Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 31-07-2021 Ejecutado por Usuario (administrador) sobre ASUSGAME (ASUSTeK COMPUTER INC. G771JW) (01-08-2021 18:45:21) Ejecutado desde C:\Users\Usuario\Desktop Perfiles cargados: Usuario & postgres Platform: Windows 10 Home Versión 20H2 19042.1110 (X64) Idioma: Español (España, internacional) Navegador predeterminado: FF Modo de Inicio: Normal ==================== Procesos (Lista blanca) ================= (Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.) () [Archivo no firmado] C:\Program Files (x86)\vMix\drivers\vMixService.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\egui.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe (ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe (Helios Software Solutions) [Archivo no firmado] E:\MI SOFTWARE\00.- PORTABLES\TextPad\TXTPAD32.EXE (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12> (Newtek Inc -> ) C:\Program Files\NewTek\NDI 4 Tools\Webcam Input\Webcam Input.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (ONTINET COM SL -> ) C:\ProgramData\ESET\ESET Security\app\appOnt.exe (PostgreSQL Global Development Group) [Archivo no firmado] C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe (PostgreSQL Global Development Group) [Archivo no firmado] C:\Program Files\PostgreSQL\9.5\bin\postgres.exe <7> (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (X-Rite Incorporated -> ) C:\Program Files (x86)\X-Rite\ColorMunki Photo\Tray\ColorMunki Photo Tray.exe (X-Rite Incorporated -> X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe ==================== Registro (Lista blanca) =================== (Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.) HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmdS.exe [165928 2021-07-01] (ESET, spol. s r.o. -> ESET) HKU\S-1-5-21-2958836378-3795246365-982339455-1001\...\Run: [appOnt] => C:\ProgramData\ESET\ESET Security\app\appOnt.exe [1738680 2019-07-11] (ONTINET COM SL -> ) HKLM\...\Windows x64\Print Processors\hpzpplhn: C:\Windows\System32\spool\prtprocs\x64\hpzpplhn.dll [109080 2018-12-06] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [55872 2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorMunki Gamma.lnk [2020-01-04] ShortcutTarget: ColorMunki Gamma.lnk -> C:\Program Files (x86)\X-Rite\ColorMunki Photo\Gamma\CalibrationLoader.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG) [Archivo no firmado] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ColorMunkiPhotoTray.exe.lnk [2020-01-04] ShortcutTarget: ColorMunkiPhotoTray.exe.lnk -> C:\Program Files (x86)\X-Rite\ColorMunki Photo\Tray\ColorMunki Photo Tray.exe (X-Rite Incorporated -> ) HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN ==================== Tareas programadas (Lista blanca) ============ (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) Task: {12470540-CFF3-48FD-B1FE-145D30C0F509} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.) Task: {366AEDB2-4253-46FA-ADC6-E090F840F979} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) Task: {6784E10F-CCF2-4A93-A232-C1CFD763F0DE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [681400 2021-07-23] (Mozilla Corporation -> Mozilla Foundation) Task: {74C4C8A6-BD5D-4E4E-972B-62680B75617B} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1404656 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {772B3165-14D8-42CA-8C91-2EECEDEF94B2} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {7BD753BE-164F-4A8A-A9CB-E921C1E66131} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2872400 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {94C65353-6A02-40B1-8704-2D83077FF58B} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2958836378-3795246365-982339455-1003 => C:\Users\Usuario\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Task: {96540359-71B1-4A0E-B641-7DCC6A7920B9} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8520448 2015-08-06] (Realtek Semiconductor Corp -> Realtek Semiconductor) Task: {A737B75E-3418-44BC-ACEC-90A351823790} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27165752 2021-02-16] (Piriform Software Ltd -> Piriform Software Ltd) Task: {B406E8A1-C22E-4605-961C-538BDB40BD52} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-02] (Google Inc -> Google Inc.) Task: {B6643570-57E7-4827-AFE5-C79FCA035844} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-02-16] (Piriform Software Ltd -> Piriform) Task: {B8B409BD-7111-4C17-947C-4D43E64F99B7} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {F2C2290B-FA1B-40EE-8FF6-43E9DFABBA09} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-02] (Google Inc -> Google Inc.) Task: {FD54AFF7-F909-48A0-A637-822AE3B8BDD2} - System32\Tasks\NDI_VirtualInput => C:\Program Files\NewTek\NDI 4 Tools\Webcam Input\Webcam Input.exe [27092720 2020-11-20] (Newtek Inc -> ) (Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.) Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (Lista blanca) ==================== (Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.) Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt Tcpip\..\Interfaces\{10ff3e4c-1932-4317-9cab-60858bc8e6aa}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{20481d74-4fe1-4f0b-b575-0269617bcbab}: [DhcpNameServer] 100.90.1.1 100.100.1.1 192.168.1.1 Tcpip\..\Interfaces\{b0995d55-396f-4056-9d2f-f12303e3d134}: [DhcpNameServer] 188.26.216.1 188.26.217.1 192.168.1.1 Edge: ======= DownloadDir: C:\Users\Usuario\Downloads Edge Extension: (Sin Nombre) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [no encontrado] Edge Extension: (Sin Nombre) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [no encontrado] Edge Extension: (Sin Nombre) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [no encontrado] Edge Extension: (Sin Nombre) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [no encontrado] Edge DefaultProfile: Default Edge Profile: C:\Users\Usuario\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-01] Edge StartupUrls: Default -> "hxxps://twitter.com/" Edge Extension: (YouTube) - C:\Users\Usuario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\adnlfjpnmidfimlkaohpidplnoimahfh [2020-11-24] Edge Extension: (Google) - C:\Users\Usuario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\eejlldcgggidmknlgbhdlfhgdbneaneo [2020-10-17] Edge Extension: (Corrector ortográfico y gramatical — LanguageTool) - C:\Users\Usuario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hfjadhjooeceemgojogkhlppanjkbobc [2021-07-26] Edge Extension: (Wikipedia) - C:\Users\Usuario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mabbogacohpoeacebobbecclmpanobce [2020-11-24] Edge Extension: (Home / Twitter) - C:\Users\Usuario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nkcokfhjhiheojmkkajojbdeifkibkfp [2020-11-24] FireFox: ======== FF DefaultProfile: n91e8mwt.default FF ProfilePath: C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default [2021-08-01] FF Session Restore: Mozilla\Firefox\Profiles\n91e8mwt.default -> está habilitado. FF Notifications: Mozilla\Firefox\Profiles\n91e8mwt.default -> hxxps://web.wallapop.com; hxxps://web.whatsapp.com; hxxps://www.youtube.com; hxxps://esradio.libertaddigital.com; hxxps://forospyware.com; hxxps://es.wallapop.com FF Extension: (Facebook Container) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\@contain-facebook.xpi [2021-07-31] FF Extension: (Firefox Multi-Account Containers) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\@testpilot-containers.xpi [2021-01-23] FF Extension: (Keepa - Amazon Price Tracker) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\amptra@keepa.com.xpi [2021-07-16] FF Extension: (Enhancer for YouTube™) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2021-07-01] FF Extension: (Spanish (Spain) Dictionary) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\es-es@dictionaries.addons.mozilla.org.xpi [2020-05-23] FF Extension: (Firebug) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\firebug@software.joehewitt.com.xpi [2018-06-02] [Heredado] FF Extension: (Hide Tabs) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\hide-tabs@afnankhan.xpi [2019-07-29] FF Extension: (Histogram Viewer) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\histogramviewer@davidfichtmueller.de.xpi [2018-06-02] FF Extension: (El Camelizer) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\izer@camelcamelcamel.com.xpi [2020-01-04] FF Extension: (Al traductor de Google) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2021-06-23] FF Extension: (I don't care about cookies) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2021-08-01] FF Extension: (Botón Guardar de Pinterest) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2021-07-22] FF Extension: (Personal Blocklist (not by Google)) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\personal_blocklist@wildsky.cc.xpi [2020-11-01] FF Extension: (Movavi ScreenShot) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\srextension@movavi.com.xpi [2020-05-13] FF Extension: (Tab Rotator) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\tabrotator@davidfichtmueller.de.xpi [2021-05-03] FF Extension: (Wappalyzer) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\wappalyzer@crunchlabz.com.xpi [2021-07-29] FF Extension: (Avast Online Security) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\wrc@avast.com.xpi [2021-02-18] FF Extension: (Social Video Downloader) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{00e68183-fc7d-4a91-b5cc-f7f8272386db}.xpi [2021-07-03] FF Extension: (Block Site) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{54e2eb33-18eb-46ad-a4e4-1329c29f6e17}.xpi [2021-07-13] FF Extension: (View Cookies) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{8F6A6FD9-0619-459f-B9D0-81DE065D4E21}.xpi [2018-06-02] [Heredado] FF Extension: (Video DownloadHelper) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-02] FF Extension: (Adblock Plus - bloqueador de anuncios gratis) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-07-28] FF Extension: (Read Aloud: Texto A Voz) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{ddc62400-f22d-4dd3-8b4a-05837de53c2e}.xpi [2021-07-28] FF Extension: (Greasemonkey) - C:\Users\Usuario\AppData\Roaming\Mozilla\Firefox\Profiles\n91e8mwt.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2021-01-28] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2018-09-06] [Heredado] [no firmado] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_445.dll [2020-10-26] (Adobe Inc. -> ) FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_445.dll [2020-10-26] (Adobe Inc. -> ) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll [2019-10-08] (Google Inc -> Google LLC) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.302\npGoogleUpdate3.dll [2019-10-08] (Google Inc -> Google LLC) FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems, Incorporated -> Adobe Systems Inc.) FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-08-01] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [dhancbnhabhandieicagelcddkdfgoif] - C:\Program Files (x86)\Allavsoft\Video Downloader Converter\extensions\3.23.6.7836\BVDChromeExt.crx [2021-06-26] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] ==================== Servicios (Lista blanca) =================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.) S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3147344 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2914896 2019-10-08] (Adobe Inc. -> Adobe Systems, Incorporated) S4 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-08-31] (Dropbox, Inc -> Dropbox, Inc.) S4 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2018-08-31] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44328 2021-07-17] (Dropbox, Inc -> Dropbox, Inc.) R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-07-01] (ESET, spol. s r.o. -> ESET) R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-07-01] (ESET, spol. s r.o. -> ESET) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7477704 2021-08-01] (Malwarebytes Inc -> Malwarebytes) R2 postgresql-x64-9.5; C:\Program Files\PostgreSQL\9.5\bin\pg_ctl.exe [94208 2016-08-09] (PostgreSQL Global Development Group) [Archivo no firmado] R2 vMixService; C:\Program Files (x86)\vMix\drivers\vMixService.exe [20992 2020-10-05] () [Archivo no firmado] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation) R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [83312 2015-09-18] (X-Rite Incorporated -> X-Rite Inc.) ===================== Controladores (Lista blanca) =================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) R3 ATP; C:\WINDOWS\System32\drivers\AsusTP.sys [101368 2015-12-14] (ASUSTeK Computer Inc. -> ASUS Corporation) S3 colormunki; C:\WINDOWS\System32\Drivers\colormunki_x64.sys [51600 2013-06-21] (USBIO Test -> Thesycon GmbH, Germany) S3 DaVinciKeyboards; C:\WINDOWS\System32\drivers\DaVinciKeyboards.sys [27368 2021-05-06] (WDKTestCert build,131958900460134002 -> Blackmagic Design) R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169368 2021-06-17] (ESET, spol. s r.o. -> ESET) R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123424 2021-06-17] (ESET, spol. s r.o. -> ESET) S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-03-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET) R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194728 2021-06-17] (ESET, spol. s r.o. -> ESET) R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107408 2021-06-17] (ESET, spol. s r.o. -> ESET) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [199128 2021-08-01] (Malwarebytes Inc -> Malwarebytes) R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS) S3 KORGUMDS; C:\WINDOWS\System32\Drivers\KORGUM64.SYS [43448 2020-11-26] (KORG INC. -> KORG INC.) R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-08-01] (Malwarebytes Inc -> Malwarebytes) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-08-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198888 2021-08-01] (Malwarebytes Inc -> Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [69016 2021-08-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-08-01] (Malwarebytes Inc -> Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [156880 2021-08-01] (Malwarebytes Inc -> Malwarebytes) R3 NewTek_AudioPortClass; C:\WINDOWS\System32\drivers\NewTek_AudioPortClass.sys [33336 2020-10-18] (Microsoft Windows Hardware Compatibility Publisher -> NewTek) R3 NewTek_WDM_KS; C:\WINDOWS\System32\drivers\NewTek_WDM_KS.sys [27832 2020-10-18] (Microsoft Windows Hardware Compatibility Publisher -> NewTek) S3 Ser2pl; C:\WINDOWS\system32\DRIVERS\ser2pl64.sys [282272 2021-03-10] (WDKTestCert charles-yeh,132058328970830801 -> Prolific Technology Inc.) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider) S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Lista blanca) =================== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) ==================== Un mes (creado) (Lista blanca) ========= (Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.) 2021-08-01 18:45 - 2021-08-01 18:45 - 000023445 _____ C:\Users\Usuario\Desktop\FRST.txt 2021-08-01 18:42 - 2021-08-01 18:42 - 002300416 _____ (Farbar) C:\Users\Usuario\Desktop\FRST64.exe 2021-08-01 18:12 - 2021-08-01 18:12 - 000000000 ____D C:\Users\Usuario\AppData\Local\WhatsApp 2021-08-01 17:15 - 2021-08-01 17:15 - 130971856 _____ (WhatsApp) C:\Users\Usuario\Downloads\WhatsAppSetup.exe 2021-08-01 17:02 - 2021-08-01 17:02 - 000088080 _____ C:\TDSSKiller.3.1.0.28_01.08.2021_17.02.07_log.txt 2021-08-01 17:01 - 2021-08-01 17:01 - 000069016 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2021-08-01 17:00 - 2021-08-01 17:00 - 000198888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2021-08-01 17:00 - 2021-08-01 17:00 - 000156880 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2021-08-01 16:04 - 2021-08-01 16:04 - 005054744 _____ (AO Kaspersky Lab) C:\Users\Usuario\Downloads\tdsskiller.exe 2021-08-01 15:39 - 2021-08-01 17:00 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2021-08-01 15:39 - 2021-08-01 15:51 - 000220752 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys 2021-08-01 15:39 - 2021-08-01 15:39 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2021-08-01 15:39 - 2021-08-01 15:39 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2021-08-01 15:39 - 2021-08-01 15:39 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2021-08-01 15:39 - 2021-08-01 15:39 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2021-08-01 15:39 - 2021-08-01 15:39 - 000000000 ____D C:\ProgramData\Malwarebytes 2021-08-01 15:38 - 2021-08-01 15:38 - 002120496 _____ (Malwarebytes) C:\Users\Usuario\Downloads\MBSetup (1).exe 2021-08-01 15:38 - 2021-08-01 15:38 - 000000000 ____D C:\Program Files\Malwarebytes 2021-08-01 13:41 - 2021-08-01 17:00 - 000302174 _____ C:\WINDOWS\ntbtlog.txt 2021-08-01 13:41 - 2021-08-01 13:41 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2021-07-31 16:47 - 2021-07-31 16:48 - 274106215 _____ C:\Users\Usuario\Downloads\LOS-INVITADOS_promo_OK_FINAL.mp4 2021-07-31 16:47 - 2021-07-31 16:47 - 000312212 _____ C:\Users\Usuario\Downloads\Logo Juventud.pdf 2021-07-31 11:28 - 2021-07-31 11:28 - 000000230 _____ C:\Users\Usuario\Desktop\InprocServer32 - Buscar con Google.URL 2021-07-31 11:00 - 2021-07-31 11:00 - 001070800 _____ C:\Users\Usuario\Downloads\ccleaner_browser_setup.exe 2021-07-29 18:04 - 2021-07-29 18:04 - 002181054 _____ C:\Users\Usuario\Downloads\Imprescindibles ARCO cumple 30 años RTVE Play.mp4 2021-07-29 11:14 - 2021-07-29 11:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2021-07-28 11:24 - 2021-07-28 12:02 - 000000074 _____ C:\Users\Usuario\Desktop\seur.txt 2021-07-27 11:23 - 2021-07-27 11:23 - 000000239 _____ C:\Users\Usuario\Desktop\WordPress Editor WordPress.org.URL 2021-07-23 08:33 - 2021-07-23 08:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2021-07-19 22:51 - 2020-01-30 23:33 - 000001441 _____ C:\Users\Usuario\Desktop\FSResizer.exe - Acceso directo.lnk 2021-07-17 16:58 - 2021-07-17 16:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2021-07-17 16:58 - 2021-07-17 16:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2021-07-17 16:58 - 2021-07-17 16:58 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2021-07-17 16:58 - 2021-07-17 16:58 - 000044328 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2021-07-16 09:01 - 2021-07-16 09:01 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll 2021-07-16 09:01 - 2021-07-16 09:01 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2021-07-16 09:01 - 2021-07-16 09:01 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2021-07-16 09:01 - 2021-07-16 09:01 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2021-07-16 09:01 - 2021-07-16 09:01 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2021-07-16 09:01 - 2021-07-16 09:01 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl 2021-07-16 09:01 - 2021-07-16 09:01 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl 2021-07-16 09:01 - 2021-07-16 09:01 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys 2021-07-16 09:01 - 2021-07-16 09:01 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2021-07-16 09:01 - 2021-07-16 09:01 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2021-07-16 09:01 - 2021-07-16 09:01 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe 2021-07-16 09:01 - 2021-07-16 09:01 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2021-07-16 09:01 - 2021-07-16 09:01 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb 2021-07-16 09:01 - 2021-07-16 09:01 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb 2021-07-16 09:01 - 2021-07-16 09:01 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb 2021-07-16 09:01 - 2021-07-16 09:01 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb 2021-07-14 18:59 - 2021-07-14 19:52 - 000000000 ____D C:\borrar 2021-07-12 15:41 - 2021-07-12 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Link to Nikon 2021-07-09 11:31 - 2021-07-09 11:36 - 000000000 ____D C:\Users\Usuario\Desktop\reaper viendo 2021-07-08 13:56 - 2021-07-08 13:56 - 000105865 _____ C:\Users\Usuario\Downloads\2021-02-05 Fra. FV21-168 22544149D (FACTNBS de B46138616).pdf 2021-07-08 13:56 - 2021-07-08 13:56 - 000105865 _____ C:\Users\Usuario\Downloads\2020-01-05 Fra. FV20-38 22544149D (FACTNBS de B46138616).pdf 2021-07-08 13:56 - 2021-07-08 13:56 - 000105531 _____ C:\Users\Usuario\Downloads\2021-03-05 Fra. FV21-233 22544149D (FACTNBS de B46138616).pdf 2021-07-08 13:55 - 2021-07-08 13:56 - 000105532 _____ C:\Users\Usuario\Downloads\2021-01-05 Fra. FV21-96 22544149D (FACTNBS de B46138616).pdf 2021-07-08 13:53 - 2021-07-08 13:53 - 000101618 _____ C:\Users\Usuario\Downloads\2021-05-05 Fra. FV21-383 22544149D (FACTNBS de B46138616).pdf 2021-07-08 13:53 - 2021-07-08 13:53 - 000101231 _____ C:\Users\Usuario\Downloads\2021-07-05 Fra. FV21-521 22544149D (FACTNBS de B46138616).pdf 2021-07-08 10:23 - 2021-07-08 10:23 - 000000000 ____D C:\ProgramData\SystemAcCrux 2021-07-08 10:23 - 2021-07-08 10:23 - 000000000 ____D C:\Program Files (x86)\EaseUS 2021-07-07 16:41 - 2021-07-07 16:41 - 000118383 _____ C:\Users\Usuario\Downloads\FAF2.zip 2021-07-07 16:10 - 2021-07-07 16:10 - 000000000 ____D C:\WINDOWS\Panther 2021-07-07 16:00 - 2021-07-07 16:00 - 003824405 _____ C:\Users\Usuario\Downloads\QTTabBar_1043.zip 2021-07-07 01:06 - 2021-07-07 01:06 - 002093656 _____ (Malwarebytes) C:\Users\Usuario\Downloads\MBSetup.exe 2021-07-06 13:21 - 2021-07-06 13:21 - 000003584 _____ C:\Users\Usuario\PaceKeyChain 2021-07-06 13:21 - 2021-07-06 13:21 - 000000000 ____D C:\Users\Usuario\Documents\AIR Music Technology 2021-07-06 13:11 - 2021-07-06 13:11 - 000000000 ____D C:\Users\Usuario\AppData\Local\PACE 2021-07-06 13:03 - 2021-07-06 13:03 - 000000000 ____D C:\ProgramData\PACE 2021-07-06 13:02 - 2021-07-06 13:02 - 000000000 ____D C:\ProgramData\Apple 2021-07-06 13:02 - 2021-07-06 13:02 - 000000000 ____D C:\Program Files (x86)\AIR Music Technology 2021-07-06 12:35 - 2021-06-28 21:33 - 021016471 _____ C:\Users\Usuario\Downloads\ione-belarra-reivindica-el-amor-como-motor-de-la-politica.mp4 2021-07-05 17:07 - 2021-07-05 17:07 - 000001130 _____ C:\Users\Usuario\Desktop\000 DAVINCI RESOLVE HOWTOS - Acceso directo.lnk 2021-07-02 09:16 - 2021-07-02 09:16 - 000001841 _____ C:\Users\Usuario\Desktop\CrystalDiskMark 6.lnk 2021-07-02 09:16 - 2021-07-02 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark6 2021-07-02 09:16 - 2021-07-02 09:16 - 000000000 ____D C:\Program Files\CrystalDiskMark6 ==================== Un mes (modificado) ================== (Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.) 2021-08-01 18:45 - 2020-09-07 09:21 - 000000000 ____D C:\FRST 2021-08-01 18:31 - 2020-01-24 18:40 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\WhatsApp 2021-08-01 18:25 - 2020-09-08 23:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-08-01 18:25 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-08-01 18:13 - 2020-01-24 18:40 - 000000000 ____D C:\Users\Usuario\AppData\Local\SquirrelTemp 2021-08-01 18:12 - 2020-01-24 18:40 - 000002247 _____ C:\Users\Usuario\Desktop\WhatsApp.lnk 2021-08-01 18:12 - 2020-01-24 18:40 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2021-08-01 17:15 - 2019-07-31 10:01 - 000000000 ____D C:\Users\Usuario\AppData\Local\CrashDumps 2021-08-01 17:05 - 2020-09-08 23:42 - 001772930 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-08-01 17:05 - 2019-12-07 16:55 - 000789640 _____ C:\WINDOWS\system32\perfh00A.dat 2021-08-01 17:05 - 2019-12-07 16:55 - 000155992 _____ C:\WINDOWS\system32\perfc00A.dat 2021-08-01 17:05 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2021-08-01 17:02 - 2019-08-01 09:34 - 000000000 ____D C:\Program Files\CCleaner 2021-08-01 17:02 - 2019-03-11 21:12 - 000000000 ____D C:\ProgramData\Mozilla 2021-08-01 17:01 - 2020-09-06 20:02 - 000000000 ____D C:\Users\Usuario\AppData\LocalLow\IGDump 2021-08-01 17:01 - 2018-04-28 11:18 - 000000000 ____D C:\Users\Usuario\AppData\LocalLow\Mozilla 2021-08-01 17:00 - 2020-09-08 23:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-08-01 17:00 - 2020-08-25 16:16 - 000008192 ___SH C:\DumpStack.log.tmp 2021-08-01 17:00 - 2020-03-27 19:10 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Zoom 2021-08-01 17:00 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2021-08-01 17:00 - 2018-04-26 18:15 - 000000000 ____D C:\ProgramData\NVIDIA 2021-08-01 17:00 - 2018-04-26 17:13 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat 2021-08-01 17:00 - 2018-04-26 17:13 - 000000000 __SHD C:\Users\Usuario\IntelGraphicsProfiles 2021-08-01 15:39 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP 2021-08-01 14:14 - 2018-07-11 17:15 - 000000000 ____D C:\Users\Usuario\AppData\Local\Sony 2021-08-01 13:13 - 2020-09-08 23:33 - 000502688 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2021-08-01 12:53 - 2019-03-15 10:34 - 000000000 ____D C:\Program Files\Common Files\Adobe 2021-08-01 12:53 - 2019-03-15 10:31 - 000000000 ____D C:\Program Files\Adobe 2021-08-01 12:11 - 2018-09-11 10:29 - 000000000 ____D C:\Users\Usuario\Desktop\CONFIGURACION 2021-08-01 11:29 - 2020-08-23 18:04 - 000000000 ____D C:\Users\Usuario\Desktop\UTIL sistema 2021-08-01 00:41 - 2020-01-29 19:10 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Telegram Desktop 2021-08-01 00:19 - 2020-09-07 00:38 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-08-01 00:19 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-08-01 00:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-07-31 13:39 - 2021-03-11 14:51 - 000000000 ____D C:\Users\Usuario\AppData\Local\CaptureOne 2021-07-31 11:47 - 2021-01-22 10:31 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools 2021-07-31 11:44 - 2018-04-26 17:40 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information 2021-07-31 11:38 - 2018-04-26 17:13 - 000000000 ____D C:\Program Files (x86)\Intel 2021-07-31 11:27 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2021-07-31 10:12 - 2020-05-13 00:47 - 000000000 ____D C:\Users\Usuario\Downloads\Screen Recordings 2021-07-30 19:56 - 2018-06-03 12:23 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\vlc 2021-07-30 19:07 - 2019-10-03 12:44 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2021-07-30 08:48 - 2020-09-08 23:41 - 000003652 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-07-30 08:48 - 2020-09-08 23:41 - 000003528 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-07-29 22:50 - 2020-01-29 11:21 - 000001456 _____ C:\Users\Usuario\AppData\Local\Adobe Guardar para Web 13.0 Prefs 2021-07-29 21:54 - 2021-06-26 01:32 - 000000000 ____D C:\Users\Usuario\AppData\Roaming\Allavsoft 2021-07-29 18:06 - 2021-06-30 15:52 - 000000000 ____D C:\Users\Usuario\Downloads\Download 2021-07-29 11:14 - 2018-08-31 13:30 - 000000000 ____D C:\Program Files (x86)\Dropbox 2021-07-28 11:09 - 2020-10-21 10:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KORG 2021-07-28 11:09 - 2020-10-21 10:53 - 000000000 ____D C:\Program Files (x86)\KORG 2021-07-28 10:55 - 2019-10-25 18:06 - 000000000 ____D C:\Program Files\Mozilla Firefox 2021-07-28 10:55 - 2018-04-28 11:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2021-07-27 16:41 - 2019-10-06 19:02 - 000000000 ____D C:\tmp 2021-07-24 00:56 - 2020-09-08 23:41 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2021-07-23 08:33 - 2018-04-28 11:18 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2021-07-21 23:58 - 2020-03-07 02:21 - 000000000 ____D C:\Temp 2021-07-18 00:23 - 2020-01-29 19:22 - 000000000 ___RD C:\Users\Usuario\Downloads\Telegram Desktop 2021-07-16 10:06 - 2020-09-08 23:36 - 000000000 ____D C:\Users\postgres 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2021-07-16 10:06 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System 2021-07-16 09:39 - 2019-04-04 12:40 - 000000000 ____D C:\Users\Usuario\AppData\Local\cache 2021-07-16 08:54 - 2018-04-26 17:32 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-07-16 08:52 - 2018-04-26 17:32 - 133422552 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2021-07-13 12:03 - 2018-08-29 19:00 - 000000020 ____H C:\ProgramData\PKP_DLet.DAT 2021-07-12 16:10 - 2019-03-11 18:52 - 000000000 ____D C:\Users\Usuario\Desktop\FOTO 2021-07-08 21:40 - 2020-01-28 13:44 - 000007244 _____ C:\Users\Usuario\AppData\Roaming\wklnhst.dat 2021-07-08 19:04 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2021-07-08 16:13 - 2019-12-07 16:56 - 000000000 ____D C:\WINDOWS\system32\FxsTmp 2021-07-08 00:13 - 2021-01-19 15:27 - 000000000 ____D C:\Users\Usuario\Downloads\tmp 2021-07-07 23:51 - 2018-09-02 21:26 - 000000000 ____D C:\Users\Usuario\AppData\Local\D3DSCache 2021-07-07 17:07 - 2021-04-01 22:56 - 000001149 _____ C:\Users\Usuario\Desktop\Docume.txt 2021-07-06 13:21 - 2020-09-08 23:36 - 000000000 ____D C:\Users\Usuario 2021-07-06 13:02 - 2018-04-26 18:14 - 000000000 ____D C:\ProgramData\Package Cache 2021-07-04 09:27 - 2021-05-06 15:47 - 000000736 _____ C:\Users\Usuario\Desktop\FerminPacheco17.txt 2021-07-03 18:28 - 2020-09-10 02:26 - 000000000 ____D C:\Users\Usuario\Documents\MPC Beats ==================== Archivos en la raíz de algunos directorios ======== 2018-05-20 18:34 - 2018-05-20 18:34 - 000000268 ___RH () C:\Users\Usuario\AppData\Roaming\Analog Sync 2018-05-20 18:34 - 2018-05-20 19:28 - 000000268 ___RH () C:\Users\Usuario\AppData\Roaming\Animals 2020-08-05 11:27 - 2021-03-25 20:07 - 000000437 _____ () C:\Users\Usuario\AppData\Roaming\DNGProfileManager 2019-08-01 19:32 - 2021-06-22 02:24 - 000084207 _____ () C:\Users\Usuario\AppData\Roaming\last.vmix 2018-08-29 19:00 - 2018-08-29 19:00 - 000000268 ___RH () C:\Users\Usuario\AppData\Roaming\Speech Enhancer 2018-08-29 19:00 - 2018-08-29 19:00 - 000000268 ___RH () C:\Users\Usuario\AppData\Roaming\Sports 2018-08-29 19:00 - 2018-08-29 19:00 - 000000268 ___RH () C:\Users\Usuario\AppData\Roaming\Standard 2020-01-28 13:44 - 2021-07-08 21:40 - 000007244 _____ () C:\Users\Usuario\AppData\Roaming\wklnhst.dat 2020-01-29 11:21 - 2021-07-29 22:50 - 000001456 _____ () C:\Users\Usuario\AppData\Local\Adobe Guardar para Web 13.0 Prefs 2020-05-07 11:39 - 2020-06-03 17:58 - 000535040 _____ (Dirección General de la Policía) C:\Users\Usuario\AppData\Local\DNIeService.exe 2019-03-15 11:00 - 2019-03-15 11:00 - 000000000 _____ () C:\Users\Usuario\AppData\Local\oobelibMkey.log 2020-09-06 19:52 - 2020-09-06 19:53 - 000007605 _____ () C:\Users\Usuario\AppData\Local\resmon.resmoncfg ==================== SigCheck ============================ (No existe una corrección automática para los archivos que no pasan la verificación.) ==================== Final de FRST.txt ========================