Ventanas a la derecha de la pantalla "Mozzilla Firefox" error crítico

ventana11 · 30 Junio, 2026 17:40

He accedido a una página sin contenido al buscar una empresa antigua. Desde entonces me aparecen ventanas pequeñas a la derecha de la pantalla encabezadas por “Mozilla Firefox” con mensajes como “virus troyano”, “Atención”, “error crítico”. Sale una encima de otra. Al cerrarlas vuelven a salir como las setas. ¿Podría alguien orientarme en cómo eliminar lo que sea que se haya metido en el ordenador?

Gracias por vuestra atención.

Vuelvo a editar. He seleccionado una de las opciones de las ventanas que salían sin cesar. La opción era algo así como eliminar todas las notificaciones para firefox y no ha vuelto a salir ninguna. ¿Me quedo con este arreglo o debería pasarle alguna herramienta antibichos?

furtivex · 5 Julio, 2026 22:59

Hola y bienvenidos de nuevo al foro. @ventana11

Pruebe los dos escáneres siguientes y partiremos de ahí:

Descarga DoesNotBelong a tu escritorio

Desactiva tu antivirus Como deshabilitar temporalmente un antivirus y cualquier programa de seguridad que tengas activado.
Ejecuta DoesNotBelong.exe (Presiona clic derecho y selecciona “Ejecutar como Administrador.”)
Aceptas los disclaimers que aparezcan.
Esperas que termine.
Al finalizar generara un reporte que deberás pegar en tu próxima respuesta.

Por favor, descargue Farbar Recovery Scan Tool de acuerdo a su tipo de sistema y guárdelo en el Escritorio del sistema.

¿Cómo saber si mi Windows es de 32 o 64 bits?

Haga clic con el botón derecho sobre él y seleccionar “Ejecutar como Administrador”, para ejecutar la herramienta con permisos de administrador.
Cuando la herramienta se abra, haga clic en Sí para aceptar el Disclaimer/ Descargo de responsabilidad.
Haga clic en el botón Scan (Analizar) y espere a que termine.
La herramienta creará dos informes FRST.txt y Addition.txt ubicados en el mismo directorio desde el que se ejecuta la herramienta.
Por favor, traiga el contenido de estos reportes en su próxima respuesta.
Activa de nuevo tu antivirus y cualquier programa de seguridad que tengas activado.

¿Como Pegar Reportes en el Foro?

Saludos

mati_fora · 6 Julio, 2026 19:05

Fijate si en la configuracion de sitios, hay alguna página desconocida que tenga permitido enviarte pop ups en el propio navegador

ventana11 · 6 Julio, 2026 20:20

Gracias. Lo he chequeado y no he encontrado nada relacionado con las pop ups.

ventana11 · 6 Julio, 2026 20:21

````Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 06-07-2026
Ejecutado por Ana (administrador) sobre ANITAACER (Acer Aspire A315-56) (06-07-2026 20:24:33)
Ejecutado desde C:\Users\anaca\Desktop\FRST64.exe
Perfiles cargados: Ana
Plataforma: Microsoft Windows 11 Home Versión 25H2 26200.8737 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Edge
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Adobe Inc. -> Adobe Systems Inc.) [Archivo no firmado] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(C:\Program Files (x86)\Citrix\ICA Client\concentr.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\Receiver.exe
(C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfService.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\150.0.4078.48\identity_helper.exe
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\Acer\Quick Access Service\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe
(C:\Program Files\Acer\Quick Access Service\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAgent.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\149.0.4022.98\msedgewebview2.exe
(C:\Program Files\WindowsApps\MSTeams_26163.405.4842.717_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\149.0.4022.98\msedgewebview2.exe
(C:\Users\anaca\AppData\Local\WebEx\ciscowebexstart.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\anaca\AppData\Local\WebEx\WebEx\Meetings_01\atmgr.exe
(C:\Users\anaca\AppData\Local\WebEx\ciscowebexstart.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\anaca\AppData\Local\WebEx\WebEx\Meetings_02\atmgr.exe
(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\concentr.exe
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\redirector.exe
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxCUIServiceN.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxEMN.exe
(explorer.exe ->) (ActMask Co.,Ltd - hxxp://www.all2pdf.com) [Archivo no firmado] C:\Windows\System32\PrintDisp.exe
(explorer.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\anaca\AppData\Local\WebEx\ciscowebexstart.exe
(explorer.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Polar Electro Oy) [Archivo no firmado] C:\Program Files\Polar\Polar FlowSync\FlowSync.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <11>
(Hewlett-Packard Company -> Hewlett-Packard Company) C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Lexmark International, Inc. -> ) C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdiamon.exe
(Lexmark International, Inc. -> ) C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdimon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\149.0.4022.98\msedgewebview2.exe <15>
(Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\pingsender.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QASvc.exe
(services.exe ->) (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) [Archivo no firmado] C:\Windows\System32\PrintCtrl.exe
(services.exe ->) (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Connect\Watchdog\EPWD.exe
(services.exe ->) (Check Point Software Technologies Ltd. -> Check Point Software Technologies) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe
(services.exe ->) (GoTrustID Inc. -> GOTrustID Inc.) C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe
(services.exe ->) (GoTrustID Inc. -> GOTrustID Inc.) C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe
(services.exe ->) (Hewlett-Packard Company -> HP) C:\Windows\System32\HPSIsvc.exe
(services.exe ->) (HP) [Archivo no firmado] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(services.exe ->) (Huawei Technologies Co., Ltd. -> ) [Archivo no firmado] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxCUIServiceN.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_3d18534d52d73f63\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_1405215c1cf67526\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_6ca78a08b838e305\RstMwService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (Newyu) [Archivo no firmado] C:\Program Files (x86)\LibreView Device Drivers\LibreViewMASMonitor.exe
(services.exe ->) (Qualcomm Atheros, Inc. -> ) C:\Windows\System32\drivers\QcomWlanSrvx64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(services.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(services.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(services.exe ->) (Stonesoft -> Stonesoft) C:\Program Files (x86)\Stonesoft\Access Client\AccessClient-Service.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\m365copilot_autostarter.exe
(svchost.exe ->) (Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(svchost.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe
(svchost.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(svchost.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b578901fbed94a8e\igfxextN.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.336.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Registro (Lista blanca) ===================

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321112 2019-07-19] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1138992 2020-08-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [PrintDisp] => C:\Windows\system32\PrintDisp.exe [870400 2012-10-29] (ActMask Co.,Ltd - hxxp://www.all2pdf.com) [Archivo no firmado]
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9501160 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [638352 2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [407440 2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Check Point VPN] => C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe [18114808 2019-06-23] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5314096 2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) [Archivo no firmado]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5109624 2023-01-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKLM-x32\...\Run: [lxdimon.exe] => C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdimon.exe [434856 2009-04-27] (Lexmark International, Inc. -> )
HKLM-x32\...\Run: [lxdiamon] => C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdiamon.exe [25256 2009-04-27] (Lexmark International, Inc. -> )
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" [0 2025-12-16]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restricción <==== ATENCIÓN
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\anaca\AppData\Local\WebEx\ciscowebexstart.exe [4524368 2021-06-18] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [Polar FlowSync] => C:\Program Files\Polar\Polar FlowSync\FlowSync.exe [1396224 2023-02-14] (Polar Electro Oy) [Archivo no firmado]
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [6975864 2023-01-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [GoogleUpdaterTaskUser151.0.7910.0] => C:\Users\anaca\AppData\Local\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [MicrosoftEdgeAutoLaunch_FFD6E544AB9167741D2A09F1B58CE956] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4970824 2026-07-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\MountPoints2: {b9b15672-8703-11ee-9f32-545823ac5b01} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\MountPoints2: {c843cec9-fb30-11ea-9e18-089798a01310} - "D:\SISetup.exe" 
HKLM\...\Windows x64\Print Processors\HPM1210PrintProc: C:\Windows\System32\spool\prtprocs\x64\HPM1210PP.dll [74240 2012-09-29] () [Archivo no firmado]
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [65488 2020-03-06] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\HPM1210LM: C:\WINDOWS\system32\HPM1210LM.DLL [409088 2012-09-29] () [Archivo no firmado]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4471448 2026-06-26] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\149.0.7827.198\Installer\chrmstp.exe [7665304 2026-07-01] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
IFEO\aswToolsSvc.exe: [GlobalFlag] 
Startup: C:\Users\anaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Citrix Receiver.lnk [2020-09-16]
ShortcutTarget: Citrix Receiver.lnk -> C:\Program Files (x86)\Citrix\ICA Client\SelfServicePlugin\SelfServicePlugin.exe (Citrix Systems, Inc. -> Citrix Systems, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Tareas programadas (Lista blanca) =================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {03D4685F-322C-47A3-8105-68E332ADACB5} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2971808 2021-12-30] (Acer Incorporated -> ) -> C:\Program Files (x86)\Acer\Care Center\-auto
Task: {D99C0AA1-1C1F-4CDD-8A88-5DFE909AC9A7} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41632 2021-12-30] (Acer Incorporated -> )
Task: {8AB6BB72-C39F-4059-AF5D-815E94E171E9} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4836512 2021-12-30] (Acer Incorporated -> )
Task: {B28FCB21-196D-4B3E-87D2-9182E2BC35B8} - System32\Tasks\AcerCMUpdateTask2.5.22250 => "C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe"  /task (Ningún archivo)
Task: {8BDFCDFE-784D-4530-A62C-904200F91657} - System32\Tasks\AcerCMUpdateTask2.9.25180 => C:\Program Files (x86)\Acer\Amundsen\2.9.25180\awc.exe [97480 2025-06-24] (Acer Incorporated -> )
Task: {95B36B11-6070-4E3A-9888-C0CCC380C93F} - System32\Tasks\Ad-Aware Update (Weekly) => C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe  -> C:\Program Files (x86)\Lavasoft\Ad-Aware\\update all silent repair
Task: {51527126-BD5F-439B-912B-F313D3F39CA7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  (Ningún archivo)
Task: {2707009A-8E4E-491F-A1FA-FF65C90B823D} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9501160 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C3635D41-9EBD-4672-94B3-6E7AA5AB0AA8} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [9818088 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {A0EA7726-518F-47FE-AC37-FFA45926A4EA} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe  /c (Ningún archivo)
Task: {5292CC6C-297A-44EF-979F-A5FBFB875CE5} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe  /ua /installsource scheduler (Ningún archivo)
Task: {CD28F9D5-08CF-411C-9842-E208531019BA} - System32\Tasks\com.amazon.kpr.ncd => C:\Users\anaca\AppData\Local\Amazon\Kindle Previewer 3\KPR_NCD.exe [2037704 2022-06-13] (Amazon.com Services LLC -> )
Task: {099B573C-168D-490E-B9F1-9EEA815E1E5B} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [3385640 2026-06-24] (Microsoft Windows -> Microsoft Corporation)
Task: {9348A6CD-691D-4EC0-98D2-3EFC1FC46BB4} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem151.0.7910.0{298CB3A8-1DA0-4D6F-A425-8F07ACF0D8BF} => C:\Program Files (x86)\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {9E7FDA85-1246-41FD-8575-CF3360BFF72B} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser151.0.7910.0{DDEFDE34-6E18-4F4B-B305-E5C9D4925972} => C:\Users\anaca\AppData\Local\Google\GoogleUpdater\151.0.7910.0\updater.exe [9600664 2026-06-24] (Google LLC -> Google LLC)
Task: {C8C7C77D-CF5C-416B-9EB0-1558E7BBAE26} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4471448 2026-06-26] (Google LLC -> Google LLC)
Task: {108920D5-B894-4800-9F8A-93F67D9AB790} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4471448 2026-06-26] (Google LLC -> Google LLC)
Task: {9C750942-AD5E-4A13-BB26-E908FE53A941} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124896 2021-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {590E6F4D-9A72-4036-947A-244A3E31AED5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124896 2021-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {060CDAD0-B367-4F38-A33C-6E0220FBFD5A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147320 2021-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {C0EA1E20-471D-4B9A-967F-8EF477A61A1B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147320 2021-06-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Ningún archivo)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Ningún archivo)
Task: {710F4F7B-1BA1-430C-9339-9825D84AD870} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe  LogonUpdateResults (Ningún archivo)
Task: {6D2F57B6-99FA-4E83-9943-B9D9C3A6AFC1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC ReadyToReboot (Ningún archivo)
Task: {45C0464C-5772-4AD5-B275-B1E74A26BDED} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery ReadyToReboot (Ningún archivo)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Ningún archivo)
Task: {29927298-ADFD-42FA-B71D-A46FF372CFE9} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {9DB6801D-BD5D-4397-9BD2-4F5F447FC1A1} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [70792 2022-08-15] (Acer Incorporated -> )
Task: {001A2A1B-957E-4337-BD8B-CD34222147BB} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-1002 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Ningún archivo)
Task: {E48FB6BA-3E0A-42E2-9EF4-66702CB7EB24} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Ningún archivo)
Task: {AAA33133-D335-45E8-B402-3B94091F84B2} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2771616 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {23D2C48C-7322-4D8B-BD61-7F5BB2AD54EC} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [446624 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {16C04963-B959-4909-BFF3-FAE067C2A716} - System32\Tasks\S-1-5-21-3493958998-3806918064-365168309-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe  (Ningún archivo)
Task: {00DC1D5A-5F7B-47A8-90AA-3B38C6A9D1DF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5339512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {CCE7F518-97CB-4613-98FC-A7FE89403E66} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5659512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {B4E7EABD-5577-4708-8FAF-89AFE953A90A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [5839224 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {309D087F-F941-402D-A550-33782CCA1564} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [461472 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {66F1DA96-9345-48C2-9A22-587F67D3E5FE} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268096 2019-01-10] (Acer Incorporated -> Acer Incorporated)
Task: {EB1E085A-A636-469C-9FB8-B7FBFCDC7BF6} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211136 2019-01-10] (Acer Incorporated -> Acer Incorporated)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)


==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.166.211.23 212.166.132.104
Tcpip\..\Interfaces\{09ed934a-565d-4362-8051-e51633279df8}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{1eccbe5e-13f3-448c-812a-e46d25cad53c}: [DhcpNameServer] 192.168.13.202 192.168.13.203
Tcpip\..\Interfaces\{a3654dfb-5a1d-4117-8c19-0a23aba9cc1d}: [DhcpNameServer] 212.166.211.23 212.166.132.104
Tcpip\..\Interfaces\{a3654dfb-5a1d-4117-8c19-0a23aba9cc1d}\05F445D2C485131452833343535234C6F6574634C6F6E656: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{a3654dfb-5a1d-4117-8c19-0a23aba9cc1d}\37167656D636F6D614142483: [DhcpNameServer] 212.166.211.23 212.166.132.104
Tcpip\..\Interfaces\{a3654dfb-5a1d-4117-8c19-0a23aba9cc1d}\4556368693330303D25374: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: t4rjg7az.default-release-1628096782120 -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\iegmuyx9.default [2021-01-12]
FF Homepage: Mozilla\Firefox\Profiles\iegmuyx9.default -> hxxps://www.google.com/
FF SearchPlugin: C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\iegmuyx9.default\searchplugins\Bing Default Search.xml [2020-12-13]
FF ProfilePath: C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120 [2026-07-06]
FF user.js: detected! => C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\user.js [2025-09-13]
FF Homepage: Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120 -> www.google.es
FF Notifications: Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120 -> hxxps://xhkls.flameforgesmith.top; hxxps://www.facebook.com; hxxps://d91t2am071bc73b83oa0.aegisbotnetwork.co.in; hxxps://bnu11dqux4a5qe.aegisbotnetwork.co.in
FF Extension: (Al traductor de Google) - C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\Extensions\[email protected] [2025-10-13]
FF Extension: (New Tab) - C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\Extensions\[email protected] [2026-07-06]
FF Extension: (Diccionario RAE en bocadillo) - C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\Extensions\{88efc81a-ee61-43e0-8bb4-f22cba7107cf}.xpi [2025-11-14]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2020-03-05]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Ningún archivo]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Ningún archivo]
FF Plugin-x32: @webex.com/npatgpc -> C:\Program Files (x86)\Webex\npatgpc.dll [2020-09-10] (Cisco WebEx LLC -> Cisco WebEx LLC)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\anaca\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-06]
Edge DownloadDir: C:\Users\anaca\Downloads
Edge HomePage: Default -> hxxp://www.google.es/
Edge StartupUrls: Default -> "hxxps://google.es/"
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\anaca\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2026-06-26]
Edge Extension: (Cisco Webex Extension) - C:\Users\anaca\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cmihkeafcknlomclapaddfljaeegfbdl [2020-10-05]
Edge Extension: (Documentos de Google sin conexión) - C:\Users\anaca\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-26]
Edge Extension: (Edge relevant text changes) - C:\Users\anaca\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge DownloadDir: Default -> C:\Users\anaca\Downloads
Edge HKLM-x32\...\Edge\Extension: [cmihkeafcknlomclapaddfljaeegfbdl]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Chrome: 
=======
CHR Profile: C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default [2026-07-06]
CHR Notifications: Default -> hxxps://meet.google.com
CHR Extension: (Adblock Plus - bloqueador de anuncios gratis) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2026-07-01]
CHR Extension: (Speak Subtitles for YouTube) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoiihoancoimepbgfcmopaciegpigpa [2025-12-20]
CHR Extension: (Diccionario RAE en un clic 2022) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\gejdeepcjkfbepfkcfdgiodgoglakiii [2022-08-16]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-07-01]
CHR Extension: (Picture-in-Picture Extension (by Google)) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\hkgfoiooedgoejojocmhlaklaeopbecg [2025-02-20]
CHR Extension: (Ad Blocker Pro - Detener los anuncios invasivos) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifidkgmkpihooaknfaapgkejcgcbniek [2026-03-04]
CHR Extension: (Cisco Webex Extension) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2022-07-27]
CHR Extension: (Wordtune: AI Paraphrasing and Grammar Tool) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nllcnknpjnininklegdoijpljgdjkijc [2026-04-20]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (CleanBlocker) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\obhoainpkkkkjeegnbaobapedpfdhbdl [2023-01-15]
CHR Extension: (Web Cache Viewer) - C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbkloffickinnlnmefmjmjbacohecpbd [2025-03-05]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [jlhmfgmfgeifomenelglieieghnjghma]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [259232 2021-12-30] (Acer Incorporated -> Acer Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11279752 2021-06-24] (Microsoft Corporation -> Microsoft Corporation)
R2 EPWD; C:\Program Files (x86)\CheckPoint\Endpoint Connect\Watchdog\EPWD.exe [302840 2019-05-27] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 GoTrust ID Plugin; C:\Program Files\GoTrust ID Plugin\GoTrust ID Plugin\GTFidoService.exe [17408 2019-08-02] (GoTrustID Inc. -> GOTrustID Inc.)
R2 GoTrustID Service; C:\Program Files\GoTrust ID Plugin\Bridge_Service.exe [246272 2019-08-02] (GoTrustID Inc. -> GOTrustID Inc.)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136192 2009-10-15] (HP) [Archivo no firmado]
R2 HPSIService; C:\Windows\system32\HPSIsvc.exe [127800 2010-04-29] (Hewlett-Packard Company -> HP)
R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [236864 2023-10-26] (Huawei Technologies Co., Ltd. -> ) [Archivo no firmado]
S3 IsoEnvBroker; C:\WINDOWS\System32\IsoEnvBroker.dll [774144 2026-06-24] (Microsoft Windows -> Microsoft Corporation)
R2 LibreViewMASMonitor; C:\Program Files (x86)\LibreView Device Drivers\LibreViewMASMonitor.exe [17920 2022-08-11] (Newyu) [Archivo no firmado]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11514232 2026-06-30] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-06-30] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Printer Control; C:\Windows\system32\PrintCtrl.exe [121856 2012-10-21] (ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) [Archivo no firmado]
S3 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [466080 2022-01-03] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [504480 2022-01-03] (Acer Incorporated -> Acer Incorporated)
R2 QcomWlanSrv; C:\WINDOWS\System32\drivers\QcomWlanSrvx64.exe [189768 2022-09-08] (Qualcomm Atheros, Inc. -> )
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2737016 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4588408 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 sgsslvpnClientService; C:\Program Files (x86)\Stonesoft\Access Client\AccessClient-Service.exe [272184 2020-09-17] (Stonesoft -> Stonesoft)
R2 TracSrvWrapper; C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe [5923576 2019-06-23] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [305984 2019-01-10] (Acer Incorporated -> Acer Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WebexService; C:\Program Files (x86)\Webex\Webex\Applications\WebExService.exe [146240 2020-09-10] (Cisco WebEx LLC -> Cisco WebEx LLC)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R3 AcerAirplaneModeController; C:\WINDOWS\System32\DriverStore\FileRepository\acerairplanemodecontroller.inf_amd64_36869d4d52526b5b\AcerAirplaneModeController.sys [36200 2024-06-03] (Acer Incorporated -> Acer Incorporated)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [155744 2024-03-31] (Alcorlink Corp. -> )
R3 ANVSOFT_WaveExtensible; C:\WINDOWS\system32\drivers\ammvrtaudio.sys [38048 2019-12-24] (深圳市安韦尔软件技术有限公司 -> )
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2024-11-10] (Microsoft Corporation) [Archivo no firmado]
S3 EuMrx; C:\WINDOWS\System32\DRIVERS\EuMrx.sys [215704 2025-12-25] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Win 7 DDK provider)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2023-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-21] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-06-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [132712 2026-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [246376 2026-07-03] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-07-06] (Malwarebytes Inc -> Malwarebytes)
S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [20480 2010-04-28] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
S3 ptun0901; C:\WINDOWS\System32\drivers\ptun0901.sys [27136 2014-08-08] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2020-09-15] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 vna_ap; C:\WINDOWS\system32\DRIVERS\vnaap.sys [165392 2017-08-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)
R2 waclient; C:\WINDOWS\System32\drivers\waclient.sys [52504 2020-09-17] (Stonesoft -> Stonesoft)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21888 2026-06-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [646536 2026-06-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-11] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-07-06 20:24 - 2026-07-06 20:26 - 000039978 _____ C:\Users\anaca\Desktop\FRST.txt
2026-07-06 20:13 - 2026-07-06 20:13 - 000791278 _____ C:\WINDOWS\system32\perfh00A.dat
2026-07-06 20:13 - 2026-07-06 20:13 - 000164724 _____ C:\WINDOWS\system32\perfc00A.dat
2026-07-06 20:00 - 2026-07-06 20:00 - 006286282 _____ (Furtivex) C:\Users\anaca\Desktop\DoesNotBelong.exe
2026-07-06 20:00 - 2026-07-06 20:00 - 002449408 _____ (Farbar) C:\Users\anaca\Desktop\FRST64.exe
2026-07-06 19:59 - 2026-07-06 19:59 - 006286282 _____ (Furtivex) C:\Users\anaca\Downloads\DoesNotBelong.exe
2026-07-06 19:46 - 2026-07-06 19:46 - 000118959 _____ C:\Users\anaca\Downloads\The-Rooster-(DVDRip)-(DonTorrent)-(7Rhx).torrent
2026-07-06 19:43 - 2026-07-06 19:45 - 000110593 _____ C:\Users\anaca\Downloads\guilas-de-El-Cairo-(DVDRip)-(DonTorrent)-(I9MN).torrent
2026-07-06 19:37 - 2026-07-06 20:15 - 000000000 ____D C:\Users\anaca\AppData\LocalLow\IGDump
2026-07-06 19:37 - 2026-07-06 19:37 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-07-06 19:37 - 2026-07-06 19:37 - 000000008 __RSH C:\ProgramData\ntuser.pol
2026-07-06 17:31 - 2026-07-06 18:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-07-06 17:08 - 2026-07-06 17:08 - 000000000 ____D C:\DNB_Quarantine
2026-07-06 16:34 - 2026-07-06 20:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-07-06 00:05 - 2026-07-06 19:59 - 000000000 ____D C:\Users\anaca\Desktop\EXPEDIENTE
2026-07-05 20:36 - 2026-07-05 20:36 - 000058435 _____ C:\Users\anaca\Downloads\Anniversary-(BDremux-1080p)-(DonTorrent)-(ZmQY).torrent
2026-07-05 19:30 - 2026-07-05 19:30 - 001506422 _____ C:\Users\anaca\Desktop\Comunicación-.pdf
2026-07-03 19:58 - 2026-07-03 19:59 - 005129910 _____ C:\Users\anaca\Desktop\Comunicación.pdf
2026-07-03 19:46 - 2026-07-03 19:46 - 001194528 _____ C:\Users\anaca\Desktop\6275019.pdf
2026-07-02 13:46 - 2026-07-02 13:46 - 000054299 _____ C:\Users\anaca\Downloads\COMUNICACION_479630.pdf
2026-07-02 13:35 - 2026-07-02 13:35 - 000051342 _____ C:\Users\anaca\Downloads\COMUNICACION_6244452.pdf
2026-07-01 22:28 - 2026-07-01 22:29 - 000048904 _____ C:\Users\anaca\Downloads\solicitud_descargable.pdf
2026-07-01 18:50 - 2026-07-01 18:50 - 000151106 _____ C:\Users\anaca\Downloads\15.-Personas-seleccionadas-2.pdf
2026-07-01 18:48 - 2026-07-01 18:48 - 000101992 _____ C:\Users\anaca\Downloads\11.-Relacion-definitiva-de-personas-admitidas-y-excluidas-1.pdf
2026-06-30 19:31 - 2026-06-30 19:31 - 002862824 _____ (Malwarebytes) C:\Users\anaca\Downloads\MBSetup-3.3 (1).exe
2026-06-30 17:27 - 2024-01-21 15:18 - 000454770 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20260630-172744.backup
2026-06-30 16:50 - 2026-06-30 16:50 - 000000000 ____D C:\Users\anaca\AppData\Local\Sentry
2026-06-30 16:46 - 2026-06-30 16:46 - 002862824 _____ (Malwarebytes) C:\Users\anaca\Downloads\MBSetup-3.3.exe
2026-06-29 18:25 - 2026-06-29 18:25 - 000248512 _____ C:\Users\anaca\Downloads\notificacion_202499901124421.pdf
2026-06-29 18:24 - 2026-06-29 18:24 - 000131075 _____ C:\Users\anaca\Downloads\notificacion_202599901060442.pdf
2026-06-29 18:24 - 2026-06-29 18:24 - 000131075 _____ C:\Users\anaca\Desktop\notificacion_202599901060442.pdf
2026-06-27 11:12 - 2026-06-27 11:12 - 000273357 _____ C:\Users\anaca\Downloads\Solicitud registro.pdf
2026-06-27 11:11 - 2026-06-27 11:11 - 000279329 _____ C:\Users\anaca\Downloads\Solicitud firmada.pdf
2026-06-27 11:11 - 2026-06-27 11:11 - 000136763 _____ C:\Users\anaca\Downloads\Resoluciónnotificacion_202599901060442.pdf
2026-06-26 16:01 - 2026-06-26 16:01 - 011131008 _____ C:\Users\anaca\Downloads\bsplayer279.setup.exe
2026-06-25 15:24 - 2026-06-25 15:24 - 000000000 ____D C:\WINDOWS\Minidump
2026-06-24 17:02 - 2026-06-24 17:02 - 000004977 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-06-24 17:01 - 2026-06-24 17:01 - 000037624 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-06-24 17:01 - 2026-06-24 17:01 - 000037624 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-06-24 17:01 - 2026-06-24 17:01 - 000004647 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-06-24 17:01 - 2026-06-24 17:01 - 000004647 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-06-24 17:01 - 2026-06-24 17:01 - 000004647 _____ C:\WINDOWS\system32\ResPriImageList
2026-06-24 17:01 - 2026-06-24 17:01 - 000004647 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-06-24 17:01 - 2026-06-24 17:01 - 000004558 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-06-24 17:01 - 2026-06-24 17:01 - 000004558 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-06-24 17:00 - 2026-06-24 17:00 - 000087226 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-06-24 17:00 - 2026-06-24 17:00 - 000087226 _____ C:\WINDOWS\system32\ctac.json
2026-06-21 17:32 - 2026-06-21 17:32 - 000214639 _____ C:\Users\anaca\Downloads\15U.pdf
2026-06-20 21:07 - 2026-06-20 21:07 - 000077212 _____ C:\Users\anaca\Downloads\La-herencia-del-mal-(DVDRip)-(DonTorrent)-(ZWPO).torrent
2026-06-16 18:06 - 2026-06-16 18:06 - 000293069 _____ C:\Users\anaca\Downloads\01.-Convocatoria-de-plazas-y-bases-especificas-3.pdf
2026-06-16 17:57 - 2026-06-16 17:57 - 000013470 _____ C:\Users\anaca\Downloads\the-newsroom-1-10.torrent
2026-06-16 17:57 - 2026-06-16 17:57 - 000012709 _____ C:\Users\anaca\Downloads\the-newsroom-1-06.torrent
2026-06-16 17:57 - 2026-06-16 17:57 - 000012630 _____ C:\Users\anaca\Downloads\the-newsroom-1-08.torrent
2026-06-16 17:57 - 2026-06-16 17:57 - 000012230 _____ C:\Users\anaca\Downloads\the-newsroom-1-09.torrent
2026-06-16 17:57 - 2026-06-16 17:57 - 000011829 _____ C:\Users\anaca\Downloads\the-newsroom-1-07.torrent
2026-06-16 17:56 - 2026-06-16 17:57 - 000012009 _____ C:\Users\anaca\Downloads\the-newsroom-1-05.torrent
2026-06-16 17:56 - 2026-06-16 17:56 - 000016023 _____ C:\Users\anaca\Downloads\the-newsroom-1-01.torrent
2026-06-16 17:56 - 2026-06-16 17:56 - 000013109 _____ C:\Users\anaca\Downloads\the-newsroom-1-04.torrent
2026-06-16 17:56 - 2026-06-16 17:56 - 000012949 _____ C:\Users\anaca\Downloads\the-newsroom-1-03.torrent
2026-06-16 17:56 - 2026-06-16 17:56 - 000012749 _____ C:\Users\anaca\Downloads\the-newsroom-1-02.torrent
2026-06-08 15:41 - 2026-06-08 15:41 - 000103058 _____ C:\Users\anaca\Downloads\Resumen de la operación-08-06-2026.pdf
2026-06-08 15:36 - 2026-06-08 15:36 - 000146733 _____ C:\Users\anaca\Downloads\2026-F051 ANA MARIA CALZADO GIRON.pdf
2026-06-06 16:20 - 2026-06-06 16:21 - 000079866 _____ C:\Users\anaca\Downloads\Saipan-(DVDRip)-(DonTorrent)-(eAzv).torrent

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-07-06 20:25 - 2024-01-20 21:11 - 000000000 ____D C:\FRST
2026-07-06 20:24 - 2024-10-17 19:20 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-07-06 20:24 - 2020-09-15 22:58 - 000000000 ___RD C:\Users\anaca\Desktop\PELICULITAS
2026-07-06 20:13 - 2024-11-10 14:27 - 001781252 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-07-06 20:13 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-07-06 20:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-07-06 20:10 - 2024-11-09 19:14 - 000020294 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-07-06 20:05 - 2024-11-09 19:19 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-07-06 20:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-07-06 20:05 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-07-06 20:05 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-07-06 20:05 - 2020-09-23 21:13 - 000012288 ___SH C:\DumpStack.log.tmp
2026-07-06 20:05 - 2020-06-06 01:39 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-07-06 20:05 - 2020-06-06 00:58 - 000000000 ___HD C:\Intel
2026-07-06 19:50 - 2020-09-15 22:41 - 000000000 ____D C:\Users\anaca\AppData\Roaming\uTorrent
2026-07-06 19:49 - 2020-09-22 08:38 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-07-06 19:39 - 2020-06-06 01:39 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-07-06 19:37 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-07-06 17:42 - 2024-11-09 19:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-07-06 17:08 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2026-07-06 16:57 - 2024-01-21 15:21 - 000000000 ____D C:\Users\anaca\AppData\Local\Malwarebytes
2026-07-06 16:33 - 2020-09-15 22:47 - 000000000 ____D C:\Users\anaca\AppData\Local\CrashDumps
2026-07-05 21:16 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-07-05 20:24 - 2026-04-24 22:21 - 000000000 ____D C:\Users\anaca\Desktop\PARAPEN
2026-07-05 20:05 - 2025-10-27 20:53 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-07-05 19:21 - 2020-10-05 19:47 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-07-05 19:20 - 2020-09-14 20:30 - 000000000 ____D C:\Users\anaca\AppData\Roaming\Microsoft\Word
2026-07-03 20:14 - 2020-09-15 10:38 - 000000000 ____D C:\Users\anaca\AppData\Local\Packages
2026-07-03 19:42 - 2024-01-30 16:39 - 000246376 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2026-07-02 19:32 - 2024-11-09 17:20 - 000000000 ____D C:\Users\anaca
2026-07-02 00:31 - 2020-09-14 21:12 - 000002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-07-01 22:56 - 2020-09-15 17:33 - 000000000 ____D C:\Users\anaca\Desktop\Mis documentos
2026-06-30 19:30 - 2020-09-15 22:11 - 000000000 ___RD C:\Users\anaca\Desktop\Programas chulos
2026-06-30 19:24 - 2020-09-16 22:09 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2026-06-30 16:57 - 2022-05-15 11:41 - 000000000 ____D C:\ProgramData\BSD
2026-06-30 16:56 - 2024-01-21 17:33 - 000000000 ____D C:\AdwCleaner
2026-06-30 16:56 - 2020-09-15 22:41 - 000000000 ____D C:\Users\anaca\AppData\Local\Lavasoft
2026-06-30 16:50 - 2024-01-21 15:21 - 000002097 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-06-30 16:49 - 2020-09-15 10:16 - 000000000 ____D C:\ProgramData\Packages
2026-06-30 16:47 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-06-30 16:47 - 2024-01-21 15:21 - 000022120 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2026-06-30 16:46 - 2024-01-21 15:21 - 000000000 ____D C:\Program Files\Malwarebytes
2026-06-30 16:46 - 2024-01-21 15:20 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-06-28 12:24 - 2020-09-15 17:34 - 000000000 ____D C:\Users\anaca\AppData\Local\D3DSCache
2026-06-27 11:47 - 2024-04-07 17:20 - 000000000 ____D C:\Users\anaca\Desktop\N3
2026-06-24 19:10 - 2025-01-01 21:02 - 000000000 ____D C:\Users\anaca\Desktop\PN
2026-06-24 18:08 - 2024-11-09 19:11 - 000663880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-06-24 18:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-06-24 18:06 - 2026-05-17 23:59 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-06-24 18:06 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-06-24 18:06 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-06-24 16:59 - 2024-11-09 19:15 - 003367424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-06-20 21:05 - 2024-11-09 19:19 - 000003708 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-20 21:05 - 2024-11-09 19:19 - 000003582 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-11 22:41 - 2024-04-01 18:29 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-06-11 21:17 - 2026-02-08 21:39 - 000000000 ____D C:\Users\anaca\Desktop\Maquetación
2026-06-11 21:12 - 2020-09-16 20:08 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-06-11 16:22 - 2020-09-16 20:08 - 222431176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-06-11 16:16 - 2020-06-06 00:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Archivos en la raíz de algunos directorios ========

2024-01-20 19:39 - 2024-01-20 19:39 - 000000000 _____ () C:\Users\anaca\AppData\Local\installLocal
2026-02-17 23:50 - 2026-02-17 23:50 - 000000001 _____ () C:\Users\anaca\AppData\Local\llftool.4.50.agreement
2020-09-22 08:36 - 2020-09-22 08:36 - 000000410 _____ () C:\Users\anaca\AppData\Local\oobelibMkey.log
2026-02-07 20:00 - 2026-02-07 20:00 - 000001049 _____ () C:\Users\anaca\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================````

ventana11 · 6 Julio, 2026 20:26

````Resultados Farbar Recovery Scan Tool (x64) 

Modo de Inicio: Normal

```

==================== Cuentas: =============================

(Si una entrada es incluida en el fixlist, será eliminada.)

Administrador (S-1-5-21-3493958998-3806918064-365168309-500 - Administrators - Disabled)
Ana (S-1-5-21-3493958998-3806918064-365168309-1001 - Administrators - Enabled) => C:\\Users\\anaca
Ana2 (S-1-5-21-3493958998-3806918064-365168309-1002 - Limited - Enabled)
DefaultAccount (S-1-5-21-3493958998-3806918064-365168309-503 - Limited - Disabled)
Invitado (S-1-5-21-3493958998-3806918064-365168309-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3493958998-3806918064-365168309-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

µTorrent (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...\\uTorrent) (Version: 3.6.0.47132 - BitTorrent Limited)
7-Zip 22.01 (HKLM-x32...\\7-Zip) (Version: 22.01 - Igor Pavlov)
AC3Filter 2.6.0b (HKLM-x32...\\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
Acer Configuration Manager (HKLM-x32...{22165EE8-F79D-4400-A6FB-8E35391B8BEF}) (Version: 2.9.25180 - Acer)
Acer Jumpstart (HKLM-x32...{0C5ED25A-B8D1-4E71-BFCB-6B370A4EA19C}) (Version: 3.5.22220.20 - Acer)
Adobe Acrobat DC (HKLM-x32...{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32...\\AdobeGenuineService) (Version: 9.1.0.52 - Adobe Inc.)
Altova MissionKit 2022 (x64) Enterprise Edition (HKLM...{D7EEF625-D498-458D-899E-045FBA0356DD}) (Version: 2022.00.00.03 - Altova)
Any Video Converter 2.7.6 (HKLM-x32...\\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Any Video Converter Ultimate 7.1.3 (HKLM-x32...\\Any Video Converter Ultimate_is1) (Version:  - Any-Video-Converter.com)
Autofirma (HKLM...\\Autofirma) (Version: 1.9 - Gobierno de España)
AutofirmaJA (HKLM...{717CA0C8-DFC6-4D1E-BEBB-8B1240685488}) (Version: 1.6.0.5 - Junta de Andalucía)
AutoFirmaJA (HKLM-x32...\\AutoFirmaJA) (Version: 1.6.0.JAv05 - Junta de Andalucia)
Avidemux 2.7 - 32 bits (32-bit) (HKLM-x32...\\Avidemux 2.7 - 32 bits) (Version: 2.7.1.180604 - )
BS.Player FREE (HKLM-x32...\\BSPlayerf) (Version: 2.74.1086 - AB Team, d.o.o.)
calibre 64bit (HKLM...{9DA78E49-78D0-4CEF-9B93-0E1EE35B6FB4}) (Version: 6.1.0 - Kovid Goyal)
Care Center Service (HKLM...{AFB52E98-7597-4484-9202-58F0FD3512ED}) (Version: 4.00.3042 - Acer Incorporated)
CCleaner Update Helper (HKLM-x32...{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1651.5 - Piriform Software) Hidden
Check Point VPN (HKLM-x32...{0197506D-1A8A-4030-906E-A9A5C7AC6C6E}) (Version: 98.61.611 - Check Point Software Technologies Ltd.)
Cisco Webex Meetings (HKLM-x32...{1A4C6F7E-0CE3-7C9E-8769-6D69246E5A59}) (Version: 40.9.5.10 - Cisco Webex LLC)
Citrix Authentication Manager (HKLM-x32...{29A5E354-8D70-43E7-B733-83580AC0637D}) (Version: 12.2.0.18007 - Citrix Systems, Inc.) Hidden
Citrix Receiver (Redirección de HDX para Flash) (HKLM-x32...{C037407D-2676-4D4A-9956-23A923031D5F}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Receiver 4.12 (HKLM-x32...\\CitrixOnlinePluginPackWeb) (Version: 14.12.0.18020 - Citrix Systems, Inc.)
Citrix Receiver Inside (HKLM-x32...{30DF307D-A9BB-40CB-9AB5-A02E86BCC39B}) (Version: 4.12.0.65534 - Citrix Systems, Inc.) Hidden
Citrix Receiver(Aero) (HKLM-x32...{D61D76C5-44A4-407A-A5B2-2F36FE5AC0CA}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Receiver(DV) (HKLM-x32...{947A69AD-49DE-498D-8B37-67EBC46FFAC2}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Receiver(USB) (HKLM-x32...{77E2AABB-1B59-4A83-9C18-11546C135105}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Web Helper (HKLM-x32...{0378AD83-048F-4C7F-AFD6-3CEDA4212ACD}) (Version: 4.12.0.18013 - Citrix Systems, Inc.) Hidden
ClipX (HKLM-x32...\\ClipX) (Version:  - )
Comprobación de estado de PC Windows (HKLM...{8B474A92-CE3A-4F46-B6F1-6DFA1390F826}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Configurador FNMT (HKLM...\\ConfiguradorFnmt) (Version: 5.0.3 - FNMT-RCM)
Convertidor de PDF a Word 3.2 (HKLM-x32...\\Convertidor de PDF a Word_is1) (Version:  - convertidor-de-pdf.com)
DiskInternals NTFS Recovery (HKLM-x32...\\DiskInternals NTFS Recovery) (Version: 8.12.1 - DiskInternals Research)
Dynamic Application Loader Host Interface Service (HKLM...{1FB4098C-D5C9-4EBB-98FD-9C3FDAE5F526}) (Version: 1.0.0.0 - Intel Corporation) Hidden
El Grabador y Editor de Sonido PolderbitS (Edición 32-bit) (HKLM-x32...\\PolderbitSRecorder) (Version: 9.0.0.129 - PolderbitS Software)
eMule (HKLM-x32...\\eMule) (Version:  - )
FocusWriter (HKLM-x32...\\FocusWriter) (Version: 1.7.6 - Graeme Gott)
Freemake Video Converter versión 4.1.13 (HKLM-x32...\\Freemake Video Converter_is1) (Version: 4.1.13 - Mixbyte Inc.)
Gestor de taxonomías de Altova (HKLM...{8DD67D6C-11FB-4AB9-BE6E-54A3BF8B92D8}) (Version: 1.0 - Altova)
GIMP 2.10.12 (HKLM...\\GIMP-2_is1) (Version: 2.10.12 - The GIMP Team)
Google Chrome (HKLM-x32...\\Google Chrome) (Version: 149.0.7827.198 - Google LLC)
Google Video Support Plugin (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 19.12.1000.0 - Google, LLC.)
GoTo Opener (HKLM-x32...{E69269DB-A77B-4BC1-8F39-241107B09F26}) (Version: 1.0.539 - LogMeIn, Inc.)
GoToMeeting 10.19.0.19950 (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...\\GoToMeeting) (Version: 10.19.0.19950 - LogMeIn, Inc.)
GoTrust ID Plugin 2.0.10.26 (HKLM...\\GoTrust ID Plugin) (Version: 2.0.10.26 - GoTrust ID Inc.)
HandBrake 1.7.3 (HKLM-x32...\\HandBrake) (Version: 1.7.3 - )
HiSuite (HKLM-x32...\\Hi Suite) (Version: 14.0.0.310 - Huawei Technologies Co., Ltd.)
HP LaserJet Professional M1130-M1210 MFP Series (HKLM...\\HP LaserJet Professional M1130-M1210 MFP Series) (Version:  - )
HPSSupply (HKLM-x32...{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.)
iCloud Outlook (HKLM...{11727D12-D910-486F-9B36-B496F4AB334D}) (Version: 14.1.0.108 - Apple Inc.)
Infix PDF Editor versión 5.2.8.0 (HKLM-x32...\\D42C36B3-E36B-43EC-A8B4-B613D7B92782_is1) (Version: 5.2.8.0 - Iceni Technology)
Intel(R) Chipset Device Software (HKLM...{351A0D24-F6F1-4105-AA50-5D2CCC71E0DD}) (Version: 10.1.18019.8144 - Intel Corporation) Hidden
Intel(R) Icls (HKLM...{6B9F503D-FA38-4032-AA83-AB1583B01103}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM...{1F7EAD12-6B11-4B23-AC6F-78528587DEA1}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM...{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1940.13.0.1314 - Intel Corporation)
Intel(R) Management Engine Components (HKLM...{23D9742E-65D2-466E-A7AB-60C1E3D471AC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM...{E202855D-E99E-4A43-A5B7-E4F2A3AB4A91}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM...{E33FC04D-5AF5-4577-ADAA-C95F19F76094}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) OEM Extension (HKLM...{E3ADBB7B-76D7-4DB3-809B-4EA2A37A5729}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32...{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7463 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM...{31D97AAF-A1E5-4B77-BEBF-EB0C67DF7D63}) (Version: 17.5.2.1024 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM...{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.5.2.1024 - Intel Corporation)
Intel(R) Serial IO (HKLM...{93911ECE-95EE-46CA-B5AB-D345891E7A63}) (Version: 30.100.1916.1 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM...{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1916.1 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM...{C1A5573E-1508-49E1-BA6A-34E2EB15E9BF}) (Version: 17.5.2.1024 - Intel Corporation)
Java(TM) SE Development Kit 14.0.2 (64-bit) (HKLM...{6D7FE298-9878-53C8-801B-76A251D18BB2}) (Version: 14.0.2.0 - Oracle Corporation)
Kindle Previewer 3 (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...\\Kindle Previewer 3) (Version: 3.66.0 - Amazon)
K-Lite Video Conversion Pack 1.7.0 (HKLM-x32...\\klvideoconvert_is1) (Version: 1.7.0 - )
LibreView Device Drivers3.3.4 (HKLM-x32...{D2200BF1-9BF0-4C1C-9282-A727FFCC5046}) (Version: 3.3.4 - Newyu)
Malwarebytes version 5.6.1.257 (HKLM...{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}\_is1) (Version: 5.6.1.257 - Malwarebytes)
Mendeley Desktop 1.19.4 (HKLM-x32...\\Mendeley Desktop) (Version: 1.19.4 - Mendeley Ltd.)
Microsoft .NET Host - 6.0.3 (x64) (HKLM...{9ED2B6EE-5450-4B01-B051-B6D5DCE7C443}) (Version: 48.15.37625 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.3 (x64) (HKLM...{A2AE3C2D-C169-4F27-81D8-AD5641945F48}) (Version: 48.15.37625 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.3 (x64) (HKLM...{440E6A1A-3902-4A8E-90B7-6FAA6A5E78C5}) (Version: 48.15.37625 - Microsoft Corporation) Hidden
Microsoft 365 - es-es (HKLM...\\O365HomePremRetail - es-es) (Version: 16.0.14026.20308 - Microsoft Corporation)
Microsoft Edge (HKLM-x32...\\Microsoft Edge) (Version: 150.0.4078.48 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM...{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.26.16801 - Microsoft)
Microsoft Update Health Tools (HKLM...{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM...{5AEE81EA-9862-484A-BB84-4D25ED795D22}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32...{DF0837CC-01F5-4438-96B9-D7C46BC54198}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32...{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32...{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM...{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM...{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM...{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM...{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32...{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32...{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32...{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31938 (HKLM-x32...{d92971ab-f030-43c8-8545-c66c818d0e05}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.32919 (HKLM-x32...{68c77bab-8435-4d15-ae03-fd4f6e158317}) (Version: 14.38.32919.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31938 (HKLM...{7DA37AE3-D8AE-49B1-9BDC-23CA0AB9FF22}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31938 (HKLM...{0AE39060-F209-4D05-ABC7-54B8F9CFA32E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.32919 (HKLM-x32...{5F0295FE-3DAA-4C04-94A6-2AFC6D739D34}) (Version: 14.38.32919 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.32919 (HKLM-x32...{2F7F071D-83D0-4994-8237-7B0579452FD4}) (Version: 14.38.32919 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.3 (x64) (HKLM...{9F3D8C21-B2A9-4E7D-A6AA-50B34EFFA1E0}) (Version: 48.15.37635 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.3 (x64) (HKLM-x32...{7bde23ed-68e7-4655-8b90-91aa681a31da}) (Version: 6.0.3.31024 - Microsoft Corporation)
Movavi Video Editor Plus 2022 (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...\\Movavi Video Editor Plus 2022) (Version: 22.3.0 - Movavi)
Mozilla Firefox (x64 es-ES) (HKLM...\\Mozilla Firefox) (Version: 152.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM...\\MozillaMaintenanceService) (Version: 131.0.3 - Mozilla)
Music Recorder 2022 (HKLM-x32...{A98191F4-13B4-4CBC-8613-E501C5BDBCB4}) (Version: 22.0.248.0 - Audials AG)
music2pc 2.31 (HKLM-x32...\\music2pc_is1) (Version:  - MP3 Download)
Nero Start (HKLM-x32...\\Nero Common) (Version: 28.5.34.0 - Nero AG)
Nero WaveEditor (HKLM-x32...\\Nero WaveEditor) (Version: 28.5.1.1 - Nero AG)
Office 16 Click-to-Run Extensibility Component (HKLM...{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14026.20308 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM...{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14026.20308 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM...{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32...{2E9881CA-E41C-45E5-8055-61A4CC1BF93F}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Polar FlowSync versión 4.0.11 (HKLM...{6351CDAC-7961-44A5-8C07-B4F25220EE14}\_is1) (Version: 4.0.11 - Polar Electro)
Quick Access Service (HKLM...{AB25551C-74EF-4BAB-9989-891517FCF9FF}) (Version: 3.00.3038 - Acer Incorporated)
Realtek Ethernet Controller Driver (HKLM-x32...{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.36.701.2019 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32...{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8832.1 - Realtek Semiconductor Corp.)
RecCloud LightEditor V1.0.2.15 (HKLM-x32...{CAF2AD7E-6722-4800-8599-E9BCB11173CA}\_is1) (Version: 1.0.2.15 - Apowersoft LIMITED)
Scan To (HKLM...{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP)
Self-service Plug-in (HKLM-x32...{7A029AB7-8CC4-4FE8-904F-A090248C1BC7}) (Version: 4.12.0.18013 - Citrix Systems, Inc.) Hidden
Software para dispositivos de chipset Intel® (HKLM-x32...{4551f75f-3c54-4f09-8221-8c8a061bad00}) (Version: 10.1.18019.8144 - Intel(R) Corporation)
Spybot - Search & Destroy (HKLM-x32...{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}\_is1) (Version: 2.9.85.5 - Safer-Networking Ltd.)
Stilus para Word (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...\\6AF58E0C748F5D8DB66E3FEB41B086E129AECBD3) (Version: 2.4.2.0 - MeaningCloud Europe S. L.)
Stonegate Access Client (HKLM-x32...\\Stonesoft Access Client) (Version:  - Stonesoft)
TuneIn 1.19.0 (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...{491e9b4c-9857-50a5-9caf-cb9616fbaf49}) (Version: 1.19.0 - TuneIn Inc)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM...{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
User Experience Improvement Program Service (HKLM...{E9495FD3-F73D-4D33-A104-047F9E8BE6C7}) (Version: 4.00.3106 - Acer Incorporated)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (HKLM-x32...{F333A33D-125C-32A2-8DCE-5C5D14231E27}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM-x32...{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
VLC media player (HKLM...\\VLC media player) (Version: 3.0.16 - VideoLAN)
WebView2 Runtime de Microsoft Edge (HKLM-x32...\\Microsoft EdgeWebView) (Version: 149.0.4022.98 - Microsoft Corporation) Hidden
WinRAR 5.91 (64-bit) (HKLM...\\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Wondershare Filmora9(Build 9.5.2) (HKLM...\\Wondershare Filmora9_is1) (Version:  - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32...{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}\_is1) (Version: 2.6.0 - Wondershare)
yWriter5 (HKLM-x32...\\yWriter5_is1) (Version:  - Spacejock Software)
Zoom (HKU\\S-1-5-21-3493958998-3806918064-365168309-1001...\\ZoomUMX) (Version: 5.13.11 (13434) - Zoom Video Communications, Inc.)

# Packages:

@{MicrosoftWindows.55182690.Taskbar_1000.26100.3624.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\\WINDOWS\\SystemApps\\SxS\\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy \[2025-06-04\] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\\WINDOWS\\SystemApps\\SxS\\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy \[2025-06-04\] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\\WINDOWS\\SystemApps\\SxS\\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy \[2025-06-04\] ()
Acer Product Registration -> C:\\Program Files\\WindowsApps\\AcerIncorporated.AcerRegistration_2.0.3044.0_x64__48frkmn4z8aw4 \[2024-01-13\] (Acer Incorporated)
Battery Usage -> C:\\Program Files\\WindowsApps\\16494MarkoHaaja.BatteryUsage_1.1.4.0_x64__1d6jwbgybpbp6 \[2024-09-26\] (Marko Haaja)
Care Center S -> C:\\Program Files\\WindowsApps\\AcerIncorporated.AcerCareCenterS_4.0.3042.0_x64__48frkmn4z8aw4 \[2024-01-13\] (Acer Incorporated)
ChatGPT -> C:\\Program Files\\WindowsApps\\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0 \[2026-05-17\] (OpenAI) \[Startup Task\]
Complemento de motor del medio de Fotos -> C:\\Program Files\\WindowsApps\\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe \[2024-01-13\] (Microsoft Corporation)
GoTrust ID -> C:\\Program Files\\WindowsApps\\GOTrustTechnologyInc.GO-TrustAuthenticator_3.1.21.0_x64__0r04f53sqacg6 \[2024-01-13\] (GoTrustID Inc.)
Malwarebytes Anti-Malware -> C:\\Program Files\\Malwarebytes\\Anti-Malware \[2026-07-02\] ()
Microsoft Family -> C:\\Program Files\\WindowsApps\\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe \[2024-01-13\] (Microsoft Corp.)
Microsoft.AIFabric.CBS.1.6 -> C:\\WINDOWS\\SystemApps\\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe \[2026-05-27\] (Microsoft Corporation)
Movie & Audio Studio -> C:\\Program Files\\WindowsApps\\MAGIXSoftwareGmbH.MovieAudioStudio_1.1.4.0_x64__awcgk3qbzve1y \[2024-10-11\] (MAGIX Software GmbH)
PowerDirector for acer -> C:\\Program Files\\WindowsApps\\CyberLinkCorp.ac.PowerDirectorforacerDesktop_14.0.4304.0_x64__ypz87dpxkv292 \[2024-01-13\] (CYBERLINK COM CORP)
QuickAccess -> C:\\Program Files\\WindowsApps\\AcerIncorporated.QuickAccess_3.0.3038.0_x64__48frkmn4z8aw4 \[2024-01-13\] (Acer Incorporated)
Realtek Audio Control -> C:\\Program Files\\WindowsApps\\RealtekSemiconductorCorp.RealtekAudioControl_1.14.226.0_x64__dt26b99r8h8gj \[2024-01-13\] (Realtek Semiconductor Corp)
User Experience Improvement Program -> C:\\Program Files\\WindowsApps\\AcerIncorporated.UserExperienceImprovementProgram_4.0.3106.0_x64__48frkmn4z8aw4 \[2024-01-13\] (Acer Incorporated)
WhatsApp -> C:\\Program Files\\WindowsApps\\5319275A.WhatsAppDesktop_2.2623.103.0_neutral_split.scale-100_cv1g1gvanyjgm \[2026-06-26\] (WhatsApp Inc.)
WinAppRuntime.Singleton -> C:\\Program Files\\WindowsApps\\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.2.0.0_x64__8wekyb3d8bbwe \[2026-06-26\] (Microsoft Corp.)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{14100442-9664-1407-2647-000000000000}\\localserver32 -> "C:\\Users\\anaca\\AppData\\Local\\Wondershare\\Wondershare NativePush\\WsToastNotification.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{1a46400f-4c81-802a-c2c1-1e9a687a9340}\\localserver32 -> C:\\Program Files\\HandBrake\\HandBrake.exe (HandBrake Team) \[Archivo no firmado\]
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{22181302-A8A6-4F84-A541-E5CBFC70CC43}\\localserver32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\GoogleUpdater\\151.0.7910.0\\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{547E9AEF-8043-5D26-879F-01E7664192DC}\\localserver32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\GoogleUpdater\\151.0.7910.0\\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{58624db6-e4cf-4ed6-a097-e489720c719b}\\localserver32 -> "C:\\Program Files\\TechSmith\\Camtasia 2023\\CamtasiaStudio.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{6DDCE70D-A4AE-4E97-908C-BE7B2DB750AD}\\localserver32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\GoogleUpdater\\151.0.7910.0\\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{816E4B50-C8D5-4AA6-A5DD-65187BE041F5}\\InprocServer32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\Update\\1.3.36.363\\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\\InprocServer32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\Update\\1.3.36.363\\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{D310CCA1-772F-5626-A087-9FBBF12A2253}\\localserver32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\GoogleUpdater\\151.0.7910.0\\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{DFF20505-B08F-455B-AD70-4FBD055088E0}\\localserver32 -> C:\\Program Files\\Google\\Chrome\\Application\\PlatformExperienceHelper\\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\\InprocServer32 -> C:\\Users\\anaca\\AppData\\Local\\Google\\Update\\1.3.36.363\\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\\CLSID{EABAE40C-B27C-455A-B672-F234DD780948}\\InprocServer32 -> C:\\Users\\anaca\\AppData\\Local\\Microsoft\\TeamsMeetingAdd-in\\1.26.16801\\x64\\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: \[  OptaneIconOverlay\] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\\Program Files\\Intel\\OptaneShellExtensions\\OptaneShellExt.dll \[2019-07-09\] (Intel(R) Rapid Storage Technology -> )
ShellIconOverlayIdentifiers: \[ OneDrive1\] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: \[ OneDrive2\] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: \[ OneDrive3\] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: \[ OneDrive4\] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: \[ OneDrive5\] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: \[ OneDrive6\] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: \[ OneDrive7\] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive1\] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive2\] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive3\] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive4\] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive5\] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive6\] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: \[ OneDrive7\] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo
ContextMenuHandlers1-x32: \[7-Zip\] -> {23170F69-40C1-278A-1000-000100020000} => C:\\Program Files (x86)\\7-Zip\\7-zip.dll \[2022-07-15\] (Igor Pavlov) \[Archivo no firmado\]
ContextMenuHandlers1: \[Adobe.Acrobat.ContextMenu\] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\\Program Files (x86)\\Adobe\\Acrobat DC\\Acrobat Elements\\ContextMenuShim64.dll \[2020-03-06\] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: \[DiffDogFileHandlerMenu\] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\\Program Files\\Altova\\DiffDog2022\\DiffDogShellExtension_x64.dll \[2021-10-22\] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers1: \[SDECon32\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers1: \[SDECon64\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers1: \[WinRAR\] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\\Program Files\\WinRAR\\rarext.dll \[2020-08-26\] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: \[WinRAR32\] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\\Program Files\\WinRAR\\rarext32.dll \[2020-08-26\] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: \[DiffDogFileHandlerMenu\] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\\Program Files\\Altova\\DiffDog2022\\DiffDogShellExtension_x64.dll \[2021-10-22\] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers2: \[SDECon32\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers2: \[SDECon64\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers3: \[MBAMShlExt\] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\\Program Files\\Malwarebytes\\Anti-Malware\\mbshlext.dll \[2026-06-30\] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers3: \[OptaneContextMenu\] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\\Program Files\\Intel\\OptaneShellExtensions\\OptaneShellExt.dll \[2019-07-09\] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers3: \[SDECon32\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers3: \[SDECon64\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers4-x32: \[7-Zip\] -> {23170F69-40C1-278A-1000-000100020000} => C:\\Program Files (x86)\\7-Zip\\7-zip.dll \[2022-07-15\] (Igor Pavlov) \[Archivo no firmado\]
ContextMenuHandlers4: \[DiffDogFileHandlerMenu\] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\\Program Files\\Altova\\DiffDog2022\\DiffDogShellExtension_x64.dll \[2021-10-22\] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers5: \[ FileSyncEx\] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> Ningún archivo
ContextMenuHandlers5: \[DiffDogFileHandlerMenu\] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\\Program Files\\Altova\\DiffDog2022\\DiffDogShellExtension_x64.dll \[2021-10-22\] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers6-x32: \[7-Zip\] -> {23170F69-40C1-278A-1000-000100020000} => C:\\Program Files (x86)\\7-Zip\\7-zip.dll \[2022-07-15\] (Igor Pavlov) \[Archivo no firmado\]
ContextMenuHandlers6: \[Adobe.Acrobat.ContextMenu\] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\\Program Files (x86)\\Adobe\\Acrobat DC\\Acrobat Elements\\ContextMenuShim64.dll \[2020-03-06\] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: \[BriefcaseMenu\] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers6: \[MBAMShlExt\] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\\Program Files\\Malwarebytes\\Anti-Malware\\mbshlext.dll \[2026-06-30\] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: \[SDECon32\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers6: \[SDECon64\] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDECon64.dll \[2021-12-21\] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers6: \[WinRAR\] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\\Program Files\\WinRAR\\rarext.dll \[2020-08-26\] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: \[WinRAR32\] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\\Program Files\\WinRAR\\rarext32.dll \[2020-08-26\] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM...\\Drivers32: \[msacm.ac3filter\] => C:\\WINDOWS\\system32\\ac3filter64.acm \[2231296 2013-04-05\] () \[Archivo no firmado\]
HKLM...\\Drivers32: \[msacm.ac3filter\] => C:\\Windows\\SysWOW64\\ac3filter.acm \[1679360 2013-04-05\] () \[Archivo no firmado\]

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

Shortcut: C:\\Users\\anaca\\Desktop\\Mis documentos\\Archivos de programa\\DATOS\\Menú Inicio\\Programas\\Xilisoft\\RM Converter 3\\Buy.lnk -> hxxp://www.xilisoft.com/rm-converter.htm
Shortcut: C:\\Users\\anaca\\Desktop\\Mis documentos\\Archivos de programa\\DATOS\\Menú Inicio\\Programas\\DivX\\Dr. DivX 2.0 OSS\\Sitio web de {PRODUCT_SHORTNAME}.lnk -> hxxp://www.drdivx.co
Shortcut: C:\\Users\\anaca\\Desktop\\Mis documentos\\Archivos de programa\\DATOS\\Entorno de red\\Mis sitios Web en MSN\\target.lnk -> hxxp://www.msnusers.co

==================== Módulos cargados (Lista blanca) =============

2022-05-15 11:58 - 2007-05-02 05:10 - 000057344 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\App4R.DevMons.MCMDevMon.dll
2022-05-15 11:58 - 2007-04-30 08:19 - 000020480 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\App4R.DevMons.NetworkCardDevMon.dll
2022-05-15 11:58 - 2007-04-30 08:19 - 000020480 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\App4R.DevMons.ScanDevMon.dll
2022-05-15 11:58 - 2007-05-02 05:11 - 000028672 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\App4R.Monitor.Common.dll
2022-05-15 11:58 - 2007-05-02 05:11 - 000040960 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\App4R.Monitor.Core.dll
2009-10-15 19:43 - 2009-10-15 19:43 - 000240128 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86)\\HP\\HP UT LEDM\\bin\\LEDMMapperObjects.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000061440 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86)\\HP\\HPLaserJetService\\HPTools.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000964096 \_***\_ () \[Archivo no firmado\] \[El archivo está en uso\] C:\\Program Files (x86)\\HP\\HPLaserJetService\\LEDMXMLObjects.dll
2022-05-15 11:58 - 2007-04-30 08:20 - 000011776 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll
2022-05-15 11:58 - 2007-05-17 10:58 - 000765952 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\lxdicomc.dll
2022-05-15 11:58 - 2007-03-05 10:45 - 000589824 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\lxdidatr.dll
2022-05-15 11:58 - 2007-03-23 15:41 - 000278528 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\lxdiscw.dll
2020-03-06 06:11 - 2020-03-06 06:11 - 000010240 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86)\\Adobe\\Acrobat DC\\Acrobat\\locale\\es_es\\acrotray.esp
2024-03-14 20:11 - 2016-07-21 11:54 - 000137728 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86)\\Common Files\\Wondershare\\Wondershare Helper Compact\\CBSCreateVC.dll
2024-03-14 20:11 - 2017-09-12 11:34 - 001506304 \_***\_ () \[Archivo no firmado\] C:\\Program Files (x86)\\Common Files\\Wondershare\\Wondershare Helper Compact\\DAQExp.dll
2025-05-02 16:37 - 2023-02-14 11:51 - 001604096 \_***\_ () \[Archivo no firmado\] C:\\Program Files\\Polar\\Polar FlowSync\\polar20.dll
2025-05-02 16:37 - 2023-02-14 11:51 - 000506368 \_***\_ () \[Archivo no firmado\] C:\\Program Files\\Polar\\Polar FlowSync\\wslib.dll
2025-12-16 19:12 - 2012-09-29 14:25 - 000409088 \_***\_ () \[Archivo no firmado\] C:\\WINDOWS\\System32\\HPM1210LM.DLL
2025-12-16 19:12 - 2012-09-29 14:25 - 000074240 \_***\_ () \[Archivo no firmado\] C:\\WINDOWS\\system32\\spool\\PRTPROCS\\x64\\HPM1210PP.dll
2009-05-21 21:09 - 2009-05-21 21:09 - 000554496 \_***\_ (Hewlett-Packard Co.) \[Archivo no firmado\] C:\\Program Files (x86)\\HP\\Digital Imaging\\bin\\hpqusg.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000032768 \***(HP) \[Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\HP\HPLaserJetService\\HPHTTPProxy.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000031744\ ***\(HP) \[Archivo no firmado] [El archivo está en uso] C:\\Program Files (x86)\\HP\\HPLaserJetService\HPServiceCommunicator.dll
2022-05-15 11:58 - 2007-11-07 12:28 - 000077906\***\ (Lexmark International) \[Archivo no firmado\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\lxdicfg.dll
2022-05-15 11:58 - 2007-01-23 19:22 - 000077824 \_***\_ (Lexmark R&D Corp.) \[Archivo no firmado\] C:\\Program Files (x86) (x86)\\Lexmark 3500-4500 Series\\lxdimonr.dll
2022-05-15 11:58 - 2007-01-19 04:10 - 001060864 \_***\_ (Microsoft Corporation) \[Archivo no firmado] C:\\Program Files (x86) (x86)\Lexmark 3500-4500 Series\MFC71.DLL
2022-05-15 11:58 - 2007-01-19 04:10 - 000348160 ***(Microsoft Corporation) [Archivo no firmado] C:\Program Files (x86) (x86)Lexmark 3500-4500 Series\\MSVCR71.dll
2024-01-20 17:22 - 2022-12-28 22:28 - 001111883 ***(SQLite Development Team) [Archivo no firmado] C:\Program Files (x86)\\Spybot - Search & Destroy 2\\sqlite3.dll
2024-01-20 17:22 - 2019-12-21 12:55 - 001380864 ***(The OpenSSL Project, hxxp://www.openssl.org) [Archivo no firmado] C:\Program Files (x86)\\Spybot - Search & Destroy 2\libeay32.dll
2024-01-20 17:22 - 2019-12-21 12:55 - 000337920 ***(The OpenSSL Project, hxxp://www.openssl.org/) [Archivono firmado] C:\Program Files (x86)\Spybot - Search & Destroy 2\\ssleay32.dll 
2024-03-14 20:11 - 2017-09-12 11:36 - 000708608 *** (Wondershare) [Archivo no firmado] C:Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll
```

ventana11 · 6 Julio, 2026 20:26

````==================== Alternate Data Streams (Lista blanca) ========

(Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [240]AlternateDataStreams: C:\Users\anaca\Downloads\camtasia(1).exe:MBAM.Zone.Identifier [143]AlternateDataStreams: C:\Users\anaca\Downloads\HandBrake-1.7.3-x86_64-Win_GUI.exe:MBAM.Zone.Identifier [601]AlternateDataStreams: C:\Users\anaca\Downloads\lighteditor-setup-saas-converter.exe:MBAM.Zone.Identifier [202]AlternateDataStreams: C:\Users\anaca\Downloads\NeroWaveEditor.exe:MBAM.Zone.Identifier [188]AlternateDataStreams: C:\Users\anaca\Downloads\OperaGXSetup.exe:MBAM.Zone.Identifier [258]AlternateDataStreams: C:\Users\anaca\Downloads\uniconverter15_setup_full14241.exe:MBAM.Zone.Identifier [196]

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer (Lista blanca) =============

HKU\S-1-5-21-3493958998-3806918064-365168309-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.es/SearchScopes: HKU\S-1-5-21-3493958998-3806918064-365168309-1001 -> DefaultScope {07F2ACC0-D86A-4EF4-898E-47450BDB6B08} URL =SearchScopes: HKU\S-1-5-21-3493958998-3806918064-365168309-1001 -> {07F2ACC0-D86A-4EF4-898E-47450BDB6B08} URL =BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)DPF: HKLM-x32 {3195CF7C-E9E2-49B2-8B61-14F285298E1C} hxxps://ssl.cadiz.es/wa/AccessClientLoader.cabDPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C}Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

(Si una entrada es incluida en el fixlist, será eliminada del registro.)

IE restricted site: HKU.DEFAULT...\007guard.com -> install.007guard.comIE restricted site: HKU.DEFAULT...\008i.com -> 008i.comIE restricted site: HKU.DEFAULT...\008k.com -> www.008k.comIE restricted site: HKU.DEFAULT...\00hq.com -> www.00hq.comIE restricted site: HKU.DEFAULT...\010402.com -> 010402.comIE restricted site: HKU.DEFAULT...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.comIE restricted site: HKU.DEFAULT...\0scan.com -> www.0scan.comIE restricted site: HKU.DEFAULT...\1-2005-search.com -> www.1-2005-search.comIE restricted site: HKU.DEFAULT...\1-domains-registrations.com -> www.1-domains-registrations.comIE restricted site: HKU.DEFAULT...\1000gratisproben.com -> www.1000gratisproben.comIE restricted site: HKU.DEFAULT...\1001namen.com -> www.1001namen.comIE restricted site: HKU.DEFAULT...\100888290cs.com -> mir.100888290cs.comIE restricted site: HKU.DEFAULT...\100sexlinks.com -> www.100sexlinks.comIE restricted site: HKU.DEFAULT...\10sek.com -> www.10sek.comIE restricted site: HKU.DEFAULT...\12-26.net -> user1.12-26.netIE restricted site: HKU.DEFAULT...\12-27.net -> user1.12-27.netIE restricted site: HKU.DEFAULT...\123fporn.info -> www.123fporn.infoIE restricted site: HKU.DEFAULT...\123haustiereundmehr.com -> www.123haustiereundmehr.comIE restricted site: HKU.DEFAULT...\123moviedownload.com -> www.123moviedownload.comIE restricted site: HKU.DEFAULT...\123simsen.com -> www.123simsen.com

Hay 7942 más sitios.

IE trusted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\localhost -> localhostIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\007guard.com -> install.007guard.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\008i.com -> 008i.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\008k.com -> www.008k.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\00hq.com -> www.00hq.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\010402.com -> 010402.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\0scan.com -> www.0scan.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\1-2005-search.com -> www.1-2005-search.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\1-domains-registrations.com -> www.1-domains-registrations.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\1000gratisproben.com -> www.1000gratisproben.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\1001namen.com -> www.1001namen.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\100888290cs.com -> mir.100888290cs.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\100sexlinks.com -> www.100sexlinks.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\10sek.com -> www.10sek.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\12-26.net -> user1.12-26.netIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\12-27.net -> user1.12-27.netIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\123fporn.info -> www.123fporn.infoIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\123haustiereundmehr.com -> www.123haustiereundmehr.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\123moviedownload.com -> www.123moviedownload.comIE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001...\123simsen.com -> www.123simsen.com

Hay 7942 más sitios.

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2019-03-19 06:49 - 2026-06-30 17:27 - 000454770 ____R C:\WINDOWS\system32\drivers\etc\hosts127.0.0.1	localhost127.0.0.1	www.007guard.com127.0.0.1	007guard.com127.0.0.1	008i.com127.0.0.1	www.008k.com127.0.0.1	008k.com127.0.0.1	www.00hq.com127.0.0.1	00hq.com127.0.0.1	010402.com127.0.0.1	www.032439.com127.0.0.1	032439.com127.0.0.1	www.0scan.com127.0.0.1	0scan.com127.0.0.1	1000gratisproben.com127.0.0.1	www.1000gratisproben.com127.0.0.1	1001namen.com127.0.0.1	www.1001namen.com127.0.0.1	100888290cs.com127.0.0.1	www.100888290cs.com127.0.0.1	www.100sexlinks.com127.0.0.1	100sexlinks.com127.0.0.1	10sek.com127.0.0.1	www.10sek.com127.0.0.1	www.1-2005-search.com127.0.0.1	1-2005-search.com127.0.0.1	123fporn.info127.0.0.1	www.123fporn.info127.0.0.1	www.123haustiereundmehr.com127.0.0.1	123haustiereundmehr.com127.0.0.1	123moviedownload.com

Hay 15609 más lineas.

==================== Network ===========================

(Actualmente no existe una corrección automática para esta sección.)

DNS Servers: 212.166.211.23 - 212.166.132.104Firewall de Windows está habilitado.

Network Binding:

Wi-Fi: Qualcomm Atheros QCA9377 Wireless Network Adapter -> Qcamain10x64.sysEthernet: Realtek PCIe GbE Family Controller -> rt640x64.sysEthernet 2: Check Point Virtual Network Adapter For Endpoint VPN Client -> vnaap.sys

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKU\S-1-5-21-3493958998-3806918064-365168309-1001\Control Panel\Desktop\Wallpaper ->HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)HKU\S-1-5-21-3493958998-3806918064-365168309-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto x64 dv.exeHKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto_FilesHKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjPatcher.exeHKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjHook.dllHKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto x64 dv.exeHKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto_Files

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{523370B6-9A9F-4F59-AD4A-8B3B49496D67}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)FirewallRules: [{A12FA829-E41E-4DD2-A587-585A7C70F2EE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)FirewallRules: [{EC13C52A-107E-42BE-A4D7-456D950DB577}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [{BFF92D30-015A-43BC-8F21-A0F59E977A4F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [UDP Query User{B7E21023-FA85-4998-A8A5-D650EE294249}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exeFirewallRules: [TCP Query User{6D8C09CD-A988-46B9-90A3-FFF670E75EC7}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exeFirewallRules: [{1ECC1BC9-17B1-4E56-B97A-DFE8110D96E5}] => (Allow) C:\Program Files (x86)\Apowersoft\RecCloud LightEditor\RecCloud LightEditor.exe (Apowersoft Ltd -> Apowersoft)FirewallRules: [{3BEA9F86-7ACD-4748-831B-B4B6F6B3F432}] => (Allow) C:\Program Files (x86)\Apowersoft\RecCloud LightEditor\RecCloud LightEditor.exe (Apowersoft Ltd -> Apowersoft)FirewallRules: [{A216E762-F806-44D1-8AE6-A6B20E8EC28F}] => (Allow) C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => Ningún archivoFirewallRules: [UDP Query User{ED43E001-7571-43C5-9D6D-9D1E454D8E93}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivoFirewallRules: [TCP Query User{05745102-4000-4A83-B654-5465053E35E2}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivoFirewallRules: [UDP Query User{CE1F7F4E-C8A7-4C6B-9A5A-70ABADCD9003}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivoFirewallRules: [TCP Query User{487A9C2A-DBE5-493A-8E7A-28840A714D5E}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivoFirewallRules: [UDP Query User{583EF1E7-7742-43ED-BA14-6D7085EC4472}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exeFirewallRules: [TCP Query User{6CF028D4-65B1-4726-944D-5947A1FC97A5}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exeFirewallRules: [{86C608EF-EC46-472E-9792-B1498B32EDD8}] => (Allow) C:\Users\anaca\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)FirewallRules: [{4046493B-65B2-48AF-B71C-8B6AE85F39C0}] => (Allow) C:\Users\anaca\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)FirewallRules: [CN.wAQdN188] => (Allow) C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Windows Driver Foundation (WDF).exe => Ningún archivoFirewallRules: [TCP Query User{EAC89EDB-0D08-41D2-8000-390C314586A4}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]FirewallRules: [UDP Query User{4A0A4B21-FEAE-4962-A8B5-D794CAA3D6BD}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]FirewallRules: [TCP Query User{F09C7FC7-4F24-4A24-8A24-611DC3A18C5B}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )FirewallRules: [UDP Query User{CCEF247A-921A-4E93-8D88-2F1AE3D4506C}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )FirewallRules: [TCP Query User{C7C27A7F-6765-4BAB-9DF2-F22D1768BD93}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]FirewallRules: [UDP Query User{8EEDC186-BD2A-4249-97C1-A1DD2131FDF6}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]FirewallRules: [TCP Query User{81CDD293-7683-4FB1-8B10-52BFC0B1F6A3}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )FirewallRules: [UDP Query User{5DD61737-A0FA-4B01-8FFA-2D75022E660B}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )FirewallRules: [TCP Query User{F79F9D17-F95A-4118-BC00-DBC1D33D0587}C:\program files\autofirma\autofirma\jre\bin\javaw.exe] => (Allow) C:\program files\autofirma\autofirma\jre\bin\javaw.exeFirewallRules: [UDP Query User{4EBFEB2B-4460-49F0-A414-EF18C1A13A1B}C:\program files\autofirma\autofirma\jre\bin\javaw.exe] => (Allow) C:\program files\autofirma\autofirma\jre\bin\javaw.exeFirewallRules: [{5437614F-25E8-4495-95F9-A0D88C71CDF0}] => (Allow) LPort=12972FirewallRules: [{3759D230-D5E8-4745-87D0-A454B9A72281}] => (Allow) C:\Program Files (x86)\Audials\MusicRecorder 2022\Audials.exe (Audials AG -> Audials AG)FirewallRules: [{FD057789-BFEE-4906-8505-41B0004ADE4F}] => (Allow) LPort=14714FirewallRules: [{8E100505-59BC-48AE-B538-F96528131C64}] => (Allow) LPort=31931FirewallRules: [{DAEEC7F9-0B50-4170-86C0-EAC6A583D6C9}] => (Allow) LPort=5354FirewallRules: [{3CC9F194-9F55-434C-852A-BB1171237D67}] => (Allow) LPort=5354FirewallRules: [{1A45281D-5815-4160-982B-6DD2F9FDCB76}] => (Allow) LPort=5354FirewallRules: [{E7AB9C4B-6592-477E-A388-9B24B53422A1}] => (Allow) LPort=5354FirewallRules: [{006A6B7A-4FFC-4FB8-8FDC-ED57E1F5934C}] => (Allow) LPort=24522FirewallRules: [{A8B58DAE-C684-4F50-9D4E-CA1502F4EA22}] => (Allow) LPort=14672FirewallRules: [TCP Query User{2EF75737-0576-4C2C-8DDD-B4359BB7B188}C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exe] => (Allow) C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exeFirewallRules: [UDP Query User{A83DE0CB-62CC-4A31-9105-5E794B189C35}C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exe] => (Allow) C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exeFirewallRules: [{7CFA8F36-D713-4257-B1D1-ED5496576F36}] => (Allow) C:\Program Files (x86)\Nero\Nero Common\Nero Launcher\NeroLauncher.exe (Nero AG -> Nero AG)FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [{021FC459-F658-4AE6-BE02-FDE854C34F7A}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)FirewallRules: [{0DA12AB9-A539-4956-A1B1-6362941789C9}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)FirewallRules: [{C0F1203C-0D77-4C20-BEFB-1386F6D0D812}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)FirewallRules: [{987E0227-E89B-4938-8757-5967D8980811}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)FirewallRules: [{B7771083-75F0-468A-B144-D7C49C9B265E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)FirewallRules: [{84C8C975-6FAF-44E9-A269-A9DAD6FC3072}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [{DAC2B8C7-1471-403D-A7BA-4DC849D4DA92}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [{9FAC1C7F-7B02-4EF7-AA23-9A04FC810DAE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)FirewallRules: [{4531BEA2-6728-469B-8BFD-88BF1EDF9D02}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray accessStandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner ServiceStandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 UpdaterStandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Puntos de Restauración =========================

05-07-2026 21:11:55 Windows Update05-07-2026 21:11:55 Windows Update05-07-2026 21:11:55 Windows Update

==================== Dispositivos defectuosos en el Administrador de dispositivos ============Name: HP LaserJet Professional M1130 MFP SeriesDescription: HP LaserJet Professional M1130 MFP SeriesClass Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}Manufacturer: Hewlett-Packard, Inc.Service: usbscanProblem: : This device cannot start. (Code10)Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

==================== Errores del registro de eventos: ========================

Errores de aplicación:

Error: (07/06/2026 08:05:45 PM) (Source: Windows Search Service) (EventID: 7042) (User: )Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: Error en la fase de recuperación.

Contexto: aplicación , catálogo SystemIndex

Detalles:0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 08:05:45 PM) (Source: Windows Search Service) (EventID: 3602) (User: )Description: ID 1 del error producido durante la etapa de recuperación de Windows Search, reinicie el servicio. Si el error persiste, vuelva a crear el índice.

Contexto: aplicación , catálogo SystemIndex

Detalles:0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 08:05:23 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)Description: Nombre de aplicación con errores: SDFSSvc.exe, versión: 2.9.85.231, marca de tiempo: 0x63ebb1a4Nombre del módulo con errores: KERNELBASE.dll, versión: 10.0.26100.8737, marca de tiempo: 0x7160435aCódigo de excepción: 0x0eedfadeDesplazamiento con errores: 0x0016a394Id. de proceso con errores: 0x1110Tiempo de inicio de aplicación con errores: 0x1dd0d6e1b613c24Ruta de aplicación con errores: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exeRuta de módulo con errores: C:\WINDOWS\System32\KERNELBASE.dllId. de informe: 480ee577-c8f3-4b6e-9e75-b11f4b448ab3Nombre completo del paquete con errores:Id. de aplicación relacionado con el paquete con errores:

Error: (07/06/2026 08:04:33 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)Description: El programa cmd.exe versión 10.0.26100.8737 dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible sobre este problema, comprueba el historial de problemas en el panel de control de Seguridad y mantenimiento.

Error: (07/06/2026 07:39:26 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )Description: Event-ID 5

Error: (07/06/2026 07:37:29 PM) (Source: Windows Search Service) (EventID: 7042) (User: )Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: Error en la fase de recuperación.

Contexto: aplicación , catálogo SystemIndex

Detalles:0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 07:37:29 PM) (Source: Windows Search Service) (EventID: 3602) (User: )Description: ID 1 del error producido durante la etapa de recuperación de Windows Search, reinicie el servicio. Si el error persiste, vuelva a crear el índice.

Contexto: aplicación , catálogo SystemIndex

Detalles:0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 07:37:09 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)Description: Nombre de aplicación con errores: SDFSSvc.exe, versión: 2.9.85.231, marca de tiempo: 0x63ebb1a4Nombre del módulo con errores: KERNELBASE.dll, versión: 10.0.26100.8737, marca de tiempo: 0x7160435aCódigo de excepción: 0x0eedfadeDesplazamiento con errores: 0x0016a394Id. de proceso con errores: 0x48a8Tiempo de inicio de aplicación con errores: 0x1dd0d597cdbec8aRuta de aplicación con errores: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exeRuta de módulo con errores: C:\WINDOWS\System32\KERNELBASE.dllId. de informe: 6ab29a1d-123c-47a9-aafd-70ade0c15d80Nombre completo del paquete con errores:Id. de aplicación relacionado con el paquete con errores:

Errores del sistema:

Error: (07/06/2026 08:30:42 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:29:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:27:52 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:27:22 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:26:52 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:24:17 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:23:47 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:13:28 PM) (Source: Service Control Manager) (EventID: 7011) (User: )Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Windows Defender:

TimeCreated : 06/07/2026 19:43:16(Message     : Antivirus de Microsoft Defender servicio parecÃa estar bloqueado durante el apagado.) (Timout (segundos):  120) (Componente:  ShutdownSpyNetManager) (Terminado automÃ¡ticamente:  0)TimeCreated : 06/07/2026 17:17:21(Message     : Antivirus de Microsoft Defender Å›Â¢ÄÎ· Ð½Ð´Å¡ Ð²Ã©Ñ‘Å† Ñ•Å¥ÏƒÏÑ€ÎÄ‘ ÑŒÐ·Æ’Å‘Å—Ñ ÑÐ¾mÏ†ÄºÑÏ„Ä«Î¿Ð¿.%Ï€ %Å¥ÅšÑÃ¡Ð¹ ) (ÎŠÄ:%Ð²{DFC0CD48-BB9A-4251-9BD3-115C89F727A6}%Ï€ %Å¥Ð…Ä‹ÂªÎ· Ð¢Ã¿ÏÃ¨:%Ð²Antimalware%Åˆ %Ï„Å Ä‹Ç»Å„ Ð Î¬Å—Ã mÄ“Å£Ã¨Å—Å›:%ÑŠExamen ) (rÃ¡pido%Åˆ  %Å§Å¨ÅÑÅ™:%ÑŠNT AUTHORITY\SYSTEM%Åˆ %Å£ÅœÅ£Î¿Ï† ÒÃ«Ã¤ÅŸÅ‘Åˆ:%ÑŒÐ¯Î¡Ã‡ Ä‡Ç¿Ï€Ð¸Ä“Ã§Å¥Î¯Ã²Ð» ÑÅ«â¿Î´ÅáºÐ»)TimeCreated : 06/07/2026 16:38:03(Message     : Antivirus de Microsoft Defender servicio parecÃa estar bloqueado durante el apagado.) (Timout (segundos):  120) (Componente:  ShutdownSpyNetManager) (Terminado automÃ¡ticamente:  0)TimeCreated : 03/07/2026 19:45:39(Message     : Antivirus de Microsoft Defender servicio parecÃa estar bloqueado durante el apagado.) (Timout (segundos):  120) (Componente:  CleanupRtpPlugin) (Terminado automÃ¡ticamente:  0)TimeCreated : 29/06/2026 18:48:57(Message     : Antivirus de Microsoft Defender Å›Â¢ÄÎ· Ð½Ð´Å¡ Ð²Ã©Ñ‘Å† Ñ•Å¥ÏƒÏÑ€ÎÄ‘ ÑŒÐ·Æ’Å‘Å—Ñ ÑÐ¾mÏ†ÄºÑÏ„Ä«Î¿Ð¿.%Ï€ %Å¥ÅšÑÃ¡Ð¹ ) (ÎŠÄ:%Ð²{A7237D27-B0C8-420C-B03A-449F07AED2E2}%Ï€ %Å¥Ð…Ä‹ÂªÎ· Ð¢Ã¿ÏÃ¨:%Ð²Antimalware%Åˆ %Ï„Å Ä‹Ç»Å„ Ð Î¬Å—Ã mÄ“Å£Ã¨Å—Å›:%ÑŠExamen ) (rÃ¡pido%Åˆ  %Å§Å¨ÅÑÅ™:%ÑŠNT AUTHORITY\SYSTEM%Åˆ %Å£ÅœÅ£Î¿Ï† ÒÃ«Ã¤ÅŸÅ‘Åˆ:%ÑŒÅœÄ‰Ð½ÎÎ´ÂµÅ‚Ã«Ã° ÅŸÑÎ¬Î® Ï‰Ã¢Å› Ñ•Ä¸Ã¬ÏÏÑ”Î´ ÑŒÎÄ‰Î¬Ã¹ÅÃ« Å£Ä¥Ã© Å‚Ã¡Å›Ï„ ) (ÅŸÅÑÄÑ”Å›Ñ•Æ’Ñ†Å€ Å›Ã§Ã£Å„ Ñ‰Ã¥Å› áºƒÄ«Ï„Ñ’Ã¬Ï€ Å¥Ð½â„® â„“Ã¤Ñ•Ï„ 7 Î´Ð´Ã¿ÅŸ)TimeCreated : 28/06/2026 11:58:52(Message     : Antivirus de Microsoft Defender Å›Â¢ÄÎ· Ð½Ð´Å¡ Ð²Ã©Ñ‘Å† Ñ•Å¥ÏƒÏÑ€ÎÄ‘ ÑŒÐ·Æ’Å‘Å—Ñ ÑÐ¾mÏ†ÄºÑÏ„Ä«Î¿Ð¿.%Ï€ %Å¥ÅšÑÃ¡Ð¹ ) (ÎŠÄ:%Ð²{D05E2967-5BC6-4A85-A298-FBAE660C82AE}%Ï€ %Å¥Ð…Ä‹ÂªÎ· Ð¢Ã¿ÏÃ¨:%Ð²Antimalware%Åˆ %Ï„Å Ä‹Ç»Å„ Ð Î¬Å—Ã mÄ“Å£Ã¨Å—Å›:%ÑŠExamen ) (rÃ¡pido%Åˆ  %Å§Å¨ÅÑÅ™:%ÑŠNT AUTHORITY\SYSTEM%Åˆ %Å£ÅœÅ£Î¿Ï† ÒÃ«Ã¤ÅŸÅ‘Åˆ:%ÑŒÅœÄ‰Ð½ÎÎ´ÂµÅ‚Ã«Ã° ÅŸÑÎ¬Î® Ï‰Ã¢Å› Ñ•Ä¸Ã¬ÏÏÑ”Î´ ÑŒÎÄ‰Î¬Ã¹ÅÃ« Å£Ä¥Ã© Å‚Ã¡Å›Ï„ ) (ÅŸÅÑÄÑ”Å›Ñ•Æ’Ñ†Å€ Å›Ã§Ã£Å„ Ñ‰Ã¥Å› áºƒÄ«Ï„Ñ’Ã¬Ï€ Å¥Ð½â„® â„“Ã¤Ñ•Ï„ 7 Î´Ð´Ã¿ÅŸ)

CodeIntegrity:

Date: 2026-07-06 20:35:46Description:Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.

Date: 2026-07-06 20:33:35Description:Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

==================== Información de la memoria ===========================

BIOS: Insyde Corp. V1.27 07/07/2022Placa base: IL Sleepy_ILProcesador: Intel(R) Core(TM) i5-1035G1 CPU @ 1.00GHzPorcentaje de memoria en uso: 75%RAM física total: 7981.12 MBRAM física disponible: 1916.81 MBVirtual total: 10797.12 MBVirtual disponible: 4242.92 MB

==================== Unidades ================================

Drive c: (Acer) (Fixed) (Total:475.83 GB) (Free:223.99 GB) (Model: KINGSTON OM8PCP3512F-AA) NTFS

\?\Volume{94928fee-e9bf-472f-b841-2cf985eb35b0}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.07 GB) NTFS\?\Volume{7778beb3-b718-4a96-9312-d58f6f31d1d4}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Tabla de particiones ====================

==================== Final de Addition.txt =======================````

ventana11 · 6 Julio, 2026 20:28

Ha sido imposible aplicar la herramienta doesnotbelong. Tras desactivar los antivirus y antimalware, en los sucesivos intentos, la aplicación no avanzaba tras el paso dos y más de tres cuartos de hora desde el inicio.

furtivex · 6 Julio, 2026 22:46

Farbar Recovery Scan Tool: FIX

Nota: tras ejecutar el script (posiblemente), se cerrarán todas las pestañas abiertas del navegador, se cerrará la sesión de sus cuentas y se borrarán los archivos temporales, la papelera de reciclaje, el historial del navegador, las cookies y la caché.

Desactive su antivirus antes de reiniciar. Seleccione el siguiente código:

Start::
SystemRestore: ON
CreateRestorePoint:
CloseProcesses:

FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Ningún archivo]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Ningún archivo]
FF user.js: detected! => C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\user.js [2025-09-13]
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restricción <==== ATENCIÓN
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\MountPoints2: {b9b15672-8703-11ee-9f32-545823ac5b01} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\MountPoints2: {c843cec9-fb30-11ea-9e18-089798a01310} - "D:\SISetup.exe" 
Task: {001A2A1B-957E-4337-BD8B-CD34222147BB} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-1002 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Ningún archivo)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Ningún archivo)
Task: {16C04963-B959-4909-BFF3-FAE067C2A716} - System32\Tasks\S-1-5-21-3493958998-3806918064-365168309-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe  (Ningún archivo)
Task: {45C0464C-5772-4AD5-B275-B1E74A26BDED} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery ReadyToReboot (Ningún archivo)
Task: {51527126-BD5F-439B-912B-F313D3F39CA7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  (Ningún archivo)
Task: {5292CC6C-297A-44EF-979F-A5FBFB875CE5} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe  /ua /installsource scheduler (Ningún archivo)
Task: {6D2F57B6-99FA-4E83-9943-B9D9C3A6AFC1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC ReadyToReboot (Ningún archivo)
Task: {710F4F7B-1BA1-430C-9339-9825D84AD870} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe  LogonUpdateResults (Ningún archivo)
Task: {A0EA7726-518F-47FE-AC37-FFA45926A4EA} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe  /c (Ningún archivo)
Task: {B28FCB21-196D-4B3E-87D2-9182E2BC35B8} - System32\Tasks\AcerCMUpdateTask2.5.22250 => "C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe"  /task (Ningún archivo)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Ningún archivo)
Task: {E48FB6BA-3E0A-42E2-9EF4-66702CB7EB24} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Ningún archivo)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Ningún archivo)
FF Notifications: Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120 -> hxxps://xhkls.flameforgesmith.top; hxxps://d91t2am071bc73b83oa0.aegisbotnetwork.co.in; hxxps://bnu11dqux4a5qe.aegisbotnetwork.co.in

Task: {309D087F-F941-402D-A550-33782CCA1564} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [461472 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {66F1DA96-9345-48C2-9A22-587F67D3E5FE} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268096 2019-01-10] (Acer Incorporated -> Acer Incorporated)
Task: {EB1E085A-A636-469C-9FB8-B7FBFCDC7BF6} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211136 2019-01-10] (Acer Incorporated -> Acer Incorporated)
Task: {29927298-ADFD-42FA-B71D-A46FF372CFE9} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {9DB6801D-BD5D-4397-9BD2-4F5F447FC1A1} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [70792 2022-08-15] (Acer Incorporated -> )
C:\Program Files (x86)\AVAST Software
AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75} 

Folder: c:\DNB_Quarantine\L

cmd: if exist c:\DNB_Quarantine\L\1.txt type c:\DNB_Quarantine\L\1.txt
cmd: if exist c:\DNB_Quarantine\L\2.txt type c:\DNB_Quarantine\L\2.txt
cmd: if exist c:\DNB_Quarantine\L\3.txt type c:\DNB_Quarantine\L\3.txt
cmd: if exist c:\DNB_Quarantine\L\4.txt type c:\DNB_Quarantine\L\4.txt
cmd: if exist c:\DNB_Quarantine\L\5.txt type c:\DNB_Quarantine\L\5.txt
cmd: if exist c:\DNB_Quarantine\L\6.txt type c:\DNB_Quarantine\L\6.txt

Removeproxy:
Hosts:

CMD: netsh winsock reset catalog
CMD: netsh int ip reset resetlog.txt
CMD: reg export HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules C:\FirewallBackup.reg
C:\FirewallBackup.reg
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: bitsadmin /reset /allusers
CMD: ipconfig /flushdns

Emptytemp:
End::

Copie el texto seleccionado (clic derecho - Copiar). Ejecute FRST (FRST64) como administrador. Haga clic en “Reparar” una vez (!) y espere. El programa creará un archivo de registro (Fixlog.txt). Adjúntelo a su próximo mensaje.

El ordenador se reiniciará automáticamente.

furtivex · 6 Julio, 2026 22:48

¿Podrías volver a pegar el archivo Addition.txt entre etiquetas de código, ya que resulta difícil de leer en el foro sin él? @ventana11

ventana11 · 7 Julio, 2026 19:43

````Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 06-07-2026

Microsoft Windows 11 Home Versión 25H2 26200.8737 (X64) (2024-11-10 12:23:13)
Modo de Inicio: Normal
==========================================================


==================== Cuentas: =============================

(Si una entrada es incluida en el fixlist, será eliminada.)

Administrador (S-1-5-21-3493958998-3806918064-365168309-500 - Administrators - Disabled)
Ana (S-1-5-21-3493958998-3806918064-365168309-1001 - Administrators - Enabled) => C:\Users\anaca
Ana2 (S-1-5-21-3493958998-3806918064-365168309-1002 - Limited - Enabled)
DefaultAccount (S-1-5-21-3493958998-3806918064-365168309-503 - Limited - Disabled)
Invitado (S-1-5-21-3493958998-3806918064-365168309-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-3493958998-3806918064-365168309-504 - Limited - Disabled)

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\uTorrent) (Version: 3.6.0.47132 - BitTorrent Limited)
7-Zip 22.01 (HKLM-x32\...\7-Zip) (Version: 22.01 - Igor Pavlov)
AC3Filter 2.6.0b (HKLM-x32\...\AC3Filter_is1) (Version: 2.6.0b - Alexander Vigovsky)
Acer Configuration Manager (HKLM-x32\...\{22165EE8-F79D-4400-A6FB-8E35391B8BEF}) (Version: 2.9.25180 - Acer)
Acer Jumpstart (HKLM-x32\...\{0C5ED25A-B8D1-4E71-BFCB-6B370A4EA19C}) (Version: 3.5.22220.20 - Acer)
Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 9.1.0.52 - Adobe Inc.)
Altova MissionKit 2022 (x64) Enterprise Edition (HKLM\...\{D7EEF625-D498-458D-899E-045FBA0356DD}) (Version: 2022.00.00.03 - Altova)
Any Video Converter 2.7.6 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Any Video Converter Ultimate 7.1.3 (HKLM-x32\...\Any Video Converter Ultimate_is1) (Version:  - Any-Video-Converter.com)
Autofirma (HKLM\...\Autofirma) (Version: 1.9 - Gobierno de España)
AutofirmaJA (HKLM\...\{717CA0C8-DFC6-4D1E-BEBB-8B1240685488}) (Version: 1.6.0.5 - Junta de Andalucía)
AutoFirmaJA (HKLM-x32\...\AutoFirmaJA) (Version: 1.6.0.JAv05 - Junta de Andalucia)
Avidemux 2.7 - 32 bits (32-bit) (HKLM-x32\...\Avidemux 2.7 - 32 bits) (Version: 2.7.1.180604 - )
BS.Player FREE (HKLM-x32\...\BSPlayerf) (Version: 2.74.1086 - AB Team, d.o.o.)
calibre 64bit (HKLM\...\{9DA78E49-78D0-4CEF-9B93-0E1EE35B6FB4}) (Version: 6.1.0 - Kovid Goyal)
Care Center Service (HKLM\...\{AFB52E98-7597-4484-9202-58F0FD3512ED}) (Version: 4.00.3042 - Acer Incorporated)
CCleaner Update Helper (HKLM-x32\...\{E4EAC0E2-A80B-479F-BA45-DCDA595C9A93}) (Version: 1.8.1651.5 - Piriform Software) Hidden
Check Point VPN (HKLM-x32\...\{0197506D-1A8A-4030-906E-A9A5C7AC6C6E}) (Version: 98.61.611 - Check Point Software Technologies Ltd.)
Cisco Webex Meetings (HKLM-x32\...\{1A4C6F7E-0CE3-7C9E-8769-6D69246E5A59}) (Version: 40.9.5.10 - Cisco Webex LLC)
Citrix Authentication Manager (HKLM-x32\...\{29A5E354-8D70-43E7-B733-83580AC0637D}) (Version: 12.2.0.18007 - Citrix Systems, Inc.) Hidden
Citrix Receiver (Redirección de HDX para Flash) (HKLM-x32\...\{C037407D-2676-4D4A-9956-23A923031D5F}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Receiver 4.12 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 14.12.0.18020 - Citrix Systems, Inc.)
Citrix Receiver Inside (HKLM-x32\...\{30DF307D-A9BB-40CB-9AB5-A02E86BCC39B}) (Version: 4.12.0.65534 - Citrix Systems, Inc.) Hidden
Citrix Receiver(Aero) (HKLM-x32\...\{D61D76C5-44A4-407A-A5B2-2F36FE5AC0CA}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Receiver(DV) (HKLM-x32\...\{947A69AD-49DE-498D-8B37-67EBC46FFAC2}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Receiver(USB) (HKLM-x32\...\{77E2AABB-1B59-4A83-9C18-11546C135105}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Citrix Web Helper (HKLM-x32\...\{0378AD83-048F-4C7F-AFD6-3CEDA4212ACD}) (Version: 4.12.0.18013 - Citrix Systems, Inc.) Hidden
ClipX (HKLM-x32\...\ClipX) (Version:  - )
Comprobación de estado de PC Windows (HKLM\...\{8B474A92-CE3A-4F46-B6F1-6DFA1390F826}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Configurador FNMT (HKLM\...\ConfiguradorFnmt) (Version: 5.0.3 - FNMT-RCM)
Convertidor de PDF a Word 3.2 (HKLM-x32\...\Convertidor de PDF a Word_is1) (Version:  - convertidor-de-pdf.com)
DiskInternals NTFS Recovery (HKLM-x32\...\DiskInternals NTFS Recovery) (Version: 8.12.1 - DiskInternals Research)
Dynamic Application Loader Host Interface Service (HKLM\...\{1FB4098C-D5C9-4EBB-98FD-9C3FDAE5F526}) (Version: 1.0.0.0 - Intel Corporation) Hidden
El Grabador y Editor de Sonido PolderbitS (Edición 32-bit) (HKLM-x32\...\PolderbitSRecorder) (Version: 9.0.0.129 - PolderbitS Software)
eMule (HKLM-x32\...\eMule) (Version:  - )
FocusWriter (HKLM-x32\...\FocusWriter) (Version: 1.7.6 - Graeme Gott)
Freemake Video Converter versión 4.1.13 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.13 - Mixbyte Inc.)
Gestor de taxonomías de Altova (HKLM\...\{8DD67D6C-11FB-4AB9-BE6E-54A3BF8B92D8}) (Version: 1.0 - Altova)
GIMP 2.10.12 (HKLM\...\GIMP-2_is1) (Version: 2.10.12 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 149.0.7827.198 - Google LLC)
Google Video Support Plugin (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\{F9B579C2-D854-300A-BE62-A09EB9D722E4}) (Version: 19.12.1000.0 - Google, LLC.)
GoTo Opener (HKLM-x32\...\{E69269DB-A77B-4BC1-8F39-241107B09F26}) (Version: 1.0.539 - LogMeIn, Inc.)
GoToMeeting 10.19.0.19950 (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\GoToMeeting) (Version: 10.19.0.19950 - LogMeIn, Inc.)
GoTrust ID Plugin 2.0.10.26 (HKLM\...\GoTrust ID Plugin) (Version: 2.0.10.26 - GoTrust ID Inc.)
HandBrake 1.7.3 (HKLM-x32\...\HandBrake) (Version: 1.7.3 - )
HiSuite (HKLM-x32\...\Hi Suite) (Version: 14.0.0.310 - Huawei Technologies Co., Ltd.)
HP LaserJet Professional M1130-M1210 MFP Series (HKLM\...\HP LaserJet Professional M1130-M1210 MFP Series) (Version:  - )
HPSSupply (HKLM-x32\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.)
iCloud Outlook (HKLM\...\{11727D12-D910-486F-9B36-B496F4AB334D}) (Version: 14.1.0.108 - Apple Inc.)
Infix PDF Editor versión 5.2.8.0 (HKLM-x32\...\D42C36B3-E36B-43EC-A8B4-B613D7B92782_is1) (Version: 5.2.8.0 - Iceni Technology)
Intel(R) Chipset Device Software (HKLM\...\{351A0D24-F6F1-4105-AA50-5D2CCC71E0DD}) (Version: 10.1.18019.8144 - Intel Corporation) Hidden
Intel(R) Icls (HKLM\...\{6B9F503D-FA38-4032-AA83-AB1583B01103}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) LMS (HKLM\...\{1F7EAD12-6B11-4B23-AC6F-78528587DEA1}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1940.13.0.1314 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{23D9742E-65D2-466E-A7AB-60C1E3D471AC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{E202855D-E99E-4A43-A5B7-E4F2A3AB4A91}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{E33FC04D-5AF5-4577-ADAA-C95F19F76094}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) OEM Extension (HKLM\...\{E3ADBB7B-76D7-4DB3-809B-4EA2A37A5729}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 26.20.100.7463 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{31D97AAF-A1E5-4B77-BEBF-EB0C67DF7D63}) (Version: 17.5.2.1024 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.5.2.1024 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{93911ECE-95EE-46CA-B5AB-D345891E7A63}) (Version: 30.100.1916.1 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1916.1 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{C1A5573E-1508-49E1-BA6A-34E2EB15E9BF}) (Version: 17.5.2.1024 - Intel Corporation)
Java(TM) SE Development Kit 14.0.2 (64-bit) (HKLM\...\{6D7FE298-9878-53C8-801B-76A251D18BB2}) (Version: 14.0.2.0 - Oracle Corporation)
Kindle Previewer 3 (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Kindle Previewer 3) (Version: 3.66.0 - Amazon)
K-Lite Video Conversion Pack 1.7.0 (HKLM-x32\...\klvideoconvert_is1) (Version: 1.7.0 - )
LibreView Device Drivers3.3.4 (HKLM-x32\...\{D2200BF1-9BF0-4C1C-9282-A727FFCC5046}) (Version: 3.3.4 - Newyu)
Malwarebytes version 5.6.1.257 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.6.1.257 - Malwarebytes)
Mendeley Desktop 1.19.4 (HKLM-x32\...\Mendeley Desktop) (Version: 1.19.4 - Mendeley Ltd.)
Microsoft .NET Host - 6.0.3 (x64) (HKLM\...\{9ED2B6EE-5450-4B01-B051-B6D5DCE7C443}) (Version: 48.15.37625 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.3 (x64) (HKLM\...\{A2AE3C2D-C169-4F27-81D8-AD5641945F48}) (Version: 48.15.37625 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.3 (x64) (HKLM\...\{440E6A1A-3902-4A8E-90B7-6FAA6A5E78C5}) (Version: 48.15.37625 - Microsoft Corporation) Hidden
Microsoft 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.14026.20308 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.48 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.26.16801 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{5AEE81EA-9862-484A-BB84-4D25ED795D22}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{DF0837CC-01F5-4438-96B9-D7C46BC54198}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31938 (HKLM-x32\...\{d92971ab-f030-43c8-8545-c66c818d0e05}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.32919 (HKLM-x32\...\{68c77bab-8435-4d15-ae03-fd4f6e158317}) (Version: 14.38.32919.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31938 (HKLM\...\{7DA37AE3-D8AE-49B1-9BDC-23CA0AB9FF22}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31938 (HKLM\...\{0AE39060-F209-4D05-ABC7-54B8F9CFA32E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.32919 (HKLM-x32\...\{5F0295FE-3DAA-4C04-94A6-2AFC6D739D34}) (Version: 14.38.32919 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.32919 (HKLM-x32\...\{2F7F071D-83D0-4994-8237-7B0579452FD4}) (Version: 14.38.32919 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.3 (x64) (HKLM\...\{9F3D8C21-B2A9-4E7D-A6AA-50B34EFFA1E0}) (Version: 48.15.37635 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.3 (x64) (HKLM-x32\...\{7bde23ed-68e7-4655-8b90-91aa681a31da}) (Version: 6.0.3.31024 - Microsoft Corporation)
Movavi Video Editor Plus 2022 (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Movavi Video Editor Plus 2022) (Version: 22.3.0 - Movavi)
Mozilla Firefox (x64 es-ES) (HKLM\...\Mozilla Firefox) (Version: 152.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 131.0.3 - Mozilla)
Music Recorder 2022 (HKLM-x32\...\{A98191F4-13B4-4CBC-8613-E501C5BDBCB4}) (Version: 22.0.248.0 - Audials AG)
music2pc 2.31 (HKLM-x32\...\music2pc_is1) (Version:  - MP3 Download)
Nero Start (HKLM-x32\...\Nero Common) (Version: 28.5.34.0 - Nero AG)
Nero WaveEditor (HKLM-x32\...\Nero WaveEditor) (Version: 28.5.1.1 - Nero AG)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14026.20308 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14026.20308 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0C0A-1000-0000000FF1CE}) (Version: 16.0.14026.20246 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{2E9881CA-E41C-45E5-8055-61A4CC1BF93F}) (Version: 14.12.0.18020 - Citrix Systems, Inc.) Hidden
Polar FlowSync versión 4.0.11 (HKLM\...\{6351CDAC-7961-44A5-8C07-B4F25220EE14}_is1) (Version: 4.0.11 - Polar Electro)
Quick Access Service (HKLM\...\{AB25551C-74EF-4BAB-9989-891517FCF9FF}) (Version: 3.00.3038 - Acer Incorporated)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.36.701.2019 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8832.1 - Realtek Semiconductor Corp.)
RecCloud LightEditor V1.0.2.15 (HKLM-x32\...\{CAF2AD7E-6722-4800-8599-E9BCB11173CA}_is1) (Version: 1.0.2.15 - Apowersoft LIMITED)
Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP)
Self-service Plug-in (HKLM-x32\...\{7A029AB7-8CC4-4FE8-904F-A090248C1BC7}) (Version: 4.12.0.18013 - Citrix Systems, Inc.) Hidden
Software para dispositivos de chipset Intel® (HKLM-x32\...\{4551f75f-3c54-4f09-8221-8c8a061bad00}) (Version: 10.1.18019.8144 - Intel(R) Corporation)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.9.85.5 - Safer-Networking Ltd.)
Stilus para Word (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\6AF58E0C748F5D8DB66E3FEB41B086E129AECBD3) (Version: 2.4.2.0 - MeaningCloud Europe S. L.)
Stonegate Access Client (HKLM-x32\...\Stonesoft Access Client) (Version:  - Stonesoft)
TuneIn 1.19.0 (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\{491e9b4c-9857-50a5-9caf-cb9616fbaf49}) (Version: 1.19.0 - TuneIn Inc)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
User Experience Improvement Program Service (HKLM\...\{E9495FD3-F73D-4D33-A104-047F9E8BE6C7}) (Version: 4.00.3106 - Acer Incorporated)
Visual C++ 2008 x86 Runtime - (v9.0.30729) (HKLM-x32\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}) (Version: 9.0.30729 - Microsoft Corporation) Hidden
Visual C++ 2008 x86 Runtime - v9.0.30729.01 (HKLM-x32\...\{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01) (Version: 9.0.30729.01 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WebView2 Runtime de Microsoft Edge (HKLM-x32\...\Microsoft EdgeWebView) (Version: 149.0.4022.98 - Microsoft Corporation) Hidden
WinRAR 5.91 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Wondershare Filmora9(Build 9.5.2) (HKLM\...\Wondershare Filmora9_is1) (Version:  - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)
yWriter5 (HKLM-x32\...\yWriter5_is1) (Version:  - Spacejock Software)
Zoom (HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\ZoomUMX) (Version: 5.13.11 (13434) - Zoom Video Communications, Inc.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3624.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-04] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-04] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-04] ()
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3044.0_x64__48frkmn4z8aw4 [2024-01-13] (Acer Incorporated)
Battery Usage -> C:\Program Files\WindowsApps\16494MarkoHaaja.BatteryUsage_1.1.4.0_x64__1d6jwbgybpbp6 [2024-09-26] (Marko Haaja)
Care Center S -> C:\Program Files\WindowsApps\AcerIncorporated.AcerCareCenterS_4.0.3042.0_x64__48frkmn4z8aw4 [2024-01-13] (Acer Incorporated)
ChatGPT -> C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0 [2026-05-17] (OpenAI) [Startup Task]
Complemento de motor del medio de Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2024-01-13] (Microsoft Corporation)
GoTrust ID -> C:\Program Files\WindowsApps\GOTrustTechnologyInc.GO-TrustAuthenticator_3.1.21.0_x64__0r04f53sqacg6 [2024-01-13] (GoTrustID Inc.)
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-07-02] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-01-13] (Microsoft Corp.)
Microsoft.AIFabric.CBS.1.6 -> C:\WINDOWS\SystemApps\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe [2026-05-27] (Microsoft Corporation)
Movie & Audio Studio -> C:\Program Files\WindowsApps\MAGIXSoftwareGmbH.MovieAudioStudio_1.1.4.0_x64__awcgk3qbzve1y [2024-10-11] (MAGIX Software GmbH)
PowerDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PowerDirectorforacerDesktop_14.0.4304.0_x64__ypz87dpxkv292 [2024-01-13] (CYBERLINK COM CORP)
QuickAccess -> C:\Program Files\WindowsApps\AcerIncorporated.QuickAccess_3.0.3038.0_x64__48frkmn4z8aw4 [2024-01-13] (Acer Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.14.226.0_x64__dt26b99r8h8gj [2024-01-13] (Realtek Semiconductor Corp)
User Experience Improvement Program -> C:\Program Files\WindowsApps\AcerIncorporated.UserExperienceImprovementProgram_4.0.3106.0_x64__48frkmn4z8aw4 [2024-01-13] (Acer Incorporated)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2623.103.0_neutral_split.scale-100_cv1g1gvanyjgm [2026-06-26] (WhatsApp Inc.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.2.0.0_x64__8wekyb3d8bbwe [2026-06-26] (Microsoft Corp.)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{1a46400f-4c81-802a-c2c1-1e9a687a9340}\localserver32 -> C:\Program Files\HandBrake\HandBrake.exe (HandBrake Team) [Archivo no firmado]
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{22181302-A8A6-4F84-A541-E5CBFC70CC43}\localserver32 -> C:\Users\anaca\AppData\Local\Google\GoogleUpdater\151.0.7910.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{547E9AEF-8043-5D26-879F-01E7664192DC}\localserver32 -> C:\Users\anaca\AppData\Local\Google\GoogleUpdater\151.0.7910.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{58624db6-e4cf-4ed6-a097-e489720c719b}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2023\CamtasiaStudio.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{6DDCE70D-A4AE-4E97-908C-BE7B2DB750AD}\localserver32 -> C:\Users\anaca\AppData\Local\Google\GoogleUpdater\151.0.7910.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{816E4B50-C8D5-4AA6-A5DD-65187BE041F5}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{D310CCA1-772F-5626-A087-9FBBF12A2253}\localserver32 -> C:\Users\anaca\AppData\Local\Google\GoogleUpdater\151.0.7910.0\updater.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\anaca\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.26.16801\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [  OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-07-09] (Intel(R) Rapid Storage Technology -> )
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo
ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Archivo no firmado]
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers1: [DiffDogFileHandlerMenu] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\Program Files\Altova\DiffDog2022\DiffDogShellExtension_x64.dll [2021-10-22] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DiffDogFileHandlerMenu] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\Program Files\Altova\DiffDog2022\DiffDogShellExtension_x64.dll [2021-10-22] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers2: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers2: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-06-30] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-07-09] (Intel(R) Rapid Storage Technology -> )
ContextMenuHandlers3: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers3: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Archivo no firmado]
ContextMenuHandlers4: [DiffDogFileHandlerMenu] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\Program Files\Altova\DiffDog2022\DiffDogShellExtension_x64.dll [2021-10-22] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> Ningún archivo
ContextMenuHandlers5: [DiffDogFileHandlerMenu] -> {FD62EEF6-2AB3-411D-986E-916210538B31} => C:\Program Files\Altova\DiffDog2022\DiffDogShellExtension_x64.dll [2021-10-22] (Altova GmbH -> Altova GmbH)
ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Archivo no firmado]
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-06-30] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2021-12-21] (Safer-Networking Limited -> Safer-Networking Ltd.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Lista blanca) ====================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Drivers32: [msacm.ac3filter] => C:\WINDOWS\system32\ac3filter64.acm [2231296 2013-04-05] () [Archivo no firmado]
HKLM\...\Drivers32: [msacm.ac3filter] => C:\Windows\SysWOW64\ac3filter.acm [1679360 2013-04-05] () [Archivo no firmado]

==================== Accesos directos & WMI ========================

(Las entradas pueden ser listadas para ser restauradas o eliminadas.)

Shortcut: C:\Users\anaca\Desktop\Mis documentos\Archivos de programa\DATOS\Menú Inicio\Programas\Xilisoft\RM Converter 3\Buy.lnk -> hxxp://www.xilisoft.com/rm-converter.htm
Shortcut: C:\Users\anaca\Desktop\Mis documentos\Archivos de programa\DATOS\Menú Inicio\Programas\DivX\Dr. DivX 2.0 OSS\Sitio web de {PRODUCT_SHORTNAME}.lnk -> hxxp://www.drdivx.co
Shortcut: C:\Users\anaca\Desktop\Mis documentos\Archivos de programa\DATOS\Entorno de red\Mis sitios Web en MSN\target.lnk -> hxxp://www.msnusers.co

==================== Módulos cargados (Lista blanca) =============

2022-05-15 11:58 - 2007-05-02 05:10 - 000057344 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\App4R.DevMons.MCMDevMon.dll
2022-05-15 11:58 - 2007-04-30 08:19 - 000020480 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\App4R.DevMons.NetworkCardDevMon.dll
2022-05-15 11:58 - 2007-04-30 08:19 - 000020480 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\App4R.DevMons.ScanDevMon.dll
2022-05-15 11:58 - 2007-05-02 05:11 - 000028672 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\App4R.Monitor.Common.dll
2022-05-15 11:58 - 2007-05-02 05:11 - 000040960 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\App4R.Monitor.Core.dll
2009-10-15 19:43 - 2009-10-15 19:43 - 000240128 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\HP\HP UT LEDM\bin\LEDMMapperObjects.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000061440 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\HP\HPLaserJetService\HPTools.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000964096 _____ () [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\HP\HPLaserJetService\LEDMXMLObjects.dll
2022-05-15 11:58 - 2007-04-30 08:20 - 000011776 _____ () [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\App4R.DevMons.MCMDevMon.AutoPlayUtil.dll
2022-05-15 11:58 - 2007-05-17 10:58 - 000765952 _____ () [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdicomc.dll
2022-05-15 11:58 - 2007-03-05 10:45 - 000589824 _____ () [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdidatr.dll
2022-05-15 11:58 - 2007-03-23 15:41 - 000278528 _____ () [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdiscw.dll
2020-03-06 06:11 - 2020-03-06 06:11 - 000010240 _____ () [Archivo no firmado] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\es_es\acrotray.esp
2024-03-14 20:11 - 2016-07-21 11:54 - 000137728 _____ () [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2024-03-14 20:11 - 2017-09-12 11:34 - 001506304 _____ () [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2025-05-02 16:37 - 2023-02-14 11:51 - 001604096 _____ () [Archivo no firmado] C:\Program Files\Polar\Polar FlowSync\polar20.dll
2025-05-02 16:37 - 2023-02-14 11:51 - 000506368 _____ () [Archivo no firmado] C:\Program Files\Polar\Polar FlowSync\wslib.dll
2025-12-16 19:12 - 2012-09-29 14:25 - 000409088 _____ () [Archivo no firmado] C:\WINDOWS\System32\HPM1210LM.DLL
2025-12-16 19:12 - 2012-09-29 14:25 - 000074240 _____ () [Archivo no firmado] C:\WINDOWS\system32\spool\PRTPROCS\x64\HPM1210PP.dll
2009-05-21 21:09 - 2009-05-21 21:09 - 000554496 _____ (Hewlett-Packard Co.) [Archivo no firmado] C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusg.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000032768 _____ (HP) [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\HP\HPLaserJetService\HPHTTPProxy.dll
2009-10-15 12:13 - 2009-10-15 12:13 - 000031744 _____ (HP) [Archivo no firmado] [El archivo está en uso] C:\Program Files (x86)\HP\HPLaserJetService\HPServiceCommunicator.dll
2022-05-15 11:58 - 2007-11-07 12:28 - 000077906 _____ (Lexmark International) [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdicfg.dll
2022-05-15 11:58 - 2007-01-23 19:22 - 000077824 _____ (Lexmark R&D Corp.) [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\lxdimonr.dll
2022-05-15 11:58 - 2007-01-19 04:10 - 001060864 _____ (Microsoft Corporation) [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\MFC71.DLL
2022-05-15 11:58 - 2007-01-19 04:10 - 000348160 _____ (Microsoft Corporation) [Archivo no firmado] C:\Program Files (x86) (x86)\Lexmark 3500-4500 Series\MSVCR71.dll
2024-01-20 17:22 - 2022-12-28 22:28 - 001111883 _____ (SQLite Development Team) [Archivo no firmado] C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2024-01-20 17:22 - 2019-12-21 12:55 - 001380864 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Archivo no firmado] C:\Program Files (x86)\Spybot - Search & Destroy 2\libeay32.dll
2024-01-20 17:22 - 2019-12-21 12:55 - 000337920 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Archivo no firmado] C:\Program Files (x86)\Spybot - Search & Destroy 2\ssleay32.dll
2024-03-14 20:11 - 2017-09-12 11:36 - 000708608 _____ (Wondershare) [Archivo no firmado] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Lista blanca) ========

(Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.)

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [240]
AlternateDataStreams: C:\Users\anaca\Downloads\camtasia(1).exe:MBAM.Zone.Identifier [143]
AlternateDataStreams: C:\Users\anaca\Downloads\HandBrake-1.7.3-x86_64-Win_GUI.exe:MBAM.Zone.Identifier [601]
AlternateDataStreams: C:\Users\anaca\Downloads\lighteditor-setup-saas-converter.exe:MBAM.Zone.Identifier [202]
AlternateDataStreams: C:\Users\anaca\Downloads\NeroWaveEditor.exe:MBAM.Zone.Identifier [188]
AlternateDataStreams: C:\Users\anaca\Downloads\OperaGXSetup.exe:MBAM.Zone.Identifier [258]
AlternateDataStreams: C:\Users\anaca\Downloads\uniconverter15_setup_full14241.exe:MBAM.Zone.Identifier [196]

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer (Lista blanca) =============

HKU\S-1-5-21-3493958998-3806918064-365168309-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.es/
SearchScopes: HKU\S-1-5-21-3493958998-3806918064-365168309-1001 -> DefaultScope {07F2ACC0-D86A-4EF4-898E-47450BDB6B08} URL = 
SearchScopes: HKU\S-1-5-21-3493958998-3806918064-365168309-1001 -> {07F2ACC0-D86A-4EF4-898E-47450BDB6B08} URL = 
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe````

ventana11 · 7 Julio, 2026 19:44

````Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
DPF: HKLM-x32 {3195CF7C-E9E2-49B2-8B61-14F285298E1C} hxxps://ssl.cadiz.es/wa/AccessClientLoader.cab
DPF: HKLM-x32 {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} 
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2018-05-17] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

(Si una entrada es incluida en el fixlist, será eliminada del registro.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Hay 7942 más sitios.

IE trusted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\123simsen.com -> www.123simsen.com

Hay 7942 más sitios.


==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2019-03-19 06:49 - 2026-06-30 17:27 - 000454770 ____R C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1	localhost
127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123haustiereundmehr.com
127.0.0.1	123moviedownload.com

Hay 15609 más lineas.


==================== Network ===========================

(Actualmente no existe una corrección automática para esta sección.)

DNS Servers: 212.166.211.23 - 212.166.132.104
Firewall de Windows está habilitado.

Network Binding:
=============
Wi-Fi: Qualcomm Atheros QCA9377 Wireless Network Adapter -> Qcamain10x64.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
Ethernet 2: Check Point Virtual Network Adapter For Endpoint VPN Client -> vnaap.sys

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKU\S-1-5-21-3493958998-3806918064-365168309-1001\Control Panel\Desktop\\Wallpaper -> 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: )
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto x64 dv.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto_Files
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjPatcher.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjHook.dll
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto x64 dv.exe
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto_Files


==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{523370B6-9A9F-4F59-AD4A-8B3B49496D67}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A12FA829-E41E-4DD2-A587-585A7C70F2EE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EC13C52A-107E-42BE-A4D7-456D950DB577}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BFF92D30-015A-43BC-8F21-A0F59E977A4F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24151.2105.2943.2101_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{B7E21023-FA85-4998-A8A5-D650EE294249}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe
FirewallRules: [TCP Query User{6D8C09CD-A988-46B9-90A3-FFF670E75EC7}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe
FirewallRules: [{1ECC1BC9-17B1-4E56-B97A-DFE8110D96E5}] => (Allow) C:\Program Files (x86)\Apowersoft\RecCloud LightEditor\RecCloud LightEditor.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{3BEA9F86-7ACD-4748-831B-B4B6F6B3F432}] => (Allow) C:\Program Files (x86)\Apowersoft\RecCloud LightEditor\RecCloud LightEditor.exe (Apowersoft Ltd -> Apowersoft)
FirewallRules: [{A216E762-F806-44D1-8AE6-A6B20E8EC28F}] => (Allow) C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => Ningún archivo
FirewallRules: [UDP Query User{ED43E001-7571-43C5-9D6D-9D1E454D8E93}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivo
FirewallRules: [TCP Query User{05745102-4000-4A83-B654-5465053E35E2}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivo
FirewallRules: [UDP Query User{CE1F7F4E-C8A7-4C6B-9A5A-70ABADCD9003}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivo
FirewallRules: [TCP Query User{487A9C2A-DBE5-493A-8E7A-28840A714D5E}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivo
FirewallRules: [UDP Query User{583EF1E7-7742-43ED-BA14-6D7085EC4472}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe
FirewallRules: [TCP Query User{6CF028D4-65B1-4726-944D-5947A1FC97A5}C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe] => (Allow) C:\program files\autofirmaja\autofirmaja\jre\bin\javaw.exe
FirewallRules: [{86C608EF-EC46-472E-9792-B1498B32EDD8}] => (Allow) C:\Users\anaca\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [{4046493B-65B2-48AF-B71C-8B6AE85F39C0}] => (Allow) C:\Users\anaca\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Limited)
FirewallRules: [CN.wAQdN188] => (Allow) C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Windows Driver Foundation (WDF).exe => Ningún archivo
FirewallRules: [TCP Query User{EAC89EDB-0D08-41D2-8000-390C314586A4}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [UDP Query User{4A0A4B21-FEAE-4962-A8B5-D794CAA3D6BD}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [TCP Query User{F09C7FC7-4F24-4A24-8A24-611DC3A18C5B}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )
FirewallRules: [UDP Query User{CCEF247A-921A-4E93-8D88-2F1AE3D4506C}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )
FirewallRules: [TCP Query User{C7C27A7F-6765-4BAB-9DF2-F22D1768BD93}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [UDP Query User{8EEDC186-BD2A-4249-97C1-A1DD2131FDF6}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [TCP Query User{81CDD293-7683-4FB1-8B10-52BFC0B1F6A3}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )
FirewallRules: [UDP Query User{5DD61737-A0FA-4B01-8FFA-2D75022E660B}C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe] => (Block) C:\program files (x86) (x86)\lexmark 3500-4500 series\lxdiamon.exe (Lexmark International, Inc. -> )
FirewallRules: [TCP Query User{F79F9D17-F95A-4118-BC00-DBC1D33D0587}C:\program files\autofirma\autofirma\jre\bin\javaw.exe] => (Allow) C:\program files\autofirma\autofirma\jre\bin\javaw.exe
FirewallRules: [UDP Query User{4EBFEB2B-4460-49F0-A414-EF18C1A13A1B}C:\program files\autofirma\autofirma\jre\bin\javaw.exe] => (Allow) C:\program files\autofirma\autofirma\jre\bin\javaw.exe
FirewallRules: [{5437614F-25E8-4495-95F9-A0D88C71CDF0}] => (Allow) LPort=12972
FirewallRules: [{3759D230-D5E8-4745-87D0-A454B9A72281}] => (Allow) C:\Program Files (x86)\Audials\MusicRecorder 2022\Audials.exe (Audials AG -> Audials AG)
FirewallRules: [{FD057789-BFEE-4906-8505-41B0004ADE4F}] => (Allow) LPort=14714
FirewallRules: [{8E100505-59BC-48AE-B538-F96528131C64}] => (Allow) LPort=31931
FirewallRules: [{DAEEC7F9-0B50-4170-86C0-EAC6A583D6C9}] => (Allow) LPort=5354
FirewallRules: [{3CC9F194-9F55-434C-852A-BB1171237D67}] => (Allow) LPort=5354
FirewallRules: [{1A45281D-5815-4160-982B-6DD2F9FDCB76}] => (Allow) LPort=5354
FirewallRules: [{E7AB9C4B-6592-477E-A388-9B24B53422A1}] => (Allow) LPort=5354
FirewallRules: [{006A6B7A-4FFC-4FB8-8FDC-ED57E1F5934C}] => (Allow) LPort=24522
FirewallRules: [{A8B58DAE-C684-4F50-9D4E-CA1502F4EA22}] => (Allow) LPort=14672
FirewallRules: [TCP Query User{2EF75737-0576-4C2C-8DDD-B4359BB7B188}C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exe] => (Allow) C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exe
FirewallRules: [UDP Query User{A83DE0CB-62CC-4A31-9105-5E794B189C35}C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exe] => (Allow) C:\program files\configuradorfnmt\configuradorfnmt\jre\bin\javaw.exe
FirewallRules: [{7CFA8F36-D713-4257-B1D1-ED5496576F36}] => (Allow) C:\Program Files (x86)\Nero\Nero Common\Nero Launcher\NeroLauncher.exe (Nero AG -> Nero AG)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{021FC459-F658-4AE6-BE02-FDE854C34F7A}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)
FirewallRules: [{0DA12AB9-A539-4956-A1B1-6362941789C9}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)
FirewallRules: [{C0F1203C-0D77-4C20-BEFB-1386F6D0D812}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)
FirewallRules: [{987E0227-E89B-4938-8757-5967D8980811}] => (Allow) C:\Program Files\WindowsApps\OpenAI.ChatGPT-Desktop_1.2026.133.0_x64__2p2nqsd0c76g0\app\ChatGPT.exe (50BDFD77-8903-4850-9FFE-6E8522F64D5B -> OpenAI)
FirewallRules: [{B7771083-75F0-468A-B144-D7C49C9B265E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{84C8C975-6FAF-44E9-A269-A9DAD6FC3072}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DAC2B8C7-1471-403D-A7BA-4DC849D4DA92}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9FAC1C7F-7B02-4EF7-AA23-9A04FC810DAE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4531BEA2-6728-469B-8BFD-88BF1EDF9D02}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service

==================== Puntos de Restauración =========================

05-07-2026 21:11:55 Windows Update
05-07-2026 21:11:55 Windows Update
05-07-2026 21:11:55 Windows Update

==================== Dispositivos defectuosos en el Administrador de dispositivos ============
Name: HP LaserJet Professional M1130 MFP Series
Description: HP LaserJet Professional M1130 MFP Series
Class Guid: {6bdd1fc6-810f-11d0-bec7-08002be2092f}
Manufacturer: Hewlett-Packard, Inc.
Service: usbscan
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (07/06/2026 08:05:45 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: Error en la fase de recuperación.

Contexto: aplicación , catálogo SystemIndex

Detalles:
	0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 08:05:45 PM) (Source: Windows Search Service) (EventID: 3602) (User: )
Description: ID 1 del error producido durante la etapa de recuperación de Windows Search, reinicie el servicio. Si el error persiste, vuelva a crear el índice.

Contexto: aplicación , catálogo SystemIndex

Detalles:
	0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 08:05:23 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Nombre de aplicación con errores: SDFSSvc.exe, versión: 2.9.85.231, marca de tiempo: 0x63ebb1a4
Nombre del módulo con errores: KERNELBASE.dll, versión: 10.0.26100.8737, marca de tiempo: 0x7160435a
Código de excepción: 0x0eedfade
Desplazamiento con errores: 0x0016a394
Id. de proceso con errores: 0x1110
Tiempo de inicio de aplicación con errores: 0x1dd0d6e1b613c24
Ruta de aplicación con errores: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
Ruta de módulo con errores: C:\WINDOWS\System32\KERNELBASE.dll
Id. de informe: 480ee577-c8f3-4b6e-9e75-b11f4b448ab3
Nombre completo del paquete con errores: 
Id. de aplicación relacionado con el paquete con errores:

Error: (07/06/2026 08:04:33 PM) (Source: Application Hang) (EventID: 1002) (User: NT AUTHORITY)
Description: El programa cmd.exe versión 10.0.26100.8737 dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible sobre este problema, comprueba el historial de problemas en el panel de control de Seguridad y mantenimiento.

Error: (07/06/2026 07:39:26 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (07/06/2026 07:37:29 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: Error en la fase de recuperación.

Contexto: aplicación , catálogo SystemIndex

Detalles:
	0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 07:37:29 PM) (Source: Windows Search Service) (EventID: 3602) (User: )
Description: ID 1 del error producido durante la etapa de recuperación de Windows Search, reinicie el servicio. Si el error persiste, vuelva a crear el índice.

Contexto: aplicación , catálogo SystemIndex

Detalles:
	0x%08x (0x80040d23 - El recopilador se está cerrando.  (HRESULT : 0x80040d23))

Error: (07/06/2026 07:37:09 PM) (Source: Application Error) (EventID: 1000) (User: NT AUTHORITY)
Description: Nombre de aplicación con errores: SDFSSvc.exe, versión: 2.9.85.231, marca de tiempo: 0x63ebb1a4
Nombre del módulo con errores: KERNELBASE.dll, versión: 10.0.26100.8737, marca de tiempo: 0x7160435a
Código de excepción: 0x0eedfade
Desplazamiento con errores: 0x0016a394
Id. de proceso con errores: 0x48a8
Tiempo de inicio de aplicación con errores: 0x1dd0d597cdbec8a
Ruta de aplicación con errores: C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
Ruta de módulo con errores: C:\WINDOWS\System32\KERNELBASE.dll
Id. de informe: 6ab29a1d-123c-47a9-aafd-70ade0c15d80
Nombre completo del paquete con errores: 
Id. de aplicación relacionado con el paquete con errores:


Errores del sistema:
=============
Error: (07/06/2026 08:30:42 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:29:29 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:27:52 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:27:22 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:26:52 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:24:17 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:23:47 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.

Error: (07/06/2026 08:13:28 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la respuesta de transacción del servicio Dnscache.


Windows Defender:
================
TimeCreated : 06/07/2026 19:43:16
(Message     : Antivirus de Microsoft Defender servicio parecÃa estar bloqueado durante el apagado.) (Timout (segundos):  120) (Componente:  ShutdownSpyNetManager) (Terminado automÃ¡ticamente:  0) 
TimeCreated : 06/07/2026 17:17:21
(Message     : Antivirus de Microsoft Defender Å›Â¢ÄÎ· Ð½Ð´Å¡ Ð²Ã©Ñ‘Å† Ñ•Å¥ÏƒÏÑ€ÎÄ‘ ÑŒÐ·Æ’Å‘Å—Ñ ÑÐ¾mÏ†ÄºÑÏ„Ä«Î¿Ð¿.%Ï€ %Å¥ÅšÑÃ¡Ð¹ ) (ÎŠÄ:%Ð²{DFC0CD48-BB9A-4251-9BD3-115C89F727A6}%Ï€ %Å¥Ð…Ä‹ÂªÎ· Ð¢Ã¿ÏÃ¨:%Ð²Antimalware%Åˆ %Ï„Å Ä‹Ç»Å„ Ð Î¬Å—Ã mÄ“Å£Ã¨Å—Å›:%ÑŠExamen ) (rÃ¡pido%Åˆ  %Å§Å¨ÅÑÅ™:%ÑŠNT AUTHORITY\SYSTEM%Åˆ %Å£ÅœÅ£Î¿Ï† ÒÃ«Ã¤ÅŸÅ‘Åˆ:%ÑŒÐ¯Î¡Ã‡ Ä‡Ç¿Ï€Ð¸Ä“Ã§Å¥Î¯Ã²Ð» ÑÅ«â¿Î´ÅáºÐ») 
TimeCreated : 06/07/2026 16:38:03
(Message     : Antivirus de Microsoft Defender servicio parecÃa estar bloqueado durante el apagado.) (Timout (segundos):  120) (Componente:  ShutdownSpyNetManager) (Terminado automÃ¡ticamente:  0) 
TimeCreated : 03/07/2026 19:45:39
(Message     : Antivirus de Microsoft Defender servicio parecÃa estar bloqueado durante el apagado.) (Timout (segundos):  120) (Componente:  CleanupRtpPlugin) (Terminado automÃ¡ticamente:  0) 
TimeCreated : 29/06/2026 18:48:57
(Message     : Antivirus de Microsoft Defender Å›Â¢ÄÎ· Ð½Ð´Å¡ Ð²Ã©Ñ‘Å† Ñ•Å¥ÏƒÏÑ€ÎÄ‘ ÑŒÐ·Æ’Å‘Å—Ñ ÑÐ¾mÏ†ÄºÑÏ„Ä«Î¿Ð¿.%Ï€ %Å¥ÅšÑÃ¡Ð¹ ) (ÎŠÄ:%Ð²{A7237D27-B0C8-420C-B03A-449F07AED2E2}%Ï€ %Å¥Ð…Ä‹ÂªÎ· Ð¢Ã¿ÏÃ¨:%Ð²Antimalware%Åˆ %Ï„Å Ä‹Ç»Å„ Ð Î¬Å—Ã mÄ“Å£Ã¨Å—Å›:%ÑŠExamen ) (rÃ¡pido%Åˆ  %Å§Å¨ÅÑÅ™:%ÑŠNT AUTHORITY\SYSTEM%Åˆ %Å£ÅœÅ£Î¿Ï† ÒÃ«Ã¤ÅŸÅ‘Åˆ:%ÑŒÅœÄ‰Ð½ÎÎ´ÂµÅ‚Ã«Ã° ÅŸÑÎ¬Î® Ï‰Ã¢Å› Ñ•Ä¸Ã¬ÏÏÑ”Î´ ÑŒÎÄ‰Î¬Ã¹ÅÃ« Å£Ä¥Ã© Å‚Ã¡Å›Ï„ ) (ÅŸÅÑÄÑ”Å›Ñ•Æ’Ñ†Å€ Å›Ã§Ã£Å„ Ñ‰Ã¥Å› áºƒÄ«Ï„Ñ’Ã¬Ï€ Å¥Ð½â„® â„“Ã¤Ñ•Ï„ 7 Î´Ð´Ã¿ÅŸ) 
TimeCreated : 28/06/2026 11:58:52
(Message     : Antivirus de Microsoft Defender Å›Â¢ÄÎ· Ð½Ð´Å¡ Ð²Ã©Ñ‘Å† Ñ•Å¥ÏƒÏÑ€ÎÄ‘ ÑŒÐ·Æ’Å‘Å—Ñ ÑÐ¾mÏ†ÄºÑÏ„Ä«Î¿Ð¿.%Ï€ %Å¥ÅšÑÃ¡Ð¹ ) (ÎŠÄ:%Ð²{D05E2967-5BC6-4A85-A298-FBAE660C82AE}%Ï€ %Å¥Ð…Ä‹ÂªÎ· Ð¢Ã¿ÏÃ¨:%Ð²Antimalware%Åˆ %Ï„Å Ä‹Ç»Å„ Ð Î¬Å—Ã mÄ“Å£Ã¨Å—Å›:%ÑŠExamen ) (rÃ¡pido%Åˆ  %Å§Å¨ÅÑÅ™:%ÑŠNT AUTHORITY\SYSTEM%Åˆ %Å£ÅœÅ£Î¿Ï† ÒÃ«Ã¤ÅŸÅ‘Åˆ:%ÑŒÅœÄ‰Ð½ÎÎ´ÂµÅ‚Ã«Ã° ÅŸÑÎ¬Î® Ï‰Ã¢Å› Ñ•Ä¸Ã¬ÏÏÑ”Î´ ÑŒÎÄ‰Î¬Ã¹ÅÃ« Å£Ä¥Ã© Å‚Ã¡Å›Ï„ ) (ÅŸÅÑÄÑ”Å›Ñ•Æ’Ñ†Å€ Å›Ã§Ã£Å„ Ñ‰Ã¥Å› áºƒÄ«Ï„Ñ’Ã¬Ï€ Å¥Ð½â„® â„“Ã¤Ñ•Ï„ 7 Î´Ð´Ã¿ÅŸ) 

CodeIntegrity:
===============
Date: 2026-07-06 20:35:46
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements. 

Date: 2026-07-06 20:33:35
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements. 


==================== Información de la memoria =========================== 

BIOS: Insyde Corp. V1.27 07/07/2022
Placa base: IL Sleepy_IL
Procesador: Intel(R) Core(TM) i5-1035G1 CPU @ 1.00GHz
Porcentaje de memoria en uso: 75%
RAM física total: 7981.12 MB
RAM física disponible: 1916.81 MB
Virtual total: 10797.12 MB
Virtual disponible: 4242.92 MB

==================== Unidades ================================

Drive c: (Acer) (Fixed) (Total:475.83 GB) (Free:223.99 GB) (Model: KINGSTON OM8PCP3512F-AA) NTFS

\\?\Volume{94928fee-e9bf-472f-b841-2cf985eb35b0}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.07 GB) NTFS
\\?\Volume{7778beb3-b718-4a96-9312-d58f6f31d1d4}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Tabla de particiones ====================

==================== Final de Addition.txt =======================````

ventana11 · 7 Julio, 2026 20:19

````Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 07-07-2026 01
Ejecutado por Ana (07-07-2026 21:54:57) Run:1
Ejecutado desde C:\Users\anaca\Desktop
Perfiles cargados: Ana
Modo de Inicio: Normal
==============================================

fixlist contenido:
*****************
Start::
SystemRestore: ON
CreateRestorePoint:
CloseProcesses:

FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=3 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Ningún archivo]
FF Plugin-x32: @update.avastbrowser.com/Avast Browser;version=9 -> C:\Program Files (x86)\AVAST Software\Browser\Update\1.8.1065.0\npAvastBrowserUpdate3.dll [Ningún archivo]
FF user.js: detected! => C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\user.js [2025-09-13]
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restricción <==== ATENCIÓN
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\MountPoints2: {b9b15672-8703-11ee-9f32-545823ac5b01} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\MountPoints2: {c843cec9-fb30-11ea-9e18-089798a01310} - "D:\SISetup.exe" 
Task: {001A2A1B-957E-4337-BD8B-CD34222147BB} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-1002 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Ningún archivo)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Ningún archivo)
Task: {16C04963-B959-4909-BFF3-FAE067C2A716} - System32\Tasks\S-1-5-21-3493958998-3806918064-365168309-1001\DataSenseLiveTileTask => %SystemRoot%\System32\DataUsageLiveTileTask.exe  (Ningún archivo)
Task: {45C0464C-5772-4AD5-B275-B1E74A26BDED} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery ReadyToReboot (Ningún archivo)
Task: {51527126-BD5F-439B-912B-F313D3F39CA7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  (Ningún archivo)
Task: {5292CC6C-297A-44EF-979F-A5FBFB875CE5} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe  /ua /installsource scheduler (Ningún archivo)
Task: {6D2F57B6-99FA-4E83-9943-B9D9C3A6AFC1} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC ReadyToReboot (Ningún archivo)
Task: {710F4F7B-1BA1-430C-9339-9825D84AD870} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe  LogonUpdateResults (Ningún archivo)
Task: {A0EA7726-518F-47FE-AC37-FFA45926A4EA} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe  /c (Ningún archivo)
Task: {B28FCB21-196D-4B3E-87D2-9182E2BC35B8} - System32\Tasks\AcerCMUpdateTask2.5.22250 => "C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe"  /task (Ningún archivo)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Ningún archivo)
Task: {E48FB6BA-3E0A-42E2-9EF4-66702CB7EB24} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Ningún archivo)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Ningún archivo)
FF Notifications: Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120 -> hxxps://xhkls.flameforgesmith.top; hxxps://d91t2am071bc73b83oa0.aegisbotnetwork.co.in; hxxps://bnu11dqux4a5qe.aegisbotnetwork.co.in

Task: {309D087F-F941-402D-A550-33782CCA1564} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [461472 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {66F1DA96-9345-48C2-9A22-587F67D3E5FE} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268096 2019-01-10] (Acer Incorporated -> Acer Incorporated)
Task: {EB1E085A-A636-469C-9FB8-B7FBFCDC7BF6} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211136 2019-01-10] (Acer Incorporated -> Acer Incorporated)
Task: {29927298-ADFD-42FA-B71D-A46FF372CFE9} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {9DB6801D-BD5D-4397-9BD2-4F5F447FC1A1} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [70792 2022-08-15] (Acer Incorporated -> )
C:\Program Files (x86)\AVAST Software
AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75} 

Folder: c:\DNB_Quarantine\L

cmd: if exist c:\DNB_Quarantine\L\1.txt type c:\DNB_Quarantine\L\1.txt
cmd: if exist c:\DNB_Quarantine\L\2.txt type c:\DNB_Quarantine\L\2.txt
cmd: if exist c:\DNB_Quarantine\L\3.txt type c:\DNB_Quarantine\L\3.txt
cmd: if exist c:\DNB_Quarantine\L\4.txt type c:\DNB_Quarantine\L\4.txt
cmd: if exist c:\DNB_Quarantine\L\5.txt type c:\DNB_Quarantine\L\5.txt
cmd: if exist c:\DNB_Quarantine\L\6.txt type c:\DNB_Quarantine\L\6.txt

Removeproxy:
Hosts:

CMD: netsh winsock reset catalog
CMD: netsh int ip reset resetlog.txt
CMD: reg export HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules C:\FirewallBackup.reg
C:\FirewallBackup.reg
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: bitsadmin /reset /allusers
CMD: ipconfig /flushdns

Emptytemp:
End::

*****************

SystemRestore: ON => completado
El punto de restauración fue creado correctamente.
Procesos cerrados correctamente.
HKLM\Software\Wow6432Node\MozillaPlugins\@update.avastbrowser.com/Avast Browser;version=3 => eliminado correctamente
HKLM\Software\Wow6432Node\MozillaPlugins\@update.avastbrowser.com/Avast Browser;version=9 => eliminado correctamente
C:\Users\anaca\AppData\Roaming\Mozilla\Firefox\Profiles\t4rjg7az.default-release-1628096782120\user.js => movido correctamente
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => eliminado correctamente
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiSpyware"="0" => valor restaurado correctamente
HKLM\SOFTWARE\Microsoft\Windows Defender\\"DisableAntiVirus"="0" => valor restaurado correctamente
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b9b15672-8703-11ee-9f32-545823ac5b01} => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c843cec9-fb30-11ea-9e18-089798a01310} => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{001A2A1B-957E-4337-BD8B-CD34222147BB}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{001A2A1B-957E-4337-BD8B-CD34222147BB}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-1002 => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-1002" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{16C04963-B959-4909-BFF3-FAE067C2A716}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16C04963-B959-4909-BFF3-FAE067C2A716}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\S-1-5-21-3493958998-3806918064-365168309-1001\DataSenseLiveTileTask => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\S-1-5-21-3493958998-3806918064-365168309-1001\DataSenseLiveTileTask" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45C0464C-5772-4AD5-B275-B1E74A26BDED}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45C0464C-5772-4AD5-B275-B1E74A26BDED}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{51527126-BD5F-439B-912B-F313D3F39CA7}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{51527126-BD5F-439B-912B-F313D3F39CA7}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Acrobat Update Task" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5292CC6C-297A-44EF-979F-A5FBFB875CE5}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5292CC6C-297A-44EF-979F-A5FBFB875CE5}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineUA => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AvastUpdateTaskMachineUA" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6D2F57B6-99FA-4E83-9943-B9D9C3A6AFC1}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6D2F57B6-99FA-4E83-9943-B9D9C3A6AFC1}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{710F4F7B-1BA1-430C-9339-9825D84AD870}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{710F4F7B-1BA1-430C-9339-9825D84AD870}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A0EA7726-518F-47FE-AC37-FFA45926A4EA}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0EA7726-518F-47FE-AC37-FFA45926A4EA}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\AvastUpdateTaskMachineCore => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AvastUpdateTaskMachineCore" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B28FCB21-196D-4B3E-87D2-9182E2BC35B8}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B28FCB21-196D-4B3E-87D2-9182E2BC35B8}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\AcerCMUpdateTask2.5.22250 => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AcerCMUpdateTask2.5.22250" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E48FB6BA-3E0A-42E2-9EF4-66702CB7EB24}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E48FB6BA-3E0A-42E2-9EF4-66702CB7EB24}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-500 => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\OneDrive Standalone Update Task-S-1-5-21-3493958998-3806918064-365168309-500" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => eliminado correctamente
"FF Notifications:" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{309D087F-F941-402D-A550-33782CCA1564}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{309D087F-F941-402D-A550-33782CCA1564}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Software Update Application => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Software Update Application" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{66F1DA96-9345-48C2-9A22-587F67D3E5FE}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66F1DA96-9345-48C2-9A22-587F67D3E5FE}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\UbtFrameworkService => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UbtFrameworkService" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EB1E085A-A636-469C-9FB8-B7FBFCDC7BF6}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB1E085A-A636-469C-9FB8-B7FBFCDC7BF6}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\UEIPInvitation => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UEIPInvitation" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{29927298-ADFD-42FA-B71D-A46FF372CFE9}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{29927298-ADFD-42FA-B71D-A46FF372CFE9}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9DB6801D-BD5D-4397-9BD2-4F5F447FC1A1}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9DB6801D-BD5D-4397-9BD2-4F5F447FC1A1}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Oem\AcerJumpstartTask => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Oem\AcerJumpstartTask" => eliminado correctamente

"C:\Program Files (x86)\AVAST Software" Carpeta mover:

C:\Program Files (x86)\AVAST Software => movido correctamente
"AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}" => eliminado correctamente

========================= Folder: c:\DNB_Quarantine\L ========================


====== Final de Folder: ======


========= if exist c:\DNB_Quarantine\L\1.txt type c:\DNB_Quarantine\L\1.txt =========

0

========= Final de CMD: =========


========= if exist c:\DNB_Quarantine\L\2.txt type c:\DNB_Quarantine\L\2.txt =========

0

========= Final de CMD: =========


========= if exist c:\DNB_Quarantine\L\3.txt type c:\DNB_Quarantine\L\3.txt =========

0

========= Final de CMD: =========


========= if exist c:\DNB_Quarantine\L\4.txt type c:\DNB_Quarantine\L\4.txt =========

0

========= Final de CMD: =========


========= if exist c:\DNB_Quarantine\L\5.txt type c:\DNB_Quarantine\L\5.txt =========

0

========= Final de CMD: =========


========= if exist c:\DNB_Quarantine\L\6.txt type c:\DNB_Quarantine\L\6.txt =========

0

========= Final de CMD: =========


========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-3493958998-3806918064-365168309-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-3493958998-3806918064-365168309-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========

No pudo ser movido "C:\Windows\System32\Drivers\etc\hosts" => Programado para moverse al reiniciar.

========= netsh winsock reset catalog =========


El catálogo Winsock se restableció correctamente.
Debe reiniciar el equipo para completar el restablecimiento.



========= Final de CMD: =========


========= netsh int ip reset resetlog.txt =========

Reenvío de compartimiento se restableció correctamente.
Compartimiento se restableció correctamente.
Protocolo de control se restableció correctamente.
Solicitud de secuencia eco se restableció correctamente.
Global se restableció correctamente.
Interfaz se restableció correctamente.
Dirección de difusión por proximidad (a se restableció correctamente.
Direcciones de multidifusión se restableció correctamente.
Dirección de unidifusión se restableció correctamente.
Vecino se restableció correctamente.
Ruta de acceso se restableció correctamente.
Posible se restableció correctamente.
Directiva de prefijo se restableció correctamente.
Vecino de proxy se restableció correctamente.
Ruta se restableció correctamente.
Prefijo de sitio se restableció correctamente.
Subinterfaz se restableció correctamente.
Patrón de reactivación se restableció correctamente.
Resolver vecino se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
Error al restablecer .
Acceso denegado.

 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
Reinicie el equipo para completar esta acción.



========= Final de CMD: =========


========= reg export HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules C:\FirewallBackup.reg =========

La operaci¢n se complet¢ correctamente.


========= Final de CMD: =========

C:\FirewallBackup.reg => movido correctamente

========= netsh advfirewall reset =========

Aceptar



========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar



========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

0 out of 0 jobs canceled.


========= Final de CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.


========= Final de CMD: =========


=========== EmptyTemp: ==========

FlushDNS => completado
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 250411836 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 80532965 B
Edge => 734160065 B
Chrome => 1361690758 B
Firefox => 1565223027 B
Opera => 0 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 30960 B
systemprofile32 => 0 B
LocalService => 186122 B
NetworkService => 359766 B
anaca => 657455411 B

RecycleBin => 0 B
EmptyTemp: => 4.3 GB datos temporales eliminados.

================================

Resultado de los archivos programados para mover (Modo de Inicio: Normal) (Fecha y Hora: 07-07-2026 22:17:12)

C:\Windows\System32\Drivers\etc\hosts => Se ha movido correctamente
Hosts restaurado correctamente.

==== Final  Fixlog 22:17:12 ====````

ventana11 · 7 Julio, 2026 20:20

Después del reinicio noto el ordenador más fluido para conectarse a internet. Antes se desconectaba y tenía que volver a engancharse a la red.

Gracias por las directrices. Espero próximos pasos a dar.

furtivex · 7 Julio, 2026 22:54

Farbar Recovery Scan Tool: FIX

Nota: tras ejecutar el script (posiblemente), se cerrarán todas las pestañas abiertas del navegador, se cerrará la sesión de sus cuentas y se borrarán los archivos temporales, la papelera de reciclaje, el historial del navegador, las cookies y la caché.

Desactive su antivirus antes de reiniciar. Seleccione el siguiente código:

start::

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [240]
AlternateDataStreams: C:\Users\anaca\Downloads\camtasia(1).exe:MBAM.Zone.Identifier [143]
AlternateDataStreams: C:\Users\anaca\Downloads\HandBrake-1.7.3-x86_64-Win_GUI.exe:MBAM.Zone.Identifier [601]
AlternateDataStreams: C:\Users\anaca\Downloads\lighteditor-setup-saas-converter.exe:MBAM.Zone.Identifier [202]
AlternateDataStreams: C:\Users\anaca\Downloads\NeroWaveEditor.exe:MBAM.Zone.Identifier [188]
AlternateDataStreams: C:\Users\anaca\Downloads\OperaGXSetup.exe:MBAM.Zone.Identifier [258]
AlternateDataStreams: C:\Users\anaca\Downloads\uniconverter15_setup_full14241.exe:MBAM.Zone.Identifier [196]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> Ningún archivo
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{58624db6-e4cf-4ed6-a097-e489720c719b}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2023\CamtasiaStudio.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{816E4B50-C8D5-4AA6-A5DD-65187BE041F5}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
FirewallRules: [{006A6B7A-4FFC-4FB8-8FDC-ED57E1F5934C}] => (Allow) LPort=24522
FirewallRules: [{1A45281D-5815-4160-982B-6DD2F9FDCB76}] => (Allow) LPort=5354
FirewallRules: [{3CC9F194-9F55-434C-852A-BB1171237D67}] => (Allow) LPort=5354
FirewallRules: [{5437614F-25E8-4495-95F9-A0D88C71CDF0}] => (Allow) LPort=12972
FirewallRules: [{8E100505-59BC-48AE-B538-F96528131C64}] => (Allow) LPort=31931
FirewallRules: [{A216E762-F806-44D1-8AE6-A6B20E8EC28F}] => (Allow) C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => Ningún archivo
FirewallRules: [{A8B58DAE-C684-4F50-9D4E-CA1502F4EA22}] => (Allow) LPort=14672
FirewallRules: [CN.wAQdN188] => (Allow) C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Windows Driver Foundation (WDF).exe => Ningún archivo
FirewallRules: [{DAEEC7F9-0B50-4170-86C0-EAC6A583D6C9}] => (Allow) LPort=5354
FirewallRules: [{E7AB9C4B-6592-477E-A388-9B24B53422A1}] => (Allow) LPort=5354
FirewallRules: [{FD057789-BFEE-4906-8505-41B0004ADE4F}] => (Allow) LPort=14714
FirewallRules: [TCP Query User{05745102-4000-4A83-B654-5465053E35E2}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivo
FirewallRules: [TCP Query User{487A9C2A-DBE5-493A-8E7A-28840A714D5E}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivo
FirewallRules: [UDP Query User{CE1F7F4E-C8A7-4C6B-9A5A-70ABADCD9003}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivo
FirewallRules: [UDP Query User{ED43E001-7571-43C5-9D6D-9D1E454D8E93}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo

AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}

DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto x64 dv.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto_Files
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjPatcher.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjHook.dll
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto x64 dv.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto_Files

Comment: Remove unwanted files from common folders using native removal power of Farbar to include remove on reboot if needed
C:\ProgramData\*.a3x
C:\ProgramData\*.ahk
C:\ProgramData\*.au3
C:\ProgramData\*.bat
C:\ProgramData\*.cab
C:\ProgramData\*.cmd
C:\ProgramData\*.com
C:\ProgramData\*.dll
C:\ProgramData\*.exe
C:\ProgramData\*.hta
C:\ProgramData\*.jar
C:\ProgramData\*.js
C:\ProgramData\*.jse
C:\ProgramData\*.lnk
C:\ProgramData\*.pif
C:\ProgramData\*.ps1
C:\ProgramData\*.py
C:\ProgramData\*.pyc
C:\ProgramData\*.pyd
C:\ProgramData\*.scr
C:\ProgramData\*.tmp
C:\ProgramData\*.vbe
C:\ProgramData\*.vbs
C:\ProgramData\*.wsf
C:\ProgramData\*.wsh
C:\ProgramData\*.zip
C:\Users\*\AppData\Roaming\*.au3
C:\Users\*\AppData\Roaming\*.bat
C:\Users\*\AppData\Roaming\*.cab
C:\Users\*\AppData\Roaming\*.cmd
C:\Users\*\AppData\Roaming\*.com
C:\Users\*\AppData\Roaming\*.dll
C:\Users\*\AppData\Roaming\*.exe
C:\Users\*\AppData\Roaming\*.hta
C:\Users\*\AppData\Roaming\*.jar
C:\Users\*\AppData\Roaming\*.js
C:\Users\*\AppData\Roaming\*.jse
C:\Users\*\AppData\Roaming\*.lnk
C:\Users\*\AppData\Roaming\*.pif
C:\Users\*\AppData\Roaming\*.ps1
C:\Users\*\AppData\Roaming\*.py
C:\Users\*\AppData\Roaming\*.pyc
C:\Users\*\AppData\Roaming\*.pyd
C:\Users\*\AppData\Roaming\*.scr
C:\Users\*\AppData\Roaming\*.tmp
C:\Users\*\AppData\Roaming\*.vbe
C:\Users\*\AppData\Roaming\*.vbs
C:\Users\*\AppData\Roaming\*.wsf
C:\Users\*\AppData\Roaming\*.wsh
C:\Users\*\AppData\Roaming\*.zip
C:\Users\CurrentUserName\AppData\Local\*.a3x
C:\Users\CurrentUserName\AppData\Local\*.ahk
C:\Users\CurrentUserName\AppData\Local\*.au3
C:\Users\CurrentUserName\AppData\Local\*.bat
C:\Users\CurrentUserName\AppData\Local\*.cab
C:\Users\CurrentUserName\AppData\Local\*.cmd
C:\Users\CurrentUserName\AppData\Local\*.com
C:\Users\CurrentUserName\AppData\Local\*.dll
C:\Users\CurrentUserName\AppData\Local\*.exe
C:\Users\CurrentUserName\AppData\Local\*.hta
C:\Users\CurrentUserName\AppData\Local\*.jar
C:\Users\CurrentUserName\AppData\Local\*.js
C:\Users\CurrentUserName\AppData\Local\*.jse
C:\Users\CurrentUserName\AppData\Local\*.lnk
C:\Users\CurrentUserName\AppData\Local\*.pif
C:\Users\CurrentUserName\AppData\Local\*.ps1
C:\Users\CurrentUserName\AppData\Local\*.py
C:\Users\CurrentUserName\AppData\Local\*.pyc
C:\Users\CurrentUserName\AppData\Local\*.pyd
C:\Users\CurrentUserName\AppData\Local\*.scr
C:\Users\CurrentUserName\AppData\Local\*.tmp
C:\Users\CurrentUserName\AppData\Local\*.vbe
C:\Users\CurrentUserName\AppData\Local\*.vbs
C:\Users\CurrentUserName\AppData\Local\*.wsf
C:\Users\CurrentUserName\AppData\Local\*.wsh
C:\Users\CurrentUserName\AppData\Local\*.zip
C:\Users\CurrentUserName\AppData\Roaming\*.a3x
C:\Users\CurrentUserName\AppData\Roaming\*.ahk
C:\Users\CurrentUserName\AppData\Roaming\*.au3
C:\Users\CurrentUserName\AppData\Roaming\*.bat
C:\Users\CurrentUserName\AppData\Roaming\*.cab
C:\Users\CurrentUserName\AppData\Roaming\*.cmd
C:\Users\CurrentUserName\AppData\Roaming\*.com
C:\Users\CurrentUserName\AppData\Roaming\*.dll
C:\Users\CurrentUserName\AppData\Roaming\*.exe
C:\Users\CurrentUserName\AppData\Roaming\*.hta
C:\Users\CurrentUserName\AppData\Roaming\*.jar
C:\Users\CurrentUserName\AppData\Roaming\*.js
C:\Users\CurrentUserName\AppData\Roaming\*.jse
C:\Users\CurrentUserName\AppData\Roaming\*.lnk
C:\Users\CurrentUserName\AppData\Roaming\*.pif
C:\Users\CurrentUserName\AppData\Roaming\*.ps1
C:\Users\CurrentUserName\AppData\Roaming\*.py
C:\Users\CurrentUserName\AppData\Roaming\*.pyc
C:\Users\CurrentUserName\AppData\Roaming\*.pyd
C:\Users\CurrentUserName\AppData\Roaming\*.scr
C:\Users\CurrentUserName\AppData\Roaming\*.tmp
C:\Users\CurrentUserName\AppData\Roaming\*.vbe
C:\Users\CurrentUserName\AppData\Roaming\*.vbs
C:\Users\CurrentUserName\AppData\Roaming\*.wsf
C:\Users\CurrentUserName\AppData\Roaming\*.wsh
C:\Users\CurrentUserName\AppData\Roaming\*.zip

Comment: Run the Microsoft Deployment Image Servicing and Management (DISM) tool
cmd: DISM.exe /Online /Cleanup-image /Restorehealth
Comment: Run the System File Checker tool (SFC.exe) 
cmd: sfc /scannow

Reboot:
end::

Copie el texto seleccionado (clic derecho - Copiar). Ejecute FRST (FRST64) como administrador. Haga clic en “Reparar” una vez (!) y espere. El programa creará un archivo de registro (Fixlog.txt). Adjúntelo a su próximo mensaje.

El ordenador se reiniciará automáticamente.

furtivex · 7 Julio, 2026 22:57

Hola @ventana11

Gracias por los detalles.

Pregunta: ¿Estás usando Spybot Search and Destroy? Parece estar desactivado en este momento; eliminarlo podría mejorar el rendimiento, ya que tener más de un antivirus no suele ser recomendable. Tienes rastros de varios antivirus anteriores. ¿Cuál prefieres usar principalmente?

¿Han cesado las ventanas emergentes?

ventana11 · 8 Julio, 2026 15:22

````Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 07-07-2026 01
Ejecutado por Ana (08-07-2026 16:11:00) Run:2
Ejecutado desde C:\Users\anaca\Desktop
Perfiles cargados: Ana
Modo de Inicio: Normal
==============================================

fixlist contenido:
*****************
start::

AlternateDataStreams: C:\ProgramData\Temp:5C321E34 [240]
AlternateDataStreams: C:\Users\anaca\Downloads\camtasia(1).exe:MBAM.Zone.Identifier [143]
AlternateDataStreams: C:\Users\anaca\Downloads\HandBrake-1.7.3-x86_64-Win_GUI.exe:MBAM.Zone.Identifier [601]
AlternateDataStreams: C:\Users\anaca\Downloads\lighteditor-setup-saas-converter.exe:MBAM.Zone.Identifier [202]
AlternateDataStreams: C:\Users\anaca\Downloads\NeroWaveEditor.exe:MBAM.Zone.Identifier [188]
AlternateDataStreams: C:\Users\anaca\Downloads\OperaGXSetup.exe:MBAM.Zone.Identifier [258]
AlternateDataStreams: C:\Users\anaca\Downloads\uniconverter15_setup_full14241.exe:MBAM.Zone.Identifier [196]
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} =>  -> Ningún archivo
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} =>  -> Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{58624db6-e4cf-4ed6-a097-e489720c719b}\localserver32 -> "C:\Program Files\TechSmith\Camtasia 2023\CamtasiaStudio.exe" -ToastActivated => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{816E4B50-C8D5-4AA6-A5DD-65187BE041F5}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
CustomCLSID: HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\anaca\AppData\Local\Google\Update\1.3.36.363\psuser_64.dll => Ningún archivo
FirewallRules: [{006A6B7A-4FFC-4FB8-8FDC-ED57E1F5934C}] => (Allow) LPort=24522
FirewallRules: [{1A45281D-5815-4160-982B-6DD2F9FDCB76}] => (Allow) LPort=5354
FirewallRules: [{3CC9F194-9F55-434C-852A-BB1171237D67}] => (Allow) LPort=5354
FirewallRules: [{5437614F-25E8-4495-95F9-A0D88C71CDF0}] => (Allow) LPort=12972
FirewallRules: [{8E100505-59BC-48AE-B538-F96528131C64}] => (Allow) LPort=31931
FirewallRules: [{A216E762-F806-44D1-8AE6-A6B20E8EC28F}] => (Allow) C:\Users\anaca\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => Ningún archivo
FirewallRules: [{A8B58DAE-C684-4F50-9D4E-CA1502F4EA22}] => (Allow) LPort=14672
FirewallRules: [CN.wAQdN188] => (Allow) C:\Users\anaca\AppData\Local\Google\Chrome\User Data\Windows Driver Foundation (WDF).exe => Ningún archivo
FirewallRules: [{DAEEC7F9-0B50-4170-86C0-EAC6A583D6C9}] => (Allow) LPort=5354
FirewallRules: [{E7AB9C4B-6592-477E-A388-9B24B53422A1}] => (Allow) LPort=5354
FirewallRules: [{FD057789-BFEE-4906-8505-41B0004ADE4F}] => (Allow) LPort=14714
FirewallRules: [TCP Query User{05745102-4000-4A83-B654-5465053E35E2}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivo
FirewallRules: [TCP Query User{487A9C2A-DBE5-493A-8E7A-28840A714D5E}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivo
FirewallRules: [UDP Query User{CE1F7F4E-C8A7-4C6B-9A5A-70ABADCD9003}C:\users\anaca\desktop\tv\miniserver.exe] => (Allow) C:\users\anaca\desktop\tv\miniserver.exe => Ningún archivo
FirewallRules: [UDP Query User{ED43E001-7571-43C5-9D6D-9D1E454D8E93}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe] => (Allow) C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe => Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Ningún archivo
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Ningún archivo

AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}

DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto x64 dv.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto_Files
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjPatcher.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Windows\System32\SppExtComObjHook.dll
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto x64 dv.exe
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto_Files

Comment: Remove unwanted files from common folders using native removal power of Farbar to include remove on reboot if needed
C:\ProgramData\*.a3x
C:\ProgramData\*.ahk
C:\ProgramData\*.au3
C:\ProgramData\*.bat
C:\ProgramData\*.cab
C:\ProgramData\*.cmd
C:\ProgramData\*.com
C:\ProgramData\*.dll
C:\ProgramData\*.exe
C:\ProgramData\*.hta
C:\ProgramData\*.jar
C:\ProgramData\*.js
C:\ProgramData\*.jse
C:\ProgramData\*.lnk
C:\ProgramData\*.pif
C:\ProgramData\*.ps1
C:\ProgramData\*.py
C:\ProgramData\*.pyc
C:\ProgramData\*.pyd
C:\ProgramData\*.scr
C:\ProgramData\*.tmp
C:\ProgramData\*.vbe
C:\ProgramData\*.vbs
C:\ProgramData\*.wsf
C:\ProgramData\*.wsh
C:\ProgramData\*.zip
C:\Users\*\AppData\Roaming\*.au3
C:\Users\*\AppData\Roaming\*.bat
C:\Users\*\AppData\Roaming\*.cab
C:\Users\*\AppData\Roaming\*.cmd
C:\Users\*\AppData\Roaming\*.com
C:\Users\*\AppData\Roaming\*.dll
C:\Users\*\AppData\Roaming\*.exe
C:\Users\*\AppData\Roaming\*.hta
C:\Users\*\AppData\Roaming\*.jar
C:\Users\*\AppData\Roaming\*.js
C:\Users\*\AppData\Roaming\*.jse
C:\Users\*\AppData\Roaming\*.lnk
C:\Users\*\AppData\Roaming\*.pif
C:\Users\*\AppData\Roaming\*.ps1
C:\Users\*\AppData\Roaming\*.py
C:\Users\*\AppData\Roaming\*.pyc
C:\Users\*\AppData\Roaming\*.pyd
C:\Users\*\AppData\Roaming\*.scr
C:\Users\*\AppData\Roaming\*.tmp
C:\Users\*\AppData\Roaming\*.vbe
C:\Users\*\AppData\Roaming\*.vbs
C:\Users\*\AppData\Roaming\*.wsf
C:\Users\*\AppData\Roaming\*.wsh
C:\Users\*\AppData\Roaming\*.zip
C:\Users\CurrentUserName\AppData\Local\*.a3x
C:\Users\CurrentUserName\AppData\Local\*.ahk
C:\Users\CurrentUserName\AppData\Local\*.au3
C:\Users\CurrentUserName\AppData\Local\*.bat
C:\Users\CurrentUserName\AppData\Local\*.cab
C:\Users\CurrentUserName\AppData\Local\*.cmd
C:\Users\CurrentUserName\AppData\Local\*.com
C:\Users\CurrentUserName\AppData\Local\*.dll
C:\Users\CurrentUserName\AppData\Local\*.exe
C:\Users\CurrentUserName\AppData\Local\*.hta
C:\Users\CurrentUserName\AppData\Local\*.jar
C:\Users\CurrentUserName\AppData\Local\*.js
C:\Users\CurrentUserName\AppData\Local\*.jse
C:\Users\CurrentUserName\AppData\Local\*.lnk
C:\Users\CurrentUserName\AppData\Local\*.pif
C:\Users\CurrentUserName\AppData\Local\*.ps1
C:\Users\CurrentUserName\AppData\Local\*.py
C:\Users\CurrentUserName\AppData\Local\*.pyc
C:\Users\CurrentUserName\AppData\Local\*.pyd
C:\Users\CurrentUserName\AppData\Local\*.scr
C:\Users\CurrentUserName\AppData\Local\*.tmp
C:\Users\CurrentUserName\AppData\Local\*.vbe
C:\Users\CurrentUserName\AppData\Local\*.vbs
C:\Users\CurrentUserName\AppData\Local\*.wsf
C:\Users\CurrentUserName\AppData\Local\*.wsh
C:\Users\CurrentUserName\AppData\Local\*.zip
C:\Users\CurrentUserName\AppData\Roaming\*.a3x
C:\Users\CurrentUserName\AppData\Roaming\*.ahk
C:\Users\CurrentUserName\AppData\Roaming\*.au3
C:\Users\CurrentUserName\AppData\Roaming\*.bat
C:\Users\CurrentUserName\AppData\Roaming\*.cab
C:\Users\CurrentUserName\AppData\Roaming\*.cmd
C:\Users\CurrentUserName\AppData\Roaming\*.com
C:\Users\CurrentUserName\AppData\Roaming\*.dll
C:\Users\CurrentUserName\AppData\Roaming\*.exe
C:\Users\CurrentUserName\AppData\Roaming\*.hta
C:\Users\CurrentUserName\AppData\Roaming\*.jar
C:\Users\CurrentUserName\AppData\Roaming\*.js
C:\Users\CurrentUserName\AppData\Roaming\*.jse
C:\Users\CurrentUserName\AppData\Roaming\*.lnk
C:\Users\CurrentUserName\AppData\Roaming\*.pif
C:\Users\CurrentUserName\AppData\Roaming\*.ps1
C:\Users\CurrentUserName\AppData\Roaming\*.py
C:\Users\CurrentUserName\AppData\Roaming\*.pyc
C:\Users\CurrentUserName\AppData\Roaming\*.pyd
C:\Users\CurrentUserName\AppData\Roaming\*.scr
C:\Users\CurrentUserName\AppData\Roaming\*.tmp
C:\Users\CurrentUserName\AppData\Roaming\*.vbe
C:\Users\CurrentUserName\AppData\Roaming\*.vbs
C:\Users\CurrentUserName\AppData\Roaming\*.wsf
C:\Users\CurrentUserName\AppData\Roaming\*.wsh
C:\Users\CurrentUserName\AppData\Roaming\*.zip

Comment: Run the Microsoft Deployment Image Servicing and Management (DISM) tool
cmd: DISM.exe /Online /Cleanup-image /Restorehealth
Comment: Run the System File Checker tool (SFC.exe) 
cmd: sfc /scannow

Reboot:
end::
*****************

C:\ProgramData\Temp => ":5C321E34" ADS eliminado correctamente
C:\Users\anaca\Downloads\camtasia(1).exe => ":MBAM.Zone.Identifier" ADS eliminado correctamente
C:\Users\anaca\Downloads\HandBrake-1.7.3-x86_64-Win_GUI.exe => ":MBAM.Zone.Identifier" ADS eliminado correctamente
C:\Users\anaca\Downloads\lighteditor-setup-saas-converter.exe => ":MBAM.Zone.Identifier" ADS eliminado correctamente
C:\Users\anaca\Downloads\NeroWaveEditor.exe => ":MBAM.Zone.Identifier" ADS eliminado correctamente
C:\Users\anaca\Downloads\OperaGXSetup.exe => ":MBAM.Zone.Identifier" ADS eliminado correctamente
C:\Users\anaca\Downloads\uniconverter15_setup_full14241.exe => ":MBAM.Zone.Identifier" ADS eliminado correctamente
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\ FileSyncEx => eliminado correctamente
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\BriefcaseMenu => eliminado correctamente
"HKLM\Software\Classes\CLSID\{85BBD920-42A0-1069-A2E4-08002B30309D}" => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000} => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{58624db6-e4cf-4ed6-a097-e489720c719b} => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{816E4B50-C8D5-4AA6-A5DD-65187BE041F5} => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{85D8EE2F-794F-41F0-BB03-49D56A23BEF4} => eliminado correctamente
HKU\S-1-5-21-3493958998-3806918064-365168309-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F} => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{006A6B7A-4FFC-4FB8-8FDC-ED57E1F5934C}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1A45281D-5815-4160-982B-6DD2F9FDCB76}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3CC9F194-9F55-434C-852A-BB1171237D67}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5437614F-25E8-4495-95F9-A0D88C71CDF0}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{8E100505-59BC-48AE-B538-F96528131C64}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A216E762-F806-44D1-8AE6-A6B20E8EC28F}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{A8B58DAE-C684-4F50-9D4E-CA1502F4EA22}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\CN.wAQdN188" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DAEEC7F9-0B50-4170-86C0-EAC6A583D6C9}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E7AB9C4B-6592-477E-A388-9B24B53422A1}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FD057789-BFEE-4906-8505-41B0004ADE4F}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{05745102-4000-4A83-B654-5465053E35E2}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{487A9C2A-DBE5-493A-8E7A-28840A714D5E}C:\users\anaca\desktop\tv\miniserver.exe" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CE1F7F4E-C8A7-4C6B-9A5A-70ABADCD9003}C:\users\anaca\desktop\tv\miniserver.exe" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{ED43E001-7571-43C5-9D6D-9D1E454D8E93}C:\users\anaca\desktop\sammywidgets_v1.1\sammywidgets.exe" => no encontrado
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => eliminado correctamente
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive1 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive2 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive3 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive4 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive5 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive6 => eliminado correctamente
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ OneDrive7 => eliminado correctamente
"AV: Norton Security Ultra (Disabled - Out of date) {A2708B76-6835-6565-CB96-694212954A75}" => no encontrado
"AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto x64 dv.exe" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip0\KMSAuto_Files" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\C:\Windows\System32\SppExtComObjPatcher.exe" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\C:\Windows\System32\SppExtComObjHook.dll" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto x64 dv.exe" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths\\C:\Users\anaca\AppData\Local\Temp\AweZip\Temp1\AweZip4\KMSAuto_Files" => eliminado correctamente

=========== "C:\ProgramData\*.a3x" ==========

no encontrado

========= Final -> "C:\ProgramData\*.a3x" ========


=========== "C:\ProgramData\*.ahk" ==========

no encontrado

========= Final -> "C:\ProgramData\*.ahk" ========


=========== "C:\ProgramData\*.au3" ==========

no encontrado

========= Final -> "C:\ProgramData\*.au3" ========


=========== "C:\ProgramData\*.bat" ==========

no encontrado

========= Final -> "C:\ProgramData\*.bat" ========


=========== "C:\ProgramData\*.cab" ==========

no encontrado

========= Final -> "C:\ProgramData\*.cab" ========


=========== "C:\ProgramData\*.cmd" ==========

no encontrado

========= Final -> "C:\ProgramData\*.cmd" ========


=========== "C:\ProgramData\*.com" ==========

no encontrado

========= Final -> "C:\ProgramData\*.com" ========


=========== "C:\ProgramData\*.dll" ==========

no encontrado

========= Final -> "C:\ProgramData\*.dll" ========


=========== "C:\ProgramData\*.exe" ==========

no encontrado

========= Final -> "C:\ProgramData\*.exe" ========


=========== "C:\ProgramData\*.hta" ==========

no encontrado

========= Final -> "C:\ProgramData\*.hta" ========


=========== "C:\ProgramData\*.jar" ==========

no encontrado

========= Final -> "C:\ProgramData\*.jar" ========


=========== "C:\ProgramData\*.js" ==========

no encontrado

========= Final -> "C:\ProgramData\*.js" ========


=========== "C:\ProgramData\*.jse" ==========

no encontrado

========= Final -> "C:\ProgramData\*.jse" ========


=========== "C:\ProgramData\*.lnk" ==========

no encontrado

========= Final -> "C:\ProgramData\*.lnk" ========


=========== "C:\ProgramData\*.pif" ==========

no encontrado

========= Final -> "C:\ProgramData\*.pif" ========


=========== "C:\ProgramData\*.ps1" ==========

no encontrado

========= Final -> "C:\ProgramData\*.ps1" ========


=========== "C:\ProgramData\*.py" ==========

no encontrado

========= Final -> "C:\ProgramData\*.py" ========


=========== "C:\ProgramData\*.pyc" ==========

no encontrado

========= Final -> "C:\ProgramData\*.pyc" ========


=========== "C:\ProgramData\*.pyd" ==========

no encontrado

========= Final -> "C:\ProgramData\*.pyd" ========


=========== "C:\ProgramData\*.scr" ==========

no encontrado

========= Final -> "C:\ProgramData\*.scr" ========


=========== "C:\ProgramData\*.tmp" ==========

no encontrado

========= Final -> "C:\ProgramData\*.tmp" ========


=========== "C:\ProgramData\*.vbe" ==========

no encontrado

========= Final -> "C:\ProgramData\*.vbe" ========


=========== "C:\ProgramData\*.vbs" ==========

no encontrado

========= Final -> "C:\ProgramData\*.vbs" ========


=========== "C:\ProgramData\*.wsf" ==========

no encontrado

========= Final -> "C:\ProgramData\*.wsf" ========


=========== "C:\ProgramData\*.wsh" ==========

no encontrado

========= Final -> "C:\ProgramData\*.wsh" ========


=========== "C:\ProgramData\*.zip" ==========

no encontrado

========= Final -> "C:\ProgramData\*.zip" ========


=========== "C:\Users\*\AppData\Roaming\*.au3" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.au3" ========


=========== "C:\Users\*\AppData\Roaming\*.bat" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.bat" ========


=========== "C:\Users\*\AppData\Roaming\*.cab" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.cab" ========


=========== "C:\Users\*\AppData\Roaming\*.cmd" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.cmd" ========


=========== "C:\Users\*\AppData\Roaming\*.com" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.com" ========


=========== "C:\Users\*\AppData\Roaming\*.dll" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.dll" ========


=========== "C:\Users\*\AppData\Roaming\*.exe" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.exe" ========


=========== "C:\Users\*\AppData\Roaming\*.hta" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.hta" ========


=========== "C:\Users\*\AppData\Roaming\*.jar" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.jar" ========


=========== "C:\Users\*\AppData\Roaming\*.js" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.js" ========


=========== "C:\Users\*\AppData\Roaming\*.jse" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.jse" ========


=========== "C:\Users\*\AppData\Roaming\*.lnk" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\Roaming\*.lnk" ========


=========== "C:\Users\*\AppData\Roaming\*.pif" ==========

no encontrado

========= Final -> "C:\Users\*\AppData\````

ventana11 · 8 Julio, 2026 15:22

Ya he desinstalado Spybot S&D

furtivex · 9 Julio, 2026 23:06

Farbar Recovery Scan Tool: FIX

Nota: tras ejecutar el script (posiblemente), se cerrarán todas las pestañas abiertas del navegador, se cerrará la sesión de sus cuentas y se borrarán los archivos temporales, la papelera de reciclaje, el historial del navegador, las cookies y la caché.

Desactive su antivirus antes de reiniciar. Seleccione el siguiente código:

Start::
SystemRestore: ON
CreateRestorePoint:
CloseProcesses:
Task: {00DC1D5A-5F7B-47A8-90AA-3B38C6A9D1DF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5339512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {CCE7F518-97CB-4613-98FC-A7FE89403E66} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5659512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {B4E7EABD-5577-4708-8FAF-89AFE953A90A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [5839224 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [6975864 2023-01-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
C:\Program Files (x86)\Spybot - Search & Destroy 2
AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
Emptytemp:
End::

Copie el texto seleccionado (clic derecho - Copiar). Ejecute FRST (FRST64) como administrador. Haga clic en “Reparar” una vez (!) y espere. El programa creará un archivo de registro (Fixlog.txt). Adjúntelo a su próximo mensaje.

El ordenador se reiniciará automáticamente.

__

@ventana11 ¿Podrías decirme cuáles son los problemas restantes?

ventana11 · 11 Julio, 2026 08:03

````Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 10-07-2026 01
Ejecutado por Ana (11-07-2026 09:58:09) Run:3
Ejecutado desde C:\Users\anaca\Desktop
Perfiles cargados: Ana
Modo de Inicio: Normal
==============================================

fixlist contenido:
*****************
Start::
SystemRestore: ON
CreateRestorePoint:
CloseProcesses:
Task: {00DC1D5A-5F7B-47A8-90AA-3B38C6A9D1DF} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5339512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {CCE7F518-97CB-4613-98FC-A7FE89403E66} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5659512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {B4E7EABD-5577-4708-8FAF-89AFE953A90A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [5839224 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKU\S-1-5-21-3493958998-3806918064-365168309-1001\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [6975864 2023-01-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
C:\Program Files (x86)\Spybot - Search & Destroy 2
AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
Emptytemp:
End::
*****************

SystemRestore: ON => completado
El punto de restauración fue creado correctamente.
Procesos cerrados correctamente.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{00DC1D5A-5F7B-47A8-90AA-3B38C6A9D1DF}" => no encontrado
"C:\WINDOWS\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Check for updates" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCE7F518-97CB-4613-98FC-A7FE89403E66}" => no encontrado
"C:\WINDOWS\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Refresh immunization" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4E7EABD-5577-4708-8FAF-89AFE953A90A}" => no encontrado
"C:\WINDOWS\System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Safer-Networking\Spybot - Search and Destroy\Scan the system" => no encontrado
"HKU\S-1-5-21-3493958998-3806918064-365168309-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Spybot-S&D Cleaning" => no encontrado

"C:\Program Files (x86)\Spybot - Search & Destroy 2" Carpeta mover:

C:\Program Files (x86)\Spybot - Search & Destroy 2 => movido correctamente
"AV: Spybot - Search and Destroy (Disabled - Out of date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}" => no encontrado

=========== EmptyTemp: ==========

FlushDNS => completado
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12713180 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 5156157 B
Edge => 184227039 B
Chrome => 0 B
Firefox => 225393787 B
Opera => 0 B

Local\Temp, Local\*.tmp, LocalLow\Temp, Roaming\Temp, Roaming\*.tmp , IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 37206 B
NetworkService => 1270 B
anaca => 564328918 B

RecycleBin => 0 B
EmptyTemp: => 945.9 MB datos temporales eliminados.

================================


El sistema necesita reiniciarse.

==== Final de Fixlog 09:58:56 ====````