Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 15-11-2020 Ejecutado por selohu (15-11-2020 23:07:19) Ejecutado desde C:\Users\selohu\Desktop Windows 10 Pro Versión 2009 19042.630 (X64) (2020-05-28 08:09:57) Modo de Inicio: Normal ========================================================== ==================== Cuentas: ============================= Administrador (S-1-5-21-991384485-3360299836-4042273512-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-991384485-3360299836-4042273512-503 - Limited - Disabled) Invitado (S-1-5-21-991384485-3360299836-4042273512-501 - Limited - Enabled) selohu (S-1-5-21-991384485-3360299836-4042273512-1001 - Administrator - Enabled) => C:\Users\selohu WDAGUtilityAccount (S-1-5-21-991384485-3360299836-4042273512-504 - Limited - Disabled) ==================== Centro de Seguridad ======================== (Si una entrada es incluida en el fixlist, será eliminada.) AV: Spybot - Search and Destroy (Enabled - Up to date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8} AV: Trend Micro Maximum Security (Enabled - Up to date) {AFEE279F-FAE7-BAEE-3A88-4BF7277B8551} AV: Sophos Home (Enabled - Up to date) {8E0623B8-CF1C-DFFE-CEA3-AA41BDA4B8EE} AV: Emsisoft Anti-Malware (Disabled - Up to date) {5FD8BF8F-F242-6153-61B5-8FF333E8736B} AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: COMODO Antivirus (Disabled - Out of date) {05BC7AB5-FF0E-71EC-1054-15DA19B62DC7} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AV: 360 Total Security (Enabled - Up to date) {FFDC234A-CE9B-08F9-406B-F876951CE066} ==================== Programas instalados ====================== (Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.) 4K Video Downloader 4.12 (HKLM-x32\...\{A490FDCE-03DF-4B63-92D9-9C9ADC4246C3}) (Version: 4.12.0.3570 - Open Media LLC) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) AccessData FTK Imager (HKLM-x32\...\{0ADC8340-4A94-4CE3-A721-B558F365F8D0}) (Version: 3.1.2.0 - AccessData) Acronis Disk Director 12.5 (HKLM-x32\...\{AE5BBAA8-5AF2-40DB-A13D-F015439EC7C7}) (Version: 12.5.163 - Acronis) Actualización de NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden Adobe Connect (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Adobe Connect App) (Version: 2020.9.21.64 - Adobe Systems Inc.) Adobe Photoshop 2021 (HKLM-x32\...\PHSP_22_0) (Version: 22.0.0.35 - Adobe Inc.) Air Live Drive (HKLM\...\Air Live Drive) (Version: 1.7.0 - hxxp://www.airlivedrive.com) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.40.01.18 - Advanced Micro Devices, Inc.) Apowersoft Online Launcher version 1.7.8 (HKLM-x32\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.7.8 - APOWERSOFT LIMITED) Apowersoft Online Launcher version 1.8.0 (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{20BF67A8-D81A-4489-8225-FABAA0896E2D}_is1) (Version: 1.8.0 - APOWERSOFT LIMITED) Apple Application Support (32 bits) (HKLM-x32\...\{CCA8C50D-785B-4896-8675-FFE0C4ECCBC3}) (Version: 8.7 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{75BEF7E8-4370-4D42-94F3-B5AA77057965}) (Version: 8.7 - Apple Inc.) Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.) Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{DF6C3726-7E53-4772-9763-E9F147769F51}) (Version: 3.2.3.0000 - Asmedia Technology) Asoftech Data Recovery (HKLM-x32\...\{1AED6EB7-8FEA-4021-B8FD-EBAA6B21679F}) (Version: 2.00 - ) Audacity 2.4.2 (HKLM-x32\...\Audacity_is1) (Version: 2.4.2 - Audacity Team) Autopsy (HKLM\...\{9F0FC65E-2169-49ED-A2CA-14F8C4D50115}) (Version: 4.14.0 - The Sleuth Kit) AVerMedia A706 PCI Pure DVB-S 3.6.64.2 (HKLM-x32\...\AVerMedia A706 PCI Pure DVB-S) (Version: 3.6.64.2 - AVerMedia TECHNOLOGIES, Inc.) AviSynth (HKLM-x32\...\AviSynth) (Version: 2.6.0 MT - ) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 86.1.16.76 - Los creadores de Brave) BS.Player PRO (HKLM-x32\...\BSPlayerp) (Version: 2.75.1089 - AB Team, d.o.o.) Camtasia 2019 (HKLM\...\{FF10C4F0-9186-405F-809D-D2E8D5E39448}) (Version: 19.0.10.17662 - TechSmith Corporation) Hidden Camtasia 2019 (HKLM-x32\...\{03e048a7-3690-409c-b9c4-27612f78bd68}) (Version: 19.0.10.17662 - TechSmith Corporation) CrystalDiskInfo 8.8.9 (HKLM\...\CrystalDiskInfo_is1) (Version: 8.8.9 - Crystal Dew World) Cuadro de mensaje de excepción de Microsoft (HKLM\...\{847CE738-909B-4A98-9CF5-230EB23CA92D}) (Version: 9.00.5000.00 - Microsoft Corporation) Hidden Discord (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Discord) (Version: 0.0.308 - Discord Inc.) dr.fone (Version 10.4.2) (HKLM-x32\...\{E8F86DA8-B8E4-42C7-AFD4-EBB692AC43FD}_is1) (Version: 10.4.2.304 - Wondershare Technology Co.,Ltd.) DVBViewer Pro (HKLM-x32\...\DVBViewer Pro_is1) (Version: 6.1.7.2 - CM&V) EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS) eMule (HKLM-x32\...\eMule) (Version: - ) FinalData Standard 2.0 (HKLM-x32\...\FinalData Standard 2.0) (Version: - ) GetDataBack Pro version 5.55 (HKLM\...\GetDataBack Pro Install_is1) (Version: 5.55 - Runtime Software, LLC) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 86.0.4240.111 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.101.0 - Google LLC) Hidden Hard Disk Sentinel PRO (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: 5.61 - Janos Mathe) iCloud (HKLM\...\{8808B208-87D1-4725-8192-76D257E9DEAE}) (Version: 7.21.0.23 - Apple Inc.) IPTViewr para movistar+ 1.5 “Kruger 60” beta 1 SP1 (HKLM-x32\...\{525CDE99-1EB0-4E7D-8C36-A4F148E82463}) (Version: 1.5.1105.0 - hxxp://www.alphacentaury.org) Java 8 Update 251 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180251F0}) (Version: 8.0.2510.8 - Oracle Corporation) Java(TM) SE Development Kit 13.0.2 (64-bit) (HKLM\...\{606493F9-D1F1-5355-BB8A-F0E30F1AFFED}) (Version: 13.0.2.0 - Oracle Corporation) K-Lite Codec Pack 15.4.8 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 15.4.8 - KLCP) LAV Filters 0.74.1 (HKLM-x32\...\lavfilters_is1) (Version: 0.74.1 - Hendrik Leppkes) LibreOffice 7.0.3.1 (HKLM\...\{3C4801FF-3D7B-4804-877E-3A322C00524C}) (Version: 7.0.3.1 - The Document Foundation) Livestreamer 1.12.2 (HKLM-x32\...\Livestreamer) (Version: - ) MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Microsoft OneDrive (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 ESN (HKLM\...\{D7126FFC-90BA-4120-8FFB-3688C9931A09}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29016 (HKLM-x32\...\{40d3fee2-b257-46c2-bdc0-cb1088d97327}) (Version: 14.27.29016.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation) Microsoft Visual Studio Code (User) (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.50.1 - Microsoft Corporation) Npcap (HKLM-x32\...\NpcapInst) (Version: 0.9997 - Nmap Project) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden NVIDIA Controlador de audio HD 1.3.38.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.35 - NVIDIA Corporation) NVIDIA Controlador de gráficos 456.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 456.71 - NVIDIA Corporation) NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation) NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation) NVIDIA Software del sistema PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden Paquete de controladores de Windows - Amazon.com (WinUSB) FireDevicesUsbDeviceClass (10/27/2014 1.4.0000.00000) (HKLM\...\70D74CAD18BB165614511A2A67DB9EBF036D06A9) (Version: 10/27/2014 1.4.0000.00000 - Amazon.com) Paquete de controladores de Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.) Python 3.9.0rc2 (64-bit) (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{3009660a-1c70-4778-ac12-cafb00544300}) (Version: 3.9.122.0 - Python Software Foundation) Python 3.9.0rc2 Add to Path (64-bit) (HKLM\...\{C3B8D7EB-3186-4E3D-811B-62DF0BBE3584}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Development Libraries (64-bit) (HKLM\...\{35F06110-EA33-4C2D-8CD2-0EE4D69A2019}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Documentation (64-bit) (HKLM\...\{EBAC1B62-5C6A-4AD0-9E58-DC4D61F73D32}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Executables (64-bit) (HKLM\...\{DF3B8503-03DA-4629-B6A3-E7B2A612D494}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 pip Bootstrap (64-bit) (HKLM\...\{E89DB909-7A92-4455-A46D-CFFDB65C72E2}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Standard Library (64-bit) (HKLM\...\{B83A4122-545F-4C71-B909-AB9CB74BE447}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Tcl/Tk Support (64-bit) (HKLM\...\{3323526F-5630-4E45-B692-DBAEC43DCF63}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Test Suite (64-bit) (HKLM\...\{A494CC91-CE2D-485C-B069-53B4A190D322}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Python 3.9.0rc2 Utility Scripts (64-bit) (HKLM\...\{49B43873-6F38-4D2D-A8F5-1B17B5243BC4}) (Version: 3.9.122.0 - Python Software Foundation) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek) Revo Uninstaller Pro 4.3.7 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.7 - VS Revo Group, Ltd.) R-Studio 8.3 (HKLM-x32\...\R-Studio 8.3NSIS) (Version: 8.3.168075 - R-Tools Technology Inc.) Sublime Text 3 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd) SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 8.0.1058 - SUPERAntiSpyware.com) Telegram Desktop version 2.4.7 (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 2.4.7 - Telegram FZ-LLC) VdhCoApp 1.5.0 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version: - DownloadHelper) VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN) VMware Workstation (HKLM\...\{D51F496C-D02A-4AFA-AB43-F61B94462C9E}) (Version: 16.0.0 - VMware, Inc.) WhatsApp (HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\WhatsApp) (Version: 2.2045.19 - WhatsApp) Winamp (HKLM-x32\...\Winamp) (Version: 5.8 - Winamp SA) Wireshark 3.2.7 64-bit (HKLM-x32\...\Wireshark) (Version: 3.2.7 - The Wireshark developer community, hxxps://www.wireshark.org) Packages: ========= Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2020-05-10] (Adobe Systems Incorporated) Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_2.9.0.1_neutral__6e5tt8cgb93ep [2020-05-10] (Canon Inc.) Linux Cheatsheet -> C:\Program Files\WindowsApps\51231akshay2000.LinuxCheatsheet_1.2.0.0_neutral__1y7n7bzn5h0zw [2020-05-27] (akshay2000) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-05-10] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-05-10] (Microsoft Corporation) [MS Ad] Microsoft Defender Application Guard Companion -> C:\Program Files\WindowsApps\Microsoft.WindowsDefenderApplicationGuard_1.0.11.0_x64__8wekyb3d8bbwe [2020-11-02] (Microsoft Corporation) Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-10-26] (Microsoft Studios) [MS Ad] NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.958.0_x64__56jybvy8sckqj [2020-06-25] (NVIDIA Corp.) Python 3.8 -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.8_3.8.1776.0_x64__qbz5n2kfra8p0 [2020-09-24] (Python Software Foundation) Ubuntu -> C:\Program Files\WindowsApps\CanonicalGroupLimited.UbuntuonWindows_2004.2020.812.0_x64__79rhkp1fndgsc [2020-08-20] (Canonical Group Limited) Windows Terminal -> C:\Program Files\WindowsApps\Microsoft.WindowsTerminal_1.4.3141.0_x64__8wekyb3d8bbwe [2020-11-13] (Microsoft Corporation) [Startup Task] WinGet Source -> C:\Program Files\WindowsApps\Microsoft.Winget.Source_2020.529.552.462_neutral__8wekyb3d8bbwe [2020-05-29] (Microsoft Corporation) ==================== Personalizado CLSID (Lista blanca): ============== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0 CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe (TechSmith Corporation -> TechSmith Corporation) CustomCLSID: HKU\S-1-5-21-991384485-3360299836-4042273512-1001_Classes\CLSID\{D592DDB5-1CFF-4CE2-A3A5-3C061503251E} -> [MEGA] => C:\Users\selohu\Documents\MEGA [2020-03-30 17:05] ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ FSOverlayIcon] -> {C0829D19-E5A0-44F5-B56E-D15030C53BB9} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado] ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers1: [BthSendToContextMenuExt] -> {CF373149-C3D9-4AEB-9CE8-BDD1D2FFFA5B} => C:\WINDOWS\system32\BSAppShlExt.dll [2012-09-19] (IVT CORPORATION -> TODO: <公司名>) ContextMenuHandlers1: [CloudContextMenu] -> {f16ff8b9-0db7-39ef-b2ef-68ab9c2951c1} => C:\Program Files\AirLiveDrive\AirLiveDriveShellEx.DLL [2020-11-05] (INICIATIVAS INFORMATICAS Y DE COMUNICACION SL -> www.airlivedrive.com) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-09-08] (Apple Inc. -> Apple Inc.) ContextMenuHandlers1: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Ningún archivo ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2020-09-14] (VMware, Inc. -> VMware, Inc.) ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2020-09-14] (VMware, Inc. -> VMware, Inc.) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado] ContextMenuHandlers4: [CloudContextMenu] -> {f16ff8b9-0db7-39ef-b2ef-68ab9c2951c1} => C:\Program Files\AirLiveDrive\AirLiveDriveShellEx.DLL [2020-11-05] (INICIATIVAS INFORMATICAS Y DE COMUNICACION SL -> www.airlivedrive.com) ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\selohu\AppData\Local\MEGAsync\ShellExtX64.dll [2020-09-16] (Mega Limited -> ) ContextMenuHandlers4: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Ningún archivo ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => -> Ningún archivo ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_feed726c6560f7a7\nvshext.dll [2020-10-02] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado] ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2020-09-28] (VS Revo Group Ltd. -> VS Revo Group) ContextMenuHandlers6: [SD360] -> {086F171D-5ED1-4ED2-B736-CFF3AD6A128E} => C:\Program Files (x86)\360\Total Security\MenuEx64.dll -> Ningún archivo ==================== Codecs (Lista blanca) ==================== (Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\system32\lvcod64.dll [475672 2007-10-12] (Logitech Inc -> Logitech Inc.) HKLM\...\Drivers32: [vidc.i420] => C:\Windows\SysWOW64\lvcodec2.dll [416280 2007-10-12] (Logitech Inc -> Logitech Inc.) ==================== Accesos directos & WMI ======================== (Las entradas pueden ser listadas para ser restauradas o eliminadas.) ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\Google Maps.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gmkjkfepcibbjemdifjlfanjdedgklmj ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplicaciones de Chrome\YouTube Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\A (Mama) - Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" ShortcutWithArgument: C:\Users\selohu\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\YouTube Music.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=cinhimbnkkaeohfgghhklpknlkffjgod ==================== Módulos cargados (Lista blanca) ============= 2004-08-02 14:40 - 2020-09-25 16:12 - 000045056 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\csa\Optimized_CSA.mdl 2008-08-30 09:54 - 2020-09-25 16:12 - 000260639 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\sqlite.mdl 2009-12-20 16:19 - 2020-09-25 16:12 - 000159744 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vHelper.mdl 2013-09-10 22:05 - 2020-09-25 16:12 - 000179390 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\Cryptoworks.mdl 2010-04-09 08:16 - 2020-09-25 16:12 - 000009216 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\Irdeto.mdl 2010-08-08 21:10 - 2020-09-25 16:12 - 000054784 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\nagra.mdl 2009-12-14 18:28 - 2020-09-25 16:12 - 000006144 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\NDS.mdl 2010-01-03 12:54 - 2020-09-25 16:12 - 000095232 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\Seca.mdl 2009-03-09 14:03 - 2020-09-25 16:12 - 000397312 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\SIDSA.mdl 2017-10-04 11:26 - 2020-09-25 16:12 - 000067222 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\Tandberg.mdl 2014-06-29 23:18 - 2020-09-25 16:12 - 000045114 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\Viaccess.mdl 2013-10-20 19:43 - 2020-09-25 16:12 - 000041157 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vModules\Viaccess-old.mdl 2014-06-24 18:13 - 2020-09-25 16:12 - 002046464 _____ () [Archivo no firmado] C:\Program Files (x86)\DVBViewer\Plugins\vplug.dll 2020-11-05 00:58 - 2019-04-16 21:08 - 000923731 _____ (SQLite Development Team) [Archivo no firmado] C:\Program Files (x86)\DVBViewer\sqlite3.dll ==================== Alternate Data Streams (Lista blanca) ======== (Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.) AlternateDataStreams: C:\Windows:CM_36faabd924501fcd2f743302621d89eb425ec11f74fef19a5e0fe69c3f0b5201 [74] AlternateDataStreams: C:\Windows:CM_e0501b65315a77c6cde279a3a8d62a1a6c48bf2c2e353a3654218165115f1673 [74] AlternateDataStreams: C:\ProgramData\TEMP:1AAB2E68 [119] AlternateDataStreams: C:\ProgramData\TEMP:B755D674 [180] ==================== Modo Seguro (Lista blanca) ================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\10589338.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\16990891.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\19648080.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\24697462.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\37238653.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\39326786.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\41645524.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\56281002.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\56866735.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\92292752.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\96003709.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMInstallerService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\10589338.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\16990891.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\19648080.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\24697462.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\37238653.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\39326786.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\41645524.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\56281002.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\56866735.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\92292752.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\96003709.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MB3Service => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMInstallerService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMSwissArmy => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR523 => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR523.SYS => ""="Driver" ==================== Asociación (Lista blanca) ================= (Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado.) HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Classes\exefile: "%1" %* <==== ATENCIÓN HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Classes\.exe: exefile => "%1" %* <==== ATENCIÓN ==================== Internet Explorer (Lista blanca) ========== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKU\S-1-5-21-991384485-3360299836-4042273512-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\ssv.dll [2020-04-27] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-27] (Oracle America, Inc. -> Oracle Corporation) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\SysWow64\skype4com.dll [2012-09-19] (IVT CORPORATION -> Skype Technologies) (Si una entrada es incluida en el fixlist, será eliminada del registro.) IE trusted site: HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\trendmicro.com -> hxxps://pwm.trendmicro.com ==================== Hosts contenido: ========================= (Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.) 2020-11-06 01:38 - 2020-11-06 01:38 - 000001412 _____ C:\WINDOWS\system32\drivers\etc\hosts 2020-03-28 02:57 - 2020-10-11 12:54 - 000000621 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics 192.168.1.33 selohu.mshome.net # 2025 10 5 10 11 54 57 473 17.209.65 selohu.mshome.net # 2025 4 5 18 3 20 5 366 172.18.44.1 selohu.mshome.net # 2025 4 3 16 9 6 42 330 84 ==================== Otras Áreas =========================== (Actualmente no existe una corrección automática para esta sección.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Users\selohu\AppData\Local\Microsoft\WindowsApps;C:\Users\selohu\AppData\Local\Android\Sdk;\platform-tools;C:\adb;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\WindowsPowerShell\Scripts;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Livestreamer HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\selohu\Desktop\fondos\U00pxXu_Nlk.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) Firewall de Windows está habilitado. Network Binding: ============= VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) Npcap Loopback Adapter: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) Npcap Loopback Adapter: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) Npcap Loopback Adapter: VMware Bridge Protocol -> vmware_bridge (enabled) Ethernet: VMware Bridge Protocol -> vmware_bridge (enabled) Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) Ethernet: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) Conexión de área local: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) Conexión de área local: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) Conexión de área local: VMware Bridge Protocol -> vmware_bridge (enabled) Ethernet 3: VMware Bridge Protocol -> vmware_bridge (enabled) Ethernet 3: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) Ethernet 3: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) ==================== MSCONFIG/TASK MANAGER elementos deshabilitados == (Si una entrada es incluida en el fixlist, será eliminada.) HKLM\...\StartupApproved\StartupFolder: => "WSAppHelper.lnk" HKLM\...\StartupApproved\StartupFolder: => "WSAndroidAppHelper.lnk" HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service" HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "Avira SystrayStartTrigger" HKLM\...\StartupApproved\Run32: => "Avira System Speedup User Starter" HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "BtTray" HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk" HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "SUPERAntiSpyware" HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "CCXProcess" HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" ==================== Reglas de firewall (Lista blanca) ================ (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) FirewallRules: [TCP Query User{3219306F-76B4-4224-B856-618B7AE1EB59}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [UDP Query User{198D6E3B-81E7-40FB-B249-355B21C6449B}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{C410C972-2362-4FDB-8605-815369E15F85}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{7FE1FA95-5504-4E7A-8D11-718EFB43797F}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{911A79D6-F265-4663-ADEB-ADD6DE31A8D7}] => (Allow) LPort=8320 FirewallRules: [TCP Query User{B543AF2C-44D4-4F17-95DF-15BB75B8216E}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart) FirewallRules: [UDP Query User{A2507F17-5206-4DC6-AC64-3211156E9F99}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart) FirewallRules: [TCP Query User{C6DC78D7-02D4-400B-A601-E5C315D0D4F0}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart) FirewallRules: [UDP Query User{A7903533-81B5-49E7-A935-53BF24395432}C:\program files (x86)\dvbviewer\dvbviewer.exe] => (Allow) C:\program files (x86)\dvbviewer\dvbviewer.exe (Christian Hackbart -> CM&V Hackbart) FirewallRules: [TCP Query User{B9FE262A-6C96-4173-8515-5B52A1DF09CB}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [UDP Query User{B5961D29-D1B8-4796-82B6-2E06B1C4731C}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{21E4328C-101F-4CF5-8C5E-BBEE23B0D9DF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{9A396AC8-8B15-4BC5-8B4A-EB2EBC77BC9B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [TCP Query User{7C5BF8D2-C5F9-4249-BB95-B7C73BEC74E1}C:\program files (x86)\r-studio\rstudio64.exe] => (Allow) C:\program files (x86)\r-studio\rstudio64.exe (R-Tools Technology Inc. -> R-Tools Technology Inc.) [Archivo no firmado] FirewallRules: [UDP Query User{52A58814-B39A-4C51-91BF-0456F5578D2D}C:\program files (x86)\r-studio\rstudio64.exe] => (Allow) C:\program files (x86)\r-studio\rstudio64.exe (R-Tools Technology Inc. -> R-Tools Technology Inc.) [Archivo no firmado] FirewallRules: [TCP Query User{F16E7ED1-F280-4688-A9E2-CBF8375362C5}C:\program files\nitroshare\nitroshare.exe] => (Allow) C:\program files\nitroshare\nitroshare.exe () [Archivo no firmado] FirewallRules: [UDP Query User{5BF40D90-A811-4E99-B015-FC9C826A803C}C:\program files\nitroshare\nitroshare.exe] => (Allow) C:\program files\nitroshare\nitroshare.exe () [Archivo no firmado] FirewallRules: [TCP Query User{58706BB8-EF4A-4667-8133-4DE99A6A73D7}C:\users\selohu\desktop\64-bit\netscan.exe] => (Allow) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect) FirewallRules: [UDP Query User{BFED9728-438C-4C4A-8CDB-CAA9C14D03E8}C:\users\selohu\desktop\64-bit\netscan.exe] => (Allow) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect) FirewallRules: [{07D3D8A4-3BA5-46F9-A2DB-3E990E27BE42}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) FirewallRules: [{ACD31D30-0641-46F1-B445-585C00D64C67}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) FirewallRules: [TCP Query User{D613ADFD-61E3-40B4-B62A-FCDC9E2E0881}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado] FirewallRules: [UDP Query User{3F2E7080-34D8-4D1E-A838-08A4E7C2F855}C:\program files (x86)\emule\emule.exe] => (Allow) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado] FirewallRules: [{F4A50093-65BA-4E5E-93AE-70C233D0E915}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) FirewallRules: [{31C51F5A-DDA0-45CB-8A5C-CCE15D244734}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG) FirewallRules: [TCP Query User{C9F222B1-6AC0-4868-AD9B-8FE082BC7369}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [UDP Query User{38B056DA-80C8-4B3B-AC2E-288282A5BF7E}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{54CE11A0-B9AB-4713-B54E-C44CA40CB235}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [TCP Query User{66B0B702-3AEA-476D-80EF-C4D82E9A93C1}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado] FirewallRules: [UDP Query User{4E14BA86-6A57-44C6-8D8F-608BB298A69F}C:\program files (x86)\emule\emule.exe] => (Block) C:\program files (x86)\emule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado] FirewallRules: [{56FA7FBC-6E6F-48B1-A82D-EB3DE0A1F766}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.) FirewallRules: [{F7D244BC-1650-4F1F-B239-5ABCA67250E5}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.) FirewallRules: [{0163B273-969B-426C-AE3A-F9737CE89FCA}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> ) FirewallRules: [{0C483C00-91DA-4CDE-A21F-8229EA4172E2}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> ) FirewallRules: [{EAEBCA00-641E-4785-9AF8-47756A62115B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{E0B11049-1274-440E-99C4-E6E95163601E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{1C79C80C-7BE5-4A6D-9591-4D79F7886F2C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{42FBE6BF-D2C1-4CD2-9DD1-09DC72E4191E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{27C5930F-BF1A-43B2-8A75-F1250718D417}] => (Allow) C:\Program Files (x86)\DVBViewer\DVBViewer.exe (Christian Hackbart -> CM&V Hackbart) FirewallRules: [TCP Query User{AE771EF1-E8DE-4C12-8913-FFB509C2BDBA}C:\users\selohu\desktop\64-bit\netscan.exe] => (Block) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect) FirewallRules: [UDP Query User{AE211898-EF59-4CC8-B0EE-BE5E301CDFCE}C:\users\selohu\desktop\64-bit\netscan.exe] => (Block) C:\users\selohu\desktop\64-bit\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect) FirewallRules: [{A830D660-519C-4938-96E8-31E76DCB4D88}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{DE04D42A-8A4A-4FCE-B0FB-41A477FFA7F0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{B6A7D130-379F-4F58-9AC0-7F0A67D8BA2B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{EBC73CB3-84CF-4832-A409-18129BD4A25C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{84EA7E37-A4BB-45C2-84E9-BEB6A66CD7E0}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{6A45486F-99A1-4E66-9BE8-E3EEA33A7DBC}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.) FirewallRules: [{E8E3C460-5291-498F-8463-4CFB373C2444}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{1A3E656E-37E8-4288-BC38-CF6620649AD7}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{57CEA9BE-0C0B-4A7C-A08E-001463B6A195}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{02F2B4D4-7FC4-4BFB-9807-527BB4B5E2A2}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{20425747-8AF9-4894-A289-D4320235A884}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{E006E420-5215-4E68-8E98-5D61B2B44F4A}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{629AD580-2476-4A10-9C45-DBB769610E78}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{B7E7705F-5407-4073-8000-0FB386F49F4A}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{DAFC85B5-FBBB-4DEF-A0D1-815F71038485}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{0CF1B341-EFDD-413C-91C7-B5EF156F783E}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{53A6C469-BA2B-4C20-88CA-2E9BDD420F40}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{A0206E39-DD27-40DB-B93C-FD5B33C7ED37}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{9BB93895-6DB0-46B3-A3FC-6D7086CA21D4}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{A46D6667-A1AD-481A-84C9-E84EC7C37A7C}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{3DF8C97F-EAA5-45E8-9666-901E306356F3}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{C397644A-E7D4-49B2-A32D-50E36A768625}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{E97F505F-655C-4BB3-A2FE-BE84E301AC96}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{A6FD7EA2-6298-4C20-96A9-48D89ECB1D59}] => (Allow) C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{FB016D7F-D7B8-4B16-A0C0-6E5C35226322}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [{D23EAE32-4497-495F-B3BA-02A5C51C6C62}] => (Allow) C:\Program Files\VideoLAN\VLC\vlc.exe (VideoLAN -> VideoLAN) FirewallRules: [TCP Query User{D0B4FF1B-864F-4B64-BB63-CCBBD159FFBC}C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe] => (Allow) C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [UDP Query User{BD307DBD-801F-4BCA-A2A2-BD9453BC32A0}C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe] => (Allow) C:\users\selohu\documents\iptviewr\movistar+ (v1.5.1105.0 'kruger 60')\bin\iptviewr.exe (Open Source Developer, Santiago Aréchaga -> www.alphacentaury.org) FirewallRules: [{64FADE6F-05D5-4081-9F36-798A4568A9D5}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA) FirewallRules: [{CB93F031-D9A8-4616-843E-5A35E61505C2}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe (Winamp SA -> Winamp SA) ==================== Puntos de Restauración ========================= ATENCIÓN: Restaurar Sistema está deshabilitado (Total:111.16 GB) (Free:9 GB) (8%) ==================== Dispositivos defectuosos en el Administrador de dispositivos ============ Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Npcap Loopback Adapter Description: Adaptador de bucle invertido KM-TEST de Microsoft Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: kmloop Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VMware Virtual Ethernet Adapter for VMnet8 Description: VMware Virtual Ethernet Adapter for VMnet8 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VSP de integración de kernel de Microsoft Hyper-V NT Description: VSP de integración de kernel de Microsoft Hyper-V NT Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: vkrnlintvsp Problem: : Windows cannot initialize the device driver for this hardware. (Code 37) Resolution: The driver returned failure from its DriverEntry routine. Uninstall the driver, and then click "Scan for hardware changes" to reinstall or upgrade the driver. Name: Realtek RTL8139/810x Family Fast Ethernet NIC Description: NIC de Fast Ethernet de la familia Realtek RTL8139/810x Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Realtek Semiconductor Corp. Service: RTL8023x64 Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Errores del registro de eventos: ======================== Errores de aplicación: ================== Error: (11/14/2020 04:10:02 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nombre de la aplicación con errores: IPTViewr.exe, versión: 1.5.1105.0, marca de tiempo: 0x5e824efa Nombre del módulo con errores: KERNELBASE.dll, versión: 10.0.19041.572, marca de tiempo: 0x1183946c Código de excepción: 0xe0434352 Desplazamiento de errores: 0x0000000000023e49 Identificador del proceso con errores: 0x2868 Hora de inicio de la aplicación con errores: 0x01d6ba339597bc3d Ruta de acceso de la aplicación con errores: C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe Ruta de acceso del módulo con errores: C:\WINDOWS\System32\KERNELBASE.dll Identificador del informe: 5a3e1989-b8ad-4427-a2e0-68403546d5c5 Nombre completo del paquete con errores: Identificador de aplicación relativa del paquete con errores: Error: (11/14/2020 04:10:02 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Aplicación: IPTViewr.exe Versión de Framework: v4.0.30319 Descripción: el proceso terminó debido a una excepción no controlada. Información de la excepción: System.IO.FileNotFoundException en System.IO.__Error.WinIOError(Int32, System.String) en System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean) en System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32) en IpTviewr.UiServices.Configuration.Settings.JsonSettingsStore.CreateEmptyStore() en IpTviewr.UiServices.Configuration.Settings.JsonSettingsProvider.Initialize(System.String, System.Collections.Specialized.NameValueCollection) en System.Configuration.ApplicationSettingsBase.get_Initializer() en System.Configuration.ApplicationSettingsBase.CreateSetting(System.Reflection.PropertyInfo) en System.Configuration.ApplicationSettingsBase.EnsureInitialized() en System.Configuration.ApplicationSettingsBase.get_Properties() en System.Configuration.SettingsBase.GetPropertyValueByName(System.String) en System.Configuration.SettingsBase.get_Item(System.String) en System.Configuration.ApplicationSettingsBase.GetPropertyValue(System.String) en System.Configuration.ApplicationSettingsBase.get_Item(System.String) en IpTviewr.ChannelList.Properties.Settings.get_SetCulture() en IpTviewr.ChannelList.MyApplication.SetApplicationCulture(System.String[]) en IpTviewr.ChannelList.Program.Main(System.String[]) Error: (11/13/2020 09:03:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nombre de la aplicación con errores: MsiExec.exe, versión: 5.0.19041.1, marca de tiempo: 0x25d5450e Nombre del módulo con errores: MSI5027.tmp, versión: 17.3.0.0, marca de tiempo: 0x5f212613 Código de excepción: 0xc0000409 Desplazamiento de errores: 0x0005b689 Identificador del proceso con errores: 0x534 Hora de inicio de la aplicación con errores: 0x01d6b9f81ed1151a Ruta de acceso de la aplicación con errores: C:\Windows\syswow64\MsiExec.exe Ruta de acceso del módulo con errores: C:\Users\selohu\AppData\Local\Temp\MSI5027.tmp Identificador del informe: c7944e11-4b4a-42d9-85da-cfdc29e76fbc Nombre completo del paquete con errores: Identificador de aplicación relativa del paquete con errores: Error: (11/13/2020 02:03:34 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (E:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) Error: (11/13/2020 02:01:32 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) Error: (11/13/2020 12:36:46 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) Error: (11/13/2020 11:47:27 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) Error: (11/13/2020 11:35:29 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: El optimizador de almacenamiento no pudo completar volver a optimizar en (D:) debido a: El hardware del volumen no admite la operación solicitada. (0x8900002A) Errores del sistema: ============= Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio swi_service no pudo iniciarse debido al siguiente error: El sistema no puede encontrar la ruta especificada. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio SAVAdminService no pudo iniciarse debido al siguiente error: El sistema no puede encontrar la ruta especificada. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio MBAMInstallerService no pudo iniciarse debido al siguiente error: El sistema no puede encontrar el archivo especificado. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio EsgShKernel no pudo iniciarse debido al siguiente error: El sistema no puede encontrar el archivo especificado. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: El servicio hvsics depende del servicio CmService, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: El servicio CmService depende del servicio HvHost, el cual no pudo iniciarse debido al siguiente error: No se puede iniciar el servicio o grupo de dependencia. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: El servicio HvHost depende del servicio hvservice, el cual no pudo iniciarse debido al siguiente error: No se ha encontrado el elemento. Error: (11/15/2020 10:43:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: El servicio hvservice no pudo iniciarse debido al siguiente error: No se ha encontrado el elemento. Windows Defender: =================================== Date: 2020-11-15 03:29:50.2570000Z Description: El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. Id. de examen: {718180B7-6B5A-4F9A-9892-B269BFC81194} Tipo de examen: Antimalware Parámetros de examen: Examen completo Usuario: SELOHU\selohu Date: 2020-11-15 03:29:50.2550000Z Description: Antivirus de Microsoft Defender detectó malware u otro software potencialmente no deseado. Para más información, consulta lo siguiente: https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Keygen&threatid=2147593794&enterprise=0 Nombre: HackTool:Win32/Keygen Id.: 2147593794 Gravedad: Alta Categoría: Herramienta Ruta de acceso: containerfile:_C:\Users\selohu\Desktop\2.75.B.1089\BS.Player.Pro.v2.75.Build.1089.Multilenguaje.ES.inc.Serial.Keygen\Keygen.rar; file:_C:\Users\selohu\Desktop\2.75.B.1089\BS.Player.Pro.v2.75.Build.1089.Multilenguaje.ES.inc.Serial.Keygen\Keygen.rar->keygen.exe Origen de detección: Equipo local Tipo de detección: Concreto Origen de detección: Usuario Usuario: SELOHU\selohu Nombre de proceso: Unknown Versión de inteligencia de seguridad: AV: 1.327.879.0, AS: 1.327.879.0, NIS: 1.327.879.0 Versión de motor: AM: 1.1.17600.5, NIS: 1.1.17600.5 Date: 2020-11-15 02:29:25.1050000Z Description: Antivirus de Microsoft Defender detectó malware u otro software potencialmente no deseado. Para más información, consulta lo siguiente: https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/CryptInject!ml&threatid=2147760506&enterprise=0 Nombre: Trojan:Win32/CryptInject!ml Id.: 2147760506 Gravedad: Grave Categoría: Caballo de Troya Ruta de acceso: file:_C:\Users\selohu\Downloads\Telegram Desktop\WhatsAppSniffer v1.03 @GlobalAppsBot.apk Origen de detección: Equipo local Tipo de detección: FastPath Origen de detección: Protección en tiempo real Usuario: SELOHU\selohu Nombre de proceso: C:\Users\selohu\AppData\Roaming\Telegram Desktop\Telegram.exe Versión de inteligencia de seguridad: AV: 1.327.879.0, AS: 1.327.879.0, NIS: 1.327.879.0 Versión de motor: AM: 1.1.17600.5, NIS: 1.1.17600.5 Date: 2020-11-14 04:09:43.6170000Z Description: El acceso controlado a carpetas bloqueó C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe para que no pueda modificar %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\. Hora de detección: 2020-11-14T03:09:43.616Z Usuario: SELOHU\selohu Ruta de acceso: %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\ Nombre del proceso: C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\IPTViewr.exe Versión de inteligencia de seguridad: 1.327.840.0 Versión del motor: 1.1.17600.5 Versión del producto: 4.18.2010.7 Date: 2020-11-14 04:07:07.2260000Z Description: El acceso controlado a carpetas bloqueó C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\FirstTimeConfig.exe para que no pueda modificar %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\. Hora de detección: 2020-11-14T03:07:07.225Z Usuario: SELOHU\selohu Ruta de acceso: %userprofile%\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\ Nombre del proceso: C:\Users\selohu\Documents\IPTViewr\movistar+ (v1.5.1105.0 'Kruger 60')\bin\FirstTimeConfig.exe Versión de inteligencia de seguridad: 1.327.840.0 Versión del motor: 1.1.17600.5 Versión del producto: 4.18.2010.7 CodeIntegrity: =================================== Date: 2020-11-15 23:00:18.2660000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2020-11-15 23:00:18.2630000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2020-11-15 23:00:17.7550000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2020-11-15 23:00:17.7530000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2020-11-15 22:53:53.3040000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-15 22:53:53.3010000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements. Date: 2020-11-15 22:53:51.4720000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2020-11-15 22:53:51.4680000Z Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. ==================== Información de la memoria =========================== BIOS: American Megatrends Inc. 2501 04/09/2014 Placa base: ASUSTeK COMPUTER INC. M5A97 EVO R2.0 Procesador: AMD FX(tm)-4300 Quad-Core Processor Porcentaje de memoria en uso: 51% RAM física total: 7927.12 MB RAM física disponible: 3810.03 MB Virtual total: 9207.12 MB Virtual disponible: 4387.89 MB ==================== Unidades ================================ Drive c: () (Fixed) (Total:111.16 GB) (Free:9 GB) NTFS Drive d: () (Fixed) (Total:149.04 GB) (Free:54.29 GB) NTFS Drive e: () (Fixed) (Total:465.76 GB) (Free:94.08 GB) NTFS Drive l: (WD My Passport) (Fixed) (Total:931.48 GB) (Free:183.4 GB) NTFS Drive m: (My Passport) (Fixed) (Total:931.48 GB) (Free:142.87 GB) NTFS \\?\Volume{508dd2cc-8f05-4d4b-8c2b-a314a6be81e2}\ () (Fixed) (Total:0.52 GB) (Free:0.07 GB) NTFS \\?\Volume{4dd25713-7527-4ff0-804b-573d5300eb55}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32 ==================== MBR & Tabla de particiones ==================== ========================================================== Disk: 0 (Size: 149.1 GB) (Disk ID: F2638184) Partition 1: (Not Active) - (Size=149 GB) - (Type=07 NTFS) ========================================================== Disk: 1 (Size: 111.8 GB) (Disk ID: 6582A299) Partition: GPT. ========================================================== Disk: 2 (Size: 465.8 GB) (Disk ID: 217A6D10) No partition Table on disk 2. ========================================================== Disk: 3 (Size: 931.5 GB) (Disk ID: E64B7ED8) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ========================================================== Disk: 4 (Size: 931.5 GB) (Disk ID: 16F2A91F) Partition: GPT. ==================== Final de Addition.txt =======================