Hola a tod@s!
Llevo batallando con un problema que tengo con el PC ya varios dias y creo que esto sigue para largo…Os describo el problema:
Surgio de la nada…el puntero del raton se comporta de una formar no normal y el raton en general, cuando quiero cerrar una ventana no reconoce el puntero del raton el windows cuando paso por encima de la cruz roja para cerrar la pestaña, sea cual sea la pestaña, paginas webs, carpetas del escritorio, programas.
A veces al clikear el boton secundario del rato no me abre el menu ni nada, cuando quiero arrastrar archivos a unas carpetas determinadas no las coje y tengo que re hacerlo nuevamente hasta que lo haga.
Al abrir el navegador de internet a veces me dice que si quiero abrir la misma pagina web 20 veces…luego mientras estoy escribiendo este articulo la barra de texto me va saltando, ya que parece como que si el raton este clikeando encima etc.
Tambien claro esta que a veces ni reconoce en el menu de inicio el puntero del rato con lo cual ni puedo aveces apagar el PC etc. Me actua incluso raro ahora mientras escribo este post saltando de un lado a otro donde este el puntero del raton…
Encontre una solucion para varios minutos, que es clikear en la rueda del rato todo vuelve la normalidad durante unos segundos, luego claro esta que vuelve a pasar lo mismo, que el PC y el raton actuan de forma aleatoria.
Todos me direis que el problema es del raton y no, ya he cambiado tres ratones y con todos me pasa lo mismo, como que siempre el boton 1 del raton estuviera haciendo click.
He probado ponerlos en diferentes puertos USB a ver si es que le pasaba algo al puerto USB y nada todos los puertos de USB on todos los ratones funcionan mal de la misma forma, asi que raton no es.
Que es lo que hice hasta ahora?
He pasado los siguientes programas antivirus en mi windows 10 (cclean, malawarebyts, adwcleaner, zhpcleaner, frst, jrt, eset antivirus.) Tras pasarlos todos el problema persistia y decidi borrar todo el sistema operativo y volver a instalar uno nuevo y comprobarlo.
He borrado todo e hice una nueva instalacion de windows 8.1 pro para ver si tenia el mismo problema, en efecto sigo con el mismo problema…
Tambien lo que hice fue reasignar los botones del raton el de izquierda al boton derecho y viceversa, sigue el mismo problema.
Aqui os copio los logs de los programas antivirus que he pasado nuevamente en nuevo sistema limpio…
Cleaning Complete - (24,959 secs)
------------------------------------------------------------------------------------------
1.701 MB removed.
------------------------------------------------------------------------------------------
Advanced Report
------------------------------------------------------------------------------------------
Internet Explorer - Temporary Internet Files 11.099 KB 170 files
Internet Explorer - History 42 KB 6 files
Internet Explorer - Cookies 4 KB 14 files
Windows Explorer - Thumbnail Cache 3.073 KB 9 files
System - Empty Recycle Bin 80.869 KB 1 files
System - Temporary Files 11.362 KB 22 files
System - Windows Log Files 1.220.873 KB 52 files
Google Chrome - Internet Cache 411.991 KB 1.527 files
Google Chrome - Internet History 954 KB 6 files
Google Chrome - Cookies 7 KB 281 files
Google Chrome - Download History 3 KB 1 files
Windows - MS Search 2.048 KB 2 files
------------------------------------------------------------------------------------------
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\OAF1YR5T\status[1].htm 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\94VZ3SDL\PRRXX16A.txt 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\023RY1B1\installcheck[1].htm 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\P92212DH\suggestions[4].htm 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\023RY1B1\suggestions[1].htm 2 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\023RY1B1\th[1].jpg 26 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\OAF1YR5T\favicon[2].png 0 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\IE\OAF1YR5T\favicon[3].png 0 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\AntiPhishing\4A72F430-B40C-4D36-A068-CE33ADA5ADF9.dat 121 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\AA2cKYW[1].png 16 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\AA4SXJZ[1].png 28 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\AAoOODa[1].png 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\app-store-download[1].png 2 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\BBiwNf[1].png 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\BBNrMwJ[1].png 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\BBPqViB[1].png 3 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\browse-faster[1].png 11 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\chrome_throbber_fast[1].gif 5 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\do-more[1].png 16 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\e151e5[1].gif 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6IjdhZDgwM2VjZjU5MjQ2MzQ2Mjg5NDMzZGI4Y2Q0ZDYwMGFhYTI3M2IxOGIzZTY0ZDBkYzBmMGUwM2ZhMzc0ZGQiLCJ3IjoyMDcsImgiOjMxMSwiZCI6MS41LCJjcyI6MCwiZiI6MH0[1].jpg 24 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6IjNjNDg3ZmEwY2JhMjA1NzA0ZTFlODM0OWE1OTIzZDIyY2FjN2Q2NTg1YWY5MjNhNTU4MTQ5MmU4YzUwNmU5NGUiLCJ3IjoyMDcsImgiOjMxMSwiZCI6MS41LCJjcyI6MCwiZiI6MH0[1].jpg 31 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6IjUyMDRhY2ExN2UyNWQxYjk2MjJmNmVjYjIyM2JmZWM0N2Q1ZTAwZTRmMWYzNDMxOGMzYjQ0MjM3ODkyNGJjZDUiLCJ3IjoxMDAsImgiOjc1LCJkIjoxLjUsImNzIjowLCJmIjowfQ[1].jpg 4 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6ImE5ZGE3YzhjNzcyY2RiM2IwNjYyMTkxZGRlN2E0M2JjOGQ2OTI5ZmYyNTFmZDhkZGQxMmFlNGQzZWNlZjA1Y2QiLCJ3IjoyMDcsImgiOjMxMSwiZCI6MS41LCJjcyI6MCwiZiI6MH0[1].jpg 19 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6ImIyMTMxMjI4ODBmOGY1MGNlN2M0ODRkZTBiMTc3Y2FkYjVkNzVhNDMwY2QyNDFjNDdhZjMzZjAzOWQ1YWI1NzEiLCJ3IjoyMDcsImgiOjMxMSwiZCI6MS41LCJjcyI6MCwiZiI6MH0[1].jpg 30 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6ImNlMjNmMGU3N2UyNmE5OTQwNDA4YTg0YTk1OGRiZmJlYTcyOTBhMjZlYTAwOGM0NGNlZWViMjY4MDNiMGMwMDIiLCJ3IjoyMDcsImgiOjMxMSwiZCI6MS41LCJjcyI6MCwiZiI6MH0[1].jpg 17 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6ImYzNDcwMmIyZTg2ZGEzM2ViMDcyYjhhODdkNTU3MzM1ZjQwMTYzYTBiZjZiZjMyMzE0ZDkzNjI3OGUwOTFiNjIiLCJ3IjoxMDAsImgiOjc1LCJkIjoxLjUsImNzIjowLCJmIjowfQ[1].jpg 4 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\eyJpdSI6ImYzNDcwMmIyZTg2ZGEzM2ViMDcyYjhhODdkNTU3MzM1ZjQwMTYzYTBiZjZiZjMyMzE0ZDkzNjI3OGUwOTFiNjIiLCJ3IjoyMDcsImgiOjMxMSwiZCI6MS41LCJjcyI6MCwiZiI6MH0[1].jpg 23 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\icon-gplus[1].svg 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\INetCache\Low\IE\F7Z5UBE0\icon-twitter[1].svg 1 KB
C:\Users\oso\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\NHNZ5PA4\www.google[1].xml 1 KB
C:\Users\oso\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\X4SEH13A\www.msn[1].xml 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_16.db 1.024 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_1600.db 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_32.db 1.024 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_48.db 1.024 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_96.db 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_exif.db 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_sr.db 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide.db 1 KB
C:\Users\oso\AppData\Local\Microsoft\Windows\Explorer\thumbcache_wide_alternate.db 1 KB
C:\dell 80.869 KB
C:\Windows\TEMP\DMIC4E6.tmp 0 KB
C:\Windows\TEMP\DMIC88F.tmp 0 KB
C:\Windows\TEMP\DMIFAE5.tmp 0 KB
C:\Windows\TEMP\DMIFB82.tmp 0 KB
C:\Windows\TEMP\DMIFBD2.tmp 0 KB
C:\Windows\TEMP\DMIFC40.tmp 0 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000579 31 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00057a 66 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00057b 17 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00057c 123 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00057d 91 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0005c6 24 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0005c7 41 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0005c8 21 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000627 100 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000628 24 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000629 39 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00062a 85 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00062b 109 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00062c 135 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00062d 49 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00062e 83 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00062f 157 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000630 19 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000631 19 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_000632 39 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066d 64 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066e 25 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_00066f 50 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Cache\f_0006ac 46 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Current Tabs 4 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Last Tabs 201 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Top Sites 156 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache 166 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor 300 KB
Cookie: microsoft.com 0 KB
Cookie: support.microsoft.com 0 KB
Cookie: redragonusa.com 0 KB
Cookie: myaccount.google.com 0 KB
Cookie: answers.microsoft.com 0 KB
Cookie: atdmt.com 0 KB
Cookie: marketgid.com 0 KB
Cookie: mgid.com 0 KB
Cookie: steepto.com 0 KB
Cookie: www.grammarly.com 0 KB
Cookie: grammarly.com 0 KB
Cookie: krxd.net 0 KB
Cookie: spotxchange.com 0 KB
Cookie: quora.com 0 KB
Cookie: taboola.com 0 KB
Cookie: pinterest.com 0 KB
Cookie: notifications.google.com 0 KB
Cookie: d.adroll.com 0 KB
Cookie: eyeviewads.com 0 KB
Cookie: reddit.com 0 KB
Cookie: cdnmedia.raiolanetworks.es 0 KB
Cookie: infusionsoft.com 0 KB
Cookie: zopim.com 0 KB
Cookie: raiolanetworks.es 0 KB
Cookie: gestiondecuenta.eu 0 KB
Cookie: yandex.ru 0 KB
Cookie: atwola.com 0 KB
Cookie: wayfair.com 0 KB
Cookie: cm.adsafety.net 0 KB
Cookie: angsrvr.com 0 KB
Cookie: owneriq.net 0 KB
Cookie: sharethrough.com 0 KB
Cookie: id5-sync.com 0 KB
Cookie: platform.twitter.com 0 KB
Cookie: rutrk.org 0 KB
Cookie: secure-assets.rubiconproject.com 0 KB
Cookie: www.google.es 0 KB
Cookie: www.infospyware.com 0 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_googleads.g.doubleclick.net_0.indexeddb.leveldb\000003.log 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_googleads.g.doubleclick.net_0.indexeddb.leveldb\CURRENT 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_googleads.g.doubleclick.net_0.indexeddb.leveldb\LOCK 0 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_googleads.g.doubleclick.net_0.indexeddb.leveldb\LOG 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_googleads.g.doubleclick.net_0.indexeddb.leveldb\MANIFEST-000001 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mspoweruser.com_0.indexeddb.leveldb\000003.log 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mspoweruser.com_0.indexeddb.leveldb\CURRENT 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mspoweruser.com_0.indexeddb.leveldb\LOCK 0 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mspoweruser.com_0.indexeddb.leveldb\LOG 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_mspoweruser.com_0.indexeddb.leveldb\MANIFEST-000001 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log 5 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOCK 0 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG.old 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001 1 KB
C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\DownloadMetadata 3 KB
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edb00010.log 1.024 KB
C:\ProgramData\Microsoft\Search\Data\Applications\Windows\edbtmp.log 1.024 KBMalwarebytes
www.malwarebytes.com
-Detalles del registro-
Fecha del análisis: 10/1/19
Hora del análisis: 19:33
Archivo de registro: 2e7cd42a-1506-11e9-85fe-708bcd541809.json
-Información del software-
Versión: 3.6.1.2711
Versión de los componentes: 1.0.508
Versión del paquete de actualización: 1.0.8716
Licencia: Prueba
-Información del sistema-
SO: Windows 8.1
CPU: x64
Sistema de archivos: NTFS
Usuario: Home\oso
-Resumen del análisis-
Tipo de análisis: Análisis de amenazas
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 225298
Amenazas detectadas: 0
Amenazas en cuarentena: 0
Tiempo transcurrido: 0 min, 50 seg
-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Desactivado
Heurística: Activado
PUP: Detectar
PUM: Detectar
-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)
Módulo: 0
(No hay elementos maliciosos detectados)
Clave del registro: 0
(No hay elementos maliciosos detectados)
Valor del registro: 0
(No hay elementos maliciosos detectados)
Datos del registro: 0
(No hay elementos maliciosos detectados)
Secuencia de datos: 0
(No hay elementos maliciosos detectados)
Carpeta: 0
(No hay elementos maliciosos detectados)
Archivo: 0
(No hay elementos maliciosos detectados)
Sector físico: 0
(No hay elementos maliciosos detectados)
WMI: 0
(No hay elementos maliciosos detectados)
(end)
# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build: 12-18-2018
# Database: 2019-01-07.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 01-10-2019
# Duration: 00:00:04
# OS: Windows 8.1 Pro
# Scanned: 32250
# Detected: 12
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.Legacy C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit
PUP.Optional.Legacy C:\Program Files (x86)\DriverToolkit
PUP.Optional.Legacy C:\Users\oso\AppData\Local\DriverToolkit
PUP.Optional.Solvusoft C:\Users\oso\AppData\Roaming\Solvusoft
***** [ Files ] *****
PUP.Optional.DriverToolkit C:\Users\Public\Desktop\DriverToolkit.lnk
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
PUP.Optional.Legacy C:\Windows\Tasks\DRIVERTOOLKIT AUTORUN.job
PUP.Optional.Legacy C:\Windows\System32\Tasks\DRIVERTOOLKIT AUTORUN
***** [ Registry ] *****
PUP.Optional.Legacy HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1
PUP.Optional.Legacy HKCU\Software\DriverToolkit
PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55F1401F-EEFC-45D7-8A37-EE17A2B93201}
PUP.Optional.Legacy HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DRIVERTOOLKIT AUTORUN
PUP.Optional.Solvusoft HKLM\Software\Wow6432Node\Solvusoft
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
# -------------------------------
# Malwarebytes AdwCleaner 7.2.6.0
# -------------------------------
# Build: 12-18-2018
# Database: 2019-01-07.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-10-2019
# Duration: 00:00:02
# OS: Windows 8.1 Pro
# Cleaned: 12
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverToolkit
Deleted C:\Program Files (x86)\DriverToolkit
Deleted C:\Users\oso\AppData\Local\DriverToolkit
Deleted C:\Users\oso\AppData\Roaming\Solvusoft
***** [ Files ] *****
Deleted C:\Users\Public\Desktop\DriverToolkit.lnk
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\Tasks\DRIVERTOOLKIT AUTORUN.job
Deleted C:\Windows\System32\Tasks\DRIVERTOOLKIT AUTORUN
***** [ Registry ] *****
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{D66BF89F-B0A2-48F5-A2E4-242EB645AB76}_is1
Deleted HKCU\Software\DriverToolkit
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{55F1401F-EEFC-45D7-8A37-EE17A2B93201}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DRIVERTOOLKIT AUTORUN
Deleted HKLM\Software\Wow6432Node\Solvusoft
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [2229 octets] - [10/01/2019 19:25:25]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 09.01.2019 01
Ran by oso (administrator) on HOME (10-01-2019 19:40:01)
Running from C:\Users\oso\Desktop
Loaded Profiles: oso (Available Profiles: oso)
Platform: Windows 8.1 Pro (Update) (X64) Language: Español (España, internacional)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9068040 2016-11-09] (Realtek Semiconductor)
HKLM-x32\...\Run: [PerditiongmmouseRun] => C:\Program Files (x86)\REDRAGON GAMING MOUSE\pdmon.exe [3234304 2013-11-18] ()
HKLM-x32\...\Run: [AvastUI.exe] => "C:\Program Files\AVAST Software\Avast\AvLaunch.exe" /gui
HKU\S-1-5-21-1229211869-3153813931-3065447690-1001\...\Run: [Discord] => C:\Users\oso\AppData\Local\Discord\app-0.0.301\Discord.exe [57816920 2018-04-30] (Discord Inc.)
HKU\S-1-5-21-1229211869-3153813931-3065447690-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [19589208 2018-12-10] (Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\Installer\chrmstp.exe [2019-01-09] (Google Inc.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{22D6CE2A-6C6C-495E-86D5-70F540D28BFF}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKU\S-1-5-21-1229211869-3153813931-3065447690-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-es/?ocid=iehp
FireFox:
========
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-01-09] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2019-01-09] (Google Inc.)
Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.es/"
CHR NewTab: Default -> "active": true,
"entry": "chrome-extension://bgffnmhjbcieiamalanidoifkadddpkc/newtab.html"
CHR Profile: C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default [2019-01-10]
CHR Extension: (Presentaciones) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2019-01-09]
CHR Extension: (Documentos) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-09]
CHR Extension: (Google Drive) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2019-01-09]
CHR Extension: (Artifact Cards for New Tab) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgffnmhjbcieiamalanidoifkadddpkc [2019-01-10]
CHR Extension: (YouTube) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-09]
CHR Extension: (Tampermonkey) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2019-01-10]
CHR Extension: (Hojas de cálculo) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2019-01-09]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2019-01-09]
CHR Extension: (Vysor) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\gidgenkbbabolejbgbpnhbimgjbffefm [2019-01-10]
CHR Extension: (Botón Guardar de Pinterest) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2019-01-10]
CHR Extension: (Grammarly for Chrome) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2019-01-10]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-01-09]
CHR Extension: (All Cheat Sheets) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\oedodeocfdeegliepeeoieemhdgoijod [2019-01-10]
CHR Extension: (Gmail) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-01-09]
CHR Extension: (Chrome Media Router) - C:\Users\oso\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-01-09]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 igfxCUIService2.0.0.0; C:\Windows\system32\igfxCUIService.exe [333280 2016-12-14] (Intel Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6347056 2018-09-19] (Malwarebytes)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-25] ()
R3 e1dexpress; C:\Windows\system32\DRIVERS\e1d64x64.sys [555496 2017-03-19] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-01-10 19:40 - 2019-01-10 19:40 - 000007249 _____ C:\Users\oso\Desktop\FRST.txt
2019-01-10 19:39 - 2019-01-10 19:40 - 000000000 ____D C:\FRST
2019-01-10 19:38 - 2019-01-10 19:38 - 000000545 _____ C:\Users\oso\Desktop\JRT.txt
2019-01-10 19:35 - 2019-01-10 19:35 - 000000000 ____D C:\Users\oso\Desktop\Programas Antivirus
2019-01-10 19:34 - 2019-01-10 19:34 - 000001518 _____ C:\Users\oso\Desktop\malwarebytsresumen.txt
2019-01-10 19:32 - 2019-01-10 19:32 - 000000000 ____D C:\Users\oso\AppData\Local\mbamtray
2019-01-10 19:32 - 2019-01-10 19:32 - 000000000 ____D C:\Users\oso\AppData\Local\mbam
2019-01-10 19:32 - 2019-01-10 19:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-01-10 19:32 - 2019-01-10 19:32 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-01-10 06:25 - 2014-10-29 02:16 - 000291840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RADCUI.dll
2019-01-10 06:25 - 2014-10-29 02:16 - 000283136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2019-01-10 06:25 - 2014-10-29 02:16 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\mlang.dll
2019-01-10 06:25 - 2014-10-29 02:16 - 000216064 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll
2019-01-10 06:25 - 2014-10-29 02:16 - 000198144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msoeacct.dll
2019-01-10 06:25 - 2014-10-29 02:16 - 000173568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netcorehc.dll
2019-01-10 06:25 - 2014-10-29 02:15 - 000034816 _____ (Microsoft Corporation) C:\Windows\system32\FDResPub.dll
2019-01-10 06:25 - 2014-10-29 02:15 - 000028160 _____ (Microsoft Corporation) C:\Windows\system32\winrshost.exe
2019-01-10 06:25 - 2014-10-29 02:14 - 000344576 _____ (Microsoft Corporation) C:\Windows\system32\certCredProvider.dll
2019-01-10 06:25 - 2014-10-29 02:14 - 000149504 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll
2019-01-10 06:25 - 2014-10-29 02:14 - 000110592 _____ (Microsoft Corporation) C:\Windows\system32\eapsvc.dll
2019-01-10 06:25 - 2014-10-29 02:14 - 000099328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msoert2.dll
2019-01-10 06:25 - 2014-10-29 02:14 - 000058880 _____ (Microsoft Corporation) C:\Windows\system32\RDSPnf.exe
2019-01-10 06:25 - 2014-10-29 02:14 - 000040448 _____ (Microsoft Corporation) C:\Windows\system32\ProximityServicePal.dll
2019-01-10 06:25 - 2014-10-29 02:13 - 000260608 _____ (Microsoft Corporation) C:\Windows\system32\vaultsvc.dll
2019-01-10 06:25 - 2014-10-29 02:13 - 000219648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apds.dll
2019-01-10 06:25 - 2014-10-29 02:13 - 000104448 _____ (Microsoft Corporation) C:\Windows\system32\fwcfg.dll
2019-01-10 06:25 - 2014-10-29 02:13 - 000069632 _____ (Microsoft Corporation) C:\Windows\system32\umb.dll
2019-01-10 06:25 - 2014-10-29 02:13 - 000052736 _____ (Microsoft Corporation) C:\Windows\system32\fdPnp.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000407040 _____ (Microsoft Corporation) C:\Windows\system32\das.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnrollUI.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000280576 _____ (Microsoft Corporation) C:\Windows\system32\hotspotauth.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000270336 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000254464 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.HumanInterfaceDevice.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000221696 _____ (Microsoft Corporation) C:\Windows\system32\TtlsAuth.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000144384 _____ (Microsoft Corporation) C:\Windows\system32\msdtc.exe
2019-01-10 06:25 - 2014-10-29 02:12 - 000115200 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2019-01-10 06:25 - 2014-10-29 02:12 - 000073728 _____ (Microsoft Corporation) C:\Windows\system32\PortableDeviceConnectApi.dll
2019-01-10 06:25 - 2014-10-29 02:06 - 000102912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmpshell.dll
2019-01-10 06:25 - 2014-10-29 02:06 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2019-01-10 06:25 - 2014-10-29 02:06 - 000033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmiclnt.dll
2019-01-10 06:25 - 2014-10-29 02:06 - 000026112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll
2019-01-10 06:25 - 2014-10-29 02:06 - 000024064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000589824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elslad.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000315392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
2019-01-10 06:25 - 2014-10-29 02:05 - 000309248 _____ (Microsoft Corporation) C:\Windows\system32\TtlsCfg.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000228864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfproc.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspatcha.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfos.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Websocket.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfdisk.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshhttp.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000031744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vidcap.ax
2019-01-10 06:25 - 2014-10-29 02:05 - 000029696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icacls.exe
2019-01-10 06:25 - 2014-10-29 02:05 - 000028672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\w32topl.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcsubs.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\snmpapi.dll
2019-01-10 06:25 - 2014-10-29 02:05 - 000026624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\hid.dll
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\ProgramData\Plantillas
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programas
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\ProgramData\Menú Inicio
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\ProgramData\Escritorio
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\ProgramData\Documentos
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\ProgramData\Datos de programa
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\Program Files\Archivos comunes
2019-01-09 15:36 - 2019-01-09 15:36 - 000000000 _SHDL C:\Archivos de programa
2019-01-09 15:30 - 2019-01-10 19:22 - 000000000 ____D C:\Windows\Panther
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-01-10 19:35 - 2014-03-18 11:11 - 001743360 _____ C:\Windows\system32\PerfStringBackup.INI
2019-01-10 19:35 - 2014-03-18 10:31 - 000774740 _____ C:\Windows\system32\perfh00A.dat
2019-01-10 19:35 - 2014-03-18 10:31 - 000159266 _____ C:\Windows\system32\perfc00A.dat
2019-01-10 19:35 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\Inf
2019-01-10 19:31 - 2013-08-22 15:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-01-10 13:05 - 2013-08-22 15:44 - 000337992 _____ C:\Windows\system32\FNTCACHE.DAT
2019-01-10 13:03 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\PolicyDefinitions
2019-01-10 13:00 - 2013-08-22 16:20 - 000000000 ____D C:\Windows\CbsTemp
2019-01-10 12:43 - 2013-08-22 16:36 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2019-01-10 12:41 - 2013-08-22 16:36 - 000000000 ___HD C:\Program Files\WindowsApps
2019-01-10 12:40 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\AppReadiness
2019-01-10 12:36 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\ELAM
2019-01-10 12:35 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2019-01-10 12:34 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2019-01-10 12:20 - 2014-03-18 10:48 - 000000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ___SD C:\Windows\system32\dsc
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ___RD C:\Windows\ToastData
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\WinStore
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\setup
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\InputMethod
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\SysWOW64\Com
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\setup
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\migwiz
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\Com
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\MediaViewer
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\IME
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\FileManager
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\Camera
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows Portable Devices
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows Defender
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Common Files\System
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2019-01-10 12:20 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2019-01-10 12:20 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\SysWOW64\oobe
2019-01-10 12:20 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\SysWOW64\Dism
2019-01-10 12:20 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\system32\Sysprep
2019-01-10 12:20 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\system32\oobe
2019-01-10 12:20 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\system32\Dism
2019-01-10 12:20 - 2013-08-22 14:36 - 000000000 ____D C:\Windows\servicing
2019-01-10 12:19 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2019-01-10 12:05 - 2013-08-22 16:36 - 000215552 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2019-01-10 12:05 - 2013-08-22 16:36 - 000195072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2019-01-10 00:53 - 2013-08-22 14:25 - 000262144 ___SH C:\Windows\system32\config\BBI
2019-01-09 16:16 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\tracing
2019-01-09 15:54 - 2013-08-22 16:36 - 000000000 ____D C:\Windows\system32\NDF
2019-01-09 15:36 - 2013-08-22 16:36 - 000000000 ____D C:\Program Files\Windows NT
2019-01-09 15:29 - 2013-08-22 16:36 - 000262144 _____ C:\Windows\system32\config\BCD-Template
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2019-01-09 15:34
==================== End of FRST.txt ============================
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09.01.2019 01
Ran by oso (10-01-2019 19:41:18)
Running from C:\Users\oso\Desktop
Windows 8.1 Pro (Update) (X64) (2019-01-09 14:38:19)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrador (S-1-5-21-1229211869-3153813931-3065447690-500 - Administrator - Disabled)
HomeGroupUser$ (S-1-5-21-1229211869-3153813931-3065447690-1003 - Limited - Enabled)
Invitado (S-1-5-21-1229211869-3153813931-3065447690-501 - Limited - Disabled)
oso (S-1-5-21-1229211869-3153813931-3065447690-1001 - Administrator - Enabled) => C:\Users\oso
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
CCleaner (HKLM\...\CCleaner) (Version: 5.51 - Piriform)
Discord (HKU\S-1-5-21-1229211869-3153813931-3065447690-1001\...\Discord) (Version: 0.0.301 - Discord Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Intel(R) Network Connections 22.4.16.0 (HKLM\...\PROSetDX) (Version: 22.4.16.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4565 - Intel Corporation)
Malwarebytes versión 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7982 - Realtek Semiconductor Corp.)
REDRAGON GAMING MOUSE version 1.1 (HKLM-x32\...\{6513799F-D2B9-4BEA-A76E-52249156A2B5}_is1) (Version: 1.1 - redragonzone)
Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.)
WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2016-12-14] (Intel Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {11A839F7-45DA-46F7-8682-A2714BD03BF8} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-12-10] (Piriform Ltd)
Task: {7228BA17-6E02-4B68-839D-F6C0B4CD6949} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-12-10] (Piriform Software Ltd)
Task: {809372C6-2878-4025-AE9C-763F2430F31D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2019-01-09] (Google Inc.)
Task: {ADA62634-6773-44E8-B7A1-24B344A1745E} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2019-01-10] (AVAST Software)
Task: {D647C700-8152-434A-8458-9DE671CFF59B} - System32\Tasks\{A1AA5F9A-2F01-4586-8D4E-F3084FBB1FF7} => C:\Windows\system32\pcalua.exe -a C:\Users\oso\AppData\Local\Temp\Temp1_Realtek_Ethernet_Win7_7088_07242014.zip\Install_Win7_7088_07242014\setup.exe <==== ATTENTION
Task: {E9368788-7D3C-4EAF-9CC6-5BC860EC5C0E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2019-01-09] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\oso\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\Vysor.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gidgenkbbabolejbgbpnhbimgjbffefm
==================== Loaded Modules (Whitelisted) ==============
2017-04-24 14:19 - 2017-04-24 14:19 - 000463424 ____R () C:\Program Files\Intel\Wired Networking\NCS2\WMIPROV\Ncs2Provider.dll
2017-04-24 14:19 - 2017-04-24 14:19 - 000428608 ____R () C:\Program Files\Intel\Wired Networking\NCS2\Agent\AdapterAgnt.DLL
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1229211869-3153813931-3065447690-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is disabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{FEC7BA5B-2204-4958-AE0F-32D226B0C388}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
FirewallRules: [{E00FC791-14CB-4B6A-A497-D6D317FD0B10}] => (Allow) LPort=1688
FirewallRules: [{28B3E08C-89B1-432B-B2BD-A15833FC8AA3}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{12347B3C-F4DF-47BE-857B-DFB5D62EF435}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
==================== Restore Points =========================
09-01-2019 23:30:41 Instalador de Módulos de Windows
10-01-2019 19:36:38 JRT Pre-Junkware Removal
==================== Faulty Device Manager Devices =============
Name: Controladora de memoria PCI
Description: Controladora de memoria PCI
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Controladora de bus SM
Description: Controladora de bus SM
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Adaptador de pantalla básico de Microsoft
Description: Adaptador de pantalla básico de Microsoft
Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318}
Manufacturer: (Tipos de pantalla estándar)
Service: BasicDisplay
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (01/10/2019 07:36:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Error en Servicios de cifrado mientras se procesaba el objeto "System Writer" de la llamada OnIdentity().
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocolo de detección de nivel de vínculo de Microsoft.
System Error:
Acceso denegado.
.
Error: (01/10/2019 12:25:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: Service_KMS.exe, versión: 13.1.0.0, marca de tiempo: 0x5313ef48
Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000
Código de excepción: 0x00000000
Desplazamiento de errores: 0x00007ffb658618d9
Identificador del proceso con errores: 0x584
Hora de inicio de la aplicación con errores: 0x01d4a8d7261ec525
Ruta de acceso de la aplicación con errores: C:\Program Files\KMSpico\Service_KMS.exe
Ruta de acceso del módulo con errores: unknown
Identificador del informe: 6e7c98bc-14ca-11e9-8255-708bcd541809
Nombre completo del paquete con errores:
Identificador de aplicación relativa del paquete con errores:
Error: (01/10/2019 01:52:45 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa SystemSettings.exe, versión 6.3.9600.17031, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.
Identificador de proceso: 784
Hora de inicio: 01d4a8785f516343
Hora de finalización: 0
Ruta de acceso de la aplicación: C:\Windows\ImmersiveControlPanel\SystemSettings.exe
Identificador de informe: 09a61cbe-1472-11e9-8254-708bcd541809
Nombre completo de paquete con errores: windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy
Identificador de aplicación relativa del paquete con errores: microsoft.windows.immersivecontrolpanel
Error: (01/09/2019 11:34:19 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: )
Description: Error al adquirir el vale genuino (hr=0x80072EE7) para el Id. de plantilla {99d92734-d682-4d71-983e-d6ec3f16059f}
Error: (01/09/2019 11:34:19 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: )
Description: Detalles del error de adquisición de licencias.
hr=0x80072EE7
Error: (01/09/2019 04:16:35 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoId={BA05BF95-18E7-4C44-B9C6-4F0E002FC841}: El usuario Home\oso marcó una conexión denominada Conexión de banda ancha, que no se realizó correctamente. El código de motivo devuelto es 651.
Error: (01/09/2019 04:16:35 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoId={C97797DE-EBC5-42ED-8E91-90AA97E919BD}: El usuario Home\oso marcó una conexión denominada Conexión de banda ancha, que no se realizó correctamente. El código de motivo devuelto es 651.
Error: (01/09/2019 04:16:32 PM) (Source: RasClient) (EventID: 20227) (User: )
Description: CoId={3E0A3969-4291-4EF4-A81F-2AE2ACF32275}: El usuario Home\oso marcó una conexión denominada Conexión de banda ancha, que no se realizó correctamente. El código de motivo devuelto es 651.
System errors:
=============
Error: (01/10/2019 07:25:51 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: El servicio Servicio de uso compartido de red del Reproductor de Windows Media terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.
Error: (01/10/2019 07:25:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Intel(R) PROSet Monitoring Service se terminó de manera inesperada. Esto ha sucedido 1 veces.
Error: (01/10/2019 07:25:51 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Intel(R) HD Graphics Control Panel Service se terminó de manera inesperada. Esto ha sucedido 1 veces.
Error: (01/10/2019 01:07:06 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x800f0841: Actualización de seguridad para Windows 8.1 para x64-based Systems (KB3109103).
Error: (01/10/2019 12:42:25 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: El servicio Windows Update no se cerró correctamente después de recibir un control de aviso de apagado.
Error: (01/10/2019 12:25:59 PM) (Source: Microsoft-Windows-Eventlog) (EventID: 30) (User: NT AUTHORITY)
Description: El servicio de registro de eventos detectó un error (5) al habilitar el publicador {0BF2FB94-7B60-4B4D-9766-E82F658DF540} en el canal Microsoft-Windows-Kernel-ShimEngine/Operational. Este error no afecta al funcionamiento del canal, pero afecta a la capacidad del publicador de desencadenar eventos en el canal. Una razón común de este error es que el proveedor usa la seguridad de proveedor ETW y no concedió permisos de habilitación a la identidad del servicio Registro de eventos.
Error: (01/10/2019 12:25:53 PM) (Source: Microsoft-Windows-Eventlog) (EventID: 30) (User: NT AUTHORITY)
Description: El servicio de registro de eventos detectó un error (5) al habilitar el publicador {0BF2FB94-7B60-4B4D-9766-E82F658DF540} en el canal Microsoft-Windows-Kernel-ShimEngine/Operational. Este error no afecta al funcionamiento del canal, pero afecta a la capacidad del publicador de desencadenar eventos en el canal. Una razón común de este error es que el proveedor usa la seguridad de proveedor ETW y no concedió permisos de habilitación a la identidad del servicio Registro de eventos.
Error: (01/10/2019 12:25:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: El servicio Service KMSELDI se terminó de manera inesperada. Esto ha sucedido 1 veces.
Windows Defender:
===================================
Date: 2019-01-10 19:18:11.515
Description:
Windows Defender detectó malware u otro software potencialmente no deseado.
Para obtener más información consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/ScarletFlash.A&threatid=2147722029&enterprise=0
Nombre: Trojan:Win32/ScarletFlash.A
Id.: 2147722029
Gravedad: Grave
Categoría: Caballo de Troya
Ruta de acceso: file:_C:\Users\oso\Downloads\Sin confirmar 378892.crdownload
Origen de detección: Equipo local
Tipo de detección: FastPath
Fuente de detección: Protección en tiempo real
Usuario: Home\oso
Nombre de proceso: C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Versión de firma: AV: 1.283.2672.0, AS: 1.283.2672.0, NIS: 119.0.0.0
Versión de motor: AM: 1.1.15500.2, NIS: 2.1.14600.4
Date: 2019-01-10 12:35:30.374
Description:
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma:
Versión de firma anterior: 0.0.0.0
Origen de actualización: Servidor de Microsoft Update
Tipo de firma: AntiVirus
Tipo de actualización: Completa
Usuario: NT AUTHORITY\SYSTEM
Versión de motor actual:
Versión de motor anterior: 0.0.0.0
Código de error: 0x80240016
Descripción del error: Se produjo un problema inesperado mientras se buscaban actualizaciones. Para obtener más información sobre cómo instalar o solucionar problemas en las actualizaciones, consulte Ayuda y soporte técnico.
Date: 2019-01-10 12:25:14.751
Description:
Windows Defender encontró un error al intentar cargar firmas e intentará revertirlas a un conjunto de firmas conocidas.
Firmas intentadas: Actual
Código de error: 0x80073aba
Descripción del error: El recurso es demasiado antiguo para ser compatible.
Versión de firma: 1.155.266.0;1.155.266.0
Versión de motor: 1.1.9700.0
Date: 2019-01-10 11:25:24.485
Description:
Windows Defender encontró un error al intentar actualizar el motor.
Nueva versión de motor: 1.1.15500.2
Versión de motor anterior: 1.1.9700.0
Usuario: NT AUTHORITY\SYSTEM
Código de error: 0x8050800c
Descripción del error: Problema inesperado. Instale todas las actualizaciones disponibles e intente iniciar el programa de nuevo. Para obtener más información sobre cómo instalar actualizaciones, consulte Ayuda y soporte técnico.
CodeIntegrity:
===================================
Date: 2019-01-10 19:29:46.757
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:46.350
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:45.882
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:45.507
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:45.147
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:44.788
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:44.381
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-01-10 19:29:44.022
Description:
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5-6500 CPU @ 3.20GHz
Percentage of memory in use: 14%
Total physical RAM: 8091.55 MB
Available physical RAM: 6879.81 MB
Total Virtual: 10011.55 MB
Available Virtual: 8965.61 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:931.17 GB) (Free:897.69 GB) NTFS
\\?\Volume{a61ab30d-141b-11e9-824e-806e6f6e6963}\ (Reservado para el sistema) (Fixed) (Total:0.34 GB) (Free:0.08 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 577A6823)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.1.4 (07.09.2017)
Operating System: Windows 8.1 Pro x64
Ran by oso (Administrator) on 10/01/2019 at 19:36:37,43
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 0
Registry: 0
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 10/01/2019 at 19:38:42,79
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.