Doble tilde haciendo de las suyas

¡Hola @MIXU !

Si tienes en mente algunas tareas que tenga que ejecutar en el ordenador, este puente tendré algunos ratillos para ponerme.

¡Muchas gracias!

Sds, Mónica

1 me gusta

Hola buenas @bluemoon

Vamos bien, vamos por buen camino, pero tenemos que seguir con el caso.

Hoy por fin podemos seguir… en un rato edito esto.

Seguimos mañana.

Salu2.

1 me gusta

¡Buenas!

Actualizo este hilo.

Entiendo que Mixu no está disponible por temas personales y con este post no pretendo requerir su presencia en ningún caso. :blush: (Espero que sea lo que sea, tenga un desenlace positivo)

Si alguien más del equipo pudiera ayudarme en algún ratejo estos días a terminar de “blindar” el portátil…

¡Muchas gracias de antemano!

Sds, Blue

1 me gusta

Hola buenas en breves actualizo y llevo tu caso @bluemoon. No me he olvidado, en absoluto.

Ahora ya estoy operativo, y no, por desgracia, en ninguno de los dos casos ha tenido un desenlace positivo y es de las peores cosas que pueden pasarle a alguien.

Déjame re-analizar todo y en un día te digo.

Salu2.

¡Hola @MIXU !

Tranquilo, en ningún momento pensé que te habías olvidado. :wink:
Simplemente que no podías ponerte con este tema.

Lo siento mucho, Mixu :cry: :cry: :cry: Mucho ánimo, sea lo que sea por lo que estás pasando. :heart_hands: ¡Un abrazo!

De verdad, que si no te encuentras bien, no hay ninguna necesidad de priorizar esto…

Sds, Blue

2 Me gusta

Hola y disculpen la intervención

He recibido MP por parte del usuario para que alguno de ustedes @MIXU o @furtivex continúen con el tema.

Saludos a todos y suerte con ello

2 Me gusta

¡Hola!

Me gustaría aclarar esta petición. :slight_smile:

Quería saber si alguien más podría continuar con el caso, porque MIXU considero que no puede y no me parece bien agobiarle.

¡Muchas gracias!

Sds, Blue

1 me gusta

Hola buenas @bluemoon

Mis disculpas por no haber dicho nada antes.

Pues en esa fecha cuando ya podía seguir a otro familiar mío muy cercano también… bueno tuvo un problema también grave de salud… y bueno han sido unos meses muy ajetreados… pero va a quedar bien. Así que me volví a quedar sin tiempo y allí quedo tu tema.

OK, :+1:

OK, así es.

OK, muchas gracis de verdad.

Bueno ahora todo esta mejor + o -, así que… vamos a seguir.

Salu2.

1 me gusta

Hola compañero @JCTecn1cal

No hay nada de que disculpar, gracias por intervenir.

OK, pues lo dicho.

Bueno, vamos a seguir.

Salu2.

1 me gusta

Ya he re-analizado todo tu caso.

Decirte que la infección principal por la que abriste este tema ya está K.O., pero tenemos que encargarnos de otras cosas.

Necesito logs frescos de FRST @bluemoon así que:

EN BUSCA / ELIMINACIÓN DE MALWARE

:one: Desactivas tu antivirus :arrow_forward: Como deshabilitar temporalmente un antivirus y cualquier programa de seguridad que tengas activado.

LO DESCARGAS EN TU ESCRITORIO MUY IMPORTANTE (y no en otro sitio).

Descargas Farbar Recovery Scan Tool MUY IMPORTANTE >> seleccionas la versión adecuada para la arquitectura correspondiente de tu Ordenador (32 o 64bits). :arrow_forward: ¿Cómo saber si mi Windows es de 32 o 64 bits.?

:warning: Una vez descargado FRST, desconectas tu equipo de completamente de Internet (apagas el router) >> Super Importante. Acto seguido, cierras también cualquier otro programa que tengas abierto.

:two: Farbar Recovery Scan Tool

  1. Ejecutas el FRST.exe (Si utilizas Windows Vista/7/8 o 10, presionas click derecho y seleccionas Ejecutar como Administrador).

  2. Aparecerá una ventana con un mensaje de Disclaimer/Responsabilidad, presionas sobre Si o Yes.

  3. En la ventana principal del programa presionas sobre Analizar/Scan y esperas a que finalice el análisis.

  4. Aparecerán dos logs/reportes que serán: Frst.txt y Addition.txt, estos quedarán guardados en el escritorio.

:three: Activas de nuevo tu antivirus y cualquier programa de seguridad que tengas activado. También conectas nuevamente tu equipo a Internet.

:four: PRÓXIMA RESPUESTA

Pegas los reportes de FRST.txt y Addition.txt. Debes de poner ambos reportes todos enteros con absolutamente todo su contenido. Deberás de realizar varios mensajes si recibes un mensaje de error/advertencia indicando que es muy largo dicho reporte que formará el mensaje (más de 50.000 carácteres aprox.).

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:

  • No realices pasos/acciones que NOSOTROS no te hayamos indicado.
  • No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.
  • No instales NADA (programas/software/complementos/extensiones del navegador…).
  • No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…).
  • No realices por tu cuenta otros procedimientos.
  • Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

:warning: Muy Importante :warning: Coloca los diferentes reportes que te he pedido como se muestra en la siguiente imagen:

Salu2.

1 me gusta

¡Hola @MIXU !

Madre mía, que racha… :frowning:

Espero que tengas un otoño tranquilo en lo familiar ¡y que haya salud entre la gente que quieres! :hugs:

¡Muchas gracias por retomar el caso! Mi intención no era pincharte para volver en ningún caso, sino ver si alguien más podía ayudarme a terminar.

Voy a seguir tus últimas instrucciones y envío resultados.

¡Gracias de nuevo! :grinning_face_with_smiling_eyes:

Sds,

Blue

1 me gusta

Hola de nuevo, @MIXU

Adjunto los logs del Farbar.

Lo he metido como Texto preformateado porque las etiquetas de [code] y [/code] no me están funcionando.

FRST.txt

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 15-09-2025
Ejecutado por monic (administrador) sobre MSI (Micro-Star International Co., Ltd. Stealth GS66 12UGS) (21-09-2025 20:48:40)
Ejecutado desde C:\Users\monic\Desktop\FRST64.exe
Perfiles cargados: monic
Plataforma: Microsoft Windows 11 Home Versión 23H2 22631.5335 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Edge
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorHelper.exe
(C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe ->) (SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\apps\engine\prism\SteelSeriesPrism.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe ->) (SteelSeries ApS -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe
(C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.81\msedgewebview2.exe <6>
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(drivers\RivetNetworks\Killer\KSPSService.exe ->) (Intel Corporation -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\KSPS.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_helper.exe
(explorer.exe ->) (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.) C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe
(explorer.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColor.exe
(explorer.exe ->) (SteelSeries ApS -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
(explorer.exe ->) (Thesycon Software Solutions GmbH & Co. KG -> ) C:\Program Files\Ableton\Push Driver\x64\AbletonPushCpl.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <19>
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2025.11040.23001.0_x64__8wekyb3d8bbwe\Photos.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe
(NahimicService.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicAPO4Volume.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_a4d6ae741278ead3\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_ffa9bf533a83b3cf\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7ef5070e222f32f3\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Intel Corporation -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\KSPSService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe
(services.exe ->) (Micro-Star International CO., LTD. -> ) C:\Program Files (x86)\MSI\MSI NBFoundation Service\Sendevsvc.exe
(services.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\MSI NBFoundation Service\MSIAPService.exe
(services.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Windows\SysWOW64\MSIService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4c6dc98171ff25d5\RtkAudUService64.exe <2>
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(SteelSeries France SASU -> A-Volute) C:\Users\monic\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (21E1B422-257A-44A2-9C8F-379165856473 -> ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.5.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.9.1.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\monic\AppData\Local\Microsoft\OneDrive\25.065.0406.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\MSI\MSI Center\Base Module\Start_HDR.exe
(svchost.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\MSI NBFoundation Service\OmApSvcBroker.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\Sound Tune\SoundTune.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControlEngine.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(svchost.exe ->) (VS REVO GROUP OOD -> VS Revo Group Ltd.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe
(svchost.exe ->) (Western Digital Technologies, Inc. -> ) C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe
(svchost.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe <5>
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WDDiscoveryMonitor.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4c6dc98171ff25d5\RtkAudUService64.exe [2780096 2025-04-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [16870736 2025-04-09] (SteelSeries ApS -> SteelSeries A/S)
HKLM\...\Run: [MsiTrueColor] => C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColor.exe [6546648 2022-01-26] (Portrait Displays, Inc. -> Portrait Displays, Inc.)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [906840 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)
HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [132587360 2025-09-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\140.0.7339.129\Installer\chrmstp.exe [2025-09-21] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ableton Push Control Panel Autostart.lnk [2023-12-06]
ShortcutTarget: Ableton Push Control Panel Autostart.lnk -> C:\Program Files\Ableton\Push Driver\x64\AbletonPushCpl.exe (Thesycon Software Solutions GmbH & Co. KG -> )

==================== Tareas programadas (Lista blanca) =================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {3227E4BE-A37E-4CE4-A529-E79E970B2FE5} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem141.0.7376.0{6A88C9EB-2FC9-478E-97DE-724DCA17DD82} => C:\Program Files (x86)\Google\GoogleUpdater\141.0.7376.0\updater.exe [6855320 2025-08-26] (Google LLC -> Google LLC)
Task: {FD741A00-3BD4-4017-993E-E2D6713FA1E9} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {47C6C53E-AD0E-43F4-8BDF-7BBC535E9D39} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D32703E-8CFF-4670-8DE7-660EA7B51656} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107976 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {A50A3D59-E080-4E6D-8A2C-FA013E5C0CEA} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [68360 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {B8F5CC7E-2922-43BF-82AB-279A0DBBA35F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107976 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {F5C5ED2B-83A6-4EC9-800A-D6AEBC86BB11} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {534B1E84-C675-4D3A-9D49-CFE909019C73} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0D2E72C-0EDF-4058-96BC-8DD1AA5CB300} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [204400 2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {549AE2AC-626E-4DED-AED5-2B840A837FA5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {460DCCC0-A9E1-4696-91C3-68F3F80277C0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {216E1D3A-7B30-471A-8BB0-BA37D80661C9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CFF59F4A-1BBB-4046-BE5E-C1201E4F143F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {84B907F9-3E9E-4C8C-B9B6-D0709DF8A789} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [1118128 2024-05-20] (SteelSeries France SASU -> Nahimic)
Task: {D982866F-AC28-4B99-A674-67BF2657ED2E} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1438128 2024-05-20] (SteelSeries France SASU -> Nahimic)
Task: {5BE7589A-1C6C-4F10-83B9-6ED9E589B298} - System32\Tasks\NahimicTask32 => C:\Windows\System32\..\SysWOW64\NahimicSvc32.exe [1118128 0] (SteelSeries France SASU -> Nahimic)
Task: {10AB6612-93B1-4331-BEDB-4CC4F0DF79F9} - System32\Tasks\NahimicTask64 => C:\Windows\System32\.\NahimicSvc64.exe [1438128 0] (SteelSeries France SASU -> Nahimic)
Task: {1F50DE06-1BC6-4C09-8245-B20067CED151} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {1A202FCD-CC67-4CC2-8203-8531BB13C213} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {5CBD3B18-2270-4D45-9F4C-AC606B190DB6} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {142FAFDE-6F09-4CD0-B07F-BEC07AF5DD0C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {FB220C4D-D773-41DB-AF72-6D467AC58CE1} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2DBAB056-AA75-48CC-961B-A5C67982E777} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5229C2DB-B467-4F1A-A427-BC0F7CEE02C8} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B88D4C51-D851-47DE-8D17-9738F3611B1F} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {233A8561-1CAA-4107-967D-80BE1B46F443} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {447C5EFC-3503-4588-8DE7-C99B11265B2B} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9BA0DEC9-EE41-4BD4-9AF6-09F3548BCA0E} - System32\Tasks\OmApSvcBroker => C:\Program Files (x86)\MSI\MSI NBFoundation Service\OmApSvcBroker.exe [719328 2022-06-01] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
Task: {A22B696D-4711-4771-BACA-83CF2B516D9B} - System32\Tasks\OneDC_Updater => C:\Users\monic\Documents\temp\OneDC_Updater\OneDC_Updater.exe [654248 2022-02-21] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
Task: {952CAC6C-C74C-431E-8A63-A584AA2CE892} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1483763337-1063507308-2646852439-1001 => C:\Users\monic\AppData\Local\Microsoft\OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-05-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {E54509AA-2A83-4415-B0E4-6A9E516C1E2B} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-1483763337-1063507308-2646852439-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2025-01-24] (Microsoft Windows -> Microsoft Corporation)
Task: {415663A5-5160-4BB0-99C1-DA61442292FE} - System32\Tasks\VS Revo Group\RevoHelperFreeStartup => C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe [4053672 2024-12-10] (VS REVO GROUP OOD -> VS Revo Group Ltd.)
Task: {445AC73E-494C-4DBF-AC8D-56745D2F0A16} - System32\Tasks\WD Device Agent Task monic => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727392 2025-09-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {5F53422A-A2B1-42FE-84BD-E429C4BE5202} - System32\Tasks\WD Discovery Service Task monic => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82784 2025-09-21] (Western Digital Technologies, Inc. -> )

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\RNIdle Task.job => C:\Windows\System32\drivers\RivetNetworks\Killer\RNIdleTask.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Tcpip\Parameters: [DhcpNameServer] 80.58.61.250 80.58.61.254
Tcpip\..\Interfaces\{97a3e6fb-b068-4c0c-aa49-1e27fa024bc9}: [DhcpNameServer] 80.58.61.250 80.58.61.254

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\monic\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-16]
Edge Extension: (Documentos de Google sin conexión) - C:\Users\monic\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-13]
Edge Extension: (Edge relevant text changes) - C:\Users\monic\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-25]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default [2025-09-21]
CHR StartupUrls: Default -> "hxxp://www.google.es/","hxxps://www.ecosia.org/"
CHR Extension: (Tampermonkey) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2025-01-22]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-09-21]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-25]
CHR Extension: (Microsoft Single Sign On) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppnbnpeolgkicgegkbkbjmhlideopiji [2024-11-03]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13863152 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_a4d6ae741278ead3\ipfsvc.exe [557264 2023-09-14] (Intel Corporation -> Intel Corporation)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\AS\IAS\IntelAudioService.exe [532008 2022-08-11] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_uf.exe [2733712 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78240 2024-05-14] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2354584 2024-05-14] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2629936 2024-05-14] (Intel Corporation -> Intel)
S2 Killer Provider Data Helper Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerProviderDataHelperService.exe [1088304 2024-05-14] (Intel Corporation -> Intel)
R2 KillerSmartphoneSleepService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KSPSService.exe [77616 2024-05-14] (Intel Corporation -> Rivet Networks, LLC.)
R3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2024-05-14] (Intel Corporation -> Intel® Corporation)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123320 2025-01-24] (The Document Foundation -> The Document Foundation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpDefenderCoreService.exe [2009656 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Micro Star SCM; C:\Windows\SysWOW64\MSIService.exe [168416 2022-06-01] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
R2 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI NBFoundation Service\MSIAPService.exe [93080 2022-08-01] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
R2 MSI Sendevsvc; C:\Program Files (x86)\MSI\MSI NBFoundation Service\Sendevsvc.exe [307624 2021-04-16] (Micro-Star International CO., LTD. -> )
R2 MSITrueColorService; C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe [199896 2021-11-19] (Portrait Displays, Inc. -> Portrait Displays, Inc.)
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [150176 2022-08-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe [34032 2022-05-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1910192 2024-05-20] (SteelSeries France SASU -> Nahimic)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\SteelSeriesGGUpdateServiceProxy.exe [1587712 2025-03-13] (GN Hearing A/S -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe [4414464 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe [282480 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 BlueStacksDrv_msi2; C:\Program Files\BlueStacks_msi2\BstkDrv_msi2.sys [315768 2021-09-14] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2025-01-24] (Microsoft Corporation) [Archivo no firmado]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [188416 2025-01-24] (Microsoft Corporation) [Archivo no firmado]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Archivo no firmado]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 e3k25cx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\e3k25cx21x64.inf_amd64_086d7953e92f24a1\e3k25cx21x64.sys [845256 2024-08-19] (Realtek Semiconductor Corp. -> Realtek)
R3 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [106208 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsb; C:\WINDOWS\System32\drivers\FocusriteUsb.sys [170312 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsbAudio; C:\WINDOWS\System32\drivers\FocusriteUsbAudio.sys [109896 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsbMidi; C:\WINDOWS\System32\drivers\FocusriteUsbMidi.sys [53576 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbSwRoot; C:\WINDOWS\System32\drivers\FocusriteUsbSwRoot.sys [112968 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 IGO_VSD; C:\WINDOWS\system32\drivers\igovsd.sys [40240 2021-01-25] (British Cayman Islands Intelligo Technology Inc. Taiwan Branch -> Intelli-go)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_d97909364d9908a5\IntcUSB.sys [892960 2022-08-11] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_19ceb7ce67a7cf8b\gna.sys [87208 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_de6ec16890c1b449\ipf_acpi.sys [85648 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_cpu.sys [79496 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_lf.sys [431256 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [255792 2024-05-14] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333216 2025-09-21] (Microsoft Windows -> Microsoft Corporation)
R3 msihid; C:\WINDOWS\System32\drivers\msihid.sys [53272 2024-09-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 NahimicBTLink; C:\WINDOWS\System32\drivers\NahimicBTLink.sys [86200 2022-08-18] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [95896 2024-05-16] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [241552 2022-03-24] (Nvidia Corporation -> NVIDIA Corporation)
R3 RevoProcessDetector; C:\WINDOWS\System32\DRIVERS\RevoProcessDetector.sys [19504 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S3 ssbthid; C:\WINDOWS\System32\drivers\ssbthid.sys [44688 2021-12-06] (SteelSeries ApS -> SteelSeries ApS)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [43568 2024-07-22] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [47760 2021-12-06] (SteelSeries ApS -> SteelSeries ApS)
R3 ssps2; C:\WINDOWS\System32\drivers\ssps2.sys [38984 2024-12-13] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_7a086649438f4409\SteelSeries-Sonar-VAD.sys [95400 2024-08-07] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20880 2025-09-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [627104 2025-09-21] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102816 2025-09-21] (Microsoft Windows -> Microsoft Corporation)
S3 WINIO; C:\Program Files (x86)\MSI\MSI NBFoundation Service\KernCoreLib64.sys [25656 2018-11-15] (Micro-Star International CO., LTD. -> )

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2025-09-21 20:48 - 2025-09-21 20:49 - 000033587 _____ C:\Users\monic\Desktop\FRST.txt
2025-09-21 20:47 - 2025-09-21 20:47 - 002442752 _____ (Farbar) C:\Users\monic\Desktop\FRST64.exe
2025-09-21 20:42 - 2025-09-21 20:42 - 000772584 _____ C:\WINDOWS\system32\perfh00A.dat
2025-09-21 20:42 - 2025-09-21 20:42 - 000155514 _____ C:\WINDOWS\system32\perfc00A.dat

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2025-09-21 20:48 - 2025-04-14 00:01 - 000000000 ____D C:\FRST
2025-09-21 20:45 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-09-21 20:44 - 2025-04-21 16:24 - 000000000 ____D C:\Users\monic\Desktop\Doble tilde troubleshooting
2025-09-21 20:44 - 2021-10-15 02:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-09-21 20:42 - 2025-01-25 03:35 - 001717366 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-09-21 20:42 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2025-09-21 20:36 - 2021-12-16 03:40 - 000000000 ____D C:\ProgramData\NVIDIA
2025-09-21 20:35 - 2025-04-13 16:52 - 000000000 ____D C:\Users\monic\AppData\Roaming\WD Discovery
2025-09-21 20:35 - 2025-04-13 16:51 - 000000000 ____D C:\Users\monic\.wdc
2025-09-21 20:35 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-09-21 20:34 - 2025-01-25 03:34 - 000003108 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2025-09-21 20:34 - 2025-01-25 03:34 - 000003088 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2025-09-21 20:34 - 2025-01-25 03:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-09-21 20:34 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2025-09-21 20:34 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-09-21 20:34 - 2022-05-07 07:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-09-21 20:34 - 2021-12-16 04:15 - 000000000 ____D C:\ProgramData\Norton
2025-09-21 20:34 - 2021-10-15 02:17 - 000012288 ___SH C:\DumpStack.log.tmp
2025-09-21 20:33 - 2025-05-16 17:38 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2025-09-21 20:33 - 2022-08-16 21:20 - 000000000 ____D C:\Users\monic\AppData\Local\Packages
2025-09-21 20:33 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-09-21 20:33 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2025-09-21 20:33 - 2022-05-07 07:17 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2025-09-21 20:31 - 2025-04-13 16:52 - 000003212 _____ C:\WINDOWS\system32\Tasks\WD Discovery Service Task monic
2025-09-21 20:31 - 2025-04-13 16:52 - 000003148 _____ C:\WINDOWS\system32\Tasks\WD Device Agent Task monic
2025-09-21 20:21 - 2021-10-15 02:17 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-09-21 20:17 - 2022-08-16 21:20 - 000000000 ____D C:\Users\monic\AppData\Local\D3DSCache
2025-09-21 20:17 - 2021-12-16 04:19 - 000000000 ____D C:\Program Files (x86)\MSI
2025-09-21 20:16 - 2022-08-25 15:38 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-09-21 20:16 - 2022-08-25 15:38 - 000002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-09-21 20:15 - 2025-01-25 03:34 - 000003708 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-09-21 20:15 - 2025-01-25 03:34 - 000003582 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-09-21 20:15 - 2025-01-25 03:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-09-21 20:02 - 2022-10-05 21:17 - 000000000 ____D C:\ProgramData\OmApSvcBroker
2025-09-01 17:17 - 2024-01-14 00:05 - 000000000 ____D C:\Users\monic\Desktop\2024-25 - Backup Canon EOS R6
2025-09-01 17:16 - 2022-10-06 00:05 - 000000000 ____D C:\Users\monic\AppData\Local\Norton
2025-09-01 16:35 - 2021-12-16 05:04 - 000000000 ____D C:\ProgramData\Common
2025-09-01 14:45 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================
1 me gusta

y Addition. txt

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 15-09-2025
Ejecutado por monic (21-09-2025 20:49:25)
Ejecutado desde C:\Users\monic\Desktop
Microsoft Windows 11 Home Versión 23H2 22631.5335 (X64) (2025-01-25 01:34:45)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

(Si una entrada es incluida en el fixlist, será eliminada.)

Administrador (S-1-5-21-1483763337-1063507308-2646852439-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1483763337-1063507308-2646852439-503 - Limited - Disabled)
Invitado (S-1-5-21-1483763337-1063507308-2646852439-501 - Limited - Disabled)
monic (S-1-5-21-1483763337-1063507308-2646852439-1001 - Administrator - Enabled) => C:\Users\monic
WDAGUtilityAccount (S-1-5-21-1483763337-1063507308-2646852439-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Ableton Live 11 Lite (HKLM\...\{F04D689D-E614-4E66-972D-235C9FF5F29D}) (Version: 11.0.0.0 - Ableton) Hidden
Ableton Live 11 Lite (HKLM-x32\...\{0d3082dd-89e0-416d-851e-efe859e3a99f}) (Version: 11.0.0.0 - Ableton)
Ableton Push Driver v5.50.0 (HKLM\...\{8CE98F88-3F07-4338-A036-B66414F3FD66}) (Version: 5.50.0 - Ableton) Hidden
AutoFirma (HKLM\...\AutoFirma) (Version: 1.7.2 - Gobierno de España)
Blackmagic RAW Common Components (HKLM\...\{D89568C5-2607-4EB9-8173-3F032A0E6F16}) (Version: 4.5 - Blackmagic Design)
Configurador FNMT (HKLM-x32\...\ConfiguradorFnmt) (Version: 3.0.1 - FNMT-RCM)
DaVinci Resolve (HKLM\...\{34782C08-BF9E-4CCA-863E-17C0288D5493}) (Version: 19.1.40011 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{3739CA49-792F-4F1F-9B76-42DFBBBED27E}) (Version: 2.3.0.0 - Blackmagic Design)
Focusrite Audio Drivers 4.119.13.33 (HKLM\...\Focusrite Audio Drivers_is1) (Version: 4.119.13.33 - Focusrite Audio Engineering, Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 140.0.7339.129 - Google LLC)
Intel(R) Chipset Device Software (HKLM\...\{B7BE54CB-2BAB-458E-99FF-46067A9D451E}) (Version: 10.1.18950.8297 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{128196ab-db0f-4c9e-b603-9c8d8b59934d}) (Version: 10.1.18950.8297 - Intel(R) Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2134.22 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{D2261734-FC8C-4C96-B4FA-98C3B76ACED6}) (Version: 30.100.2134.22 - Intel Corporation) Hidden
Killer Ethernet Performance Driver Suite UWD (HKLM\...\{F5AFD07A-9C71-4B1B-8E5B-857722BA8344}) (Version: 3.1121.1159 - Rivet Networks)
Killer Wireless Driver UWD (HKLM\...\{7677ECBC-0890-4FDE-A0C5-B3646639B2A7}) (Version: 3.1121.1159 - Rivet Networks)
LibreOffice 25.2.0.3 (HKLM\...\{E38AFCD6-BF08-4ECA-AAFF-D6D57FAC1A3A}) (Version: 25.2.0.3 - The Document Foundation)
Microsoft 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.18623.20208 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 140.0.3485.81 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1483763337-1063507308-2646852439-1001\...\OneDriveSetup.exe) (Version: 25.065.0406.0002 - Microsoft Corporation)
Microsoft OneNote - es-es (HKLM\...\OneNoteFreeRetail - es-es) (Version: 16.0.18623.20208 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.08601 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
MSI App Player (HKLM\...\BlueStacks_msi2) (Version: 4.280.1.6306 - BlueStack Systems, Inc.)
MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2022.0811.01 - MSI)
MSI NBFoundation Service (HKLM-x32\...\{640EFA76-B899-476B-B2DF-D0CCF11D6083}}_is1) (Version: 2.0.2208.0501 - MSI)
MSI Sound Tune (HKLM\...\IGO_VAC) (Version: 2.0.1.7 - Micro-Star INT'L CO., LTD.)
MSI True Color (HKLM\...\{B4A2776D-59CD-4193-A19D-DE15CB7FC5AA}) (Version: 4.6.3.0 - Portrait Displays, Inc.)
NVIDIA Controlador de gráficos 511.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.65 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.20.0221 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.20.0221 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20208 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9257.1 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.5.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.5.8 - VS Revo Group, Ltd.)
SteelSeries GG 84.0.0 (HKLM\...\SteelSeries GG) (Version: 84.0.0 - SteelSeries ApS)
Synaptics WBF FP Reader (HKLM\...\{0FC69C88-1A89-4A7B-827A-40AA660EF769}) (Version: 5.5.11.1086 - Synaptics Incorporated)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.2.807 - Western Digital Technologies, Inc.)
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
WebView2 Runtime de Microsoft Edge (HKLM-x32\...\Microsoft EdgeWebView) (Version: 140.0.3485.81 - Microsoft Corporation) Hidden

Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-02-07] (INTEL CORP) [Startup Task]
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2025-09-21] (Disney)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1524.510.0_x64__rh07ty8m5nkag [2024-06-21] (INTEL CORP) [Startup Task]
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.42.0_x64__w1wdnht996qgy [2025-03-09] (LinkedIn) [Startup Task]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2504.16004.0_x64__8wekyb3d8bbwe [2025-05-16] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-01-31] (Microsoft Corp.)
Microsoft.HEVCVideoExtensions -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_2.2.34.0_x64__8wekyb3d8bbwe [2025-04-13] (Microsoft Corporation)
MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.52.0_x64__kzh8wxbdkxb8p [2025-05-16] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2022-08-25] (MAGIX)
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.5.0_x64__w2gh52qy24etm [2025-04-13] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.967.0_x64__56jybvy8sckqj [2025-01-31] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-04-21] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.52.359.0_x64__dt26b99r8h8gj [2025-05-16] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0 [2025-05-16] (Spotify AB) [Startup Task]
Traductor -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2025-05-16] (Microsoft Corporation)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-22] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.456.1632.0_x64__8wekyb3d8bbwe [2025-04-13] (Microsoft Corp.)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-1483763337-1063507308-2646852439-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\monic\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-1483763337-1063507308-2646852439-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\monic\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.08601\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\nvshext.dll [2022-03-24] (Nvidia Corporation -> NVIDIA Corporation)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

==================== Módulos cargados (Lista blanca) =============

2025-09-21 20:31 - 2025-09-21 20:31 - 002613248 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\ffmpeg.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 000372224 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\libegl.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 006534656 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\libglesv2.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 004264448 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\vk_swiftshader.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 000756224 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\vulkan-1.dll
2021-12-16 04:19 - 2021-10-06 01:10 - 046184448 _____ (Intel Corporation) [Archivo no firmado] C:\Program Files (x86)\MSI\MSI Center\Sound Tune\dnnl.dll
2022-10-05 21:16 - 2019-07-02 16:07 - 000014632 _____ (Micro-Star International CO., LTD. -> ) [Archivo no firmado] C:\Program Files (x86)\MSI\MSI NBFoundation Service\UEFIVaribleDll.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

==================== Asociación (Lista blanca) =================

==================== Internet Explorer (Lista blanca) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2021-06-05 14:08 - 2025-04-22 01:39 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost

==================== Network ===========================

(Actualmente no existe una corrección automática para esta sección.)

DNS Servers: 80.58.61.250 - 80.58.61.254
Firewall de Windows está habilitado.

Network Binding:
=============
Wi-Fi: Killer(R) Wi-Fi 6E AX1675i 160MHz Wireless Network Adapter (211NGW) -> Netwtw10.sys
Conexión de red Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Killer E3100G 2.5 Gigabit Ethernet Controller -> e3k25cx21x64.sys

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKU\S-1-5-21-1483763337-1063507308-2646852439-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\monic\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\10175199387080020183\133918947041599835.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{FF6EFF31-5D39-486B-A0CB-5A4CC3842FF0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{49228690-C04F-48B0-AD35-CE7204660A19}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4957CF35-4B42-4E58-A807-2EF7FBEE02D3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{72429593-D9E0-4D75-A751-500CDF7D241D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8FE829DF-068A-41DD-A31C-A90F95C94105}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4FAF4050-3656-4B43-923C-8FFEDB5EDB26}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C06FD9A6-B003-4775-9E73-5EF5A9B669CE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8D4CD828-E711-44F1-B7AF-09EDD63E7D3E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{B0C399E7-510D-46EA-8618-99C7E571D8FA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{51629925-DEA9-4285-ABCC-63E7600F4C7A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.263.394.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [TCP Query User{8E3F6A55-20A0-48DC-9016-05FC10CEC069}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [UDP Query User{DAF8348B-01B5-42DE-A59C-BF315927BF94}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{C040BD53-5850-4384-A219-9132BC2A48C8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{27593ABE-5A14-41F0-ABF0-21E6FA148B67}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{D94989C9-1E1B-4C1C-A392-8920A8C1639F}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{F2232A73-6090-4F41-BD79-3EC5B43E4394}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{E52A9C4E-151E-410A-B931-EA60C920FF71}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{2A6F9534-877C-4EE1-AC91-6F3D3FF68003}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{9B0074EE-387A-4566-87A0-71312D895562}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Ningún archivo
FirewallRules: [{7254B456-0EAC-4E6D-9306-B5BD4D2C7B2C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{53DFFA91-EA0D-40BD-9F09-487618CA7F64}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [UDP Query User{6BEE4AE9-4CBD-4D45-AE46-4F52CBCF12FF}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [{54F8AF04-9EAF-4110-B919-3D74AF9A3BFC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{BB8B7EAA-E417-44C3-A6FE-CC181168370B}] => (Allow) LPort=32683
FirewallRules: [{1B6C56EA-F289-4001-9E85-0E7807AD0862}] => (Allow) LPort=26822

==================== Puntos de Restauración =========================

05-07-2025 18:05:17 Punto de control programado
01-09-2025 14:46:30 Punto de control programado

==================== Dispositivos defectuosos en el Administrador de dispositivos ============

==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/21/2025 08:34:45 PM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17


Errores del sistema:
=============
Error: (09/21/2025 08:36:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Servicio de Google Update (gupdate) no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (09/21/2025 08:36:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Servicio de Google Update (gupdate).

Error: (09/21/2025 08:34:44 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Windows Search terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.

Error: (09/21/2025 08:34:44 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: El servicio Windows Search se cerró con el siguiente error: 
Una sesión de inicio especificada no existe. Es posible que haya finalizado.

Error: (09/21/2025 08:33:56 PM) (Source: DCOM) (EventID: 10010) (User: MSI)
Description: El servidor {2DE3095A-B49E-418F-B5C1-69D2CCF62A8F} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (09/21/2025 08:33:56 PM) (Source: DCOM) (EventID: 10010) (User: MSI)
Description: El servidor {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (09/21/2025 08:30:44 PM) (Source: DCOM) (EventID: 10010) (User: MSI)
Description: El servidor {1B222FE2-5B77-416A-B96E-CDD98B18EA20} no se registró con DCOM dentro del tiempo de espera requerido.

Error: (09/21/2025 08:17:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Servicio de Google Update (gupdate) no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.


Windows Defender:
================
Date: 2025-06-16 17:42:16
Description: 
Microsoft Defender Antivirus šçåⁿ ђǻѕ ьэεл šţőррêď вéƒóґè ĉøмφŀетíои.%π %ťŞсǻл ĬÐ:%ъ{96A9C6A3-ABA9-4EA7-B57C-694D5403809F}%и %ťŚčαŋ Ťγφë:%ьAntimalware%π %τŞćαń Рāгãмéţэŗş:%вQuick Scan%ⁿ  %ŧÙѕέř:%ьNT AUTHORITY\SYSTEM%ņ %ťЅţõφ Ŗ℮дşοņ:%ъ%12 

Date: 2025-04-22 01:36:53
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Cain&threatid=224492&enterprise=0
Nombre: PUA:Win32/Cain
Id.: 224492
Gravedad: Low
Categoría: Potentially Unwanted Software
Ruta de acceso: file:_D:\Backup CDs-DVDs\2004 - Música mp3 varios\NetUtilities\Cain\cain25b45.exe
Origen de detección: Local machine
Tipo de detección: Concrete
Origen de detección: Real-Time Protection
Usuario: MSI\monic
Nombre de proceso: C:\Users\monic\Desktop\FRST64.exe
Versión de inteligencia de seguridad: AV: 1.427.369.0, AS: 1.427.369.0, NIS: 1.427.369.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 

Date: 2025-04-22 00:47:46
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nombre: Program:Win32/Wacapew.C!ml
Id.: 265744
Gravedad: High
Categoría: Settings Modifier
Ruta de acceso: file:_C:\Users\monic\Downloads\kprm_2.19.exe; webfile:_C:\Users\monic\Downloads\kprm_2.19.exe|https://download.toolslib.net/download/file/951/3036?s=ttUnIXXR5Z9RDGAXDLbi26f17VfFL9Pg|pid:16212,ProcessStart:133897492651964627
Origen de detección: Internet
Tipo de detección: FastPath
Origen de detección: Downloads and attachments
Usuario: MSI\monic
Nombre de proceso: Unknown
Versión de inteligencia de seguridad: AV: 1.427.366.0, AS: 1.427.366.0, NIS: 1.427.366.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 

Date: 2025-04-22 00:45:32
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nombre: Program:Win32/Wacapew.C!ml
Id.: 265744
Gravedad: High
Categoría: Settings Modifier
Ruta de acceso: file:_C:\Users\monic\Downloads\kprm_2.19.exe; webfile:_C:\Users\monic\Downloads\kprm_2.19.exe|https://download.toolslib.net/download/file/951/3036?s=P7IiZ51l2QXGcYyJm62ZaopbRTVettGI|pid:18844,ProcessStart:133897491303723860
Origen de detección: Internet
Tipo de detección: FastPath
Origen de detección: Downloads and attachments
Usuario: MSI\monic
Nombre de proceso: Unknown
Versión de inteligencia de seguridad: AV: 1.427.366.0, AS: 1.427.366.0, NIS: 1.427.366.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 

Date: 2025-04-14 03:06:35
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Joke:Win32/Kokegift.A&threatid=2147488585&enterprise=0
Nombre: Joke:Win32/Kokegift.A
Id.: 2147488585
Gravedad: Medium
Categoría: Joke Program
Ruta de acceso: containerfile:_D:\Backup CDs-DVDs\200203 - Backup portátil Mónica\Monica\Zipfiles\gift.zip; file:_D:\Backup CDs-DVDs\200203 - Backup portátil Mónica\Monica\Zipfiles\gift.zip->gift.exe
Origen de detección: Local machine
Tipo de detección: Concrete
Origen de detección: User
Usuario: MSI\monic
Nombre de proceso: Unknown
Versión de inteligencia de seguridad: AV: 1.427.230.0, AS: 1.427.230.0, NIS: 1.427.230.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 
Event[0]

Date: 2025-03-26 21:48:12
Description: 
Antivirus de Microsoft Defender encontró un error crítico al realizar una acción en malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Virus:BAT/Munga.A&threatid=2147537087&enterprise=0
Nombre: Virus:BAT/Munga.A
Id.: 2147537087
Gravedad: Severe
Categoría: Virus
Ruta de acceso: file:_C:\Users\monic\Desktop\Backup CDs-DVDs\200309 - Archivos Jose\HandleWithCare\HACK\HACKERZONE\HACKERJONHBAT.TXT
Origen de detección: Local machine
Tipo de detección: Concrete
Origen de detección: Real-Time Protection
Usuario: NT AUTHORITY\SYSTEM
Nombre de proceso: C:\Windows\SysWOW64\rundll32.exe
Acción: Clean
Estado de acción:  No additional actions required
Código de error: 0x8007007f
Descripción del error: No se encontró el proceso especificado. 
Versión de inteligencia de seguridad: AV: 1.425.266.0, AS: 1.425.266.0, NIS: 1.425.266.0
Versión del motor: AM: 1.1.25020.1007, NIS: 1.1.25020.1007 

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

CodeIntegrity:
===============
Date: 2025-09-21 20:45:11
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\ControlLib.dll that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2025-09-21 20:34:42
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\ControlLib.dll that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2025-09-21 20:33:11
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.24.8.36\symamsi.dll that did not meet the Windows signing level requirements. 


==================== Información de la memoria =========================== 

BIOS: American Megatrends International, LLC. E16V5IMS.106 01/12/2022
Placa base: Micro-Star International Co., Ltd. MS-16V5
Procesador: 12th Gen Intel(R) Core(TM) i7-12700H
Porcentaje de memoria en uso: 25%
RAM física total: 32469.2 MB
RAM física disponible: 24042.45 MB
Virtual total: 34517.2 MB
Virtual disponible: 25871.2 MB

==================== Unidades ================================

Drive c: (Windows) (Fixed) (Total:929.39 GB) (Free:17.14 GB) (Model: WDC PC SN810 SDCPNRY-1T00-1032) NTFS

\\?\Volume{87268240-aa97-4381-8eba-0da87a321cb1}\ (WinRE tools) (Fixed) (Total:0.88 GB) (Free:0.1 GB) NTFS
\\?\Volume{ad511f67-5fec-4178-9e9a-f2b5b63ded5c}\ (BIOS_RVY) (Fixed) (Total:23.18 GB) (Free:0.69 GB) NTFS
\\?\Volume{5a5003a5-3611-482b-9b1e-fcb947e40991}\ (SYSTEM) (Fixed) (Total:0.29 GB) (Free:0.26 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: B3541769)

Partition: GPT.

==================== Final de Addition.txt =======================

¡Muchas gracias!

Sds,

Blue

1 me gusta

Buenas noches,

Repito el envío porque me he dado cuenta de que no estaba pinchado el disco duro externo. Y además, al reiniciar el PC, ha instalado una actualización de Nahimic.

FRST.txt v2

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 15-09-2025
Ejecutado por monic (administrador) sobre MSI (Micro-Star International Co., Ltd. Stealth GS66 12UGS) (22-09-2025 00:07:46)
Ejecutado desde C:\Users\monic\Desktop\FRST64.exe
Perfiles cargados: monic
Plataforma: Microsoft Windows 11 Home Versión 23H2 22631.5335 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Edge
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe
(C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorHelper.exe
(C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe ->) (SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\apps\engine\prism\SteelSeriesPrism.exe
(C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe ->) (SteelSeries ApS -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\apps\engine\SteelSeriesEngine.exe
(C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\140.0.3485.81\msedgewebview2.exe <6>
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(drivers\RivetNetworks\Killer\KSPSService.exe ->) (Intel Corporation -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\KSPS.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_helper.exe
(explorer.exe ->) (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.) C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <12>
(explorer.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColor.exe
(explorer.exe ->) (SteelSeries ApS -> SteelSeries A/S) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
(explorer.exe ->) (Thesycon Software Solutions GmbH & Co. KG -> ) C:\Program Files\Ableton\Push Driver\x64\AbletonPushCpl.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25094.310.3616.953_x64__8wekyb3d8bbwe\ms-teams.exe
(NahimicService.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicAPO4Volume.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_a4d6ae741278ead3\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_ffa9bf533a83b3cf\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_7ef5070e222f32f3\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Intel Corporation -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\KSPSService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe
(services.exe ->) (Micro-Star International CO., LTD. -> ) C:\Program Files (x86)\MSI\MSI NBFoundation Service\Sendevsvc.exe
(services.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\MSI NBFoundation Service\MSIAPService.exe
(services.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Windows\SysWOW64\MSIService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Portrait Displays, Inc. -> Portrait Displays, Inc.) C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4c6dc98171ff25d5\RtkAudUService64.exe <2>
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(SteelSeries France SASU -> A-Volute) C:\Users\monic\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (21E1B422-257A-44A2-9C8F-379165856473 -> ) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.7.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.124.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.22342.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.5334_none_e9529ad842d6dabb\TiWorker.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\MSI\MSI Center\Base Module\Start_HDR.exe
(svchost.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\MSI NBFoundation Service\OmApSvcBroker.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\Sound Tune\SoundTune.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControlEngine.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(svchost.exe ->) (VS REVO GROUP OOD -> VS Revo Group Ltd.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe
(svchost.exe ->) (Western Digital Technologies, Inc. -> ) C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe
(svchost.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe <5>
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WDDiscoveryMonitor.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_4c6dc98171ff25d5\RtkAudUService64.exe [2780096 2025-04-09] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [16870736 2025-04-09] (SteelSeries ApS -> SteelSeries A/S)
HKLM\...\Run: [MsiTrueColor] => C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColor.exe [6546648 2022-01-26] (Portrait Displays, Inc. -> Portrait Displays, Inc.)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [906840 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)
HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [132587360 2025-09-21] (Western Digital Technologies, Inc. -> Western Digital Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\140.0.7339.129\Installer\chrmstp.exe [2025-09-21] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ableton Push Control Panel Autostart.lnk [2023-12-06]
ShortcutTarget: Ableton Push Control Panel Autostart.lnk -> C:\Program Files\Ableton\Push Driver\x64\AbletonPushCpl.exe (Thesycon Software Solutions GmbH & Co. KG -> )

==================== Tareas programadas (Lista blanca) =================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {3227E4BE-A37E-4CE4-A529-E79E970B2FE5} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem141.0.7376.0{6A88C9EB-2FC9-478E-97DE-724DCA17DD82} => C:\Program Files (x86)\Google\GoogleUpdater\141.0.7376.0\updater.exe [6855320 2025-08-26] (Google LLC -> Google LLC)
Task: {FD741A00-3BD4-4017-993E-E2D6713FA1E9} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {47C6C53E-AD0E-43F4-8BDF-7BBC535E9D39} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D32703E-8CFF-4670-8DE7-660EA7B51656} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107976 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {A50A3D59-E080-4E6D-8A2C-FA013E5C0CEA} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [68360 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {B8F5CC7E-2922-43BF-82AB-279A0DBBA35F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29107976 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {F5C5ED2B-83A6-4EC9-800A-D6AEBC86BB11} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {534B1E84-C675-4D3A-9D49-CFE909019C73} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [315600 2025-04-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0D2E72C-0EDF-4058-96BC-8DD1AA5CB300} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [204400 2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {EE1CA8CD-3544-48BF-B8D9-D19CCA682C7F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe [1778248 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {096284D6-C2F5-4B65-8D2F-27D34D2A94E9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe [1778248 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FEB693D4-BA83-42FA-B53E-12B1E86BC9B7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe [1778248 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F9844813-86DA-4A7D-8296-FD8E29874445} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpCmdRun.exe [1778248 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {84B907F9-3E9E-4C8C-B9B6-D0709DF8A789} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [1118128 2024-05-20] (SteelSeries France SASU -> Nahimic)
Task: {D982866F-AC28-4B99-A674-67BF2657ED2E} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1438128 2024-05-20] (SteelSeries France SASU -> Nahimic)
Task: {EC14BC84-C04B-48C7-834D-73188CE97B94} - System32\Tasks\NahimicTask32 => C:\Windows\System32\..\SysWOW64\NahimicSvc32.exe [1118128 0] (SteelSeries France SASU -> Nahimic)
Task: {9EE75DC2-3B70-431E-8077-8B8D11916CD2} - System32\Tasks\NahimicTask64 => C:\Windows\System32\.\NahimicSvc64.exe [1438128 0] (SteelSeries France SASU -> Nahimic)
Task: {1F50DE06-1BC6-4C09-8245-B20067CED151} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {1A202FCD-CC67-4CC2-8203-8531BB13C213} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {5CBD3B18-2270-4D45-9F4C-AC606B190DB6} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {142FAFDE-6F09-4CD0-B07F-BEC07AF5DD0C} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {FB220C4D-D773-41DB-AF72-6D467AC58CE1} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2DBAB056-AA75-48CC-961B-A5C67982E777} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5229C2DB-B467-4F1A-A427-BC0F7CEE02C8} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B88D4C51-D851-47DE-8D17-9738F3611B1F} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {233A8561-1CAA-4107-967D-80BE1B46F443} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {447C5EFC-3503-4588-8DE7-C99B11265B2B} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-12-16] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9BA0DEC9-EE41-4BD4-9AF6-09F3548BCA0E} - System32\Tasks\OmApSvcBroker => C:\Program Files (x86)\MSI\MSI NBFoundation Service\OmApSvcBroker.exe [719328 2022-06-01] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
Task: {A22B696D-4711-4771-BACA-83CF2B516D9B} - System32\Tasks\OneDC_Updater => C:\Users\monic\Documents\temp\OneDC_Updater\OneDC_Updater.exe [654248 2022-02-21] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
Task: {952CAC6C-C74C-431E-8A63-A584AA2CE892} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1483763337-1063507308-2646852439-1001 => C:\Users\monic\AppData\Local\Microsoft\OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-05-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {E54509AA-2A83-4415-B0E4-6A9E516C1E2B} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-1483763337-1063507308-2646852439-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2025-01-24] (Microsoft Windows -> Microsoft Corporation)
Task: {415663A5-5160-4BB0-99C1-DA61442292FE} - System32\Tasks\VS Revo Group\RevoHelperFreeStartup => C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe [4053672 2024-12-10] (VS REVO GROUP OOD -> VS Revo Group Ltd.)
Task: {445AC73E-494C-4DBF-AC8D-56745D2F0A16} - System32\Tasks\WD Device Agent Task monic => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727392 2025-09-21] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {5F53422A-A2B1-42FE-84BD-E429C4BE5202} - System32\Tasks\WD Discovery Service Task monic => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82784 2025-09-21] (Western Digital Technologies, Inc. -> )

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\RNIdle Task.job => C:\Windows\System32\drivers\RivetNetworks\Killer\RNIdleTask.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Tcpip\Parameters: [DhcpNameServer] 80.58.61.250 80.58.61.254
Tcpip\..\Interfaces\{97a3e6fb-b068-4c0c-aa49-1e27fa024bc9}: [DhcpNameServer] 80.58.61.250 80.58.61.254

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\monic\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-16]
Edge Extension: (Documentos de Google sin conexión) - C:\Users\monic\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-13]
Edge Extension: (Edge relevant text changes) - C:\Users\monic\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-25]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default [2025-09-21]
CHR StartupUrls: Default -> "hxxp://www.google.es/","hxxps://www.ecosia.org/"
CHR Extension: (Tampermonkey) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2025-01-22]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-09-21]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-25]
CHR Extension: (Microsoft Single Sign On) - C:\Users\monic\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppnbnpeolgkicgegkbkbjmhlideopiji [2024-11-03]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13863152 2025-04-17] (Microsoft Corporation -> Microsoft Corporation)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_a4d6ae741278ead3\ipfsvc.exe [557264 2023-09-14] (Intel Corporation -> Intel Corporation)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\AS\IAS\IntelAudioService.exe [532008 2022-08-11] (Intel Corporation -> Intel)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_uf.exe [2733712 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78240 2024-05-14] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2354584 2024-05-14] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2629936 2024-05-14] (Intel Corporation -> Intel)
S2 Killer Provider Data Helper Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerProviderDataHelperService.exe [1088304 2024-05-14] (Intel Corporation -> Intel)
R2 KillerSmartphoneSleepService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KSPSService.exe [77616 2024-05-14] (Intel Corporation -> Rivet Networks, LLC.)
R3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2024-05-14] (Intel Corporation -> Intel® Corporation)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [123320 2025-01-24] (The Document Foundation -> The Document Foundation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MpDefenderCoreService.exe [2009656 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Micro Star SCM; C:\Windows\SysWOW64\MSIService.exe [168416 2022-06-01] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
R2 MSI Foundation Service; C:\Program Files (x86)\MSI\MSI NBFoundation Service\MSIAPService.exe [93080 2022-08-01] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
R2 MSI Sendevsvc; C:\Program Files (x86)\MSI\MSI NBFoundation Service\Sendevsvc.exe [307624 2021-04-16] (Micro-Star International CO., LTD. -> )
R2 MSITrueColorService; C:\Program Files\Portrait Displays\MSI True Color\MsiTrueColorService.exe [199896 2021-11-19] (Portrait Displays, Inc. -> Portrait Displays, Inc.)
R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [150176 2022-08-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\MSI Center\Voice Control\VoiceControl_Service.exe [34032 2022-05-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1910192 2024-05-20] (SteelSeries France SASU -> Nahimic)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\SteelSeriesGGUpdateServiceProxy.exe [1587712 2025-03-13] (GN Hearing A/S -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\NisSrv.exe [4414464 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe [282480 2025-09-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 BlueStacksDrv_msi2; C:\Program Files\BlueStacks_msi2\BstkDrv_msi2.sys [315768 2021-09-14] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2025-01-24] (Microsoft Corporation) [Archivo no firmado]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [188416 2025-01-24] (Microsoft Corporation) [Archivo no firmado]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Archivo no firmado]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 e3k25cx21x64; C:\WINDOWS\System32\DriverStore\FileRepository\e3k25cx21x64.inf_amd64_086d7953e92f24a1\e3k25cx21x64.sys [845256 2024-08-19] (Realtek Semiconductor Corp. -> Realtek)
R3 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [106208 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsb; C:\WINDOWS\System32\drivers\FocusriteUsb.sys [170312 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsbAudio; C:\WINDOWS\System32\drivers\FocusriteUsbAudio.sys [109896 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsbMidi; C:\WINDOWS\System32\drivers\FocusriteUsbMidi.sys [53576 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbSwRoot; C:\WINDOWS\System32\drivers\FocusriteUsbSwRoot.sys [112968 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 IGO_VSD; C:\WINDOWS\system32\drivers\igovsd.sys [40240 2021-01-25] (British Cayman Islands Intelligo Technology Inc. Taiwan Branch -> Intelli-go)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_d97909364d9908a5\IntcUSB.sys [892960 2022-08-11] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_19ceb7ce67a7cf8b\gna.sys [87208 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_de6ec16890c1b449\ipf_acpi.sys [85648 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_cpu.sys [79496 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_e6050705c26c770f\ipf_lf.sys [431256 2021-12-16] (Intel Corporation -> Intel Corporation)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [255792 2024-05-14] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333216 2025-09-21] (Microsoft Windows -> Microsoft Corporation)
R3 msihid; C:\WINDOWS\System32\drivers\msihid.sys [53272 2024-09-02] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 NahimicBTLink; C:\WINDOWS\System32\drivers\NahimicBTLink.sys [86200 2022-08-18] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [95896 2024-05-16] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [241552 2022-03-24] (Nvidia Corporation -> NVIDIA Corporation)
R3 RevoProcessDetector; C:\WINDOWS\System32\DRIVERS\RevoProcessDetector.sys [19504 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S3 ssbthid; C:\WINDOWS\System32\drivers\ssbthid.sys [44688 2021-12-06] (SteelSeries ApS -> SteelSeries ApS)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [43568 2024-07-22] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 sshid; C:\WINDOWS\System32\drivers\sshid.sys [47760 2021-12-06] (SteelSeries ApS -> SteelSeries ApS)
R3 ssps2; C:\WINDOWS\System32\drivers\ssps2.sys [38984 2024-12-13] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_7a086649438f4409\SteelSeries-Sonar-VAD.sys [95400 2024-08-07] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20880 2025-09-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [627104 2025-09-21] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102816 2025-09-21] (Microsoft Windows -> Microsoft Corporation)
S3 WINIO; C:\Program Files (x86)\MSI\MSI NBFoundation Service\KernCoreLib64.sys [25656 2018-11-15] (Micro-Star International CO., LTD. -> )

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2025-09-21 20:49 - 2025-09-21 20:50 - 000035798 _____ C:\Users\monic\Desktop\Addition.txt
2025-09-21 20:48 - 2025-09-22 00:08 - 000033551 _____ C:\Users\monic\Desktop\FRST.txt
2025-09-21 20:47 - 2025-09-21 20:47 - 002442752 _____ (Farbar) C:\Users\monic\Desktop\FRST64.exe
2025-09-21 20:42 - 2025-09-21 20:42 - 000772584 _____ C:\WINDOWS\system32\perfh00A.dat
2025-09-21 20:42 - 2025-09-21 20:42 - 000155514 _____ C:\WINDOWS\system32\perfc00A.dat

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2025-09-22 00:08 - 2021-12-16 03:40 - 000000000 ____D C:\ProgramData\NVIDIA
2025-09-22 00:07 - 2025-04-14 00:01 - 000000000 ____D C:\FRST
2025-09-22 00:06 - 2025-04-13 16:52 - 000000000 ____D C:\Users\monic\AppData\Roaming\WD Discovery
2025-09-22 00:06 - 2025-04-13 16:51 - 000000000 ____D C:\Users\monic\.wdc
2025-09-22 00:06 - 2025-01-25 03:34 - 000003108 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2025-09-22 00:06 - 2025-01-25 03:34 - 000003088 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2025-09-22 00:06 - 2025-01-25 03:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-09-22 00:06 - 2022-08-16 21:21 - 000000000 ___RD C:\Users\monic\OneDrive
2025-09-22 00:06 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2025-09-22 00:06 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-09-22 00:06 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2025-09-22 00:06 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-09-22 00:06 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-09-22 00:06 - 2021-12-16 03:48 - 000000000 ____D C:\ProgramData\A-Volute
2025-09-22 00:06 - 2021-10-15 02:17 - 000012288 ___SH C:\DumpStack.log.tmp
2025-09-22 00:05 - 2022-08-16 21:20 - 000000000 ____D C:\Users\monic\AppData\Local\D3DSCache
2025-09-22 00:05 - 2022-05-07 07:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-09-22 00:02 - 2022-10-05 21:17 - 000000000 ____D C:\ProgramData\OmApSvcBroker
2025-09-21 23:55 - 2025-01-25 03:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-09-21 23:54 - 2021-12-16 05:04 - 000000000 ____D C:\ProgramData\Common
2025-09-21 21:24 - 2022-08-16 21:20 - 000000000 ____D C:\Users\monic\AppData\Local\Packages
2025-09-21 20:54 - 2025-01-25 00:58 - 000000000 ____D C:\Users\monic\AppData\Roaming\Microsoft\Spelling
2025-09-21 20:50 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2025-09-21 20:44 - 2025-04-21 16:24 - 000000000 ____D C:\Users\monic\Desktop\Doble tilde troubleshooting
2025-09-21 20:44 - 2021-10-15 02:17 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-09-21 20:42 - 2025-01-25 03:35 - 001717366 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-09-21 20:34 - 2021-12-16 04:15 - 000000000 ____D C:\ProgramData\Norton
2025-09-21 20:33 - 2025-05-16 17:38 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2025-09-21 20:33 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-09-21 20:33 - 2022-05-07 07:17 - 000008192 _____ C:\WINDOWS\system32\config\ELAM
2025-09-21 20:31 - 2025-04-13 16:52 - 000003212 _____ C:\WINDOWS\system32\Tasks\WD Discovery Service Task monic
2025-09-21 20:31 - 2025-04-13 16:52 - 000003148 _____ C:\WINDOWS\system32\Tasks\WD Device Agent Task monic
2025-09-21 20:21 - 2021-10-15 02:17 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-09-21 20:17 - 2021-12-16 04:19 - 000000000 ____D C:\Program Files (x86)\MSI
2025-09-21 20:16 - 2022-08-25 15:38 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-09-21 20:16 - 2022-08-25 15:38 - 000002211 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-09-21 20:15 - 2025-01-25 03:34 - 000003708 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-09-21 20:15 - 2025-01-25 03:34 - 000003582 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-09-01 17:17 - 2024-01-14 00:05 - 000000000 ____D C:\Users\monic\Desktop\2024-25 - Backup Canon EOS R6
2025-09-01 17:16 - 2022-10-06 00:05 - 000000000 ____D C:\Users\monic\AppData\Local\Norton
2025-09-01 14:45 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================

Y Addition.txt v2

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 15-09-2025
Ejecutado por monic (22-09-2025 00:08:32)
Ejecutado desde C:\Users\monic\Desktop
Microsoft Windows 11 Home Versión 23H2 22631.5335 (X64) (2025-01-25 01:34:45)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

(Si una entrada es incluida en el fixlist, será eliminada.)

Administrador (S-1-5-21-1483763337-1063507308-2646852439-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1483763337-1063507308-2646852439-503 - Limited - Disabled)
Invitado (S-1-5-21-1483763337-1063507308-2646852439-501 - Limited - Disabled)
monic (S-1-5-21-1483763337-1063507308-2646852439-1001 - Administrator - Enabled) => C:\Users\monic
WDAGUtilityAccount (S-1-5-21-1483763337-1063507308-2646852439-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Ableton Live 11 Lite (HKLM\...\{F04D689D-E614-4E66-972D-235C9FF5F29D}) (Version: 11.0.0.0 - Ableton) Hidden
Ableton Live 11 Lite (HKLM-x32\...\{0d3082dd-89e0-416d-851e-efe859e3a99f}) (Version: 11.0.0.0 - Ableton)
Ableton Push Driver v5.50.0 (HKLM\...\{8CE98F88-3F07-4338-A036-B66414F3FD66}) (Version: 5.50.0 - Ableton) Hidden
AutoFirma (HKLM\...\AutoFirma) (Version: 1.7.2 - Gobierno de España)
Blackmagic RAW Common Components (HKLM\...\{D89568C5-2607-4EB9-8173-3F032A0E6F16}) (Version: 4.5 - Blackmagic Design)
Configurador FNMT (HKLM-x32\...\ConfiguradorFnmt) (Version: 3.0.1 - FNMT-RCM)
DaVinci Resolve (HKLM\...\{34782C08-BF9E-4CCA-863E-17C0288D5493}) (Version: 19.1.40011 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{3739CA49-792F-4F1F-9B76-42DFBBBED27E}) (Version: 2.3.0.0 - Blackmagic Design)
Focusrite Audio Drivers 4.119.13.33 (HKLM\...\Focusrite Audio Drivers_is1) (Version: 4.119.13.33 - Focusrite Audio Engineering, Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 140.0.7339.129 - Google LLC)
Intel(R) Chipset Device Software (HKLM\...\{B7BE54CB-2BAB-458E-99FF-46067A9D451E}) (Version: 10.1.18950.8297 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{128196ab-db0f-4c9e-b603-9c8d8b59934d}) (Version: 10.1.18950.8297 - Intel(R) Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2134.22 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{D2261734-FC8C-4C96-B4FA-98C3B76ACED6}) (Version: 30.100.2134.22 - Intel Corporation) Hidden
Killer Ethernet Performance Driver Suite UWD (HKLM\...\{F5AFD07A-9C71-4B1B-8E5B-857722BA8344}) (Version: 3.1121.1159 - Rivet Networks)
Killer Wireless Driver UWD (HKLM\...\{7677ECBC-0890-4FDE-A0C5-B3646639B2A7}) (Version: 3.1121.1159 - Rivet Networks)
LibreOffice 25.2.0.3 (HKLM\...\{E38AFCD6-BF08-4ECA-AAFF-D6D57FAC1A3A}) (Version: 25.2.0.3 - The Document Foundation)
Microsoft 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.18623.20208 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 140.0.3485.81 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1483763337-1063507308-2646852439-1001\...\OneDriveSetup.exe) (Version: 25.065.0406.0002 - Microsoft Corporation)
Microsoft OneNote - es-es (HKLM\...\OneNoteFreeRetail - es-es) (Version: 16.0.18623.20208 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.08601 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
MSI App Player (HKLM\...\BlueStacks_msi2) (Version: 4.280.1.6306 - BlueStack Systems, Inc.)
MSI Center SDK (HKLM-x32\...\{15289038-41BE-48F8-B8B9-0B1021D3089E}}_is1) (Version: 3.2022.0811.01 - MSI)
MSI NBFoundation Service (HKLM-x32\...\{640EFA76-B899-476B-B2DF-D0CCF11D6083}}_is1) (Version: 2.0.2208.0501 - MSI)
MSI Sound Tune (HKLM\...\IGO_VAC) (Version: 2.0.1.7 - Micro-Star INT'L CO., LTD.)
MSI True Color (HKLM\...\{B4A2776D-59CD-4193-A19D-DE15CB7FC5AA}) (Version: 4.6.3.0 - Portrait Displays, Inc.)
NVIDIA Controlador de gráficos 511.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.65 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.20.0221 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.20.0221 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20208 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9257.1 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.5.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.5.8 - VS Revo Group, Ltd.)
SteelSeries GG 84.0.0 (HKLM\...\SteelSeries GG) (Version: 84.0.0 - SteelSeries ApS)
Synaptics WBF FP Reader (HKLM\...\{0FC69C88-1A89-4A7B-827A-40AA660EF769}) (Version: 5.5.11.1086 - Synaptics Incorporated)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
WD Discovery (HKLM-x32\...\WDDiscovery) (Version: 5.2.807 - Western Digital Technologies, Inc.)
WD SES Driver Setup (HKLM-x32\...\{D9ABF771-729C-471F-A6DF-1010527DB376}) (Version: 2.1.0 - Western Digital) Hidden
WebView2 Runtime de Microsoft Edge (HKLM-x32\...\Microsoft EdgeWebView) (Version: 140.0.3485.81 - Microsoft Corporation) Hidden

Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-09-21] (INTEL CORP) [Startup Task]
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2025-09-21] (Disney)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1524.510.0_x64__rh07ty8m5nkag [2024-06-21] (INTEL CORP) [Startup Task]
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_3.0.42.0_x64__w1wdnht996qgy [2025-03-09] (LinkedIn) [Startup Task]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2506.26002.0_x64__8wekyb3d8bbwe [2025-09-21] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-01-31] (Microsoft Corp.)
Microsoft.HEVCVideoExtensions -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_2.4.15.0_x64__8wekyb3d8bbwe [2025-09-21] (Microsoft Corporation)
MSI Center -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.58.0_x64__kzh8wxbdkxb8p [2025-09-21] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_3.1.1.0_x64__a2t3txkz9j1jw [2022-08-25] (MAGIX)
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.7.0_x64__w2gh52qy24etm [2025-09-21] (A-Volute)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-09-21] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-04-21] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.52.359.0_x64__dt26b99r8h8gj [2025-05-16] (Realtek Semiconductor Corp)
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0 [2025-09-21] (Spotify AB) [Startup Task]
Traductor -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2025-05-16] (Microsoft Corporation)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-22] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8000.616.304.0_x64__8wekyb3d8bbwe [2025-09-21] (Microsoft Corp.)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-1483763337-1063507308-2646852439-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\monic\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-1483763337-1063507308-2646852439-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\monic\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.08601\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmi.inf_amd64_6fa10f555e4bd12b\nvshext.dll [2022-03-24] (Nvidia Corporation -> NVIDIA Corporation)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

==================== Módulos cargados (Lista blanca) =============

2025-09-21 20:31 - 2025-09-21 20:31 - 002613248 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\ffmpeg.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 000372224 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\libegl.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 006534656 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\libglesv2.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 004264448 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\vk_swiftshader.dll
2025-09-21 20:31 - 2025-09-21 20:31 - 000756224 _____ () [Archivo no firmado] C:\Program Files (x86)\Western Digital\Discovery\Current\vulkan-1.dll
2021-12-16 04:19 - 2021-10-06 01:10 - 046184448 _____ (Intel Corporation) [Archivo no firmado] C:\Program Files (x86)\MSI\MSI Center\Sound Tune\dnnl.dll
2022-10-05 21:16 - 2019-07-02 16:07 - 000014632 _____ (Micro-Star International CO., LTD. -> ) [Archivo no firmado] C:\Program Files (x86)\MSI\MSI NBFoundation Service\UEFIVaribleDll.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

==================== Asociación (Lista blanca) =================

==================== Internet Explorer (Lista blanca) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-04-13] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2021-06-05 14:08 - 2025-04-22 01:39 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost

==================== Network ===========================

(Actualmente no existe una corrección automática para esta sección.)

DNS Servers: 80.58.61.250 - 80.58.61.254
Firewall de Windows está habilitado.

Network Binding:
=============
Wi-Fi: Killer(R) Wi-Fi 6E AX1675i 160MHz Wireless Network Adapter (211NGW) -> Netwtw10.sys
Conexión de red Bluetooth: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Killer E3100G 2.5 Gigabit Ethernet Controller -> e3k25cx21x64.sys

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKU\S-1-5-21-1483763337-1063507308-2646852439-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\monic\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\10175199387080020183\133918947041599835.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 4) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [TCP Query User{8E3F6A55-20A0-48DC-9016-05FC10CEC069}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [UDP Query User{DAF8348B-01B5-42DE-A59C-BF315927BF94}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{C040BD53-5850-4384-A219-9132BC2A48C8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [{27593ABE-5A14-41F0-ABF0-21E6FA148B67}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{D94989C9-1E1B-4C1C-A392-8920A8C1639F}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{F2232A73-6090-4F41-BD79-3EC5B43E4394}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{E52A9C4E-151E-410A-B931-EA60C920FF71}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{2A6F9534-877C-4EE1-AC91-6F3D3FF68003}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )
FirewallRules: [{9B0074EE-387A-4566-87A0-71312D895562}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Ningún archivo
FirewallRules: [{7254B456-0EAC-4E6D-9306-B5BD4D2C7B2C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)
FirewallRules: [TCP Query User{53DFFA91-EA0D-40BD-9F09-487618CA7F64}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [UDP Query User{6BEE4AE9-4CBD-4D45-AE46-4F52CBCF12FF}C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe] => (Allow) C:\program files (x86)\blackmagic design\davinci control panels\setup utility\davinci control panels setup.exe (Blackmagic Design Pty Ltd -> Blackmagic Design)
FirewallRules: [{54F8AF04-9EAF-4110-B919-3D74AF9A3BFC}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{FF9C9146-5FD7-4024-BAC1-E9F7B2A0B335}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D475A13A-AB0A-4F50-9141-93742E39830A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1CC26F62-5443-4D01-AD80-69A99857CDC9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D1EDE0A2-DEB7-4CD7-86EC-4045813689BF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{048C0397-6BBC-41C6-9DB7-41F5C3919B5E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{529F6EC9-0F1A-40B2-B67B-CB4D650F7EF6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DB6D2F5A-20B2-4C81-8C8A-0F6430FF2771}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{17DCFD81-073E-44D6-A494-6C5B3388DE9F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{92206DE4-260C-43EC-B25E-2DB561AEDADC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C5A9651A-0A8C-41E3-91BF-36A271CCB735}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{144183A5-6D24-404B-AA55-31FB62B3128A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{758CD718-A827-4A9C-B219-D874F68A5AAC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{93FC77CD-F5F8-4FAE-A97F-1C0A3D3DB12C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.272.438.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DC549300-435E-48F5-87DE-F90C4BBB8B06}] => (Allow) LPort=32683
FirewallRules: [{2FE39888-0038-4B6F-BB07-809408D2F61F}] => (Allow) LPort=26822

==================== Puntos de Restauración =========================

21-09-2025 21:21:54 Windows Update

==================== Dispositivos defectuosos en el Administrador de dispositivos ============

==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17

Error: (09/22/2025 12:06:21 AM) (Source: IPF) (EventID: 17) (User: NT AUTHORITY)
Description: Event-ID 17


Errores del sistema:
=============
Error: (09/22/2025 12:08:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Servicio de Google Update (gupdate) no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (09/22/2025 12:08:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Servicio de Google Update (gupdate).

Error: (09/22/2025 12:06:20 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Windows Search terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.

Error: (09/22/2025 12:06:20 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: El servicio Windows Search se cerró con el siguiente error: 
Una sesión de inicio especificada no existe. Es posible que haya finalizado.

Error: (09/22/2025 12:02:30 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Minipuerto Microsoft Wi-Fi Direct Virtual Adapter #2, {9ca733c2-c0ad-4875-8ac8-e4cfc6147cc5}, tuvo el evento 74

Error: (09/21/2025 10:38:39 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error (0x80073d02 = No se pudo instalar el paquete porque los recursos que modifica están actualmente en uso.): 9WZDNCRFJ3P2-MICROSOFT.ZUNEVIDEO.

Error: (09/21/2025 10:38:38 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error (0x80073d02 = No se pudo instalar el paquete porque los recursos que modifica están actualmente en uso.): 9PC1H9VN18CM-Microsoft.StartExperiencesApp.

Error: (09/21/2025 10:38:37 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error (0x80073d02 = No se pudo instalar el paquete porque los recursos que modifica están actualmente en uso.): 9MSMLRH6LZF3-Microsoft.WindowsNotepad.


Windows Defender:
================
Date: 2025-06-16 17:42:16
Description: 
Microsoft Defender Antivirus šçåⁿ ђǻѕ ьэεл šţőррêď вéƒóґè ĉøмφŀетíои.%π %ťŞсǻл ĬÐ:%ъ{96A9C6A3-ABA9-4EA7-B57C-694D5403809F}%и %ťŚčαŋ Ťγφë:%ьAntimalware%π %τŞćαń Рāгãмéţэŗş:%вQuick Scan%ⁿ  %ŧÙѕέř:%ьNT AUTHORITY\SYSTEM%ņ %ťЅţõφ Ŗ℮дşοņ:%ъ%12 

Date: 2025-04-22 01:36:53
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Cain&threatid=224492&enterprise=0
Nombre: PUA:Win32/Cain
Id.: 224492
Gravedad: Low
Categoría: Potentially Unwanted Software
Ruta de acceso: file:_D:\Backup CDs-DVDs\2004 - Música mp3 varios\NetUtilities\Cain\cain25b45.exe
Origen de detección: Local machine
Tipo de detección: Concrete
Origen de detección: Real-Time Protection
Usuario: MSI\monic
Nombre de proceso: C:\Users\monic\Desktop\FRST64.exe
Versión de inteligencia de seguridad: AV: 1.427.369.0, AS: 1.427.369.0, NIS: 1.427.369.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 

Date: 2025-04-22 00:47:46
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nombre: Program:Win32/Wacapew.C!ml
Id.: 265744
Gravedad: High
Categoría: Settings Modifier
Ruta de acceso: file:_C:\Users\monic\Downloads\kprm_2.19.exe; webfile:_C:\Users\monic\Downloads\kprm_2.19.exe|https://download.toolslib.net/download/file/951/3036?s=ttUnIXXR5Z9RDGAXDLbi26f17VfFL9Pg|pid:16212,ProcessStart:133897492651964627
Origen de detección: Internet
Tipo de detección: FastPath
Origen de detección: Downloads and attachments
Usuario: MSI\monic
Nombre de proceso: Unknown
Versión de inteligencia de seguridad: AV: 1.427.366.0, AS: 1.427.366.0, NIS: 1.427.366.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 

Date: 2025-04-22 00:45:32
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nombre: Program:Win32/Wacapew.C!ml
Id.: 265744
Gravedad: High
Categoría: Settings Modifier
Ruta de acceso: file:_C:\Users\monic\Downloads\kprm_2.19.exe; webfile:_C:\Users\monic\Downloads\kprm_2.19.exe|https://download.toolslib.net/download/file/951/3036?s=P7IiZ51l2QXGcYyJm62ZaopbRTVettGI|pid:18844,ProcessStart:133897491303723860
Origen de detección: Internet
Tipo de detección: FastPath
Origen de detección: Downloads and attachments
Usuario: MSI\monic
Nombre de proceso: Unknown
Versión de inteligencia de seguridad: AV: 1.427.366.0, AS: 1.427.366.0, NIS: 1.427.366.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 

Date: 2025-04-14 03:06:35
Description: 
Microsoft Defender Antivirus detectó malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Joke:Win32/Kokegift.A&threatid=2147488585&enterprise=0
Nombre: Joke:Win32/Kokegift.A
Id.: 2147488585
Gravedad: Medium
Categoría: Joke Program
Ruta de acceso: containerfile:_D:\Backup CDs-DVDs\200203 - Backup portátil Mónica\Monica\Zipfiles\gift.zip; file:_D:\Backup CDs-DVDs\200203 - Backup portátil Mónica\Monica\Zipfiles\gift.zip->gift.exe
Origen de detección: Local machine
Tipo de detección: Concrete
Origen de detección: User
Usuario: MSI\monic
Nombre de proceso: Unknown
Versión de inteligencia de seguridad: AV: 1.427.230.0, AS: 1.427.230.0, NIS: 1.427.230.0
Versión de motor: AM: 1.1.25030.1, NIS: 1.1.25030.1 
Event[0]

Date: 2025-03-26 21:48:12
Description: 
Antivirus de Microsoft Defender encontró un error crítico al realizar una acción en malware u otro software potencialmente no deseado.
Para más información, consulta lo siguiente:
https://go.microsoft.com/fwlink/?linkid=37020&name=Virus:BAT/Munga.A&threatid=2147537087&enterprise=0
Nombre: Virus:BAT/Munga.A
Id.: 2147537087
Gravedad: Severe
Categoría: Virus
Ruta de acceso: file:_C:\Users\monic\Desktop\Backup CDs-DVDs\200309 - Archivos Jose\HandleWithCare\HACK\HACKERZONE\HACKERJONHBAT.TXT
Origen de detección: Local machine
Tipo de detección: Concrete
Origen de detección: Real-Time Protection
Usuario: NT AUTHORITY\SYSTEM
Nombre de proceso: C:\Windows\SysWOW64\rundll32.exe
Acción: Clean
Estado de acción:  No additional actions required
Código de error: 0x8007007f
Descripción del error: No se encontró el proceso especificado. 
Versión de inteligencia de seguridad: AV: 1.425.266.0, AS: 1.425.266.0, NIS: 1.425.266.0
Versión del motor: AM: 1.1.25020.1007, NIS: 1.1.25020.1007 

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiSpyware
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

Date: 2025-02-07 18:07:35
Description: 
Antivirus de Microsoft Defender detectó un error al intentar actualizar la inteligencia de seguridad.
Nueva versión de inteligencia de seguridad: 
Versión anterior de inteligencia de seguridad: 1.421.1630.0
Origen de actualización: Centro de protección contra malware de Microsoft
Tipo de inteligencia de seguridad: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión actual del motor: 
Versión anterior del motor: 1.1.24090.11
Código de error: 0x80072ee7
Descripción del error: No se pudo resolver el nombre de servidor o su dirección  

CodeIntegrity:
===============
Date: 2025-09-22 00:06:17
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25080.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\ControlLib.dll that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2025-09-21 20:34:42
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\ControlLib.dll that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2025-09-21 20:33:11
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.24.8.36\symamsi.dll that did not meet the Windows signing level requirements. 


==================== Información de la memoria =========================== 

BIOS: American Megatrends International, LLC. E16V5IMS.106 01/12/2022
Placa base: Micro-Star International Co., Ltd. MS-16V5
Procesador: 12th Gen Intel(R) Core(TM) i7-12700H
Porcentaje de memoria en uso: 23%
RAM física total: 32469.2 MB
RAM física disponible: 24973.37 MB
Virtual total: 34517.2 MB
Virtual disponible: 27117.1 MB

==================== Unidades ================================

Drive c: (Windows) (Fixed) (Total:929.39 GB) (Free:16.82 GB) (Model: WDC PC SN810 SDCPNRY-1T00-1032) NTFS
Drive e: (Elements) (Fixed) (Total:9313.97 GB) (Free:9045.45 GB) (Model: WD Elements 25A3 USB Device) NTFS

\\?\Volume{87268240-aa97-4381-8eba-0da87a321cb1}\ (WinRE tools) (Fixed) (Total:0.88 GB) (Free:0.1 GB) NTFS
\\?\Volume{ad511f67-5fec-4178-9e9a-f2b5b63ded5c}\ (BIOS_RVY) (Fixed) (Total:23.18 GB) (Free:0.69 GB) NTFS
\\?\Volume{5a5003a5-3611-482b-9b1e-fcb947e40991}\ (SYSTEM) (Fixed) (Total:0.29 GB) (Free:0.26 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: B3541769)

Partition: GPT.

==========================================================
Disk: 1 (Size: 9314 GB) (Disk ID: 16F2A91F)

Partition: GPT.

==================== Final de Addition.txt =======================

¡Muchas gracias!

Sds,

Blue

1 me gusta

¡Hola de nuevo!

Nada, escribo sólo para recuperar el caso. :slight_smile:

Este tema se abrió automáticamente después de 2 días.