Fkiffgg se inicia cuando arranco

tazmanio · 28 Septiembre, 2026 18:10

Buenas tardes, Fkiffgg se inicia cuando enciendo el equipo, he pasado FRST y me ha generado unos archivos txt que según he visto tengo que adjuntar en respuesta de este mensaje.

Gracias

tazmanio · 28 Septiembre, 2026 18:11

Addition.txt

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 26-09-2026

Ejecutado por MARIVI (28-09-2026 18:27:21) Ejecutado desde C:\Users\MARIVI\Downloads Microsoft Windows 10 Pro Versión 1903 18362.1256 (X64) (2020-03-20 12:40:35) Modo de Inicio: Normal

==================== Cuentas: =============================

(Si una entrada es incluida en el fixlist, será eliminada.)

Administrador (S-1-5-21-4205773567-3714965184-4253856947-500 - Administrators - Disabled) DefaultAccount (S-1-5-21-4205773567-3714965184-4253856947-503 - Limited - Disabled) Invitado (S-1-5-21-4205773567-3714965184-4253856947-501 - Limited - Disabled) MARIVI (S-1-5-21-4205773567-3714965184-4253856947-1001 - Administrators - Enabled) => C:\Users\MARIVI WDAGUtilityAccount (S-1-5-21-4205773567-3714965184-4253856947-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Programas instalados ======================

(Solo los programas de adware con indicador “Oculto”, pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-4205773567-3714965184-4253856947-1001…\uTorrent) (Version: 3.4.9.43295 - BitTorrent Inc.) Actualización de NVIDIA 10.4.0 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation) Adobe Acrobat Reader - Español (HKLM-x32…{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 26.002.21931 - Adobe Systems Incorporated) Adobe Refresh Manager (HKLM-x32…{AC76BA86-0804-1033-1959-018244601180}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Asistente para actualización a Windows 10 (HKLM-x32…{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22532 - Microsoft Corporation) Avast Free Antivirus (HKLM…\Avast Antivirus) (Version: 26.9.6226 - Avast Software) D3DX10 (HKLM-x32…{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Google Chrome (HKLM-x32…\Google Chrome) (Version: 153.0.8010.54 - Google LLC) Google Update Helper (HKLM-x32…{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden Google Update Helper (HKLM-x32…{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-0015-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-0016-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-0018-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-0019-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001A-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001B-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-002A-0000-1000-0000000FF1CE}ENTERPRISE{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-002A-0C0A-1000-0000000FF1CE}ENTERPRISE{430AE3E6-E982-4958-90FC-1C062BC74E22}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-0030-0000-0000-0000000FF1CE}ENTERPRISE{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-0044-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-006E-0C0A-0000-0000000FF1CE}ENTERPRISE{430AE3E6-E982-4958-90FC-1C062BC74E22}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-00A1-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-00BA-0C0A-0000-0000000FF1CE}ENTERPRISE{D79E9128-A250-4155-BE90-2BE81DE0406A}) (Version: - Microsoft) Hidden Microsoft Office Access MUI (Spanish) 2007 (HKLM-x32…{90120000-0015-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32…{90120000-0030-0000-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Enterprise 2007 (HKLM-x32…\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Office Excel 2007 Help Actualización (KB963678) (HKLM-x32…{90120000-0016-0C0A-0000-0000000FF1CE}ENTERPRISE{59E09C3D-4878-47D9-87DB-6D0018026889}) (Version: - Microsoft) Microsoft Office Excel MUI (Spanish) 2007 (HKLM-x32…{90120000-0016-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Groove MUI (Spanish) 2007 (HKLM-x32…{90120000-00BA-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office InfoPath MUI (Spanish) 2007 (HKLM-x32…{90120000-0044-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Office 64-bit Components 2007 (HKLM…{90120000-002A-0000-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office OneNote MUI (Spanish) 2007 (HKLM-x32…{90120000-00A1-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Outlook 2007 Help Actualización (KB963677) (HKLM-x32…{90120000-001A-0C0A-0000-0000000FF1CE}ENTERPRISE{59C244C2-0C37-4E85-8F7E-DBDD3958B694}) (Version: - Microsoft) Microsoft Office Outlook MUI (Spanish) 2007 (HKLM-x32…{90120000-001A-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Powerpoint 2007 Help Actualización (KB963669) (HKLM-x32…{90120000-0018-0C0A-0000-0000000FF1CE}ENTERPRISE{F318245D-05AE-4681-A749-A036CE44AF29}) (Version: - Microsoft) Microsoft Office PowerPoint MUI (Spanish) 2007 (HKLM-x32…{90120000-0018-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Basque) 2007 (HKLM-x32…{90120000-001F-042D-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Catalan) 2007 (HKLM-x32…{90120000-001F-0403-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (English) 2007 (HKLM-x32…{90120000-001F-0409-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (French) 2007 (HKLM-x32…{90120000-001F-040C-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Galician) 2007 (HKLM-x32…{90120000-001F-0456-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Portuguese (Brazil)) 2007 (HKLM-x32…{90120000-001F-0416-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proof (Spanish) 2007 (HKLM-x32…{90120000-001F-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Proofing (Spanish) 2007 (HKLM-x32…{90120000-002C-0C0A-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-0403-0000-0000000FF1CE}ENTERPRISE{BEADB115-DB47-4BD0-A9EC-AE585AFAB2D8}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-0409-0000-0000000FF1CE}ENTERPRISE{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-040C-0000-0000000FF1CE}ENTERPRISE{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-0416-0000-0000000FF1CE}ENTERPRISE{8A524694-0CA4-476A-9301-B1E9D70FC952}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-042D-0000-0000000FF1CE}ENTERPRISE{017A6981-5E03-4A97-830A-35FE0927BB7F}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-0456-0000-0000000FF1CE}ENTERPRISE{A3A03B41-14EA-4E50-97D8-FCF429AE0CCB}) (Version: - Microsoft) Hidden Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) (HKLM-x32…{90120000-001F-0C0A-0000-0000000FF1CE}ENTERPRISE{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden Microsoft Office Publisher MUI (Spanish) 2007 (HKLM-x32…{90120000-0019-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared 64-bit MUI (Spanish) 2007 (HKLM…{90120000-002A-0C0A-1000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Shared MUI (Spanish) 2007 (HKLM-x32…{90120000-006E-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft Office Word 2007 Help Actualización (KB963665) (HKLM-x32…{90120000-001B-0C0A-0000-0000000FF1CE}ENTERPRISE{377BA42A-1C84-45D6-94B8-6D00887D172D}) (Version: - Microsoft) Microsoft Office Word MUI (Spanish) 2007 (HKLM-x32…{90120000-001B-0C0A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Hidden Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32…{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32…{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32…{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32…{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32…{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32…{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox (x64 es-MX) (HKLM…\Mozilla Firefox) (Version: 156.0.1 - Mozilla) Mozilla Maintenance Service (HKLM…\MozillaMaintenanceService) (Version: 56.0.1 - Mozilla) MSVCRT (HKLM-x32…{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (HKLM-x32…{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden NVIDIA Controlador de 3D Vision 342.01 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation) NVIDIA Controlador de gráficos 342.01 (HKLM…{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation) NVIDIA Stereoscopic 3D Driver (HKLM-x32…\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden Photo Common (HKLM-x32…{CAA0F57A-BA8C-4AD8-AA03-F32B0E4F5623}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Photo Gallery (HKLM-x32…{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Photo Gallery (HKLM-x32…{C992FFE0-AC32-4FA9-BC9A-F1637B9E655D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32…{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5969 - Realtek Semiconductor Corp.) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32…{90120000-0030-0000-0000-0000000FF1CE}ENTERPRISE{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update for Windows 10 for x64-based Systems (KB4480730) (HKLM…{2E8B8BDD-03DF-4C1C-8C99-E6A4BCBF43CE}) (Version: 2.51.0.0 - Microsoft Corporation) Update for Windows 10 for x64-based Systems (KB5001716) (HKLM…{3800CCFC-4006-4B30-A103-416AF26A885C}) (Version: 2.71.0.0 - Microsoft Corporation) UpdateAssistant (HKLM…{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden Windows Live Communications Platform (HKLM-x32…{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32…{66B5819D-DE70-42BE-B40F-978FBA12452E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32…\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Live Installer (HKLM-x32…{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Mail (HKLM-x32…{BAD27F0E-5165-49A5-BE66-AF5BF73F2FEE}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Messenger (HKLM-x32…{BAD984EE-790E-4513-A428-3BE2D426DCA7}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live MIME IFilter (HKLM…{25058321-C33E-496B-8915-6FD64D362CAF}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Photo Common (HKLM-x32…{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live PIMT Platform (HKLM-x32…{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live SOXE (HKLM-x32…{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (HKLM-x32…{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live UX Platform (HKLM-x32…{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (HKLM-x32…{6522F5F9-411B-4513-A75B-CEA00395F032}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Writer (HKLM-x32…{A2DC527D-FA79-46E9-973F-920897CA55E9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Writer Resources (HKLM-x32…{0F974770-76EB-4C38-986E-E7BDD9C0DFC4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Movie Maker Free Version (HKLM-x32…{3CC29C1A-B5FE-457B-8F22-32A2557A9227}}_is1) (Version: - topwin-movie-maker.com)

Packages:

Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML → C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-21] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection → C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-08] (Microsoft Studios) [MS Ad]

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2217832 2009-02-26] (Microsoft Corporation → Microsoft Corporation) ShellIconOverlayIdentifiers: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) ShellIconOverlayIdentifiers-x32: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] → {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat Reader DC\Acrobat Elements\ContextMenuShim64.dll [2026-09-15] (Adobe Inc. → Adobe Systems Inc.) ContextMenuHandlers1: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) ContextMenuHandlers3: [00asw] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) ContextMenuHandlers5: [NvCplDesktopContext] → {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation → NVIDIA Corporation) ContextMenuHandlers6: [avast] → {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2026-09-28] (Gen Digital Inc. → Gen Digital Inc.)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

ShortcutWithArgument: C:\Users\MARIVI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\Chrome Remote Desktop.lnk → C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) → --profile-directory=Default --app-id=efmjfjelnicpmdcmfikempdhlmainjcb ShortcutWithArgument: C:\Users\MARIVI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\Escritorio Remoto de Chrome.lnk → C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) → --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp ShortcutWithArgument: C:\Users\MARIVI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\a3a1d6b8109861c5\Hangouts de Google.lnk → C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) → --profile-directory=Default --app-id=nckgahadagoaajjgafhacjanaoiihapd

==================== Módulos cargados (Lista blanca) =============

2020-03-20 14:12 - 2016-11-14 11:45 - 001408200 _____ (NVIDIA Corporation PE Sign v2016 → NVIDIA Corporation) [Archivo no firmado] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El “AlternateShell” será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => “”=“Driver” HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => “”=“Driver”

==================== Asociación (Lista blanca) =================

==================== Internet Explorer (Lista blanca) =============

SearchScopes: HKU\S-1-5-21-4205773567-3714965184-4253856947-1001 → DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO-x32: Groove GFS Browser Helper → {72853161-30C5-4D22-B7F9-0BBC1D38A37E} → C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation → Microsoft Corporation)

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2017-09-29 15:46 - 2026-09-28 18:28 - 000001073 _____ C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 keystone.mwbsys.com 127.0.0.1 gen-webserver.internal www.gen-webserver.internal # gen digital helper server 127.0.0.1 revocation.gen-webserver.internal www.revocation.gen-webserver.internal # gen digital helper server

==================== Network ===========================

(Actualmente no existe una corrección automática para esta sección.)

DNS Servers: 192.168.0.1 Firewall de Windows está habilitado.

Network Binding:

Ethernet: Realtek PCIe FE Family Controller → rt640x64.sys Wi-Fi: Intel(R) WiFi Link 5100 AGN → NETwNs64.sys

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKU\S-1-5-21-4205773567-3714965184-4253856947-1001\Control Panel\Desktop\Wallpaper → C:\Windows\web\wallpaper\Windows\img0.jpg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: ) HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

HKU\S-1-5-21-4205773567-3714965184-4253856947-1001…\StartupApproved\Run: => “d716e4a9” HKU\S-1-5-21-4205773567-3714965184-4253856947-1001…\StartupApproved\Run: => “uTorrent”

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{459E2E7B-8F68-41B6-BC85-F9872BEFA72B}] => (Allow) LPort=1688 FirewallRules: [{AD1C1E8C-89EB-4014-B311-FAB8FB53E975}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation → Mozilla Corporation) FirewallRules: [{0D93A19D-BB61-4858-AE09-936FD52575D5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation → Mozilla Corporation) FirewallRules: [{9C22F39B-30C7-41FF-AF56-7E5423F91FD3}] => (Allow) C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe => Ningún archivo FirewallRules: [{18833E5E-D8E3-41B2-BD01-2B4DABC16F21}] => (Allow) C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe => Ningún archivo FirewallRules: [{A692A222-3457-4CFF-8896-F0E7D99453E2}] => (Allow) C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe => Ningún archivo FirewallRules: [{39FA476D-7C46-44B6-8E7A-B1BEF1E4F5CC}] => (Allow) C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe => Ningún archivo FirewallRules: [{99FE5043-9D33-4C99-B781-EF895942EBF0}] => (Allow) C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe => Ningún archivo FirewallRules: [{13C588C5-47A5-42AC-A003-0160A432CB0D}] => (Allow) C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe => Ningún archivo FirewallRules: [{946CF764-857C-4BCF-84AC-80F9F61B07FE}] => (Allow) C:\Users\MARIVI\AppData\Roaming\Zoom\bin\Zoom.exe => Ningún archivo FirewallRules: [{60B954BD-A27F-4A49-B903-B98FA85C2642}] => (Allow) C:\Users\MARIVI\AppData\Roaming\Zoom\bin\airhost.exe => Ningún archivo FirewallRules: [TCP Query User{64FFF49B-CA6B-4C81-89D1-3E8DED3CB187}C:\users\marivi\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe] => (Allow) C:\users\marivi\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe => Ningún archivo FirewallRules: [UDP Query User{449930B1-9CB5-4B28-B816-82F827603727}C:\users\marivi\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe] => (Allow) C:\users\marivi\appdata\local\microsoft\skypeforbusinessplugin\16.2.0.511\pluginhost.exe => Ningún archivo FirewallRules: [TCP Query User{6D1223B3-0AE3-4569-BE64-656CF7652D4F}C:\program files (x86)\microsoft office\office16\lync.exe] => (Allow) C:\program files (x86)\microsoft office\office16\lync.exe => Ningún archivo FirewallRules: [UDP Query User{11AF23ED-FDC2-44DB-A8EF-C2AD6173C28B}C:\program files (x86)\microsoft office\office16\lync.exe] => (Allow) C:\program files (x86)\microsoft office\office16\lync.exe => Ningún archivo FirewallRules: [{331ACB34-5FD4-4D6C-B485-835863D1754A}] => (Block) C:\program files (x86)\microsoft office\office16\lync.exe => Ningún archivo FirewallRules: [{10A4CA43-0EF3-4F7B-B1C6-99B4B3A1065B}] => (Block) C:\program files (x86)\microsoft office\office16\lync.exe => Ningún archivo FirewallRules: [{B599E781-0AFE-43D0-9014-3D35AE5AB1FA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation → Microsoft Corporation) FirewallRules: [{86EDE484-4BFE-43AD-9040-D2D3782B4E64}] => (Allow) LPort=2869 FirewallRules: [{195C3317-BE2B-4EE1-A7E9-23A656DEDF05}] => (Allow) LPort=1900 FirewallRules: [{10913C41-6BA6-4D84-9610-8156EA14F1E6}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Gen Digital Inc. → Gen Digital Inc.) FirewallRules: [{4F568329-6BE8-4282-93E5-55A18B134D5B}] => (Allow) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Gen Digital Inc. → Gen Digital Inc.) FirewallRules: [{2FA62B88-8A57-4257-87FF-2236F701B3EA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC → Google LLC)

==================== Puntos de Restauración =========================

ATENCIÓN: Restaurar Sistema está deshabilitado (Total:94.16 GB) (Free:57.28 GB) (61%)

==================== Dispositivos defectuosos en el Administrador de dispositivos ============

==================== Errores del registro de eventos: ========================

Errores de aplicación:

Error: (09/28/2026 06:12:03 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (3052,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (09/28/2026 06:08:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nombre de la aplicación con errores: SystemSettings.exe, versión: 10.0.18362.1171, marca de tiempo: 0x066bf1a5 Nombre del módulo con errores: Windows.UI.Xaml.dll, versión: 10.0.18362.1171, marca de tiempo: 0x3065fca2 Código de excepción: 0xc000027b Desplazamiento de errores: 0x0000000000713260 Identificador del proceso con errores: 0x186c Hora de inicio de la aplicación con errores: 0x01dd4f5f67fff985 Ruta de acceso de la aplicación con errores: C:\Windows\ImmersiveControlPanel\SystemSettings.exe Ruta de acceso del módulo con errores: C:\Windows\System32\Windows.UI.Xaml.dll Identificador del informe: de27cbc3-9127-420d-87f7-b5f220eb607f Nombre completo del paquete con errores: windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy Identificador de aplicación relativa del paquete con errores: microsoft.windows.immersivecontrolpanel

Error: (09/28/2026 06:03:18 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: El programa firefox.exe (versión 156.0.1.575) dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible sobre el problema, comprueba el historial de problemas en el panel de control de seguridad y mantenimiento.

Id. de proceso: 1ec8

Hora de Inicio: 01dd4f61067824d4

Hora de finalización: 19

Ruta de la aplicación: C:\Program Files\Mozilla Firefox\firefox.exe

Id. de informe: c77c28fe-12ef-4330-adcf-b98bf3ebc39a

Nombre completo del paquete con errores:

Id. de la aplicación relativa al paquete con errores:

Tipo de bloqueo: Unknown

Error: (09/28/2026 05:48:55 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: El programa firefox.exe (versión 156.0.1.575) dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible sobre el problema, comprueba el historial de problemas en el panel de control de seguridad y mantenimiento.

Id. de proceso: 2474

Hora de Inicio: 01dd4f60b39e9518

Hora de finalización: 168

Ruta de la aplicación: C:\Program Files\Mozilla Firefox\firefox.exe

Id. de informe: 8fc3b3ed-5263-4d38-bc5a-b024728bf052

Nombre completo del paquete con errores:

Id. de la aplicación relativa al paquete con errores:

Tipo de bloqueo: Unknown

Error: (09/28/2026 05:47:42 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: El programa firefox.exe (versión 156.0.1.575) dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible sobre el problema, comprueba el historial de problemas en el panel de control de seguridad y mantenimiento.

Id. de proceso: 29c

Hora de Inicio: 01dd4f603b447aea

Hora de finalización: 141

Ruta de la aplicación: C:\Program Files\Mozilla Firefox\firefox.exe

Id. de informe: 49927c1a-7a2e-4360-83d7-a04f4b603ac5

Nombre completo del paquete con errores:

Id. de la aplicación relativa al paquete con errores:

Tipo de bloqueo: Unknown

Error: (09/28/2026 05:36:57 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Error de la activación de licencia (slui.exe) con el siguiente código: hr=0x8007232B Argumentos de línea de comandos: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (09/28/2026 05:36:53 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: ) Description: Error de la activación de licencia (slui.exe) con el siguiente código: hr=0x8007232B Argumentos de línea de comandos: RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=1

Error: (09/28/2026 05:28:07 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (5440,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Errores del sistema:

Error: (09/28/2026 05:39:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio Servicio de Google Update (gupdate) no pudo iniciarse debido al siguiente error: El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (09/28/2026 05:39:22 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Servicio de Google Update (gupdate).

Error: (09/28/2026 05:35:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio MBAMChameleon no pudo iniciarse debido al siguiente error: El sistema no puede encontrar el archivo especificado.

Error: (09/28/2026 05:33:36 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: El servicio Windows Update no se cerró correctamente después de recibir un control de aviso de apagado.

Error: (09/28/2026 05:33:21 PM) (Source: Service Control Manager) (EventID: 7043) (User: ) Description: El servicio aswbIDSAgent no se cerró correctamente después de recibir un control de aviso de apagado.

Error: (09/28/2026 05:22:53 PM) (Source: Schannel) (EventID: 4113) (User: NT AUTHORITY) Description: El certificado recibido desde el servidor remoto expiró o aún no es válido. Error de la solicitud de conexión TLS. Los datos adjuntos incluyen el certificado del servidor.

Error: (09/28/2026 04:27:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio Servicio de Google Update (gupdate) no pudo iniciarse debido al siguiente error: El servicio no respondió a tiempo a la solicitud de inicio o de control.

Windows Defender:

==================== Información de la memoria ===========================

BIOS: Phoenix 1.10C 01/12/2010 Placa base: FUJITSU SIEMENS F47 Procesador: Intel(R) Core™2 Duo CPU P8400 @ 2.26GHz Porcentaje de memoria en uso: 57% RAM física total: 4060.89 MB RAM física disponible: 1726.73 MB Virtual total: 6102.85 MB Virtual disponible: 3405.63 MB

==================== Unidades ================================

Disk 0 - Drive c: () (Fixed) (Total:94.16 GB) (Free:57.28 GB) (Model: WDC WD3200BEVT-22ZCT0) NTFS ==>[unidad con componentes de arranque (obtenido de BCD)] Disk 0 - Drive d: (DATA) (Fixed) (Total:195.14 GB) (Free:192.86 GB) (Model: WDC WD3200BEVT-22ZCT0) NTFS

Disk 0 - \?\Volume{df76c80a-0000-0000-0000-100000000000}\ (WinRE) (Fixed) (Total:8.79 GB) (Free:4.07 GB) NTFS

==================== MBR & Tabla de particiones ====================

============================================================ Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.09 GB) (Disk ID: DF76C80A)

Partitions:

Partition Style : MBR Partition Count : 4 Disk Signature : 0xDF76C80A

Partition 1

Type : MBR 0x27 (Windows Recovery) Size : 8.79 GB Offset : 1 MB Partition GUID : {DF76C80A-0000-0000-0000-100000000000} Bootable : No Recognized : Yes Hidden Sectors : 2048

Partition 2

Type : MBR 0x07 (NTFS / exFAT / HPFS) Size : 94.16 GB Offset : 9001 MB Partition GUID : {DF76C80A-0000-0000-0000-903202000000} Bootable : Yes Recognized : Yes Hidden Sectors : 18434048

Partition 3

Type : MBR 0x07 (NTFS / exFAT / HPFS) Size : 195.14 GB Offset : 105420 MB Partition GUID : {DF76C80A-0000-0000-0000-C0BC19000000} Bootable : No Recognized : Yes Hidden Sectors : 215900160

Partition Entries : 4 Actual Partitions : 3

============================================================

==================== Final Addition.txt =======================

tazmanio · 28 Septiembre, 2026 18:12

FRST.txt

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 26-09-2026 Ejecutado por MARIVI (administrador) sobre DESKTOP-4AHVBL4 (FUJITSU SIEMENS AMILO Pi 3540) (28-09-2026 18:23:27) Ejecutado desde C:\Users\MARIVI\Downloads\FRST64.exe Perfiles cargados: MARIVI Plataforma: Microsoft Windows 10 Pro Versión 1903 18362.1256 (X64) Idioma: Español (España, internacional) Navegador predeterminado: Chrome Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Adobe Inc. → Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe <2> (C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ->) (NVIDIA Corporation → NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation → NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (CompatTelRunner.exe ->) (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (explorer.exe ->) (Realtek Semiconductor Corp → Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Gen Digital Inc. → Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastUI.exe <4> (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (NVIDIA Corporation → NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (nvvsvc.exe ->) (NVIDIA Corporation → NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (services.exe ->) (Adobe Inc. → Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Avast Software s.r.o. → AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe (services.exe ->) (Gen Digital Inc. → Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe (services.exe ->) (Gen Digital Inc. → Gen Digital Inc.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (services.exe ->) (MDL Forum, mod by Ratiborus) [Archivo no firmado] C:\ProgramData\KMSAuto\bin\KMSSS.exe (services.exe ->) (NVIDIA Corporation → NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (services.exe ->) (NVIDIA Corporation → NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (svchost.exe ->) (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2> (svchost.exe ->) (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe (svchost.exe ->) (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows → Microsoft Corporation) C:\Windows\System32\usocoreworker.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM…\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794888 2015-06-29] (NVIDIA Corporation → NVIDIA Corporation) HKLM…\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [1078712 2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) HKLM…\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8312352 2009-10-28] (Realtek Semiconductor Corp → Realtek Semiconductor) HKLM-x32…\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation → Microsoft Corporation) HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restricción <==== ATENCIÓN HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restricción <==== ATENCIÓN HKU\S-1-5-21-4205773567-3714965184-4253856947-1001…\Run: [d716e4a9] => C:\ProgramData\Intel\Wireless\ea9aaf7\fkiffgg.exe C:\ProgramData\Intel\Wireless\ea9aaf7\5a786c1.au3 (Ningún archivo) HKU\S-1-5-21-4205773567-3714965184-4253856947-1001…\Run: [uTorrent] => “C:\Users\MARIVI\AppData\Roaming\uTorrent\uTorrent.exe” /MINIMIZED (Ningún archivo) HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] → C:\Program Files (x86)\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC → Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] → C:\Program Files (x86)\Google\Chrome\Application\153.0.8010.54\Installer\chrmstp.exe [8030872 2022-02-14] (Google LLC → Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{E5931AF4-2A8F-48A5-AFC8-460348F480E8}] → reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) =================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {6F67BE99-1BF1-47DB-9E31-00B518FB5F04} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. → Adobe Inc.) Task: {C21CBCE5-492F-4276-800B-5373C7E470AF} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [5819320 2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) Task: {902B1BE4-1C74-4479-A2A5-4002C9E072FB} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [3710456 2022-02-14] (Gen Digital Inc. → Gen Digital Inc.) Task: {C7A8931E-0833-474E-88BD-F96171D72B79} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem156.0.8067.0{9F3AFBA2-B96F-44FA-B2A0-C975C7B8C900} => C:\Program Files (x86)\Google\GoogleUpdater\156.0.8067.0\updater.exe [9992344 2026-09-21] (Google LLC → Google LLC) Task: {59D277FE-A107-42E9-B2AD-3C2961096D2D} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {A24C90AC-5DEE-43A8-925A-8750578E9AA4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\System32\MRT.exe [149611728 2022-02-14] (Microsoft Windows → Microsoft Corporation) → C:\WINDOWS\system32/EHB /HeartbeatFailure “SubmitHeartbeatReportData” /HeartbeatError “0x80004005” Task: {DCF626B0-836B-47E2-A234-67A5FFA2348C} - System32\Tasks\Microsoft\Windows\rempl\shell => %ProgramFiles%\rempl\sedlauncher.exe (Ningún archivo) Task: {F7367771-1FDC-4099-95DC-7A31BB1B4C2F} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-4205773567-3714965184-4253856947-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1079424 2026-09-28] (Mozilla Corporation → Mozilla Corporation) → C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB–MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (la entrada de datos tiene 6 más caracteres). Task: {0ECBA1BA-F06F-4473-9B0D-E16BBC48BEBF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-09-28] (Mozilla Corporation → Mozilla Foundation)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Hosts: 127.0.0.1 keystone.mwbsys.com Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}: [DhcpNameServer] 192.168.0.1 Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}: [DhcpDomain] technicolor Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}\14E454D2C485135203035234C6F6574634C6F6E656: [DhcpNameServer] 192.168.43.1 Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}\67F6461666F6E656141424357545D25374: [DhcpNameServer] 192.168.0.1 Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}\67F6461666F6E656141424357545D25374: [DhcpDomain] technicolor.net Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}\67F6461666F6E656141445752455: [DhcpNameServer] 192.168.0.1 Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}\67F6461666F6E656141445752455: [DhcpDomain] technicolor.net Tcpip..\Interfaces{56754d1f-5773-4856-b311-3057f5215d4f}\84551475549402058302C6964756: [DhcpNameServer] 192.168.43.1

FireFox:

FF TaskBarID: 308046B0AF4A39CB → C:\Program Files\Mozilla Firefox FF DefaultProfile: zpv3bv2c.default-1591716457911 → 308046B0AF4A39CB FF ProfilePath: C:\Users\MARIVI\AppData\Roaming\Mozilla\Firefox\Profiles\zpv3bv2c.default-1591716457911 [2026-09-28] FF Extension: (New Tab) - C:\Users\MARIVI\AppData\Roaming\Mozilla\Firefox\Profiles\zpv3bv2c.default-1591716457911\Extensions\[email protected] [2026-09-28] FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 → C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation → Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision → C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 → NVIDIA Corporation) [Archivo no firmado] FF Plugin-x32: @nvidia.com/3DVisionStreaming → C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 → NVIDIA Corporation) [Archivo no firmado] FF Plugin-x32: Adobe Reader → C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2026-09-16] (Adobe Inc. → Adobe Systems Inc.)

Chrome:

CHR DefaultProfile: Default CHR Profile: C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default [2026-09-28] CHR Notifications: Default → hxxps://meet.google.com; hxxps://web.skype.com CHR HomePage: Default → hxxp://www.google.com CHR StartupUrls: Default → “hxxps://www.google.com/?hl=es” CHR Extension: (Documentos) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-03-19] CHR Extension: (Google Drive) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-04] CHR Extension: (Google Meet Grid View) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjkegbgpfgpikgkfidhcihhiflbjgfic [2020-05-06] CHR Extension: (YouTube) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-03-19] CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-09-28] CHR Extension: (Avast SafePrice) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2026-09-28] CHR Extension: (Escritorio Remoto de Chrome) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2020-04-07] CHR Extension: (Documentos de Google sin conexión) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-28] CHR Extension: (Avast Online Security & Privacy) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2022-02-14] CHR Extension: (Chrome Remote Desktop) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\inomeogfingihgjfjlpeplalcfajhgai [2026-09-28] CHR Extension: (Google Hangouts) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2022-02-14] CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-14] CHR Extension: (Gmail) - C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-02-14] CHR Profile: C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-04-17] CHR Profile: C:\Users\MARIVI\AppData\Local\Google\Chrome\User Data\System Profile [2020-04-17] CHR HKU\S-1-5-21-4205773567-3714965184-4253856947-1001\SOFTWARE\Google\Chrome\Extensions…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32…\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32…\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32…\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. → Adobe Inc.) S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [8009144 2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [1051064 2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) R2 avast! Tools; C:\Program Files\AVAST Software\Avast\aswToolsSvc.exe [23240632 2026-09-28] (Gen Digital Inc. → Gen Digital Inc.) R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [56912 2020-06-09] (Avast Software s.r.o. → AVAST Software) R2 KMSEmulator; C:\ProgramData\KMSAuto\bin\KMSSS.exe [301056 2015-07-24] (MDL Forum, mod by Ratiborus) [Archivo no firmado] S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6264152 2021-10-04] (Microsoft Windows Publisher → Microsoft Corporation) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation → Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation → Microsoft Corporation)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [21088 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [252512 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [395872 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [317024 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [81504 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswDrvBrg; C:\WINDOWS\System32\drivers\aswDrvBrg.sys [86112 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [29144 2026-09-28] (Microsoft Windows Early Launch Anti-malware Publisher → Gen Digital Inc.) R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [35936 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [300640 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [639584 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [101472 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [71776 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [861792 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1301600 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) S2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [254560 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [481888 2026-09-28] (Microsoft Windows Hardware Compatibility Publisher → Gen Digital Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher → Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows → Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows → Microsoft Corporation) S2 MBAMChameleon; \SystemRoot\System32\Drivers\MbamChameleon.sys (Ningún archivo)

==================== SvcHost (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-09-28 18:23 - 2026-09-28 18:25 - 000018100 _____ C:\Users\MARIVI\Downloads\FRST.txt 2026-09-28 18:22 - 2026-09-28 18:24 - 000000000 _D C:\FRST 2026-09-28 18:20 - 2026-09-28 18:20 - 002455552 __ (Farbar) C:\Users\MARIVI\Downloads\FRST64.exe 2026-09-28 18:13 - 2026-09-28 18:13 - 000000000 ____D C:\Users\MARIVI\AppData\Roaming\xpdf 2026-09-28 17:54 - 2026-09-28 17:54 - 000000000 ____D C:\Users\MARIVI\AppData\LocalLow\Temp 2026-09-28 17:50 - 2026-09-28 17:50 - 000000000 _D C:\WINDOWS\system32\Tasks\GoogleUserPEH 2026-09-28 17:50 - 2026-09-28 17:50 - 000000000 _D C:\Users\MARIVI\AppData\Roaming\com.adobe.dunamis 2026-09-28 17:50 - 2026-09-28 17:50 - 000000000 _D C:\Users\MARIVI.ms-ad 2026-09-28 17:47 - 2026-09-28 17:47 - 000002133 __ C:\Users\MARIVI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2026-09-28 17:42 - 2026-09-28 18:08 - 000000000 _D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2026-09-28 17:42 - 2026-09-28 17:44 - 000000000 _D C:\WINDOWS\system32\Tasks\Mozilla 2026-09-28 17:42 - 2026-09-28 17:42 - 000002234 __ C:\Users\MARIVI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navegación privada de Firefox.lnk 2026-09-28 17:37 - 2026-09-28 17:37 - 000002076 __ C:\Users\Public\Desktop\Avast Free Antivirus.lnk 2026-09-28 17:36 - 2026-09-28 17:36 - 000000000 _D C:\WINDOWS\system32\o2 2026-09-28 17:30 - 2026-09-28 17:28 - 000327096 __ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe 2026-09-28 16:57 - 2026-09-28 16:57 - 000002136 __ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader.lnk 2026-09-28 16:57 - 2026-09-28 16:57 - 000002124 __ C:\Users\Public\Desktop\Acrobat Reader.lnk

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-09-28 18:25 - 2019-03-19 06:52 - 000000000 _D C:\ProgramData\regid.1991-06.com.microsoft 2026-09-28 18:22 - 2019-03-19 06:50 - 000000000 _D C:\WINDOWS\INF 2026-09-28 18:16 - 2022-02-14 11:41 - 000000000 _D C:\Users\MARIVI\AppData\Local\Avast Software 2026-09-28 18:10 - 2022-02-14 11:48 - 000000000 _D C:\Users\MARIVI\AppData\Local\CrashDumps 2026-09-28 17:54 - 2017-10-22 21:43 - 000000000 _D C:\Users\MARIVI\AppData\LocalLow\Adobe 2026-09-28 17:52 - 2017-10-22 20:22 - 000000000 _D C:\Users\MARIVI\AppData\Local\Packages 2026-09-28 17:50 - 2020-03-20 14:13 - 000000000 _D C:\Users\MARIVI 2026-09-28 17:44 - 2017-10-22 20:43 - 000001069 __ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2026-09-28 17:44 - 2017-10-22 20:42 - 000000000 _D C:\Program Files\Mozilla Firefox 2026-09-28 17:43 - 2020-03-20 14:23 - 001684180 __ C:\WINDOWS\system32\PerfStringBackup.INI 2026-09-28 17:43 - 2019-03-19 13:59 - 000753744 __ C:\WINDOWS\system32\perfh00A.dat 2026-09-28 17:43 - 2019-03-19 13:59 - 000148288 __ C:\WINDOWS\system32\perfc00A.dat 2026-09-28 17:41 - 2017-10-22 20:44 - 000000000 _D C:\Users\MARIVI\AppData\LocalLow\Mozilla 2026-09-28 17:41 - 2017-10-22 20:43 - 000000000 _D C:\Program Files (x86)\Mozilla Maintenance Service 2026-09-28 17:38 - 2017-10-22 22:48 - 000000000 _D C:\ProgramData\AVAST Software 2026-09-28 17:37 - 2017-10-22 22:52 - 000002088 __ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk 2026-09-28 17:35 - 2020-03-20 14:39 - 000000006 _H C:\WINDOWS\Tasks\SA.DAT 2026-09-28 17:35 - 2017-10-22 20:31 - 000000000 _D C:\ProgramData\NVIDIA 2026-09-28 17:34 - 2019-03-19 06:37 - 000524288 __ C:\WINDOWS\system32\config\BBI 2026-09-28 17:31 - 2020-03-20 14:39 - 000000000 _D C:\WINDOWS\system32\Tasks\AVAST Software 2026-09-28 17:30 - 2019-03-19 06:52 - 000000000 _HD C:\WINDOWS\ELAMBKUP 2026-09-28 17:28 - 2020-05-16 14:16 - 000300640 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2026-09-28 17:28 - 2020-04-16 18:42 - 000639584 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys 2026-09-28 17:28 - 2019-01-20 23:17 - 000395872 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys 2026-09-28 17:28 - 2019-01-20 23:17 - 000317024 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys 2026-09-28 17:28 - 2019-01-20 23:17 - 000252512 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys 2026-09-28 17:28 - 2019-01-20 23:17 - 000081504 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys 2026-09-28 17:28 - 2019-01-20 23:17 - 000035936 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys 2026-09-28 17:28 - 2019-01-20 23:17 - 000021088 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys 2026-09-28 17:28 - 2017-10-22 22:51 - 001301600 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys 2026-09-28 17:28 - 2017-10-22 22:51 - 000861792 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys 2026-09-28 17:28 - 2017-10-22 22:51 - 000481888 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys 2026-09-28 17:28 - 2017-10-22 22:51 - 000101472 __ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2026-09-28 17:28 - 2017-10-22 22:51 - 000071776 ___ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2026-09-28 17:23 - 2020-03-20 14:06 - 000000000 _D C:\WINDOWS\system32\SleepStudy 2026-09-28 17:00 - 2020-03-20 14:39 - 000004562 __ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2026-09-28 16:34 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness 2026-09-28 16:29 - 2017-10-22 20:22 - 000000000 __RHD C:\Users\Public\AccountPictures 2026-09-28 16:29 - 2017-10-22 20:22 - 000000000 ___RD C:\Users\MARIVI\3D Objects 2026-09-28 16:26 - 2022-02-14 13:12 - 000000000 ____D C:\Program Files\ruxim

==================== Archivos en la raíz de algunos directorios ========

2022-02-14 12:59 - 2026-09-28 16:33 - 000055496 _____ () C:\Program Files\chrome_installer.log

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================