Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 07-06-2025
Ejecutado por Rafitecus (08-06-2025 06:55:33) Run:1
Ejecutado desde C:\Users\Rafitecus\Desktop
Perfiles cargados: Rafitecus
Modo de Inicio: Normal
==============================================

fixlist contenido:
*****************
Start::
SystemRestore: On
CreateRestorePoint:
CloseProcesses:

GroupPolicy: Restricción ? <==== ATENCIÓN
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
HKLM\SOFTWARE\Policies\Microsoft\MRT: Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center: Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restricción <==== ATENCIÓN
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\...\Run: [utweb] => "C:\Users\Rafitecus\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED (Ningún archivo)
HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\...\StartupApproved\Run: => "utweb"
Policies: C:\ProgramData\NTUSER.pol: Restricción <==== ATENCIÓN
R3 cpuz158; C:\WINDOWS\temp\cpuz158\cpuz158_x64.sys [44592 2025-05-16] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ATENCIÓN
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Ningún archivo)
Task: {C7F1F60C-3EEE-4F1D-8CC6-D2D53CFA6953} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery ReadyToReboot (Ningún archivo)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Ningún archivo)
Task: {E64DDC36-C3B8-4078-B641-C7A0898A8A78} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC ReadyToReboot (Ningún archivo)
Task: {E99B743D-A238-4C92-8A1B-1CC91E8C6147} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => %systemroot%\system32\MusNotification.exe  LogonUpdateResults (Ningún archivo)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Ningún archivo)
Task: {F719AF24-0241-4D34-8958-B3D7D3B374E2} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe  (Ningún archivo)
E:\chamoyadas.pdf.lnk

Task: {0D82E029-EC50-4530-85D5-90CE8918011C} - System32\Tasks\ASUS\CNB6ARD => C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe [58856 2024-04-01] (Microsoft Corporation -> Microsoft Corporation) -> C:\Program Files (x86)\Common Files\PhoneProperty\StqygonRole\/u "C:\Program Files (x86)\Common Files\PhoneProperty\StqygonRole\SxlsumentErelter.dll" <==== ATENCIÓN
Folder: C:\Program Files (x86)\Common Files\PhoneProperty
C:\Program Files (x86)\Common Files\PhoneProperty

Removeproxy:
Hosts:

FirewallRules: [{042CFBA8-FF82-4A78-A620-69574A73F3B4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{1279C1AC-47FF-4ADE-92DB-678C671C68D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe => Ningún archivo
FirewallRules: [{1483E25F-116C-42CC-B3E7-06FF7BCA7B76}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{14C7AAB0-987C-4112-A8B3-C56A8116B229}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{43EAF6A4-B05B-4536-B00A-C618BE3D7AD0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe => Ningún archivo
FirewallRules: [{6BFD967A-49EA-412D-AE9D-258329308EC6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{6EBA0412-4460-4DB0-B4A7-49901978FD05}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{73D66601-4228-477E-A8EE-AF807306FBFF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{7880C371-E74F-45B7-968A-3586E154225E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{815823DE-8568-4394-BDC7-09B1F4DEE0A0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{ADAEC3DD-18A0-4C34-9781-092719377E2A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [{B64CCF68-A869-4D76-A4E0-B4E9712AD762}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe => Ningún archivo
FirewallRules: [{BAAC393B-387F-44E4-B3DD-558B3F8C1519}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe => Ningún archivo
FirewallRules: [{CB9D5A3F-B791-421D-81A2-9E36DCFAAEA7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.220.1216.0_x64__zpdnekdrzrea0\Spotify.exe => Ningún archivo
FirewallRules: [TCP Query User{1642CA51-B71E-4485-A3E5-C158D3DA7B36}C:\users\rafitecus\downloads\mad.games.tycoon.2.v2023.09.01a\mad games tycoon 2.exe] => (Block) C:\users\rafitecus\downloads\mad.games.tycoon.2.v2023.09.01a\mad games tycoon 2.exe => Ningún archivo
FirewallRules: [TCP Query User{19ACEDF5-3B89-4CF5-BB63-5E14DAF995B0}C:\users\rafitecus\downloads\nordhold build 17853750\nordhold\nordhold.exe] => (Block) C:\users\rafitecus\downloads\nordhold build 17853750\nordhold\nordhold.exe => Ningún archivo
FirewallRules: [TCP Query User{1C239DB7-D571-4BA8-AB58-B583D06594F9}C:\users\rafitecus\desktop\la carpeta de rafitecus\dave the driver\sipho.v1.0\sipho\sipho.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\dave the driver\sipho.v1.0\sipho\sipho.exe => Ningún archivo
FirewallRules: [TCP Query User{28387AE0-32E0-4CE5-B843-5E133D8754C6}C:\users\rafitecus\downloads\peglin.v1.0\peglin.v1.0\peglin.exe] => (Block) C:\users\rafitecus\downloads\peglin.v1.0\peglin.v1.0\peglin.exe => Ningún archivo
FirewallRules: [TCP Query User{2D412A94-ECCF-4E90-98B9-C4F6A7C1399D}C:\users\rafitecus\downloads\rise.to.ruins.update.2d\rise.to.ruins.update.2d\jre\windows64\bin\javaw.exe] => (Block) C:\users\rafitecus\downloads\rise.to.ruins.update.2d\rise.to.ruins.update.2d\jre\windows64\bin\javaw.exe => Ningún archivo
FirewallRules: [TCP Query User{302187DC-088A-4625-A553-D8C11B9949F3}C:\games\solium infernum\soliuminfernum.exe] => (Allow) C:\games\solium infernum\soliuminfernum.exe => Ningún archivo
FirewallRules: [TCP Query User{54460F45-0264-4077-96DA-8D72617B7CFA}C:\users\rafitecus\downloads\stoneshard.build.16819993\stoneshard.exe] => (Block) C:\users\rafitecus\downloads\stoneshard.build.16819993\stoneshard.exe => Ningún archivo
FirewallRules: [TCP Query User{64FA6371-0C64-4F76-A65D-7EF2D86917C0}C:\users\rafitecus\desktop\la carpeta de rafitecus\balatro\balatro\balatro\balatro.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\balatro\balatro\balatro\balatro.exe => Ningún archivo
FirewallRules: [TCP Query User{7222BC2E-E64A-448E-9241-4B818FE856FD}C:\users\rafitecus\downloads\ultimate.chicken.horse.v1.8.22\ultimatechickenhorse.exe] => (Block) C:\users\rafitecus\downloads\ultimate.chicken.horse.v1.8.22\ultimatechickenhorse.exe => Ningún archivo
FirewallRules: [TCP Query User{72E7A00E-B5FB-45FD-AF25-B8A9A22FEB36}C:\program files (x86)\steam\steamapps\common\xcom 2\xcom2-warofthechosen\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\xcom2-warofthechosen\binaries\win64\xcom2.exe => Ningún archivo
FirewallRules: [TCP Query User{745E9C20-B112-48BD-BB08-528936FDBDD6}C:\users\rafitecus\desktop\la carpeta de rafitecus\to the core\to.the.core\game\tothecore.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\to the core\to.the.core\game\tothecore.exe => Ningún archivo
FirewallRules: [TCP Query User{81C6165E-C2E8-42FB-835F-E84E4E7F9690}C:\users\rafitecus\downloads\songs.of.conquest.v1.3.1\songs.of.conquest.v1.3.1\songsofconquest.exe] => (Block) C:\users\rafitecus\downloads\songs.of.conquest.v1.3.1\songs.of.conquest.v1.3.1\songsofconquest.exe => Ningún archivo
FirewallRules: [TCP Query User{879865FF-21FA-47EA-8862-1B07EEFDF87A}C:\users\rafitecus\downloads\dwarves.glory.death.and.loot.v1.13.1\dwarves.glory.death.and.loot.v1.13.1\dwarves.exe] => (Block) C:\users\rafitecus\downloads\dwarves.glory.death.and.loot.v1.13.1\dwarves.glory.death.and.loot.v1.13.1\dwarves.exe => Ningún archivo
FirewallRules: [TCP Query User{991911D7-EFBE-4920-A2D6-B015472EB7B1}C:\users\rafitecus\desktop\la carpeta de rafitecus\dotage\dotage.v1.1.10h\dotage.v1.1.10h\dotage.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\dotage\dotage.v1.1.10h\dotage.v1.1.10h\dotage.exe => Ningún archivo
FirewallRules: [TCP Query User{9B8FD1EE-3D66-4949-BB54-ADE28D275319}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe => Ningún archivo
FirewallRules: [TCP Query User{9D78379E-4BDA-451C-890D-E402EC08ADCC}C:\users\rafitecus\downloads\rune.coliseum.v2.9.0224.1508f7\game\runecollseum.exe] => (Block) C:\users\rafitecus\downloads\rune.coliseum.v2.9.0224.1508f7\game\runecollseum.exe => Ningún archivo
FirewallRules: [TCP Query User{B2FF8D63-6928-43AA-9EE7-976891B1FE89}C:\users\rafitecus\downloads\stellar.initiative.v1.0.4\stellar\stellar initiative.exe] => (Block) C:\users\rafitecus\downloads\stellar.initiative.v1.0.4\stellar\stellar initiative.exe => Ningún archivo
FirewallRules: [TCP Query User{C031812A-6A03-4D96-AF6B-6F2F31DCDD76}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe => Ningún archivo
FirewallRules: [TCP Query User{C85A8514-A80F-4EC0-BB4E-44F2F5C35035}C:\users\rafitecus\desktop\la carpeta de rafitecus\juegos\dredge\dredge\dredge.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\juegos\dredge\dredge\dredge.exe => Ningún archivo
FirewallRules: [TCP Query User{C9F0DA5D-50F8-469A-BCF8-64552DE1EC9C}C:\users\rafitecus\desktop\la carpeta de rafitecus\car manufacture\car.manufacture.early.access\carmanufacture.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\car manufacture\car.manufacture.early.access\carmanufacture.exe => Ningún archivo
FirewallRules: [TCP Query User{CE2CD4A0-A4A5-44EA-98C6-6489D7F5DBBF}C:\users\rafitecus\downloads\9.kings.v0.7.17\game\9kings.exe] => (Block) C:\users\rafitecus\downloads\9.kings.v0.7.17\game\9kings.exe => Ningún archivo
FirewallRules: [TCP Query User{D1E636FA-861C-467B-896F-D4BFC2FFDAA7}C:\users\rafitecus\downloads\lumberjacked.v1.04\lumberjacked!\lumberjacked.exe] => (Block) C:\users\rafitecus\downloads\lumberjacked.v1.04\lumberjacked!\lumberjacked.exe => Ningún archivo
FirewallRules: [TCP Query User{D2ADA0B4-1E34-414F-814F-9AD69F6F8682}C:\users\rafitecus\downloads\ravenswatch.v1.00.02.00\ravenswatch.v1.00.02.00\ravenswatch.exe] => (Block) C:\users\rafitecus\downloads\ravenswatch.v1.00.02.00\ravenswatch.v1.00.02.00\ravenswatch.exe => Ningún archivo
FirewallRules: [TCP Query User{D4C8C20F-9DDE-432C-A513-E640DB6FB190}C:\games\baldurs gate 3\bin\bg3.exe] => (Block) C:\games\baldurs gate 3\bin\bg3.exe => Ningún archivo
FirewallRules: [TCP Query User{DECBF465-D92C-4465-B454-E747948F0DE8}C:\users\rafitecus\downloads\sunnerv08.02.19-pivigames.blog\speedrunners.exe] => (Block) C:\users\rafitecus\downloads\sunnerv08.02.19-pivigames.blog\speedrunners.exe => Ningún archivo
FirewallRules: [TCP Query User{E6EC6D9C-3636-4450-9998-FDF050B968E0}C:\users\rafitecus\downloads\microcivilization.v0.9.6a\microcivilization.v0.9.6a\civ.exe] => (Block) C:\users\rafitecus\downloads\microcivilization.v0.9.6a\microcivilization.v0.9.6a\civ.exe => Ningún archivo
FirewallRules: [TCP Query User{F3BAA3FE-6857-4E8B-91FC-C4CA23055DF8}C:\program files (x86)\steam\steamapps\common\terratech worlds demo\tt2\binaries\win64\tt2eos-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terratech worlds demo\tt2\binaries\win64\tt2eos-win64-shipping.exe => Ningún archivo
FirewallRules: [TCP Query User{F8AF89D1-124D-40EA-9A42-1220CF0001FB}C:\users\rafitecus\downloads\news.tower.v0.18.601.r\news.tower\news tower.exe] => (Block) C:\users\rafitecus\downloads\news.tower.v0.18.601.r\news.tower\news tower.exe => Ningún archivo
FirewallRules: [TCP Query User{FD068230-54B6-4422-8044-3694A8DC9F8A}C:\users\rafitecus\downloads\dealers.life.legend.v0.507\game\dealerslifelegend.exe] => (Block) C:\users\rafitecus\downloads\dealers.life.legend.v0.507\game\dealerslifelegend.exe => Ningún archivo
FirewallRules: [UDP Query User{0A5330AB-6C41-4E3A-859D-F8AB93CE52E9}C:\users\rafitecus\downloads\stellar.initiative.v1.0.4\stellar\stellar initiative.exe] => (Block) C:\users\rafitecus\downloads\stellar.initiative.v1.0.4\stellar\stellar initiative.exe => Ningún archivo
FirewallRules: [UDP Query User{129F5F1F-F3C0-4360-98CA-C909A90EC859}C:\users\rafitecus\downloads\stoneshard.build.16819993\stoneshard.exe] => (Block) C:\users\rafitecus\downloads\stoneshard.build.16819993\stoneshard.exe => Ningún archivo
FirewallRules: [UDP Query User{1303DA5F-86AC-4790-A1F4-98C743A3C7C7}C:\users\rafitecus\desktop\la carpeta de rafitecus\dotage\dotage.v1.1.10h\dotage.v1.1.10h\dotage.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\dotage\dotage.v1.1.10h\dotage.v1.1.10h\dotage.exe => Ningún archivo
FirewallRules: [UDP Query User{3210E988-ECD9-4812-BDFB-C45B000BFB23}C:\users\rafitecus\downloads\microcivilization.v0.9.6a\microcivilization.v0.9.6a\civ.exe] => (Block) C:\users\rafitecus\downloads\microcivilization.v0.9.6a\microcivilization.v0.9.6a\civ.exe => Ningún archivo
FirewallRules: [UDP Query User{34603E84-E222-4835-8055-E7C35D8BF692}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe => Ningún archivo
FirewallRules: [UDP Query User{359A5B44-1742-4845-B96B-000604014A4B}C:\users\rafitecus\downloads\news.tower.v0.18.601.r\news.tower\news tower.exe] => (Block) C:\users\rafitecus\downloads\news.tower.v0.18.601.r\news.tower\news tower.exe => Ningún archivo
FirewallRules: [UDP Query User{43607DA5-1DBA-47C3-B478-81D3381BC485}C:\users\rafitecus\desktop\la carpeta de rafitecus\juegos\dredge\dredge\dredge.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\juegos\dredge\dredge\dredge.exe => Ningún archivo
FirewallRules: [UDP Query User{458EF5B2-529C-4F5A-AB72-4D620D100CE8}C:\games\baldurs gate 3\bin\bg3.exe] => (Block) C:\games\baldurs gate 3\bin\bg3.exe => Ningún archivo
FirewallRules: [UDP Query User{47787F74-BBA8-443E-9E2F-449F63F433C2}C:\users\rafitecus\downloads\ravenswatch.v1.00.02.00\ravenswatch.v1.00.02.00\ravenswatch.exe] => (Block) C:\users\rafitecus\downloads\ravenswatch.v1.00.02.00\ravenswatch.v1.00.02.00\ravenswatch.exe => Ningún archivo
FirewallRules: [UDP Query User{47A7FD80-184A-48F6-A5D9-7E9BF890B728}C:\users\rafitecus\downloads\sunnerv08.02.19-pivigames.blog\speedrunners.exe] => (Block) C:\users\rafitecus\downloads\sunnerv08.02.19-pivigames.blog\speedrunners.exe => Ningún archivo
FirewallRules: [UDP Query User{49C5B45D-E58B-4CB5-B235-996FF8B2D766}C:\users\rafitecus\downloads\ultimate.chicken.horse.v1.8.22\ultimatechickenhorse.exe] => (Block) C:\users\rafitecus\downloads\ultimate.chicken.horse.v1.8.22\ultimatechickenhorse.exe => Ningún archivo
FirewallRules: [UDP Query User{4B5A24C8-21E0-4E61-B867-1E5ABB07E535}C:\users\rafitecus\downloads\nordhold build 17853750\nordhold\nordhold.exe] => (Block) C:\users\rafitecus\downloads\nordhold build 17853750\nordhold\nordhold.exe => Ningún archivo
FirewallRules: [UDP Query User{59BD8DA6-83AA-4B0F-873C-AE480ECB2476}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe => Ningún archivo
FirewallRules: [UDP Query User{6A8D9993-29F5-4D18-A0A6-C9D2519ECFE0}C:\users\rafitecus\downloads\songs.of.conquest.v1.3.1\songs.of.conquest.v1.3.1\songsofconquest.exe] => (Block) C:\users\rafitecus\downloads\songs.of.conquest.v1.3.1\songs.of.conquest.v1.3.1\songsofconquest.exe => Ningún archivo
FirewallRules: [UDP Query User{6D18A74C-5635-40BB-9273-AAB10314C7A4}C:\users\rafitecus\desktop\la carpeta de rafitecus\car manufacture\car.manufacture.early.access\carmanufacture.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\car manufacture\car.manufacture.early.access\carmanufacture.exe => Ningún archivo
FirewallRules: [UDP Query User{820AE384-CBE8-465B-9325-EF2AF33859A5}C:\program files (x86)\steam\steamapps\common\xcom 2\xcom2-warofthechosen\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\xcom2-warofthechosen\binaries\win64\xcom2.exe => Ningún archivo
FirewallRules: [UDP Query User{98BDD11C-4B23-44EC-A058-8361FDCFCEE9}C:\users\rafitecus\downloads\rise.to.ruins.update.2d\rise.to.ruins.update.2d\jre\windows64\bin\javaw.exe] => (Block) C:\users\rafitecus\downloads\rise.to.ruins.update.2d\rise.to.ruins.update.2d\jre\windows64\bin\javaw.exe => Ningún archivo
FirewallRules: [UDP Query User{A2756227-2367-4876-B5C0-DA57745DCB56}C:\users\rafitecus\downloads\mad.games.tycoon.2.v2023.09.01a\mad games tycoon 2.exe] => (Block) C:\users\rafitecus\downloads\mad.games.tycoon.2.v2023.09.01a\mad games tycoon 2.exe => Ningún archivo
FirewallRules: [UDP Query User{A8092B4E-9604-4468-8CA7-C32B6B626BBD}C:\users\rafitecus\desktop\la carpeta de rafitecus\balatro\balatro\balatro\balatro.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\balatro\balatro\balatro\balatro.exe => Ningún archivo
FirewallRules: [UDP Query User{BB099339-7089-42F4-8992-13FB742CA90F}C:\program files (x86)\steam\steamapps\common\terratech worlds demo\tt2\binaries\win64\tt2eos-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terratech worlds demo\tt2\binaries\win64\tt2eos-win64-shipping.exe => Ningún archivo
FirewallRules: [UDP Query User{BD883688-8B7E-4BEA-8843-67DDA2C299E9}C:\users\rafitecus\downloads\rune.coliseum.v2.9.0224.1508f7\game\runecollseum.exe] => (Block) C:\users\rafitecus\downloads\rune.coliseum.v2.9.0224.1508f7\game\runecollseum.exe => Ningún archivo
FirewallRules: [UDP Query User{C4CA55CD-C868-4BD8-A66C-5F52AC26EFDE}C:\users\rafitecus\downloads\dealers.life.legend.v0.507\game\dealerslifelegend.exe] => (Block) C:\users\rafitecus\downloads\dealers.life.legend.v0.507\game\dealerslifelegend.exe => Ningún archivo
FirewallRules: [UDP Query User{C7D64AB8-B84F-4313-93AA-148E6C1F9198}C:\users\rafitecus\desktop\la carpeta de rafitecus\to the core\to.the.core\game\tothecore.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\to the core\to.the.core\game\tothecore.exe => Ningún archivo
FirewallRules: [UDP Query User{CB2B3DFD-B567-4479-A78F-A5251362A6A7}C:\games\solium infernum\soliuminfernum.exe] => (Allow) C:\games\solium infernum\soliuminfernum.exe => Ningún archivo
FirewallRules: [UDP Query User{D7AD534E-ABD8-4A91-A44D-A365AD25504A}C:\users\rafitecus\downloads\9.kings.v0.7.17\game\9kings.exe] => (Block) C:\users\rafitecus\downloads\9.kings.v0.7.17\game\9kings.exe => Ningún archivo
FirewallRules: [UDP Query User{DD5BE3BC-3F35-46F2-BCC8-C1A83AFDD6BB}C:\users\rafitecus\downloads\peglin.v1.0\peglin.v1.0\peglin.exe] => (Block) C:\users\rafitecus\downloads\peglin.v1.0\peglin.v1.0\peglin.exe => Ningún archivo
FirewallRules: [UDP Query User{DDBE7ED2-C213-4C3B-9B3C-459A04079DC1}C:\users\rafitecus\desktop\la carpeta de rafitecus\dave the driver\sipho.v1.0\sipho\sipho.exe] => (Block) C:\users\rafitecus\desktop\la carpeta de rafitecus\dave the driver\sipho.v1.0\sipho\sipho.exe => Ningún archivo
FirewallRules: [UDP Query User{E5CBBB83-351D-401E-B230-00C05FEF4CC3}C:\users\rafitecus\downloads\dwarves.glory.death.and.loot.v1.13.1\dwarves.glory.death.and.loot.v1.13.1\dwarves.exe] => (Block) C:\users\rafitecus\downloads\dwarves.glory.death.and.loot.v1.13.1\dwarves.glory.death.and.loot.v1.13.1\dwarves.exe => Ningún archivo
FirewallRules: [UDP Query User{F9D9C0B5-A7C0-4393-8051-C1791DB8187E}C:\users\rafitecus\downloads\lumberjacked.v1.04\lumberjacked!\lumberjacked.exe] => (Block) C:\users\rafitecus\downloads\lumberjacked.v1.04\lumberjacked!\lumberjacked.exe => Ningún archivo

CMD: netsh winsock reset catalog
CMD: netsh int ip reset resetlog.txt
CMD: reg export HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules C:\FirewallBackup.reg
C:\FirewallBackup.reg
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: bitsadmin /reset /allusers
CMD: ipconfig /flushdns

EmptyEventLogs:

ExportKey: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions

Emptytemp:
End::
*****************

SystemRestore: On => completado
El punto de restauración fue creado correctamente.
Procesos cerrados correctamente.

"C:\WINDOWS\system32\GroupPolicy\Machine" Carpeta mover:

C:\WINDOWS\system32\GroupPolicy\Machine => movido correctamente
C:\WINDOWS\system32\GroupPolicy\GPT.ini => movido correctamente
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\RtkAudUService" => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RtkAudUService" => eliminado correctamente
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{C885AA15-1764-4293-B82A-0586ADD46B35} => eliminado correctamente
HKLM\SOFTWARE\Policies\Microsoft\MRT => no encontrado
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center => no encontrado
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => no pudo ser eliminado, clave podría estar protegida
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate => no encontrado
HKLM\SOFTWARE\Policies\Mozilla => no encontrado
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\Software\Microsoft\Windows\CurrentVersion\Run\\utweb" => eliminado correctamente
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\EpicGamesLauncher" => no encontrado
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EpicGamesLauncher" => no encontrado
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\Steam" => no encontrado
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Steam" => no encontrado
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\utweb" => no encontrado
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\utweb" => no encontrado
C:\ProgramData\NTUSER.pol => movido correctamente
cpuz158 => Servicio detenido correctamente.
HKLM\System\CurrentControlSet\Services\cpuz158 => eliminado correctamente
cpuz158 => servicio eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{077BA067-7C15-40F0-B22E-C9DC2A54B4A2}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Location\Notifications => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Location\Notifications" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C7F1F60C-3EEE-4F1D-8CC6-D2D53CFA6953}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7F1F60C-3EEE-4F1D-8CC6-D2D53CFA6953}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{CCDFC0B8-01A3-4E74-A820-4F13F51D269E}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E64DDC36-C3B8-4078-B641-C7A0898A8A78}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E64DDC36-C3B8-4078-B641-C7A0898A8A78}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\Reboot_AC" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E99B743D-A238-4C92-8A1B-1CC91E8C6147}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E99B743D-A238-4C92-8A1B-1CC91E8C6147}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\MusUx_LogonUpdateResults" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F3E6E7ED-A196-4E44-8803-55FAB3AD4E29}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F719AF24-0241-4D34-8958-B3D7D3B374E2}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F719AF24-0241-4D34-8958-B3D7D3B374E2}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\ASUS\P508PowerAgent_sdk => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\P508PowerAgent_sdk" => eliminado correctamente
"E:\chamoyadas.pdf.lnk" => no encontrado
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{0D82E029-EC50-4530-85D5-90CE8918011C}" => eliminado correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0D82E029-EC50-4530-85D5-90CE8918011C}" => eliminado correctamente
C:\WINDOWS\System32\Tasks\ASUS\CNB6ARD => movido correctamente
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ASUS\CNB6ARD" => eliminado correctamente

========================= Folder: C:\Program Files (x86)\Common Files\PhoneProperty ========================

2024-05-04 03:56 - 2023-10-20 04:21 - 001069056 ____A [32827F33F9B2C5B398F7BFDD8AA4B5B8] () C:\Program Files (x86)\Common Files\PhoneProperty\AacExtCardSetup.msi
2024-05-04 03:56 - 2023-10-20 04:21 - 001429504 ____A [1E744F57FC23E5C323B7F10AB1A12F7A] () C:\Program Files (x86)\Common Files\PhoneProperty\AacPatriotM2Setup.msi
2024-05-04 03:56 - 2023-10-20 04:21 - 001179648 ____A [9B531FD300C4D54393AECF62EC2E6224] () C:\Program Files (x86)\Common Files\PhoneProperty\AacPhisonSetup.msi
2024-05-04 03:56 - 2023-10-20 04:21 - 001396736 ____A [8D8338A4D26DECAA26DDD6CB5DBB2B31] () C:\Program Files (x86)\Common Files\PhoneProperty\AacSetup.msi
2024-05-04 03:56 - 2023-10-20 04:21 - 002569352 ____A [ED05D4DC29383BF73A4F4D22B63893AA] (Blizzard Entertainment, Inc. -> Blizzard Entertainment) C:\Program Files (x86)\Common Files\PhoneProperty\AgentHelper.exe
2024-05-04 03:56 - 2023-10-20 04:21 - 001047208 ____A [C38E90082CC84B7EAEAABC7748BF5C1F] () C:\Program Files (x86)\Common Files\PhoneProperty\arial.ttf
2024-05-04 03:56 - 2023-10-20 04:21 - 002611254 ____A [30D03559D8BD16E2BA2F3DB73224FA18] () C:\Program Files (x86)\Common Files\PhoneProperty\AuraServiceSetup.msi
2024-05-04 03:56 - 2023-10-20 04:21 - 001681220 ____A [D2A2BD08CDFCA017C1439B2021604ED7] () C:\Program Files (x86)\Common Files\PhoneProperty\calibri.ttf
2024-05-04 03:56 - 2023-10-20 04:21 - 000262144 ____A [66979C7ACA82BFF624BCABB9165994CC] () C:\Program Files (x86)\Common Files\PhoneProperty\calibrib.ttf
2024-05-04 03:56 - 2023-10-20 04:21 - 001048576 ____A [59DE14E57E1D57AD70E0284D8F17946B] () C:\Program Files (x86)\Common Files\PhoneProperty\CrashpadMetrics-active.pma
2024-05-04 03:56 - 2023-10-20 04:21 - 001493180 ____A [FB7DEE1256B9A3A33F31AB3AC8D2F7E2] () C:\Program Files (x86)\Common Files\PhoneProperty\msimain.sdb
2024-05-04 03:56 - 2023-10-20 04:21 - 002149832 ____A [621632DD848D221C8D3BCFF5B066FBE1] (Intel Corporation -> Intel(R) Corporation) C:\Program Files (x86)\Common Files\PhoneProperty\SetupChipset.exe
2024-05-04 03:56 - 2023-10-20 04:21 - 002020696 ____A [36A7DD2E3608D434C5EBBEE746DFC13E] () C:\Program Files (x86)\Common Files\PhoneProperty\store.bak
2024-05-04 03:56 - 2023-10-20 04:21 - 001923325 ____A [243A2BD2F1129CF731DFDDACBD277679] () C:\Program Files (x86)\Common Files\PhoneProperty\store.db
2024-05-04 03:56 - 2024-05-04 03:56 - 000000000 _RSHD [00000000000000000000000000000000] (Acceso Denegado) C:\Program Files (x86)\Common Files\PhoneProperty\StqygonRole

====== Final de Folder: ======


"C:\Program Files (x86)\Common Files\PhoneProperty" Carpeta mover:

C:\Program Files (x86)\Common Files\PhoneProperty => movido correctamente

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-1522398979-3316185483-1891492673-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========

C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{042CFBA8-FF82-4A78-A620-69574A73F3B4}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1279C1AC-47FF-4ADE-92DB-678C671C68D7}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{1483E25F-116C-42CC-B3E7-06FF7BCA7B76}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{14C7AAB0-987C-4112-A8B3-C56A8116B229}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{43EAF6A4-B05B-4536-B00A-C618BE3D7AD0}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6BFD967A-49EA-412D-AE9D-258329308EC6}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6EBA0412-4460-4DB0-B4A7-49901978FD05}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{73D66601-4228-477E-A8EE-AF807306FBFF}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7880C371-E74F-45B7-968A-3586E154225E}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{815823DE-8568-4394-BDC7-09B1F4DEE0A0}" => no encontrado
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ADAEC3DD-18A0-4C34-9781-092719377E2A}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{B64CCF68-A869-4D76-A4E0-B4E9712AD762}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{BAAC393B-387F-44E4-B3DD-558B3F8C1519}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB9D5A3F-B791-421D-81A2-9E36DCFAAEA7}" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1642CA51-B71E-4485-A3E5-C158D3DA7B36}C:\users\rafitecus\downloads\mad.games.tycoon.2.v2023.09.01a\mad games tycoon 2.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{19ACEDF5-3B89-4CF5-BB63-5E14DAF995B0}C:\users\rafitecus\downloads\nordhold build 17853750\nordhold\nordhold.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1C239DB7-D571-4BA8-AB58-B583D06594F9}C:\users\rafitecus\desktop\la carpeta de rafitecus\dave the driver\sipho.v1.0\sipho\sipho.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{28387AE0-32E0-4CE5-B843-5E133D8754C6}C:\users\rafitecus\downloads\peglin.v1.0\peglin.v1.0\peglin.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2D412A94-ECCF-4E90-98B9-C4F6A7C1399D}C:\users\rafitecus\downloads\rise.to.ruins.update.2d\rise.to.ruins.update.2d\jre\windows64\bin\javaw.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{302187DC-088A-4625-A553-D8C11B9949F3}C:\games\solium infernum\soliuminfernum.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{54460F45-0264-4077-96DA-8D72617B7CFA}C:\users\rafitecus\downloads\stoneshard.build.16819993\stoneshard.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{64FA6371-0C64-4F76-A65D-7EF2D86917C0}C:\users\rafitecus\desktop\la carpeta de rafitecus\balatro\balatro\balatro\balatro.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{7222BC2E-E64A-448E-9241-4B818FE856FD}C:\users\rafitecus\downloads\ultimate.chicken.horse.v1.8.22\ultimatechickenhorse.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{72E7A00E-B5FB-45FD-AF25-B8A9A22FEB36}C:\program files (x86)\steam\steamapps\common\xcom 2\xcom2-warofthechosen\binaries\win64\xcom2.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{745E9C20-B112-48BD-BB08-528936FDBDD6}C:\users\rafitecus\desktop\la carpeta de rafitecus\to the core\to.the.core\game\tothecore.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{81C6165E-C2E8-42FB-835F-E84E4E7F9690}C:\users\rafitecus\downloads\songs.of.conquest.v1.3.1\songs.of.conquest.v1.3.1\songsofconquest.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{879865FF-21FA-47EA-8862-1B07EEFDF87A}C:\users\rafitecus\downloads\dwarves.glory.death.and.loot.v1.13.1\dwarves.glory.death.and.loot.v1.13.1\dwarves.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{991911D7-EFBE-4920-A2D6-B015472EB7B1}C:\users\rafitecus\desktop\la carpeta de rafitecus\dotage\dotage.v1.1.10h\dotage.v1.1.10h\dotage.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9B8FD1EE-3D66-4949-BB54-ADE28D275319}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{9D78379E-4BDA-451C-890D-E402EC08ADCC}C:\users\rafitecus\downloads\rune.coliseum.v2.9.0224.1508f7\game\runecollseum.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B2FF8D63-6928-43AA-9EE7-976891B1FE89}C:\users\rafitecus\downloads\stellar.initiative.v1.0.4\stellar\stellar initiative.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C031812A-6A03-4D96-AF6B-6F2F31DCDD76}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C85A8514-A80F-4EC0-BB4E-44F2F5C35035}C:\users\rafitecus\desktop\la carpeta de rafitecus\juegos\dredge\dredge\dredge.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{C9F0DA5D-50F8-469A-BCF8-64552DE1EC9C}C:\users\rafitecus\desktop\la carpeta de rafitecus\car manufacture\car.manufacture.early.access\carmanufacture.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{CE2CD4A0-A4A5-44EA-98C6-6489D7F5DBBF}C:\users\rafitecus\downloads\9.kings.v0.7.17\game\9kings.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D1E636FA-861C-467B-896F-D4BFC2FFDAA7}C:\users\rafitecus\downloads\lumberjacked.v1.04\lumberjacked!\lumberjacked.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D2ADA0B4-1E34-414F-814F-9AD69F6F8682}C:\users\rafitecus\downloads\ravenswatch.v1.00.02.00\ravenswatch.v1.00.02.00\ravenswatch.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D4C8C20F-9DDE-432C-A513-E640DB6FB190}C:\games\baldurs gate 3\bin\bg3.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DECBF465-D92C-4465-B454-E747948F0DE8}C:\users\rafitecus\downloads\sunnerv08.02.19-pivigames.blog\speedrunners.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E6EC6D9C-3636-4450-9998-FDF050B968E0}C:\users\rafitecus\downloads\microcivilization.v0.9.6a\microcivilization.v0.9.6a\civ.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F3BAA3FE-6857-4E8B-91FC-C4CA23055DF8}C:\program files (x86)\steam\steamapps\common\terratech worlds demo\tt2\binaries\win64\tt2eos-win64-shipping.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F8AF89D1-124D-40EA-9A42-1220CF0001FB}C:\users\rafitecus\downloads\news.tower.v0.18.601.r\news.tower\news tower.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{FD068230-54B6-4422-8044-3694A8DC9F8A}C:\users\rafitecus\downloads\dealers.life.legend.v0.507\game\dealerslifelegend.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0A5330AB-6C41-4E3A-859D-F8AB93CE52E9}C:\users\rafitecus\downloads\stellar.initiative.v1.0.4\stellar\stellar initiative.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{129F5F1F-F3C0-4360-98CA-C909A90EC859}C:\users\rafitecus\downloads\stoneshard.build.16819993\stoneshard.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1303DA5F-86AC-4790-A1F4-98C743A3C7C7}C:\users\rafitecus\desktop\la carpeta de rafitecus\dotage\dotage.v1.1.10h\dotage.v1.1.10h\dotage.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{3210E988-ECD9-4812-BDFB-C45B000BFB23}C:\users\rafitecus\downloads\microcivilization.v0.9.6a\microcivilization.v0.9.6a\civ.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{34603E84-E222-4835-8055-E7C35D8BF692}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{359A5B44-1742-4845-B96B-000604014A4B}C:\users\rafitecus\downloads\news.tower.v0.18.601.r\news.tower\news tower.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{43607DA5-1DBA-47C3-B478-81D3381BC485}C:\users\rafitecus\desktop\la carpeta de rafitecus\juegos\dredge\dredge\dredge.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{458EF5B2-529C-4F5A-AB72-4D620D100CE8}C:\games\baldurs gate 3\bin\bg3.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{47787F74-BBA8-443E-9E2F-449F63F433C2}C:\users\rafitecus\downloads\ravenswatch.v1.00.02.00\ravenswatch.v1.00.02.00\ravenswatch.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{47A7FD80-184A-48F6-A5D9-7E9BF890B728}C:\users\rafitecus\downloads\sunnerv08.02.19-pivigames.blog\speedrunners.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{49C5B45D-E58B-4CB5-B235-996FF8B2D766}C:\users\rafitecus\downloads\ultimate.chicken.horse.v1.8.22\ultimatechickenhorse.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4B5A24C8-21E0-4E61-B867-1E5ABB07E535}C:\users\rafitecus\downloads\nordhold build 17853750\nordhold\nordhold.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{59BD8DA6-83AA-4B0F-873C-AE480ECB2476}C:\program files (x86)\steam\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6A8D9993-29F5-4D18-A0A6-C9D2519ECFE0}C:\users\rafitecus\downloads\songs.of.conquest.v1.3.1\songs.of.conquest.v1.3.1\songsofconquest.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6D18A74C-5635-40BB-9273-AAB10314C7A4}C:\users\rafitecus\desktop\la carpeta de rafitecus\car manufacture\car.manufacture.early.access\carmanufacture.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{820AE384-CBE8-465B-9325-EF2AF33859A5}C:\program files (x86)\steam\steamapps\common\xcom 2\xcom2-warofthechosen\binaries\win64\xcom2.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{98BDD11C-4B23-44EC-A058-8361FDCFCEE9}C:\users\rafitecus\downloads\rise.to.ruins.update.2d\rise.to.ruins.update.2d\jre\windows64\bin\javaw.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A2756227-2367-4876-B5C0-DA57745DCB56}C:\users\rafitecus\downloads\mad.games.tycoon.2.v2023.09.01a\mad games tycoon 2.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A8092B4E-9604-4468-8CA7-C32B6B626BBD}C:\users\rafitecus\desktop\la carpeta de rafitecus\balatro\balatro\balatro\balatro.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BB099339-7089-42F4-8992-13FB742CA90F}C:\program files (x86)\steam\steamapps\common\terratech worlds demo\tt2\binaries\win64\tt2eos-win64-shipping.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BD883688-8B7E-4BEA-8843-67DDA2C299E9}C:\users\rafitecus\downloads\rune.coliseum.v2.9.0224.1508f7\game\runecollseum.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C4CA55CD-C868-4BD8-A66C-5F52AC26EFDE}C:\users\rafitecus\downloads\dealers.life.legend.v0.507\game\dealerslifelegend.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{C7D64AB8-B84F-4313-93AA-148E6C1F9198}C:\users\rafitecus\desktop\la carpeta de rafitecus\to the core\to.the.core\game\tothecore.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{CB2B3DFD-B567-4479-A78F-A5251362A6A7}C:\games\solium infernum\soliuminfernum.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{D7AD534E-ABD8-4A91-A44D-A365AD25504A}C:\users\rafitecus\downloads\9.kings.v0.7.17\game\9kings.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DD5BE3BC-3F35-46F2-BCC8-C1A83AFDD6BB}C:\users\rafitecus\downloads\peglin.v1.0\peglin.v1.0\peglin.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DDBE7ED2-C213-4C3B-9B3C-459A04079DC1}C:\users\rafitecus\desktop\la carpeta de rafitecus\dave the driver\sipho.v1.0\sipho\sipho.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E5CBBB83-351D-401E-B230-00C05FEF4CC3}C:\users\rafitecus\downloads\dwarves.glory.death.and.loot.v1.13.1\dwarves.glory.death.and.loot.v1.13.1\dwarves.exe" => eliminado correctamente
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{F9D9C0B5-A7C0-4393-8051-C1791DB8187E}C:\users\rafitecus\downloads\lumberjacked.v1.04\lumberjacked!\lumberjacked.exe" => eliminado correctamente

========= netsh winsock reset catalog =========


El catálogo Winsock se restableció correctamente.
Debe reiniciar el equipo para completar el restablecimiento.



========= Final de CMD: =========


========= netsh int ip reset resetlog.txt =========

Reenvío de compartimiento se restableció correctamente.
Compartimiento se restableció correctamente.
Protocolo de control se restableció correctamente.
Solicitud de secuencia eco se restableció correctamente.
Global se restableció correctamente.
Interfaz se restableció correctamente.
Dirección de difusión por proximidad (a se restableció correctamente.
Direcciones de multidifusión se restableció correctamente.
Dirección de unidifusión se restableció correctamente.
Vecino se restableció correctamente.
Ruta de acceso se restableció correctamente.
Posible se restableció correctamente.
Directiva de prefijo se restableció correctamente.
Vecino de proxy se restableció correctamente.
Ruta se restableció correctamente.
Prefijo de sitio se restableció correctamente.
Subinterfaz se restableció correctamente.
Patrón de reactivación se restableció correctamente.
Resolver vecino se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
Error al restablecer .
Acceso denegado.

 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
 se restableció correctamente.
Reinicie el equipo para completar esta acción.



========= Final de CMD: =========


========= reg export HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules C:\FirewallBackup.reg =========

La operaci¢n se complet¢ correctamente.



========= Final de CMD: =========

C:\FirewallBackup.reg => movido correctamente

========= netsh advfirewall reset =========

Aceptar



========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar



========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.

0 out of 0 jobs canceled.


========= Final de CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.


========= Final de CMD: =========


=========== EmptyEventLogs: ==========

1233 Event logs cleared. 


================================
================== ExportKey: ===================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\IpAddresses]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths]
"C:\ProgramData"="0"
"C:\Users"="0"
"C:\Program Files (x86)\Common Files"="0"
"C:\WINDOWS\TEMP\"="0"
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes]
"msiexec.exe"="0"
"dllhost.exe"="0"
"regasm.exe"="0"
"regsvr32.exe"="0"
"rundll32.exe"="0"
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\TemporaryPaths]

=== Final de ExportKey ===

=========== EmptyTemp: ==========

FlushDNS => completado
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 190972321 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 110929724 B
Windows/system/drivers => 11333856 B
Edge => 0 B
Brave => 502952147 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 1178 B
Rafitecus => 67970694 B

RecycleBin => 0 B
EmptyTemp: => 843.2 MB datos temporales eliminados.

================================

Resultado de los archivos programados para mover (Modo de Inicio: Normal) (Fecha y Hora: 08-06-2025 07:10:06)


Resultado de las claves programadas para eliminar después de reiniciar:

HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => eliminado correctamente

==== Final  Fixlog 07:10:06 ====