Hola. Necesito ayuda. Mi portatil tarda mucho en iniciarse y en abrir el navegador(sobre todo la primera vez). Al abrir programas o el navegar, sobre todo si lo hago deprisa tardar mas en abrirse o dejan de responder. Le he pasado el Malwarebytes y ha salido bien. El sistema operativo es windows 7 home premiun. El navegador que uso es google chrome.
Hola @alrrudi
Cuanta Ram tiene ese equipo?
Realiza lo siguiente:
1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.
2.- Descarga Farbar Recovery Scan Tool. en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de su equipo. >> Como saber si mi Windows es de 32 o 64 bits.?
- Ejecuta FRST.exe.
- En el mensaje de la ventana del Disclaimer, pulsamos Yes
- En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.
- Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.
Guía: Como Ejecutar FRST
3.- En tu próxima respuesta, pega los reportes generados.
Guía : ¿Como Pegar reportes en el Foro?
Esperamos esos reporte.
Salu2
Hola SanMar Perdona por la tardanza. La memoria ram es de 2G Hoy me va muy mal, va todo muy lento. Te dejo los reportes.
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 16-05.2019
Ran by casa (16-05-2019 22:58:13)
Running from C:\Users\casa\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-09-08 01:38:54)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrador (S-1-5-21-4017129893-1150395284-1150458071-500 - Administrator - Disabled)
casa (S-1-5-21-4017129893-1150395284-1150458071-1000 - Administrator - Enabled) => C:\Users\casa
HomeGroupUser$ (S-1-5-21-4017129893-1150395284-1150458071-1002 - Limited - Enabled)
Invitado (S-1-5-21-4017129893-1150395284-1150458071-501 - Limited - Enabled) => C:\Users\Invitado
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Acer Backup Manager (HKLM-x32\...\InstallShield_{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.1.68 - NewTech Infosystems)
Acer Crystal Eye Webcam (HKLM-x32\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.19.3 - Suyin Optronics Corp)
Acer ePower Management (HKLM-x32\...\{3DB0448D-AD82-4923-B305-D001E521A964}) (Version: 5.00.3005 - Acer Incorporated)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer Registration (HKLM-x32\...\Acer Registration) (Version: 1.03.3003 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0826.2010 - Acer Incorporated)
Acer VCM (HKLM-x32\...\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}) (Version: 4.05.3002 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.5.0.7220 - Adobe Systems Inc.)
Adobe Flash Player 10 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 10.1.82.76 - Adobe Systems Incorporated)
Adobe Reader 9.1 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.1.0 - Adobe Systems Incorporated)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.4.2374 - AVAST Software)
Backup Manager Advance (HKLM-x32\...\{30075A70-B5D2-440B-AFA3-FB2021740121}) (Version: 2.0.1.68 - NewTech Infosystems) Hidden
Broadcom Gigabit NetLink Controller (HKLM\...\{A84DB02B-9C2B-4272-9D2D-A80E00A56513}) (Version: 14.0.2.3 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.56 - Piriform)
Compatibilidad con Aplicaciones de Apple (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
Complemento Guardar como PDF o XPS de Microsoft para programas de Microsoft Office 2007 (HKLM-x32\...\{90120000-00B2-0C0A-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation)
eBay Worldwide (HKLM-x32\...\{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}) (Version: 2.1.0901 - OEM)
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - )
Galería fotográfica de Windows Live (HKLM-x32\...\{A7BBE3D6-F19A-40E6-96EC-84E1DC88F262}) (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
GeoGebra Graphing (HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\GeoGebra_Graphing) (Version: 6.0.429 - International GeoGebra Institute)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 74.0.3729.131 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Herramienta de carga de Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
HP Dropbox Plugin (HKLM-x32\...\{7BEBB31E-58C4-4FA5-9AD1-ACBE32BF0D12}) (Version: 36.0.41.58587 - HP)
HP Google Drive Plugin (HKLM-x32\...\{63BD9C12-5CE9-4294-B1C3-A09F971FAFB5}) (Version: 36.0.41.58587 - HP)
HP OfficeJet 4650 series Ayuda (HKLM-x32\...\{B84E92A5-C0FC-4403-91C2-10C944291B3A}) (Version: 36.0.0 - Hewlett Packard)
HP OfficeJet 4650 series Software básico del dispositivo (HKLM\...\{385EF9C0-8264-46A3-BC7E-EFBDF53CA2EF}) (Version: 40.11.1122.1796 - HP Inc.)
I.R.I.S. OCR (HKLM-x32\...\{8A9945B1-E6C9-4C03-BFEE-A00471EF2652}) (Version: 12.3.7.0 - HP)
Identity Card (HKLM-x32\...\Identity Card) (Version: 1.00.3003 - Acer Incorporated)
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1892 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation)
InterVideo WinDVD 8 (HKLM-x32\...\{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}) (Version: 8.5.10.76 - InterVideo Inc.) Hidden
InterVideo WinDVD 8 (HKLM-x32\...\InstallShield_{5FEBF468-5AC2-4C66-AD80-DF85C085AA73}) (Version: 8.5.10.76 - InterVideo Inc.)
Junk Mail filter update (HKLM-x32\...\{8E5233E1-7495-44FB-8DEB-4BE906D59619}) (Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.14 - Acer Inc.)
Malwarebytes versión 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 365 ProPlus - es-es (HKLM\...\O365ProPlusRetail - es-es) (Version: 15.0.5127.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.50401.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
Norton Online Backup (HKLM-x32\...\{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}) (Version: 2.1.17869 - Symantec Corporation)
NTI Media Maker 9 (HKLM-x32\...\{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8928 - NTI Corporation) Hidden
NTI Media Maker 9 (HKLM-x32\...\InstallShield_{D3D5C4E8-040F-4C6F-8105-41D43CF94F44}) (Version: 9.0.2.8928 - NTI Corporation)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5127.1000 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5127.1000 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-0C0A-0000-0000000FF1CE}) (Version: 15.0.5127.1000 - Microsoft Corporation) Hidden
OpenOffice 4.1.6 (HKLM-x32\...\{ABA77258-70D6-4A14-9AB7-3FA087C470DB}) (Version: 4.16.9790 - Apache Software Foundation)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6151 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30121 - Realtek Semiconductor Corp.)
Roblox Player for casa (HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - Roblox Corporation)
SecureW2 EAP Suite 2.0.4 for Windows (HKLM-x32\...\SecureW2 EAP Suite) (Version: - )
Silverfrost FTN95 (HKLM-x32\...\{8617DAC6-A4C0-40A2-8D82-D66D0013DC6A}) (Version: 7.10 - Silverfrost)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 14.0.19.0 - Synaptics Incorporated)
Visor de Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-0C0A-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3004 - Acer Incorporated)
Windows Live Asistente para el inicio de sesión (HKLM-x32\...\{7593234B-2AEB-4FC9-B02D-C9B30D86084C}) (Version: 5.000.818.5 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{914DD274-9C5D-44CA-9AC7-12B8D2D4DA08}) (Version: 14.0.8117.416 - Microsoft Corporation)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => -> No File
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\casa\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\5d696d521de238c3\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default
==================== Loaded Modules (Whitelisted) ==============
2010-09-06 13:20 - 2010-04-13 18:52 - 000058880 _____ () [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2017-09-20 17:07 - 2017-09-20 17:07 - 000170496 _____ () [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\37fc2d150a5569e7ce440b1dd07b7ee9\IsdiInterop.ni.dll
2010-09-06 13:20 - 2010-04-13 18:54 - 000006656 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\es-ES\IAStorDataMgr.resources.dll
2010-09-06 13:20 - 2010-04-13 18:53 - 000032768 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\es-ES\IAStorIcon.resources.dll
2010-09-06 13:20 - 2010-04-13 18:53 - 000004608 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\es-ES\IntelVisualDesign.resources.dll
2010-09-06 13:20 - 2010-04-13 18:52 - 000163328 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorUIHelper.dll
2010-09-06 13:20 - 2010-04-13 18:52 - 001046528 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IntelVisualDesign.dll
2010-09-06 13:20 - 2010-04-13 18:45 - 000280064 _____ (Intel Corporation) [File not signed] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\ISDI.dll
2017-09-20 17:07 - 2017-09-20 17:07 - 000176640 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgr\be7b333b5acf9c058d27c823e59a997a\IAStorDataMgr.ni.dll
2017-09-20 17:07 - 2017-09-20 17:07 - 000019968 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorDataMgrSvc\584a7a30d293c5012f548840b636d941\IAStorDataMgrSvc.ni.exe
2017-09-20 17:07 - 2017-09-20 17:07 - 000452608 _____ (Intel Corporation) [File not signed] C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\6f8c75e59c24e87de60ba4d9f9aa53be\IAStorUtil.ni.dll
2019-01-24 21:46 - 2019-01-24 21:46 - 000225280 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcm90.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2017-09-18 21:52 - 000000035 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Silverfrost\FTN95;c:\users\casa\gcc\bin;c:\users\casa\gcc\libexec\gcc\x86_64-pc-mingw32\4.9.1;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Users\casa\AppData\Local\Smartbar\Application\;C:\Program Files (x86)\Skype\Phone\;C:\Program Files (x86)\QuickTime\QTSystem\
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\casa\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 62.81.16.213 - 62.81.16.148
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [TCP Query User{96928CE8-6E18-41B9-BC36-68479ADB329E}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [UDP Query User{7A3B459C-C182-425E-9EF2-ADC2A0F657F3}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{F23EA22C-1AAA-4948-AF46-60EE2A0D5172}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\FaxPrinterUtility.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{2F295148-671C-4E54-B260-8D82FD29FD53}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\FaxApplications.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{B1BE161C-49DD-4C69-907E-EADF4ED486A8}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\DigitalWizards.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{BF7652EA-1578-4ACB-AB92-981C4FDBDC20}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\bin\SendAFax.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{140137BC-6DB8-41C1-8C02-946A3AAC56BC}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{5606E934-B8DF-4501-8F30-D67D1428A599}] => (Allow) LPort=5357
FirewallRules: [{656607B2-B03B-4388-8B03-2625D6D0CF38}] => (Allow) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{25C2B182-0709-4084-B9A9-0F5EC69599A5}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A64A04AE-DF6B-4D65-94A1-7C1CAF177059}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3C5F56B8-9531-4F99-8E17-508AB1D16FE2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2EE1F0B3-0F00-4687-AEF8-77EA93AB3717}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DF98ECD3-A1DA-46D8-9B55-CC8436DE68F0}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{97ABC559-0F80-4935-B5F4-FD18FFEA91FD}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{6ACCB066-C862-4179-96F8-278CDF903C15}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{585CBD2E-BB4C-4677-BED4-606D8414DFE0}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{E52CB7D5-2B2B-447D-8B26-3C9AF1618E5E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
==================== Restore Points =========================
19-12-2018 11:56:45 Windows Update
24-01-2019 21:44:11 Installed Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
24-01-2019 21:45:56 Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
24-01-2019 21:47:49 Instalado OpenOffice 4.1.6
25-03-2019 21:33:55 Punto de control programado
05-05-2019 21:41:00 Punto de control programado
==================== Faulty Device Manager Devices =============
Name: Adaptador de minipuerto WiFi virtual de Microsoft
Description: Adaptador de minipuerto WiFi virtual de Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver
==================== Event log errors: =========================
Application errors:
==================
Error: (05/16/2019 10:43:47 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (05/16/2019 06:03:02 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (05/14/2019 05:12:55 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (05/12/2019 10:11:50 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa mbam.exe, versión 3.1.0.1644, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.
Identificador de proceso: f78
Hora de inicio: 01d50899e9a4e40c
Hora de finalización: 60000
Ruta de acceso de la aplicación: C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
Identificador de informe: 6e1e8792-748d-11e9-a8fb-1c7508022b1b
Error: (05/12/2019 09:47:21 AM) (Source: SideBySide) (EventID: 63) (User: )
Description: Error al generar el contexto de activación para "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Error en el archivo de manifiesto o directiva "c:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" en la línea 3.
El valor "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" del atributo "version" del elemento "assemblyIdentity" no es válido.
Error: (05/12/2019 09:47:02 AM) (Source: SideBySide) (EventID: 80) (User: )
Description: Error al generar el contexto de activación para "c:\program files (x86)\eset\eset online scanner\ESETSmartInstaller.exe". Error en el archivo de manifiesto o directiva "" en la línea .
Una versión de componente requerida por la aplicación está en conflicto con la versión de otro componente activo.
Los componentes en conflicto son:.
Componente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Componente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (05/12/2019 09:47:02 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: IPTV Smarters Pro.exe, versión: 2018.2.7.48424, marca de tiempo: 0x5b87f776
Nombre del módulo con errores: d3d11.dll, versión: 6.2.9200.16570, marca de tiempo: 0x5153774d
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x000a4c2b
Id. del proceso con errores: 0x9b8
Hora de inicio de la aplicación con errores: 0x01d50896e0ed7369
Ruta de acceso de la aplicación con errores: C:\Program Files (x86)\IPTV Smarters Pro\IPTV Smarters Pro.exe
Ruta de acceso del módulo con errores: C:\Windows\system32\d3d11.dll
Id. del informe: 209f7d02-748a-11e9-a8fb-1c7508022b1b
Error: (05/12/2019 09:43:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nombre de la aplicación con errores: IPTV Smarters Pro.exe, versión: 2018.2.7.48424, marca de tiempo: 0x5b87f776
Nombre del módulo con errores: d3d11.dll, versión: 6.2.9200.16570, marca de tiempo: 0x5153774d
Código de excepción: 0xc0000005
Desplazamiento de errores: 0x000a4c2b
Id. del proceso con errores: 0x13b8
Hora de inicio de la aplicación con errores: 0x01d508965ffad765
Ruta de acceso de la aplicación con errores: C:\Program Files (x86)\IPTV Smarters Pro\IPTV Smarters Pro.exe
Ruta de acceso del módulo con errores: C:\Windows\system32\d3d11.dll
Id. del informe: 9e963ff3-7489-11e9-a8fb-1c7508022b1b
System errors:
=============
Error: (05/16/2019 10:26:54 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: El servicio Windows Update no respondió después de iniciar.
Error: (05/16/2019 10:23:08 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
y APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.
Error: (05/16/2019 05:47:35 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
y APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.
Error: (05/14/2019 05:28:24 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: El servicio Malwarebytes Service no se cerró correctamente después de recibir un control de aviso de apagado.
Error: (05/14/2019 05:09:14 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: El servicio Windows Update no respondió después de iniciar.
Error: (05/14/2019 05:05:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Intel(R) Rapid Storage Technology no pudo iniciarse debido al siguiente error:
El servicio no respondió a tiempo a la solicitud de inicio o de control.
Error: (05/14/2019 05:05:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Intel(R) Rapid Storage Technology.
Error: (05/14/2019 05:03:48 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
y APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.
==================== Memory info ===========================
BIOS: Acer V1.00 09/013/2010
Motherboard: Acer BA51_MV
Processor: Pentium(R) Dual-Core CPU T4500 @ 2.30GHz
Percentage of memory in use: 93%
Total physical RAM: 1977.97 MB
Available physical RAM: 134.89 MB
Total Virtual: 3971.95 MB
Available Virtual: 311.54 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:452.66 GB) (Free:399.58 GB) NTFS
\\?\Volume{c02af623-36f2-11e4-81e9-806e6f6e6963}\ (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{c02af622-36f2-11e4-81e9-806e6f6e6963}\ (PQSERVICE) (Fixed) (Total:13 GB) (Free:2.16 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: BB2F75B9)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=452.7 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05.2019
Ran by casa (administrator) on CASA-PC (Acer TravelMate 5735Z) (16-05-2019 22:54:31)
Running from C:\Users\casa\Desktop
Loaded Profiles: casa (Available Profiles: casa & Invitado)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Español (España, internacional)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Acer Incorporated -> Acer Group) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerEvent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google LLC -> Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett Packard -> HP Inc.) C:\Program Files\HP\HP OfficeJet 4650 series\Bin\ScanToPCActivationApp.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intervideo, Inc. -> InterVideo) C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NewTech Infosystems, Inc -> NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(NewTech Infosystems, Inc -> NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Protexis Inc. -> Protexis Inc.) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SONIX TECHNOLOGY CO. , LTD -> ) C:\Windows\PLFSetI.exe
(Symantec Corporation -> Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1890088 2009-12-10] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11057768 2010-07-06] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-06-09] (SONIX TECHNOLOGY CO. , LTD -> )
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer ePower Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated -> Acer Incorporated)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [261000 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation -> Intel Corporation)
HKLM-x32\...\Run: [Norton Online Backup] => C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe [1155928 2010-06-02] (Symantec Corporation -> Symantec Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [35696 2009-02-28] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [265984 2010-06-29] (NewTech Infosystems, Inc -> NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [975952 2010-08-10] (Dritek System Inc. -> Dritek System Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.) [File not signed]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2010-09-06] (Google Inc -> Google Inc.)
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\Run: [HP OfficeJet 4650 series (NET)] => C:\Program Files\HP\HP OfficeJet 4650 series\Bin\ScanToPCActivationApp.exe [3770504 2017-04-06] (Hewlett Packard -> HP Inc.)
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22515488 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\MountPoints2: F - F:\HiSuiteDownLoader.exe
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\MountPoints2: {1768160b-f7c6-11e7-adb1-1c7508022b1b} - E:\LG_PC_Programs.exe
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\...\MountPoints2: {f13e5e4e-9fb9-11e7-93ef-806e6f6e6963} - E:\HiSuiteDownLoader.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
HKLM\...\Drivers32: [msacm.l3acm] => C:\Windows\SysWOW64\l3codecp.acm [220672 2009-07-14] (Microsoft Windows -> Fraunhofer Institut Integrierte Schaltungen IIS)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\74.0.3729.131\Installer\chrmstp.exe [2019-05-02] (Google LLC -> Google Inc.)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Acer VCM.lnk [2010-09-06]
ShortcutTarget: Acer VCM.lnk -> C:\Program Files (x86)\Acer\Acer VCM\AcerVCM.exe (Acer Incorporated -> Acer Incorporated)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {032D1003-9175-4B2E-9757-D99B484D38AE} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\AVAST Software\Overseer\overseer.exe [2380088 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
Task: {06E49162-482C-4D5C-BC46-A629A7CDD053} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {438141D5-536D-464D-8A61-E6C5874A3012} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [1163352 2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {65B1EC9D-13B1-4231-97B3-002608DDF54A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [979024 2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {686F5DF3-389D-4A88-838E-127AD3133F74} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-10-04] (Google Inc -> Google Inc.)
Task: {7EB4B1A1-4368-4883-85AC-7CF584C174D2} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [979024 2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {9B7C3714-610E-43D9-BDF5-DC630F589F8A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16509040 2019-04-04] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {AB97F73A-B9FA-4F61-8FAD-E250F8C9AD2F} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2925960 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
Task: {C5511879-FCD9-4AC1-9D0A-4338167DB815} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-10-04] (Google Inc -> Google Inc.)
Task: {DA20B37E-305E-4B7C-BE05-1269C108591C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [292952 2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3F3A776-B4E0-4F50-94DA-ADF54DA65F77} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> No File <==== ATTENTION
Task: {EB8B3A39-AC33-4497-88F3-C59142F988BC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [292952 2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 62.81.16.213 62.81.16.148
Tcpip\..\Interfaces\{2CAFFA1E-34B9-435A-8614-B846823E41D6}: [DhcpNameServer] 62.81.16.213 62.81.16.148
Tcpip\..\Interfaces\{3B004ED4-E519-461D-B37B-982592EC988E}: [DhcpNameServer] 62.81.16.213 62.81.16.148
Internet Explorer:
==================
HKU\S-1-5-21-4017129893-1150395284-1150458071-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/es-es/?ocid=iehp
SearchScopes: HKU\S-1-5-21-4017129893-1150395284-1150458071-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-09-16] (Google Inc -> Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Windows Live Aplicación auxiliar de inicio de sesión -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-09-16] (Google Inc -> Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-09-16] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2017-09-16] (Google Inc -> Google Inc.)
Toolbar: HKU\S-1-5-21-4017129893-1150395284-1150458071-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2017-09-16] (Google Inc -> Google Inc.)
Handler-x32: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll [2010-04-16] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Software Sarl -> Skype Technologies)
FireFox:
========
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.50401.0\npctrl.dll [2010-04-01] ( Microsoft Corporation) [File not signed]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2019-05-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=14.0.8117.0416 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-04-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-16] (Google Inc -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.34.11\npGoogleUpdate3.dll [2019-05-16] (Google Inc -> Google LLC)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxps://www.google.es/"
CHR Profile: C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default [2019-05-16]
CHR Extension: (Presentaciones) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-14]
CHR Extension: (Angry Birds) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-12-14]
CHR Extension: (Documentos) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-14]
CHR Extension: (Google Drive) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-09-15]
CHR Extension: (YouTube) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-09-15]
CHR Extension: (Búsqueda de Google) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2017-09-15]
CHR Extension: (Hojas de cálculo) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-14]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-09-19]
CHR Extension: (Google Play Music) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg [2017-09-15]
CHR Extension: (Google Play) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\komhbcfkdcgmcdoenjcjheifdiabikfi [2015-04-12]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-05-12]
CHR Extension: (Gmail) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-05-05]
CHR Extension: (Chrome Media Router) - C:\Users\casa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-05-06]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6660888 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [362488 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058256 2019-02-13] (Microsoft Corporation -> Microsoft Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2804568 2010-06-02] (Symantec Corporation -> Symantec Corporation)
R2 RS_Service; C:\Program Files (x86)\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated -> Acer Incorporated)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37104 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [205400 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [254128 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [196000 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswblog.sys [320624 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [57888 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [257832 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42288 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [166848 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [112520 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [88160 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1031000 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [476776 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [220640 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [385848 2019-05-12] (AVAST Software s.r.o. -> AVAST Software)
R3 BCM43XX; C:\Windows\System32\DRIVERS\bcmwl664.sys [4171328 2010-06-03] (Broadcom Corporation -> Broadcom Corporation)
R3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [7369728 2009-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
R3 IntcHdmiAddService; C:\Windows\System32\drivers\IntcHdmi.sys [139264 2009-07-10] (Microsoft Windows Hardware Compatibility Publisher -> Intel(R) Corporation)
R3 k57nd60a; C:\Windows\System32\DRIVERS\k57nd60a.sys [384040 2010-05-15] (Broadcom Corporation -> Broadcom Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-16 22:54 - 2019-05-16 22:57 - 000023786 _____ C:\Users\casa\Desktop\FRST.txt
2019-05-16 22:54 - 2019-05-16 22:54 - 000000000 ____D C:\FRST
2019-05-16 22:51 - 2019-05-16 22:52 - 002434560 _____ (Farbar) C:\Users\casa\Desktop\FRST64.exe
2019-05-12 10:17 - 2019-05-12 10:17 - 000001871 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2019-05-12 10:17 - 2019-05-12 10:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-05-12 10:17 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-05-12 10:15 - 2019-05-12 10:15 - 000004966 _____ C:\Users\casa\Documents\cc_20190512_101514.reg
2019-05-12 10:12 - 2019-05-12 10:12 - 000000000 ____D C:\Users\casa\AppData\Roaming\AVAST Software
2019-05-12 10:11 - 2019-05-12 10:11 - 000002007 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2019-05-12 10:11 - 2019-05-12 10:11 - 000000000 ____D C:\Users\casa\AppData\Local\CEF
2019-05-12 10:11 - 2019-05-12 10:11 - 000000000 ____D C:\Users\casa\AppData\Local\AVAST Software
2019-05-12 10:11 - 2019-05-12 10:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2019-05-12 10:05 - 2019-05-12 10:05 - 000476776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2019-05-12 10:05 - 2019-05-12 10:05 - 000385848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2019-05-12 10:05 - 2019-05-12 10:05 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2019-05-12 10:05 - 2019-05-12 10:05 - 000000077 _____ C:\Windows\system32\Drivers\aswSP.sys.sum
2019-05-12 10:05 - 2019-05-12 10:05 - 000000000 ____D C:\Windows\System32\Tasks\Avast Software
2019-05-12 10:05 - 2019-05-12 10:05 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2019-05-12 10:05 - 2019-05-12 10:04 - 001031000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000362888 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-05-12 10:05 - 2019-05-12 10:04 - 000320624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswblog.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000257832 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000254128 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000220640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000205400 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000196000 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000166848 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000112520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000088160 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000057888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000042288 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2019-05-12 10:05 - 2019-05-12 10:04 - 000037104 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2019-05-12 10:03 - 2019-05-12 10:05 - 000000000 ____D C:\ProgramData\AVAST Software
2019-05-12 10:03 - 2019-05-12 10:03 - 000000000 ____D C:\Program Files\AVAST Software
2019-05-12 10:02 - 2019-05-12 10:02 - 021254208 _____ (Piriform Software Ltd) C:\Users\casa\Downloads\ccsetup556.exe
2019-05-12 09:42 - 2019-05-12 09:42 - 000000000 ____D C:\Users\casa\AppData\LocalLow\DefaultCompany
==================== One month (modified) ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2019-05-16 22:33 - 2009-07-14 06:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-05-16 22:33 - 2009-07-14 06:45 - 000018736 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-05-16 22:26 - 2015-03-13 15:26 - 000000000 ____D C:\Users\casa\AppData\Roaming\Skype
2019-05-16 22:26 - 2014-09-08 12:50 - 000747646 _____ C:\Windows\system32\perfh00A.dat
2019-05-16 22:26 - 2014-09-08 12:50 - 000159086 _____ C:\Windows\system32\perfc00A.dat
2019-05-16 22:26 - 2009-07-14 07:13 - 001676890 _____ C:\Windows\system32\PerfStringBackup.INI
2019-05-16 22:26 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2019-05-16 22:20 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-05-16 18:03 - 2014-09-08 14:04 - 000003534 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2019-05-16 18:03 - 2014-09-08 14:04 - 000003406 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2019-05-12 10:04 - 2017-09-15 22:55 - 000000000 ____D C:\Users\casa\Desktop\mantenimiento
2019-05-12 10:03 - 2018-09-18 17:08 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-05-12 10:03 - 2017-09-15 18:45 - 000000000 ____D C:\Program Files\CCleaner
2019-05-05 20:25 - 2014-09-08 13:59 - 000000000 ____D C:\Users\casa\AppData\Roaming\Google
2019-05-02 17:17 - 2014-12-20 19:51 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-05-02 17:15 - 2014-10-02 18:49 - 000000000 ____D C:\Program Files\Microsoft Office 15
==================== SigCheck ===============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2019-05-05 21:33
==================== End of FRST.txt ============================Hola He puesto los dos, uno seguido del otro. Te pongo el que me pides. Gracias.
Hola @alrrudi
Ahora lo vi…
Esta muuuuy limitado con la Ram tienes un SO instalado de 64 bits y para ello se recomiendan 4 gb de Ram, para la ram de tu equipo lo ideal seria que hubieras instalado un Windows 7 pero de 32 bits.
Desinstala Avast con su Herramienta especifica.
Luego de reinciar, pruebas el equipo y nos comentas si mejora el problema de lentitud.
No instales ningún Av por el momento.
Salu2
Hola Sigue yendo igual. El navegador tarda en abrirse y la página web también. saludos
Hola @alrrudi
Optimiza tu equipo:
1.- Descarga CCleaner a tu escritorio.
- Siguiendo su manual, lo instalas y ejecutas y utiliza las opciones Limpiador y Registro del mismo, tal como se explican en su Manual.
2.- Realiza un análisis completo del Disco duro siguiendo la guía:
- Análisis y Escaneo del Disco Duro Usar el Método 3.
IMPORTANTE: Si el porcentaje de Avance parece pararse, NO Canceles el proceso. Dejalo continuar si es necesario durante 24 horas más. .
3.- Libera espacio en disco siguiendo los pasos de:
4. Desfragmenta el/los discos duros y particiones del PC, siguiendo los pasos de:
Luego de reiniciar, nos comentas como sigue el equipo.
Salu2.
hola Al ir al enlace del paso 2 Análisis y Escaneo del Disco duro, me sale el mensaje. Lo sentimos. ¡No tienes acceso a este tema! Que hago? Gracias
Hola:
Enlace corregido.
Salu2
Hola de nuevo El ordenador sigue tardando en arrancar, al igual que en navegador. Gracias
Hola @alrrudi
Que paso cuando ejecutaste el Análisis y escaneo del disco duro. Algún mensaje o comentario?
Para encontrar el reporte debes seguir los pasos del siguiente enlace:
Salu2
Hola No me salio nada. Gracias
Hola:
Pincha en el enlace que te deje en mi mensaje anterior y busca el reporte.
Salu2
Hola. Te dejo el primer reporte que sale, pero no se si será este. Salen muchos. Nombre de registro:Application Origen: Microsoft-Windows-Wininit Fecha: 18/05/2019 13:59:07 Id. del evento:1001 Categoría de la tarea:Ninguno Nivel: Información Palabras clave:Clásico Usuario: No disponible Equipo: casa-PC Descripción:
Comprobando el sistema de archivos en C:
El tipo del sistema de archivos es NTFS.
La etiqueta de volumen es Acer.
Uno de los discos necesita ser comprobado para ver coherencias.
Se puede cancelar la comprobación de disco, pero se recomienda
que continúe.
Windows comprobará ahora el disco.
CHKDSK está comprobando archivos (etapa 1 de 5)...
226560 registros de archivos procesados.
Comprobación de archivos completada.
1001 registros de archivos grandes procesados.
0 registros de archivos no válidos procesados.
0 registros de EA procesados.
108 registros de análisis procesados.
CHKDSK está comprobando índices (etapa 2 de 5)...
296764 entradas de índice procesadas.
Comprobación de índices completada.
0 archivos no indizados examinados.
0 archivos no indizados recuperados.
CHKDSK está comprobando descriptores de seguridad (etapa 3 de 5)...
226560 SD/SID de archivo procesados.
Liberando 507 entradas de índice no usadas del índice $SII del archivo 0x9.
Liberando 507 entradas de índice no usadas del índice $SDH del archivo 0x9.
Liberando 507 descriptores de seguridad no usados.
Comprobación de descriptores de seguridad completada.
35103 archivos de datos procesados.
CHKDSK está comprobando el diario USN...
34227456 bytes de USN procesados.
Se ha completado la comprobación del diario USN.
CHKDSK está comprobando los datos de archivo (etapa 4 de 5)...
226544 archivos procesados.
Comprobación de datos de archivo completada.
CHKDSK está comprobando el espacio disponible (etapa 5 de 5)...
104748774 clústeres disponibles procesados.
La comprobación del espacio disponible se completó.
Windows ha comprobado el sistema de archivos y no encontró problemas.
474650623 KB de espacio total en disco.
55196288 KB en 182298 archivos.
116280 KB en 35104 índices.
0 KB en sectores defectuosos.
342955 KB en uso por el sistema.
El archivo de registro ha ocupado 65536 kilobytes.
418995100 KB disponibles en disco.
4096 bytes en cada unidad de asignación.
118662655 unidades de asignación en disco en total.
104748775 unidades de asignación disponibles en disco.
Información interna:
00 75 03 00 46 51 03 00 59 35 06 00 00 00 00 00 .u..FQ..Y5......
40 01 00 00 6c 00 00 00 00 00 00 00 00 00 00 00 @...l...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows ha finalizado la comprobación del disco.
Espere mientras se reinicia el sistema.
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-18T11:59:07.000000000Z" />
<EventRecordID>24235</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>casa-PC</Computer>
<Security />
</System>
<EventData>
<Data>
Comprobando el sistema de archivos en C:
El tipo del sistema de archivos es NTFS.
La etiqueta de volumen es Acer.
Uno de los discos necesita ser comprobado para ver coherencias.
Se puede cancelar la comprobación de disco, pero se recomienda
que continúe.
Windows comprobará ahora el disco.
CHKDSK está comprobando archivos (etapa 1 de 5)...
226560 registros de archivos procesados.
Comprobación de archivos completada.
1001 registros de archivos grandes procesados.
0 registros de archivos no válidos procesados.
0 registros de EA procesados.
108 registros de análisis procesados.
CHKDSK está comprobando índices (etapa 2 de 5)...
296764 entradas de índice procesadas.
Comprobación de índices completada.
0 archivos no indizados examinados.
0 archivos no indizados recuperados.
CHKDSK está comprobando descriptores de seguridad (etapa 3 de 5)...
226560 SD/SID de archivo procesados.
Liberando 507 entradas de índice no usadas del índice $SII del archivo 0x9.
Liberando 507 entradas de índice no usadas del índice $SDH del archivo 0x9.
Liberando 507 descriptores de seguridad no usados.
Comprobación de descriptores de seguridad completada.
35103 archivos de datos procesados.
CHKDSK está comprobando el diario USN...
34227456 bytes de USN procesados.
Se ha completado la comprobación del diario USN.
CHKDSK está comprobando los datos de archivo (etapa 4 de 5)...
226544 archivos procesados.
Comprobación de datos de archivo completada.
CHKDSK está comprobando el espacio disponible (etapa 5 de 5)...
104748774 clústeres disponibles procesados.
La comprobación del espacio disponible se completó.
Windows ha comprobado el sistema de archivos y no encontró problemas.
474650623 KB de espacio total en disco.
55196288 KB en 182298 archivos.
116280 KB en 35104 índices.
0 KB en sectores defectuosos.
342955 KB en uso por el sistema.
El archivo de registro ha ocupado 65536 kilobytes.
418995100 KB disponibles en disco.
4096 bytes en cada unidad de asignación.
118662655 unidades de asignación en disco en total.
104748775 unidades de asignación disponibles en disco.
Información interna:
00 75 03 00 46 51 03 00 59 35 06 00 00 00 00 00 .u..FQ..Y5......
40 01 00 00 6c 00 00 00 00 00 00 00 00 00 00 00 @...l...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Windows ha finalizado la comprobación del disco.
Espere mientras se reinicia el sistema.
</Data>
</EventData>
</Event>También me sale este otro. Nombre de registro:Application Origen: Windows Error Reporting Fecha: 18/05/2019 14:21:13 Id. del evento:1001 Categoría de la tarea:Ninguno Nivel: Información Palabras clave:Clásico Usuario: No disponible Equipo: casa-PC Descripción: Depósito con errores , tipo 0 Nombre de evento: LiveKernelEvent Respuesta: No disponible Id. de archivo CAB: 0
Firma del problema:
P1:
P2:
P3:
P4:
P5:
P6:
P7:
P8:
P9:
P10:
Archivos adjuntos:
C:\Windows\LiveKernelReports\WATCHDOG\WD-20180212-2013.dmp
C:\Windows\Temp\WER-4000598-0.sysdata.xml
C:\Windows\Temp\WERD77B.tmp.WERInternalMetadata.xml
Es posible que estos archivos estén disponibles aquí:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_1025d78a
Símbolo de análisis:
Nueva búsqueda de una solución: 0
Id. de informe: e4389e7b-1028-11e8-b8d9-1c7508022b1b
Estado del informe: 0
XML de evento:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2019-05-18T12:21:13.000000000Z" />
<EventRecordID>24263</EventRecordID>
<Channel>Application</Channel>
<Computer>casa-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>LiveKernelEvent</Data>
<Data>No disponible</Data>
<Data>0</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
</Data>
<Data>
C:\Windows\LiveKernelReports\WATCHDOG\WD-20180212-2013.dmp
C:\Windows\Temp\WER-4000598-0.sysdata.xml
C:\Windows\Temp\WERD77B.tmp.WERInternalMetadata.xml</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\Kernel_0_0_cab_1025d78a</Data>
<Data>
</Data>
<Data>0</Data>
<Data>e4389e7b-1028-11e8-b8d9-1c7508022b1b</Data>
<Data>0</Data>
</EventData>
</Event>Del tipo 1001 windows error reporting me salen otros 24 posteriores al que te he mandado.
Hola @alrrudi
Revisa por fecha y manda el ultimo.
De todas maneras aparentemente no hay daños en tu disco.
Tu equipo esta limpio y no hay errores visibles, creo que tendrás que colocarle mas memoria Ram como ya te comente anteriormente y probar.
Salu2
Hola perdonad por la tardanza. Os dejo el reporte que me pides. + System
- Provider
[ Name] Windows Error Reporting
Gracias
- EventID 1001
[ Qualifiers] 0
Level 4
Task 0
Keywords 0x80000000000000
- TimeCreated
[ SystemTime] 2019-05-19T07:49:34.000000000Z
EventRecordID 24385
Channel Application
Computer casa-PC
Security
- EventData
2935043910
510401905
WindowsWcpStoreCorruption
No disponible
0
6.1.7601
MissingWinningComponentKey
x86_policy.14.0.avast.vc140.mfc_fcc99ee6193ebbca_14.0.27012.0_none_9c229ed3ddb17764
C:\Windows\Logs\CBS\CbsPersist_20171021175918.cab C:\Windows\Logs\CBS\CbsPersist_20180702160812.cab C:\Windows\Logs\CBS\CbsPersist_20181219183742.cab C:\Windows\Logs\CBS\CbsPersist_20190331181859.cab C:\Windows\Logs\CBS\CbsPersist_20190518131447.cab C:\Windows\Logs\CBS\CBS.log C:\Windows\servicing\Sessions\Sessions.xml C:\Windows\winsxs\poqexec.log C:\Windows\System32\LogFiles\Scm\SCM.EVM C:\Windows\Logs\CBS\FilterList.log C:\Windows\Temp\WER6C78.tmp.hdmp C:\Windows\Temp\WER6D53.tmp.mdmp
C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Critical_6.1.7601_34aeb6fbe5c2f666faa11ba072b853887c5c5f_07109ccb
0
97268be0-7a0a-11e9-a3d0-1c7508022b1b
0
`texto preformateado precedido por 4 espacios`Hola @alrrudi
1.- Vuelve a ejecutar FRST como ya lo hiciste anteriormente y nos traes un reporte fresco + el Adittion.
Luego ve a:
2.- Inicio >>> Ejecutar >>> escribes CMD >>> Botón derecho >>> Ejecutar como administrador.
3.- En la ventana que se abre escribes tal cual:
- sfc /scannow
Verificará los archivos de Sistema, debes tener paciencia por que puede tardar.
Suele guardar un reporte en:
- CBS.log
4.- Para recuperarlo ve a:
- Inicio >>> escribes CMD >>> Botón derecho sobre el >>> Ejecutar como administrador.
Se abrirá la consola de Símbolo del Sistema, escribe tal cual (con todos los símbolos puedes copiar y pegar )
findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"
Esto pegará un reporte llamado sfcdetails.txt en tu escritorio, por lo general muuuuy largo y que no puedes subir directamente al Foro, prueba subirlo a Dropox, Google Drive. One Drive o el que uses y me dejas el enlace en tu próxima respuesta.
Nos comentas.
Salu2