# Pc muy lento **URL:** \ **Category:** Ayuda General\ **Created:** [4 Mayo, 2020 13:22 UTC](https://forospyware.com/t/pc-muy-lento/16271 "2020-05-04T13:22:44Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [4 Mayo, 2020 13:22 UTC](https://forospyware.com/t/pc-muy-lento/16271/1 "2020-05-04T13:22:44Z")
Hola!antes de nada quiero agradecer a todo el equipo que está aquí para ayudar a todo aquel que lo necesita!os cuento que noto mi pc muy lento desde hace unos días y se queda pillado, también la velocidad de conexión a internet la noto reducida, consulté con mi compañía y me dicen que no hay ninguna anomalía en mi red, es un pc relativamente nuevo y con Windows 10 … ¿Que programas o acciones me recomendáis? Gracias! ---
**Author:** ![Miguelgrado](https://forospyware.com/letter_avatar/miguelgrado/32/6_22734026db12803ebb3e059622ac3534.png) [@Miguelgrado](https://forospyware.com/u/Miguelgrado)\ **Post date:** [4 Mayo, 2020 13:57 UTC](https://forospyware.com/t/pc-muy-lento/16271/2 "2020-05-04T13:57:40Z")
Realiza los siguientes pasos, , sin cambiar el orden 1) Descarga, instala y ejecuta [Malwarebytes’ Anti-Malware](https://www.infospyware.com/antivirus/malwarebytes/). - Presiona clic en “ **Use Malewarebytes Free** ” (Usar Malewarebyte gratis). - Pulsa en el botón **“Open Malewarebytes Free”**. ![imagen](https://forospyware.com/uploads/default/original/2X/0/03f41cb99d27d58c220a6baf44b7c1be1ed31bb6.png) - Presiona el **botón “Scan”** (Escaneo). ![imagen](https://forospyware.com/uploads/default/original/2X/5/5b70e0c8563ce5b71c24fc3fd8348fc182432cf3.png) Una vez finalizado el escaneo aparecerá la siguiente pantalla: ![imagen](https://forospyware.com/uploads/default/original/2X/2/2c21d2177761f514b32a0696f97f24c0088a593f.png) - Pulsa en **“View report”** (Ver informe). - Luego presionar el botón **“Export”** (Exportar). Elijes **“Text file”** (fichero de texto). Elijes un nombre y guardas ese archivo en el escritorio… 2) Descarga **[Adwcleaner](https://www.infospyware.com/antispyware/adwcleaner/)** **en el escritorio.** - Desactiva tu antivirus ▶**[Como deshabilitar temporalmente un antivirus](https://forospyware.com/t/como-deshabilitar-temporalmente-su-antivirus/82/2)** y cualquier programa de seguridad. - Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona "Ejecutar como Administrador.") - Pulsar en el botón Analizar Ahora, y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Iniciar Reparacion. - Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas. - Si no encuentra nada, pulsamos “Omitir Reparación” - El log lo encontramos en la pestaña “Informes”, volviendo a abrir el programa, si es necesario o en"C:\AdwCleaner\Logs\AdwCleaner[C0].txt" Puedes mirar su manual \>\> **[Manual de Adwcleaner](https://forospyware.com/t/manual-de-adwcleaner/98)** 3) Descarga **[Ccleaner](https://www.infospyware.com/herramientas/ccleaner/)** Instalalo y ejecútalo. En la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine \> clic en ejecutar limpiador. Clic en la pestaña Registro \> clic en buscar problemas esperas que termine \> clic en Reparar Seleccionadas y haces una copia de seguridad. Pega los reportes de Malwarebytes, AdwCleaner y comentas como va el problema. > [@](#): > > ⚠ ▶ [**Muy Importante**] \* Al pegar cada informe , debemos seleccionar todo el texto y pulsar en el botón de `Texto preformateado` > > ![2018-11-12_17-17-18](https://forospyware.com/uploads/default/original/2X/c/cd7c18fc5d8f830f282258338a203e1a059b7b40.png) > [@](#): > > **_NOTA IMPORTANTE_** > > Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo : > > - No realices pasos/acciones que NOSOTROS no te hayamos indicado > - No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo. > - No instales NADA(programas/software/complementos/extensiones del navegador…) > - No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…) > - No realices por tu cuenta otros procedimientos. > - Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones. ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [4 Mayo, 2020 14:19 UTC](https://forospyware.com/t/pc-muy-lento/16271/3 "2020-05-04T14:19:43Z")
```auto Malwarebytes www.malwarebytes.com -Detalles del registro- Fecha del análisis: 4/5/20 Hora del análisis: 10:58 Archivo de registro: 6171bf73-8de5-11ea-b17f-1831bf2364f1.json -Información del software- Versión: 4.1.0.56 Versión de los componentes: 1.0.889 Versión del paquete de actualización: 1.0.23390 Licencia: Prueba -Información del sistema- SO: Windows 10 (Build 18362.778) CPU: x64 Sistema de archivos: NTFS Usuario: System -Resumen del análisis- Tipo de análisis: Análisis de amenazas Análisis iniciado por:: Programador de tareas Resultado: Completado Objetos analizados: 289506 Amenazas detectadas: 0 Amenazas en cuarentena: 0 Tiempo transcurrido: 4 min, 17 seg -Opciones de análisis- Memoria: Activado Inicio: Activado Sistema de archivos: Activado Archivo: Activado Rootkits: Desactivado Heurística: Activado PUP: Detectar PUM: Detectar -Detalles del análisis- Proceso: 0 (No hay elementos maliciosos detectados) Módulo: 0 (No hay elementos maliciosos detectados) Clave del registro: 0 (No hay elementos maliciosos detectados) Valor del registro: 0 (No hay elementos maliciosos detectados) Datos del registro: 0 (No hay elementos maliciosos detectados) Secuencia de datos: 0 (No hay elementos maliciosos detectados) Carpeta: 0 (No hay elementos maliciosos detectados) Archivo: 0 (No hay elementos maliciosos detectados) Sector físico: 0 (No hay elementos maliciosos detectados) WMI: 0 (No hay elementos maliciosos detectados) (end) ``` ```auto # ------------------------------- # Malwarebytes AdwCleaner 8.0.4.0 # ------------------------------- # Build: 04-03-2020 # Database: 2020-04-08.2 (Cloud) # Support: https://www.malwarebytes.com/support # # ------------------------------- # Mode: Clean # ------------------------------- # Start: 05-04-2020 # Duration: 00:00:02 # OS: Windows 10 Home # Cleaned: 16 # Failed: 0 *****[Services]***** No malicious services cleaned. *****[Folders]***** Deleted C:\Program Files (x86)\Lavasoft\Web Companion Deleted C:\Program Files (x86)\ProxyGate Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion Deleted C:\ProgramData\Lavasoft\Web Companion Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion Deleted C:\Users\Usuario\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_MRPQ523XMEO0CM2M0N5VJ25Z3NZKGEP4 Deleted C:\Users\Usuario\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG Deleted C:\Users\Usuario\AppData\Roaming\Lavasoft\Web Companion *****[Files]***** No malicious files cleaned. *****[DLL]***** No malicious DLLs cleaned. *****[WMI]***** No malicious WMI cleaned. *****[Shortcuts]***** No malicious shortcuts cleaned. *****[Tasks]***** No malicious tasks cleaned. *****[Registry]***** Deleted HKCU\Software\Lavasoft\Web Companion Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com Deleted HKLM\SOFTWARE\Microsoft\RADAR\HeapLeakDetection\DiagnosedApplications\WebCompanion.exe Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{c508a46d-57fe-40d6-b953-e04ad78a8b24}|DisplayIcon Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{c508a46d-57fe-40d6-b953-e04ad78a8b24}|DisplayName Deleted HKLM\Software\Wow6432Node\SlimWare Utilities Inc *****[Chromium (and derivatives)]***** No malicious Chromium entries cleaned. *****[Chromium URLs]***** No malicious Chromium URLs cleaned. *****[Firefox (and derivatives)]***** No malicious Firefox entries cleaned. *****[Firefox URLs]***** No malicious Firefox URLs cleaned. *****[Hosts File Entries]***** No malicious hosts file entries cleaned. *****[Preinstalled Software]***** No Preinstalled Software cleaned. ************************* [+] Delete Tracing Keys [+] Reset Winsock ************************* AdwCleaner[S00].txt - [3009 octets] - [04/05/2020 16:13:34] ########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ########## ``` Estos son los reportes … no he notado mucha diferencia con estas acciones… ¿como lo veis? ---
**Author:** ![Miguelgrado](https://forospyware.com/letter_avatar/miguelgrado/32/6_22734026db12803ebb3e059622ac3534.png) [@Miguelgrado](https://forospyware.com/u/Miguelgrado)\ **Post date:** [4 Mayo, 2020 14:31 UTC](https://forospyware.com/t/pc-muy-lento/16271/4 "2020-05-04T14:31:54Z")
- **[Desactiva Temporalmente tu antivirus](https://forospyware.com/t/como-deshabilitar-temporalmente-su-antivirus/82)** y cualquier programa de seguridad. - Descarga a Tu Escritorio \>\> Esto es **muy importante** \<\<.,**[Fabar Recovery Scan Tool](https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/)**, considerando la versión adecuada para tu equipo. (32 o 64 bits) ▶ ¿Cómo saber si mi Windows es de 32 o 64 bits? - Doble clic para ejecutar Frst.exe. En la ventana del Disclaimer, presiona Si. - En la nueva ventana que se abre, presiona el botón Analizar y espera a que concluya el análisis. - Se abrirán dos (2) archivos (Logs), Frst.txt y Addition.txt, que estarán grabados en Tu escritorio. En Tu próxima respuesta, copias y pegas los dos reportes Frst.txt y Addition.txt de FRST _ **Nota:** Si el/los reportes solicitados **no entraran en una sola respuesta** porque superan la cantidad de caracteres permitidos, puedes utilizar dos o mas respuestas para pegarlos completamente._ > [@](#): > > ⚠ ▶ [**Muy Importante**] \* Al pegar cada informe , debemos seleccionar todo el texto y pulsar en el botón de `Texto preformateado` > > ![2018-11-12_17-17-18](https://forospyware.com/uploads/default/original/2X/c/cd7c18fc5d8f830f282258338a203e1a059b7b40.png) ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [4 Mayo, 2020 15:09 UTC](https://forospyware.com/t/pc-muy-lento/16271/5 "2020-05-04T15:09:03Z")
``` Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 03-05-2020 Ejecutado por Usuario (04-05-2020 17:04:42) Ejecutado desde C:\Users\Usuario\Desktop Windows 10 Home Versión 1909 18363.778 (X64) (2020-03-22 01:45:22) Modo de Inicio: Normal ========================================================== ==================== Cuentas: ============================= Administrador (S-1-5-21-2191999910-1078877841-1369218771-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2191999910-1078877841-1369218771-503 - Limited - Disabled) Invitado (S-1-5-21-2191999910-1078877841-1369218771-501 - Limited - Disabled) Usuario (S-1-5-21-2191999910-1078877841-1369218771-1001 - Administrator - Enabled) => C:\Users\Usuario WDAGUtilityAccount (S-1-5-21-2191999910-1078877841-1369218771-504 - Limited - Disabled) ==================== Centro de Seguridad ======================== (Si una entrada es incluida en el fixlist, será eliminada.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Disabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {5078598A-1FA2-C888-AA5F-A9C66537DB12} ==================== Programas instalados ====================== (Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.) µTorrent (HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\...\uTorrent) (Version: 3.5.5.45608 - BitTorrent Inc.) Adobe Acrobat Reader DC - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AC0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated) Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.363 - Adobe) Adobe Photoshop CS6 versión 13.0.1 (HKLM-x32\...\{A724DC44-6241-42D3-BA57-778B178ABC17}_is1) (Version: 13.0.1 - Adobe Systems, Inc.) Asistente para actualización a Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22589 - Microsoft Corporation) AutoFirma (HKLM-x32\...\AutoFirma) (Version: 1.6.5 - Gobierno de España) Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.2.2401 - Avast Software) Blaze HDTV Player Deluxe 4.0 (HKLM-x32\...\Blaze HDTV Player Deluxe 4.0_is1) (Version: - ) Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.) Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.00.1.51 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.0.0 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.1 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.) Canon TS5100 series Manual en pantalla (HKLM-x32\...\Canon TS5100 series Manual en pantalla) (Version: 1.1.0 - Canon Inc.) Canon TS5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_TS5100_series) (Version: 1.00 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Free Video Flip and Rotate (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.2.37.627 - Digital Wave Ltd) Galería de fotos (HKLM-x32\...\{F7314CA2-F900-46D7-9EA1-FBDD9D73F765}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 81.0.4044.129 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation) Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden Java 8 Update 241 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180241F0}) (Version: 8.0.2410.7 - Oracle Corporation) Junk Mail filter update (HKLM-x32\...\{F6F30C28-38AA-4DBA-AE0B-7E30238E61BB}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes) Microsoft Office Professional Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0012 - Microsoft Corporation) Microsoft Outlook Hotmail Connector 64-bit (HKLM\...\{95140000-007A-0409-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Outlook Hotmail Connector de 64 bits (HKLM\...\{95140000-007A-0C0A-1000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Outlook Social Connector Provider for Windows Live Messenger 64-bit (HKLM\...\{95140000-007D-0409-1000-0000000FF1CE}) (Version: 14.0.5120.5000 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{45898170-E68C-4F02-AA35-C2186BF347A3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{F25C8769-16B6-4B19-BB0B-76F213829AC6}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden Mozilla Firefox 75.0 (x64 es-ES) (HKLM\...\Mozilla Firefox 75.0 (x64 es-ES)) (Version: 75.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 61.0.2 - Mozilla) Paquete de controladores de Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.) Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation) RawTherapee versión 5.4 (HKLM\...\RawTherapee5.4_is1) (Version: 5.4 - rawtherapee.com) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8339 - Realtek Semiconductor Corp.) Registro de la impresora (HKLM-x32\...\Canon EISRegistration) (Version: 1.2.0 - Canon Inc.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) TMPGEnc Video Mastering Works (HKLM-x32\...\TMPGEnc Video Mastering Works) (Version: - ) USB DVB-T TV Driver (HKLM-x32\...\{A0CD0434-C975-4E5B-989B-066CE4D35597}) (Version: 1.2.0.1 - None) Hidden USB DVB-T TV Driver (HKLM-x32\...\InstallShield_{A0CD0434-C975-4E5B-989B-066CE4D35597}) (Version: 1.2.0.1 - None) Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-3) (Version: 1.0.65.1 - LunarG, Inc.) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Movie Maker 2.6 (HKLM-x32\...\{B3DAF54F-DB25-4586-9EF1-96D24BB14088}) (Version: 2.6.4037.0 - Microsoft Corporation) WinRAR 5.70 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH) Wondershare Filmora9(Build 9.2.1) (HKLM\...\Wondershare Filmora9_is1) (Version: - Wondershare Software) Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare) XiaoMiFlash (HKLM-x32\...\{17027A8C-4379-424D-9236-075003273CE3}) (Version: 1.1.4 - XiaoMi) Packages: ========= Autodesk SketchBook -> C:\Program Files\WindowsApps\89006A2E.AutodeskSketchBook_5.1.0.0_x64__tf1gferkr813w [2019-11-06] (Autodesk Inc.) Bubble Witch 3 Saga -> C:\Program Files\WindowsApps\king.com.BubbleWitch3Saga_6.8.5.0_x86__kgqvnymyfvs32 [2020-04-11] (king.com) Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-03-07] (Canon Inc.) Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.2.169.0_x64__rz1tebttyb220 [2020-04-17] (Dolby Laboratories) Extensión de vídeo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2019-09-25] (Microsoft Corporation) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-05] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-05] (Microsoft Corporation) [MS Ad] Microsoft News: Noticias destacadas en español -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.5012.0_x64__8wekyb3d8bbwe [2020-05-02] (Microsoft Studios) [MS Ad] MSN El Tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-24] (Microsoft Corporation) [MS Ad] ==================== Personalizado CLSID (Lista blanca): ============== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [6671064 2013-12-19] (Microsoft Corporation -> Microsoft Corporation) ShellExecuteHooks-x32: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [4171480 2013-12-19] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-04-16] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Ningún archivo ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Ningún archivo ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-04-16] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-04-16] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Ningún archivo ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Ningún archivo ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Ningún archivo ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-04-16] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Ningún archivo ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Lista blanca) ==================== ==================== Accesos directos & WMI ======================== (Las entradas pueden ser listadas para ser restauradas o eliminadas.) ShortcutWithArgument: C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ShortcutWithArgument: C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ==================== Módulos cargados (Lista blanca) ============= 2018-11-04 00:39 - 2017-07-05 14:49 - 000593920 _____ ( (CANON INC.) [Archivo no firmado]) [El archivo está en uso] C:\Program Files (x86)\Canon\Quick Menu\CNQMMWRP.dll 2019-02-07 00:25 - 2016-07-21 11:54 - 000137728 _____ () [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll 2019-02-07 00:25 - 2017-09-12 11:34 - 001506304 _____ () [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll 2018-11-04 00:28 - 2016-12-09 12:09 - 000008704 _____ (CANON INC) [Archivo no firmado] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNS2_ESP.DLL 2018-11-04 00:28 - 2016-10-21 17:06 - 000318976 _____ (CANON INC) [Archivo no firmado] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\scchmpm.dll 2018-11-04 00:39 - 2017-07-05 14:43 - 000561152 _____ (CANON INC. ) [Archivo no firmado] C:\Program Files (x86)\Canon\Quick Menu\CCL.dll 2018-11-04 00:28 - 2016-12-01 10:23 - 000219648 _____ (CANON INC.) [Archivo no firmado] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\cnmpu2.dll 2018-11-04 00:28 - 2016-12-09 12:09 - 000104960 _____ (CANON INC.) [Archivo no firmado] C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNS2_IMG.dll 2019-02-07 00:25 - 2017-09-12 11:36 - 000708608 _____ (Wondershare) [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll ==================== Alternate Data Streams (Lista blanca) ======== ==================== Modo Seguro (Lista blanca) ================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Asociación (Lista blanca) ================= ==================== Internet Explorer sitios de confianza/restringidos ========== (Si una entrada es incluida en el fixlist, será eliminada del registro.) IE trusted site: HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\...\localhost -> localhost ==================== Hosts contenido: ========================= (Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.) 2019-09-04 15:39 - 2019-09-04 16:41 - 000001063 _____ C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 platform.wondershare.com 127.0.0.1 cbs.wondershare.com 127.0.0.1 www.cbs.wondershare.com 127.0.0.1 platform.wondershare.com 127.0.0.1 www.wondershare.com ==================== Otras Áreas =========================== (Actualmente no existe una corrección automática para esta sección.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Users\Usuario\AppData\Local\Microsoft\WindowsApps;C:\adb;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\AutoFirma\AutoFirma HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) Firewall de Windows está habilitado. ==================== MSCONFIG/TASK MANAGER elementos deshabilitados == ==================== Reglas de firewall (Lista blanca) ================ (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) FirewallRules: [UDP Query User{E508D45C-1055-4CB7-A6F8-22278BC969D8}C:\program files\autofirma\autofirma\jre\bin\javaw.exe] => (Allow) C:\program files\autofirma\autofirma\jre\bin\javaw.exe FirewallRules: [TCP Query User{BBEB654B-630D-4637-8CD4-0C245F64E34D}C:\program files\autofirma\autofirma\jre\bin\javaw.exe] => (Allow) C:\program files\autofirma\autofirma\jre\bin\javaw.exe FirewallRules: [{602D42DE-E8AD-4F06-A688-03CF80E7ED12}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4424A5A0-E2CF-4719-A3BB-8343BC384534}] => (Allow) LPort=1900 FirewallRules: [{58059F59-9C1F-4B0B-8F9B-C205CDFCFEB3}] => (Allow) LPort=2869 FirewallRules: [{60C5B6B2-7C04-48CB-85FF-4FA8F2EFAA8A}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{3678A1CA-A710-4F37-B16A-C8FED6F930ED}] => (Allow) C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{CF5F8279-CE4D-4B5C-BA4B-8C26C150A981}] => (Allow) C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{D06B8521-41CF-4DFE-9FF8-D39973E58B68}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{E3FB9CED-CCEC-4B0C-9BF0-56E80A247DDC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [TCP Query User{EBCD53F9-5261-482E-875F-C24109EB595A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [UDP Query User{6D052196-0992-41B2-A5E7-3C4CCCCC1B15}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{E94D8B5C-9392-4310-9184-32D78648A643}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [TCP Query User{0C9497D0-FF37-4C7B-AD2B-22E73F14909D}C:\xiaomi\xiaomitool2\bin\javaw.exe] => (Allow) C:\xiaomi\xiaomitool2\bin\javaw.exe FirewallRules: [UDP Query User{AEB983B3-CBC1-4B43-A913-E11796FB6543}C:\xiaomi\xiaomitool2\bin\javaw.exe] => (Allow) C:\xiaomi\xiaomitool2\bin\javaw.exe ==================== Puntos de Restauración ========================= ==================== Dispositivos defectuosos en el Administrador de dispositivos ============ ==================== Errores del registro de eventos: ======================== Errores de aplicación: ================== Error: (05/04/2020 05:00:52 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (2804,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) al abrir un archivo de registro C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (05/04/2020 04:20:15 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Error del Servicio de instantáneas de volumen: error inesperado al llamar a la rutina CoCreateInstance. HR = 0x8007045b, Se está cerrando el sistema. . Error: (05/04/2020 04:20:15 PM) (Source: VSS) (EventID: 13) (User: ) Description: Información del Servicio de instantáneas de volumen: el servidor COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} y el nombre CEventSystem no puede iniciarse. [0x8007045b, Se está cerrando el sistema. ] Error: (05/04/2020 04:14:50 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Error del Servicio de instantáneas de volumen: error inesperado al llamar a la rutina CoCreateInstance. HR = 0x8007045b, Se está cerrando el sistema. . Error: (05/04/2020 04:14:50 PM) (Source: VSS) (EventID: 13) (User: ) Description: Información del Servicio de instantáneas de volumen: el servidor COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} y el nombre CEventSystem no puede iniciarse. [0x8007045b, Se está cerrando el sistema. ] Error: (05/04/2020 11:03:42 AM) (Source: VSS) (EventID: 13) (User: ) Description: Información del Servicio de instantáneas de volumen: el servidor COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} y el nombre CEventSystem no puede iniciarse. [0x8007045b, Se está cerrando el sistema. ] Error: (05/04/2020 11:03:42 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Error del Servicio de instantáneas de volumen: error inesperado al llamar a la rutina CoCreateInstance. HR = 0x8007045b, Se está cerrando el sistema. . Error: (05/04/2020 11:03:42 AM) (Source: VSS) (EventID: 13) (User: ) Description: Información del Servicio de instantáneas de volumen: el servidor COM con CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} y el nombre CEventSystem no puede iniciarse. [0x8007045b, Se está cerrando el sistema. ] Errores del sistema: ============= Error: (05/04/2020 04:51:09 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio DigitalWave.Update.Service no pudo iniciarse debido al siguiente error: El servicio no respondió a tiempo a la solicitud de inicio o de control. Error: (05/04/2020 04:51:09 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Se agotó el tiempo de espera (45000 ms) para la conexión con el servicio DigitalWave.Update.Service. Error: (05/04/2020 04:16:38 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-R5KQ5RB) Description: No se puede iniciar un servidor DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Error "2147942767" al iniciar este comando: C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} Error: (05/04/2020 04:15:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio DigitalWave.Update.Service no pudo iniciarse debido al siguiente error: El servicio no respondió a tiempo a la solicitud de inicio o de control. Error: (05/04/2020 04:15:17 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Se agotó el tiempo de espera (45000 ms) para la conexión con el servicio DigitalWave.Update.Service. Error: (05/04/2020 04:14:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: El servicio Office Software Protection Platform se terminó de manera inesperada. Esto ha sucedido 1 veces. Error: (05/04/2020 04:14:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: El servicio Intel(R) Content Protection HECI Service se terminó de manera inesperada. Esto ha sucedido 1 veces. Error: (05/04/2020 04:14:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: El servicio Intel(R) Dynamic Application Loader Host Interface Service se terminó de manera inesperada. Esto ha sucedido 1 veces. CodeIntegrity: =================================== Date: 2020-05-04 17:02:17.176 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:16.968 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:16.684 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:14.743 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:14.657 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:14.580 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:14.392 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-05-04 17:02:13.302 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. ==================== Información de la memoria =========================== BIOS: American Megatrends Inc. 3805 05/07/2018 Placa base: ASUSTeK COMPUTER INC. H110M-D Procesador: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz Porcentaje de memoria en uso: 43% RAM física total: 8063.39 MB RAM física disponible: 4547.23 MB Virtual total: 9343.39 MB Virtual disponible: 5956.89 MB ==================== Unidades ================================ Drive c: (OS) (Fixed) (Total:231.46 GB) (Free:10.05 GB) NTFS Drive d: (DATA) (Fixed) (Total:931.5 GB) (Free:837.95 GB) NTFS \\?\Volume{f5295816-96eb-4671-964f-91c61913c642}\ (Recuperación) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS \\?\Volume{1d164b53-634a-4ae4-a0e2-059f18920d75}\ () (Fixed) (Total:0.82 GB) (Free:0.38 GB) NTFS \\?\Volume{b95de010-bc35-47e6-ba02-9b998803f129}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Tabla de particiones ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ==================== Final de Addition.txt ======================= ``` ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [4 Mayo, 2020 15:11 UTC](https://forospyware.com/t/pc-muy-lento/16271/6 "2020-05-04T15:11:42Z")
``` Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 03-05-2020 Ejecutado por Usuario (administrador) sobre DESKTOP-R5KQ5RB (04-05-2020 17:03:50) Ejecutado desde C:\Users\Usuario\Desktop Perfiles cargados: Usuario (Perfiles disponibles: Usuario) Platform: Windows 10 Home Versión 1909 18363.778 (X64) Idioma: Español (España, internacional) Navegador predeterminado: Chrome Modo de Inicio: Normal Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Procesos (Lista blanca) ================= (Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.) (Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswEngSrv.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\wsc_proxy.exe (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <10> (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_base.inf_amd64_6facd738cc4484c9\IntelCpHDCPSvc.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_base.inf_amd64_6facd738cc4484c9\IntelCpHeciSvc.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12004.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20022.11011.0_x64__8wekyb3d8bbwe\Music.UI.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe ==================== Registro (Lista blanca) =================== (Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [108216 2020-04-16] (Avast Software s.r.o. -> AVAST Software) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9246656 2018-01-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [279240 2016-12-09] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.) HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646160 2019-12-11] (Oracle America, Inc. -> Oracle Corporation) HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22245560 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.129\Installer\chrmstp.exe [2020-04-30] (Google LLC -> Google LLC) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN ==================== Tareas programadas (Lista blanca) ============ (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) Task: {022D7F17-177F-4DEF-AA16-D5B250D74DAA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-03] (Google Inc -> Google Inc.) Task: {052587E9-8C64-40DC-8C06-A60E483D9ED1} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-04-16] (Adobe Inc. -> Adobe) Task: {0F487785-D580-4235-90E9-CB88621A4BA2} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {2F8D0280-89A0-45B7-8BD9-1E0F7310E6A0} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd) Task: {41F0A2AD-A4CD-4261-AE9C-9162572706AD} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [126152 2020-04-11] (Mozilla Corporation -> Mozilla Foundation) Task: {4BAFA797-2019-42C2-B38C-41E2EB0D5745} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3325032 2020-04-16] (Avast Software s.r.o. -> AVAST Software) Task: {51785AAB-4B28-4BB3-B203-1F13C4A4127D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-03] (Google Inc -> Google Inc.) Task: {5537D055-758D-456B-9323-716726B94E4E} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_363_Plugin.exe [1458232 2020-04-16] (Adobe Inc. -> Adobe) Task: {68247360-F79E-4157-8DF5-E2E1AA99A157} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1242704 2020-02-25] (Adobe Inc. -> Adobe Systems) Task: {901CA7E8-8F4B-47A2-A43C-B6152483CD9C} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [1660520 2020-02-28] (Avast Software s.r.o. -> Avast Software) Task: {A34F3AD3-9D50-4C8A-8520-9F056E26486E} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation) Task: {C89B78E7-7082-48C9-9E89-3CA8C9F43445} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18227896 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd) Task: {F117BB70-5F46-405C-B32A-18316537A9BC} - System32\Tasks\Apagado => C:\Windows\System32\shutdown.exe [26624 2019-03-19] (Microsoft Windows -> Microsoft Corporation) (Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.) Task: C:\WINDOWS\Tasks\{0C2CA41A-106C-41F5-87A3-E38813B781D5}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{127F5D99-ED29-4C56-9A15-DCA7033D62D0}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{12B717D9-715F-45B7-8E86-FDDF5728AC34}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{16C4B103-CB27-4A41-B379-106F255A9866}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{253DD675-4404-4187-853C-E06874F1DF24}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{3975BC3F-3C5E-41DB-9CA6-0C33017294AB}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{4F21E69B-449C-4EE6-B2F1-4C5D35F65F0B}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{51DB94A1-B250-4AAE-8E6C-DF764DE55E38}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{5A2D7436-A2BA-4677-9728-7AABE4203D33}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{5E366953-1E2B-4409-B166-22EDAB71932D}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{6781D297-E9AB-4643-B8D8-55C66088B9C2}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{6984E835-8F23-4DB0-A5DA-B3A092ED107C}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{791BE378-FCF2-4B4D-A2E8-4E83B37AAE63}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{87EC67E3-96E6-4D08-A77D-0F097F47EC37}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{99275FEC-74E3-4B71-83FC-3202E1EFA5F3}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{A4EFE8DA-9592-47CD-B86C-C6A3F2F5FA76}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{ACD2ED97-7CCF-446F-ABCE-223F26671AF7}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{B4C3DB64-EBBC-4AF4-9AC9-197C60247CE1}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{E0077F7C-FADD-4824-B99B-2F0A6A2ED959}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{E510F680-4AF6-40D9-9147-3155A424C0FD}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{EF6BDDD1-0D9E-490A-B181-1DCF8C23220F}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe Task: C:\WINDOWS\Tasks\{F21E0633-0933-4354-BE75-B2173F2997AF}.job => C:\Program Files (x86)\BlazeVideo\Blaze HDTV Player Deluxe 4.0\scheduleCall.exe ==================== Internet (Lista blanca) ==================== (Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.) Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{2d38168b-b9bc-49a2-87d1-34dd816d2709}: [DhcpNameServer] 8.8.8.8 8.8.4.4 Tcpip\..\Interfaces\{4a0c22a6-35b9-4bfe-b8ff-57cdf77d252d}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{ed36effe-380c-431b-a934-47c53560b058}: [DhcpNameServer] 192.168.0.1 Internet Explorer: ================== HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\ssv.dll [2020-01-30] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-01-30] (Oracle America, Inc. -> Oracle Corporation) Edge: ====== DownloadDir: C:\Users\Usuario\Downloads FireFox: ======== FF DefaultProfile: p60qkc1v.default FF ProfilePath: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\p60qkc1v.default [2020-05-04] FF Homepage: Mozilla\Firefox\Profiles\p60qkc1v.default -> www.google.es FF Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\p60qkc1v.default\Extensions\sp@avast.com.xpi [2020-04-30] FF Extension: (Avast Online Security) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\p60qkc1v.default\Extensions\wrc@avast.com.xpi [2020-04-17] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_363.dll [2020-04-16] (Adobe Inc. -> ) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_363.dll [2020-04-16] (Adobe Inc. -> ) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2017-10-17] (CANON INC.) [Archivo no firmado] FF Plugin-x32: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-01-30] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files (x86)\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-01-30] (Oracle America, Inc. -> Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR DefaultProfile: Default CHR Profile: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default [2020-05-04] CHR Notifications: Default -> hxxps://www.facebook.com; hxxps://www.youtube.com CHR Extension: (Presentaciones) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-05-03] CHR Extension: (Documentos) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-05-03] CHR Extension: (Google Drive) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-05-03] CHR Extension: (YouTube) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-05-03] CHR Extension: (uBlock Origin) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-04-24] CHR Extension: (PDF: Merge & Download & View) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\dooiadpbpkhbjlmcfifcmoepkhbjhbde [2020-04-13] CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-03-19] CHR Extension: (Hojas de cálculo) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-05-03] CHR Extension: (Documentos de Google sin conexión) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-20] CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-09-30] CHR Extension: (uBlock Origin Extra) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgdnlhfefecpicbbihgmbmffkjpaplco [2019-09-09] CHR Extension: (Gmail) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29] CHR Extension: (Chrome Media Router) - C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-20] CHR Profile: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\Guest Profile [2020-05-04] CHR Profile: C:\Users\Usuario\AppData\Local\Google\Chrome\User Data\System Profile [2020-05-04] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] ==================== Servicios (Lista blanca) =================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) ``` ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [4 Mayo, 2020 15:12 UTC](https://forospyware.com/t/pc-muy-lento/16271/7 "2020-05-04T15:12:15Z")
``` S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [5504928 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [345384 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R2 AvastWscReporter; C:\Program Files\AVAST Software\Avast\wsc_proxy.exe [58048 2020-04-16] (Avast Software s.r.o. -> AVAST Software) S2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [384512 2016-06-27] (Digital Wave Ltd.) [Archivo no firmado] S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Archivo no firmado] R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [397472 2018-03-15] (Canon Inc. -> ) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\SocketHeciServer.exe [742704 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation) S2 Intel(R) TPM Provisioning Service; C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\TPMProvisioningService.exe [668472 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation) R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [213648 2017-11-09] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6933272 2020-05-04] (Malwarebytes Inc -> Malwarebytes) S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4098056 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [113992 2019-03-19] (Microsoft Corporation -> Microsoft Corporation) ===================== Controladores (Lista blanca) =================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [37856 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [206120 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [234776 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [178968 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [60696 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16304 2020-02-26] (Microsoft Windows Early Launch Anti-malware Publisher -> AVAST Software) R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42984 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [175920 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [500960 2020-04-20] (Avast Software s.r.o. -> AVAST Software) R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [109480 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [85056 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851808 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [459408 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [235696 2020-04-16] (Avast Software s.r.o. -> AVAST Software) R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [317280 2020-04-16] (Avast Software s.r.o. -> AVAST Software) S3 EC168x64; C:\WINDOWS\system32\DRIVERS\EC168x64.sys [170880 2007-10-05] (e3c InC. -> e3C, Inc.) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-05-04] (Malwarebytes Corporation -> Malwarebytes) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [214496 2020-05-04] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2020-05-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [195432 2020-05-04] (Malwarebytes Inc -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-05-04] (Malwarebytes Inc -> Malwarebytes) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [662528 2019-03-19] (Microsoft Windows -> Realtek ) R3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2019-03-19] (Microsoft Windows -> Realtek Semiconductor Corporation ) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46472 2019-03-19] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [333784 2019-03-19] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [62432 2019-03-19] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Lista blanca) =================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) ==================== Un mes (creado) =================== (Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.) 2020-05-04 17:03 - 2020-05-04 17:04 - 000024987 _____ C:\Users\Usuario\Desktop\FRST.txt 2020-05-04 17:03 - 2020-05-04 17:04 - 000000000 ____ D C:\FRST 2020-05-04 17:02 - 2020-05-04 17:02 - 002283520 _____ (Farbar) C:\Users\Usuario\Desktop\FRST64.exe 2020-05-04 16:54 - 2020-05-04 16:54 - 000373427 _____ C:\Users\Usuario\Desktop\PROGRAMACIÓN TERCEIRO..odt 2020-05-04 16:51 - 2020-05-04 16:51 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2020-05-04 16:51 - 2020-05-04 16:51 - 000214496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2020-05-04 16:51 - 2020-05-04 16:51 - 000195432 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2020-05-04 16:11 - 2020-05-04 16:11 - 000001546 _____ C:\Users\Usuario\Desktop\malware.txt 2020-05-04 16:06 - 2020-05-04 16:14 - 000000000 ____ D C:\AdwCleaner 2020-05-04 16:05 - 2020-05-04 16:06 - 022267336 _____ (Piriform Software Ltd) C:\Users\Usuario\Downloads\ccsetup565(1).exe 2020-05-04 16:04 - 2020-05-04 16:05 - 008196784 _____ (Malwarebytes) C:\Users\Usuario\Desktop\adwcleaner_8.0.4.exe 2020-05-04 16:04 - 2020-05-04 16:04 - 001980016 _____ (Malwarebytes) C:\Users\Usuario\Downloads\MBSetup.exe 2020-05-03 14:05 - 2020-05-03 14:07 - 000000000 ____ D C:\Users\Usuario\Downloads\HA-ASH - 30 DE FEBRERO (2017)(DJ ROBERT) 2020-05-03 14:05 - 2020-05-03 14:05 - 040487910 _____ C:\Users\Usuario\Downloads\HA-ASH - 30 DE FEBRERO (2017)(DJ ROBERT).rar 2020-05-02 22:16 - 2020-05-04 16:07 - 000002035 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2020-05-01 21:14 - 2020-05-01 21:14 - 000000000 ____ D C:\WINDOWS\Panther 2020-05-01 17:21 - 2020-05-01 17:21 - 000000549 _____ C:\Users\Usuario\Desktop\XiaoMiTool V2.lnk 2020-05-01 17:21 - 2020-05-01 17:21 - 000000000 ____ D C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\XiaoMiTool V2 2020-05-01 17:17 - 2020-05-01 17:20 - 093937864 _____ C:\Users\Usuario\Downloads\XMT2_Windows_Setup_9.11.10.exe 2020-05-01 16:48 - 2020-05-01 17:14 - 000000000 ____ D C:\ADB 2020-05-01 16:43 - 2020-05-01 16:43 - 000000000 ____ D C:\Program Files (x86)\ClockworkMod 2020-05-01 16:42 - 2020-05-01 16:43 - 017060864 _____ C:\Users\Usuario\Downloads\UniversalAdbDriverSetup.msi 2020-05-01 16:27 - 2020-05-01 16:27 - 007906937 _____ C:\Users\Usuario\Downloads\-qNuI3A5RxFwGuU_.mp4 2020-05-01 14:18 - 2020-05-02 23:20 - 000000000 ____ D C:\Users\Usuario\Desktop\ROM XIAOMI 2020-04-28 13:27 - 2020-04-28 13:27 - 000015178 _____ C:\Users\Usuario\Downloads\AUD-20200428-WA0005.opus 2020-04-28 13:25 - 2020-04-28 13:25 - 000099657 _____ C:\Users\Usuario\Downloads\PTT-20200427-WA0047.opus 2020-04-27 19:33 - 2020-04-27 19:33 - 004993162 _____ C:\Users\Usuario\Downloads\Charcoal Polaroid Modern Scrapbook General Greeting Birthday Instagram Story.mp4 2020-04-27 18:45 - 2020-04-27 18:45 - 004509345 _____ C:\Users\Usuario\Downloads\Publicación de Instagram Sencillo Mes de Grandes Espacios Abiertos en Azul (1).mp4 2020-04-27 18:37 - 2020-04-27 18:37 - 004411012 _____ C:\Users\Usuario\Downloads\Publicación de Instagram Sencillo Mes de Grandes Espacios Abiertos en Azul.mp4 2020-04-27 18:27 - 2020-04-27 18:28 - 025790695 _____ C:\Users\Usuario\Desktop\Mi video.mp4 2020-04-27 18:13 - 2020-04-27 18:14 - 019075785 _____ C:\Users\Usuario\Documents\VideoClip_Lucía_Pérez_-_Te00rra_V.3.MP4.mp4 2020-04-27 12:06 - 2020-04-27 12:06 - 000073860 _____ C:\Users\Usuario\Desktop\SPEE.COMZ.90127780.101587608.0000001587866021888.152.PR8_ARGOS.pdf 2020-04-27 12:05 - 2020-04-27 12:05 - 000092207 _____ C:\Users\Usuario\Desktop\1587981923587.pdf 2020-04-24 17:51 - 2020-04-24 17:51 - 001661157 _____ C:\Users\Usuario\Downloads\Portada de Facebook Elegante Belleza de Mujer Melocotón y Gris Oscuro.pdf 2020-04-24 13:31 - 2020-04-24 13:31 - 000150923 _____ C:\Users\Usuario\Downloads\Instagram Live (3).mp4 2020-04-24 13:25 - 2020-04-24 13:25 - 000130341 _____ C:\Users\Usuario\Downloads\Instagram Live (2).mp4 2020-04-24 13:18 - 2020-04-24 13:18 - 000132554 _____ C:\Users\Usuario\Downloads\Instagram Live (1).mp4 2020-04-24 13:05 - 2020-04-24 13:05 - 000123470 _____ C:\Users\Usuario\Downloads\Instagram Live.mp4 2020-04-23 14:37 - 2020-04-23 14:37 - 004521607 _____ C:\Users\Usuario\Downloads\Jaime & Carla.mp4 2020-04-23 14:23 - 2020-04-23 14:24 - 012439090 _____ C:\Users\Usuario\Documents\INSTA.mp4 2020-04-22 15:34 - 2020-04-22 15:34 - 003698222 _____ C:\Users\Usuario\Downloads\dia internacional da terra.mp4 2020-04-22 13:49 - 2020-04-22 13:49 - 005283242 _____ C:\Users\Usuario\Downloads\Lucía Pérez.mp4 2020-04-21 00:23 - 2020-04-21 00:24 - 022267336 _____ (Piriform Software Ltd) C:\Users\Usuario\Downloads\ccsetup565.exe 2020-04-20 19:52 - 2020-04-20 19:52 - 002844387 _____ C:\Users\Usuario\Downloads\download (1).pdf 2020-04-17 23:42 - 2020-04-17 23:58 - 000000356 _____ C:\WINDOWS\Tasks\{99275FEC-74E3-4B71-83FC-3202E1EFA5F3}.job 2020-04-17 21:46 - 2020-04-17 22:02 - 000000356 _____ C:\WINDOWS\Tasks\{6984E835-8F23-4DB0-A5DA-B3A092ED107C}.job 2020-04-16 15:12 - 2020-04-16 15:12 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbadmin.exe 2020-04-16 15:12 - 2020-04-16 15:12 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.XamlHost.dll 2020-04-16 15:12 - 2020-04-16 15:12 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.XamlHost.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 025444352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Hydrogen.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 022636544 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 019850240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 019812864 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramWorld.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 018027520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 017790464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 014818816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 009930552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 008013824 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 007849216 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 007756800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 007604584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 007017472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 006523048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 006168064 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 005910016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 005040640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 004611584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 004563200 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppsvc.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 004538880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 004129624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003802624 _____ (Microsoft Corporation) C:\WINDOWS\system32\diagtrack.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003753472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003742544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003729408 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 003708928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003587384 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 003547648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003512320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 003109376 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002986808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 002951832 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002871608 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 002800640 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSAT.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 002800128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 002767928 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002717184 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 002494744 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002453504 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallService.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002180408 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002131456 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcDesktopMonSvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002126144 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002114560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.CloudStore.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 002086656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001999960 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001960448 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001945600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001942528 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001918976 _____ (Microsoft Corporation) C:\WINDOWS\system32\wevtsvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001870408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001835008 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001783296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Input.Inking.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001764336 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowsCodecs.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001762816 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001757096 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2020-04-16 15:11 - 2020-04-16 15:11 - 001729024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallService.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001726264 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001719808 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001697792 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001665216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001664896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001656904 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001646048 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001612800 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001610240 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001603584 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001587712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001545216 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001512832 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001497600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001484384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WindowsCodecs.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001480192 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocoreworker.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001477112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001458688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001427456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.Vpn.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001413840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001413704 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001397576 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001378528 _____ (Microsoft Corporation) C:\WINDOWS\system32\webservices.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001368576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpnapps.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001310720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjet40.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001300280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 001264640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001263856 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001261808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001257472 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcss.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001245184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001243648 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSWorkspace.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001180672 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Security.Authentication.Web.Core.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001153024 _____ (Microsoft Corporation) C:\WINDOWS\system32\windowsperformancerecordercontrol.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001151816 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001136128 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001127424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcRefreshTask.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001083904 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001081856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.Vpn.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001077064 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 001071616 _____ (Microsoft Corporation) C:\WINDOWS\system32\BTAGService.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001013000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001011200 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001009152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wpnapps.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 001008128 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000993280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSWorkspace.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000983040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000982840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winhttp.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webservices.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000974336 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000924672 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Management.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000915192 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000912896 _____ (Microsoft Corporation) C:\WINDOWS\system32\rasmans.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000893952 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000892416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000879616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Service.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000874296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000868864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windowsperformancerecordercontrol.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000865280 _____ (Microsoft Corporation) C:\WINDOWS\system32\netlogon.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000840704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Language.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000836608 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000835584 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000822208 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000811320 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000785920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000783480 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcblaunch.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000775696 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000768528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winhttp.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000759272 _____ (Microsoft Corporation) C:\WINDOWS\system32\taskschd.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000747320 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000735744 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FlightSettings.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000722072 _____ (Microsoft Corporation) C:\WINDOWS\system32\kernel32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Mirage.Internal.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000701440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BTAGService.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CPFilters.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000686080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000684560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000673704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000673464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000668672 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netlogon.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000654912 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000647680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Management.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000638480 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000637240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storport.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000632832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000629760 _____ (Microsoft Corporation) C:\WINDOWS\system32\ipnathlp.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000628616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kernel32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000618296 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000605184 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000604984 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000589384 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000561464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000555008 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2020-04-16 15:11 - 2020-04-16 15:11 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000538160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000532480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000530432 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcext.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\nltest.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000525312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000524264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Enumeration.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000516096 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000515600 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000513576 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000510792 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64win.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000507152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\taskschd.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000498688 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntshrui.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000491008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppcext.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000487784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000477496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS 2020-04-16 15:11 - 2020-04-16 15:11 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000465208 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000459688 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000456504 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rdbss.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000456192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2020-04-16 15:11 - 2020-04-16 15:11 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpclip.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000444416 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000441144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000437560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000420152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSAudDecMFT.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000416016 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000415760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000410112 _____ (Microsoft Corporation) C:\WINDOWS\system32\rascustom.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000406480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Enumeration.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000401408 _____ (Microsoft Corporation) C:\WINDOWS\system32\es.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000381440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntshrui.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000380416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000374784 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncbservice.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000355840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicSvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000355328 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcApi.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000353792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrd3x40.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000343552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpr.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000341504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000339304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000336384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\es.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000330240 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000324408 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppcommdlg.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000297272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicCapsule.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000278016 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcTok.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000277864 _____ (Microsoft Corporation) C:\WINDOWS\system32\LsaIso.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000277504 _____ (Microsoft Corporation) C:\WINDOWS\system32\scecli.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3svc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000268008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000265216 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdd.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000259776 _____ (Microsoft Corporation) C:\WINDOWS\system32\logoncli.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\VPNv2CSP.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateDeploymentProvider.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000251704 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000251392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\winnat.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msltus40.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000241152 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasrad.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallServiceTasks.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000231912 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000225792 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000214528 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumsvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000214016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scecli.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000211256 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcbloader.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000203264 _____ (Microsoft Corporation) C:\WINDOWS\system32\LanguageComponentsInstaller.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000197632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Win32CompatibilityAppraiserCSP.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000193848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000190048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\logoncli.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000187392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasrad.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000185952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallServiceTasks.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000179712 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000178192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\partmgr.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000178176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumsvc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000169472 _____ (Microsoft Corporation) C:\WINDOWS\system32\SpatialAudioLicenseSrv.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000164368 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000163840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000158720 _____ (Microsoft Corporation) C:\WINDOWS\system32\umpo.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000155136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000152408 _____ (Microsoft Corporation) C:\WINDOWS\system32\KerbClientShared.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000151352 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\scmbus.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000147696 _____ (Microsoft Corporation) C:\WINDOWS\system32\smss.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000142544 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicensingUI.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\slc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000139776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakrathunk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000138752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000136192 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000130560 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000129024 _____ (Microsoft Corporation) C:\WINDOWS\system32\UtcDecoderHost.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000127280 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32u.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000125952 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000123952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KerbClientShared.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\samlib.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000115120 _____ (Microsoft Corporation) C:\WINDOWS\system32\phoneactivate.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000108032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000105984 _____ (Microsoft Corporation) C:\WINDOWS\system32\utcutil.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakrathunk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFolders.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3msm.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000102216 _____ (Microsoft Corporation) C:\WINDOWS\system32\changepk.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sppc.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000099328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000093712 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dot3api.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000090624 _____ (Microsoft Corporation) C:\WINDOWS\system32\tsgqec.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000089912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000089336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32u.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicAgent.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000088352 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3api.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dot3msm.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasacct.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000084280 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hvservice.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\autopilot.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000071680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000071480 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.EnrollmentStatusTracking.ConfigProvider.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\keepaliveprovider.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000070144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tsgqec.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000066624 _____ (Microsoft Corporation) C:\WINDOWS\system32\iumcrypt.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasacct.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcadm.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\tbauth.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\srumapi.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf3216.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudNotifications.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000059192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000058880 _____ C:\WINDOWS\system32\runexehelper.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000057856 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\audioresourceregistrar.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000050688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\srumapi.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000050544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudNotifications.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\iaspolcy.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tbauth.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000047000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf3216.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\cmintegrator.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.Common.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiredNetworkCSP.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpgradeResultsUI.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iaspolcy.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcProxyStubs.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerCookies.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000036152 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\sxssrv.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000033080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hwpolicy.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wksprtPS.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000031744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ias.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\KNetPwrDepBroker.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cmintegrator.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerCookies.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WaaSMedicPS.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\flpydisk.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimsg.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000026112 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimsg.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ias.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Custom.ps.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\slcext.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\system32\sbservicetrigger.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000021520 _____ (Microsoft Corporation) C:\WINDOWS\system32\kdhvcom.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000019968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\slcext.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sfloppy.sys 2020-04-16 15:11 - 2020-04-16 15:11 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wksprtPS.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\system32\icsunattend.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000015872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Custom.ps.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcaevts.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000012288 _____ (Microsoft Corporation) C:\WINDOWS\system32\pacjsworker.exe 2020-04-16 15:11 - 2020-04-16 15:11 - 000011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000010752 _____ (Microsoft Corporation) C:\WINDOWS\system32\DMAlertListener.ProxyStub.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msimg32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DMAlertListener.ProxyStub.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msimg32.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth9.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth8.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth7.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth6.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth5.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth4.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth3.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth2.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth12.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth11.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth10.bin 2020-04-16 15:11 - 2020-04-16 15:11 - 000000315 _____ C:\WINDOWS\system32\DrtmAuth1.bin 2020-04-16 15:06 - 2020-03-17 05:57 - 000390656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2020-04-16 15:06 - 2020-03-17 05:56 - 000492544 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2020-04-16 12:45 - 2020-04-20 16:45 - 000500960 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys 2020-04-16 12:45 - 2020-04-16 12:45 - 000337048 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2020-04-16 12:45 - 2020-04-16 12:45 - 000235696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2020-04-16 12:45 - 2020-04-16 12:45 - 000175920 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2020-04-13 18:31 - 2020-04-13 18:31 - 000767481 _____ C:\Users\Usuario\Documents\IMG_20200413_0001.pdf 2020-04-13 18:31 - 2020-04-13 18:31 - 000760786 _____ C:\Users\Usuario\Documents\IMG_20200413_0001_NEW.pdf 2020-04-13 18:25 - 2020-04-13 18:25 - 000090300 _____ C:\Users\Usuario\Downloads\Siniestro seguro de pagos protegidos Juan Ramón Vazquez Blanco.pdf 2020-04-13 18:19 - 2020-04-13 18:19 - 000848915 _____C:\Users\Usuario\Downloads\MERGED__ 5_FILES__13-4-2020-18-19-08.pdf 2020-04-13 17:36 - 2020-04-13 17:36 - 000440682 _____ C:\Users\Usuario\Downloads\Matemáticas primera semana tercer trimestre 3º A y B.pdf 2020-04-13 11:27 - 2020-04-13 18:51 - 000000000 ____ D C:\Users\Usuario\Desktop\Tarea 4 2020-04-12 23:36 - 2020-04-12 23:44 - 278585384 _____ C:\Users\Usuario\Documents\🔴 DIRECTO ／ LIVE · PrePartyES at Home · Eurovision 2020 - YouTube - Mozilla Firefox.mp4 2020-04-12 15:52 - 2020-04-12 16:12 - 1836058628 _____ C:\Users\Usuario\Documents\Veneno - Temporada 1 - Capítulo 1： La noche que cruzamos el Mississippi - Mozilla Firefox.mpg 2020-04-12 14:27 - 2020-04-12 14:27 - 000000000 ____ D C:\WINDOWS\system32\Tasks\Mozilla 2020-04-11 21:57 - 2020-04-13 03:38 - 000000000 ____ D C:\Program Files\Mozilla Firefox 2020-04-06 14:59 - 2020-04-06 15:41 - 2452711263 _____ C:\Users\Usuario\Downloads\miui_CEPHEUSEEAGlobal_V11.0.8.0.QFAEUXM_39255ef3ce_10.0.zip 2020-04-06 14:31 - 2020-04-06 14:31 - 000000000 ____ D C:\Users\Usuario\Downloads\miflash_unlock-en-3.5.1108.44 2020-04-06 14:25 - 2020-04-06 14:25 - 000000000 ____ D C:\Users\Usuario\Downloads\miflash_unlock.res 2020-04-06 14:25 - 2020-04-06 14:25 - 000000000 ____ D C:\Users\Usuario\Downloads\locales 2020-04-06 14:25 - 2020-04-06 14:25 - 000000000 ____ D C:\Users\Usuario\Downloads\driver 2020-04-06 14:25 - 2020-04-06 14:25 - 000000000 ____ D C:\Users\Usuario\AppData\Roaming\Xiaomi 2020-04-06 14:25 - 2019-11-08 15:52 - 008933304 ____ N C:\Users\Usuario\Downloads\pdf.dll 2020-04-06 14:25 - 2019-11-08 15:52 - 000676792 ____ N C:\Users\Usuario\Downloads\sqlite3.dll 2020-04-06 14:25 - 2019-11-08 15:52 - 000355256 ____ N (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Usuario\Downloads\ssleay32.dll 2020-04-06 14:25 - 2019-11-08 15:52 - 000250808 ____ N C:\Users\Usuario\Downloads\zlib1.dll 2020-04-06 14:25 - 2019-11-08 15:52 - 000106936 ____ N C:\Users\Usuario\Downloads\VMProtectSDK32.dll 2020-04-06 14:25 - 2019-11-08 15:51 - 001271224 ____ N (Xiaomi.Inc) C:\Users\Usuario\Downloads\miflash_unlock.exe 2020-04-06 14:25 - 2019-11-08 15:51 - 000898488 ____ N (Xiaomi.Inc) C:\Users\Usuario\Downloads\MiUsbDriver.exe 2020-04-06 14:24 - 2019-11-08 15:51 - 039122360 ____ N C:\Users\Usuario\Downloads\libcef.dll 2020-04-06 14:24 - 2019-11-08 15:51 - 007221120 ____ N C:\Users\Usuario\Downloads\fastboot.exe 2020-04-06 14:24 - 2019-11-08 15:51 - 001403320 ____ N (The OpenSSL Project, hxxp://www.openssl.org/) C:\Users\Usuario\Downloads\libeay32.dll 2020-04-06 14:24 - 2019-11-08 15:51 - 001384888 ____ N C:\Users\Usuario\Downloads\libGLESv2.dll 2020-04-06 14:24 - 2019-11-08 15:51 - 000481208 ____ N (The cURL library, hxxp://curl.haxx.se/) C:\Users\Usuario\Downloads\libcurl.dll 2020-04-06 14:24 - 2019-11-08 15:51 - 000259512 ____ N C:\Users\Usuario\Downloads\driver_install_64.exe 2020-04-06 14:24 - 2019-11-08 15:51 - 000213944 ____ N C:\Users\Usuario\Downloads\driver_install.exe 2020-04-06 14:24 - 2019-11-08 15:51 - 000182200 ____ N C:\Users\Usuario\Downloads\libEGL.dll 2020-04-06 14:24 - 2019-11-08 15:51 - 000143288 ____ N C:\Users\Usuario\Downloads\AdbWinApi.dll 2020-04-06 14:24 - 2019-10-28 16:18 - 009980368 ____ N C:\Users\Usuario\Downloads\icudtl.dat 2020-04-06 14:24 - 2019-10-28 16:18 - 001187283 ____ N C:\Users\Usuario\Downloads\cef.pak 2020-04-06 14:24 - 2019-10-28 16:18 - 000314367 ____ N C:\Users\Usuario\Downloads\cef_100_percent.pak 2020-04-06 14:24 - 2019-10-28 16:15 - 000001356 ____ N C:\Users\Usuario\Downloads\duilib license.txt 2020-04-06 14:03 - 2020-04-06 14:24 - 050418729 _____ C:\Users\Usuario\Downloads\miflash_unlock-en-3.5.1108.44.zip 2020-04-06 12:01 - 2020-04-06 12:01 - 000139052 _____ C:\Users\Usuario\Downloads\Informe de Vida Laboral.pdf ==================== Un mes (modificado) ================== (Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.) ``` ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [4 Mayo, 2020 15:12 UTC](https://forospyware.com/t/pc-muy-lento/16271/8 "2020-05-04T15:12:42Z")
``` 2020-05-04 17:00 - 2019-03-19 06:52 - 000000000 ____ D C:\ProgramData\regid.1991-06.com.microsoft 2020-05-04 16:56 - 2020-03-22 03:46 - 001773366 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2020-05-04 16:56 - 2019-03-19 13:59 - 000788560 _____ C:\WINDOWS\system32\perfh00A.dat 2020-05-04 16:56 - 2019-03-19 13:59 - 000155850 _____ C:\WINDOWS\system32\perfc00A.dat 2020-05-04 16:55 - 2019-03-19 06:50 - 000000000 ____ D C:\WINDOWS\INF 2020-05-04 16:52 - 2019-01-01 21:42 - 000000000 ____ D C:\Users\Usuario\AppData\Local\AVAST Software 2020-05-04 16:51 - 2020-03-22 03:45 - 000000006 ____ H C:\WINDOWS\Tasks\SA.DAT 2020-05-04 16:20 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2020-05-04 16:20 - 2018-08-21 18:13 - 000000000 ____ D C:\Users\Usuario\AppData\LocalLow\Mozilla 2020-05-04 16:14 - 2018-09-04 16:07 - 000000000 ____ D C:\Users\Usuario\AppData\Roaming\Lavasoft 2020-05-04 16:14 - 2018-09-04 16:07 - 000000000 ____ D C:\Users\Usuario\AppData\Local\Lavasoft 2020-05-04 16:14 - 2018-09-04 16:07 - 000000000 ____ D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft 2020-05-04 16:14 - 2018-09-04 16:07 - 000000000 ____ D C:\ProgramData\Lavasoft 2020-05-04 16:14 - 2018-09-04 16:07 - 000000000 ____ D C:\Program Files (x86)\Lavasoft 2020-05-04 16:07 - 2020-03-22 03:45 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2020-05-04 16:07 - 2019-03-21 23:13 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2020-05-04 16:07 - 2019-03-21 23:13 - 000020936 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2020-05-04 16:07 - 2019-03-21 23:13 - 000002023 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2020-05-04 16:07 - 2019-03-21 23:13 - 000002023 _____ C:\ProgramData\Desktop\Malwarebytes.lnk 2020-05-04 16:07 - 2019-01-03 12:47 - 000000865 _____ C:\Users\Public\Desktop\CCleaner.lnk 2020-05-04 16:07 - 2019-01-03 12:47 - 000000865 _____ C:\ProgramData\Desktop\CCleaner.lnk 2020-05-04 16:03 - 2019-01-01 21:38 - 000000000 ____ D C:\ProgramData\AVAST Software 2020-05-03 14:32 - 2020-03-22 03:39 - 000000000 ____ D C:\WINDOWS\system32\SleepStudy 2020-05-02 20:04 - 2020-03-22 03:45 - 000003782 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier 2020-05-02 20:04 - 2020-03-22 03:45 - 000003550 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA 2020-05-02 20:04 - 2020-03-22 03:45 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2020-05-02 20:04 - 2020-03-22 03:45 - 000003454 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater 2020-05-02 20:04 - 2020-03-22 03:45 - 000003326 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore 2020-05-02 20:04 - 2020-03-22 03:45 - 000003180 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification 2020-05-02 20:04 - 2020-03-22 03:45 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2191999910-1078877841-1369218771-1001 2020-05-02 20:04 - 2020-03-22 03:45 - 000002408 _____ C:\WINDOWS\system32\Tasks\Apagado 2020-05-02 20:04 - 2020-03-22 03:45 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC 2020-05-02 20:04 - 2020-03-22 03:45 - 000000000 ____ D C:\WINDOWS\system32\Tasks\Avast Software 2020-05-02 18:38 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps 2020-05-02 18:38 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\AppReadiness 2020-05-02 12:43 - 2018-11-03 23:05 - 000000000 ____ D C:\ProgramData\CanonIJPLM 2020-05-01 22:15 - 2019-01-02 00:15 - 000000000 ____ D C:\Users\Usuario\AppData\Local\CrashDumps 2020-05-01 17:27 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\LiveKernelReports 2020-05-01 17:21 - 2018-09-14 13:36 - 000000000 ____ D C:\XiaoMi 2020-05-01 16:44 - 2018-09-14 13:36 - 000000000 ____ D C:\Users\Usuario\.android 2020-04-30 10:46 - 2018-05-03 16:37 - 000002331 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2020-04-28 13:35 - 2019-02-07 00:25 - 000000000 ____ D C:\ProgramData\Wondershare Filmora 2020-04-27 19:36 - 2019-02-07 00:25 - 000000000 ____ D C:\Users\Usuario\Documents\Wondershare Filmora 9 2020-04-20 12:21 - 2019-09-04 17:24 - 000002581 _____ C:\Users\Usuario\AppData\Roaming\downloads.json 2020-04-17 12:26 - 2020-03-22 03:40 - 000002409 _____ C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2020-04-17 12:26 - 2018-05-03 16:33 - 000000000 ___RD C:\Users\Usuario\OneDrive 2020-04-17 12:12 - 2020-03-22 03:39 - 000446648 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2020-04-16 15:16 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\SystemResources 2020-04-16 15:16 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\system32\PerceptionSimulation 2020-04-16 15:16 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\system32\migwiz 2020-04-16 15:16 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\ShellExperiences 2020-04-16 15:16 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\Provisioning 2020-04-16 15:16 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\bcastdvr 2020-04-16 15:13 - 2019-03-19 06:37 - 000000000 ____ D C:\WINDOWS\servicing 2020-04-16 15:13 - 2019-03-19 06:37 - 000000000 ____ D C:\WINDOWS\CbsTemp 2020-04-16 12:47 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\SysWOW64\Macromed 2020-04-16 12:47 - 2019-03-19 06:52 - 000000000 ____ D C:\WINDOWS\system32\Macromed 2020-04-16 12:46 - 2019-01-01 21:40 - 000459408 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2020-04-16 12:45 - 2020-03-22 03:45 - 000003990 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update 2020-04-16 12:45 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2020-04-16 12:45 - 2019-01-15 13:28 - 000234776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys 2020-04-16 12:45 - 2019-01-06 00:50 - 000178968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys 2020-04-16 12:45 - 2019-01-06 00:50 - 000060696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys 2020-04-16 12:45 - 2019-01-06 00:50 - 000037856 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys 2020-04-16 12:45 - 2019-01-01 21:40 - 000851808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2020-04-16 12:45 - 2019-01-01 21:40 - 000317280 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2020-04-16 12:45 - 2019-01-01 21:40 - 000206120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys 2020-04-16 12:45 - 2019-01-01 21:40 - 000109480 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2020-04-16 12:45 - 2019-01-01 21:40 - 000085056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2020-04-16 12:45 - 2019-01-01 21:40 - 000042984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys 2020-04-13 11:26 - 2019-09-04 19:19 - 000000000 ____ D C:\Users\Usuario\Desktop\3ºB 2020-04-13 11:26 - 2018-09-16 23:31 - 000000000 ____ D C:\Users\Usuario\Desktop\JOSE 2020-04-13 03:38 - 2018-08-21 18:13 - 000000000 ____ D C:\Program Files (x86)\Mozilla Maintenance Service 2020-04-12 14:27 - 2018-08-21 18:13 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2020-04-04 20:25 - 2020-03-22 03:39 - 000000000 ____ D C:\Windows.old ==================== Archivos en la raíz de algunos directorios ======== 2019-09-04 17:24 - 2020-04-20 12:21 - 000002581 _____ () C:\Users\Usuario\AppData\Roaming\downloads.json ==================== SigCheck ============================ (No existe una corrección automática para los archivos que no pasan la verificación.) ==================== Final de FRST.txt ======================== ``` ---
**Author:** ![Miguelgrado](https://forospyware.com/letter_avatar/miguelgrado/32/6_22734026db12803ebb3e059622ac3534.png) [@Miguelgrado](https://forospyware.com/u/Miguelgrado)\ **Post date:** [5 Mayo, 2020 09:52 UTC](https://forospyware.com/t/pc-muy-lento/16271/9 "2020-05-05T09:52:21Z")
> [@Juanra\_Vazquez](#): > > Drive c: (OS) (Fixed) (Total:231.46 GB) (Free:10.05 GB) NTFS Mientras termino de revisar,ya veo quizas el porque tu pc vaya mal…tu disco C esta con muy poco espacio ya,Pra que el sistema funcione bien, al menos un 15% libre Realizas boton derecho sobre unidad C -herramientas .liberar espacio y libera lo que puedas. Luego vuelves al mismo sitio, pulsas en archivos del sistema y librera lo que puedas ,en especial lo que ponga “actualizaciones obsoletas del sistema o similar” y la carpeta Windows old que es la que queda del anterior sistema,si no la necesitas, deberias limpiarla pues ocupa muchisimo > **[Borrar Windows.old en Windows 10](https://www.aboutespanol.com/borrar-windows-old-en-windows-10-3507813)** > > Cómo borrar Windows.old en Windows 10 para liberar espacio en el disco duro. Usar esa carpeta especial para recuperar antes tus archivos con ella. Tambien si tienes archivos pesados como Videos etc,debrias sacarlos a algun disco externo Me dices cuanto espacio has recuperado ---
**Author:** ![Miguelgrado](https://forospyware.com/letter_avatar/miguelgrado/32/6_22734026db12803ebb3e059622ac3534.png) [@Miguelgrado](https://forospyware.com/u/Miguelgrado)\ **Post date:** [5 Mayo, 2020 09:56 UTC](https://forospyware.com/t/pc-muy-lento/16271/10 "2020-05-05T09:56:16Z")
Bien… y ahora sigue estos pasos, MUY Importante ~ Realiza una copia de seguridad del registro : - Para hacerlo descarga **[Delfix](https://www.infospyware.com/utiles/delfix/)** en tu escritorio. - Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona "Ejecutar como Administrador.") - Atención, ahora marca/selecciona únicamente las casillas Registry Backup, las demás NO - Pulsar en Run. Se abrirá el informe (Delfix.txt), guárdalo por si fuera necesario y cierra la herramienta. En el equipo con los demas programas cerrados: Inicio \>\>\> Ejecutar \>\>\>Escribes notepad.exe. Ahora copia y pega estos archivos dentro del Notepad: ```auto Start CreateRestorePoint: CloseProcesses: ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Ningún archivo ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Ningún archivo ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Ningún archivo ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Ningún archivo ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Ningún archivo ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Ningún archivo ShortcutWithArgument: C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ShortcutWithArgument: C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN 2020-04-17 23:42 - 2020-04-17 23:58 - 000000356 _____ C:\WINDOWS\Tasks\{99275FEC-74E3-4B71-83FC-3202E1EFA5F3}.job 2020-04-17 21:46 - 2020-04-17 22:02 - 000000356 _____ C:\WINDOWS\Tasks\{6984E835-8F23-4DB0-A5DA-B3A092ED107C}.job HOSTS: REMOVEPROXY: EMPTYTEMP: CMD: netsh winsock reset CMD: ipconfig /renew CMD: ipconfig /flushdns CMD: bitsadmin /reset /allusers CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset END ``` Lo guardas bajo el nombre de fixlist.txt en el escritorio \<\<\< Esto es muy importante.\<\< Nota: Es importante que la Hta Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no no trabajara. - Y ahora usa esta Faq de Windows [¿Cómo iniciar Windows en Modo Seguro (Aplicable a Windows 10)?](https://forospyware.com/t/como-iniciar-windows-8-8-1-en-modo-seguro/1381), para trabajar desde ese modo de windows. (Usa el **Metodo 1** y si no puedes, usa el **Metodo 2** ) - Ejecutas Frst.exe. - Presionas el botón Corregir y aguardas a que termine. - La Herramienta guardara el reporte en tu escritorio (Fixlog.txt). > [@](#): > > ATENCION!!! El siguiente Script de reparación fue hecho específicamente por un miembro del staff para este usuario, si tiene un problema similar por favor abra su propio tema para recibir ayuda personalizada. Usar Scripts de otros usuarios puede causar daños a su equipo Lo pegas en tu próxima respuesta, comentado como va el problema ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [5 Mayo, 2020 10:35 UTC](https://forospyware.com/t/pc-muy-lento/16271/11 "2020-05-05T10:35:59Z")
``` Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 03-05-2020 Ejecutado por Usuario (05-05-2020 12:33:42) Run:1 Ejecutado desde C:\Users\Usuario\Desktop Perfiles cargados: Usuario (Perfiles disponibles: Usuario) Modo de Inicio: Safe Mode (with Networking) ============================================== fixlist contenido: ***************** Start CreateRestorePoint: CloseProcesses: ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Ningún archivo ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Ningún archivo ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Ningún archivo ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Ningún archivo ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Ningún archivo ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Ningún archivo ShortcutWithArgument: C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ShortcutWithArgument: C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --disable-quic FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN 2020-04-17 23:42 - 2020-04-17 23:58 - 000000356 _____ C:\WINDOWS\Tasks\{99275FEC-74E3-4B71-83FC-3202E1EFA5F3}.job 2020-04-17 21:46 - 2020-04-17 22:02 - 000000356 _____ C:\WINDOWS\Tasks\{6984E835-8F23-4DB0-A5DA-B3A092ED107C}.job HOSTS: REMOVEPROXY: EMPTYTEMP: CMD: netsh winsock reset CMD: ipconfig /renew CMD: ipconfig /flushdns CMD: bitsadmin /reset /allusers CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset END ***************** Error: El punto de restauración solamente puede ser creado en modo normal. Procesos cerrados correctamente. HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\7-Zip => eliminado correctamente HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => eliminado correctamente HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\BriefcaseMenu => eliminado correctamente "HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => eliminado correctamente HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers\{4A7C4306-57E0-4C0C-83A9-78C1528F618C} => eliminado correctamente HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\7-Zip => eliminado correctamente HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\Offline Files => eliminado correctamente HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => eliminado correctamente HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Offline Files => eliminado correctamente C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk => Acceso directo argumento eliminado correctamente C:\Users\Usuario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk => Acceso directo argumento eliminado correctamente C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk => Acceso directo argumento eliminado correctamente HKLM\SOFTWARE\Policies\Mozilla => eliminado correctamente HKLM\SOFTWARE\Policies\Google => eliminado correctamente C:\WINDOWS\Tasks\{99275FEC-74E3-4B71-83FC-3202E1EFA5F3}.job => movido correctamente C:\WINDOWS\Tasks\{6984E835-8F23-4DB0-A5DA-B3A092ED107C}.job => movido correctamente C:\Windows\System32\Drivers\etc\hosts => movido correctamente Hosts restaurado correctamente. ========= RemoveProxy: ========= "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente "HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente "HKU\S-1-5-21-2191999910-1078877841-1369218771-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente ========= Final de RemoveProxy: ========= ========= netsh winsock reset ========= El cat logo Winsock se restableci¢ correctamente. Debe reiniciar el equipo para completar el restablecimiento. ========= Final de CMD: ========= ========= ipconfig /renew ========= Configuraci¢n IP de Windows No se puede realizar ninguna operaci¢n en Wi-Fi mientras los medios est‚n desconectados. No se puede realizar ninguna operaci¢n en Conexi¢n de rea local* 9 mientras los medios est‚n desconectados. Adaptador de Ethernet Ethernet 2: Sufijo DNS espec¡fico para la conexi¢n. . : V¡nculo: direcci¢n IPv6 local. . . : fe80::55a3:5c35:3002:bc65%17 Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.0.10 M scara de subred . . . . . . . . . . . . : 255.255.255.0 Puerta de enlace predeterminada . . . . . : 192.168.0.1 Adaptador de LAN inal mbrica Wi-Fi: Estado de los medios. . . . . . . . . . . : medios desconectados Sufijo DNS espec¡fico para la conexi¢n. . : Adaptador de LAN inal mbrica Conexi¢n de rea local* 9: Estado de los medios. . . . . . . . . . . : medios desconectados Sufijo DNS espec¡fico para la conexi¢n. . : ========= Final de CMD: ========= ========= ipconfig /flushdns ========= Configuraci¢n IP de Windows Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS. ========= Final de CMD: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 BITS administration utility. (C) Copyright Microsoft Corp. Unable to connect to BITS - 0x8007043c El servicio no puede iniciarse en modo a prueba de errores ========= Final de CMD: ========= ========= netsh advfirewall reset ========= Aceptar ========= Final de CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= Aceptar ========= Final de CMD: ========= ========= netsh int ipv4 reset ========= Reenv¡o de compartimiento se restableci¢ correctamente. Compartimiento se restableci¢ correctamente. Protocolo de control se restableci¢ correctamente. Solicitud de secuencia eco se restableci¢ correctamente. Global se restableci¢ correctamente. Interfaz se restableci¢ correctamente. Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente. Direcciones de multidifusi¢n se restableci¢ correctamente. Direcci¢n de unidifusi¢n se restableci¢ correctamente. Vecino se restableci¢ correctamente. Ruta de acceso se restableci¢ correctamente. Posible se restableci¢ correctamente. Directiva de prefijo se restableci¢ correctamente. Vecino de proxy se restableci¢ correctamente. Ruta se restableci¢ correctamente. Prefijo de sitio se restableci¢ correctamente. Subinterfaz se restableci¢ correctamente. Patr¢n de reactivaci¢n se restableci¢ correctamente. Resolver vecino se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. Error al restablecer . Acceso denegado. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. Reinicie el equipo para completar esta acci¢n. ========= Final de CMD: ========= ========= netsh int ipv6 reset ========= Reenv¡o de compartimiento se restableci¢ correctamente. Compartimiento se restableci¢ correctamente. Protocolo de control se restableci¢ correctamente. Solicitud de secuencia eco se restableci¢ correctamente. Global se restableci¢ correctamente. Interfaz se restableci¢ correctamente. Direcci¢n de difusi¢n por proximidad (a se restableci¢ correctamente. Direcciones de multidifusi¢n se restableci¢ correctamente. Direcci¢n de unidifusi¢n se restableci¢ correctamente. Vecino se restableci¢ correctamente. Ruta de acceso se restableci¢ correctamente. Posible se restableci¢ correctamente. Directiva de prefijo se restableci¢ correctamente. Vecino de proxy se restableci¢ correctamente. Ruta se restableci¢ correctamente. Prefijo de sitio se restableci¢ correctamente. Subinterfaz se restableci¢ correctamente. Patr¢n de reactivaci¢n se restableci¢ correctamente. Resolver vecino se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. Error al restablecer . Acceso denegado. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. se restableci¢ correctamente. Reinicie el equipo para completar esta acci¢n. ========= Final de CMD: ========= =========== EmptyTemp: ========== BITS transfer queue => 10772480 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14166531 B Java, Flash, Steam htmlcache => 1172 B Windows/system/drivers => 78140 B Edge => 6492243 B Chrome => 25623222 B Firefox => 18352059 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 13470 B NetworkService => 21970 B Usuario => 7079635 B RecycleBin => 0 B EmptyTemp: => 78.8 MB datos temporales eliminados. ================================ El sistema necesita reiniciarse. ==== Final de Fixlog 12:33:50 ==== ``` ---
**Author:** ![Juanra\_Vazquez](https://forospyware.com/user_avatar/forospyware.com/juanra_vazquez/32/3653_2.png) [@Juanra\_Vazquez](https://forospyware.com/u/Juanra_Vazquez)\ **Post date:** [5 Mayo, 2020 10:37 UTC](https://forospyware.com/t/pc-muy-lento/16271/12 "2020-05-05T10:37:03Z")
Ese es el reporte generado… estoy eliminando material del PC y el que quiero salvar pasandolo a disco duro externo… en base a los reportes que se han ido generando como ves el estado del PC? Muchas gracias por la ayuda… ---
**Author:** ![Miguelgrado](https://forospyware.com/letter_avatar/miguelgrado/32/6_22734026db12803ebb3e059622ac3534.png) [@Miguelgrado](https://forospyware.com/u/Miguelgrado)\ **Post date:** [5 Mayo, 2020 11:01 UTC](https://forospyware.com/t/pc-muy-lento/16271/13 "2020-05-05T11:01:11Z")
El pc esta bien…prueba el pc y comentas como va Si haces los pasos que te puse para liberar espacio…aparte lo de sacar archivos personales. el pc deberia mejorar