Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 16-09-2020 Ejecutado por samco (17-09-2020 12:42:13) Ejecutado desde C:\Users\samco\Desktop Windows 10 Pro Versión 2004 19041.508 (X64) (2020-09-08 06:42:16) Modo de Inicio: Normal ========================================================== ==================== Cuentas: ============================= Administrador (S-1-5-21-4286630145-3932354708-2530659942-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-4286630145-3932354708-2530659942-503 - Limited - Disabled) Invitado (S-1-5-21-4286630145-3932354708-2530659942-501 - Limited - Disabled) samco (S-1-5-21-4286630145-3932354708-2530659942-1001 - Administrator - Enabled) => C:\Users\samco WDAGUtilityAccount (S-1-5-21-4286630145-3932354708-2530659942-504 - Limited - Disabled) ==================== Centro de Seguridad ======================== (Si una entrada es incluida en el fixlist, será eliminada.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AV: ESET Security (Disabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: ESET Cortafuegos (Enabled) {B066057A-E576-007C-D591-56C163D3B33B} FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4} ==================== Programas instalados ====================== (Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.) 7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov) Actualización de NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden Adobe Photoshop 2020 (HKLM-x32\...\PHSP_21_0_3) (Version: 21.0.3 - Adobe Systems Incorporated) Avast Cleanup Premium (HKLM\...\Avast Cleanup) (Version: 20.1.9294.798 - Avast Software) Avast Driver Updater (HKLM-x32\...\{630C3D8E-2BEE-465F-9E59-BB069ED10761}) (Version: 2.5.6 - AVAST Software) Hidden Avast SecureLine VPN (HKLM\...\%V_PRODUCT_UNINSTALL_REG_KEY%) (Version: 5.6.4971.434 - Avast Software) Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 5.7.5118.836 - Avast Software) Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 85.1.14.81 - Los creadores de Brave) CCleaner (HKLM\...\CCleaner) (Version: 5.71 - Piriform) Dell Update for Windows 10 (HKLM\...\{70E9F8CC-A23E-4C25-B292-C86C1821587C}) (Version: 3.1.3 - Dell, Inc.) Discord (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\Discord) (Version: 0.0.308 - Discord Inc.) DSC/AA Factory Installer (HKLM\...\{F7A70D00-F283-45C8-B163-49EC365D7E27}) (Version: 2.0.6875.402 - PC-Doctor, Inc.) Hidden Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden ESET Security (HKLM\...\{99F57F1E-F93B-44A6-A802-2FDBF356D1D9}) (Version: 13.2.18.0 - ESET, spol. s r.o.) f.lux (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\Flux) (Version: - f.lux Software LLC) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 85.0.4183.102 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden Hardwipe 5.2.1 (HKLM\...\{87192B99-B981-424A-BF3C-EB9DDD560244}) (Version: 5.2.1 - Big Angry Dog) Intel(R) Chipset Device Software (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10207.5567 - Intel Corporation) Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 1.1.1.318 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4836 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.2.7.1042 - Intel Corporation) Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000020-0210-1034-84C8-B8D95FA3C8C3}) (Version: 21.20.0.4 - Intel Corporation) Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden LibreOffice 6.4.4.2 (HKLM\...\{F00C391B-6092-40E7-9ECD-144933865571}) (Version: 6.4.4.2 - The Document Foundation) Malwarebytes version 4.2.0.82 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.2.0.82 - Malwarebytes) Maxx Audio Installer (x64) (HKLM\...\{307032B2-6AF2-46D7-B933-62438DEB2B9A}) (Version: 2.7.9177.0 - Waves Audio Ltd.) Hidden MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 85.0.564.51 - Microsoft Corporation) Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.135.29 - ) Microsoft OneDrive (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\OneDriveSetup.exe) (Version: 20.052.0311.0011 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation) Mozilla Firefox 80.0.1 (x64 es-MX) (HKLM\...\Mozilla Firefox 80.0.1 (x64 es-MX)) (Version: 80.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 72.0.2 - Mozilla) NinjaTrader 7 (HKLM-x32\...\{18035D2F-E05F-433D-9BB3-A991347151AC}) (Version: 7.0.1040 - NinjaTrader) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden NVIDIA Controlador de gráficos 452.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 452.06 - NVIDIA Corporation) NVIDIA GeForce Experience 3.20.4.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.4.14 - NVIDIA Corporation) NVIDIA Software del sistema PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden Opera GX Stable 68.0.3618.206 (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\Opera GX 68.0.3618.206) (Version: 68.0.3618.206 - Opera Software) Opera Stable 68.0.3618.125 (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\Opera 68.0.3618.125) (Version: 68.0.3618.125 - Opera Software) Opera Stable 71.0.3770.148 (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\Opera 71.0.3770.148) (Version: 71.0.3770.148 - Opera Software) Oracle VM VirtualBox 6.1.8 (HKLM\...\{8EC316C6-82C4-431F-A4DE-4082717C96D5}) (Version: 6.1.8 - Oracle Corporation) Quickset64 (HKLM\...\{87CF757E-C1F1-4D22-865C-00C6950B5258}) (Version: 11.6.0 - Dell Inc.) Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.5.0907.090217 - Razer Inc.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.18362.31252 - Realtek Semiconductor Corp.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8142 - Realtek Semiconductor Corp.) RememBear (HKLM\...\{FB71D925-246B-47D1-A08A-96255AD061D9}) (Version: 1.4.4.0 - TunnelBear) Hidden RememBear (HKLM-x32\...\{bd8d6543-0158-4aa4-bd31-68a7b433b070}) (Version: 1.4.4.0 - TunnelBear) RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software) SmartByte Drivers and Services (HKLM\...\{9668B1BB-D0FE-4C0C-800C-B1555E069A62}) (Version: 3.1.940 - Rivet Networks) Software Intel® PROSet/Wireless (HKLM-x32\...\{86f7f90f-40a4-4cf2-b9dc-cfde74107a2f}) (Version: 21.20.1 - Intel Corporation) Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform) Spotify (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\Spotify) (Version: 1.1.41.634.gc2c73ca7 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Sublime Text 3 (HKLM\...\Sublime Text 3_is1) (Version: - Sublime HQ Pty Ltd) SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk) Toggl Desktop (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\TogglDesktop) (Version: - Toggl) True Color (HKLM\...\{843D1B75-7A4E-4C8C-8348-BDF6C6EC3333}) (Version: 1.0.1.1 - Entertainment Experience LLC) Hidden True Color (HKLM-x32\...\{c38d939e-31d4-44fa-a07a-d28915046b7d}) (Version: 7.9.0.0 - Entertainment Experience) True Color XML Tables (HKLM\...\{EAE8B515-AC0E-46A8-AA41-CAD18E4094CD}) (Version: 7.10.0.0 - Entertainment Experience LLC) Hidden TrueColorXMLTables (HKLM-x32\...\{bf377b78-c440-4ce9-a962-2fde04e6d4cd}) (Version: 7.10.0.0 - Entertainment Experience) VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN) Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - Intel Corporation Inc.) Zoom (HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.) Packages: ========= Complemento de motor multimedia para Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-02-22] (Microsoft Corporation) Dell Update -> C:\Program Files\WindowsApps\DellInc.DellUpdate_3.1.103.0_x64__htrsf667h5kn2 [2020-08-07] (Dell Inc) Extensión de video MPEG-2 -> C:\Program Files\WindowsApps\microsoft.mpeg2videoextension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-02-05] (Microsoft Corporation) Focus To-Do: Temporizador de concentración & Gestión de tareas -> C:\Program Files\WindowsApps\52299SuperElement.119436511DDC8_6.3.3.0_x64__792yctbvabkar [2020-07-20] (Super Element) Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-20] (Netflix, Inc.) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.958.0_x64__56jybvy8sckqj [2020-06-24] (NVIDIA Corp.) ==================== Personalizado CLSID (Lista blanca): ============== (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) CustomCLSID: HKU\S-1-5-21-4286630145-3932354708-2530659942-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}0 CustomCLSID: HKU\S-1-5-21-4286630145-3932354708-2530659942-1001_Classes\CLSID\{a9872fee-5a55-4ecb-9b0f-b06fedcf14d1}\localserver32 -> C:\Program Files\Waves\MaxxAudio\MaxxAudioPro.exe (Waves Inc -> Waves Audio Ltd) ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado] ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Ningún archivo ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-08-10] (ESET, spol. s r.o. -> ESET) ContextMenuHandlers2: [BigAngryDog_HWipe] -> {B0FFE529-A5D3-4ECE-91C0-9E3585C373D8} => D:\Programas\Hardwipe\hw-bin\hwshell.dll [2017-04-03] (Big Angry Dog Ltd -> Big Angry Dog) ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-08-10] (ESET, spol. s r.o. -> ESET) ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ContextMenuHandlers3: [BigAngryDog_HWipe] -> {8154B7C1-BB68-457C-931A-5BFABBA86CD9} => D:\Programas\Hardwipe\hw-bin\hwshell.dll [2017-04-03] (Big Angry Dog Ltd -> Big Angry Dog) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-26] (Malwarebytes Corporation -> Malwarebytes) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\samco\AppData\Local\MEGAsync\ShellExtX64.dll [2020-06-27] (Mega Limited -> ) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado] ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Ningún archivo ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki132538.inf_amd64_a34b1de6c28c3534\igfxDTCM.dll [2019-06-13] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvdmi.inf_amd64_c494aee3704c1cad\nvshext.dll [2020-08-13] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Archivo no firmado] ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Ningún archivo ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2020-08-10] (ESET, spol. s r.o. -> ESET) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-02-26] (Malwarebytes Corporation -> Malwarebytes) ==================== Codecs (Lista blanca) ==================== ==================== Accesos directos & WMI ======================== (Las entradas pueden ser listadas para ser restauradas o eliminadas.) ShortcutWithArgument: C:\Users\samco\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\9501e18d7c2ab92e\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 2" ShortcutWithArgument: C:\Users\samco\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Profile 1" ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --force-dark-mode ==================== Módulos cargados (Lista blanca) ============= 2020-02-05 15:47 - 2007-09-02 14:57 - 000069632 _____ () [Archivo no firmado] C:\Program Files (x86)\RocketDock\RocketDock.dll 2018-03-13 16:10 - 2018-03-13 16:10 - 000281088 _____ () [Archivo no firmado] C:\Program Files\RememBear\Libs\Win64\libsodium.dll 2019-06-14 14:42 - 2019-06-14 14:42 - 007170048 _____ () [Archivo no firmado] C:\Program Files\RememBear\Libs\Win64\pwmgr.dll 2016-05-17 23:31 - 2016-05-17 23:31 - 000140288 _____ () [Archivo no firmado] C:\WINDOWS\system32\DPPPlugin.dll 2019-03-18 13:31 - 2019-03-18 13:31 - 002117632 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Archivo no firmado] C:\Program Files\RememBear\Libs\Win64\libeay32.dll 2019-03-18 13:31 - 2019-03-18 13:31 - 000361984 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Archivo no firmado] C:\Program Files\RememBear\Libs\Win64\ssleay32.dll ==================== Alternate Data Streams (Lista blanca) ======== ==================== Modo Seguro (Lista blanca) ================== ==================== Asociación (Lista blanca) ================= ==================== Internet Explorer (Lista blanca) ========== SearchScopes: HKU\S-1-5-21-4286630145-3932354708-2530659942-1001 -> DefaultScope {98C513C9-1646-4B9F-AA60-41D4B1712793} URL = SearchScopes: HKU\S-1-5-21-4286630145-3932354708-2530659942-1001 -> {98C513C9-1646-4B9F-AA60-41D4B1712793} URL = ==================== Hosts contenido: ========================= (Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.) 2020-03-08 23:43 - 2020-03-08 23:43 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts 127.0.0.1 localhost 2020-02-08 22:37 - 2020-09-03 16:29 - 000000520 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics 2.168.137.199 Mi9T-Sam.mshome.net # 2020 9 4 10 21 27 52 256 8 17 0 15 574 ==================== Otras Áreas =========================== (Actualmente no existe una corrección automática para esta sección.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\samco\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\03.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn) Firewall de Windows está habilitado. Network Binding: ============= VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) SecureLine: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) Wi-Fi: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) ==================== MSCONFIG/TASK MANAGER elementos deshabilitados == (Si una entrada es incluida en el fixlist, será eliminada.) HKLM\...\StartupApproved\Run: => "DellMobileConnectWelcome" HKLM\...\StartupApproved\Run32: => "DellMobileConnectWelcome" HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\StartupApproved\StartupFolder: => "Jarvee.lnk" HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\StartupApproved\Run: => "OneDriveSetup" HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\StartupApproved\Run: => "Opera Browser Assistant" HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\StartupApproved\Run: => "CCXProcess" HKU\S-1-5-21-4286630145-3932354708-2530659942-1001\...\StartupApproved\Run: => "EpicGamesLauncher" ==================== Reglas de firewall (Lista blanca) ================ (Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.) FirewallRules: [UDP Query User{92A086ED-B619-44E8-9C2E-6C9A870FC38A}C:\users\samco\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\samco\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [TCP Query User{66E56463-338A-40F0-95E2-031239E39FA6}C:\users\samco\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\samco\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{2F0C9B90-9470-4BDA-9914-3FA34D04C5D1}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.1.9518.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) FirewallRules: [{2F32EC48-164E-4E10-96A0-1D5701C7C77A}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.DellMobileConnect_3.1.9518.0_x64__0vhbc3ng4wbp0\app\DellMobileConnectClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) FirewallRules: [{A63F7FBA-8A5F-44F5-B7D8-F7C8E2A9CFF5}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{1880D2E5-C82B-4F56-95AE-C6FBC690BDAB}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{FAD5822B-6CF9-4CC0-8EDC-8067AE913538}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{73512409-4CAF-41F2-BF74-AB16AABAE97D}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{D6901574-0CEC-4F27-808C-36ADC00595A5}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{59DC40F4-6CBE-42F7-80E4-CA29C1D27DD3}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{2A408D14-6F0C-4710-B53E-A16377AA93EA}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{93233DE6-244E-4036-BC55-41A715841D94}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{8A0C514F-BDC6-4528-905C-575AAA29030C}] => (Allow) C:\WINDOWS\system32\alg.exe (Microsoft Windows -> Microsoft Corporation) FirewallRules: [{868D0AC6-A486-40CF-8003-509384AE3E7D}] => (Allow) D:\Games\Steam\steamapps\common\RESIDENT EVIL 2 BIOHAZARD RE2\re2.exe (CAPCOM CO., LTD. -> ) FirewallRules: [{13EF9A12-740C-411E-BBE7-0F69562C9A6C}] => (Allow) D:\Games\Steam\steamapps\common\RESIDENT EVIL 2 BIOHAZARD RE2\re2.exe (CAPCOM CO., LTD. -> ) FirewallRules: [{1120344F-C2F4-415C-970A-FDC486D08AD5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{F49134AE-79D6-414F-9D37-49E75E617E40}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{F0E80F04-526D-4C2E-A38B-3FE743404776}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{4E8D3526-5436-48C6-ABCC-41461DF7A3B8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{6A9640FD-52BD-49DA-99D2-30ED3399B52B}] => (Allow) D:\Games\Steam\steamapps\common\DOOMEternal\idTechLauncher.exe () [Archivo no firmado] FirewallRules: [{C4830387-5200-4192-AC08-B412648D7E07}] => (Allow) D:\Games\Steam\steamapps\common\DOOMEternal\idTechLauncher.exe () [Archivo no firmado] FirewallRules: [{839F61E1-AAEE-4E65-A1CB-9D18C8248E61}] => (Allow) C:\Program Files\RememBear\RememBear.App.exe (TunnelBear -> ) FirewallRules: [UDP Query User{902CEEB1-5EB8-4CB8-8A2D-ACCC068A2DBC}C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe (NinjaTrader LLC, hxxp://www.ninjatrader.com) [Archivo no firmado] FirewallRules: [TCP Query User{FCE76CFF-370D-4E59-9702-ADDCA4392A0F}C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe] => (Allow) C:\program files (x86)\ninjatrader 7\bin64\ninjatrader.exe (NinjaTrader LLC, hxxp://www.ninjatrader.com) [Archivo no firmado] FirewallRules: [{6DB9D145-40C6-4287-818C-01CFA5B4A9DE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{FD39D5EC-6C17-4DBA-BE15-92CED8F5C5A0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{FF961169-F1D4-4DF3-A1E5-7E0A2091DBD0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{53961E22-9055-4B6B-A343-1758F1D46DD0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{1D362E44-8F01-4C81-B674-ED6C46FD960C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{33FA8946-EF38-44B6-9D30-230B6982DFA5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{208BD945-5A99-43F7-AF54-692B11AF60A4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{31C937A4-ED62-4298-B9A3-642B8B6E4433}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{B1C4A277-0B8F-4155-B114-490F7293AB13}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{159664F4-DD15-4535-8A78-1B20CFEA6ACB}] => (Allow) c:\users\samco\appdata\local\programs\opera\70.0.3728.178\opera.exe (Opera Software AS -> Opera Software) FirewallRules: [{B5E4BEFD-D9CF-4B8A-809A-BC59E2E1D38C}] => (Allow) C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.) FirewallRules: [{5D7C9A71-2C6C-40D9-B397-59B052614D28}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{145A7945-3A72-407B-93AE-7F3790E4DE80}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{A497DF39-96F6-4D58-BF21-8060B24394C1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{FF45C526-CBB4-47D8-B592-80F1E8C2474F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{1B10E6AD-FDBD-487B-B482-6DE2215DFD38}] => (Allow) c:\users\samco\appdata\local\programs\opera\71.0.3770.148\opera.exe (Opera Software AS -> Opera Software) ==================== Puntos de Restauración ========================= ATENCIÓN: Restaurar Sistema está deshabilitado (Total:105.08 GB) (Free:50.28 GB) (48%) ==================== Dispositivos defectuosos en el Administrador de dispositivos ============ Name: avast! SecureLine TAP Adapter v3 Description: avast! SecureLine TAP Adapter v3 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TAP-Windows Provider V9 Service: aswTap Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Errores del registro de eventos: ======================== Errores de aplicación: ================== Error: (09/17/2020 12:41:10 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: El programa FRST64.exe (versión 16.9.2020.0) dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible sobre el problema, comprueba el historial de problemas en el panel de control de seguridad y mantenimiento. Id. de proceso: 2f14 Hora de Inicio: 01d68d194fc4c24a Hora de finalización: 4294967295 Ruta de la aplicación: C:\Users\samco\Desktop\FRST64.exe Id. de informe: d099ae16-6b88-4de5-8988-15bd266faefa Nombre completo del paquete con errores: Id. de la aplicación relativa al paquete con errores: Tipo de bloqueo: Top level window is idle Error: (09/17/2020 11:27:34 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT AUTHORITY) Description: El subárbol del usuario se carga mediante otro proceso (bloqueo del registro) nombre del proceso: C:\Program Files\AVAST Software\Cleanup\TuneupSvc.exe, PID: 3808, ProfSvc PID: 1864. Error: (09/17/2020 11:27:23 AM) (Source: DPTF) (EventID: 17) (User: NT AUTHORITY) Description: ESIF(8.5.10103.7263) TYPE: ERROR MODULE: DPTF TIME 13777 ms DPTF Build Version: 8.5.10103.7263 DPTF Build Date: Dec 12 2018 18:51:29 Source File: ..\..\..\..\Sources\Policies\PolicyLib\PolicyBase.cpp @ line 1248 Executing Function: PolicyBase::sendOscRequest Message: Active Policy: Failed to set _OSC: Failure during execution of _OSC: DPTF Build Version: 8.5.10103.7263 DPTF Build Date: Dec 12 2018 18:51:29 Source File: ..\..\..\Sources\Manager\EsifServices.cpp @ line 699 Executing Function: EsifServices::primitiveExecuteSet Message: Error returned from ESIF services interface function call Participant: NoParticipant Domain: NoDomain ESIF Primitive: SET_OPERATING_SYSTEM_CAPABILITIES [93] ESIF Instance: 255 ESIF Return Code: ESIF_E_ACPI_EVAL_FAILURE [1105] Policy: Active Policy [0] Error: (09/17/2020 01:28:31 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nombre de la aplicación con errores: wmiprvse.exe, versión: 10.0.19041.1, marca de tiempo: 0xdc25e467 Nombre del módulo con errores: unknown, versión: 0.0.0.0, marca de tiempo: 0x00000000 Código de excepción: 0x80131623 Desplazamiento de errores: 0x00007ffe1b54200f Identificador del proceso con errores: 0x4560 Hora de inicio de la aplicación con errores: 0x01d68cbbc2c4b08b Ruta de acceso de la aplicación con errores: C:\WINDOWS\system32\wbem\wmiprvse.exe Ruta de acceso del módulo con errores: unknown Identificador del informe: 90c72592-7719-4b7c-ba70-54617c0a7202 Nombre completo del paquete con errores: Identificador de aplicación relativa del paquete con errores: Error: (09/17/2020 01:28:31 AM) (Source: .NET Runtime) (EventID: 1025) (User: ) Description: Application: wmiprvse.exe Framework Version: v4.0.30319 Description: The application requested process termination through System.Environment.FailFast(string message). Message: El proveedor ha iniciado una excepción inesperada: System.IO.FileLoadException: File name: 'Microsoft.AppV.AppvClientComConsumer, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35' at Microsoft.AppV.AppvPublishingServerWMI.AppvPublishingServer.EnumeratePublishingServers() Stack: at System.Environment.FailFast(System.String) at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsync(System.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink) Error: (09/17/2020 01:28:30 AM) (Source: Microsoft Security Client) (EventID: 3002) (User: ) Description: Event-ID 3002 Error: (09/17/2020 01:28:30 AM) (Source: Microsoft Security Client) (EventID: 3002) (User: ) Description: Event-ID 3002 Error: (09/17/2020 01:28:30 AM) (Source: Microsoft Security Client) (EventID: 2002) (User: ) Description: Event-ID 2002 Errores del sistema: ============= Error: (09/17/2020 12:52:13 AM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-SAM) Description: No se puede iniciar un servidor DCOM: {0358B920-0AC7-461F-98F4-58E32CD89148}. Error "2147942767" al iniciar este comando: C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683} Error: (09/17/2020 12:48:16 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: El módulo de extensibilidad de WLAN se detuvo inesperadamente. Ruta de acceso del módulo: C:\WINDOWS\system32\IntelWifiIhv04.dll Error: (09/17/2020 12:48:16 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: El módulo de extensibilidad de WLAN se detuvo inesperadamente. Ruta de acceso del módulo: C:\WINDOWS\system32\IntelWifiIhv04.dll Error: (09/17/2020 12:48:14 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT AUTHORITY) Description: El módulo de extensibilidad de WLAN se detuvo inesperadamente. Ruta de acceso del módulo: C:\WINDOWS\system32\IntelWifiIhv04.dll Error: (09/17/2020 12:48:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: El servicio Aplicación del sistema COM+ terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 1000 milisegundos: Reiniciar el servicio. Error: (09/17/2020 12:48:02 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: El servicio Intel® SGX AESM terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 5000 milisegundos: Reiniciar el servicio. Error: (09/17/2020 12:48:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: El servicio Razer Synapse Service se terminó de manera inesperada. Esto ha sucedido 1 veces. Error: (09/17/2020 12:48:01 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: El servicio Windows Presentation Foundation Font Cache 3.0.0.0 terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio. Windows Defender: =================================== Date: 2020-09-16 12:32:48.1390000Z Description: El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. Id. de examen: {0A73AC22-F0C3-4061-B7A0-B74C5794A536} Tipo de examen: Antimalware Parámetros de examen: Examen rápido Usuario: NT AUTHORITY\SYSTEM Date: 2020-09-12 04:42:20.0380000Z Description: El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. Id. de examen: {42961855-DCDA-4302-8BD1-A6536E25B645} Tipo de examen: Antimalware Parámetros de examen: Examen rápido Usuario: NT AUTHORITY\SYSTEM Date: 2020-09-10 13:30:40.8580000Z Description: El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. Id. de examen: {01B8C82D-2E3C-40EE-8250-021A3B8B92AA} Tipo de examen: Antimalware Parámetros de examen: Examen rápido Usuario: NT AUTHORITY\SYSTEM Date: 2020-09-09 11:37:18.5600000Z Description: El examen de Antivirus de Microsoft Defender se detuvo antes de completarse. Id. de examen: {0C83CC30-B74B-4FB6-B405-BE06A2084A3A} Tipo de examen: Antimalware Parámetros de examen: Examen rápido Usuario: NT AUTHORITY\SYSTEM CodeIntegrity: =================================== Date: 2020-09-17 12:40:13.5080000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 12:39:50.9930000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 12:25:59.5440000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 12:25:59.5390000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 12:25:59.5280000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 11:38:11.5960000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 11:38:11.5900000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2020-09-17 11:38:11.5770000Z Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Información de la memoria =========================== BIOS: Dell Inc. 1.1.3 12/02/2018 Placa base: Dell Inc. 0MVD5F Procesador: Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz Porcentaje de memoria en uso: 28% RAM física total: 16245.95 MB RAM física disponible: 11648.86 MB Virtual total: 18677.95 MB Virtual disponible: 12079.99 MB ==================== Unidades ================================ Drive c: (OS) (Fixed) (Total:105.08 GB) (Free:50.28 GB) NTFS Drive d: (DATA) (Fixed) (Total:931.39 GB) (Free:599.63 GB) NTFS \\?\Volume{d9bfee1b-417f-45d6-b0f2-9e3e955b10b7}\ () (Fixed) (Total:0.53 GB) (Free:0.06 GB) NTFS \\?\Volume{7533fdcc-8110-43d9-8b37-69174af32905}\ (Image) (Fixed) (Total:11.78 GB) (Free:0.14 GB) NTFS \\?\Volume{60cecd99-883a-40b0-818b-ba84f1cb6ece}\ (DELLSUPPORT) (Fixed) (Total:1.09 GB) (Free:0.33 GB) NTFS \\?\Volume{aa67153e-9dcc-4d4f-848f-0325cc510d7b}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.56 GB) FAT32 ==================== MBR & Tabla de particiones ==================== ========================================================== Disk: 0 (Size: 119.2 GB) (Disk ID: 4481B036) Partition: GPT. ========================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: 5A808E98) Partition: GPT. ==================== Final de Addition.txt =======================