Problema tras instalar DriverPack Solution

Fulgencio · 15 Abril, 2020 11:04

Buenos días,

Escribo esta petición de ayuda porque no sé como solucionar un problema grave que yo mismo causé en mi portátil al instalar un “supuesto” solucionador de problemas llamado DriverPack Solution descargado de la web. Me dí cuenta inmediatamente de que me estaba instalando algo parecido a una distribución extraña de Microsoft .Net Framework. La cuestión es que conseguí interrumpir dicha instalación y eliminé totalmente DriverPack de mi ordenador. Después he usado Malware Bytes, adwcleaner y el antivirus online Esset 32 (que también he instalado de forma permanente) y he limpiado el registro con CCleaner. Apartentemente el ordenador funciona bien, pero ahora, cada vez que lo arranco y aleatoriamente durante el día se ejecuta una pantalla negra de cmd en la que aparece una cuenta atrás de 3 segundos, a continuación aparece un mensaje de error: Windows cannot find ‘C:\Users(mi nombre de usuario)\AppData\Roaming\DRPsu\PROGRAMS\DotNet.exe’. Make sure you’ve typed de name correctly. Then try again. Yo cierro esta ventana y sigo trabajando sin el mayor incoveniente, pero me preocupa este hecho y no he encontrado después de días de búsqueda la manera de solucionar el problema. Desde ya gracias por cualquier orientación sobre este tema.

Un saludo, Fulgencio.

Miguelgrado · 15 Abril, 2020 11:51

https://driverpack.io/es

Este programa es un actualizador de Drivers…lo he probado y funciona bien…lo que pueda es que queden restos

Desactiva Temporalmente tu antivirus y cualquier programa de seguridad.
Descarga a Tu Escritorio >> Esto es muy importante<<.,Fabar Recovery Scan Tool, considerando la versión adecuada para tu equipo. (32 o 64 bits) ¿Cómo saber si mi Windows es de 32 o 64 bits?
Doble clic para ejecutar Frst.exe. En la ventana del Disclaimer, presiona Si.
En la nueva ventana que se abre, presiona el botón Analizar y espera a que concluya el análisis.
Se abrirán dos (2) archivos (Logs), Frst.txt y Addition.txt, que estarán grabados en Tu escritorio.

En Tu próxima respuesta, copias y pegas los dos reportes Frst.txt y Addition.txt de FRST

Nota: Si el/los reportes solicitados no entraran en una sola respuesta porque superan la cantidad de caracteres permitidos, puedes utilizar dos o mas respuestas para pegarlos completamente.

Fulgencio · 15 Abril, 2020 17:41

Hola de nuevo. Envío los dos reportes en respuestas separadas por el número de caracteres:

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x86) Versión: 15-04-2020
Ejecutado por Fulgencio (administrador) sobre ALMELA-DEPABLO (ASUSTeK COMPUTER INC. T100TAM) (15-04-2020 19:00:22)
Ejecutado desde C:\Users\Fulgencio\Desktop
Perfiles cargados: Fulgencio (Perfiles disponibles: Fulgencio)
Platform: Microsoft Windows 10 Home Versión 1903 18362.720 (X86) Idioma: Spanish (Spain, International Sort)
Navegador predeterminado: Chrome
Modo de Inicio: Normal
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer INC.) C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Geek Software GmbH -> Geek Software GmbH) C:\Program Files\PDF24\pdf24.exe <2>
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <7>
(Huawei Software Technologies Co., LTD. -> ) C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe
(Huawei Software Technologies Co., LTD. -> ) C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe
(Intel Corporation - Client Components Group -> Intel Corporation) C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe
(Intel MCG PIV Tablet Validation -> Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel MCG PIV Tablet Validation -> Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel MCG PIV Tablet Validation -> Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(Intel MCG PIV Tablet Validation -> Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Intel(R) Corporation) [Archivo no firmado] C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxTray.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Fulgencio\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2020.19111.24110.0_x86__8wekyb3d8bbwe\Microsoft.Photos.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12004.1001.1.0_x86__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20022.11011.0_x86__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.20022.11011.0_x86__8wekyb3d8bbwe\Video.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtkNGUI] => C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe [8523776 2015-04-29] (Realtek Semiconductor) [Archivo no firmado]
HKLM\...\Run: [PDFPrint] => C:\Program Files\PDF24\pdf24.exe [486536 2019-07-10] (Geek Software GmbH -> Geek Software GmbH)
HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\WINDOWS\system32\DptfPolicyLpmServiceHelper.exe [81360 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [174712 2020-04-02] (ESET, spol. s r.o. -> ESET)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATENCIÓN
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\Run: [Epson Stylus S22] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIGEE.EXE [200704 2009-09-14] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\Run: [EPSON S22 Series (Copiar 1)] => C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\E_FATIGEE.EXE [200704 2009-09-14] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner.exe [18227896 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\MountPoints2: {8cddfbf3-2596-11ea-981c-c8f3a13c11ae} - "E:\HiSuiteDownLoader.exe" 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\80.0.3987.163\Installer\chrmstp.exe [2020-04-08] (Google LLC -> Google LLC)
GroupPolicyUsers\S-1-5-21-4115032977-3466903609-2032280098-1001\User: Restricción <==== ATENCIÓN
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {0828B1E4-1787-4EB7-900F-1703EDD36AC3} - System32\Tasks\avast! Windows 10 Start Menu helper => c:\program files\avast software\avast\asww10mon.exe
Task: {0A9D9320-68E6-4B3D-93CB-DF85FBD038D4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Ningún archivo <==== ATENCIÓN
Task: {0FBBE090-8719-4181-8AA4-3B58287CD5C4} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Ningún archivo <==== ATENCIÓN
Task: {117A4509-CCC6-4A70-A575-FEA58C55F24E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Ningún archivo <==== ATENCIÓN
Task: {16D4418B-3DD8-4D3B-8A06-4BA4A8EB17C0} - System32\Tasks\Microsoft\Windows\Customer Experience Improvement Program\BthSQM => {C8367320-6F85-11E0-A1F0-0800200C9A66} C:\WINDOWS\System32\BthTelemetry.dll [27136 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
Task: {1A751807-1D6D-46E5-9F18-F56B002C503D} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {21AAB8F6-FA35-4AFD-9E9E-AFF37B49B8EE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [686384 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {2321995B-3A1E-4984-959C-B1F27B7C4FA1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [1064112 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {247BD142-0549-4E91-84B0-172C25563718} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {24CA3224-F490-402C-89DF-AE7F748E20DF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Ningún archivo <==== ATENCIÓN
Task: {2A72C3E2-2E5A-4935-A228-023AD89274EC} - System32\Tasks\ATK Package A22126881260 => C:\Program Files\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {2BE65564-89D1-4396-A5CC-D7D9283FC4A1} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {2C7729EE-BCDC-4F1F-8719-55B8DB4D01F6} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Fulgencio\Downloads\esetonlinescanner_enu.exe [14566496 2020-04-13] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {301F849D-073F-4DDB-ACE9-C3181C542FF5} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_344_Plugin.exe [1458232 2020-03-11] (Adobe Inc. -> Adobe)
Task: {31E34E86-EFF1-41EE-96DF-2F38E414E093} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Ningún archivo <==== ATENCIÓN
Task: {349061D3-24AE-4068-89FD-8D35ACEABDC9} - System32\Tasks\Opera scheduled Autoupdate 1586690913 => C:\Users\Fulgencio\AppData\Local\Programs\Opera\launcher.exe
Task: {43578B97-5EF6-422F-A021-8444D5290466} - System32\Tasks\ASUS Patch for Touch Panel => C:\ProgramData\AsTouchPanel\AsPatchTouchPanel.exe [144512 2013-01-09] (ASUSTeK Computer Inc. -> ASUSTek Computer INC.)
Task: {47A67E78-AB04-48D1-8AE6-24236CB1D4A6} - System32\Tasks\Microsoft Office 15 Sync Maintenance for ALMELA-DEPABLO-Fulgencio Almela-DePablo => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [448136 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C5B8B5B-6C6B-4EC3-9CF8-CCC383FFD766} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {5C874D47-3003-4A56-B6F7-B14BD4D79BD7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Ningún archivo <==== ATENCIÓN
Task: {67B95015-9BEC-4202-8885-972D9D81A878} - \Microsoft\Windows\UNP\RunCampaignManager -> Ningún archivo <==== ATENCIÓN
Task: {9C9D4293-68BC-42F7-9F36-15944766E771} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Fulgencio\Downloads\esetonlinescanner_enu.exe [14566496 2020-04-13] (ESET, spol. s r.o. -> ESET spol. s r.o.)
Task: {A687407A-F7FB-40BA-B56B-CE4D58AD31EE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Ningún archivo <==== ATENCIÓN
Task: {AE0BFE25-DBFC-44A3-9D55-B154AEBB9742} - System32\Tasks\Opera scheduled assistant Autoupdate 1586691100 => C:\Users\Fulgencio\AppData\Local\Programs\Opera\launcher.exe
Task: {AE58E2A6-7A49-4668-AF53-21D5C62FD018} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {C1ECD238-7638-4CDF-A84C-30234DFE9758} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-19] (Google Inc -> Google Inc.)
Task: {C840DEE2-2F0F-4E08-909B-E56E2B472426} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Ningún archivo <==== ATENCIÓN
Task: {CB67DF13-1523-4338-B15E-7B19B48859ED} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-03-11] (Adobe Inc. -> Adobe)
Task: {CFBFB199-F260-4908-AC04-AFE24D80C779} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [281720 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {D1AC7ADD-F853-4873-A808-10F9D075551A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [153168 2018-09-19] (Google Inc -> Google Inc.)
Task: {D6E63187-73B3-4487-BE9D-EF99843F29B2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Ningún archivo <==== ATENCIÓN
Task: {E4C8774A-2818-45A4-8A6D-11DDF6348886} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {EA767F44-5477-4A4A-9284-C63C96134F70} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Ningún archivo <==== ATENCIÓN
Task: {F0B69262-93A0-45BB-A855-69F18D7D6559} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Ningún archivo <==== ATENCIÓN
Task: {F262E839-044C-4681-9687-ED19366F6770} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18227896 2020-03-19] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {F4A2CFFD-6B2D-4A27-9262-81E32A6E5FFC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [281720 2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB9B242F-470E-4A79-BA09-766B1A7AB700} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Ningún archivo <==== ATENCIÓN
Task: {FDF64FB3-0FCC-40D0-80CF-4FE6EC6E95C3} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)


==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Tcpip\Parameters: [DhcpNameServer] 212.231.6.7 46.6.113.34 192.168.1.1
Tcpip\..\Interfaces\{cf9c5738-2d69-48ce-ac24-29f84a4e9533}: [DhcpNameServer] 212.231.6.7 46.6.113.34 192.168.1.1
Tcpip\..\Interfaces\{ee2da4c6-32a0-43d0-b8ff-8537c3300384}: [DhcpNameServer] 40.54.1.17

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus13.msn.com/?pc=ASJB
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus13.msn.com/?pc=ASJB
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
======
DownloadDir: C:\Users\Fulgencio\Downloads

FireFox:
========
FF DefaultProfile: 31sszs2p.default
FF ProfilePath: C:\Users\Fulgencio\AppData\Roaming\Mozilla\Firefox\Profiles\31sszs2p.default [2020-04-15]
FF Homepage: Mozilla\Firefox\Profiles\31sszs2p.default -> hxxps://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=hxxps://mail.google.com/mail/?tab%3Dwm&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
FF Notifications: Mozilla\Firefox\Profiles\31sszs2p.default -> hxxps://scjesus-hsscj-alcantarilla.educamos.com
FF Extension: (Firebug) - C:\Users\Fulgencio\AppData\Roaming\Mozilla\Firefox\Profiles\31sszs2p.default\Extensions\[email protected] [2017-03-02] [Heredado]
FF Extension: (JS Print Setup) - C:\Users\Fulgencio\AppData\Roaming\Mozilla\Firefox\Profiles\31sszs2p.default\Extensions\[email protected] [2016-10-03] [Heredado]
FF Extension: (Avast SafePrice) - C:\Users\Fulgencio\AppData\Roaming\Mozilla\Firefox\Profiles\31sszs2p.default\Extensions\[email protected] [2018-06-21] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\Fulgencio\AppData\Roaming\Mozilla\Firefox\Profiles\31sszs2p.default\Extensions\[email protected] [2018-05-27]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_32_0_0_344.dll [2020-03-11] (Adobe Inc. -> )
FF Plugin: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIIPT.dll [2013-07-12] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files\Intel\TXE Components\IPT\npIntelWebAPIUpdater.dll [2013-07-12] (Intel® Identity Protection Technology Software -> Intel Corporation)
FF Plugin: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)

Chrome: 
=======
CHR Profile: C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default [2020-04-15]
CHR Notifications: Default -> hxxps://forospyware.com; hxxps://scjesus-hsscj-alcantarilla.educamos.com; hxxps://www.minijuegos.com
CHR StartupUrls: Default -> "hxxps://www.google.com/gmail/"
CHR Extension: (Presentaciones) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-09-19]
CHR Extension: (Documentos) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-19]
CHR Extension: (Google Drive) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-09-29]
CHR Extension: (YouTube) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-19]
CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-03-20]
CHR Extension: (Hojas de cálculo) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-09-19]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-03-12]
CHR Extension: (Avast Online Security) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-03-01]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-03]
CHR Extension: (Gmail) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-04-29]
CHR Extension: (Chrome Media Router) - C:\Users\Fulgencio\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-03]
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <no encontrado>

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AsHidService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe [130744 2016-07-28] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
S2 BcmBtRSupport; C:\WINDOWS\system32\BtwRSupportService.exe [1677016 2015-12-08] (Broadcom Corporation -> Broadcom Corporation.)
S3 cphs; C:\WINDOWS\system32\IntelCpHeciSvc.exe [299488 2016-05-03] (Intel(R) pGFX -> Intel Corporation)
R2 DptfParticipantProcessorService; C:\WINDOWS\system32\DptfParticipantProcessorService.exe [83408 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R2 DptfPolicyCriticalService; C:\WINDOWS\system32\DptfPolicyCriticalService.exe [97232 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R2 DptfPolicyLpmService; C:\WINDOWS\system32\DptfPolicyLpmService.exe [90576 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [1959232 2020-04-02] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [1959232 2020-04-02] (ESET, spol. s r.o. -> ESET)
R2 HiSuiteOuc.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc.exe [117552 2015-05-20] (Huawei Software Technologies Co., LTD. -> )
R2 HuaweiHiSuiteService.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService.exe [154928 2015-05-20] (Huawei Software Technologies Co., LTD. -> )
R2 igfxCUIService1.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [292832 2016-05-03] (Intel(R) pGFX -> Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [586752 2013-07-01] (Intel(R) Corporation) [Archivo no firmado]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [637912 2013-07-01] (Intel® Trusted Connect Service -> Intel(R) Corporation)
R2 jhi_service; C:\Program Files\Intel\TXE Components\DAL\jhi_service.exe [168216 2014-01-15] (Intel Corporation - Client Components Group -> Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [5547464 2020-04-13] (Malwarebytes Inc -> Malwarebytes)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [486536 2019-07-10] (Geek Software GmbH -> Geek Software GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\NisSrv.exe [1879960 2019-09-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1907.4-0\MsMpEng.exe [82984 2019-09-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S3 AsusSGDrv; C:\WINDOWS\System32\drivers\AsusSGDrv.sys [120312 2015-12-14] (ASUSTeK Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R3 BCMSDH43XX; C:\WINDOWS\system32\DRIVERS\bcmdhd63.sys [302080 2019-03-19] (Microsoft Windows -> Broadcom Corp)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [165376 2019-09-12] (Microsoft Corporation) [Archivo no firmado]
S3 btwampfl; C:\WINDOWS\System32\drivers\btwampfl.sys [162560 2015-12-08] (Broadcom Corporation -> Broadcom Corporation.)
R3 BtwSerialBus; C:\WINDOWS\System32\drivers\BtwSerialBus.sys [139520 2015-12-08] (Broadcom Corporation -> Broadcom Corporation.)
R3 camera; C:\WINDOWS\system32\DRIVERS\iacamera32.sys [712200 2015-12-02] (Intel(R) Intel_ICG -> Intel(R) Corporation)
R3 CM3218x; C:\WINDOWS\System32\drivers\WUDFRd.sys [207360 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
R3 CPLMACPI; C:\WINDOWS\System32\drivers\CPLMACPI.sys [25040 2015-08-27] (Capella Microsystems Inc. -> Capella Microsystems, Inc.)
S3 DptfDevAmbient; C:\WINDOWS\System32\drivers\DptfDevAmbient.sys [44496 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R3 DptfDevDBPT; C:\WINDOWS\System32\drivers\DptfDevPower.sys [25552 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R3 DptfDevDisplay; C:\WINDOWS\System32\drivers\DptfDevDisplay.sys [28112 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R3 DptfDevGen; C:\WINDOWS\System32\drivers\DptfDevGen.sys [36304 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R3 DptfDevProc; C:\WINDOWS\System32\drivers\DptfDevProc.sys [80848 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R3 DptfManager; C:\WINDOWS\System32\drivers\DptfManager.sys [181712 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [131512 2020-04-02] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [91416 2020-04-02] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15288 2020-04-01] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [149600 2020-04-02] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [46480 2020-04-02] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [71208 2020-04-02] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [99488 2020-04-02] (ESET, spol. s r.o. -> ESET)
R3 GPIO; C:\WINDOWS\System32\drivers\iaiogpioe.sys [23552 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 GpioVirtual; C:\WINDOWS\System32\drivers\iaiogpiovirtual.sys [16896 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsHIDSwitch.sys [17416 2015-12-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 iaioi2c; C:\WINDOWS\System32\drivers\iaioi2ce.sys [58368 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 iaiouart; C:\WINDOWS\System32\drivers\iaiouart.sys [87552 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
S3 intaud_WaveExtensible; C:\WINDOWS\system32\drivers\intelaud.sys [44016 2015-12-01] (Intel(R) Wireless Display -> Intel Corporation)
R3 IntelSST; C:\WINDOWS\system32\drivers\isstrtc.sys [259584 2014-04-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel(R) Corporation)
R3 INVN_MotionApps; C:\WINDOWS\System32\drivers\WUDFRd.sys [207360 2019-03-19] (Microsoft Windows -> Microsoft Corporation)
R3 iwdbus; C:\WINDOWS\System32\drivers\iwdbus.sys [35320 2015-12-01] (Intel(R) Wireless Display -> Intel Corporation)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [178952 2020-04-13] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [17352 2020-04-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [213912 2020-04-13] (Malwarebytes Inc -> Malwarebytes)
R0 MBI; C:\WINDOWS\System32\drivers\MBI.sys [21456 2014-03-18] (Intel MCG PIV Tablet Validation -> Intel Corporation)
R3 MT9M114; C:\WINDOWS\System32\drivers\MT9M114.sys [38912 2013-12-02] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 PMIC; C:\WINDOWS\System32\drivers\PMIC.sys [48128 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 rtii2sac; C:\WINDOWS\System32\drivers\rtii2sac.sys [269016 2015-07-16] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
R3 TXEI; C:\WINDOWS\System32\drivers\TXEI.sys [75792 2014-03-18] (Intel Corporation - Client Components Group -> Intel Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [38280 2019-09-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [269024 2019-09-06] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [39136 2019-09-06] (Microsoft Windows -> Microsoft Corporation)
R3 WUDFWpdMtp; C:\WINDOWS\system32\DRIVERS\WUDFRd.sys [207360 2019-03-19] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) ===================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-04-15 19:00 - 2020-04-15 19:01 - 000029654 ____C C:\Users\Fulgencio\Desktop\FRST.txt
2020-04-15 18:59 - 2020-04-15 19:01 - 000000000 ____D C:\FRST
2020-04-15 18:56 - 2020-04-15 18:51 - 002009600 ____C (Farbar) C:\Users\Fulgencio\Desktop\FRST.exe
2020-04-15 18:50 - 2020-04-15 18:51 - 002009600 _____ (Farbar) C:\Users\Fulgencio\Downloads\FRST.exe
2020-04-13 23:00 - 2020-04-13 23:00 - 000142386 _____ C:\Users\Fulgencio\Downloads\cc_20200413_230016.reg
2020-04-13 22:53 - 2020-04-13 22:53 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-04-13 22:53 - 2020-04-13 22:53 - 000002894 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2020-04-13 22:53 - 2020-04-13 22:53 - 000001040 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-04-13 22:53 - 2020-04-13 22:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-04-13 22:53 - 2020-04-13 22:53 - 000000000 ____D C:\Program Files\CCleaner
2020-04-13 22:51 - 2020-04-13 22:52 - 022267336 _____ (Piriform Software Ltd) C:\Users\Fulgencio\Downloads\ccsetup565.exe
2020-04-13 22:41 - 2020-04-13 22:41 - 000002018 _____ C:\Users\Public\Desktop\ESET Protección de pagos y banca online.lnk
2020-04-13 22:37 - 2020-04-13 22:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2020-04-13 22:37 - 2020-04-13 22:37 - 000000000 ____D C:\ProgramData\ESET
2020-04-13 22:37 - 2020-04-13 22:37 - 000000000 ____D C:\Program Files\ESET
2020-04-13 22:32 - 2020-04-13 22:32 - 000213912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-04-13 22:19 - 2020-04-13 22:19 - 010442848 _____ (ESET) C:\Users\Fulgencio\Downloads\avremover_nt32_enu.exe
2020-04-13 22:17 - 2020-04-13 22:17 - 000003826 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2020-04-13 22:17 - 2020-04-13 22:17 - 000003384 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2020-04-13 22:16 - 2020-04-13 22:16 - 000004510 _____ C:\Users\Fulgencio\Downloads\detecciones esset.txt
2020-04-13 20:25 - 2020-04-13 22:34 - 000000722 ____C C:\Users\Fulgencio\Desktop\ESET Online Scanner.lnk
2020-04-13 20:24 - 2020-04-13 22:38 - 000000000 ____D C:\Users\Fulgencio\AppData\Local\ESET
2020-04-13 20:24 - 2020-04-13 20:24 - 000000821 ____C C:\Users\Fulgencio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2020-04-13 20:23 - 2020-04-13 20:26 - 014566496 _____ (ESET spol. s r.o.) C:\Users\Fulgencio\Downloads\esetonlinescanner_enu.exe
2020-04-13 20:07 - 2020-04-13 20:07 - 000000848 _____ C:\Users\Fulgencio\AppData\Local\recently-used.xbel
2020-04-13 16:07 - 2020-04-13 16:07 - 001585833 _____ C:\Users\Fulgencio\Downloads\receta de lengua Pablo (1).pptx
2020-04-13 14:42 - 2020-04-13 14:42 - 001569046 _____ C:\Users\Fulgencio\Downloads\receta de lengua Pablo.pptx
2020-04-13 14:42 - 2020-04-13 14:42 - 001569046 _____ C:\Users\Fulgencio\Downloads\receta de lengua Pablo.ppsx
2020-04-13 14:18 - 2020-04-13 14:18 - 000000000 ___HD C:\$SysReset
2020-04-13 13:37 - 2020-04-13 13:40 - 000000000 ____D C:\AdwCleaner
2020-04-13 13:36 - 2020-04-14 12:26 - 000000175 _____ C:\Users\Fulgencio\Downloads\contra el malware.txt
2020-04-13 13:34 - 2020-04-13 13:36 - 008196784 _____ (Malwarebytes) C:\Users\Fulgencio\Downloads\adwcleaner_8.0.4.exe
2020-04-13 13:30 - 2020-04-13 13:30 - 000002620 ____C C:\Users\Fulgencio\Documents\report_malware.txt
2020-04-13 12:27 - 2020-04-13 12:28 - 000000000 ____D C:\WINDOWS\Minidump
2020-04-13 12:05 - 2020-04-13 12:05 - 000000000 ____D C:\Users\Fulgencio\AppData\Local\mbam
2020-04-13 12:05 - 2020-04-13 12:05 - 000000000 ____D C:\Users\Fulgencio\AppData\Local\cache
2020-04-13 12:04 - 2020-04-13 12:04 - 000178952 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-04-13 12:04 - 2020-04-13 12:04 - 000002023 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-04-13 12:04 - 2020-04-13 12:04 - 000000000 ____D C:\Users\Fulgencio\AppData\Local\mbamtray
2020-04-13 12:04 - 2020-04-13 12:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2020-04-13 12:04 - 2020-04-13 12:03 - 000129056 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae.sys
2020-04-13 12:04 - 2020-04-13 12:03 - 000017352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-04-13 12:03 - 2020-04-13 12:03 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-04-13 12:01 - 2020-04-13 12:01 - 000000000 ____D C:\Program Files\Malwarebytes
2020-04-13 11:53 - 2020-04-13 11:53 - 001965536 _____ (Malwarebytes) C:\Users\Fulgencio\Downloads\MBSetup.exe
2020-04-12 13:36 - 2020-04-12 13:36 - 000000000 ____D C:\Users\Fulgencio\AppData\Local\cloud
2020-04-12 13:31 - 2020-04-13 16:08 - 000003886 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1586691100
2020-04-12 13:29 - 2020-04-12 13:38 - 000000000 ____D C:\Users\Fulgencio\AppData\Local\Opera Software
2020-04-12 13:28 - 2020-04-13 16:08 - 000003624 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1586690913
2020-04-12 13:28 - 2020-04-12 13:28 - 000002507 ____C C:\Users\Fulgencio\Desktop\facebook.lnk
2020-04-12 13:26 - 2020-04-12 13:26 - 000000000 ____D C:\Users\Fulgencio\AppData\Roaming\Opera Software
2020-04-12 13:25 - 2020-04-13 16:08 - 000002912 _____ C:\WINDOWS\system32\Tasks\ATK Package 36D18D69AFC3
2020-04-12 13:25 - 2020-04-13 16:08 - 000002202 _____ C:\WINDOWS\system32\Tasks\ATK Package A22126881260
2020-04-12 13:24 - 2020-04-12 13:24 - 000000000 ____D C:\Users\Fulgencio\.cache
2020-04-12 13:24 - 2014-09-10 18:14 - 000163480 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000660120 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomct2.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000617896 _____ (Microsoft Corporation) C:\WINDOWS\system32\comctl32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000444328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MShflxgd.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000416408 _____ (Microsoft Corporation ) C:\WINDOWS\system32\comct332.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000279192 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatgrd.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000259736 _____ (Microsoft Corporation) C:\WINDOWS\system32\msflxgrd.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000253080 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdatlst.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000222360 _____ (Microsoft Corporation) C:\WINDOWS\system32\tabctl32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000219288 _____ (Microsoft Corporation) C:\WINDOWS\system32\richtx32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000218776 _____ (Microsoft Corporation) C:\WINDOWS\system32\dblist32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000212112 _____ (Microsoft Corporation) C:\WINDOWS\system32\mci32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000179352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmask32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000170920 _____ (Microsoft Corporation) C:\WINDOWS\system32\comct232.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000131728 _____ (Microsoft Corporation) C:\WINDOWS\system32\msinet.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000130712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msstdfmt.dll
2020-04-12 13:24 - 2013-11-25 15:27 - 000127640 _____ (Microsoft Corporation) C:\WINDOWS\system32\mswinsck.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000119960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mscomm32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000108696 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSSTKPRP.DLL
2020-04-12 13:24 - 2013-11-25 15:27 - 000104088 _____ (Microsoft Corporation) C:\WINDOWS\system32\picclp32.ocx
2020-04-12 13:24 - 2013-11-25 15:27 - 000084624 _____ (Microsoft Corporation) C:\WINDOWS\system32\sysinfo.ocx
2020-04-12 13:24 - 2011-01-12 21:36 - 001054208 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71u.dll
2020-04-12 13:24 - 2011-01-12 21:25 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71DEU.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71ITA.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71FRA.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71ESP.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71ENU.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71KOR.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71JPN.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71CHT.DLL
2020-04-12 13:24 - 2011-01-12 21:25 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71CHS.DLL
2020-04-12 13:24 - 2011-01-12 21:19 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFC71.dll
2020-04-12 13:24 - 2011-01-12 20:53 - 000090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl71.dll
2020-04-12 13:24 - 2008-04-15 14:00 - 001355776 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvbvm50.dll
2020-04-12 13:24 - 2007-02-01 18:13 - 000503808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll
2020-04-12 13:24 - 2007-02-01 15:11 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll
2020-04-12 13:24 - 2007-01-30 18:04 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll
2020-04-12 13:24 - 2006-08-25 22:28 - 001017344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70u.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70ita.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70fra.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70esp.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70deu.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70enu.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70kor.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70jpn.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70cht.dll
2020-04-12 13:24 - 2006-08-25 22:15 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70chs.dll
2020-04-12 13:24 - 2006-08-25 22:07 - 001024000 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc70.dll
2020-04-12 13:24 - 2006-08-25 21:17 - 000086016 _____ (Microsoft Corporation) C:\WINDOWS\system32\atl70.dll
2020-04-12 13:24 - 2005-01-20 17:25 - 000054784 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvci70.dll
2020-04-12 13:24 - 2002-01-05 03:40 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVCP70.DLL
2020-04-12 13:24 - 1996-01-12 02:00 - 000722192 _____ (Microsoft Corporation) C:\WINDOWS\system32\Vb40032.dll
2020-04-12 13:24 - 1994-11-17 23:00 - 000210944 _____ C:\WINDOWS\system32\msvcrt10.dll
2020-04-12 13:12 - 2015-12-02 21:33 - 009999368 _____ C:\WINDOWS\system32\pvl.dll
2020-04-12 13:12 - 2015-12-02 21:33 - 009368080 _____ C:\WINDOWS\system32\libia_cp.dll
2020-04-12 13:12 - 2015-12-02 21:33 - 005180944 _____ (Intel Corporation) C:\WINDOWS\system32\IntelCameraPlugin.dll
2020-04-12 13:12 - 2015-12-02 21:33 - 000712200 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\iacamera32.sys
2020-04-12 13:12 - 2015-12-02 21:33 - 000624648 _____ (Intel Corporation) C:\WINDOWS\system32\libjpegencoder.dll
2020-04-12 13:12 - 2015-12-02 21:33 - 000145936 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSocYuvCopy.dll
2020-04-12 13:12 - 2015-12-02 21:31 - 000277000 _____ (Intel Corporation) C:\WINDOWS\system32\cilkrts20_32.dll
2020-04-12 13:12 - 2015-12-02 21:26 - 010925920 _____ C:\WINDOWS\system32\Drivers\isp_firmware.bin
2020-04-12 13:12 - 2015-12-02 21:26 - 000014454 _____ C:\WINDOWS\system32\Drivers\mute.bmp
2020-04-12 13:10 - 2020-04-12 13:10 - 010577718 _____ C:\Users\Fulgencio\Downloads\20783360_ca3553f974bff0dc52a8e0a0042e6d954d93fae4.cab
2020-04-12 13:10 - 2020-04-12 13:10 - 000000000 ____D C:\Users\Fulgencio\Downloads\20783360_ca3553f974bff0dc52a8e0a0042e6d954d93fae4
2020-04-12 13:04 - 2020-04-12 13:04 - 000000000 ____D C:\Users\Fulgencio\Downloads\Intel AVStream Camera
2020-04-12 13:03 - 2020-04-12 13:03 - 023127368 _____ C:\Users\Fulgencio\Downloads\44e84282-2bb8-4c28-9b80-045bc1eed9b9_2d2ec6b10fc1a6c002c521b1a1f86ad27586a275.cab
2020-04-11 19:25 - 2020-04-11 19:25 - 000000000 ___DC C:\Users\Fulgencio\Documents\Grabaciones de sonido
2020-04-11 19:24 - 2020-04-11 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2020-04-11 19:24 - 2015-05-08 07:13 - 001003224 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\RtI2SExD.DLL
2020-04-11 19:24 - 2015-02-24 05:08 - 000010717 _____ C:\WINDOWS\system32\Drivers\Out_V_8.dat
2020-04-11 19:24 - 2015-02-24 04:59 - 000010129 _____ C:\WINDOWS\system32\Drivers\In_V_8.dat
2020-04-11 19:21 - 2020-04-11 19:21 - 000000000 ____D C:\Users\Fulgencio\Downloads\SOCPackage_Intel_Win10_32_VER004
2020-04-11 19:21 - 2020-04-11 19:21 - 000000000 ____D C:\Users\Fulgencio\Downloads\ATKPackage_Win10_32_VER100050
2020-04-11 19:20 - 2020-04-11 19:20 - 000000000 ____D C:\Users\Fulgencio\Downloads\WirelessRadioControl_Win10_32_VER1005
2020-04-11 19:20 - 2020-04-11 19:20 - 000000000 ____D C:\Users\Fulgencio\Downloads\Winflash_Win10_32_VER310
2020-04-11 19:20 - 2020-04-11 19:20 - 000000000 ____D C:\Users\Fulgencio\Downloads\SmartGesture_Win10_32_VER4012
2020-04-11 19:20 - 2020-04-11 19:20 - 000000000 ____D C:\Users\Fulgencio\Downloads\Bluetooth_Broadcom_Win10_32_VER1201722
2020-04-11 19:20 - 2020-04-11 19:20 - 000000000 ____D C:\Users\Fulgencio\Downloads\ASUS_LiveUpdate_Win7_32_64_Win81_64_Win10_64_VER341
2020-04-11 19:18 - 2020-04-11 19:18 - 000000000 ____D C:\Users\Fulgencio\Downloads\G_Sensor_Invensense_Win10_32_VER8486120
2020-04-11 19:18 - 2020-04-11 19:18 - 000000000 ____D C:\Users\Fulgencio\Downloads\Audio_Realtek_Win10_32_VER64101474290
2020-04-11 19:15 - 2020-04-11 19:15 - 004962929 _____ C:\Users\Fulgencio\Downloads\Bluetooth_Broadcom_Win10_32_VER1201722.zip
2020-04-11 19:14 - 2020-04-11 19:15 - 088218256 _____ C:\Users\Fulgencio\Downloads\SOCPackage_Intel_Win10_32_VER004.zip
2020-04-11 19:14 - 2020-04-11 19:15 - 011821597 _____ C:\Users\Fulgencio\Downloads\ATKPackage_Win10_32_VER100050.zip
2020-04-11 19:13 - 2020-04-11 19:14 - 056345646 _____ C:\Users\Fulgencio\Downloads\SmartGesture_Win10_32_VER4012.zip
2020-04-11 19:13 - 2020-04-11 19:14 - 000987674 _____ C:\Users\Fulgencio\Downloads\Winflash_Win10_32_VER310.zip
2020-04-11 19:13 - 2020-04-11 19:13 - 009135430 _____ C:\Users\Fulgencio\Downloads\ASUS_LiveUpdate_Win7_32_64_Win81_64_Win10_64_VER341.zip
2020-04-11 19:13 - 2020-04-11 19:13 - 002751510 _____ C:\Users\Fulgencio\Downloads\G_Sensor_Invensense_Win10_32_VER8486120.zip
2020-04-11 19:13 - 2020-04-11 19:13 - 000141484 _____ C:\Users\Fulgencio\Downloads\WirelessRadioControl_Win10_32_VER1005.zip
2020-04-11 19:12 - 2020-04-11 19:13 - 038854206 _____ C:\Users\Fulgencio\Downloads\Audio_Realtek_Win10_32_VER64101474290.zip
2020-04-11 19:12 - 2020-04-11 19:12 - 002976084 _____ C:\Users\Fulgencio\Downloads\T100TANAS300.zip
2020-04-09 19:01 - 2020-04-09 09:57 - 000005067 _____ C:\Users\Fulgencio\Downloads\Comprensión lectora.csv
2020-04-09 18:57 - 2020-04-09 18:57 - 000001096 _____ C:\Users\Fulgencio\Downloads\Comprensión lectora.csv.zip
2020-04-02 22:42 - 2020-04-02 22:43 - 001757311 _____ C:\Users\Fulgencio\Downloads\Comprension_lectora_61.pdf
2020-04-02 13:43 - 2020-04-02 13:43 - 000149600 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2020-04-02 13:43 - 2020-04-02 13:43 - 000131512 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2020-04-02 13:43 - 2020-04-02 13:43 - 000099488 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2020-04-02 13:43 - 2020-04-02 13:43 - 000091416 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2020-04-02 13:43 - 2020-04-02 13:43 - 000071208 _____ (ESET) C:\WINDOWS\system32\Drivers\epfw.sys
2020-04-02 13:43 - 2020-04-02 13:43 - 000046480 _____ (ESET) C:\WINDOWS\system32\Drivers\ekbdflt.sys
2020-04-01 15:27 - 2020-04-01 15:27 - 000015288 _____ (ESET) C:\WINDOWS\system32\Drivers\eelam.sys
2020-03-31 13:18 - 2020-03-31 13:18 - 000104769 _____ C:\Users\Fulgencio\Downloads\Códigos Google Classroom 1º B.pdf
2020-03-30 00:10 - 2020-03-30 00:10 - 002506984 _____ (Intel) C:\Users\Fulgencio\Downloads\Intel-Driver-and-Support-Assistant-Installer.exe
2020-03-26 18:52 - 2020-03-26 18:52 - 000123469 _____ C:\Users\Fulgencio\Downloads\image3.jpeg
2020-03-26 18:51 - 2020-03-26 18:51 - 000276361 _____ C:\Users\Fulgencio\Downloads\image2.jpeg
2020-03-26 18:50 - 2020-03-26 18:50 - 000375792 _____ C:\Users\Fulgencio\Downloads\image1.jpeg
2020-03-25 21:53 - 2020-03-25 21:53 - 000220512 _____ C:\Users\Fulgencio\Downloads\SCJ_1_2_3__ESO_Final_v5_20200325_091229.pdf
2020-03-25 21:50 - 2020-03-25 21:50 - 000200155 _____ C:\Users\Fulgencio\Downloads\SCJ_Primaria_Hist_rico_V4_20200325_090601.pdf
2020-03-24 10:11 - 2020-03-24 10:11 - 000020569 _____ C:\Users\Fulgencio\Downloads\Calificaciones-6PrimariaBIngles-BigBrightIdeasDigitalClassBook6.xlsx
2020-03-23 22:10 - 2020-03-23 22:10 - 000000000 ____D C:\WINDOWS\Panther
2020-03-23 12:44 - 2020-03-23 12:44 - 000353309 ____C C:\Users\Fulgencio\Documents\autorizacion2_jimena.jpeg
2020-03-23 12:42 - 2020-03-23 12:42 - 000417235 ____C C:\Users\Fulgencio\Documents\autorizacion1_jimena.jpeg
2020-03-23 12:34 - 2020-03-23 12:34 - 000020940 _____ C:\Users\Fulgencio\Downloads\Permiso videoconferencia.pdf
2020-03-23 12:33 - 2020-03-23 12:33 - 000020225 _____ C:\Users\Fulgencio\Downloads\Autorización envío de vídeos.pdf
2020-03-17 17:59 - 2020-03-17 17:59 - 002514681 _____ C:\Users\Fulgencio\Downloads\ACTIVIDADES 1º ESO B.pdf
2020-03-16 14:28 - 2020-03-16 14:28 - 000299249 _____ C:\Users\Fulgencio\Downloads\Tareas periodo cuarentena.pdf
2020-03-16 13:18 - 2020-03-16 13:18 - 000844211 _____ C:\Users\Fulgencio\Downloads\3796 (2).pdf
2020-03-16 13:18 - 2020-03-16 13:18 - 000844211 _____ C:\Users\Fulgencio\Downloads\3796 (1).pdf

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-04-15 19:01 - 2019-03-19 04:46 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-04-15 18:59 - 2019-03-19 04:44 - 000000000 ____D C:\WINDOWS\INF
2020-04-15 17:34 - 2019-09-06 00:27 - 000005350 _____ C:\WINDOWS\system32\Tasks\Microsoft Office 15 Sync Maintenance for ALMELA-DEPABLO-Fulgencio Almela-DePablo
2020-04-15 16:42 - 2018-06-27 17:35 - 000000000 ___DC C:\Users\Fulgencio\AppData\Local\CrashDumps
2020-04-15 16:41 - 2015-07-06 11:10 - 000000000 __SHD C:\Users\Fulgencio\IntelGraphicsProfiles
2020-04-13 23:54 - 2019-09-05 23:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-04-13 22:38 - 2019-03-19 04:46 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-04-13 22:37 - 2019-09-06 00:12 - 001773362 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-04-13 22:37 - 2019-03-19 09:13 - 000791182 _____ C:\WINDOWS\system32\perfh00A.dat
2020-04-13 22:37 - 2019-03-19 09:13 - 000156738 _____ C:\WINDOWS\system32\perfc00A.dat
2020-04-13 22:33 - 2019-03-19 04:46 - 000000000 ___HD C:\Program Files\WindowsApps
2020-04-13 22:33 - 2019-03-19 04:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-04-13 22:31 - 2019-09-06 00:27 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-04-13 22:31 - 2015-08-17 10:09 - 000000000 ____D C:\ProgramData\AVAST Software
2020-04-13 22:30 - 2019-03-19 04:35 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2020-04-13 22:29 - 2019-09-06 00:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2020-04-13 21:05 - 2016-10-16 11:08 - 000000000 ___DC C:\Users\Fulgencio\Desktop\Cosas
2020-04-13 20:07 - 2015-07-27 23:34 - 000000000 ___DC C:\Users\Fulgencio\AppData\Local\gtk-2.0
2020-04-13 20:07 - 2015-07-27 23:30 - 000000000 ____D C:\Users\Fulgencio\.gimp-2.8
2020-04-13 16:08 - 2019-09-06 00:27 - 000003782 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-04-13 16:08 - 2019-09-06 00:27 - 000003538 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2020-04-13 16:08 - 2019-09-06 00:27 - 000003378 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{D908F419-9AA1-4F3E-9B11-96C5A3F3C74F}
2020-04-13 16:08 - 2019-09-06 00:27 - 000003368 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{D2A81F76-83B3-4451-9D08-54282AC7F855}
2020-04-13 16:08 - 2019-09-06 00:27 - 000003368 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{B3B252C6-0C57-470A-9E1F-4FEE1E091C28}
2020-04-13 16:08 - 2019-09-06 00:27 - 000003314 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2020-04-13 16:08 - 2019-09-06 00:27 - 000003286 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player Updater
2020-04-13 16:08 - 2019-09-06 00:27 - 000002880 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4115032977-3466903609-2032280098-1005
2020-04-13 16:08 - 2019-09-06 00:27 - 000002878 _____ C:\WINDOWS\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-4115032977-3466903609-2032280098-500
2020-04-13 16:08 - 2019-09-06 00:27 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4115032977-3466903609-2032280098-1001
2020-04-13 16:08 - 2019-09-06 00:27 - 000002476 _____ C:\WINDOWS\system32\Tasks\ASUS Patch for Touch Panel
2020-04-13 16:07 - 2018-01-20 12:01 - 000000000 ___DC C:\Users\Fulgencio\AppData\Local\Packages
2020-04-13 13:41 - 2016-10-14 14:16 - 000000000 ____D C:\Program Files\ASUS
2020-04-13 13:40 - 2018-04-11 22:36 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2020-04-13 13:40 - 2014-05-30 16:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2020-04-13 13:11 - 2016-10-16 11:20 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
2020-04-13 13:05 - 2019-09-06 00:01 - 000000000 ____D C:\Users\Fulgencio
2020-04-13 12:16 - 2019-03-19 04:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-04-12 13:24 - 2019-03-19 04:46 - 000000000 ____D C:\WINDOWS\System
2020-04-12 12:49 - 2018-07-13 11:43 - 000000000 ___DC C:\Users\Fulgencio\AppData\Local\D3DSCache
2020-04-12 12:41 - 2018-05-18 00:06 - 000000000 ___DC C:\Users\Fulgencio\AppData\Local\PlaceholderTileLogoFolder
2020-04-12 12:34 - 2019-03-19 04:35 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-04-08 17:32 - 2018-09-19 18:39 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-04-08 17:32 - 2018-09-19 18:39 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-03-31 13:34 - 2017-10-17 23:05 - 000000000 ____D C:\ProgramData\Package Cache
2020-03-31 13:34 - 2017-09-04 10:02 - 000000000 ____D C:\Program Files\Intel
2020-03-30 00:11 - 2014-11-10 20:08 - 000000000 ____D C:\ProgramData\Intel
2020-03-27 18:27 - 2020-03-15 13:32 - 000000000 ____D C:\Users\Fulgencio\AppData\Roaming\NOW TV Player
2020-03-25 13:40 - 2019-03-19 04:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2020-03-23 20:40 - 2015-08-27 02:29 - 000000000 ___DC C:\Users\Fulgencio\AppData\Local\Comms
2020-03-20 12:19 - 2019-09-06 00:01 - 000002427 ____C C:\Users\Fulgencio\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-03-20 12:19 - 2016-10-16 10:27 - 000000000 ___RD C:\Users\Fulgencio\OneDrive

==================== Archivos en la raíz de algunos directorios ========

2015-07-20 19:49 - 2019-11-20 20:10 - 000000600 ____C () C:\Users\Fulgencio\AppData\Roaming\winscp.rnd
2020-04-13 20:07 - 2020-04-13 20:07 - 000000848 _____ () C:\Users\Fulgencio\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================

Fulgencio · 15 Abril, 2020 17:43

Aquí mando el segundo reporte, del archivo Addition.txt. Gracias por todo.

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x86) Versión: 15-04-2020
Ejecutado por Fulgencio (15-04-2020 19:03:00)
Ejecutado desde C:\Users\Fulgencio\Desktop
Microsoft Windows 10 Home Versión 1903 18362.720 (X86) (2019-09-05 22:27:24)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-4115032977-3466903609-2032280098-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4115032977-3466903609-2032280098-503 - Limited - Disabled)
Fulgencio (S-1-5-21-4115032977-3466903609-2032280098-1001 - Administrator - Enabled) => C:\Users\Fulgencio
HomeGroupUser$ (S-1-5-21-4115032977-3466903609-2032280098-1003 - Limited - Enabled)
Invitado (S-1-5-21-4115032977-3466903609-2032280098-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-4115032977-3466903609-2032280098-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: ESET Security (Disabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: ESET Cortafuegos (Enabled) {B066057A-E576-007C-D591-56C163D3B33B}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

Adobe Flash Player 32 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 32.0.0.344 - Adobe)
Arduino (HKLM\...\Arduino) (Version: 1.8.5 - Arduino LLC)
ATK Package (HKLM\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0050 - ASUS)
Audacity 2.1.0 (HKLM\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Bandizip (HKLM\...\Bandizip) (Version: 6.20 - Bandisoft.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform)
Conceptronic 54Mbps Wireless Utility (HKLM\...\{72EBA4A9-25D7-4F86-AB6D-0848C74CC3F8}) (Version:  - Conceptronic) Hidden
Conceptronic 54Mbps Wireless Utility (HKLM\...\InstallShield_{72EBA4A9-25D7-4F86-AB6D-0848C74CC3F8}) (Version:  - Conceptronic)
Eines de correcció del Microsoft Office 2013: català (HKLM\...\{90150000-001F-0403-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
EPSON S22 Series Printer Uninstall (HKLM\...\EPSON S22 Series) (Version:  - SEIKO EPSON Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version:  - )
ESET Security (HKLM\...\{611A87D0-CEA9-4027-9241-64871F384FF6}) (Version: 13.1.21.0 - ESET, spol. s r.o.)
Ferramentas de verificación de Microsoft Office 2013 - Galego (HKLM\...\{90150000-001F-0456-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM\...\Google Chrome) (Version: 80.0.3987.163 - Google LLC)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
HiSuite (HKLM\...\Hi Suite) (Version: 41.003.55.00.06 - Huawei Technologies Co.,Ltd)
HxD Hex Editor 2.3 (HKLM\...\HxD_is1) (Version: 2.3 - Maël Hörz)
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 1.0.0.1064 - Intel Corporation)
LAME v3.99.3 (for Windows) (HKLM\...\LAME_is1) (Version:  - )
Malwarebytes version 4.1.0.56 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.0.56 - Malwarebytes)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Notepad++ (32-bit x86) (HKLM\...\Notepad++) (Version: 7.6.6 - Notepad++ Team)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Paquete de controladores de Windows - ASUS (AsusSGDrv) Mouse  (11/11/2015 8.0.0.23) (HKLM\...\FF0137EA2940E916D51DA702B6425126CC7C89BF) (Version: 11/11/2015 8.0.0.23 - ASUS)
PDF24 Creator 8.9.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version:  - PDF24.org)
Realtek I2S Audio (HKLM\...\{89A448AA-3301-46AA-AFC3-34F2D7C670E8}) (Version: 6.4.10147.4290 - Realtek Semiconductor Corp.)
Revisores de Texto do Microsoft Office 2013 – Português do Brasil (HKLM\...\{90150000-001F-0416-0000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Sky Player 6.8.0.0 (HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\com.bskyb.skyplayer_is1) (Version: 6.8.0.0 - Sky)
Smart View (HKLM\...\{5F8A3D28-643E-4062-80C9-37AD463EB61D}) (Version: 1.0.0.0 - Samsung )
SopCast 4.2.0 (HKLM\...\SopCast) (Version: 4.2.0 - www.sopcast.com)
Spotify (HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\Spotify) (Version: 1.0.99.250.g936eab8d - Spotify AB)
Stellarium 0.16.1 (HKLM\...\Stellarium_is1) (Version: 0.16.1 - Stellarium team)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Windows 10 Update and Privacy Settings (HKLM\...\{542CC2C2-ABAF-4604-8723-DA296AF74540}) (Version: 1.0.14.0 - Microsoft Corporation)
WinFlash (HKLM\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinSCP 5.15.3 (HKLM\...\winscp3_is1) (Version: 5.15.3 - Martin Prikryl)

Packages:
=========
ASUS Welcome -> C:\Program Files\WindowsApps\B9ECED6F.ASUSWelcome_1.0.1.0_x86__qmba6cd70vzyy [2015-08-27] (ASUSTeK COMPUTER INC.)
Cadena Ser -> C:\Program Files\WindowsApps\PrisaRadio.CadenaSer_1.0.0.5_neutral__k0tchf90ctc66 [2015-11-25] (Prisa Radio)
Complemento de Fotos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x86__8wekyb3d8bbwe [2019-04-13] (Microsoft Corporation)
Flipboard -> C:\Program Files\WindowsApps\Flipboard.Flipboard_2.1.3.0_neutral__3f5azkryzdbc4 [2017-07-19] (Flipboard)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1.671.0_x86__v10z8vjag6ke6 [2020-02-08] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-13] (Microsoft Corporation) [MS Ad]
Microsoft News: Noticias destacadas en español -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x86__8wekyb3d8bbwe [2020-03-26] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x86__8wekyb3d8bbwe [2020-03-02] (Microsoft Studios) [MS Ad]
MSN El Tiempo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x86__8wekyb3d8bbwe [2020-03-26] (Microsoft Corporation) [MS Ad]
MSN Recetas -> C:\Program Files\WindowsApps\Microsoft.BingFoodAndDrink_3.0.4.336_x86__8wekyb3d8bbwe [2015-08-27] (Microsoft Corporation) [MS Ad]
MSN Viajes -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x86__8wekyb3d8bbwe [2015-08-27] (Microsoft Corporation) [MS Ad]
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.Twitter_6.1.4.1000_neutral__wgeqdkkx372wm [2018-09-11] (Twitter Inc.)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-4115032977-3466903609-2032280098-1001_Classes\CLSID\{5B69A6B4-393B-459C-8EBB-214237A9E7AC}\InprocServer32 -> C:\Program Files\Bandizip\bdzshl32.dll (Bandisoft -> Bandisoft.com)
CustomCLSID: HKU\S-1-5-21-4115032977-3466903609-2032280098-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-4115032977-3466903609-2032280098-1001_Classes\CLSID\{E7629152-0A34-4487-B787-5D1144304455}\localserver32 -> no ruta de acceso de archivo
ShellIconOverlayIdentifiers: [!AsusWSShellExt_BN] -> {CC5FC992-B0AA-47CD-9DC2-83445083CBB9} => C:\Program Files\Common Files\AWS\2.2.2.524\ASUSWSShellExt.dll [2014-11-18] (ASUS Cloud Corporation.) [Archivo no firmado]
ShellIconOverlayIdentifiers: [!AsusWSShellExt_ON] -> {618A47A2-528B-4D9A-AFC8-97D3233511E3} => C:\Program Files\Common Files\AWS\2.2.2.524\ASUSWSShellExt.dll [2014-11-18] (ASUS Cloud Corporation.) [Archivo no firmado]
ShellIconOverlayIdentifiers: [!AsusWSShellExt_UN] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files\Common Files\AWS\2.2.2.524\ASUSWSShellExt.dll [2014-11-18] (ASUS Cloud Corporation.) [Archivo no firmado]
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Ningún archivo
ContextMenuHandlers1: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2019-01-27] (Notepad++ -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} =>  -> Ningún archivo
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-04-02] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers2: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-04-02] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2326} => C:\Program Files\Common Files\AWS\2.2.2.524\ASUSWSContextMenu.dll [2015-05-31] (ASUS Cloud Corporation -> ASUS Cloud Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-04-13] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} =>  -> Ningún archivo
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} =>  -> Ningún archivo
ContextMenuHandlers4: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Ningún archivo
ContextMenuHandlers5: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Ningún archivo
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\WINDOWS\system32\igfxOSP.dll [2016-05-03] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-04-02] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-04-13] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} =>  -> Ningún archivo
ContextMenuHandlers1_S-1-5-21-4115032977-3466903609-2032280098-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers2_S-1-5-21-4115032977-3466903609-2032280098-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers4_S-1-5-21-4115032977-3466903609-2032280098-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)
ContextMenuHandlers5_S-1-5-21-4115032977-3466903609-2032280098-1001: [AABdzCtx] -> {5B69A6B4-393B-459C-8EBB-214237A9E7AC} => C:\Program Files\Bandizip\bdzshl32.dll [2019-01-17] (Bandisoft -> Bandisoft.com)

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

==================== Módulos cargados (Lista blanca) =============

2014-11-18 10:36 - 2014-11-18 10:36 - 001479680 _____ (ASUS Cloud Corporation.) [Archivo no firmado] C:\Program Files\Common Files\AWS\2.2.2.524\ASUSWSShellExt.dll

==================== Alternate Data Streams (Lista blanca) ========

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\iaioi2ce.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer sitios de confianza/restringidos ==========

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2013-08-22 08:13 - 2019-01-10 13:29 - 000000850 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Intel\TXE Components\TCS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\
HKCU\Environment\\Path -> ;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Fulgencio\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img0.jpg
DNS Servers: 212.231.6.7 - 46.6.113.34
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Firewall de Windows está habilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [UDP Query User{8B1D4A7E-6AA4-4CCB-9454-48F81A07CAB7}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{3C2CBF70-733E-4A3D-92C6-041E562DAABB}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{C899AA6C-FCB0-4B8C-B96E-2E72431508C6}E:\activador\microsoft.toolkit.2.4.5\microsoft toolkit\microsoft toolkit.exe] => (Allow) E:\activador\microsoft.toolkit.2.4.5\microsoft toolkit\microsoft toolkit.exe Ningún archivo
FirewallRules: [TCP Query User{491DA361-80DF-4C09-A4BF-0EC8308EB81B}E:\activador\microsoft.toolkit.2.4.5\microsoft toolkit\microsoft toolkit.exe] => (Allow) E:\activador\microsoft.toolkit.2.4.5\microsoft toolkit\microsoft toolkit.exe Ningún archivo
FirewallRules: [{71814C51-8957-4A3C-9549-01A136BBE022}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A07BDB08-85AA-4147-A9C1-63D81C685000}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ACE224D8-DFF5-4BD8-B2A1-44728E998234}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FB059641-2B65-441B-91DC-8EFFFDC8D787}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{82841A4B-BAF4-4658-85C0-B42D9B3EE5ED}C:\users\fulgencio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fulgencio\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{CBE2C01B-2117-419C-B1E4-B272E67207EE}C:\users\fulgencio\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\fulgencio\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{691CDAEB-14B2-463E-982D-26C2D5B96D2C}C:\program files\sopcast\sopcast.exe] => (Allow) C:\program files\sopcast\sopcast.exe (www.sopcast.com) [Archivo no firmado]
FirewallRules: [UDP Query User{BDBB528D-FB3C-47FC-84E4-3B68145CB483}C:\program files\sopcast\sopcast.exe] => (Allow) C:\program files\sopcast\sopcast.exe (www.sopcast.com) [Archivo no firmado]
FirewallRules: [TCP Query User{B2F639CC-CA30-4620-AB30-ECE55A70A97C}C:\program files\smart view\smart view.exe] => (Allow) C:\program files\smart view\smart view.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{64B7F654-62CC-415E-8451-A63D0FC02C01}C:\program files\smart view\smart view.exe] => (Allow) C:\program files\smart view\smart view.exe () [Archivo no firmado]
FirewallRules: [TCP Query User{1DD07DEC-1334-449F-A214-E9C84BD236FB}C:\users\fulgencio\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\fulgencio\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{D5FC9BF6-030F-4AC9-A042-1A1D16C52174}C:\users\fulgencio\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\fulgencio\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{EC02D28B-D017-4DBF-A71E-7A3D68C17356}C:\program files\arduino\java\bin\javaw.exe] => (Allow) C:\program files\arduino\java\bin\javaw.exe
FirewallRules: [UDP Query User{B4D8E872-27FB-4D4A-AC5D-79C9B27B366C}C:\program files\arduino\java\bin\javaw.exe] => (Allow) C:\program files\arduino\java\bin\javaw.exe
FirewallRules: [TCP Query User{71CA492F-712B-4E06-BBDE-6CB2DA5FD012}C:\program files\arduino\java\bin\javaw.exe] => (Allow) C:\program files\arduino\java\bin\javaw.exe
FirewallRules: [UDP Query User{27A2ED80-02EE-409D-ACBA-2622583B4F7B}C:\program files\arduino\java\bin\javaw.exe] => (Allow) C:\program files\arduino\java\bin\javaw.exe
FirewallRules: [{FAA71CEC-2CA2-468D-936F-1096FA591F3B}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{DDC22631-58F3-411F-8EED-35B4CD19DE92}C:\program files\smart view\smart view.exe] => (Allow) C:\program files\smart view\smart view.exe () [Archivo no firmado]
FirewallRules: [UDP Query User{7E637087-19E2-45F0-A56E-3ECE56104760}C:\program files\smart view\smart view.exe] => (Allow) C:\program files\smart view\smart view.exe () [Archivo no firmado]
FirewallRules: [{55B3E828-0975-4800-85BB-5E3F351EAE07}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Puntos de Restauración =========================

ATENCIÓN: Restaurar Sistema está deshabilitado (Total:28.46 GB) (Free:5.04 GB) (18%)

==================== Dispositivos defectuosos en el Administrador de dispositivos ============


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (04/15/2020 06:46:55 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7924,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/15/2020 05:49:16 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11344,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/15/2020 05:30:18 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (11144,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/15/2020 05:20:10 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (10484,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/15/2020 04:52:07 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (7472,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/15/2020 04:42:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: RtkNGUI.exe, version: 1.0.0.102, time stamp: 0x55406a53
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00717228
Faulting process ID: 0x1ff8
Faulting application start time: 0x01d613340e1da074
Faulting application path: C:\Program Files\Realtek\Audio\AP\RtkNGUI.exe
Faulting module path: unknown
Report ID: adf530be-e013-417c-b5c4-f63f66e13211
Faulting package full name: 
Faulting package-relative application ID:

Error: (04/15/2020 01:48:15 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8680,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/15/2020 12:52:27 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (8548,R,98) TILEREPOSITORYS-1-5-18: Error -1023 (0xfffffc01) occurred while opening logfile C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.


Errores del sistema:
=============
Error: (04/15/2020 04:44:11 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.

Error: (04/15/2020 04:41:25 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Miniport Microsoft Wi-Fi Direct Virtual Adapter #5, {d27e9bee-820b-40b0-8b5c-d021eceeedfb}, had event 74

Error: (04/15/2020 01:55:27 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk2\DR2.

Error: (04/15/2020 01:50:45 PM) (Source: disk) (EventID: 11) (User: )
Description: The driver detected a controller error on \Device\Harddisk1\DR1.

Error: (04/15/2020 12:10:46 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.

Error: (04/15/2020 12:01:03 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.

Error: (04/15/2020 11:58:42 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Miniport Microsoft Wi-Fi Direct Virtual Adapter #5, {d27e9bee-820b-40b0-8b5c-d021eceeedfb}, had event 74

Error: (04/14/2020 10:49:20 PM) (Source: DCOM) (EventID: 10010) (User: NT AUTHORITY)
Description: The server {784E29F4-5EBE-4279-9948-1E8FE941646D} did not register with DCOM within the required timeout.


CodeIntegrity:
===================================

Date: 2020-04-15 19:04:43.077
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 19:04:43.039
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 18:54:39.636
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 18:54:39.609
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\ecmds.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 17:16:34.129
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 17:16:34.088
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 17:16:34.005
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2020-04-15 16:47:31.500
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

==================== Información de la memoria =========================== 

BIOS: American Megatrends Inc. T100TAM.205 07/25/2014
Placa base: ASUSTeK COMPUTER INC. T100TAM
Procesador: Intel(R) Atom(TM) CPU Z3775 @ 1.46GHz
Porcentaje de memoria en uso: 86%
RAM física total: 1933.14 MB
RAM física disponible: 264.47 MB
Virtual total: 3789.14 MB
Virtual disponible: 880.42 MB

==================== Unidades ================================

Drive c: (OS) (Fixed) (Total:28.46 GB) (Free:5.04 GB) NTFS ==>[sistema con componentes de arranque (obtenido de unidad)]
Drive d: (Data1) (Fixed) (Total:465.76 GB) (Free:320.02 GB) NTFS

\\?\Volume{45b6b2ff-eac8-4d1d-8941-2633f48524dc}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (Size: 29.1 GB) (Disk ID: D8BF42DB)

Partition: GPT.

==========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 5FF845B2)

Partition: GPT.

==================== Final  Addition.txt =======================

Miguelgrado · 16 Abril, 2020 10:14

Primeramente debes desinstala o Avast o Eset…No se pueden instalar dos antiviruis.

Segundo,tu disco C esta con muy poco espacio…intenta liberar pues el pc empezara a fallarte.

Usa el liberardor de espacio de windows Boton derecho sobre unidad C- herramientas- liberar espacio, y elimina lo que puedas

Vuelves a usarlo y pulsas sobre archivos del sistema,Se abrirar otra ventana y muy importante, seleccionas la que pone “actualizaciones antiguas de windows”, que seguro tiene unos cuantos Gigas ocupados

Bien… y ahora sigue estos pasos, MUY Importante ~ Realiza una copia de seguridad del registro :

Para hacerlo descarga Delfix en tu escritorio.
Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona "Ejecutar como Administrador.")
Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO
Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

En el equipo con los demas programas cerrados:

Inicio >>> Ejecutar >>>Escribes notepad.exe.

Ahora copia y pega estos archivos dentro del Notepad:


Start
CreateRestorePoint:
CloseProcesses:

HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\MountPoints2: {8cddfbf3-2596-11ea-981c-c8f3a13c11ae} - "E:\HiSuiteDownLoader.exe" 
GroupPolicyUsers\S-1-5-21-4115032977-3466903609-2032280098-1001\User: Restricción <==== ATENCIÓN
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
Task: {0A9D9320-68E6-4B3D-93CB-DF85FBD038D4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Ningún archivo <==== ATENCIÓN
Task: {0FBBE090-8719-4181-8AA4-3B58287CD5C4} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Ningún archivo <==== ATENCIÓN
Task: {117A4509-CCC6-4A70-A575-FEA58C55F24E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Ningún archivo <==== ATENCIÓN
Task: {24CA3224-F490-402C-89DF-AE7F748E20DF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Ningún archivo <==== ATENCIÓN
Task: {31E34E86-EFF1-41EE-96DF-2F38E414E093} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Ningún archivo <==== ATENCIÓN
Task: {5C874D47-3003-4A56-B6F7-B14BD4D79BD7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Ningún archivo <==== ATENCIÓN
Task: {67B95015-9BEC-4202-8885-972D9D81A878} - \Microsoft\Windows\UNP\RunCampaignManager -> Ningún archivo <==== ATENCIÓN
Task: {A687407A-F7FB-40BA-B56B-CE4D58AD31EE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Ningún archivo <==== ATENCIÓN
Task: {C840DEE2-2F0F-4E08-909B-E56E2B472426} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Ningún archivo <==== ATENCIÓN
Task: {D6E63187-73B3-4487-BE9D-EF99843F29B2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Ningún archivo <==== ATENCIÓN
Task: {EA767F44-5477-4A4A-9284-C63C96134F70} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Ningún archivo <==== ATENCIÓN
Task: {F0B69262-93A0-45BB-A855-69F18D7D6559} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Ningún archivo <==== ATENCIÓN
Task: {FB9B242F-470E-4A79-BA09-766B1A7AB700} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Ningún archivo <==== ATENCIÓN
C:\Users\Fulgencio\AppData\Roaming\DRPsu
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)


HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Lo guardas bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.<<

Nota: Es importante que la Hta Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no no trabajara.

Y ahora usa esta Faq de Windows ¿Cómo iniciar Windows en Modo Seguro (Aplicable a Windows 10)?, para trabajar desde ese modo de windows. (Usa el Metodo 1 y si no puedes, usa el Metodo 2)
Ejecutas Frst.exe.
Presionas el botón Corregir y aguardas a que termine.
La Herramienta guardara el reporte en tu escritorio (Fixlog.txt).

Lo pegas en tu próxima respuesta, comentado como va el problema

Fulgencio · 18 Abril, 2020 21:48

Hola de nuevo. He esperado un par de días deliberadamente para comprobar el funcionamiento del portátil con todo tipo de programas y trabajando. El problema está totalmente solucionado, no me ha vuelto a aparecer aquel autorun en una ventana cmd, etc, etc. Muchas gracias por toda la ayuda prestada en este problema y por los consejos dados aparte. Aquí está el reporte fixlog.txt:

Resultados de la corrección de Farbar Recovery Scan Tool (x86) Versión: 15-04-2020
Ejecutado por Fulgencio (16-04-2020 17:36:32) Run:1
Ejecutado desde C:\Users\Fulgencio\Desktop
Perfiles cargados: Fulgencio (Perfiles disponibles: Fulgencio)
Modo de Inicio: Safe Mode (with Networking)

==============================================

fixlist contenido:
*****************
Start
CreateRestorePoint:
CloseProcesses:

HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\...\MountPoints2: {8cddfbf3-2596-11ea-981c-c8f3a13c11ae} - "E:\HiSuiteDownLoader.exe" 
GroupPolicyUsers\S-1-5-21-4115032977-3466903609-2032280098-1001\User: Restricción <==== ATENCIÓN
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
Task: {0A9D9320-68E6-4B3D-93CB-DF85FBD038D4} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Ningún archivo <==== ATENCIÓN
Task: {0FBBE090-8719-4181-8AA4-3B58287CD5C4} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Ningún archivo <==== ATENCIÓN
Task: {117A4509-CCC6-4A70-A575-FEA58C55F24E} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Ningún archivo <==== ATENCIÓN
Task: {24CA3224-F490-402C-89DF-AE7F748E20DF} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Ningún archivo <==== ATENCIÓN
Task: {31E34E86-EFF1-41EE-96DF-2F38E414E093} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Ningún archivo <==== ATENCIÓN
Task: {5C874D47-3003-4A56-B6F7-B14BD4D79BD7} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Ningún archivo <==== ATENCIÓN
Task: {67B95015-9BEC-4202-8885-972D9D81A878} - \Microsoft\Windows\UNP\RunCampaignManager -> Ningún archivo <==== ATENCIÓN
Task: {A687407A-F7FB-40BA-B56B-CE4D58AD31EE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Ningún archivo <==== ATENCIÓN
Task: {C840DEE2-2F0F-4E08-909B-E56E2B472426} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Ningún archivo <==== ATENCIÓN
Task: {D6E63187-73B3-4487-BE9D-EF99843F29B2} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Ningún archivo <==== ATENCIÓN
Task: {EA767F44-5477-4A4A-9284-C63C96134F70} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Ningún archivo <==== ATENCIÓN
Task: {F0B69262-93A0-45BB-A855-69F18D7D6559} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Ningún archivo <==== ATENCIÓN
Task: {FB9B242F-470E-4A79-BA09-766B1A7AB700} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Ningún archivo <==== ATENCIÓN
C:\Users\Fulgencio\AppData\Roaming\DRPsu
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)


HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************

Error: El punto de restauración solamente puede ser creado en modo normal.
Procesos cerrados correctamente.
HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8cddfbf3-2596-11ea-981c-c8f3a13c11ae} => eliminado correctamente
C:\WINDOWS\system32\GroupPolicyUsers\S-1-5-21-4115032977-3466903609-2032280098-1001\User => movido correctamente
HKLM\SOFTWARE\Policies\Mozilla => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0A9D9320-68E6-4B3D-93CB-DF85FBD038D4}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0A9D9320-68E6-4B3D-93CB-DF85FBD038D4}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0FBBE090-8719-4181-8AA4-3B58287CD5C4}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0FBBE090-8719-4181-8AA4-3B58287CD5C4}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{117A4509-CCC6-4A70-A575-FEA58C55F24E}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{117A4509-CCC6-4A70-A575-FEA58C55F24E}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{24CA3224-F490-402C-89DF-AE7F748E20DF}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{24CA3224-F490-402C-89DF-AE7F748E20DF}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{31E34E86-EFF1-41EE-96DF-2F38E414E093}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{31E34E86-EFF1-41EE-96DF-2F38E414E093}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5C874D47-3003-4A56-B6F7-B14BD4D79BD7}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5C874D47-3003-4A56-B6F7-B14BD4D79BD7}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OfficeSoftwareProtectionPlatform\SvcRestartTask" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{67B95015-9BEC-4202-8885-972D9D81A878}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{67B95015-9BEC-4202-8885-972D9D81A878}" => eliminado correctamente
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A687407A-F7FB-40BA-B56B-CE4D58AD31EE}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A687407A-F7FB-40BA-B56B-CE4D58AD31EE}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C840DEE2-2F0F-4E08-909B-E56E2B472426}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C840DEE2-2F0F-4E08-909B-E56E2B472426}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D6E63187-73B3-4487-BE9D-EF99843F29B2}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D6E63187-73B3-4487-BE9D-EF99843F29B2}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA767F44-5477-4A4A-9284-C63C96134F70}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA767F44-5477-4A4A-9284-C63C96134F70}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F0B69262-93A0-45BB-A855-69F18D7D6559}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F0B69262-93A0-45BB-A855-69F18D7D6559}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FB9B242F-470E-4A79-BA09-766B1A7AB700}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FB9B242F-470E-4A79-BA09-766B1A7AB700}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => eliminado correctamente
"C:\Users\Fulgencio\AppData\Roaming\DRPsu" => no encontrado
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" => valor restaurado correctamente
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" => valor restaurado correctamente
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" => valor restaurado correctamente
HKLM\Software\\Microsoft\Internet Explorer\Main\\"Local Page"="C:\Windows\System32\blank.htm" => valor restaurado correctamente
"HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN" => no encontrado
C:\Program Files\VideoLAN\VLC\npvlc.dll => movido correctamente
"HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN" => no encontrado
"C:\Program Files\VideoLAN\VLC\npvlc.dll" => no encontrado
"HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN" => no encontrado
"C:\Program Files\VideoLAN\VLC\npvlc.dll" => no encontrado
"HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2019-01-10] (VideoLAN" => no encontrado
"C:\Program Files\VideoLAN\VLC\npvlc.dll" => no encontrado
C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-4115032977-3466903609-2032280098-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========


========= netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.


========= Final de CMD: =========


========= ipconfig /renew =========


Windows IP Configuration

No operation can be performed on Wi-Fi while it has its media disconnected.
No operation can be performed on Conexi¢n de  rea local* 3 while it has its media disconnected.
No operation can be performed on Conexi¢n de  rea local* 5 while it has its media disconnected.

========= Final de CMD: =========


========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

Unable to connect to BITS - 0x8007043c

========= Final de CMD: =========


========= netsh advfirewall reset =========

Ok.


========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Ok.


========= Final de CMD: =========


========= netsh int ipv4 reset =========

Resetting Compartment Forwarding, OK!
Resetting Compartment, OK!
Resetting Control Protocol, OK!
Resetting Echo Sequence Request, OK!
Resetting Global, OK!
Resetting Interface, OK!
Resetting Anycast Address, OK!
Resetting Multicast Address, OK!
Resetting Unicast Address, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting Potential, OK!
Resetting Prefix Policy, OK!
Resetting Proxy Neighbor, OK!
Resetting Route, OK!
Resetting Site Prefix, OK!
Resetting Subinterface, OK!
Resetting Wakeup Pattern, OK!
Resetting Resolve Neighbor, OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Restart the computer to complete this action.


========= Final de CMD: =========


========= netsh int ipv6 reset =========

Resetting Compartment Forwarding, OK!
Resetting Compartment, OK!
Resetting Control Protocol, OK!
Resetting Echo Sequence Request, OK!
Resetting Global, OK!
Resetting Interface, OK!
Resetting Anycast Address, OK!
Resetting Multicast Address, OK!
Resetting Unicast Address, OK!
Resetting Neighbor, OK!
Resetting Path, OK!
Resetting Potential, OK!
Resetting Prefix Policy, OK!
Resetting Proxy Neighbor, OK!
Resetting Route, OK!
Resetting Site Prefix, OK!
Resetting Subinterface, OK!
Resetting Wakeup Pattern, OK!
Resetting Resolve Neighbor, OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , failed.
Access is denied.

Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Resetting , OK!
Restart the computer to complete this action.


========= Final de CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 10248192 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 16899421 B
Java, Flash, Steam htmlcache => 1154 B
Windows/system/drivers => 2812609 B
Edge => 1577946 B
Chrome => 425489226 B
Firefox => 23120588 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
LocalService => 66596 B
NetworkService => 66596 B
Fulgencio => 17217191 B

RecycleBin => 0 B
EmptyTemp: => 474.5 MB datos temporales Eliminados.

================================


El sistema necesita reiniciarse.

==== Final  Fixlog 17:37:34 ====

Además, he usado el liberador de espacio de Windows, efectivamente tenía archivos de Windows Update ocupando mucho espacio, entre otras cosas. Otro tema es el del antivirus, ya desinstalé anteriormente Avast e instalé Esset. Si aparecía algo de Avast en el registro debe ser porque el programa haya dejado rastros.

Lo dicho, un saludo y de nuevo, muchas gracias.

MIXU · 15 Enero, 2023 14:34

Una publicación ha sido separada a un nuevo tema: ForoSpyware Problema tras instalar DriverPack Solution