525D454C8B38} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {B324FD4D-13F7-4B9C-AEE0-541C98C12B09} - System32\Tasks\Services\Diagnostic => C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\AutoIt3_x64.exe -> "C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\Settings.au3"
C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\
CHR HKLM\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path/update_url>
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
U1 avgbdisk; no ImagePath
U4 dmwappushservice; no ImagePath
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
2021-03-12 18:33 - 2021-03-12 18:35 - 000013030 _____ C:\DT-kill.txt
2021-03-12 18:32 - 2021-03-12 18:32 - 000000000 ____D C:\_DT-Kill
2021-03-11 01:23 - 2021-03-11 01:23 - 000000000 ___HD C:\$AV_AVG
2021-03-08 19:14 - 2021-03-08 19:14 - 000003778 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2021-03-08 19:14 - 2021-03-08 19:14 - 000003338 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2021-03-18 10:26 - 2013-04-20 04:30 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-03-12 16:30 - 2018-04-10 02:30 - 000000000 ____D C:\Program Files (x86)\AVG
2021-03-12 16:30 - 2018-04-10 02:27 - 000000000 ____D C:\ProgramData\AVG
2021-03-12 16:28 - 2018-04-10 02:28 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\Avg
2021-03-12 16:17 - 2018-04-10 02:31 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\AVG
2021-03-08 22:12 - 2019-05-20 16:45 - 000000000 ____D C:\Program Files (x86)\TNod
2018-09-28 10:06 - 2018-09-28 10:06 - 000000000 _____ () C:\Users\JoseAntonio\AppData\Local\oobelibMkey.log
2015-11-11 06:54 - 2015-06-15 09:24 - 000224768 _____ () [Archivo no firmado] [El archivo está en uso] C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll
AlternateDataStreams: C:\ProgramData\Reprise:whfqrelwxjetvcsjehf`dbeq`3126jfi [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"
SearchScopes: HKLM -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
Toolbar: HKLM-x32 - Sin Nombre - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Ningún archivo
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> Sin Nombre - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Ningún archivo
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Ningún archivo)
HKLM\...\StartupApproved\Run32: => "haleng"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\StartupFolder: => "RUNDLL32.EXE.lnk"

CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
END

Lo guardas con el nombre de FIXLIST.TXT en tu escritorio (MUY IMPORTANTE). Pues en caso contrario no funcionará el SCRIPT, ambos ficheros (FRST.exe y FIXLIST.TXT ) y deben de estar en la ubicación del ESCRITORIO.

El anterior Script de reparación es personalizado para la máquina en concreto para la cual se fabricó y está hecho específicamente por un miembro del Staff. Si se tiene un problema parecido, por favor abra su propio tema para recibir ayuda personalizada y específica. Utilizar Scripts de otros Sistemas puede causar daños graves en su ordenador.

Finalmente (OJO, sigues en MODO NORMAL AHORA):

Ejecutas nuevamente FRST.exe (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador).
Presionas sobre Fix/Corregir y esperas a que finalice el proceso. No hagas nada con el PC mientras este realizando dichas reparaciones, incluso si parece ser que se ha quedado colgado. No lo toques y esperas.
Cunado finalice, en el ESCRITORIO se creará el fichero FIXLOG.TXT lo traes en tu próxima respuesta.
Reinicias el ordenador en Modo Normal compruebas durante un rato el funcionamiento de este y comentas como sigue el problema inicialmente planteado.

Muy Importante Coloca el reporte que te he pedido como se muestra en la siguiente imagen:

Salu2.

negrosorolla · 19 Marzo, 2021 11:36

Hola @Marr0n perdona, pero enlace de descarga no funciona

Marr0n · 19 Marzo, 2021 15:24

Sí que funciona. Lo acabo de probar ahora mismo.

De todas formas como tu máquina está infectada vete a saber.

Prueba este:

negrosorolla · 19 Marzo, 2021 16:32

Hola @Marr0n esta funcionando bien, la doble tilde desapareció!, pero las pestañas emergentes continúan. Te adjunto fotografías de las que aparecieron cuando hice una búsqueda. (Todos los tildes de fueron puestos de manera normal por el teclado)

Te adjunto informe del FIX

Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 17-03-2021
Ejecutado por JoseAntonio (19-03-2021 13:01:43) Run:1
Ejecutado desde C:\Users\JoseAntonio\Desktop
Perfiles cargados: JoseAntonio & Administrador
Modo de Inicio: Normal
==============================================

fixlist contenido:
*****************
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricci�n <==== ATENCI�N
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\MountPoints2: {dcf57f3d-3e86-11e3-be93-48d2241beca8} - "D:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\MountPoints2: {dcf57f3d-3e86-11e3-be93-48d2241beca8} - "D:\WD SmartWare.exe" autoplay=true
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RUNDLL32.EXE.lnk [2021-03-08]
ShortcutAndArgument: RUNDLL32.EXE.lnk -> C:\Windows\System32\rundll32.exe => C:\Users\JOSEAN~1\AppData\Local\Temp\GUMFIK~1.DLL,DwkG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricci�n <==== ATENCI�N
HKLM\SOFTWARE\Policies\Google: Restricci�n <==== ATENCI�N
Task: {048A8141-1B4B-4236-89CF-D40D9F6F99FB} - System32\Tasks\Microsoft\system.web.security.singlesignon.perient => RUNDLL32 C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll,eog_Pjaosih
Task: {18092F69-DE36-4B7C-9A80-D26AC2D4198F} - System32\Tasks\Firefox Default Browser Agent E6BC3156D8733D97 => C:\Users\JoseAntonio\AppData\Roaming\rftgevu.exe <==== ATENCI�N
Task: {AE18C675-040D-48C9-AEF2-1E7876755A12} - \Microsoft\Windows\Setup\EOSNotify -> Ning�n archivo <==== ATENCI�N
Task: {B1E4E6BE-8B26-45EC-8C7F-525D454C8B38} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {B324FD4D-13F7-4B9C-AEE0-541C98C12B09} - System32\Tasks\Services\Diagnostic => C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\AutoIt3_x64.exe -> "C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\Settings.au3"
C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3\
CHR HKLM\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path/update_url>
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [hkhkiakolggnnicallabhkobalpeplpi] - <no Path/update_url>
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
U1 avgbdisk; no ImagePath
U4 dmwappushservice; no ImagePath
S3 huawei_enumerator; \SystemRoot\System32\drivers\ew_jubusenum.sys [X]
2021-03-12 18:33 - 2021-03-12 18:35 - 000013030 _____ C:\DT-kill.txt
2021-03-12 18:32 - 2021-03-12 18:32 - 000000000 ____D C:\_DT-Kill
2021-03-11 01:23 - 2021-03-11 01:23 - 000000000 ___HD C:\$AV_AVG
2021-03-08 19:14 - 2021-03-08 19:14 - 000003778 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2021-03-08 19:14 - 2021-03-08 19:14 - 000003338 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2021-03-18 10:26 - 2013-04-20 04:30 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-03-12 16:30 - 2018-04-10 02:30 - 000000000 ____D C:\Program Files (x86)\AVG
2021-03-12 16:30 - 2018-04-10 02:27 - 000000000 ____D C:\ProgramData\AVG
2021-03-12 16:28 - 2018-04-10 02:28 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\Avg
2021-03-12 16:17 - 2018-04-10 02:31 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\AVG
2021-03-08 22:12 - 2019-05-20 16:45 - 000000000 ____D C:\Program Files (x86)\TNod
2018-09-28 10:06 - 2018-09-28 10:06 - 000000000 _____ () C:\Users\JoseAntonio\AppData\Local\oobelibMkey.log
2015-11-11 06:54 - 2015-06-15 09:24 - 000224768 _____ () [Archivo no firmado] [El archivo est� en uso] C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll
AlternateDataStreams: C:\ProgramData\Reprise:whfqrelwxjetvcsjehf`dbeq`3126jfi [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`20hfm [0]
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`26hfm [0]
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Classes\.scr: AutoCADScriptFile => C:\WINDOWS\system32\notepad.exe "%1"
SearchScopes: HKLM -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> DefaultScope {39D870A5-357E-4266-9932-9A9ACE35E3B6} URL = 
SearchScopes: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> {460C3D19-B3D4-4964-A550-77D263B0CCCB} URL = 
Toolbar: HKLM-x32 - Sin Nombre - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Ning�n archivo
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ning�n archivo
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ning�n archivo
Toolbar: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> Sin Nombre - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Ning�n archivo
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Ning�n archivo)
HKLM\...\StartupApproved\Run32: => "haleng"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\StartupFolder: => "RUNDLL32.EXE.lnk"

CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
END
*****************

El punto de restauración fue creado correctamente.
Procesos cerrados correctamente.
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => eliminado correctamente
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge" => eliminado correctamente
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcf57f3d-3e86-11e3-be93-48d2241beca8} => eliminado correctamente
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{dcf57f3d-3e86-11e3-be93-48d2241beca8} => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => eliminado correctamente
C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RUNDLL32.EXE.lnk => movido correctamente
ShortcutAndArgument: RUNDLL32.EXE.lnk -> C:\Windows\System32\rundll32.exe => C:\Users\JOSEAN~1\AppData\Local\Temp\GUMFIK~1.DLL,DwkG => Error: Ninguna corrección automática encontrada para esta entrada.
HKLM\SOFTWARE\Policies\Mozilla => eliminado correctamente
HKLM\SOFTWARE\Policies\Google => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{048A8141-1B4B-4236-89CF-D40D9F6F99FB}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{048A8141-1B4B-4236-89CF-D40D9F6F99FB}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\system.web.security.singlesignon.perient => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\system.web.security.singlesignon.perient" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{18092F69-DE36-4B7C-9A80-D26AC2D4198F}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{18092F69-DE36-4B7C-9A80-D26AC2D4198F}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Firefox Default Browser Agent E6BC3156D8733D97 => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Firefox Default Browser Agent E6BC3156D8733D97" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AE18C675-040D-48C9-AEF2-1E7876755A12}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AE18C675-040D-48C9-AEF2-1E7876755A12}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\EOSNotify" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B1E4E6BE-8B26-45EC-8C7F-525D454C8B38}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1E4E6BE-8B26-45EC-8C7F-525D454C8B38}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B324FD4D-13F7-4B9C-AEE0-541C98C12B09}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B324FD4D-13F7-4B9C-AEE0-541C98C12B09}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Services\Diagnostic => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Services\Diagnostic" => eliminado correctamente
C:\Users\JoseAntonio\AppData\Local\Disk\AutoIt3 => movido correctamente
HKLM\SOFTWARE\Google\Chrome\Extensions\hkhkiakolggnnicallabhkobalpeplpi => eliminado correctamente
HKLM\SOFTWARE\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => eliminado correctamente
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\hkhkiakolggnnicallabhkobalpeplpi => eliminado correctamente
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\iikflkcanblccfahdhdonehdalibjnif => eliminado correctamente
HKLM\System\CurrentControlSet\Services\avgbdisk => eliminado correctamente
avgbdisk => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\dmwappushservice => eliminado correctamente
dmwappushservice => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\huawei_enumerator => eliminado correctamente
huawei_enumerator => servicio eliminado correctamente
C:\DT-kill.txt => movido correctamente
C:\_DT-Kill => movido correctamente
C:\$AV_AVG => movido correctamente
C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn => movido correctamente
C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime => movido correctamente
C:\ProgramData\boost_interprocess => movido correctamente
C:\Program Files (x86)\AVG => movido correctamente
C:\ProgramData\AVG => movido correctamente
C:\Users\JoseAntonio\AppData\Local\Avg => movido correctamente
C:\Users\JoseAntonio\AppData\Roaming\AVG => movido correctamente
C:\Program Files (x86)\TNod => movido correctamente
C:\Users\JoseAntonio\AppData\Local\oobelibMkey.log => movido correctamente
C:\Users\JoseAntonio\AppData\Local\VoicePush\LBPlu_GPRXY2.dll => movido correctamente
C:\ProgramData\Reprise => ":whfqrelwxjetvcsjehf`dbeq`3126jfi" ADS eliminado correctamente
C:\ProgramData\Reprise => ":wupeogjxlctlfudivq`qsp`20hfm" ADS eliminado correctamente
C:\ProgramData\Reprise => ":wupeogjxldtlfudivq`qsp`26hfm" ADS eliminado correctamente
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Classes\AutoCADScriptFile => eliminado correctamente
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Classes\.scr => eliminado correctamente
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => valor restaurado correctamente
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => valor restaurado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => eliminado correctamente
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB} => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-500\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => eliminado correctamente
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{460C3D19-B3D4-4964-A550-77D263B0CCCB} => eliminado correctamente
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => eliminado correctamente
HKLM\Software\Wow6432Node\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => eliminado correctamente
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKLM\Software\Wow6432Node\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-500\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}" => eliminado correctamente
HKLM\Software\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => eliminado correctamente
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Ning�n archivo) => Error: Ninguna corrección automática encontrada para esta entrada.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\haleng" => eliminado correctamente
"HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\haleng" => no encontrado
"C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RUNDLL32.EXE.lnk" => no encontrado
"HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\RUNDLL32.EXE.lnk" => eliminado correctamente

========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= Final de CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

No se puede realizar ninguna operaci¢n en Conexi¢n de red Bluetooth mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local* 13 mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local* 12 mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Ethernet mientras los medios
est‚n desconectados.

Adaptador de Ethernet Conexi¢n de red Bluetooth:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de LAN inal mbrica Conexi¢n de  rea local* 13:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de LAN inal mbrica Conexi¢n de  rea local* 12:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de Ethernet Ethernet:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de LAN inal mbrica Wi-Fi:

   Sufijo DNS espec¡fico para la conexi¢n. . : 
   V¡nculo: direcci¢n IPv6 local. . . : fe80::2deb:a437:e9ef:4b7f%2
   Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.0.6
   M scara de subred . . . . . . . . . . . . : 255.255.255.0
   Puerta de enlace predeterminada . . . . . : 192.168.0.1

Adaptador de t£nel isatap.{9D641420-7B7F-4E74-BCD1-D06AECADC8B9}:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.7.9600 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= Final de CMD: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= Final de CMD: =========


========= netsh advfirewall reset =========

Aceptar


========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar


========= Final de CMD: =========


========= netsh int ipv4 reset =========

Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


========= netsh int ipv6 reset =========

Interfaz se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-3605969310-3002992618-3777335900-500\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========

C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19264631 B
Java, Flash, Steam htmlcache => 595 B
Windows/system/drivers => 7652722 B
Edge => 0 B
Chrome => 462430515 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 147492 B
systemprofile32 => 147492 B
LocalService => 16935326 B
NetworkService => 18352542 B
JoseAntonio => 19436519 B
Administrator => 19448393 B

RecycleBin => 507392 B
EmptyTemp: => 546.2 MB datos temporales eliminados.

================================


El sistema necesita reiniciarse.

==== Final de Fixlog 13:03:17 ====

negrosorolla · 19 Marzo, 2021 16:43

ice_screenshot_20210319-131824

Marr0n · 19 Marzo, 2021 21:10

Hola @negrosorolla

Revisando el log del FIX y todo lo que me dices vamos por buen camino, pero aún no hemos acabado. Pero ya hemos petado el virus del doble acento y otras cosas. Tienes un buen zoológico de malware.

Vuelves a ejecutar FRST tal y como te dije en:

Y traes de nuevo ambos logs.

Salu2.

negrosorolla · 19 Marzo, 2021 22:29

Hola @Marr0n

jajajajaja, es que no le había hecho nada como esto en 8 años que tiene. Muchas gracias por toda tu ayuda.

Te adjunto los logs

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 17-03-2021
Ejecutado por JoseAntonio (administrador) sobre MANOMAESTRA (SAMSUNG ELECTRONICS CO., LTD. 3570R/370R/470R/450R/510R/4450RV) (19-03-2021 18:37:13)
Ejecutado desde C:\Users\JoseAntonio\Desktop
Perfiles cargados: JoseAntonio
Platform: Windows 8.1 Single Language (Update) (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Chrome
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.) C:\Users\JoseAntonio\AppData\Local\Akamai\netsession_win.exe <2>
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Atheros) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Autodesk, Inc -> Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe
(Autodesk, Inc.) [Archivo no firmado] C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Huawei Technologies Co., Ltd. -> ) C:\ProgramData\MobileBrServ\mbbService.exe
(Intel Corporation - Intel® Management Engine Firmware -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation - Software and Firmware Products -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel(R) Corporation) [Archivo no firmado] C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Memeo) [Archivo no firmado] C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Qualcomm Atheros -> ) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Qualcomm Atheros -> Atheros Communications) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasySettingsCmdServer.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics CO., LTD.) C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
(Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(WDC) [Archivo no firmado] C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1353432 2013-09-26] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2793200 2013-11-28] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation - Intel® Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [175504 2020-11-03] (ESET, spol. s r.o. -> ESET)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [331064 2020-10-16] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] => C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-13] (Intel® Services Manager -> Intel Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe [310640 2013-03-06] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [WD Quick View] => C:\Program Files (x86)\Western Digital\WD Quick View\WDDMStatus.exe [5571944 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Archivo no firmado]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [134784 2014-06-17] (Qualcomm Atheros -> Atheros Communications) [Archivo no firmado]
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [Akamai NetSession Interface] => C:\Users\JoseAntonio\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [Google Update] => C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\GoogleUpdateCore.exe [216392 2021-02-05] (Google LLC -> Google LLC)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [31867792 2020-05-19] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [KiesPreload] => C:\Program Files (x86)\Samsung\Kies\Kies.exe [1510768 2013-03-06] (Samsung Electronics CO., LTD. -> Samsung)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [Akamai NetSession Interface] => C:\Users\JoseAntonio\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai NetSession Client, Akamai Technologies, Inc. -> Akamai Technologies, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc -> Autodesk, Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Run: [Google Update] => C:\Users\JoseAntonio\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Policies\Explorer: [] 
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [55872 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\EPSON L210 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMI2E.DLL [120320 2015-01-14] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EPSON L355 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMI4E.DLL [120320 2014-07-29] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-16] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
HKLM\Software\...\Authentication\Credential Provider Filters: [{ACFC407B-266C-8504-8DAE-F3E276336E4B}] -> C:\WINDOWS\system32\AthCredentialProvider.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk [2017-05-25]
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (Western Digital Technologies Inc. -> WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk [2017-05-25]
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital Technologies Inc. -> Western Digital)

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {009CFA17-0143-48EB-83A6-8BE68EE1DDC3} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {11CC128F-B86F-4FB5-BF58-82F0E3E177DA} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3605969310-3002992618-3777335900-1001Core => C:\Users\JoseAntonio\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {11EFA489-534F-4F81-97A1-1809DF8491D6} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473-Logon => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
Task: {276A1BAC-64F8-4165-A600-E94F44D9CB07} - System32\Tasks\SamsungLinkPC => C:\Program Files (x86)\Samsung\HomeSync Lite\RefreshToken.exe
Task: {5764D2E2-CB54-47BD-8465-90BE9A11CE52} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3605969310-3002992618-3777335900-1001UA => C:\Users\JoseAntonio\AppData\Local\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {74AA02F1-B3F0-4913-8491-DEEBEBC5A45D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {7F57BA2F-6AD1-48F6-96B5-9DAF6A0D659C} - System32\Tasks\advRecovery => C:\Program Files\Samsung\Recovery\WCScheduler.exe [876320 2016-07-05] (Samsung Electronics CO., LTD. -> SEC)
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {8E84E97B-6FFF-4EF3-812A-6B0637E0BA45} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {92212E9E-454F-4DB3-AFFA-10092C6ECBF9} - System32\Tasks\SUPatchForW10Up => C:\ProgramData\Samsung\SamsungUpdatePatch\SUPatchForW10Up.exe [3148800 2015-08-18] (Samsung Electronics CO., LTD.) [Archivo no firmado]
Task: {A608479D-78D6-4107-AC3C-5B84E6EFEE8B} - System32\Tasks\[email protected] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {AB8BBF2E-CDD9-41C3-988C-298659B2A9E6} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton Internet Security\Upgrade.exe [2059272 2015-07-27] (Symantec Corporation -> Symantec Corporation)
Task: {AC2DB710-542D-45C6-91B6-604676412AAE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-29] (Google Inc -> Google Inc.)
Task: {B961F7B9-8453-49C4-A399-315587E0FD54} - System32\Tasks\SideSyncAutoRun => C:\Program Files (x86)\Samsung\Side Sync\SideSync.exe
Task: {BF1741AF-11B3-449E-A706-63EE2C89AE65} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {C5FA61B4-0605-4DD6-BC68-75BCC36586D5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {E46D0364-A2CF-4405-8CB9-C44CFD818FF9} - \EOSv3 Scheduler onLogOn -> Ningún archivo <==== ATENCIÓN
Task: {F41B9620-A28B-4C2D-A753-72E09265A23E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {F8290952-F0E1-4573-A652-0055A8244672} - \EOSv3 Scheduler onTime -> Ningún archivo <==== ATENCIÓN
Task: {FF0BC8D8-746A-4EAE-A417-9D6FE9B3623B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-05] (Piriform Software Ltd -> Piriform)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 190.160.0.15 200.83.1.5 190.160.0.13
Tcpip\..\Interfaces\{9D641420-7B7F-4E74-BCD1-D06AECADC8B9}: [DhcpNameServer] 190.160.0.15 200.83.1.5 190.160.0.13

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\JoseAntonio\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-18]
Edge HomePage: Default -> hxxp://home.sii.cl/

FireFox:
========
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2019-08-09] [Heredado] [no firmado]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-03] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-16] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-16] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~2\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3503.0728 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-07-27] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-03] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: www.sii.cl/CSignedXmlAutII -> C:\Program Files (x86)\Firma Electronica SII\npCSignedXmlAutII.dll [2013-08-21] (Servicio de Impuestos Internos -> Servicio de Impuestos Internos) [Archivo no firmado]
FF Plugin HKU\S-1-5-21-3605969310-3002992618-3777335900-500: intel.com/AppUp -> C:\Program Files (x86)\Intel\IntelAppStore\bin\npAppUp.dll [2012-07-13] (Intel) [Archivo no firmado]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default [2021-03-19]
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxps://www.google.com/","hxxp://www.google.com"
CHR Extension: (Google Drive) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Búsqueda de Google) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-26]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-08]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-04]
CHR Extension: (Gmail) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-04]
CHR Extension: (VCleanDoc) - C:\ProgramData\Zaroqr\Oyvw [2021-03-08]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [1145928 2016-02-24] (Autodesk, Inc -> Autodesk Inc.)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [172104 2013-01-26] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-09-24] (Apple Inc. -> Apple Inc.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [322176 2014-06-17] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) [Archivo no firmado]
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [Archivo no firmado]
R2 Easy Launcher; C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe [1593664 2015-06-19] (Samsung Electronics CO., LTD. -> Samsung Electronics CO., LTD.)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-11-03] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2595360 2020-11-03] (ESET, spol. s r.o. -> ESET)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [Archivo no firmado]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel(R) Update Manager -> Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-03-18] (Malwarebytes Inc -> Malwarebytes)
R2 Mobile Broadband HL Service; C:\ProgramData\MobileBrServ\mbbservice.exe [242256 2014-08-20] (Huawei Technologies Co., Ltd. -> )
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4369680 2016-01-22] (Symantec Corporation -> Symantec Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Archivo no firmado]
R2 SWUpdateService; C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe [3298600 2018-03-02] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 WDBackup; C:\Program Files (x86)\Western Digital\WD SmartWare\WDBackupEngine.exe [1049464 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [129536 2009-11-13] (WDC) [Archivo no firmado]
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [314744 2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-05-10] (Microsoft Corporation -> Microsoft Corporation)
R2 WDSmartWareBackgroundService; C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [Archivo no firmado]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-05-10] (Microsoft Corporation -> Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.242\WsAppService.exe [495720 2018-08-29] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [323584 2014-06-17] (Atheros) [Archivo no firmado]

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R3 athr; C:\WINDOWS\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Microsoft Windows Hardware Compatibility Publisher -> Qualcomm Atheros Communications, Inc.)
R3 BTATH_HID; C:\WINDOWS\system32\DRIVERS\btath_hid.sys [223432 2014-06-17] (Qualcomm Atheros -> Qualcomm Atheros)
R1 cbfs3; C:\windows\system32\drivers\cbfs3.sys [352456 2012-08-06] (EldoS Corporation -> EldoS Corporation)
R1 ccSet_NARA; C:\WINDOWS\system32\drivers\NARAx64\0401000.00E\ccSetx64.sys [168608 2012-05-25] (Symantec Corporation -> Symantec Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [160992 2020-10-27] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [109360 2020-10-27] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [190464 2020-10-27] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43720 2020-10-27] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70048 2020-10-27] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107784 2020-10-27] (ESET, spol. s r.o. -> ESET)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220616 2021-03-18] (Malwarebytes Inc -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-03-18] (Malwarebytes Inc -> Malwarebytes)
S3 Netaapl; C:\WINDOWS\system32\DRIVERS\netaapl64.sys [23040 2014-08-15] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-08-09] (Corel Corporation -> Corel Corporation)
R3 RadioHIDMini; C:\WINDOWS\System32\drivers\RadioHIDMini.sys [23408 2012-07-27] (Samsung Electronics CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-05-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-05-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-05-10] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2021-03-19 13:13 - 2021-03-19 13:13 - 000000000 ____D C:\ProgramData\boost_interprocess
2021-03-19 13:12 - 2021-03-19 13:12 - 000000000 ___RD C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2021-03-19 13:01 - 2021-03-19 13:03 - 000020718 _____ C:\Users\JoseAntonio\Desktop\Fixlog.txt
2021-03-19 12:58 - 2021-03-19 12:58 - 000000261 _____ C:\Users\JoseAntonio\Desktop\DelFix.txt
2021-03-19 12:58 - 2021-03-19 12:58 - 000000261 _____ C:\DelFix.txt
2021-03-19 12:58 - 2021-03-19 12:58 - 000000000 ____D C:\WINDOWS\ERUNT
2021-03-19 12:54 - 2021-03-19 12:54 - 000781312 _____ C:\Users\JoseAntonio\Desktop\delfix_1.010.exe
2021-03-18 21:54 - 2021-03-18 21:54 - 000220616 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2021-03-18 21:50 - 2021-03-18 21:52 - 000074616 _____ C:\Users\JoseAntonio\Desktop\Addition.txt
2021-03-18 21:47 - 2021-03-19 18:42 - 000030626 _____ C:\Users\JoseAntonio\Desktop\FRST.txt
2021-03-18 21:45 - 2021-03-18 21:45 - 002300928 _____ (Farbar) C:\Users\JoseAntonio\Desktop\FRST64.exe
2021-03-18 19:19 - 2021-03-18 19:25 - 000000000 ____D C:\FSTool
2021-03-18 19:18 - 2021-03-18 19:18 - 001599815 _____ C:\Users\JoseAntonio\Desktop\IFS.exe
2021-03-18 00:33 - 2021-03-18 00:33 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-03-18 00:33 - 2021-03-18 00:33 - 000001976 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-03-18 00:33 - 2021-03-18 00:33 - 000001964 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-03-18 00:33 - 2021-03-18 00:32 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-03-18 00:30 - 2021-03-18 00:31 - 000007220 _____ C:\Users\JoseAntonio\Desktop\cc_20210318_003047.reg
2021-03-17 23:56 - 2021-03-17 23:56 - 000003870 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-03-17 23:56 - 2021-03-17 23:56 - 000002826 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-03-17 23:55 - 2021-03-19 13:12 - 000000000 ____D C:\Program Files\CCleaner
2021-03-17 23:55 - 2021-03-17 23:55 - 000000834 _____ C:\ProgramData\Desktop\CCleaner.lnk
2021-03-17 23:55 - 2021-03-17 23:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-03-17 16:01 - 2021-03-19 18:34 - 002808514 _____ C:\Users\JoseAntonio\Desktop\Archivos recuperados.xlsx
2021-03-16 15:27 - 2021-03-17 21:32 - 028964182 _____ C:\Users\JoseAntonio\Desktop\deleted_files.txt
2021-03-16 13:07 - 2021-03-16 13:27 - 000000000 ____D C:\Program Files\Recuva
2021-03-16 13:07 - 2021-03-16 13:07 - 000001670 _____ C:\ProgramData\Desktop\Recuva.lnk
2021-03-16 13:07 - 2021-03-16 13:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2021-03-16 13:06 - 2021-03-16 13:06 - 005562976 _____ (Piriform Ltd) C:\Users\JoseAntonio\Desktop\rcsetup153-1.53.1087.exe
2021-03-16 09:43 - 2021-03-16 13:08 - 000001863 _____ C:\ProgramData\Desktop\UsbFix Anti-Malware.lnk
2021-03-16 09:30 - 2021-03-16 09:30 - 004868504 _____ (SOSVirus) C:\Users\JoseAntonio\Desktop\UsbFix_2020.exe
2021-03-16 08:48 - 2021-03-16 08:50 - 008463216 _____ (Malwarebytes) C:\Users\JoseAntonio\Desktop\adwcleaner_8.1.exe
2021-03-15 15:52 - 2021-03-15 15:52 - 000000000 ____D C:\Program Files\Malwarebytes
2021-03-15 15:49 - 2021-03-15 15:49 - 002532872 _____ C:\Users\JoseAntonio\Desktop\Manual de Malwarebytes Anti-Malware - Guías, manuales, tutoriales y más - ForoSpyware.pdf
2021-03-15 15:48 - 2021-03-15 15:48 - 002084016 _____ (Malwarebytes) C:\Users\JoseAntonio\Desktop\MBSetup.exe
2021-03-15 15:44 - 2021-03-15 15:44 - 000015666 _____ C:\Users\JoseAntonio\Desktop\cc_20210315_154425.reg
2021-03-15 14:56 - 2021-03-15 14:56 - 030972600 _____ (Piriform Software Ltd) C:\Users\JoseAntonio\Desktop\ccsetup577.exe
2021-03-15 14:55 - 2021-03-15 14:55 - 000721728 _____ C:\Users\JoseAntonio\Desktop\CCleaner. Manual de uso simple y avanzado - Guías, manuales, tutoriales y más - ForoSpyware.pdf
2021-03-15 09:22 - 2021-03-15 09:25 - 000000000 ____D C:\AdwCleaner
2021-03-15 08:55 - 2021-03-19 18:41 - 000000000 ____D C:\FRST
2021-03-11 16:43 - 2021-03-11 16:43 - 003129462 _____ C:\Users\JoseAntonio\Desktop\OGUC-Junio-2020-D.S.-N°32-D.O.-13-06-2020.pdf
2021-03-09 19:13 - 2021-02-12 23:12 - 002058752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-03-09 19:12 - 2021-02-12 23:24 - 000073728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-03-09 19:04 - 2021-02-12 23:47 - 000088064 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-03-09 19:04 - 2021-02-12 23:26 - 002132992 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-03-08 18:30 - 2021-03-08 18:30 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\mbam
2021-03-08 18:28 - 2021-03-08 18:28 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-03-08 14:59 - 2021-03-18 17:24 - 000000000 ___HD C:\ProgramData\Zaroqr
2021-03-08 13:45 - 2021-03-19 13:10 - 000008192 _____ C:\WINDOWS\SysWOW64\WDPABKP.dat
2021-03-08 12:51 - 2021-03-08 12:51 - 000163310 _____ C:\ProgramData\141983.141983
2021-03-08 12:50 - 2021-03-18 09:39 - 000000000 ____D C:\Users\JoseAntonio\Documents\VlcpVideoV1.0.1
2021-03-08 12:50 - 2021-03-08 12:52 - 000000000 ___HD C:\ProgramData\Windows Host
2021-03-08 12:50 - 2021-03-08 12:51 - 000000000 ____D C:\ProgramData\72
2021-03-08 12:50 - 2021-03-08 12:50 - 001564823 _____ C:\ProgramData\7271
2021-03-08 12:48 - 2021-03-19 13:02 - 000000000 __SHD C:\Users\JoseAntonio\AppData\Local\Disk
2021-03-08 12:48 - 2021-03-19 13:02 - 000000000 ____D C:\WINDOWS\system32\Tasks\Services
2021-03-08 12:48 - 2021-03-08 12:48 - 000000000 ____D C:\ProgramData\Riate
2021-03-08 12:48 - 2021-03-08 12:48 - 000000000 ____D C:\ProgramData\Posse
2021-03-08 12:47 - 2021-03-08 12:47 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Bazertu
2021-03-08 12:44 - 2021-03-08 12:44 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Konteres
2021-03-02 19:14 - 2021-03-02 19:14 - 000000000 ____D C:\Users\JoseAntonio\Desktop\varios
2021-03-01 17:36 - 2021-03-01 17:38 - 495184352 _____ (Dimension5 Techs, Inc.) C:\Users\JoseAntonio\Downloads\D5_Render_installer-1.8.0.0277.exe
2021-02-25 15:29 - 2005-03-22 18:29 - 000089089 _____ C:\Users\JoseAntonio\Downloads\Sobrecarga_CI32B.pdf
2021-02-25 15:28 - 2021-02-25 15:28 - 000072593 _____ C:\Users\JoseAntonio\Downloads\NCh1537._Sobrecarga.zip
2021-02-18 12:44 - 2021-02-18 12:44 - 000000000 ____D C:\Users\JoseAntonio\Documents\Zoom
2021-02-18 12:42 - 2021-02-18 12:42 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2021-03-19 17:48 - 2019-10-03 06:40 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2021-03-19 17:08 - 2014-06-26 18:20 - 000000000 ____D C:\Manomaestra
2021-03-19 13:18 - 2013-10-27 13:08 - 013594624 ___SH C:\Users\JoseAntonio\Desktop\Thumbs.db
2021-03-19 13:17 - 2020-04-09 13:23 - 000000000 ____D C:\Users\JoseAntonio\log
2021-03-19 13:17 - 2013-04-20 04:18 - 000000000 ____D C:\ProgramData\WinClon
2021-03-19 13:12 - 2017-05-10 23:39 - 000000000 ___DO C:\Users\JoseAntonio\OneDrive
2021-03-19 13:06 - 2013-08-22 11:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-19 13:06 - 2013-08-22 10:25 - 000262144 ___SH C:\WINDOWS\system32\config\BBI
2021-03-19 13:03 - 2017-07-26 12:04 - 000000000 ____D C:\Users\JoseAntonio\AppData\LocalLow\Temp
2021-03-19 13:02 - 2015-11-11 06:54 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\VoicePush
2021-03-19 02:00 - 2013-12-07 01:30 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\Adobe
2021-03-18 10:27 - 2013-12-07 12:09 - 000000000 ____D C:\Users\JoseAntonio\AppData\Local\CrashDumps
2021-03-18 09:39 - 2016-03-08 16:32 - 000000000 ____D C:\Users\JoseAntonio\Downloads\eset antivirus
2021-03-18 08:52 - 2013-12-07 01:35 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3605969310-3002992618-3777335900-1001
2021-03-18 00:29 - 2013-08-22 10:36 - 000000000 ____D C:\WINDOWS\Inf
2021-03-16 21:11 - 2013-12-07 02:56 - 000002202 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-16 21:11 - 2013-12-07 02:56 - 000002161 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2021-03-16 13:42 - 2017-05-10 22:35 - 000000000 ____D C:\Users\JoseAntonio
2021-03-15 10:38 - 2020-07-02 00:19 - 000002205 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-15 10:38 - 2020-07-02 00:19 - 000002164 _____ C:\ProgramData\Desktop\Microsoft Edge.lnk
2021-03-15 09:41 - 2019-04-08 20:32 - 000000000 ____D C:\ProgramData\Wondershare
2021-03-15 09:41 - 2019-04-08 20:32 - 000000000 ____D C:\Program Files\Wondershare
2021-03-15 09:25 - 2013-04-20 04:07 - 000000000 ____D C:\ProgramData\Samsung
2021-03-15 09:25 - 2013-04-20 01:42 - 000000000 ____D C:\Program Files (x86)\Samsung
2021-03-15 07:16 - 2018-09-04 13:23 - 000015824 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
2021-03-12 17:49 - 2017-05-12 15:03 - 000000000 ____D C:\WINDOWS\Minidump
2021-03-10 15:06 - 2012-07-26 04:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-10 10:26 - 2013-08-22 12:36 - 000000000 ____D C:\WINDOWS\rescache
2021-03-10 08:05 - 2013-08-22 11:44 - 005193064 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-09 22:09 - 2013-08-22 12:36 - 000000000 ___RD C:\WINDOWS\ToastData
2021-03-09 22:09 - 2013-08-22 12:36 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-09 22:09 - 2013-08-22 12:36 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-09 17:36 - 2013-12-08 23:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-09 17:19 - 2013-12-08 23:33 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-08 22:12 - 2017-05-10 22:35 - 000000000 ____D C:\Users\Administrator
2021-03-08 12:51 - 2019-07-08 18:12 - 000007600 _____ C:\Users\JoseAntonio\AppData\Local\Resmon.ResmonCfg
2021-03-05 11:44 - 2019-10-03 06:40 - 000003450 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2021-03-04 08:31 - 2020-07-02 00:18 - 000003552 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-04 08:31 - 2020-07-02 00:18 - 000003424 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-02 16:07 - 2019-06-11 19:26 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Abvent_Artlantis5
2021-02-18 12:42 - 2020-07-30 17:07 - 000001953 _____ C:\Users\JoseAntonio\Desktop\Zoom.lnk
2021-02-18 12:42 - 2020-05-29 21:14 - 000000000 ____D C:\Users\JoseAntonio\AppData\Roaming\Zoom

==================== Archivos en la raíz de algunos directorios ========

2021-03-19 17:48 - 2021-03-19 17:48 - 000000000 _____ () C:\Users\JoseAntonio\AppData\Local\oobelibMkey.log
2019-07-08 18:12 - 2021-03-08 12:51 - 000007600 _____ () C:\Users\JoseAntonio\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)


LastRegBack: 2021-03-19 13:37
==================== Final de FRST.txt ========================

negrosorolla · 19 Marzo, 2021 22:29

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 17-03-2021
Ejecutado por JoseAntonio (19-03-2021 18:43:47)
Ejecutado desde C:\Users\JoseAntonio\Desktop
Windows 8.1 Single Language (Update) (X64) (2017-05-11 02:28:14)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-3605969310-3002992618-3777335900-500 - Administrator - Disabled) => C:\Users\Administrator
HomeGroupUser$ (S-1-5-21-3605969310-3002992618-3777335900-1008 - Limited - Enabled)
Invitado (S-1-5-21-3605969310-3002992618-3777335900-501 - Limited - Disabled)
JoseAntonio (S-1-5-21-3605969310-3002992618-3777335900-1001 - Administrator - Enabled) => C:\Users\JoseAntonio

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: ESET Security (Disabled - Up to date) {89B55CC4-3881-78B2-11E2-479AE0371896}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: ESET Security (Disabled - Up to date) {32D4BD20-1EBB-773C-2B52-7CE89BB0522B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Enabled) {B18EDDE1-72EE-79EA-3ABD-EEAF1EE45FED}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Adobe Acrobat X Pro - English, Français, Deutsch (HKLM-x32\...\{AC76BA86-1033-F400-7760-000000000005}) (Version: 10.1.16 - Adobe Systems)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Creative Suite 6 Master Collection (HKLM-x32\...\{E8AD3069-9EB7-4BA8-8BFE-83F4E69355C0}) (Version: 6 - Adobe Systems Incorporated)
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version:  - Adobe)
Adobe Photoshop Elements 11 (HKLM-x32\...\Adobe Photoshop Elements 11) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Akamai NetSession Interface (HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\Akamai) (Version:  - Akamai Technologies, Inc)
AMD Catalyst Install Manager (HKLM\...\{E1E7E13D-EE28-979F-1303-E1E3DBD2CE77}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Apple Application Support (32 bits) (HKLM-x32\...\{9738288C-21BC-4F54-AB4F-72F059339376}) (Version: 8.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{DEB339C1-2687-43AB-816A-8714F3E26846}) (Version: 8.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{F9CEF01A-3907-4614-824F-CF5D3E4675EF}) (Version: 14.1.0.35 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
Artlantis Studio 5.1.2.5 (64 bit) (HKLM\...\Artlantis Studio 5 (64 bit)) (Version: 5.1.2.5 - Abvent R&D)
AutoCAD 2014 - English (HKLM\...\{5783F2D7-D001-0000-0102-0060B0CE6BBA}) (Version: 19.1.18.0 - Autodesk) Hidden
Autodesk 360 (HKLM\...\{52B28CAD-F49D-47BA-9FFE-29C2E85F0D0B}) (Version: 4.0.27.1 - Autodesk)
Autodesk App Manager (HKLM-x32\...\{C070121A-C8C5-4D52-9A7D-D240631BD433}) (Version: 1.1.0 - Autodesk)
Autodesk Application Manager (HKLM-x32\...\Autodesk Application Manager) (Version: 5.0.142.14 - Autodesk)
Autodesk AutoCAD 2014 - English (HKLM\...\AutoCAD 2014 - English) (Version: 19.1.18.0 - Autodesk)
Autodesk BIM 360 Revit 2016 Add-in 64 bit (HKLM\...\{C5A83116-8654-47A3-A3B1-B76905C8A198}) (Version: 4.35.3969 - Autodesk)
Autodesk Content Service (HKLM-x32\...\Autodesk Content Service) (Version: 3.1.3.0 - Autodesk)
Autodesk Content Service Language Pack (HKLM-x32\...\{62F029AB-85F2-0001-866A-9FC0DD99DDBC}) (Version: 3.1.3.0 - Autodesk) Hidden
Autodesk Featured Apps (HKLM-x32\...\{F732FEDA-7713-4428-934B-EF83B8DD65D0}) (Version: 1.1.0 - Autodesk)
Autodesk Material Library 2014 (HKLM-x32\...\{644F9B19-A462-499C-BF4D-300ABC2A28B1}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2014 (HKLM-x32\...\{51BF3210-B825-4092-8E0D-66D689916E02}) (Version: 4.0.19.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Low Resolution Image Library 2016 (HKLM-x32\...\{FA5DF4D1-CD59-4183-B3D4-779A56498786}) (Version: 6.3.0.18 - Autodesk)
Autodesk Material Library Medium Resolution Image Library 2016 (HKLM-x32\...\{415A5A54-325E-4815-9940-62A889CA3877}) (Version: 6.3.0.18 - Autodesk)
Autodesk Revit 2016 (HKLM\...\Autodesk Revit 2016) (Version: 16.0.490.0 - Autodesk)
Autodesk Revit Content Libraries 2016 - Español (Spanish) (HKLM\...\Autodesk Revit Content Libraries 2016 - Español (Spanish)) (Version: 16.0.490.0 - Autodesk)
Autodesk Workflows 2016 (HKLM\...\{535CDED0-D690-4738-83EE-09056A365BAC}) (Version: 6.3.0.18 - Autodesk, Inc.)
Bitcasa version 0.9.20.4135 (HKLM\...\{EDA09459-AD7D-4434-BA0C-647F6703EA12}_is1) (Version: 0.9.20.4135 - Bitcasa Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.70.1080 - AB Team, d.o.o.)
CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Drawing Purge (HKLM-x32\...\{F1BF1334-162A-407F-8CDD-73D9917E2AF9}) (Version: 8.0.0.0 - Ajilal Vijayan)
Easy File Share (HKLM-x32\...\{A7C37D4B-F37A-42E8-9B6A-B28C18AD4C12}) (Version: 1.3.6 - Samsung Electronics CO.,LTD.)
Epic Games Launcher (HKLM-x32\...\{3A595C95-121D-4EB0-8D57-C7A309BA6C09}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
E-POP (HKLM-x32\...\{F06DD8D9-9DC8-430C-835C-C9BF21E05CC1}) (Version: 1.0.1 - Samsung Electronics CO., LTD.)
EPSON L210 Series Printer Uninstall (HKLM\...\EPSON L210 Series) (Version:  - SEIKO EPSON Corporation)
EPSON L355 Series Printer Uninstall (HKLM\...\EPSON L355 Series) (Version:  - SEIKO EPSON Corporation)
ESET Security (HKLM\...\{0813F772-F554-4DA9-9CEA-ABCE6321BDFD}) (Version: 14.0.22.0 - ESET, spol. s r.o.)
FARO LS 1.1.501.0 (64bit) (HKLM-x32\...\{8A470330-70B2-49AD-86AF-79885EF9898A}) (Version: 5.1.0.30630 - FARO Scanner Production)
Firma Electronica SII versión 1.3 (HKLM-x32\...\{A6B16D24-EF9D-40D6-8F4D-0D96AE815ACB}_is1) (Version: 1.3 - Servicio de Impuestos Internos)
Foto-galerija (HKLM-x32\...\{175B4B56-63F1-464E-8286-4309E0A52395}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Fotoğraf Galerisi (HKLM-x32\...\{35FA69FA-49DD-4BDF-8140-7DC2C4472C45}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galeria de Fotos (HKLM-x32\...\{46AEE281-3436-46EF-A36D-163F7125A290}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Galería de fotos (HKLM-x32\...\{959BC6D1-38C8-441F-9466-9ECCD4E68413}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 89.0.4389.90 - Google LLC)
Google Earth Pro (HKLM\...\{FB8010D4-05F4-420D-8DFC-2F911A6DD100}) (Version: 7.3.3.7786 - Google)
Google Video Support Plugin (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 19.12.1000.0 - Google, LLC.)
Help Desk (HKLM\...\{AEC9D273-E162-4614-83F1-722B8C74B185}) (Version: 1.0.96 - Samsung Electronics CO., LTD.)
Icecream Screen Recorder versión 6.16 (HKLM-x32\...\{7ADEC622-3230-4C9A-9DCE-9BD462B74095}_is1) (Version: 6.16 - Icecream Apps)
Intel AppUp(SM) center (HKLM-x32\...\Intel AppUp(SM) center 33070) (Version: 3.6.1.33070.11 - Intel)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{3DAC4F8C-80E6-4204-8A58-747FA4CBAA03}) (Version: 16.0.246 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.15.1730 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3368 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Intel(R) Update Manager (HKLM-x32\...\{7224B7CE-196C-4E2A-A1AE-1D7BF259FD36}) (Version: 3.4.1942 - Intel Corporation)
iTunes (HKLM\...\{AAAFBE40-9E14-491D-B619-70828F693077}) (Version: 12.10.10.2 - Apple Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Lumion 8.0 (HKLM\...\Lumion 8.0_is1) (Version: 8.0 - Act-3D B.V.)
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.54 - Microsoft Corporation)
Microsoft Office Home and Student 2010 (HKLM-x32\...\Office14.SingleImage) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.26.01.03 - Huawei Technologies Co.,Ltd)
Movie Maker (HKLM-x32\...\{18FE3424-7C22-4EDE-A3FD-414760CC363B}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{302933F3-E6AD-414D-AB96-A18DBB979B1D}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{61889FC7-9738-439A-96B3-17AF981BDDEF}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{AEBE7912-AA50-42EB-BBDA-AB352C4D8FAA}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{D71BC54E-A4E6-4E06-866C-FD6EE16EA187}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{E1DA4302-1C06-4533-AF6D-9D68B01FCB34}) (Version: 16.4.3503.0728 - Microsoft Corporation) Hidden
Norton Online Backup (HKLM-x32\...\{652C1CDF-C61D-4525-9348-8C272CC2DB24}) (Version: 2.10.3.20 - Symantec Corporation)
Norton Online Backup ARA (HKLM-x32\...\NARA) (Version: 4.1.0.14 - Symantec Corporation) Hidden
OEM Application Profile (HKLM-x32\...\{18599B4F-A533-7A4A-7A56-EEE5C77B0EEE}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Paquete de controladores de Windows - Samsung Electronics Co. Ltd. (RadioHIDMini) HIDClass  (08/23/2013 6.2.8400.4218) (HKLM\...\26BFE384C802803107F583AE1A739E4FEB56134B) (Version: 08/23/2013 6.2.8400.4218 - Samsung Electronics Co. Ltd.)
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Phone Screen Sharing (HKLM-x32\...\{DF02C515-40B5-45AC-A601-5DC69D03885C}) (Version: 2.0.0.21 - RSUPPORT)
PSE11 STI Installer (HKLM-x32\...\{98CE8819-87AA-4814-8167-ADDDD513485F}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.326 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Quick Starter (HKLM\...\{EC36E2BC-86F7-44C9-84B2-93930F0FBDBF}) (Version: 1.0.2 - Samsung Electronics CO., LTD.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7055 - Realtek Semiconductor Corp.)
Recovery (HKLM-x32\...\{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}) (Version: 6.1.0.3 - Samsung Electronics CO., LTD.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Revit 2016 (HKLM\...\{7346B4A0-1600-0510-0000-705C0D862004}) (Version: 16.0.490.0 - Autodesk) Hidden
Revit Content Libraries 2016 - Español (Spanish) (HKLM\...\{941030D0-1600-0410-0000-818BB38A95FC}) (Version: 16.0.490.0 - Autodesk) Hidden
Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.5.2.13021_11 - Samsung Electronics Co., Ltd.)
Samsung Link (HKLM-x32\...\{82EC241F-DFCA-4166-A8C3-EA5D2B9A41C4}) (Version: 1.8.0.44 - Samsung Electronics CO., LTD.)
Samsung Update (HKLM-x32\...\{0722F60B-FF4E-4999-9AEA-901B28237768}) (Version: 2.2.53 - Samsung Electronics Co., Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.25.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
SideSync (HKLM-x32\...\{59687468-8CE9-4ABF-9C6A-5C31F0E09F8B}) (Version: 2.0.0 - Samsung Electronics CO., LTD.)
SketchUp 2015 (HKLM\...\{7C62B699-5E17-48F4-BF4E-9250FFCE5E72}) (Version: 15.3.331 - Trimble Navigation Limited)
SketchUp 2019 (HKLM\...\{0FB756F3-A84B-E5F8-387F-B9F186E6D497}) (Version: 19.0.685.20289 - Trimble, Inc.)
SketchUp Import for AutoCAD 2014 (HKLM-x32\...\{644E9589-F73A-49A4-AC61-A953B9DE5669}) (Version: 1.1.0 - Autodesk)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
SuBridge2015 (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\SuBridge2015) (Version: 1.00.01.00 - Tecnobit)
SuBridge2015 (HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\SuBridge2015) (Version: 1.00.01.00 - Tecnobit)
Support Center (HKLM\...\{711DE117-767F-48A8-9864-66C525B9539F}) (Version: 2.1.1223 - Samsung Electronics CO., LTD.)
Support Center FAQ (HKLM-x32\...\{661544AE-C07F-4EAD-B187-7A217E69A426}) (Version: 1.0.17 - Samsung Electronics CO., LTD.) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 18.0.0.0 - Synaptics Incorporated)
User Guide (HKLM-x32\...\{0A380831-981C-4922-BCFE-37FD5D938404}) (Version: 1.2.00 - Samsung Electronics CO., LTD.)
VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{6DA2B636-698A-3294-BF4A-B5E11B238CDD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{8CCEA24C-51AE-3B71-9092-7D0C44DDA2DF}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{C3A57BB3-9AA6-3F6F-9395-6C062BDD5FC4}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x64 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{F6F09DD8-F39B-3A16-ADB9-C9E6B56903F9}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{14866AAD-1F23-39AC-A62B-7091ED1ADE64}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
Visual C++ 2008 - x86 (KB958357) - v9.0.30729.177 (HKLM-x32\...\{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}.KB958357) (Version: 9.0.30729.177 - Microsoft Corporation)
WD Quick View (HKLM-x32\...\{E83047E3-B85C-40E4-A421-017B264AB761}) (Version: 2.4.16.16 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{02D359F8-1DEF-41DD-8561-99C7321BFE00}) (Version: 2.4.16.16 - Western Digital Technologies, Inc.)
WD SmartWare (HKLM\...\{604CB4FC-3D32-405F-A109-165F170529B6}) (Version: 1.2.0.8 - Western Digital)
WD SmartWare Installer (HKLM-x32\...\{4555885d-a64c-4234-9aac-72a8a6b5590b}) (Version: 2.4.16.16 - Western Digital Technologies, Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3503.0728 - Microsoft Corporation)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Zoom (HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\ZoomUMX) (Version: 5.5.2 (12494.0204) - Zoom Video Communications, Inc.)

Packages:
=========
Adera -> C:\Program Files\WindowsApps\Microsoft.Adera_2.5.2.34894_x86__8wekyb3d8bbwe [2017-05-11] (Microsoft Studios)
Bitcasa for Samsung -> C:\Program Files\WindowsApps\Bitcasa.BitcasaforSamsung_3.2.2.84_neutral__t064hbck1pfne [2017-05-11] (Bitcasa, Inc)
ChatON -> C:\Program Files\WindowsApps\6E04A0BD.3483954CEF3A0_2.1.5.1_neutral__ez4k4b2fwzhzt [2017-05-11] (SAMSUNG ELECTRONICS CO,. LTD.)
Evernote Touch -> C:\Program Files\WindowsApps\Evernote.Evernote_3.3.0.102_x86__q4d96b2w5wcc2 [2017-05-11] (Evernote)
Fresh Paint -> C:\Program Files\WindowsApps\Microsoft.FreshPaint_2.0.15133.0_x86__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation)
HP All-in-One Printer Remote -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_55.1.43.0_x86__v10z8vjag6ke6 [2017-05-11] (Hewlett-Packard Company)
Jamie's Recipes -> C:\Program Files\WindowsApps\Zolmo.JamiesRecipes_1.2.0.0_x64__40cj6885yhw56 [2017-05-11] (Zolmo)
Juegos -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2014-11-22] (Microsoft Corporation) [MS Ad]
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2017-05-11] (AMZN Mobile LLC)
Merriam-Webster Dictionary -> C:\Program Files\WindowsApps\D22CCC44.Merriam-WebsterDictionary_1.0.1.1_neutral__mbv6ra3y34fnr [2013-12-07] (Merriam-Webster, Inc.)
MSN Deportes -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Dinero -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN El tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Noticias -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Recetas -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Salud -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
MSN Viajes -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_2.3.1055.0_x64__a2t3txkz9j1jw [2017-06-09] (MAGIX)
Música -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
Norton Studio -> C:\Program Files\WindowsApps\SymantecCorporation.NortonStudio_1.5.0.41_x86__v68kp9n051hdp [2017-05-11] (Symantec Corporation)
Pinball FX2 -> C:\Program Files\WindowsApps\Microsoft.Studios.PinballFx2_1.8.1.957_x86__8wekyb3d8bbwe [2017-05-11] (Microsoft Studios)
S Camera -> C:\Program Files\WindowsApps\CyberLinkCorp.ss.SCamera_1.0.1903.26021_x86__h7cwzt5medr84 [2017-05-11] (CYBERLINKCOM)
S Gallery -> C:\Program Files\WindowsApps\CyberLinkCorp.ss.SGallery_1.0.1903.26021_x86__h7cwzt5medr84 [2017-05-11] (CYBERLINKCOM)
S Player -> C:\Program Files\WindowsApps\CyberLinkCorp.ss.SPlayer_1.0.2216.21222_x86__h7cwzt5medr84 [2017-05-11] (CYBERLINKCOM)
Samsung Story -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungStory_1.0.0.32_neutral__3c1yjt4zspk6g [2017-05-11] (SAMSUNG ELECTRONICS CO., LTD)
Shark Dash -> C:\Program Files\WindowsApps\GAMELOFTSA.SharkDash_1.3.6.9_x64__0pp20fcewvvtj [2017-05-11] (GAMELOFT  SA)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2017-05-11] (Skype) [MS Ad]
Taptiles -> C:\Program Files\WindowsApps\Microsoft.Taptiles_2.6.288.0_x86__8wekyb3d8bbwe [2018-10-25] (Microsoft Studios) [MS Ad]
Vídeo -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]
Xbox 360 SmartGlass -> C:\Program Files\WindowsApps\Microsoft.XboxCompanion_1.4.3.0_x64__8wekyb3d8bbwe [2017-05-11] (Microsoft Corporation) [MS Ad]

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{6A221957-2D85-42A7-8E19-BE33950D1DEB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{7DE1BE5C-CEBA-4F1D-ACBC-9CE11EE9A2A1}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{BD0DEB94-63DB-4392-9420-6EEE05094B1F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2014\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{D9AC5E73-BB10-467b-B884-AA1E475C51F5}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{DEDF773D-E27B-485E-8E7D-85C5B0EB5A67}\InprocServer32 -> C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2014\en-US\acadficn.dll (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3605969310-3002992618-3777335900-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\JoseAntonio\AppData\Local\Google\Update\1.3.36.72\psuser_64.dll (Google LLC -> Google LLC)
SSODL: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\system32\CbFsMntNtf3.dll (EldoS Corporation -> EldoS Corporation)
SSODL-x32: EldosMountNotificator - {5FF49FE8-B332-4CB9-B102-FB6951629E55} - C:\windows\SysWow64\CbFsMntNtf3.dll (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellServiceObjects-x32: Virtual Storage Mount Notification -> {5FF49FE8-B332-4CB9-B102-FB6951629E55} => C:\windows\SysWow64\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers: [1EldosIconOverlay] -> {BC54C168-B8F2-478A-B907-602399B62231} => C:\windows\SYSTEM32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2013-02-08] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [BitcasaIconOverlay] -> {A6975448-A999-49BB-B3E4-7730CF6A82C0} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ShellIconOverlayIdentifiers: [BitcasaProgressOverlay] -> {6FB8D52A-0064-45B2-B687-F596FEAD09C2} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [1EldosIconOverlay] -> {BC54C168-B8F2-478A-B907-602399B62231} => C:\windows\SYSTEM32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\windows\system32\CbFsMntNtf3.dll [2012-08-06] (EldoS Corporation -> EldoS Corporation)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2013-02-08] (Autodesk, Inc -> Autodesk)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [Atheros] -> {B8952421-0E55-400B-94A6-FA858FC0A39F} => C:\Program Files (x86)\Bluetooth Suite\BtvAppExt.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
ContextMenuHandlers1: [Bitcasa] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-11-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [WDBackupMenuHandler] -> {C752BC82-C19A-4827-9C15-0996BA85C180} => C:\Program Files\Western Digital\WD SmartWare\\WDContextMenuHandler.dll [2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Bitcasa] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers2: [BitcasaExtension] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers2: [CWDDriveMenuHandler] -> {CCEFA845-DCDB-4A2F-8BED-DBE87CD198EC} => C:\Program Files\Western Digital\WD SmartWare\\WDContextMenuHandler.dll [2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-11-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [FTShellContext] -> {AFF81F7B-6942-40c4-AADA-7214EF7B6DD1} => C:\Program Files (x86)\Bluetooth Suite\ShellContextExt.dll [2014-06-17] (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado]
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-18] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2013-08-30] (Advanced Micro Devices, Inc.) [Archivo no firmado]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2013-11-29] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [Bitcasa] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers6: [BitcasaExtension] -> {92224F8D-0235-4EBB-BEFB-91AC297C4AEE} => C:\Program Files\Bitcasa\ExplorerMenu.dll [2012-12-27] (Bitcasa, Inc) [Archivo no firmado]
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-11-03] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-18] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd -> Piriform Ltd)
ContextMenuHandlers6: [WDBackupMenuHandler] -> {C752BC82-C19A-4827-9C15-0996BA85C180} => C:\Program Files\Western Digital\WD SmartWare\\WDContextMenuHandler.dll [2016-04-19] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

ShortcutWithArgument: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --load-extension="C:\ProgramData\Zaroqr\Oyvw\C64ED0D6"
ShortcutWithArgument: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --load-extension="C:\ProgramData\Zaroqr\Oyvw\C64ED0D6"
ShortcutWithArgument: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\4557e6e244e2b347\MonkiBu TV y Radios Online.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=phimhnckkaofkllcoledjilakgbeohli

==================== Módulos cargados (Lista blanca) =============

2014-06-17 09:32 - 2014-06-17 09:32 - 000011264 _____ () [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000086016 _____ () [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\Map\MAP.dll
2013-04-20 04:34 - 2012-12-27 04:58 - 000570880 _____ (Bitcasa, Inc) [Archivo no firmado] C:\Program Files\Bitcasa\ExplorerMenu.dll
2013-08-07 15:24 - 2013-08-07 15:24 - 000286720 _____ (Intel Corporation) [Archivo no firmado] [El archivo está en uso] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2013-08-07 15:24 - 2013-08-07 15:24 - 000514048 _____ (Intel Corporation) [Archivo no firmado] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2009-06-16 09:58 - 2009-06-16 09:58 - 000028672 _____ (Memeo) [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\Western Digital\WD SmartWare\Front Parlor\MemeoRemoteCore.dll
2017-05-10 22:48 - 2017-05-10 22:48 - 001654784 _____ (Microsoft Corporation) [Archivo no firmado] C:\WINDOWS\WinSxS\amd64_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_8448b2bd328df189\MFC80U.DLL
2014-06-17 09:36 - 2014-06-17 09:36 - 000033408 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\CommApi.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000203392 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\FolderViewImpl.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000085632 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\GattI.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000126592 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\gatts.DLL
2014-06-17 09:36 - 2014-06-17 09:36 - 000083072 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Handsfree.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000034432 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ipc.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 000063104 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\ModuleManager.dll
2014-06-17 09:36 - 2014-06-17 09:36 - 001067648 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\OutlookLib.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000130176 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\skypeagent.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000027264 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\TCPConnection.dll
2014-06-17 09:37 - 2014-06-17 09:37 - 000116352 _____ (Qualcomm Atheros -> Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\utils.dll
2014-06-17 09:30 - 2014-06-17 09:30 - 000308224 _____ (Qualcomm Atheros Commnucations) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\LE\LE.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000210432 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\Audio\audio.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000162304 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\BasicPrintProfile\BPP.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000177152 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\BIP\BIP.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000018432 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\DID\DId.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000035840 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\FAX\Fax.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000421888 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\FileTransfer\FileTransfer.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000096256 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\GapSdp\GapSdp.dll
2014-06-17 09:26 - 2014-06-17 09:26 - 000097792 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\goep\goep.dll
2014-06-17 09:29 - 2014-06-17 09:29 - 000029696 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\HCRP\Hcrp.dll
2014-06-17 09:30 - 2014-06-17 09:30 - 000064512 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\HumanInterfaceDevice\hid.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000091136 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\L2capLib\l2caplib.dll
2014-06-17 09:26 - 2014-06-17 09:26 - 000181248 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\ObjPush.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000066048 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\OppOperation\OppOperation.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000067072 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\pbap\pbap.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000063488 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\RfcommLib\rfcommlib.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000097280 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\sap\sap.dll
2014-06-17 09:32 - 2014-06-17 09:32 - 000087552 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\SesMgr\sesmgr.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000055296 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\spp\spp.dll
2014-06-17 09:31 - 2014-06-17 09:31 - 000064512 _____ (Qualcomm®Atheros®) [Archivo no firmado] C:\Program Files (x86)\Bluetooth Suite\Modules\Sync\Sync.dll
2016-04-19 12:02 - 2016-04-19 12:02 - 001006080 ____R (Robert Simpson, et al.) [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\Western Digital\WD SmartWare\System.Data.SQLite.dll
2015-06-19 14:55 - 2015-06-19 14:55 - 000022920 _____ (Samsung Electronics CO., LTD. -> Samsung Electronics Co. Ltd.) [Archivo no firmado] C:\Program Files (x86)\Samsung\Settings\CmdServer\WSABI.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer (Lista blanca) ==========

HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sii.cl/
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung13.msn.com
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
IE Session Restore: HKU\S-1-5-21-3605969310-3002992618-3777335900-500 -> está habilitado.

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2012-07-26 02:26 - 2021-03-19 13:02 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64_win\compiler;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\Skype\Phone\;C:\Program Files\Common Files\Autodesk Shared\;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\JoseAntonio\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\logo.jpg
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: El medio no está conectado a internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Ningún archivo)
Firewall de Windows está habilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

MSCONFIG\startupreg: AdobeAAMUpdater-1.0 => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgr.exe" -showminimized -checkautorun
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: Bitcasa => C:\Program Files\Bitcasa\Bitcasa.exe /startup
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKLM\...\StartupApproved\StartupFolder: => "WDDMStatus.lnk"
HKLM\...\StartupApproved\StartupFolder: => "WDSmartWare.lnk"
HKLM\...\StartupApproved\StartupFolder: => "CodeMeter Control Center.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Servidor de Red.lnk"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "Bitcasa"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "Acrobat Assistant 8.0"
HKLM\...\StartupApproved\Run32: => "Adobe Reader Speed Launcher"
HKLM\...\StartupApproved\Run32: => "WD Quick View"
HKLM\...\StartupApproved\Run32: => "DivXMediaServer"
HKLM\...\StartupApproved\Run32: => "Adobe Acrobat Speed Launcher"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\StartupFolder: => "SmartClock.lnk"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3605969310-3002992618-3777335900-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3605969310-3002992618-3777335900-500\...\StartupApproved\Run: => "Skype"

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Puntos de Restauración =========================

19-03-2021 13:01:45 Restore Point Created by FRST

==================== Dispositivos defectuosos en el Administrador de dispositivos ============


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (03/19/2021 06:37:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: Explorer.EXE, versión: 6.3.9600.18460, marca de tiempo: 0x57c1b8c1
Nombre del módulo con errores: QtCore_Ad_SyncNs_4.dll, versión: 4.8.2.0, marca de tiempo: 0x50d3fca7
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x00000000000266a7
Identificador del proceso con errores: 0x83c
Hora de inicio de la aplicación con errores: 0x01d71cd9ea1537c2
Ruta de acceso de la aplicación con errores: C:\WINDOWS\Explorer.EXE
Ruta de acceso del módulo con errores: C:\Program Files\Autodesk\Autodesk Sync\QtCore_Ad_SyncNs_4.dll
Identificador del informe: 4e3bb76a-88fb-11eb-8202-48d2241beca8
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (03/19/2021 02:01:25 PM) (Source: Software Protection Platform Service) (EventID: 16385) (User: )
Description: No se pudo programar el servicio de protección de software para reiniciarse a las 2121-02-23T17:01:17Z. Código de error: 0x80071A91.

Error: (03/19/2021 01:16:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa LiveComm.exe, versión 17.5.9600.22013, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.

Identificador de proceso: 135c

Hora de inicio: 01d71cda6ae50fd4

Hora de finalización: 4294967295

Ruta de acceso de la aplicación: C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe\LiveComm.exe

Identificador de informe: 5cfb9d81-88ce-11eb-8202-48d2241beca8

Nombre completo de paquete con errores: microsoft.windowscommunicationsapps_17.5.9600.22013_x64__8wekyb3d8bbwe

Identificador de aplicación relativa del paquete con errores: ppleae38af2e007f4358a809ac99a64a67c1

Error: (03/19/2021 01:10:37 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Error del procedimiento de apertura para el servicio "BITS" en el archivo DLL "C:\Windows\System32\bitsperf.dll". Los datos de rendimiento para este servicio no estarán disponibles. Los primeros cuatro bytes (DWORD) de la sección de datos contienen el código de error.

Error: (03/19/2021 01:07:37 PM) (Source: WDSmartWareBackgroundService) (EventID: 0) (User: )
Description: Problem starting Memeo Background Service :Error con excepción en la configuración remota 'System.Reflection.TargetInvocationException: Se produjo una excepción en el destino de la invocación. ---> System.Security.Principal.IdentityNotMappedException: No se pudieron convertir algunas o todas las referencias de identidad.
   en System.Runtime.Remoting.Channels.Ipc.IpcServerChannel.StartListening(Object data)
   en System.Runtime.Remoting.Channels.Ipc.IpcServerChannel..ctor(IDictionary properties, IServerChannelSinkProvider sinkProvider, CommonSecurityDescriptor securityDescriptor)
   en System.Runtime.Remoting.Channels.Ipc.IpcChannel..ctor(IDictionary properties, IClientChannelSinkProvider clientSinkProvider, IServerChannelSinkProvider serverSinkProvider)
   --- Fin del seguimiento de la pila de la excepción interna ---
   en System.RuntimeMethodHandle._InvokeConstructor(Object[] args, SignatureStruct& signature, IntPtr declaringType)
   en System.Reflection.RuntimeConstructorInfo.Invoke(BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
   en System.RuntimeType.CreateInstanceImpl(BindingFlags bindingAttr, Binder binder, Object[] args, CultureInfo culture, Object[] activationAttributes)
   en System.Runtime.Remoting.RemotingConfigHandler.CreateChannelFromConfigEntry(ChannelEntry entry)
   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureChannels(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)'.   en System.Runtime.Remoting.RemotingConfigHandler.ConfigureRemoting(RemotingXmlConfigFileData configData, Boolean ensureSecurity)
   en System.Runtime.Remoting.RemotingConfiguration.Configure(String filename, Boolean ensureSecurity)
   en RemoteServerService.WDSmartWareBackgroundService.OnStart(String[] args)

Error: (03/19/2021 01:02:35 PM) (Source: Perflib) (EventID: 1023) (User: )
Description: Windows no puede cargar el archivo DLL del contador extensible rdyboost. Los primeros cuatro bytes (DWORD) de la sección de datos contienen el código de error de Windows.

Error: (03/19/2021 01:01:44 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Error del Servicio de instantáneas de volumen: error inesperado al consultar la interfaz IVssWriterCallback. HR = 0x80070005, Acceso denegado.
.
A menudo ocurre por una configuración de seguridad incorrecta en el proceso de escritura o de solicitud.


Operación:
   Recopilando datos del escritor

Contexto:
   Id. de clase del escritor: {e8132975-6f93-4464-a53e-1050253ae220}
   Nombre del escritor: System Writer
   Id. de instancia del escritor: {5ee7d94b-a9a8-411c-9d19-0dcb736f38cc}

Error: (03/19/2021 08:29:13 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: mbamtray.exe, versión: 4.0.0.918, marca de tiempo: 0x60418179
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.3.9600.19678, marca de tiempo: 0x5e82c88a
Código de excepción: 0xc0000142
Desplazamiento de errores: 0x00000000000ecf40
Identificador del proceso con errores: 0x15a4
Hora de inicio de la aplicación con errores: 0x01d71cb31363c8ac
Ruta de acceso de la aplicación con errores: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Ruta de acceso del módulo con errores: KERNELBASE.dll
Identificador del informe: 546e9dfa-88a6-11eb-8201-48d2241beca8
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:


Errores del sistema:
=============
Error: (03/19/2021 02:01:25 PM) (Source: Ntfs) (EventID: 138) (User: )
Description: El administrador de recursos de transacción en C:\ detectó un error irrecuperable y se cerró. Los datos contienen el código de error.

Error: (03/19/2021 01:09:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Malwarebytes Service no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (03/19/2021 01:09:35 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Malwarebytes Service.

Error: (03/19/2021 01:08:01 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Wondershare Application Framework Service.

Error: (03/19/2021 01:02:49 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: El Administrador de control de servicios intentó realizar una acción correctora (Reiniciar el servicio) después de la terminación inesperada del servicio Windows Search, pero ocurrió el siguiente error: 
Ya se está ejecutando una instancia de este servicio.

Error: (03/19/2021 01:02:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Adobe Active File Monitor V11 se terminó de manera inesperada. Esto ha sucedido 1 veces.

Error: (03/19/2021 01:02:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Servicio de uso compartido de red del Reproductor de Windows Media terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.

Error: (03/19/2021 01:02:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio WD Backup terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio.


Windows Defender:
================
Date: 2019-05-20 13:50:11.012
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {4D051564-7820-4EEA-8F6A-274383D10F5B}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2018-08-01 11:36:57.328
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {72F23AA8-826B-4168-9B75-D467103CF062}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2018-08-01 11:02:56.864
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {A93C17E6-AFE0-4E21-A0DD-F239E813555B}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2018-08-01 10:19:49.486
Description: 
Windows Defender detectó malware u otro software potencialmente no deseado.
Para obtener más información consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nombre: Trojan:Win32/Bluteal.B!rfn
Id.: 2147727314
Gravedad: Grave
Categoría: Caballo de Troya
Ruta de acceso: file:_C:\Program Files (x86)\TNod\TNODUP.exe;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Actualizar licencia.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Configurar.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Descargar Licencias.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Ejecutar oculto.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Insertar licencia con mayor fecha de caducidad.lnk;file:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Recuperar la licencia actual.lnk;regkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\TNOD UP;runkey:_HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\TNOD UP;startup:_C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TNod User & Password Finder\Actualizar licencia.lnk;startup:_C:\ProgramData\Microsoft\Windo
Origen de detección: Equipo local
Tipo de detección: Concreto
Fuente de detección: Protección en tiempo real
Usuario: manomaestra\JoseAntonio
Nombre de proceso: C:\Users\JoseAntonio\Downloads\eset antivirus\TNod-1.6.5.0-beta-setup.exe
Versión de firma: AV: 1.273.665.0, AS: 1.273.665.0, NIS: 0.0.0.0
Versión de motor: AM: 1.1.15100.1, NIS: 0.0.0.0

Date: 2018-08-01 10:19:10.444
Description: 
Windows Defender detectó malware u otro software potencialmente no deseado.
Para obtener más información consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nombre: Trojan:Win32/Bluteal.B!rfn
Id.: 2147727314
Gravedad: Grave
Categoría: Caballo de Troya
Ruta de acceso: file:_C:\Program Files (x86)\TNod\TNODUP.exe
Origen de detección: Equipo local
Tipo de detección: Concreto
Fuente de detección: Protección en tiempo real
Usuario: manomaestra\JoseAntonio
Nombre de proceso: C:\Users\JoseAntonio\Downloads\eset antivirus\TNod-1.6.5.0-beta-setup.exe
Versión de firma: AV: 1.273.665.0, AS: 1.273.665.0, NIS: 119.0.0.0
Versión de motor: AM: 1.1.15100.1, NIS: 2.1.14600.4

Date: 2019-05-20 13:46:00.697
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

Date: 2019-05-20 13:46:00.696
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

Date: 2019-05-20 13:46:00.641
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Servidor de Microsoft Update
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x8024402c
Descripción del error: Se produjo un problema inesperado mientras se buscaban actualizaciones. Para obtener más información sobre cómo instalar o solucionar problemas en las actualizaciones, consulte Ayuda y soporte técnico. 

Date: 2019-05-20 13:39:15.383
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

Date: 2019-05-20 13:39:15.382
Description: 
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma: 
Versión de firma anterior: 1.273.665.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\Servicio de red
Versión de motor actual: 
Versión de motor anterior: 1.1.15100.1
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección 

==================== Información de la memoria =========================== 

BIOS: American Megatrends Inc. P15RAN.208.140429.ZW 04/29/2014
Placa base: SAMSUNG ELECTRONICS CO., LTD. NP470R5E-X02CL
Procesador: Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz
Porcentaje de memoria en uso: 29%
RAM física total: 8077.6 MB
RAM física disponible: 5675.18 MB
Virtual total: 10125.6 MB
Virtual disponible: 7699.9 MB

==================== Unidades ================================

Drive c: () (Fixed) (Total:907.02 GB) (Free:475.68 GB) NTFS
Drive d: (WD SmartWare) (CDROM) (Total:0.6 GB) (Free:0 GB) UDF
Drive g: (My Passport) (Fixed) (Total:297.44 GB) (Free:206.77 GB) NTFS

\\?\Volume{a66a147f-4469-4862-92e1-0c30651c74fa}\ (Windows RE tools) (Fixed) (Total:0.49 GB) (Free:0.15 GB) NTFS
\\?\Volume{6c2acf3d-fd71-48ac-84b5-8a549d62008e}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{28120cea-692b-4dd7-9425-ab3d8ea37c4c}\ () (Fixed) (Total:0.34 GB) (Free:0.31 GB) NTFS
\\?\Volume{001acc82-cbe9-4263-8cf2-0d0bf18c1632}\ (SAMSUNG_REC2) (Fixed) (Total:21.81 GB) (Free:0.94 GB) NTFS
\\?\Volume{d54203c8-f0aa-4779-4173-636c65706975}\ (SAMSUNG_REC) (Fixed) (Total:1 GB) (Free:0.4 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: B0D01F9B)

Partition: GPT.

==========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 297.4 GB) (Disk ID: 00035F28)
Partition 1: (Not Active) - (Size=297.4 GB) - (Type=07 NTFS)

==================== Final de Addition.txt =======================

Marr0n · 20 Marzo, 2021 02:11

Hola @negrosorolla

EN BUSCA / ELIMINACIÓN DE MALWARE

Realiza los pasos que te pongo a continuación, sin cambiar el orden y síguelos al pie de la letra:

Conectas todos tus dispositivos externos (todos los discos duros externos que tengas, USB, etc).

0) Descarga Eset Online Scaner Manual de Uso y realizas un análisis del PC, lee detalladamente las instrucciones y realizas un Análisis Personalizado tal y como se indica en su manual. Me traes su reporte.

1) Descarga Kasperky Virus Removal Tool Manual de Uso y realizas un análisis del PC, lee detalladamente las instrucciones y lo realizas tal y como se indica en su manual. En este caso no da reporte alguno, cuando finalice, presionas en la pestaña Report tal y como se indica en su manual y haces una captura de pantalla y la subes.

¿Como subir imágenes al Foro?

2) Descarga, instala y ejecuta ZHP Cleaner siguiendo su manual, lo descargas, instalas y ejecutas. Cuando termine, elimina todo lo que encuentre.

RESTABLECER NAVEGADORES

Restablece todos los navegadores que tengas tal y como se indica en esta guía:

OJO, REALIZA SOLO LA PARTE QUE EMPIEZA EN: PUP/Adware en: Internet Explorer y hacia abajo todos los posts que siguen (PUP/Adware en: Mozilla Firefox, PUP/Adware en: Google Chrome) y si tienes algún navegador como Opera o Safari que no salen en la guía, pues haz procedimientos similares y extrapolas de los navegadores que sí que aparecen.

Guía de cómo eliminar Adwares/PUPs

PRÓXIMA RESPUESTA

Pegas los reportes de Eset Online Scaner, Kasperky Virus Removal Tool (captura), ZHP Cleaner y comentas como va el PC.

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:

No realices pasos/acciones que NOSOTROS no te hayamos indicado.

No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.

No instales NADA (programas/software/complementos/extensiones del navegador…).

No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…).

No realices por tu cuenta otros procedimientos.

Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

Muy Importante Coloca los diferentes reportes que te he pedido como se muestra en la siguiente imagen:

Salu2.

negrosorolla · 21 Marzo, 2021 15:16

Hola @Marr0n he realizado varias búsquedas en google y hasta el momento no se ha iniciado ninguna nueva pestaña. y el doble tilde no ha vuelto a aparecer. Al instalar Kaspersky, la plataforma es completamente diferente a lo que ustedes describen en el manual, y partió indicando que eliminaría eset antivirus y malwarebytes por ser incompatibles con kaspersky. Ahora que ya hicimos el analisis, lo elimino e instalo nuevamente el eset? o puedo mantener kaspersky como antivirus? Te adjunto los reportes Esetonline

20-03-2021 21:50:06
Archivos explorados: 709582
Archivos detectados: 2
Archivos desinfectados: 2
Tiempo total de exploración 09:35:44
Estado de la exploración: Finalizado


C:\Users\JoseAntonio\Desktop\rcsetup153-1.53.1087.exe	Win32/Bundled.Toolbar.Google.D aplicación potencialmente no segura	desinfectado por eliminación
G:\de todo\SkypeSetup.exe	Win32/Bundled.Toolbar.Google.G aplicación potencialmente no segura	eliminado

negrosorolla · 21 Marzo, 2021 15:47

ZHP

~ ZHPCleaner v2021.3.16.286 by Nicolas Coolman (2021/03/16)
~ Run by JoseAntonio (Administrator)  (21/03/2021 11:36:04)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Type : Reparar
~ Report : C:\Users\JoseAntonio\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\JoseAntonio\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ System Restore Point : OK
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1 Single Language, 64-bit  (Build 9600)


---\\  Alternate Data Stream (ADS). (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Servicios (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Navegadores de Internet (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Hosts carpeta (1)
~ El archivo hosts es legítimo (1)


---\\  Tareas automáticas programadas. (0)
~ No malintencionados o innecesarios artículos encontrados.


---\\  Explorador ( Archivos, Carpetas ) (5)
MOVIDO carpeta: C:\Users\JoseAntonio\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\BS.Player FREE.lnk  [Bad : C:\Program Files (x86)\Webteh\BSPlayer\bsplayer.exe](.AB Team.)  =>.SUP.ABTeam
MOVIDO carpeta: C:\Users\Public\Desktop\BS.Player FREE.lnk  [Bad : C:\Program Files (x86)\Webteh\BSPlayer\bsplayer.exe](.AB Team.)  =>.SUP.ABTeam
MOVIDO carpeta: C:\Users\JoseAntonio\AppData\Local\Google\Chrome\User Data\Default\Preferences    =>Préférences Chromium
MOVIDO carpeta: C:\Users\JoseAntonio\AppData\Local\Microsoft\Edge\User Data\Default\Preferences    =>Préférences Chromium
MOVIDO archivo: C:\Users\JoseAntonio\AppData\Local\Google\Update  =>Heuristic.Suspect


---\\  Registro ( Claves, Valores, Datos) (1)
BORRADOS clave*: HKCU\Software\undefined [AdditionalScan 148]  =>.SUP.Downloader


---\\  Resumen de elementos en su estación de trabajo (4)
https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/  =>.SUP.ABTeam
https://nicolascoolman.eu/forum/Topic/repaquetage-et-infection/  =>Préférences Chromium
https://nicolascoolman.eu/2017/01/28/heuristic-suspect/  =>Heuristic.Suspect
https://nicolascoolman.eu/2017/12/22/sup-downloader/  =>.SUP.Downloader


---\\ Limpieza adicional. (3)
~ Clave de registro Tracing borrados (3)
~ Quitar los antiguos informes de ZHPCleaner. (0)


---\\ Resultado de la reparación.
~ Reparación llevada a cabo con éxito
~ Google Chrome OK
~ Internet Explorer OK


---\\ STATISTIQUES
~ Items escaneado : 1426
~ Items encontrado : 0
~ artículos cancelados : 0
~ Ahorro de espacio (bytes) : 0
~ Items opciones : 9/17


---\\ OPCIONES NO ACTIVAS
~ Análisis temporal de archivos
~ Análisis temporal de carpetas
~ Análisis de CLSID de carpetas vacías
~ Vaciar otro análisis de carpetas
~ Análisis de carpetas locales vacías
~ Análisis de carpetas locales vacías
~ Análisis de archivos de instalación obsoleto
~ Iniciar navegadores con extensiones eliminadas





~ End of clean in 00h00mn08s

---\\  Reporte (3)
ZHPCleaner-[S]-21032021-11_25_50.txt
ZHPCleaner-[S]-21032021-11_32_58.txt
ZHPCleaner-[R]-21032021-11_36_12.txt

negrosorolla · 21 Marzo, 2021 16:13

GUMFIK 1 ya NO aparece como proceso en lista de inicio

Marr0n · 23 Marzo, 2021 17:39

Hola, buenas @negrosorolla perdona que haya tardado tanto en responder. La vida que se me complica exponencialmente… bueno… vamos al lío.

buena señal.

De momento deja el ESET y el Malwarebytes y quitaremos el Kaspersky que tienes ahora en tu máquina. Pues no eres al primer usuario que le pasa, te cuento:

Sí, es otro programa diferente el que está marcado con el recuadro negro. No es que las instrucciones sean más antiguas o que el manual del foro este desactualizado. Para nada. El que debes de descargar es el que está marcado con el recuadro rojo y haces lo que te indiqué en su momento en las instrucciones.

¿Sigues teniendo en tu equipo el ESET y el Malwarebytes?

Respecto al ESET >> OK. Ha hecho lo que tenía que hacer.

Respecto al Kaspersky erróneo >> Haz lo que te he dicho. Reportaré para que quiten todos los logs de este, ya que no tiene ningún sentido que estos estén en el tema ocupando espacio y que no aportan nada de nada.

Respecto al ZHPCleaner>> OK. Ha hecho lo que tenía que hacer.

Respecto al USBFix (el percance que nos pasó) >> ¿Los archivos que te elimino estaban protegidos directamente estos por password o algo similar? O ¿Estaban comprimidos sin pasword o con password? O ¿simplemente eran/son archivos normales guardados en dicha ubicación y ya esta?

OK. buena señal.

Respondes a todas las preguntas que te haya realizado a lo largo del post y haces lo que te haya pedido.

Salu2.

negrosorolla · 24 Marzo, 2021 11:23

Hola @Marr0n

Kaspersky eliminado

Los volví a reinstalar

lo realicé paso a paso con el programa correcto y no encontró nada ice_screenshot_20210324-081246 ice_screenshot_20210324-081216

estaban en el disco duro externo que tiene password, pero yo la había ingresado para que pudiera escanear el disco externo, sino no tendría acceso. Los archivos eliminados no estaban comprimidos, puede haber habido alguno que otro comprimido, sin password, pero en ningún caso estaban todos comprimidos juntos. No he vuelto a guardar ni mover nada en el externo, y lo he desbloqueado casa vez que hacemos un análisis.

Gracias

Marr0n · 26 Marzo, 2021 02:29

Hola @negrosorolla

en principio no los usaremos pero OK. Mejor que estén por si acaso.

Respecto Kaspersky >> OK. Perfecto, está limpio.

OK. gracias por la información facilitada.

De nada.

Comentas como sigue el problema inicialmente planteado por el cual abriste este tema.

Salu2.