Gestionado por tu organización (Chrome)

[Laurac]

Hola, acabo de ver que en Chrome me sale una opción llamada “Gestionado por tu organización” y sospecho que puede ser un malware ya que me ha pasado justo al descargar una cosa de Internet. Tengo el AVG gratuito y no detecta nada, y he descargado el malwarebytes premium de prueba que me ha detectado algo. Os dejo en el informe. Lo he puesto todo en cuarentena, he reiniciado el pc pero sigue saliendo que mi navegador está administrado.

A ver si podéis ayudarme a eliminar esto, por favor. Gracias!

MALWAREbytes1.txt (1,9 KB)

[JavierHF]

Hola @Laurac y Bienvenida al Foro…!!

Es muy probable que tu problema este relacionado con tu antivirus de AVG, que le pase lo mismo que YA esta ocurriendo con el antivirus de AVAST.

Pero… vamos a revisar un poco mas en profundidad tu maquina, ahora realiza estos pasos :

Desactiva temporalmente el Antivirus Cómo deshabilitar temporalmente su Antivirus, mientras estemos realizando TODOS los pasos.

Descargar en TU ESCRITORIO(y NO en otro lugar )

• Farbar Recovery Scan Tool. seleccionando la versión adecuada para la arquitectura(32 o 64bits) de tu equipo. Como saber si Mi Windows es de 32 o 64 Bits ?.

Una vez descargadas, desconectas tu equipo de Internet(apaga el router) Muy Importante,… y Cierras también cualquier otro programa que tengas abierto.

Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas Ejecutar como Administrador para TODOS los programas.

Farbar Recovery Scan Tool.-

• Ejecuta FRST.exe.

• En el mensaje de la ventana del Disclaimer o Responsabilidad, pulsamos Yes/Si

• En la ventana principal pulsamos en el botón Analizar/Scan y esperamos a que concluya el proceso.

• Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Poner los dos informes en tu próxima respuesta.

Debes copiarlos y pegarlos con todo su contenido y usaras varios mensajes si recibes un mensaje de error indicando que es muy largo(mas de 50.000 caracteres aprox.).

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo, aquí tienes un ejemplo de como hacerlo :

Saludos, Javier.

[Laurac]

Tool (x64) Versión: 24-04-2020
Ejecutado por Laura (26-04-2020 16:43:05)
Ejecutado desde C:\Users\Laura\Desktop
Windows 8.1 (Update) (X64) (2014-10-23 13:12:40)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-2992363441-2088349996-1545117638-500 - Administrator - Disabled) => C:\Users\Administrador.Laura
Invitado (S-1-5-21-2992363441-2088349996-1545117638-501 - Limited - Disabled)
Laura (S-1-5-21-2992363441-2088349996-1545117638-1002 - Administrator - Enabled) => C:\Users\Laura
UpdatusUser (S-1-5-21-2992363441-2088349996-1545117638-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: AVG Antivirus (Disabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}
AS: AVG Antivirus (Disabled - Up to date) {A3C8941D-8036-3856-D9BB-709D4A2A7EAC}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: AVG Antivirus (Disabled) {2092F4DC-EC63-3680-C854-E2DACF7E736A}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Acer Device Fast-lane (HKLM\...\{3F62D2FD-13C1-49A2-8B5D-47623D9460D7}) (Version: 1.00.3011 - Acer Incorporated)
Acer Instant Update Service (HKLM\...\{81C6F800-A69B-4E70-9DC0-74732F8B00E7}) (Version: 1.00.3015 - Acer Incorporated)
Acer Power Management (HKLM\...\{91F52DE4-B789-42B0-9311-A349F10E5479}) (Version: 7.00.3012 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.3016 - Acer Incorporated)
AcerCloud Docs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.01.2008 - Acer Incorporated)
AcerCloud Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 2.02.2021 - Acer Incorporated)
Actualización de NVIDIA 1.10.8 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 1.10.8 - NVIDIA Corporation)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.4.1.298 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.255 - Adobe)
Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_0) (Version: 18.0.0 - Adobe Systems Incorporated)
Adobe Photoshop Lightroom 5.6 64-bit (HKLM\...\{D19E99C2-6D9D-4075-B446-B4387EAF70A5}) (Version: 5.6.0 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.8.158 - Adobe Systems, Inc.)
AirDroid 3.6.3.0 (HKLM-x32\...\AirDroid) (Version: 3.6.3.0 - Sand Studio)
Apple Application Support (32 bits) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
AVG Internet Security (HKLM-x32\...\AVG Antivirus) (Version: 20.2.3116 - AVG Technologies)
AVG Web TuneUp (HKLM-x32\...\AVG Web TuneUp) (Version: 4.3.9.626 - AVG Technologies)
Bejeweled 3 (HKLM-x32\...\WTA-9363cb64-3374-4a4a-9761-bc52bc5bae9b) (Version: 2.2.0.98 - WildTangent) Hidden
BitTorrent (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\BitTorrent) (Version: 7.10.5.45597 - BitTorrent Inc.)
BitTorrent (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\BitTorrent) (Version: 7.10.5.45597 - BitTorrent Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 6.30.223.170 - Broadcom Corporation)
Broadcom Wireless Utility (HKLM\...\{4CDA59B9-7AD3-4283-9F5C-BC469FF975B6}) (Version: 6.30.59.104 - Broadcom Corporation)
calibre (HKLM-x32\...\{C9A29F33-05C5-47D2-9E2C-1473E7A88C5D}) (Version: 2.72.0 - Kovid Goyal)
Camtasia Studio 8 (HKLM-x32\...\{904AC0F0-F69E-467E-A719-B083940F608A}) (Version: 8.5.2.1999 - TechSmith Corporation)
Canales de juegos (HKLM-x32\...\WildTangentGameProvider-acer-genres) (Version: 8.1.0.17 - WildTangent, Inc.)
Canales de juegos (HKLM-x32\...\WildTangentGameProvider-acer-main) (Version: 8.1.0.17 - WildTangent, Inc.)
Canon MP Navigator EX 2.0 (HKLM-x32\...\MP Navigator EX 2.0) (Version:  - )
Canon MP240 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP240_series) (Version:  - )
Canon Utilities Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )
Canon Utilities My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )
Canon Utilities Solution Menu (HKLM-x32\...\CanonSolutionMenu) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform)
clear.fi Media (HKLM-x32\...\{E9AF1707-3F3A-49E2-8345-4F2D629D0876}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi Photo (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 2.02.2012 - Acer Incorporated)
clear.fi SDK - Video 2 (HKLM-x32\...\{EBA33CAD-E071-48d5-A168-FBA4EEB42E93}) (Version: 2.1.2606 - CyberLink Corp.) Hidden
clear.fi SDK- Movie 2 (HKLM-x32\...\{35DA427D-BB23-49B8-9AFD-CFFCFE3B708D}) (Version: 2.1.2606 - CyberLink Corp.) Hidden
Compresor WinRAR (HKLM-x32\...\WinRAR archiver) (Version:  - )
CyberLink MediaEspresso 6.5 (HKLM-x32\...\InstallShield_{E3739848-5329-48E3-8D28-5BBD6E8BE384}) (Version: 6.5.3729_45993 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.1.0232 - Disc Soft Ltd)
Delicious: Emily's Childhood Memories Premium Edition (HKLM-x32\...\WTA-0b4d894d-df9a-4dbf-a987-a64c7068f423) (Version: 3.0.2.32 - WildTangent) Hidden
Dolby Advanced Audio v2 (HKLM-x32\...\{B9E70C7A-9F85-4A39-A4A3-BFA3C3BF7613}) (Version: 7.2.8000.17 - Dolby Laboratories Inc)
Dritek Radio Controller (HKLM-x32\...\RadioController) (Version: 2.02.2001.0803 - Dritek System Inc.)
eMule (HKLM-x32\...\eMule) (Version:  - )
Galería de fotos (HKLM-x32\...\{198CEF22-A27F-4DC7-9B66-2C22A4B1CA09}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.122 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Governor of Poker 2 Premium Edition (HKLM-x32\...\WTA-644a22a2-57ee-4e8d-9b77-bfaab870e085) (Version: 2.2.0.110 - WildTangent) Hidden
iBackupBot 5.4.4 (HKLM-x32\...\iBackupBot) (Version: 5.4.4 - VOWSoft, Ltd.)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.3004 - Acer Incorporated)
Inkjet Printer/Scanner Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version:  - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1252 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3621 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
iTunes (HKLM\...\{1E67C4CA-3AF5-4503-A65A-F52EAC07EEA6}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 241 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180241F0}) (Version: 8.0.2410.7 - Oracle Corporation)
Jewel Match 3 (HKLM-x32\...\WTA-00151ce8-b6ce-4f51-8faf-25ee316ecdef) (Version: 2.2.0.98 - WildTangent) Hidden
John Deere Drive Green (HKLM-x32\...\WTA-e3feb77a-c4f9-495a-913c-bf5a4ab2252f) (Version: 2.2.0.95 - WildTangent) Hidden
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version:  - )
LAME v3.98.3 for Audacity (HKLM-x32\...\LAME for Audacity_is1) (Version:  - )
Launch Manager (HKLM-x32\...\LManager) (Version: 7.0.12 - Acer Inc.)
LibreOffice 6.3.0.4 (HKLM\...\{235CBF9C-D3E1-4703-A729-7AC6F101C15E}) (Version: 6.3.0.4 - The Document Foundation)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.3007 - Acer Incorporated)
Los Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.61.15.1020 - Electronic Arts Inc.)
Machinarium (HKLM-x32\...\Machinarium) (Version: 11.10.09 - Amanita Design, s.r.o.)
Magic Academy (HKLM-x32\...\WTA-04e370b1-37b3-4605-803b-da64900232c5) (Version: 2.2.0.98 - WildTangent) Hidden
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
Microsoft Office Profesional 2016 - es-es (HKLM\...\ProfessionalRetail - es-es) (Version: 16.0.12624.20466 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\OneDriveSetup.exe) (Version: 19.232.1124.0012 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\OneDriveSetup.exe) (Version: 19.232.1124.0012 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{57660847-B1F7-35BD-9118-F62EB863A598}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Movie Maker (HKLM-x32\...\{9C82436F-F19C-42A4-B476-F87A28A95BF9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{4CA8F973-6377-4ABF-9ED5-CC2323B3C000}) (Version: 12.5.00500 - Nero AG)
NVIDIA Controlador de gráficos 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.02 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12624.20442 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12624.20442 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12624.20466 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0C0A-0000-0000000FF1CE}) (Version: 16.0.12624.20442 - Microsoft Corporation) Hidden
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2008 - Acer)
OLYMPUS AVCHD Codec (HKLM-x32\...\{FBD8E8CF-3460-4964-9079-9C68860487D4}) (Version: 1.0.0 - OLYMPUS IMAGING CORP.)
OLYMPUS Digital Camera Updater (HKLM-x32\...\{BD107100-E418-4805-B08D-30E098741A95}) (Version: 2.1.3 - Olympus Corporation)
OLYMPUS Viewer 3 (HKLM-x32\...\{115ADAA7-31F8-493D-B5EE-F64FE8E2E9D8}) (Version: 2.4.0 - Olympus Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.66.38849 - Electronic Arts, Inc.)
Panel de control de NVIDIA 327.02 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 327.02 - NVIDIA Corporation) Hidden
Paquete de controladores de Windows - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
Photoshop CS5 Extended 12.0 (HKLM-x32\...\Photoshop CS5 Extended 12.0) (Version:  - )
Plants vs. Zombies - Game of the Year (HKLM-x32\...\WTA-f6fe58f1-8f34-4d34-ae2b-f8a8273d838e) (Version: 2.2.0.98 - WildTangent) Hidden
Power MP3 WMA Converter, (ver 6.5) (HKLM-x32\...\Power MP3 WMA Converter Full Version_is1) (Version: 6.5 - CooolSoft, Inc.)
Prerequisite installer (HKLM-x32\...\{3AAB08A3-F129-4BD5-B409-AE674F93759D}) (Version: 12.0.0003 - Nero AG) Hidden
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.2.612.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6833 - Realtek Semiconductor Corp.)
Realtek PCIE Card Reader (HKLM-x32\...\{C1594429-8296-4652-BF54-9DBE4932A44C}) (Version: 6.2.8400.27028 - Realtek Semiconductor Corp.)
Registro de usuario de Canon MP240 series (HKLM-x32\...\Registro de usuario de Canon MP240 series) (Version:  - )
Restaurant Empire 2 1.00 (HKLM-x32\...\Restaurant Empire 2 1.00) (Version:  - )
Señor del Olimpo - Zeus (HKLM-x32\...\Señor del Olimpo - Zeus) (Version:  - )
Shared C Run-time for x64 (HKLM\...\{EF79C448-6946-4D71-8134-03407888C054}) (Version: 10.0.0 - McAfee)
SimCity 4 (HKLM-x32\...\{01339AE5-04D4-43F8-008E-13AD788DC4F7}) (Version:  - )
Skype versión 8.58 (HKLM-x32\...\Skype_is1) (Version: 8.58 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Spotify) (Version: 1.1.31.703.g256add22 - Spotify AB)
Spotify (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Spotify) (Version: 1.1.31.703.g256add22 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Tales of Lagoona (HKLM-x32\...\WTA-fbbaa49f-4bbf-4a0a-ae9c-a4492ed013ac) (Version: 2.2.0.110 - WildTangent) Hidden
Telegram Desktop version 1.5.4 (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.5.4 - Telegram Messenger LLP)
Telegram Desktop version 1.5.4 (HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.5.4 - Telegram Messenger LLP)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version:  - WildTangent) Hidden
VideoLAN Movie Creator (HKLM-x32\...\VLMC) (Version:  - )
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version:  - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version:  - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.7850 - Broadcom Corporation)
WildTangent Games (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer) (Version: 4.0.11.7 - WildTangent) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wondershare Filmora(Build 7.5.0) (HKLM-x32\...\Wondershare Filmora_is1) (Version:  - Wondershare Software)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Wondershare UniConverter(Build 11.5.1.0) (HKLM-x32\...\UniConverter_is1) (Version: 11.5.1.0 - Wondershare Software)

Packages:
=========
- Games App - -> C:\Program Files\WindowsApps\WildTangentGames.-GamesApp-_1.0.3.28_x86__qt5r5pa5dyg8m [2016-01-15] (WildTangent Games)
7digital Music Store -> C:\Program Files\WindowsApps\7digitalLtd.7digitalMusicStore_2.1.10.3_x86__qv1vc61z2t2b4 [2017-07-21] (7digital Ltd)
Acer Crystal Eye -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.AcerCrystalEye_2.0.1804.25604_x86__ypz87dpxkv292 [2016-01-15] (CYBERLINK COM CORP)
Acer Explorer -> C:\Program Files\WindowsApps\AcerIncorporated.AcerExplorer_2.0.0.3002_neutral__48frkmn4z8aw4 [2016-01-15] (Acer Incorporated)
Cut The Rope -> C:\Program Files\WindowsApps\ZeptoLabUKLimited.CutTheRope_1.2.0.43_x86__sq9zxnwrk84pj [2016-01-15] (ZeptoLab UK Limited)
eBay -> C:\Program Files\WindowsApps\eBayInc.eBay_1.6.0.34_neutral__1618n3s9xq8tw [2016-01-15] (eBay, Inc)
Instagram- -> C:\Program Files\WindowsApps\29932BootstrapApps.Instagram-_4.0.0.1_neutral__x80f4fbekebty [2016-01-15] (Facebook Youtube Instagram Free Pro Awesome)
Juegos -> C:\Program Files\WindowsApps\Microsoft.XboxLIVEGames_2.0.139.0_x64__8wekyb3d8bbwe [2016-01-15] (Microsoft Corporation) [MS Ad]
Kindle -> C:\Program Files\WindowsApps\AMZNMobileLLC.KindleforWindows8_2.1.0.2_neutral__stfe6vwa9jnbp [2016-01-15] (AMZN Mobile LLC)
MSN Deportes -> C:\Program Files\WindowsApps\Microsoft.BingSports_3.0.4.345_x64__8wekyb3d8bbwe [2016-04-29] (Microsoft Corporation) [MS Ad]
MSN Dinero -> C:\Program Files\WindowsApps\Microsoft.BingFinance_3.0.4.344_x64__8wekyb3d8bbwe [2016-04-29] (Microsoft Corporation) [MS Ad]
MSN El Tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.350_x64__8wekyb3d8bbwe [2016-11-23] (Microsoft Corporation) [MS Ad]
MSN Noticias -> C:\Program Files\WindowsApps\Microsoft.BingNews_3.0.4.344_x64__8wekyb3d8bbwe [2016-04-29] (Microsoft Corporation) [MS Ad]
MSN Recetas -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x64__8wekyb3d8bbwe [2016-01-15] (Microsoft Corporation) [MS Ad]
MSN Salud y Bienestar -> C:\Program Files\WindowsApps\Microsoft.BingHealthAndFitness_3.0.4.336_x64__8wekyb3d8bbwe [2016-01-15] (Microsoft Corporation) [MS Ad]
Music Maker Jam -> C:\Program Files\WindowsApps\MAGIX.MusicMakerJam_2.3.1055.0_x64__a2t3txkz9j1jw [2017-06-09] (MAGIX)
Música -> C:\Program Files\WindowsApps\Microsoft.ZuneMusic_2.6.672.0_x64__8wekyb3d8bbwe [2016-01-15] (Microsoft Corporation) [MS Ad]
newsXpresso -> C:\Program Files\WindowsApps\esobiIncorporated.newsXpressoMetro_3.1.3.395_x86__sngswjb5h6fyg [2016-01-15] (Yisoubi Co. Ltd.)
Phototastic -> C:\Program Files\WindowsApps\26208thumbmunkey.Phototastic_2.2.0.0_x86__s0xj9m39zq8hc [2016-01-15] (thumbmunkeys)
Selección del explorador -> C:\WINDOWS\BrowserChoice [2014-10-28] (Microsoft Corporation)
Skype -> C:\Program Files\WindowsApps\Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c [2016-01-15] (Skype) [MS Ad]
Social Jogger -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.SocialJogger_1.0.2228.0_neutral__ypz87dpxkv292 [2016-01-15] (CYBERLINK COM CORP)
The Treasures of Montezuma 3 -> C:\Program Files\WindowsApps\09B6C2D8.TheTreasuresofMontezuma3_1.0.1.1742_x86__hbbh9szp6erha [2016-01-15] (Alawar Entertainment Inc.)
TuneIn Radio -> C:\Program Files\WindowsApps\TuneIn.TuneInRadio_1.1.0.0_neutral__6bhtb546zcxnj [2016-01-15] (TuneIn)
Vídeo -> C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2.6.446.0_x64__8wekyb3d8bbwe [2016-01-15] (Microsoft Corporation) [MS Ad]
WeatherBug.a -> C:\Program Files\WindowsApps\WeatherBug.a.WeatherBug.a_2.0.4.0_neutral__78zd3kp756dy4 [2016-01-15] (WeatherBug!) [MS Ad]

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Laura\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileCoAuthLib64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation - pGFX -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems Incorporated -> Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-01-04] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-01-04] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-01-04] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Ningún archivo
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-01-04] (Adobe Systems Incorporated -> )
ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShell.dll [2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers1-x32: [PowerConverter] -> {590FF12A-9458-4092-A520-6C959CD81FEA} => C:\Program Files (x86)\Power MP3 WMA Converter\shellext.dll [2007-12-03] (CooolSoft) [Archivo no firmado]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Ningún archivo
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4-x32: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Ningún archivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2014-05-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\WINDOWS\system32\igfxOSP.dll [2014-05-21] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2013-08-30] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-01-04] (Adobe Systems Incorporated -> )
ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files (x86)\AVG\Antivirus\ashShell.dll [2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} =>  -> Ningún archivo
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2008-09-05] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2008-09-05] (Electronic Arts -> On2.com)

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

Shortcut: C:\Users\Laura\Favorites\Acer\Acer.lnk -> hxxp://www.acer.com
ShortcutWithArgument: C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\Whatsapp Web.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) ->  --profile-directory=ChromeDefaultData --app-id=ghahehbojcacaklcdefjblcpcpammjlj
ShortcutWithArgument: C:\Users\Laura\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=ChromeDefaultData

==================== Módulos cargados (Lista blanca) =============

2014-10-23 14:52 - 2014-10-23 14:52 - 000091648 _____ ( (Broadcom Corporation) [Archivo no firmado])  [El archivo está en uso ] C:\WINDOWS\Microsoft.Net\assembly\GAC_64\bcmwlrmt\v4.0_6.30.59.0__6d6a20262490fcdc\bcmwlrmt.dll
2013-11-15 01:58 - 2013-11-15 01:56 - 000070144 _____ (Broadcom Corporation) [Archivo no firmado] C:\WINDOWS\SYSTEM32\wltrynt.dll
2014-10-23 14:58 - 2014-10-23 14:58 - 001093120 _____ (Microsoft Corporation) [Archivo no firmado] C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.6195_none_cbf5e994470a1a8f\MFC80U.DLL
2014-09-06 14:54 - 2020-03-16 15:05 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Archivo no firmado] C:\Program Files (x86)\Origin\LIBEAY32.dll
2020-03-24 15:52 - 2020-03-16 15:06 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Archivo no firmado] C:\Program Files (x86)\Origin\ssleay32.dll
2014-09-06 14:54 - 2020-03-19 13:05 - 001611264 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2017-01-17 21:21 - 2020-03-19 13:05 - 005487104 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\Qt5Core.dll
2017-01-17 21:21 - 2020-03-19 13:05 - 005841920 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\Qt5Gui.dll
2017-01-17 21:21 - 2020-03-19 13:05 - 001179136 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\Qt5Network.dll
2018-11-23 15:22 - 2020-03-19 13:05 - 000146432 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2018-11-23 15:22 - 2020-03-19 13:05 - 005089792 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2018-11-23 15:22 - 2020-03-19 13:05 - 000184832 _____ (The Qt Company Ltd) [Archivo no firmado] C:\Program Files (x86)\Origin\Qt5Xml.dll

==================== Alternate Data Streams (Lista blanca) ========

(Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.)

AlternateDataStreams: C:\Windows:nlsPreferences [0]

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer sitios de confianza/restringidos ==========

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2013-08-22 15:25 - 2016-10-06 18:43 - 000001136 ____R C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1    localhost
128.199.121.125                   akisaadp.com
128.199.121.125                   onhax.net
127.0.0.2                   www.onhax.net
128.199.121.125                   do2dear.net
127.0.0.2                    platform.wondershare.com
128.199.121.125                   www.fullstuff.net
128.199.121.125                   www.masterkreatif.com
128.199.121.125                   keyscity.net
128.199.121.125                   piratecity.net

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter;;C:\PROGRAM FILES (X86)\INTEL\ICLS CLIENT\;C:\PROGRAM FILES\INTEL\ICLS CLIENT\;%SYSTEMROOT%\SYSTEM32;%SYSTEMROOT%;%SYSTEMROOT%\SYSTEM32\WBEM;%SYSTEMROOT%\SYSTEM32\WINDOWSPOWERSHELL\V1.0\;C:\PROGRAM FILES (X86)\INTEL\OPENCL SDK\2.0\BIN\X86;C:\PROGRAM FILES (X86)\INTEL\OPENCL SDK\2.0\BIN\X64;;C:\PROGRAM FILES\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\DAL;C:\PROGRAM FILES\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\IPT;C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\DAL;C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\IPT;C:\PROGRAM FILES (X86)\WINDOWS LIVE\SHARED;C:\PROGRAM FILES (X86)\QUICKTIME\QTSYSTEM\;C:\Program Files\WIDCOMM\Bluetooth Software\;C:\Program Files\WIDCOMM\Bluetooth Software\syswow64;C:\Program Files (x86)\Calibre2\
HKU\S-1-5-21-2992363441-2088349996-1545117638-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719962\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Laura\Desktop\thumb-1920-669973.jpg
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\Control Panel\Desktop\\Wallpaper -> C:\Users\Laura\Desktop\thumb-1920-669973.jpg
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: El medio no está conectado a internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Ningún archivo)
Firewall de Windows está habilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

(Si una entrada es incluida en el fixlist, será eliminada.)

HKLM\...\StartupApproved\StartupFolder: => "Bluetooth.lnk"
HKLM\...\StartupApproved\Run: => "Broadcom Wireless Manager UI"
HKLM\...\StartupApproved\Run: => "CanonMyPrinter"
HKLM\...\StartupApproved\Run: => "CanonSolutionMenu"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "vProt"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "CGFLoader"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "OV3_Monitor"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "CGFLoader"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "OV3_Monitor"
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\StartupApproved\Run: => "Skype for Desktop"

[Laurac]

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{0D5E6D39-92FC-474A-88CB-EDADA58A29D0}] => (Allow) C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe Ningún archivo
FirewallRules: [{63D70BC2-8128-4B5E-93D3-05CC00E18246}] => (Allow) C:\Program Files (x86)\Origin Games\Bejeweled 3\Bejeweled3.exe Ningún archivo
FirewallRules: [{8CC396C2-434E-446A-AAFA-BC58554C81EC}] => (Allow) C:\Users\Laura\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{D910F5E2-968B-4915-9DD2-215896C41D7E}] => (Allow) C:\Users\Laura\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{F80B6A40-1EFC-454F-8A65-89A37B5F90EC}C:\users\laura\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\laura\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{BD0DD004-3277-4772-AB63-1F1D2C99C00B}C:\users\laura\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\laura\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{FC2C431E-B053-44C1-A0EF-B1E03F641917}] => (Allow) LPort=1900
FirewallRules: [{35CEA2C7-5734-4FCF-98D7-FE5C5D6BD2B8}] => (Allow) LPort=2869
FirewallRules: [{F92B2AD7-BD03-4356-A59B-93AD0E1440FB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C3608C8D-2D5D-4458-9B9F-2BCADC818FAF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{7DA1E7CC-2330-491D-B855-B1D140F121F4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{365C1EC7-B4B3-41E7-9E1E-3A881FBCD29E}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [TCP Query User{2D3D15C5-3BF5-468B-B43A-99E6E78BBD80}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [{BA7B6DD9-A159-44F3-BA50-81B62CD50700}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe Ningún archivo
FirewallRules: [{8E811FFF-0C3B-4F0A-9A98-548157A90015}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\virtualdrive.exe (Acer Incorporated -> Acer Incorporated)
FirewallRules: [{B669274E-E257-462C-9AC9-3AACF903F163}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\virtualdrive.exe (Acer Incorporated -> Acer Incorporated)
FirewallRules: [{960FFA47-18FC-4A40-9FFE-59E0476014A1}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\Sdd.exe (Acer Incorporated -> Acer Incorporated)
FirewallRules: [{5784B31E-FC0F-4ACD-B16D-54E404E48312}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\Sdd.exe (Acer Incorporated -> Acer Incorporated)
FirewallRules: [{8E06B414-B0B3-4DAC-BD0A-CB9CB14D187E}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe (Acer Incorporated -> Acer Cloud Technology)
FirewallRules: [{313A0AF1-5360-47CF-B0BA-D7D6956D086F}] => (Allow) C:\Program Files (x86)\Acer\Acer Cloud\ccd.exe (Acer Incorporated -> Acer Cloud Technology)
FirewallRules: [{99A785BD-ABD3-4EEF-AE1F-F0514846E220}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe (Acer Incorporated -> acer)
FirewallRules: [{7D48B84E-2EB8-4475-BB06-94C4DF11FD17}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\WindowsUpnp.exe (Acer Incorporated -> acer)
FirewallRules: [{678F8489-7BE0-4914-9220-443936A120D3}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{3CA7131C-31DF-429F-82A6-65290A88F09D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Photo\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{F59B0D58-83F2-46A8-8E24-2A952D3D3541}] => (Allow) C:\Program Files (x86)\Acer\clear.fi SDK21\Video\VideoPlayer.exe (CyberLink Corp. -> )
FirewallRules: [{00D76212-05B3-4B94-A388-D8B5A2E1175D}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe (Acer Incorporated -> acer)
FirewallRules: [{86DA8260-2CBE-442E-83FC-E8224732B0D7}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\WindowsUpnpMV.exe (Acer Incorporated -> acer)
FirewallRules: [{019AD321-9E5D-4D3C-9FEA-0CD59D9ED94E}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{C6DB3E58-10E1-47B1-8467-F11718783AEC}] => (Allow) C:\Program Files (x86)\Acer\clear.fi Media\DMCDaemon.exe (Acer Incorporated -> acer)
FirewallRules: [{2D8147F8-5B77-4C67-B010-F68F5BD56E70}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe Ningún archivo
FirewallRules: [{EFDBBF8B-B349-4BDB-A9B8-7F046E8BEC49}] => (Allow) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe Ningún archivo
FirewallRules: [{893EC907-58A2-4FB1-82E1-6AEEA4A200A8}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe Ningún archivo
FirewallRules: [{4137EC8A-F06A-4BE2-B185-B83C795FC52E}] => (Allow) C:\Program Files (x86)\Spotify\spotify.exe Ningún archivo
FirewallRules: [{D8CD6DDD-02CD-4E85-88B6-3ABAC5CF79B7}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5EDF5977-CCF3-4AD6-B63A-566287F7F802}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{AD84646D-D724-4F57-A293-6F2393A04EEF}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe (Nero AG -> Nero AG)
FirewallRules: [{EBE7BD48-7C63-4EC3-AA9E-13481B2397F4}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe (Nero AG -> Nero AG)
FirewallRules: [TCP Query User{5DF368BE-DD7A-4B27-9612-D6071F9800B7}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [UDP Query User{DE6754B6-2A69-46AF-8829-39A16F031030}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [TCP Query User{3CEDB5D0-1D5E-4C7C-A45B-858A454497FD}C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe Ningún archivo
FirewallRules: [UDP Query User{3BB3EEF0-2532-44B8-874C-1F1A0722FD54}C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe] => (Allow) C:\program files (x86)\origin games\alice madness returns\game\alice2\binaries\win32\alicemadnessreturns.exe Ningún archivo
FirewallRules: [{2C0E2046-7796-49AA-89D3-433C7F03D521}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe Ningún archivo
FirewallRules: [{958C530E-A101-4AD2-927D-43FBC1EED0F7}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe Ningún archivo
FirewallRules: [{2D050783-5769-4F2D-AD50-C3B5340B3B28}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0F08A996-A098-4F40-99F2-2B691B53A58C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7854417D-FB49-4E42-80EE-6F4EFC8470E2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{536F22CA-135B-4369-A5DC-0EEBF069F108}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{41D81776-05AA-4EBB-BCE6-AC029C7AD5FF}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe Ningún archivo
FirewallRules: [{62691B90-AE17-4C11-82C2-3FC72D2AD258}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe Ningún archivo
FirewallRules: [TCP Query User{D08FD294-8B3A-4F5E-875F-9BB5DE2417F1}C:\users\laura\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\laura\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{55A5F00E-C6B5-4AD4-9053-F20DB6B81A2F}C:\users\laura\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\laura\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D74C3587-9DFF-4A55-920C-743681AAE190}] => (Allow) LPort=8317
FirewallRules: [{CA45AD96-F4B6-4CFA-B48A-558608C0E0C2}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe Ningún archivo
FirewallRules: [{14B67D0E-6E8A-47DB-834F-7CFF6B64B94D}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe Ningún archivo
FirewallRules: [{778100C2-1903-4E93-80C5-6B088851EFFD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Ningún archivo
FirewallRules: [{C35D8AD9-58F1-4813-BC15-FEAA4C765561}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe Ningún archivo
FirewallRules: [{72A26C08-923C-43E4-9D0F-9E2F4BCFFB3D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Syberia 2\Game.exe (Microids Canada) [Archivo no firmado]
FirewallRules: [{5921217A-C242-43FA-9ED1-FAD5A37656C4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Syberia 2\Game.exe (Microids Canada) [Archivo no firmado]
FirewallRules: [{3BB2EA14-2BD4-4A8E-BE4C-48CE52DB7BAF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Syberia 2\Syberia2.exe () [Archivo no firmado]
FirewallRules: [{C85D390D-3FA9-4CE2-87FE-9255AB7AE30B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Syberia 2\Syberia2.exe () [Archivo no firmado]
FirewallRules: [{EFD8EC85-136A-4C78-9225-54063788F99F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E46B47F2-2ACE-4763-968C-256064C60963}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{247CC747-5D5E-42CB-B3AB-2904CC67843E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{22797196-6F91-4C81-8475-7DD7B65C773C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1FEBE527-9A0E-4A70-BE87-A3CF4A998224}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe Ningún archivo
FirewallRules: [{365749EB-1F2E-4727-9EF3-4900C084F92E}] => (Allow) C:\Program Files (x86)\AVG\Av\avgnsa.exe Ningún archivo
FirewallRules: [{03564C3E-578B-48BB-8ABC-5B798BEC0475}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe Ningún archivo
FirewallRules: [{51B28A3C-945E-4202-B006-21EB6C1EB91E}] => (Allow) C:\Program Files (x86)\AVG\Av\avgemca.exe Ningún archivo
FirewallRules: [{E4757AB2-D231-4942-A835-6CB626F346DA}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe Ningún archivo
FirewallRules: [{1B11B789-45FE-4473-BB07-EB4397A42DC4}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe Ningún archivo
FirewallRules: [{E2694BBC-E2F9-41AB-B3A7-67DF39D9D118}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{2BD3CB02-80B9-4D74-B84D-0B2D55C2C771}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [TCP Query User{37D5BFFA-64CF-4F54-8309-2FBF9CFFA386}C:\program files (x86)\far cry primal\bin\fcprimal.exe] => (Allow) C:\program files (x86)\far cry primal\bin\fcprimal.exe Ningún archivo
FirewallRules: [UDP Query User{B5F52E4F-067F-47FB-9492-DEBEBA46465F}C:\program files (x86)\far cry primal\bin\fcprimal.exe] => (Allow) C:\program files (x86)\far cry primal\bin\fcprimal.exe Ningún archivo
FirewallRules: [{68DEF29F-E8C2-481E-8177-3830D367D077}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3C9E7C5C-633C-4B06-9A57-6E1F9C285D4B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C6E906E5-778C-445F-938A-0CD55B637A39}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{F027C401-E5B5-4781-B2F2-25FB899BADD8}] => (Allow) C:\Program Files (x86)\Origin Games\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{50B6381D-7890-401F-B5CE-0425C875B5F5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe Ningún archivo
FirewallRules: [{736D03E5-BD1B-43DE-817A-A31264AE24B0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe Ningún archivo
FirewallRules: [TCP Query User{116F9AFE-7A8B-47C0-AA1C-FE01D588B4F4}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe (SAND STUDIO LIMITED -> Sand Studio)
FirewallRules: [UDP Query User{4538B77E-CCBF-483C-9CC8-5E279D5ADED2}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe (SAND STUDIO LIMITED -> Sand Studio)
FirewallRules: [{7F987D0E-D2D1-4CDB-AF41-1343D6B3332E}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{ACAF9DDC-BB10-4B01-B649-97EF135AA498}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{29D8135B-D591-4404-BEC7-9CB4269C7B84}C:\users\laura\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\laura\appdata\roaming\telegram desktop\telegram.exe (Telegram Messenger LLP -> Telegram Messenger LLP)
FirewallRules: [UDP Query User{AFD18161-7D21-4CF1-B9A2-9D24745462D2}C:\users\laura\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\laura\appdata\roaming\telegram desktop\telegram.exe (Telegram Messenger LLP -> Telegram Messenger LLP)
FirewallRules: [{9320E98C-E4F4-481A-8A36-CC518A724046}] => (Allow) C:\Users\Laura\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7CDDE5E0-2638-4590-B9AB-2581A393A6AD}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe Ningún archivo
FirewallRules: [{FDAF7ADA-70A5-4E65-809D-EFC85CD226EB}] => (Allow) C:\Program Files\KMSpico\AutoPico.exe Ningún archivo
FirewallRules: [{D655C963-6601-4A4A-8AA2-07FFD01821C2}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe Ningún archivo
FirewallRules: [{23371842-0D4C-4E7B-96B8-FB52EFDDAED3}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe Ningún archivo
FirewallRules: [{1FD3F983-74EF-4721-BC64-DD7035EA4970}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Archivo no firmado]
FirewallRules: [{DCA9FD23-7DFC-427F-9590-F4F46206DA04}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Archivo no firmado]
FirewallRules: [{8C6F5DC1-0FDF-4349-A994-DFBC7AAB6B54}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{14425B14-AE2A-437B-9B9D-46962133E84F}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{7B499510-F361-4FD2-967D-852AE339FE55}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{D140D801-2C67-4728-BE1D-ABE4E8D8D424}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{845A2078-16E6-4525-8ED2-69EF622B95C1}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{73B7A6AC-B7E0-49B3-86BD-258103F984FB}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6B6873C1-DF7A-4117-89BD-F0699F64D1D4}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{74E6586F-07DF-4E0F-BD3D-73C5093E2033}] => (Allow) LPort=1688
FirewallRules: [{78DD635C-EDAC-4712-A33F-B51524E5DB53}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe Ningún archivo
FirewallRules: [{E0617EC4-8269-4A6E-A6CD-CE7839523A06}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe Ningún archivo
FirewallRules: [{74389814-91F7-4F9F-BD43-1FE2156F62E8}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Puntos de Restauración =========================

14-04-2020 13:54:53 Punto de control programado

==================== Dispositivos defectuosos en el Administrador de dispositivos ============


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (04/26/2020 03:52:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: updater.exe, versión: 2.0.3007.0, marca de tiempo: 0x50ff2992
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.3.9600.19671, marca de tiempo: 0x5e673d0b
Código de excepción: 0xe0434352
Desplazamiento de errores: 0x00000000000088dc
Identificador del proceso con errores: 0x1970
Hora de inicio de la aplicación con errores: 0x01d61bd1ea32d5c0
Ruta de acceso de la aplicación con errores: C:\Program Files (x86)\Acer\Live Updater\updater.exe
Ruta de acceso del módulo con errores: C:\WINDOWS\system32\KERNELBASE.dll
Identificador del informe: 2ba6a675-87c5-11ea-bf6e-3065ec252979
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (04/26/2020 03:52:30 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: updater.exe
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: System.Xml.XmlException
   en System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   en System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   en System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   en System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   en System.Xml.XmlDocument.Load(System.String)
   en updater.Report.AddFPToResult(updater.Result)
   en updater.UpgradeItem.DiagnosticDownloadEvent(NotifyMgrArgs)
   en updater.DownloadMgr.DownloadFile(System.String, System.String)
   en updater.DownloadMgr.Worker(System.Object)
   en System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   en System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   en System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   en System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (04/26/2020 03:38:37 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: mbamtray.exe, versión: 4.0.0.620, marca de tiempo: 0x5e8e029a
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.3.9600.19678, marca de tiempo: 0x5e82c88a
Código de excepción: 0xc0000142
Desplazamiento de errores: 0x00000000000ecf40
Identificador del proceso con errores: 0x16cc
Hora de inicio de la aplicación con errores: 0x01d61bcff6e958d2
Ruta de acceso de la aplicación con errores: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Ruta de acceso del módulo con errores: KERNELBASE.dll
Identificador del informe: 3b353d00-87c3-11ea-bf6e-3065ec252979
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (04/26/2020 03:32:52 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa wwahost.exe, versión 6.3.9600.17415, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.

Identificador de proceso: 177c

Hora de inicio: 01d61bce7442db52

Hora de finalización: 4294967295

Ruta de acceso de la aplicación: C:\WINDOWS\syswow64\wwahost.exe

Identificador de informe: 6b1cdcc7-87c2-11ea-bf6d-3065ec252979

Nombre completo de paquete con errores: Microsoft.SkypeApp_3.1.0.1016_x86__kzf8qxf38zg5c

Identificador de aplicación relativa del paquete con errores: App

Error: (04/26/2020 03:13:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: updater.exe, versión: 2.0.3007.0, marca de tiempo: 0x50ff2992
Nombre del módulo con errores: KERNELBASE.dll, versión: 6.3.9600.19671, marca de tiempo: 0x5e673d0b
Código de excepción: 0xe0434352
Desplazamiento de errores: 0x00000000000088dc
Identificador del proceso con errores: 0x1fbc
Hora de inicio de la aplicación con errores: 0x01d61bcc76b3afe7
Ruta de acceso de la aplicación con errores: C:\Program Files (x86)\Acer\Live Updater\updater.exe
Ruta de acceso del módulo con errores: C:\WINDOWS\system32\KERNELBASE.dll
Identificador del informe: baa4094d-87bf-11ea-bf6d-3065ec252979
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (04/26/2020 03:13:33 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: updater.exe
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: System.Xml.XmlException
   en System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   en System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   en System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   en System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   en System.Xml.XmlDocument.Load(System.String)
   en updater.Report.AddFPToResult(updater.Result)
   en updater.UpgradeItem.DiagnosticDownloadEvent(NotifyMgrArgs)
   en updater.DownloadMgr.DownloadFile(System.String, System.String)
   en updater.DownloadMgr.Worker(System.Object)
   en System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   en System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   en System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   en System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (04/26/2020 02:53:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: Explorer.EXE, versión: 6.3.9600.18460, marca de tiempo: 0x57c1b8c1
Nombre del módulo con errores: ntdll.dll, versión: 6.3.9600.19678, marca de tiempo: 0x5e82c88a
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x000000000003d98e
Identificador del proceso con errores: 0x89c
Hora de inicio de la aplicación con errores: 0x01d618c907b8650a
Ruta de acceso de la aplicación con errores: C:\WINDOWS\Explorer.EXE
Ruta de acceso del módulo con errores: C:\WINDOWS\SYSTEM32\ntdll.dll
Identificador del informe: f6b7cd8a-87bc-11ea-bf6c-3065ec252979
Nombre completo del paquete con errores: 
Identificador de aplicación relativa del paquete con errores:

Error: (04/26/2020 02:53:43 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Aplicación: Explorer.EXE
Versión de Framework: v4.0.30319
Descripción: el proceso terminó debido a una excepción no controlada.
Información de la excepción: código de la excepción c0000005, dirección de la excepción 00007FFECD63D98E


Errores del sistema:
=============
Error: (04/26/2020 03:41:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio NVIDIA Update Service Daemon no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio debido a un error en el inicio de sesión.

Error: (04/26/2020 03:41:07 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: El servicio nvUpdatusService no se pudo iniciarse como .\UpdatusUser con la contraseña configurada actualmente debido al siguiente error: 
El nombre de usuario o la contraseña no son correctos.


Para asegurarse de que el servicio esté correctamente configurado, use el complemento Servicios en Microsoft Management Console (MMC).

Error: (04/26/2020 03:41:03 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Información de la aplicación no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (04/26/2020 03:41:03 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Appinfo.

Error: (04/26/2020 03:40:34 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: El servicio Servicio de transferencia inteligente en segundo plano (BITS) no respondió después de iniciar.

Error: (04/26/2020 03:37:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Windows Presentation Foundation Font Cache 3.0.0.0 no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (04/26/2020 03:37:54 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Windows Presentation Foundation Font Cache 3.0.0.0.

Error: (04/26/2020 03:01:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio NVIDIA Update Service Daemon no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio debido a un error en el inicio de sesión.


Windows Defender:
===================================
Date: 2016-01-13 20:45:23.179
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {98BC9BE5-D1F1-4493-AD69-F16730C82494}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2016-01-12 21:02:58.184
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {1D2EEAAE-A9E3-4368-9F3C-75D4BBE2EFA3}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2016-01-12 20:52:45.674
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {F84D0C7A-3F2A-4C0A-AE98-FCF3A498AA2C}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2016-01-12 19:02:38.842
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {D919D89F-D06E-48F4-9EFC-26498A2E5788}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2016-01-12 18:56:50.197
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen: {81453684-2F6A-41EE-8864-97A1558D287E}
Tipo de examen: Antimalware
Parámetros de examen: Examen rápido
Usuario: NT AUTHORITY\SYSTEM

Date: 2016-01-12 16:02:34.636
Description: 
La característica Protección en tiempo real de Windows Defender encontró un error:
Característica: Sistema de inspección de red
Código de error: 0x80004005
Descripción del error: Error no especificado 
Motivo: El sistema no tiene las actualizaciones necesarias para ejecutar el Sistema de inspección de red. Instale las actualizaciones requeridas y reinicie el equipo.

Date: 2016-01-12 15:40:58.936
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará revertirlas a un conjunto de firmas conocidas.
Firmas intentadas: Actual
Código de error: 0x80073aba
Descripción del error: El recurso es demasiado antiguo para ser compatible. 
Versión de firma: 1.155.266.0;1.155.266.0
Versión de motor: 1.1.9700.0

Date: 2016-01-11 20:54:27.452
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará revertirlas a un conjunto de firmas conocidas.
Firmas intentadas: Actual
Código de error: 0x80073aba
Descripción del error: El recurso es demasiado antiguo para ser compatible. 
Versión de firma: 1.155.266.0;1.155.266.0
Versión de motor: 1.1.9700.0

CodeIntegrity:
===================================

Date: 2018-04-18 19:20:46.088
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:45.662
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:45.336
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:45.011
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:44.618
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:44.223
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:43.899
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

Date: 2018-04-18 19:20:43.482
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\wow64.dll because the set of per-page image hashes could not be found on the system.

==================== Información de la memoria =========================== 

BIOS: Phoenix Technologies Ltd. V2.18 06/21/2013
Placa base: Acer Aspire V5-571G
Procesador: Intel(R) Core(TM) i5-3337U CPU @ 1.80GHz
Porcentaje de memoria en uso: 42%
RAM física total: 7987.6 MB
RAM física disponible: 4592.13 MB
Virtual total: 9267.6 MB
Virtual disponible: 4791.63 MB

==================== Unidades ================================

Drive c: (Acer) (Fixed) (Total:681.41 GB) (Free:72.36 GB) NTFS
Drive j: () (Removable) (Total:29.71 GB) (Free:15.07 GB) FAT32

\\?\Volume{c49d1211-18df-4ee6-9a48-32b5a7bd0fc0}\ (Recovery) (Fixed) (Total:0.39 GB) (Free:0.11 GB) NTFS
\\?\Volume{669edf19-bfd4-4804-ae98-1838ea5e7cd8}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{b5a0832d-51a6-4428-8db4-c6ee7bbc0a0e}\ (Push Button Reset) (Fixed) (Total:15.98 GB) (Free:2.82 GB) NTFS

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 698.6 GB) (Disk ID: 407C3D3F)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 29.7 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Final de Addition.txt =======================

[Laurac]

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 24-04-2020
Ejecutado por Laura (administrador) sobre LAURA (Acer Aspire V5-571G) (26-04-2020 16:42:13)
Ejecutado desde C:\Users\Laura\Desktop
Perfiles cargados: Laura (Perfiles disponibles: UpdatusUser & Laura & Administrador)
Platform: Windows 8.1 (Update) (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Chrome
Modo de Inicio: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Acer Incorporated -> ) C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe
(Acer Incorporated -> ) C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Netherlands B.V. -> ) C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(AVG Netherlands B.V. -> AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.8\ToolbarUpdater.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\afwServ.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\aswEngSrv.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe
(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Antivirus\AVGUI.exe <2>
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Broadcom Corporation) [Archivo no firmado] C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\BCMWLTRY.EXE
(Broadcom Corporation) [Archivo no firmado] C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRYSVC.EXE
(Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(CyberLink Corp. -> CyberLink) C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
(Dritek System Inc. -> Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <25>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel® Upgrade Service -> Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Nalpeiron LTD -> Nalpeiron Ltd.) [Archivo no firmado] C:\Windows\SysWOW64\nlssrv32.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(Realtek Semiconductor Corp -> Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(WildTangent Inc -> WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13267016 2013-01-29] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1276488 2013-01-18] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\WLTRAY.exe [10592256 2013-11-15] (Broadcom Corporation) [Archivo no firmado]
HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [689488 2008-03-10] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2114376 2008-03-03] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [AVGUI.exe] => C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe [156256 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [LManager] => [X]
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-11-15] (Dritek System Inc. -> Dritek System Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-10-02] (Apple Inc.) [Archivo no firmado]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [AvgUi] => "C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe" /lps=fmw
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [2195968 2019-12-16] (AVG Netherlands B.V. -> )
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2409936 2018-02-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [OV3_Monitor] => C:\Program Files (x86)\OLYMPUS\OLYMPUS Viewer 3\FirstStart.exe [40400 2018-01-17] (OLYMPUS CORPORATION -> Olympus Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719962\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [516608 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3371296 2020-04-04] (Valve -> Valve Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [OV3_Monitor] => C:\Program Files (x86)\Olympus\OLYMPUS Viewer 3\OV3Monitor.exe [415696 2018-01-17] (OLYMPUS CORPORATION -> Olympus Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [Spotify] => C:\Users\Laura\AppData\Roaming\Spotify\Spotify.exe [22899944 2020-04-25] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91585088 2020-03-31] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --enable-audio-service-sandbox --flag-switches-begin --flag-switches-end --no-startup-window /prefetch:5 --flag-switches-begin --flag-switc (la entrada de datos tiene 61 más caracteres).
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3371296 2020-04-04] (Valve -> Valve Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-04-24] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [OV3_Monitor] => C:\Program Files (x86)\Olympus\OLYMPUS Viewer 3\OV3Monitor.exe [415696 2018-01-17] (OLYMPUS CORPORATION -> Olympus Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [Spotify] => C:\Users\Laura\AppData\Roaming\Spotify\Spotify.exe [22899944 2020-04-25] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [91585088 2020-03-31] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --enable-audio-service-sandbox --flag-switches-begin --flag-switches-end --no-startup-window /prefetch:5 --flag-switches-begin --flag-switc (la entrada de datos tiene 61 más caracteres).
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Policies\Explorer: [NoSaveSettings] 0
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\ctfmon.exe [9728 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe  --flag-switches-begin --flag-switches-end --restore-last-session
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.122\Installer\chrmstp.exe [2020-04-22] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2013-09-04] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2016-07-27]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {0DC0DAD2-F84F-429D-B085-411AE7CDE2D5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {0E18FAD0-89C9-452A-9C11-FFA51AEC25B5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {1B5EC727-4C68-446D-9A15-C782C068BE39} - System32\Tasks\{A5020C2A-A25C-46F4-80C9-121973776963} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" -c scenario=install scenariosubtype=uninstall baseurl="C:\Program Files\Microsoft Office 15" platform=x86 version=15.0.5163.1000 culture=es-es productstoremove=ProPlusRetail_es-es_x-none
Task: {287EB61E-849D-44F1-BF41-56B2A8081F95} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {290FCD7F-21E6-4649-884B-386B63409AC0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115448 2020-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {2DCF29B1-1B5A-4CA9-A974-0B76353AD794} - System32\Tasks\Dolby Selector => C:\Dolby PCEE4\pcee4.exe [508656 2012-08-31] (Dolby Laboratories, Inc. -> Dolby Laboratories Inc.)
Task: {2E34507B-9862-4532-8EBB-8F3C077BD689} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_255_pepper.exe [1453112 2019-10-06] (Adobe Inc. -> Adobe)
Task: {3B0C7311-9551-44BF-AC0B-65673D1D6290} - System32\Tasks\Antivirus Emergency Update => C:\Program Files (x86)\AVG\Antivirus\AvEmUpdate.exe [3373072 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {4D05BB85-FF19-4A4D-9733-9014394F0013} - System32\Tasks\iuEmailOutlookAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuEmailOutlookAgent.exe [25672 2013-02-08] (Acer Incorporated -> )
Task: {5337F438-2642-4206-AA64-4A6C061FD804} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-30] (Google Inc -> Google Inc.)
Task: {62142AD2-6C68-4C19-98D7-A691327964BE} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {647598ED-D90B-40F4-8F28-C0C7CFFD0420} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {64C93F9D-4F43-41A3-BFA1-76ACE2BE52C3} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [40008 2013-01-22] (Acer Incorporated -> )
Task: {6D6C832C-2053-4EDD-8061-F1CFADAC23EC} - System32\Tasks\iuBrowserIEAgent => C:\Program Files\Acer\Acer Instant Service\InstantUpdate\iuBrowserIEAgent.exe [44616 2013-02-08] (Acer Incorporated -> )
Task: {6E9359A6-9EC3-4CFB-A701-FEBBAE3E6311} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616320 2018-01-08] (Apple Inc. -> Apple Inc.)
Task: {6F90AD96-2426-48CC-A9C1-EB7A03D8A3C9} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {73B2F3B0-DE4D-42A3-B776-E2A78350423D} - System32\Tasks\GenericSettingsHandler\Windows-Credentials\RetrySyncTask_for_S-1-5-21-2992363441-2088349996-1545117638-1002 => {F063A606-6748-4B89-82A0-3D19D94CE8D3} C:\Windows\System32\VaultRoaming.dll [92672 2014-10-29] (Microsoft Windows -> Microsoft)
Task: {7B857988-3067-4E13-8891-998F430972F7} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {7F07494B-B1D3-4D09-8B12-9E5AB39510C1} - System32\Tasks\{BB6C1BF2-CDDF-47FD-A8CC-F786547D1EDC} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Maxis\SimCity 4\Apps\SimCity 4.exe" -d "C:\Program Files (x86)\Maxis\SimCity 4"
Task: {8C01E956-DCE8-45B3-BD35-E5EEAF7CB8DB} - System32\Tasks\Power Management => C:\Program Files\Acer\Acer Power Management\ePowerTray.exe [5303368 2013-01-18] (Acer Incorporated -> Acer Incorporated)
Task: {9768ABD2-EB67-498E-A669-15A536AF817A} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {97AC1817-2BE8-4CAD-99DA-A18142688474} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [7173848 2016-12-21] (Piriform Ltd -> Piriform Ltd)
Task: {B263D0C8-EC76-42A5-9655-E222503E4598} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [3368008 2013-01-22] (Acer Incorporated -> )
Task: {B3587EF5-127E-42A0-9C01-DCCC854345FD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24702832 2020-04-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {BC467A08-A679-4FBF-997F-961BFBAB7398} - System32\Tasks\DeviceDetector => C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe [994880 2013-02-08] (CyberLink Corp. -> CyberLink)
Task: {BE540C9F-2C0D-4DDB-BB92-48C8A03263EC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115448 2020-04-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {C415FE0E-DDCB-44E0-A459-B9164B72424B} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {C8663540-8A8B-4A03-897F-4D90F124A0E9} - System32\Tasks\{2F9CCA85-9522-4B9D-9613-2329E6325CCA} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.23.85.105/es/abandoninstall?page=tsMain
Task: {DABA906C-B50F-4FEA-B20A-82DDFC0815EC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [24702832 2020-04-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {DFDB6A48-0792-4A0E-A83D-3598BB00650D} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1692296 2020-02-27] (AVG Technologies USA, LLC -> AVG Technologies)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\WINDOWS\Tasks\0116avzUpdateInfo.job => C:\ProgramData\Avg_Update_0116avz\0116avz_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0214dUpdateInfo.job => C:\ProgramData\Avg_Update_0214d\0214d_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0316avzUpdateInfo.job => C:\ProgramData\Avg_Update_0316avz\0316avz_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0414bUpdateInfo.job => C:\ProgramData\Avg_Update_0414b\0414b_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0615pizUpdateInfo.job => C:\ProgramData\Avg_Update_0615piz\0615piz_AVG-Secure-Search-Update.exe

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [122128 2015-08-12] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [133392 2015-08-12] (Apple Inc. -> Apple Inc.)
Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8BE03457-D912-45D3-A1A6-86EF163A917D}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131231866216852378&GUID=1E0AD119-2014-4CF6-81B8-F68BA6695FF0
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2992363441-2088349996-1545117638-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719962\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131231866217855292&GUID=1E0AD119-2014-4CF6-81B8-F68BA6695FF0
HKU\S-1-5-21-2992363441-2088349996-1545117638-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719962\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={11C19926-9551-4490-B691-ADA3BB20A22B}&mid=71e937ae4ccd47d29d2ff5b4144da3d8-8e22247176b81e307c2e9b511fc6bf65bc53962c&lang=es&ds=AVG&coid=avgtbavg&cmpid=ipm190214&pr=fr&d=2016-07-27 14:28:43&v=4.3.9.626&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://mysearch.avg.com/?cid={11C19926-9551-4490-B691-ADA3BB20A22B}&mid=71e937ae4ccd47d29d2ff5b4144da3d8-8e22247176b81e307c2e9b511fc6bf65bc53962c&lang=es&ds=AVG&coid=avgtbavg&cmpid=ipm190214&pr=fr&d=2016-07-27 14:28:43&v=4.3.9.626&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131231866220518699&GUID=1E0AD119-2014-4CF6-81B8-F68BA6695FF0
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com
SearchScopes: HKLM -> DefaultScope {DC4BA1EB-8266-4FCC-9D1E-09AA6499B7D6} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {DC4BA1EB-8266-4FCC-9D1E-09AA6499B7D6} URL = 
SearchScopes: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={11C19926-9551-4490-B691-ADA3BB20A22B}&mid=71e937ae4ccd47d29d2ff5b4144da3d8-8e22247176b81e307c2e9b511fc6bf65bc53962c&lang=es&ds=AVG&coid=avgtbavg&cmpid=ipm190214&pr=fr&d=2016-07-27 14:28:43&v=4.3.9.626&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={11C19926-9551-4490-B691-ADA3BB20A22B}&mid=71e937ae4ccd47d29d2ff5b4144da3d8-8e22247176b81e307c2e9b511fc6bf65bc53962c&lang=es&ds=AVG&coid=avgtbavg&cmpid=ipm190214&pr=fr&d=2016-07-27 14:28:43&v=4.3.9.626&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={11C19926-9551-4490-B691-ADA3BB20A22B}&mid=71e937ae4ccd47d29d2ff5b4144da3d8-8e22247176b81e307c2e9b511fc6bf65bc53962c&lang=es&ds=AVG&coid=avgtbavg&cmpid=ipm190214&pr=fr&d=2016-07-27 14:28:43&v=4.3.9.626&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxps://mysearch.avg.com/search?cid={11C19926-9551-4490-B691-ADA3BB20A22B}&mid=71e937ae4ccd47d29d2ff5b4144da3d8-8e22247176b81e307c2e9b511fc6bf65bc53962c&lang=es&ds=AVG&coid=avgtbavg&cmpid=ipm190214&pr=fr&d=2016-07-27 14:28:43&v=4.3.9.626&pid=wtu&sg=&sap=dsp&q={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.3.9.626\AVG Web TuneUp.dll [2019-12-16] (AVG Netherlands B.V. -> AVG)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\ssv.dll [2020-03-20] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.3.9.626\AVG Web TuneUp.dll [2019-12-16] (AVG Netherlands B.V. -> AVG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-03-20] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxps://fpdownload.macromedia.com/pub/shockwave/cabs/director/sw.cab
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-04-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Ningún archivo
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

FireFox:
========
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2018-02-14] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\WINDOWS\SysWOW64\Adobe\Director\np32dsw_1218158.dll [2015-04-27] (Adobe Systems, Inc.) [Archivo no firmado]
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.8\\npsitesafety.dll [Ningún archivo]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-03-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-03-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-01-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2014-04-07] (WildTangent Inc -> )
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2018-02-14] (Adobe Systems Incorporated -> Adobe Systems)

Chrome: 
=======
CHR DefaultProfile: ChromeDefaultData
CHR Profile: C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData [2020-04-26] <==== ATENCIÓN
CHR Notifications: ChromeDefaultData -> hxxps://chatsupport.apple.com; hxxps://forospyware.com; hxxps://opinion.yunosurveys.com; hxxps://panel.marketagent.com; hxxps://web.wallapop.com; hxxps://web.whatsapp.com; hxxps://www.casadellibro.com; hxxps://www.htcmania.com; hxxps://www.loteriasyapuestas.es
CHR HomePage: ChromeDefaultData -> hxxps://www.google.com/
CHR Extension: (Presentaciones) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (Documentos) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-15]
CHR Extension: (YouTube) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-15]
CHR Extension: (Adblock Plus - bloqueador de anuncios gratis) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2020-04-08]
CHR Extension: (Búsqueda de Google) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-15]
CHR Extension: (Hojas de cálculo) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Whatsapp Web) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghahehbojcacaklcdefjblcpcpammjlj [2017-02-24]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-22]
CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2019-11-22]
CHR Extension: (IG Stories for Instagram™) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nilbfjdbacfdodpbdondbbkmoigehodg [2020-04-18]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-06]
CHR Extension: (Reverso Context -  Traducción en contexto) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\onhiacboedfinnofagfgoaanfedhmfab [2020-04-11]
CHR Extension: (Gmail) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]
CHR Extension: (Chrome Media Router) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\ChromeDefaultData\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-12]
CHR Profile: C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default [2019-08-11]
CHR HomePage: Default -> hxxps://es.search.yahoo.com/?type=783055&fr=yo-yhp-ch
CHR StartupUrls: Default -> "hxxps://es.search.yahoo.com/?type=783055&fr=yo-yhp-ch"
CHR Extension: (Presentaciones de Google) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-27]
CHR Extension: (Google Docs) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-27]
CHR Extension: (Google Drive) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-15]
CHR Extension: (YouTube) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-15]
CHR Extension: (Búsqueda de Google) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-15]
CHR Extension: (Hojas de cálculo de Google) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-27]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-27]
CHR Extension: (Gmail) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-15]
CHR Extension: (Chrome Media Router) - C:\Users\Laura\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-02-27]
CHR Profile: C:\Users\Laura\AppData\Local\Google\Chrome\User Data\System Profile [2019-08-11]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]

[Laurac]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [818128 2018-02-14] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
R2 AVG Antivirus; C:\Program Files (x86)\AVG\Antivirus\AVGSvc.exe [345960 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AVG Firewall; C:\Program Files (x86)\AVG\Antivirus\afwServ.exe [1005744 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 avgbIDSAgent; C:\Program Files (x86)\AVG\Antivirus\aswidsagent.exe [5552064 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Cloud\CCDMonitorService.exe [2615368 2013-02-19] (Acer Incorporated -> Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [10626648 2020-04-10] (Microsoft Corporation -> Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Acer\Acer Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated -> Acer Incorporated)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-04-24] (Disc Soft Ltd -> Disc Soft Ltd)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [660040 2013-01-18] (Acer Incorporated -> Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [227904 2014-03-12] (WildTangent Inc -> WildTangent)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe [2457232 2012-07-24] (Realtek Semiconductor Corp -> Realsil Microelectronics Inc.)
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [314696 2014-05-21] (Intel Corporation - pGFX -> Intel Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [103808 2008-01-22] (Canon Inc. -> )
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation -> Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-04-26] (Malwarebytes Inc -> Malwarebytes)
R2 nlsX86cc; C:\Windows\SysWOW64\nlssrv32.exe [66560 2011-09-22] (Nalpeiron LTD -> Nalpeiron Ltd.) [Archivo no firmado]
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2495280 2020-03-16] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3445552 2020-03-16] (Electronic Arts, Inc. -> Electronic Arts)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-11-15] (Dritek System Inc. -> Dritek System INC.)
R2 vToolbarUpdater40.3.8; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\40.3.8\ToolbarUpdater.exe [1371136 2019-12-16] (AVG Netherlands B.V. -> AVG Secure Search)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11 Network Adapter\bcmwltry.exe [6068736 2013-11-15] (Broadcom Corporation) [Archivo no firmado]
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [811520 2019-12-16] (AVG Netherlands B.V. -> )
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [X]

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [206672 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [234840 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [179032 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [61272 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [43568 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [175984 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [501752 2020-04-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [110064 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [85664 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [852392 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [459992 2020-04-16] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [235768 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [317864 2020-04-14] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S3 bcmfn2; C:\WINDOWS\System32\drivers\bcmfn2.sys [17624 2013-08-13] (Broadcom Corporation -> Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131984 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2016-09-24] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-06-10] (Disc Soft Ltd -> Disc Soft Ltd)
R3 Ps2Kb2Hid; C:\WINDOWS\System32\drivers\aPs2Kb2Hid.sys [26736 2013-11-15] (Dritek System Inc. -> Dritek System Inc.)
R3 RSBASTOR; C:\WINDOWS\system32\DRIVERS\RtsBaStor.sys [288256 2012-08-17] (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.)
R3 RTL8168; C:\WINDOWS\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [12464 2020-04-22] (Macrovision Europe Ltd) [Archivo no firmado]
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166288 2017-05-18] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2016-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 VBAudioVMVAIOMME; \SystemRoot\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [X]

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) ===================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-04-26 16:42 - 2020-04-26 16:42 - 000045437 _____ C:\Users\Laura\Desktop\FRST.txt
2020-04-26 16:38 - 2020-04-26 16:38 - 002282496 _____ (Farbar) C:\Users\Laura\Downloads\FRST64.exe
2020-04-26 16:09 - 2020-04-26 16:42 - 000000000 ____D C:\FRST
2020-04-26 16:08 - 2020-04-26 16:08 - 002282496 _____ (Farbar) C:\Users\Laura\Downloads\FRST64 (1).exe
2020-04-26 16:06 - 2020-04-26 16:06 - 002282496 _____ (Farbar) C:\Users\Laura\Desktop\FRST64.exe
2020-04-26 15:43 - 2020-04-26 15:43 - 000001914 _____ C:\Users\Laura\Downloads\MALWAREbytes1.txt
2020-04-26 15:43 - 2020-04-26 15:43 - 000001914 _____ C:\Users\Laura\Downloads\MALWAREbytes1 (1).txt
2020-04-26 15:33 - 2020-04-26 15:33 - 000001914 _____ C:\Users\Laura\Desktop\MALWAREbytes1.txt
2020-04-26 15:22 - 2020-04-26 15:22 - 000001980 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-04-26 15:22 - 2020-04-26 15:22 - 000001968 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-04-26 15:22 - 2020-04-26 15:22 - 000001968 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-04-26 15:21 - 2020-04-26 15:21 - 001980016 _____ (Malwarebytes) C:\Users\Laura\Downloads\MBSetup.exe
2020-04-26 15:17 - 2020-04-26 15:17 - 000001577 _____ C:\Users\Laura\Downloads\malware (1).txt
2020-04-26 15:16 - 2020-04-26 15:16 - 000001577 _____ C:\Users\Laura\Downloads\malware.txt
2020-04-26 15:13 - 2020-04-26 15:13 - 000001577 _____ C:\Users\Laura\Desktop\malware.txt
2020-04-26 14:16 - 2020-04-26 14:16 - 000000549 _____ C:\Users\Laura\Downloads\delete_chrome_policies.bat
2020-04-26 14:01 - 2020-04-26 14:01 - 000121271 _____ C:\Users\Laura\Downloads\Cities Skylines 2019.torrent
2020-04-23 19:47 - 2020-04-23 19:47 - 015326535 _____ C:\Users\Laura\Desktop\5040f7b957ece489ba58588457460e05.mp4
2020-04-23 19:45 - 2020-04-23 19:45 - 010379505 _____ C:\Users\Laura\Desktop\f6727d0a6753b1bf96bf0d5b520664cb.mp4
2020-04-22 20:39 - 2020-04-22 20:39 - 012860317 _____ C:\Users\Laura\Desktop\47fdc79d2618708c2aa7eb31723df9fe.mp4
2020-04-22 19:52 - 2020-04-22 19:52 - 000016319 _____ C:\Users\Laura\Downloads\1587525671-Cuerdas [1080p][Castellano][wWw.EliteTorrent.NL].torrent
2020-04-22 19:19 - 2020-04-22 19:19 - 000000112 _____ C:\WINDOWS\wininit.ini
2020-04-22 19:19 - 2020-04-22 19:19 - 000000061 _____ C:\WINDOWS\wininit.tmp
2020-04-22 18:09 - 2020-04-22 18:09 - 000002146 _____ C:\Users\Public\Desktop\SimCity 4.lnk
2020-04-22 18:09 - 2020-04-22 18:09 - 000002146 _____ C:\ProgramData\Desktop\SimCity 4.lnk
2020-04-22 18:09 - 2020-04-22 18:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maxis
2020-04-22 16:15 - 2020-04-22 18:05 - 000003194 _____ C:\WINDOWS\system32\Tasks\{BB6C1BF2-CDDF-47FD-A8CC-F786547D1EDC}
2020-04-21 19:49 - 2020-04-23 12:57 - 211781314 _____ C:\Users\Laura\Desktop\Vivarium [HDR][Castellano][wWw.EliteTorrent.NL].mkv
2020-04-21 19:48 - 2020-04-21 19:48 - 000014648 _____ C:\Users\Laura\Downloads\train-to-busan-microhd-o7yzv.torrent
2020-04-21 19:46 - 2020-04-21 19:46 - 000018566 _____ C:\Users\Laura\Downloads\1586561005-Vivarium [HDR][Castellano][wWw.EliteTorrent.NL]HDR.torrent
2020-04-18 18:58 - 2020-04-26 14:01 - 000000000 ____D C:\Users\Laura\AppData\LocalLow\BitTorrent
2020-04-18 18:45 - 2020-04-18 19:27 - 000000000 ____D C:\Users\Laura\Desktop\Xiaomi Mi 9
2020-04-17 20:38 - 2020-04-17 20:38 - 000018880 _____ C:\Users\Laura\Downloads\1587051955-Mujercitas [720p][Castellano][wWw.EliteTorrent.NL].torrent
2020-04-17 13:40 - 2020-04-17 14:05 - 000000000 ____D C:\Users\Laura\Desktop\Iphone 17.04.20
2020-04-16 19:17 - 2020-04-16 19:17 - 006958970 _____ C:\Users\Laura\Downloads\384b8ed2956dfd943fac97c071a87bf5.mp4
2020-04-15 12:09 - 2020-03-31 08:23 - 001368080 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2020-04-15 12:09 - 2020-03-31 07:57 - 007362512 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2020-04-15 12:09 - 2020-03-31 07:42 - 001737520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2020-04-15 12:09 - 2020-03-31 06:49 - 001500888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2020-04-15 12:09 - 2020-03-31 06:47 - 025754624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2020-04-15 12:09 - 2020-03-31 06:31 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll
2020-04-15 12:09 - 2020-03-31 06:22 - 000580608 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2020-04-15 12:09 - 2020-03-31 06:11 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2020-04-15 12:09 - 2020-03-31 06:10 - 005499904 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2020-04-15 12:09 - 2020-03-31 06:08 - 020290048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2020-04-15 12:09 - 2020-03-31 05:59 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll
2020-04-15 12:09 - 2020-03-31 05:52 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2020-04-15 12:09 - 2020-03-31 05:43 - 000654848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2020-04-15 12:09 - 2020-03-31 05:42 - 001033216 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2020-04-15 12:09 - 2020-03-31 05:35 - 015468544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2020-04-15 12:09 - 2020-03-31 05:34 - 000809472 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2020-04-15 12:09 - 2020-03-31 05:23 - 001756672 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2020-04-15 12:09 - 2020-03-31 05:22 - 000880640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2020-04-15 12:09 - 2020-03-31 05:20 - 004859392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2020-04-15 12:09 - 2020-03-31 05:20 - 004112384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2020-04-15 12:09 - 2020-03-31 05:19 - 001085440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2020-04-15 12:09 - 2020-03-31 05:17 - 000696320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2020-04-15 12:09 - 2020-03-31 05:14 - 013854720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2020-04-15 12:09 - 2020-03-31 05:10 - 001493504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2020-04-15 12:09 - 2020-03-31 05:09 - 001566720 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2020-04-15 12:09 - 2020-03-31 04:59 - 004387328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2020-04-15 12:09 - 2020-03-31 04:58 - 000800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2020-04-15 12:09 - 2020-03-31 04:56 - 001332224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2020-04-15 12:09 - 2020-03-31 04:54 - 000710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2020-04-15 12:09 - 2020-03-27 16:25 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll
2020-04-15 12:09 - 2020-03-27 14:41 - 001680896 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2020-04-15 12:09 - 2020-03-24 02:29 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2020-04-15 12:09 - 2020-03-19 07:26 - 000374008 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2020-04-15 12:09 - 2020-03-19 06:11 - 000316152 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2020-04-15 12:09 - 2020-03-19 05:53 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2020-04-15 12:09 - 2020-03-19 05:17 - 000078336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2020-04-15 12:09 - 2020-03-12 02:40 - 001310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll
2020-04-15 12:09 - 2020-03-10 10:09 - 001764856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll
2020-04-15 12:09 - 2020-03-10 09:57 - 001135904 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2020-04-15 12:09 - 2020-03-10 09:22 - 001489728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll
2020-04-15 12:09 - 2020-03-10 08:27 - 000860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2020-04-15 12:09 - 2020-03-10 08:08 - 003727360 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe
2020-04-15 12:09 - 2020-03-10 07:57 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll
2020-04-15 12:09 - 2020-03-10 07:42 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll
2020-04-15 12:09 - 2020-03-08 07:20 - 000217400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2020-04-15 12:09 - 2020-03-08 06:31 - 000136816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2020-04-15 12:09 - 2020-03-08 06:03 - 000955640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2020-04-15 12:09 - 2020-03-08 05:44 - 000166248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2020-04-15 12:09 - 2020-03-08 05:22 - 000788096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2020-04-15 12:09 - 2020-03-08 04:45 - 004168704 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2020-04-15 12:09 - 2020-03-08 04:03 - 001479680 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2020-04-15 12:09 - 2020-03-08 03:39 - 001335808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2020-04-15 12:09 - 2020-03-08 03:39 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll
2020-04-15 12:09 - 2020-03-08 03:37 - 000274944 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll
2020-04-15 12:09 - 2020-03-08 03:33 - 000175104 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll
2020-04-15 12:09 - 2020-03-08 03:29 - 003718144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2020-04-15 12:09 - 2020-03-08 03:24 - 000606720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2020-04-15 12:09 - 2020-03-08 03:23 - 000036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll
2020-04-15 12:09 - 2020-03-08 03:21 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll
2020-04-15 12:09 - 2020-03-08 03:19 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll
2020-04-15 12:09 - 2020-03-08 01:25 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll
2020-04-15 12:09 - 2020-03-08 01:25 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll
2020-04-15 12:09 - 2020-02-13 10:01 - 000989648 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2020-04-15 12:09 - 2020-02-08 22:03 - 000162416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe
2020-04-15 12:09 - 2020-02-05 16:20 - 001717760 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000802816 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000634368 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\centel.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000456704 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000315904 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2020-04-15 12:09 - 2020-02-05 16:20 - 000257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2020-04-14 20:42 - 2020-04-20 17:10 - 000501752 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgNetHub.sys
2020-04-14 20:42 - 2020-04-14 20:42 - 000337592 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe
2020-04-14 20:42 - 2020-04-14 20:42 - 000235768 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys
2020-04-14 20:42 - 2020-04-14 20:42 - 000175984 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys
2020-04-14 20:25 - 2020-04-14 20:25 - 000000000 ____D C:\Wondershare UniConverter
2020-04-14 20:02 - 2020-04-14 20:02 - 000001200 _____ C:\Users\Public\Desktop\Wondershare UniConverter.lnk
2020-04-14 20:02 - 2020-04-14 20:02 - 000001200 _____ C:\ProgramData\Desktop\Wondershare UniConverter.lnk
2020-04-14 20:01 - 2020-04-14 20:01 - 000000000 ____D C:\Users\Laura\AppData\Roaming\TransferSupport
2020-04-14 19:52 - 2020-04-14 19:52 - 000000000 ____D C:\ProgramData\Wondershare MediaServer
2020-04-14 19:50 - 2020-04-14 19:50 - 000990312 _____ C:\Users\Laura\Downloads\video-converter-ultimate_setup_full857.exe
2020-04-13 19:42 - 2020-04-13 19:42 - 000019434 _____ C:\Users\Laura\Downloads\1585982696-Malasaña 32 [HDR][Castellano][wWw.EliteTorrent.NL].torrent
2020-04-10 19:18 - 2020-04-24 11:17 - 000000000 ____D C:\Users\Laura\Desktop\TikTiks
2020-04-08 19:29 - 2020-04-08 19:29 - 000072648 _____ C:\Users\Laura\Downloads\1586268576-Gretel Y Hansel [VOSE][720p][wWw.EliteTorrent.NU] (1).torrent
2020-04-08 19:22 - 2020-04-08 19:22 - 000072648 _____ C:\Users\Laura\Downloads\1586268576-Gretel Y Hansel [VOSE][720p][wWw.EliteTorrent.NU].torrent
2020-04-06 13:12 - 2020-04-24 19:42 - 000000000 ____D C:\Users\Laura\Desktop\niñas
2020-04-05 11:49 - 2020-04-05 11:49 - 001206995 _____ C:\Users\Laura\Desktop\1775 Calles- Jose A. Gomez Iglesias (Defreds).epub
2020-04-04 19:39 - 2020-01-15 14:03 - 033229722 _____ C:\Users\Laura\Desktop\VID_20200115_130333.mp4
2020-04-01 19:54 - 2020-04-01 19:54 - 000020023 _____ C:\Users\Laura\Downloads\1549747802-Arbol de Sangre [HDrip][Subtitulado][wWw.EliteTorrent.BiZ].torrent
2020-04-01 14:10 - 2020-04-01 14:10 - 000019563 _____ C:\Users\Laura\Downloads\1529936514-The Party [1080p][Castellano][wWw.EliteTorrent.BiZ].torrent
2020-03-30 11:28 - 2020-03-30 11:28 - 000021124 _____ C:\Users\Laura\Downloads\1584847015-Derribad al hombre [1080p][Castellano][wWw.EliteTorrent.BZ].torrent

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-04-26 15:59 - 2014-04-06 02:13 - 000003600 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2992363441-2088349996-1545117638-1002
2020-04-26 15:52 - 2014-04-07 14:40 - 000000000 ____D C:\Users\Laura\AppData\Local\CrashDumps
2020-04-26 15:41 - 2014-10-23 15:16 - 000000000 __RDO C:\Users\Laura\OneDrive
2020-04-26 15:39 - 2016-01-12 20:23 - 000000000 ____D C:\ProgramData\Avg
2020-04-26 15:35 - 2013-08-22 16:45 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-04-26 15:34 - 2019-08-26 15:34 - 000000000 ____D C:\Program Files\KMSpico
2020-04-26 15:34 - 2014-10-23 14:51 - 000000000 ____D C:\Users\Laura
2020-04-26 15:34 - 2014-10-23 14:42 - 000053284 _____ C:\WINDOWS\system32\wpbbin.exe
2020-04-26 15:34 - 2013-08-22 15:25 - 000524288 ___SH C:\WINDOWS\system32\config\BBI
2020-04-26 15:33 - 2016-01-16 02:23 - 000000000 ____D C:\Users\Administrador.Laura
2020-04-26 15:33 - 2014-10-23 14:51 - 000000000 ____D C:\Users\UpdatusUser
2020-04-26 15:21 - 2019-08-10 20:43 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-04-26 14:54 - 2014-09-06 14:54 - 000000000 ____D C:\Users\Laura\AppData\Roaming\Origin
2020-04-26 14:53 - 2014-08-01 20:42 - 000000000 ____D C:\Users\Laura\AppData\Roaming\BitTorrent
2020-04-26 14:16 - 2016-09-24 15:59 - 000000008 __RSH C:\ProgramData\ntuser.pol
2020-04-26 13:42 - 2018-03-24 18:25 - 000000000 ____D C:\Users\Laura\AppData\Local\Origin
2020-04-26 13:42 - 2014-09-06 17:16 - 000000000 ____D C:\Program Files (x86)\Origin Games
2020-04-26 13:42 - 2014-09-06 14:46 - 000000000 ____D C:\ProgramData\Origin
2020-04-26 13:42 - 2014-04-13 20:35 - 000000000 ____D C:\Program Files (x86)\Steam
2020-04-26 13:39 - 2019-01-17 14:34 - 000000000 ____D C:\Users\Laura\AppData\Local\Spotify
2020-04-26 13:33 - 2019-01-17 14:34 - 000000000 ____D C:\Users\Laura\AppData\Roaming\Spotify
2020-04-26 13:29 - 2014-09-24 17:23 - 001822472 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-04-26 13:29 - 2014-09-24 16:40 - 000805262 _____ C:\WINDOWS\system32\perfh00A.dat
2020-04-26 13:29 - 2014-09-24 16:40 - 000164164 _____ C:\WINDOWS\system32\perfc00A.dat
2020-04-26 13:29 - 2013-08-22 15:36 - 000000000 ____D C:\WINDOWS\Inf
2020-04-26 11:02 - 2019-10-06 12:39 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2020-04-26 11:02 - 2019-10-06 12:39 - 000000000 ___HD C:\ProgramData\Documents\AdobeGCData
2020-04-25 20:14 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-04-25 18:53 - 2015-02-02 16:14 - 000000000 ____D C:\Users\Laura\AppData\Roaming\Telegram Desktop
2020-04-24 19:42 - 2019-01-15 21:46 - 000000000 ____D C:\Users\Laura\Downloads\Telegram Desktop
2020-04-24 19:34 - 2016-11-24 20:59 - 000000000 ____D C:\Users\Laura\Documents\Biblioteca de calibre
2020-04-22 20:13 - 2014-11-15 20:57 - 000000000 ____D C:\Users\Laura\AppData\Roaming\vlc
2020-04-22 19:20 - 2017-02-23 16:53 - 000012464 _____ (Macrovision Europe Ltd) C:\WINDOWS\SysWOW64\Drivers\SECDRV.SYS
2020-04-22 18:05 - 2019-10-06 12:40 - 000003446 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2020-04-22 18:05 - 2019-08-26 15:35 - 000003168 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2992363441-2088349996-1545117638-1002
2020-04-22 18:05 - 2019-08-26 14:46 - 000003500 _____ C:\WINDOWS\system32\Tasks\{A5020C2A-A25C-46F4-80C9-121973776963}
2020-04-22 18:05 - 2018-09-26 11:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-04-22 18:05 - 2018-09-24 16:43 - 000004494 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player PPAPI Notifier
2020-04-22 18:05 - 2017-04-01 20:31 - 000003916 _____ C:\WINDOWS\system32\Tasks\Antivirus Emergency Update
2020-04-22 18:05 - 2016-05-31 21:01 - 000002784 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-04-22 18:05 - 2016-05-08 19:28 - 000003094 _____ C:\WINDOWS\system32\Tasks\{2F9CCA85-9522-4B9D-9613-2329E6325CCA}
2020-04-22 18:05 - 2014-12-07 21:50 - 000003966 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{C1875360-1977-4C29-955B-D3F42A3B834B}
2020-04-22 18:05 - 2014-04-06 01:57 - 000003536 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-04-22 18:05 - 2014-04-06 01:57 - 000003408 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-04-22 18:05 - 2013-11-15 02:28 - 000002914 _____ C:\WINDOWS\system32\Tasks\Power Management
2020-04-22 18:05 - 2013-03-18 14:17 - 000003326 _____ C:\WINDOWS\system32\Tasks\iuEmailOutlookAgent
2020-04-22 18:05 - 2013-03-18 14:17 - 000003320 _____ C:\WINDOWS\system32\Tasks\iuBrowserIEAgent
2020-04-22 18:05 - 2013-03-18 14:13 - 000004402 _____ C:\WINDOWS\system32\Tasks\ALUAgent
2020-04-22 18:05 - 2013-03-18 14:13 - 000003626 _____ C:\WINDOWS\system32\Tasks\ALU
2020-04-22 16:16 - 2014-04-06 23:51 - 000000000 ____D C:\Users\Laura\AppData\Local\ElevatedDiagnostics
2020-04-22 13:58 - 2016-01-17 20:04 - 000000000 ____D C:\Users\Laura\AppData\Roaming\dvdcss
2020-04-22 11:18 - 2014-04-06 01:58 - 000002246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-04-22 11:18 - 2014-04-06 01:58 - 000002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-04-22 11:18 - 2014-04-06 01:58 - 000002205 _____ C:\ProgramData\Desktop\Google Chrome.lnk
2020-04-20 19:14 - 2019-08-26 15:35 - 000002375 _____ C:\Users\Laura\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive para la Empresa.lnk
2020-04-20 12:28 - 2013-08-22 17:36 - 000000000 ____D C:\WINDOWS\rescache
2020-04-19 18:04 - 2013-08-22 17:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-04-19 18:02 - 2019-08-26 15:21 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-04-18 18:54 - 2013-08-22 16:44 - 000668488 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-04-18 18:47 - 2014-09-24 19:57 - 000000000 ___SD C:\WINDOWS\system32\CompatTel
2020-04-16 15:28 - 2019-06-18 13:36 - 000000000 ___RD C:\Users\Laura\Desktop\Programas
2020-04-16 11:20 - 2017-04-01 20:31 - 000459992 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys
2020-04-15 14:04 - 2012-07-26 09:59 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-04-14 20:42 - 2018-10-25 12:07 - 000043568 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgKbd.sys
2020-04-14 20:42 - 2017-11-28 12:54 - 000206672 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArPot.sys
2020-04-14 20:42 - 2017-04-01 20:31 - 000317864 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys
2020-04-14 20:42 - 2017-04-01 20:30 - 000852392 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys
2020-04-14 20:42 - 2017-04-01 20:30 - 000110064 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys
2020-04-14 20:42 - 2017-04-01 20:30 - 000085664 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys
2020-04-14 20:41 - 2019-01-14 19:01 - 000234840 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys
2020-04-14 20:41 - 2019-01-11 20:29 - 000179032 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsh.sys
2020-04-14 20:41 - 2019-01-11 20:29 - 000061272 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniv.sys
2020-04-14 20:02 - 2016-10-06 18:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2020-04-14 20:01 - 2016-10-06 18:16 - 000000000 ____D C:\Program Files (x86)\Wondershare
2020-04-14 19:53 - 2019-01-02 22:51 - 000000000 ____D C:\Users\Laura\AppData\Roaming\Wondershare
2020-04-14 19:53 - 2015-09-12 19:46 - 000000000 ____D C:\Users\Laura\AppData\Local\Wondershare
2020-04-14 19:52 - 2015-09-12 19:47 - 000000000 ____D C:\ProgramData\Wondershare
2020-04-14 19:52 - 2015-09-12 19:42 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2020-04-14 19:52 - 2015-09-12 19:42 - 000000000 ____D C:\ProgramData\Documents\Wondershare
2020-04-12 17:34 - 2020-03-15 12:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-04-07 15:16 - 2018-06-08 17:04 - 000000000 ____D C:\Users\Laura\AppData\Roaming\AirDroid
2020-03-27 14:57 - 2019-06-12 20:27 - 000000000 ___RD C:\Users\Laura\Desktop\Juegos

==================== Archivos en la raíz de algunos directorios ========

2014-09-28 16:41 - 2016-08-16 19:42 - 000000132 _____ () C:\Users\Laura\AppData\Roaming\Adobe PNG Format CS5 Prefs
2014-09-15 14:12 - 2014-09-15 14:33 - 000041773 _____ () C:\Users\Laura\AppData\Roaming\art.png
2014-08-03 16:12 - 2014-08-03 18:42 - 000020824 _____ () C:\Users\Laura\AppData\Roaming\AutoTagLog.log
2014-08-03 15:51 - 2014-08-08 16:51 - 000005220 _____ () C:\Users\Laura\AppData\Roaming\RegistrationLog.log
2014-08-03 16:00 - 2014-08-03 16:01 - 001566804 _____ () C:\Users\Laura\AppData\Roaming\ReplayMusicDump.dmp
2014-08-03 15:51 - 2016-09-26 18:38 - 000005986 _____ () C:\Users\Laura\AppData\Roaming\ReplayMusicLog.log
2018-07-21 14:20 - 2018-07-21 14:20 - 000004633 _____ () C:\Users\Laura\AppData\Roaming\VoiceMeeterDefault.xml
2016-07-27 14:13 - 2016-07-27 14:13 - 000004120 _____ () C:\Users\Laura\AppData\Local\HWVendorDetection.log
2018-09-30 18:34 - 2018-09-30 18:34 - 000000000 _____ () C:\Users\Laura\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)


LastRegBack: 2020-04-26 15:59
==================== Final de FRST.txt ========================

[JavierHF]

Bien… y ahora sigue estos pasos, MUY Importante Realiza una copia de seguridad del registro :

• Para hacerlo descarga DelFix.exe(en tu escritorio).

• Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).

• Atención, ahora marca/selecciona únicamente la casilla Create registry backup, las demás casillas NO.

• Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

Con los demás programas cerrados ve a Inicio Ejecutar y escribe Notepad.exe.

• Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.

START
CREATERESTOREPOINT:
CLOSEPROCESSES:
CustomCLSID: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Laura\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileCoAuthLib64.dll => Ningún archivo
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Ningún archivo
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Ningún archivo
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Ningún archivo
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Ningún archivo
AlternateDataStreams: C:\Windows:nlsPreferences [0]
HKLM-x32\...\Run: [LManager] => [X]
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --enable-audio-service-sandbox --flag-switches-begin --flag-switches-end --no-startup-window /prefetch:5 --flag-switches-begin --flag-switc (la entrada de datos tiene 61 más caracteres).
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\ctfmon.exe [9728 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.122\Installer\chrmstp.exe [2020-04-22] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN
Task: {6F90AD96-2426-48CC-A9C1-EB7A03D8A3C9} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {7F07494B-B1D3-4D09-8B12-9E5AB39510C1} - System32\Tasks\{BB6C1BF2-CDDF-47FD-A8CC-F786547D1EDC} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Maxis\SimCity 4\Apps\SimCity 4.exe" -d "C:\Program Files (x86)\Maxis\SimCity 4"
Task: C:\WINDOWS\Tasks\0116avzUpdateInfo.job => C:\ProgramData\Avg_Update_0116avz\0116avz_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0214dUpdateInfo.job => C:\ProgramData\Avg_Update_0214d\0214d_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0316avzUpdateInfo.job => C:\ProgramData\Avg_Update_0316avz\0316avz_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0414bUpdateInfo.job => C:\ProgramData\Avg_Update_0414b\0414b_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0615pizUpdateInfo.job => C:\ProgramData\Avg_Update_0615piz\0615piz_AVG-Secure-Search-Update.exe
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Ningún archivo
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [X]
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Guárdalo bajo el nombre de FIXLIST.TXT en el escritorio Esto es muy importante.

Nota Es importante que la herramienta FRST.exe(Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.

ATENCION!!! El siguiente Script de reparación fue hecho específicamente por un miembro del staff para este usuario, si tiene un problema similar por favor abra su propio tema para recibir ayuda personalizada. Usar Scripts de otros usuarios puede causar daños graves en su equipo

Y ahora usa el 2º MÉTODO: de esta Faq de Windows 8 ¿Cómo iniciar Windows 8/8.1 en Modo Seguro?, para trabajar desde ese modo de windows.

• Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).

• Presionar el botón FIX/Corregir y aguardar a que termine.

• La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).

Pegar el contenido de este fichero en tu próxima respuesta.

Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo, aquí tienes un ejemplo de como hacerlo :

Saludos.

[Laurac]

Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 24-04-2020
Ejecutado por Laura (27-04-2020 12:00:56) Run:1
Ejecutado desde C:\Users\Laura\Desktop
Perfiles cargados: Laura (Perfiles disponibles: UpdatusUser & Laura & Administrador)
Modo de Inicio: Safe Mode (with Networking)
==============================================

fixlist contenido:
*****************
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
CustomCLSID: HKU\S-1-5-21-2992363441-2088349996-1545117638-1002_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Laura\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileCoAuthLib64.dll => Ning�n archivo
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ning�n archivo
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Ning�n archivo
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Ning�n archivo
ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ning�n archivo
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Ning�n archivo
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Ning�n archivo
AlternateDataStreams: C:\Windows:nlsPreferences [0]
HKLM-x32\...\Run: [LManager] => [X]
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --enable-audio-service-sandbox --flag-switches-begin --flag-switches-end --no-startup-window /prefetch:5 --flag-switches-begin --flag-switc (la entrada de datos tiene 61 m�s caracteres).
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\ctfmon.exe [9728 2014-10-29] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.122\Installer\chrmstp.exe [2020-04-22] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\58.0.3029.81\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricci�n <==== ATENCI�N
CHR HKLM\SOFTWARE\Policies\Google: Restricci�n <==== ATENCI�N
Task: {6F90AD96-2426-48CC-A9C1-EB7A03D8A3C9} - System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Task: {7F07494B-B1D3-4D09-8B12-9E5AB39510C1} - System32\Tasks\{BB6C1BF2-CDDF-47FD-A8CC-F786547D1EDC} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Maxis\SimCity 4\Apps\SimCity 4.exe" -d "C:\Program Files (x86)\Maxis\SimCity 4"
Task: C:\WINDOWS\Tasks\0116avzUpdateInfo.job => C:\ProgramData\Avg_Update_0116avz\0116avz_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0214dUpdateInfo.job => C:\ProgramData\Avg_Update_0214d\0214d_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0316avzUpdateInfo.job => C:\ProgramData\Avg_Update_0316avz\0316avz_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0414bUpdateInfo.job => C:\ProgramData\Avg_Update_0414b\0414b_AVG-Secure-Search-Update.exe
Task: C:\WINDOWS\Tasks\0615pizUpdateInfo.job => C:\ProgramData\Avg_Update_0615piz\0615piz_AVG-Secure-Search-Update.exe
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Ning�n archivo
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn]
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn]
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [X]
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************

Error: El punto de restauración solamente puede ser creado en modo normal.
Procesos cerrados correctamente.
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5} => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avg => eliminado correctamente
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities => eliminado correctamente
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Glary Utilities => eliminado correctamente
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\00avg => eliminado correctamente
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => eliminado correctamente
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities => eliminado correctamente
C:\Windows => ":nlsPreferences" ADS eliminado correctamente
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LManager" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B" => eliminado correctamente
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\Run: [GoogleChromeAutoLaunch_4A482ADE7BA14BD80C73B5D8EC859C6B] => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5 => Error ({ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}): Ninguna corrección automática encontrada para esta entrada.
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --enable-audio-service-sandbox --flag-switches-begin --flag-switches-end --no-startup-window /prefetch:5 --flag-switches-begin --flag-switc (la entrada de datos tiene 61 m�s caracteres). => Error ({ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}): Ninguna corrección automática encontrada para esta entrada.
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\ctfmon.exe [9728 2014-10-29] (Microsoft Windows -> Microsoft Corporation) => Error ({ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}): Ninguna corrección automática encontrada para esta entrada.
HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719461\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe --flag-switches-begin --flag-switches-end --restore-last-session => Error ({ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}): Ninguna corrección automática encontrada para esta entrada.
HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => eliminado correctamente
HKLM\SOFTWARE\Policies\Mozilla => eliminado correctamente
HKLM\SOFTWARE\Policies\Google => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6F90AD96-2426-48CC-A9C1-EB7A03D8A3C9}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F90AD96-2426-48CC-A9C1-EB7A03D8A3C9}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\AVGPCTuneUp_Task_BkGndMaintenance => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVGPCTuneUp_Task_BkGndMaintenance" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7F07494B-B1D3-4D09-8B12-9E5AB39510C1}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7F07494B-B1D3-4D09-8B12-9E5AB39510C1}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\{BB6C1BF2-CDDF-47FD-A8CC-F786547D1EDC} => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BB6C1BF2-CDDF-47FD-A8CC-F786547D1EDC}" => eliminado correctamente
C:\WINDOWS\Tasks\0116avzUpdateInfo.job => movido correctamente
C:\WINDOWS\Tasks\0214dUpdateInfo.job => movido correctamente
C:\WINDOWS\Tasks\0316avzUpdateInfo.job => movido correctamente
C:\WINDOWS\Tasks\0414bUpdateInfo.job => movido correctamente
C:\WINDOWS\Tasks\0615pizUpdateInfo.job => movido correctamente
HKLM\Software\Classes\PROTOCOLS\Handler\skype4com => eliminado correctamente
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\chfdnecihphmhljaaejmgoiahnihplgn => eliminado correctamente
HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Google\Chrome\Extensions\mbckjcfnjmoiinpgddefodcighgikkgn => eliminado correctamente
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [chfdnecihphmhljaaejmgoiahnihplgn] => Error ({ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}): Ninguna corrección automática encontrada para esta entrada.
CHR HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04262020153719571\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mbckjcfnjmoiinpgddefodcighgikkgn] => Error ({ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}): Ninguna corrección automática encontrada para esta entrada.
HKLM\System\CurrentControlSet\Services\WsDrvInst => eliminado correctamente
WsDrvInst => servicio eliminado correctamente
C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04272020120014641\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04272020120014641\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04272020120013438\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04272020120013438\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04272020120013328\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-2992363441-2088349996-1545117638-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-04272020120013328\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= Final de CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local* 3 mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Wi-Fi mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Ethernet mientras los medios
est‚n desconectados.

========= Final de CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.7.9600 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

Unable to connect to BITS - 0x8007042c
No se puede iniciar el servicio o grupo de dependencia.



========= Final de CMD: =========


========= netsh advfirewall reset =========

Aceptar


========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar


========= Final de CMD: =========


========= netsh int ipv4 reset =========

Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Direcci¢n de unidifusi¢n se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Ruta se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


========= netsh int ipv6 reset =========

Interfaz se restableci¢ correctamente.
Vecino se restableci¢ correctamente.
Ruta de acceso se restableci¢ correctamente.
Subinterfaz se restableci¢ correctamente.
Error al restablecer .
Acceso denegado.

 se restableci¢ correctamente.
 se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 135465843 B
Java, Flash, Steam htmlcache => 175594337 B
Windows/system/drivers => 239383129 B
Edge => 0 B
Chrome => 23857625 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 23535944 B
LocalService => 23578530 B
NetworkService => 23578530 B
UpdatusUser => 23578530 B
Laura => 148657976 B
Administrador.Laura => 150415837 B

RecycleBin => 283536 B
EmptyTemp: => 931.1 MB datos temporales eliminados.

================================


El sistema necesita reiniciarse.

==== Final de Fixlog 12:06:16 ====

[Laurac]

Ya hecho todos los pasos y me sigue saliendo lo de “Gestionado por tu organización”

[JavierHF]

Hola.

@JavierHF

Es muy probable que tu problema este relacionado con tu antivirus de AVG, que le pase lo mismo que YA esta ocurriendo con el antivirus de AVAST.

Como Ya te dije lo mas probable es que el problema sea ese.

Si quieres podemos hacer una prueba, desinstalando tu antivirus para verificar que el problema venga por él, imagino que tienes la version gratuita del antivirus, que siempre la puedes volver a descargar e igualmente si lo tuvieras con licencia comprada…??

Para desinstalar correctamente un antivirus se debe usar la Herramientas de desinstalación de Antivirus, AntiSpyware y Firewall , y seleccionar el adecuado.

Pruebalo y despues de hacerlo REINICIAS el equipo y nos comentas los resultados.

Saludos.

[Laurac]

Realmente no me ha hecho falta desinstalarlo. Lo he desactivado y lo de “gestionado por tu organización” ha desaparecido, además, le he preguntado a un amigo que también tiene el AVG gratuito y le sale también. ¿Esto puede ser peligro o es algo que no tiene importancia? Si es peligroso, ¿hay alguna forma de eliminarlo?

[JavierHF]

Hola.

Perfecto.

Como ya te dije anteriormente y teniendo en cuenta que AVAST y AVG son del mismo “propietario” :

@JavierHF

Es muy probable que tu problema este relacionado con tu antivirus de AVG, que le pase lo mismo que YA esta ocurriendo con el antivirus de AVAST.

Se trata de una nueva característica que se incorporaba en AVAST y habrán añadido igualmente a AVG :

Su navegador está siendo administrado por su organización

Aparentemente esta es la explicación oficial:

Hay un protocolo de red actualmente en desarrollo llamado QUIC. Como está en el desarrollo activo de Google y otros, hay algunas versiones de este protocolo que no podemos comprobar correctamente para el tráfico malicioso. Por lo tanto, decidimos bloquear estas versiones del protocolo y la forma en que lo hacemos es utilizando la configuración de la Política de Chrome (que es, según Google, la forma preferida de hacerlo).

Puedes comprobar la política visitando chrome://policy

La política que cambiamos hace sólo una cosa - cambia el protocolo QUIC a HTTP/2 - todavía muy rápido y moderno protocolo de Internet para que WebShield pueda escanearlo.

Sin esto, el tráfico que va a través de QUIC (la mayoría de los dominios propiedad de Google y algunos dominios alojados en CloudFlare y más en el futuro) estaría desprotegido por el WebShield - simplemente lo evitan. Aunque realmente confiamos en Google, sus usuarios a veces alojan cosas que Avast podría bloquear cuando se infecta - como descargas de las carpetas compartidas de Google Drive.

Así que desde el punto de vista de la seguridad, creemos que es mejor tener todo el tráfico escaneado.

Por aquí la misma información en otro tema de AVAST Chrome: Managed by your organisation (Avast 20.2.2401)

O información para quitarlo(en AVAST) o verificarlo Solución al "Gestionado por tu organización" de Chrome 🕵️‍♂️ - nacho.com.ar

Espero que esto aclare tus dudas.

Saludos.

[Laurac]

Ok, pues solucionado entonces. Muchas gracias por tu ayuda

[JavierHF]

Perfecto @Laurac excelente, nos alegra ver que ya está el problema inicial completamente arreglado y aclarado, ahora solo queda eliminar las herramientas usadas.

Para hacerlo descarga DelFix.exe en tu escritorio.

• Doble clic para ejecutarlo. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador -).

• Marca todas las casillas, y pulsas en Run

Se abrirá el informe (DelFix.txt), puedes cerrarlo.

---

Para cualquier otro problema, no dudes en volver a postear., ya sabes dónde estamos.

Tema Solucionado.

Te recomendamos mantenerte informado en InfoSpyware Blog y siguiendo también nuestras vías de difusión E-Mail - Facebook - Twitter.

Saludos, Javier.