• Registrarse
  • Iniciar sesión


  • Página 1 de 2 12 ÚltimoÚltimo
    Resultados 1 al 10 de 17

    consumo de cpu de google chrome (Solucionado)

    Hola buenas tardes a todos los integrantes y usuarios de este foro. Voy a esponer mi problema que es el siguiente: De un tiempo a esta parte cada vez que utilizo google chrome me salta ...

          
    1. #1
      Usuario Avatar de kanoute74
      Registrado
      dic 2017
      Ubicación
      españa
      Mensajes
      9

      consumo de cpu de google chrome (Solucionado)

      Hola buenas tardes a todos los integrantes y usuarios de este foro. Voy a esponer mi problema que es el siguiente:
      De un tiempo a esta parte cada vez que utilizo google chrome me salta un proceso llamado svchost.exe quedandose
      ya clavado aun cerrando google chrome y utilizando unos 27% de cpu y google chrome me esta utilizando mas cpu y RAM
      de lo habitual con lo que me esta relentizando el ordenador.
      si alguien me pudiera ayudar se lo agradeceria muchisimo

    2. #2
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.878

      Re: Problemas con el consumo de cpu de google chrome

      Hola

      Realiza los siguientes pasos, sin cambiar el orden:

      Deshabilitá temporalmente Tu Antivirus. Cerrá todos los programas que tengas abiertos.


      Descargá a Tu escritorio las siguientes herramientas:



      Seguí paso a paso las acciones ....

      Malwarebytes

      Instalalo y actualizalo.
      Realiza un Análisis Completo. Pulsa en “Eliminar Seleccionados” para enviarlo a la cuarentena.
      Reinicias el sistema.
      En el apartado del manual "Historial" >> Registros de Aplicación >> Scan Log/Registro de Análisis encontrarás el informe del MBAM, que debes copiar y pegar en tu próxima respuesta.


      ZHPcleaner

      Cerra todos los navegadores. Doble clic para ejecutarlo y Presiona el Botón Scánner. Espera a que termine.
      Se va a generar un reporte en el escritorio llamado ZHPcleaner.
      Presiona el Botón Reparar. Cuando termine, reinicia el ordenador.
      Copias y pegas en Tu próxima respuesta el contenido del reporte que se había generado.


      Adwcleaner

      Ejecutalo. (Clic derecho y selecciona Ejecutar como Administrador).
      Pulsa en el botón Escanear y espera a que se realice el proceso. Luego pulsa sobre el botón Limpiar.
      Espera a que se complete. Si te pidiera reiniciar el sistema Aceptas.
      Guardas el reporte que te aparecerá para copiarlo y pegarlo en tu próxima respuesta. El informe también se puede encontrar en "C:\AdwCleaner\AdwCleaner.txt"


      Ccleaner

      Instalalo y ejecutalo.
      En la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine > clic en ejecutar limpiador.
      Clic en la pestaña Registro > clic en buscar problemas esperas que termine > clic en Reparar Seleccionadas y haces una copia de seguridad.

      En Tu próxima respuesta, Pega los reportes de Malwarebytes, AdwCleaner y Zhpcleaner y comentas como va el problema.


      Saludos
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    3. #3
      Usuario Avatar de kanoute74
      Registrado
      dic 2017
      Ubicación
      españa
      Mensajes
      9

      Re: Problemas con el consumo de cpu de google chrome

      de acuerdo y muchas gracias.

    4. #4
      Usuario Avatar de kanoute74
      Registrado
      dic 2017
      Ubicación
      españa
      Mensajes
      9

      Re: Problemas con el consumo de cpu de google chrome

      he seguido los pasos que me comentaste y los informes fueron los siguientes:

      Malwarebytes:
      Malwarebytes
      www.malwarebytes.com

      -Detalles del registro-
      Fecha del análisis: 21/12/17
      Hora del análisis: 20:02
      Archivo de registro: 742561cc-e681-11e7-9b3a-bcaec59f7440.json
      Administrador: Sí

      -Información del software-
      Versión: 3.3.1.2183
      Versión de los componentes: 1.0.262
      Versión del paquete de actualización: 1.0.3538
      Licencia: Prueba

      -Información del sistema-
      SO: Windows 7
      CPU: x64
      Sistema de archivos: NTFS
      Usuario: MIGUEL-PC\MIGUEL

      -Resumen del análisis-
      Tipo de análisis: Análisis de amenazas
      Resultado: Completado
      Objetos analizados: 275233
      Amenazas detectadas: 0
      (No hay elementos maliciosos detectados)
      Amenazas en cuarentena: 0
      (No hay elementos maliciosos detectados)
      Tiempo transcurrido: 7 min, 1 seg

      -Opciones de análisis-
      Memoria: Activado
      Inicio: Activado
      Sistema de archivos: Activado
      Archivo: Activado
      Rootkits: Desactivado
      Heurística: Activado
      PUP: Detectar
      PUM: Detectar

      -Detalles del análisis-
      Proceso: 0
      (No hay elementos maliciosos detectados)

      Módulo: 0
      (No hay elementos maliciosos detectados)

      Clave del registro: 0
      (No hay elementos maliciosos detectados)

      Valor del registro: 0
      (No hay elementos maliciosos detectados)

      Datos del registro: 0
      (No hay elementos maliciosos detectados)

      Secuencia de datos: 0
      (No hay elementos maliciosos detectados)

      Carpeta: 0
      (No hay elementos maliciosos detectados)

      Archivo: 0

      Registro de ZHpCleaner:

      ~ ZHPCleaner v2017.12.18.217 by Nicolas Coolman (2017/12/18)
      ~ Run by MIGUEL (Administrator) (21/12/2017 20:34:58)
      ~ Web: https://www.nicolascoolman.com
      ~ Blog: https://nicolascoolman.eu/
      ~ Facebook : https://www.facebook.com/nicolascoolman1
      ~ State version : Version OK
      ~ Certificate ZHPCleaner: Legal
      ~ Type : Reparar
      ~ Report : C:\Users\MIGUEL\Desktop\ZHPCleaner.txt
      ~ Quarantine : C:\Users\MIGUEL\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
      ~ UAC : Activate
      ~ Boot Mode : Normal (Normal boot)
      Windows 7 Home Premium, 64-bit (Build 7600)


      ---\\ Servicios (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Navegadores de Internet (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Archivo hosts (1)
      ~ El archivo hosts es legítimo (21)


      ---\\ Tareas automáticas programadas. (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Explorador ( Archivos, Carpetas ) (15)
      MOVIDO carpeta: C:\END =>.SUP.Conduit
      MOVIDO carpeta: C:\Users\MIGUEL\Downloads\Office 2010 Toolkit.exe [CODYQX4 & Bosh - Office 2010 Toolkit] =>Hacktool.Office
      MOVIDO carpeta: C:\Users\MIGUEL\Downloads\activador de office2010 marlon tutos\activador de office2010 marlon tutos\Activador Oficce 2010\Office 2010 Toolkit.exe [CODYQX4 & Bosh - Office 2010 Toolkit] =>HackTool.WinActivator
      MOVIDO carpeta: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
      MOVIDO carpeta: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
      MOVIDO archivo*: C:\Users\MIGUEL\AppData\Roaming\PDAppFlex =>Trojan.Elpman
      MOVIDO archivo*: C:\Program Files (x86)\Toolbar Cleaner =>PUP.Optional.ToolbarCleaner
      MOVIDO archivo*: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
      MOVIDO archivo*: C:\ProgramData\Partner =>Toolbar.YahooPartner
      MOVIDO archivo*: C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} =>PUP.Optional.Generic
      MOVIDO archivo*: C:\Windows\AutoKMS =>HackTool.AutoKMS
      MOVIDO archivo*: C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare
      MOVIDO archivo*: C:\ProgramData\Application Data\IObit\ASCDownloader =>.SUP.AdvancedSystemCare
      MOVIDO archivo: C:\ProgramData\IObit\ASCDownloader =>.SUP.AdvancedSystemCare
      MOVIDO archivo*: C:\Users\MIGUEL\AppData\Roaming\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare


      ---\\ Registro ( Claves, Valores, Datos) (25)
      BORRADOS dados: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{54EF4412-EC6F-46A3-AABE-41E1AB802DF9}\\NameServer [Bad : 0.0.0.0] =>Hijacker.Browser
      BORRADOS clave*: HKEY_USERS\S-1-5-21-2183408265-664017598-3477349624-1001\SOFTWARE\Softonic [] =>.SUP.Softonic
      BORRADOS clave: HKCU\Software\Softonic [] =>.SUP.Softonic
      BORRADOS clave*: HKLM\SOFTWARE\Iobit\ASC [] =>.SUP.AdvancedSystemCare
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho [Google Toolbar Notifier BHO] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 [Google Toolbar Notifier BHO] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector [Protector Class] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [Protector Class] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [ProtectorLib Class] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [ProtectorLib Class] =>Adware.BProtector
      BORRADOS clave*: HKLM\SYSTEM\CurrentControlSet\Services\IObitUnSvr [] =>.SUP.Elex
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5} [C:\Program Files (x86)\Toolbar Cleaner (Not File)] =>PUP.Optional.ToolbarCleaner
      BORRADOS clave: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASAPI32 [] =>PUP.Optional.ToolbarCleaner
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASMANCS [] =>PUP.Optional.ToolbarCleaner
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ASKInstaller_RASAPI32 [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ASKInstaller_RASMANCS [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Offercast3130_ATU3__RASAPI32 [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Offercast3130_ATU3__RASMANCS [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_aida32_RASAPI32 [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_aida32_RASMANCS [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_sharepod_RASAPI32 [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_sharepod_RASMANCS [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5} [C:\Program Files (x86)\Toolbar Cleaner (Not File)] =>PUP.Optional.ToolbarCleaner


      ---\\ Resumen de elementos en su estación de trabajo (15)
      https://nicolascoolman.eu/2017/02/06...luous-conduit/ =>.SUP.Conduit
      https://nicolascoolman.eu/2017/01/27...-et-infection/ =>Hacktool.Office
      https://nicolascoolman.eu/2017/01/13...-winactivator/ =>HackTool.WinActivator
      https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS
      https://nicolascoolman.eu/2017/09/23/trojan-elpman/ =>Trojan.Elpman
      https://www.nicolascoolman.com/fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>Toolbar.YahooPartner
      https://nicolascoolman.eu/2017/01/27...-et-infection/ =>PUP.Optional.Generic
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>.SUP.AdvancedSystemCare
      https://nicolascoolman.eu/2017/11/10...ker-browser-3/ =>Hijacker.Browser
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>.SUP.Softonic
      https://nicolascoolman.eu/2017/04/12/adware-bprotector/ =>Adware.BProtector
      https://nicolascoolman.eu/2017/01/27...-et-infection/ =>PUP.Optional.Camec
      https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.SUP.Elex
      https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask


      ---\\ Limpieza adicional. (223)
      ~ Clave de registro Tracing borrados (223)
      ~ Quitar los antiguos informes de ZHPCleaner. (0)


      ---\\ Resultado de la reparación.
      ~ Reparación llevada a cabo con éxito
      ~ falta este navegador! (Opera Software)


      ---\\ Statistiques
      ~ Items escaneado : 1472
      ~ Items encontrado : 0
      ~ artículos cancelados : 0
      ~ Items reparado : 40


      ~ End of clean in 00h00mn49s
      ~====================
      ZHPCleaner-[R]-21122017-20_35_47.txt
      ZHPCleaner-[S]-21122017-20_31_53.txt

      Registro de AdWCleaner:

      ~ ZHPCleaner v2017.12.18.217 by Nicolas Coolman (2017/12/18)
      ~ Run by MIGUEL (Administrator) (21/12/2017 20:34:58)
      ~ Web: https://www.nicolascoolman.com
      ~ Blog: https://nicolascoolman.eu/
      ~ Facebook : https://www.facebook.com/nicolascoolman1
      ~ State version : Version OK
      ~ Certificate ZHPCleaner: Legal
      ~ Type : Reparar
      ~ Report : C:\Users\MIGUEL\Desktop\ZHPCleaner.txt
      ~ Quarantine : C:\Users\MIGUEL\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
      ~ UAC : Activate
      ~ Boot Mode : Normal (Normal boot)
      Windows 7 Home Premium, 64-bit (Build 7600)


      ---\\ Servicios (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Navegadores de Internet (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Archivo hosts (1)
      ~ El archivo hosts es legítimo (21)


      ---\\ Tareas automáticas programadas. (0)
      ~ No malintencionados o innecesarios artículos encontrados.


      ---\\ Explorador ( Archivos, Carpetas ) (15)
      MOVIDO carpeta: C:\END =>.SUP.Conduit
      MOVIDO carpeta: C:\Users\MIGUEL\Downloads\Office 2010 Toolkit.exe [CODYQX4 & Bosh - Office 2010 Toolkit] =>Hacktool.Office
      MOVIDO carpeta: C:\Users\MIGUEL\Downloads\activador de office2010 marlon tutos\activador de office2010 marlon tutos\Activador Oficce 2010\Office 2010 Toolkit.exe [CODYQX4 & Bosh - Office 2010 Toolkit] =>HackTool.WinActivator
      MOVIDO carpeta: C:\Windows\AutoKMS\AutoKMS.exe [CODYQX4 - AutoKMS] =>HackTool.AutoKMS
      MOVIDO carpeta: C:\Windows\AutoKMS\AutoKMS.log =>HackTool.AutoKMS
      MOVIDO archivo*: C:\Users\MIGUEL\AppData\Roaming\PDAppFlex =>Trojan.Elpman
      MOVIDO archivo*: C:\Program Files (x86)\Toolbar Cleaner =>PUP.Optional.ToolbarCleaner
      MOVIDO archivo*: C:\ProgramData\Microsoft Toolkit =>HackTool.AutoKMS
      MOVIDO archivo*: C:\ProgramData\Partner =>Toolbar.YahooPartner
      MOVIDO archivo*: C:\ProgramData\{BAF091CA-86C4-4627-ADA1-897E2621C1B0} =>PUP.Optional.Generic
      MOVIDO archivo*: C:\Windows\AutoKMS =>HackTool.AutoKMS
      MOVIDO archivo*: C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare
      MOVIDO archivo*: C:\ProgramData\Application Data\IObit\ASCDownloader =>.SUP.AdvancedSystemCare
      MOVIDO archivo: C:\ProgramData\IObit\ASCDownloader =>.SUP.AdvancedSystemCare
      MOVIDO archivo*: C:\Users\MIGUEL\AppData\Roaming\IObit\Advanced SystemCare =>.SUP.AdvancedSystemCare


      ---\\ Registro ( Claves, Valores, Datos) (25)
      BORRADOS dados: HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{54EF4412-EC6F-46A3-AABE-41E1AB802DF9}\\NameServer [Bad : 0.0.0.0] =>Hijacker.Browser
      BORRADOS clave*: HKEY_USERS\S-1-5-21-2183408265-664017598-3477349624-1001\SOFTWARE\Softonic [] =>.SUP.Softonic
      BORRADOS clave: HKCU\Software\Softonic [] =>.SUP.Softonic
      BORRADOS clave*: HKLM\SOFTWARE\Iobit\ASC [] =>.SUP.AdvancedSystemCare
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho [Google Toolbar Notifier BHO] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1 [Google Toolbar Notifier BHO] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector [Protector Class] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.Protector.1 [Protector Class] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib [ProtectorLib Class] =>Adware.BProtector
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\protector_dll.ProtectorLib.1 [ProtectorLib Class] =>Adware.BProtector
      BORRADOS clave*: HKLM\SYSTEM\CurrentControlSet\Services\IObitUnSvr [] =>.SUP.Elex
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5} [C:\Program Files (x86)\Toolbar Cleaner (Not File)] =>PUP.Optional.ToolbarCleaner
      BORRADOS clave: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56} [secman] =>PUP.Optional.Camec
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASAPI32 [] =>PUP.Optional.ToolbarCleaner
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\adawarebp_RASMANCS [] =>PUP.Optional.ToolbarCleaner
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ASKInstaller_RASAPI32 [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\ASKInstaller_RASMANCS [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Offercast3130_ATU3__RASAPI32 [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\Offercast3130_ATU3__RASMANCS [] =>Toolbar.Ask
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_aida32_RASAPI32 [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_aida32_RASMANCS [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_sharepod_RASAPI32 [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_para_sharepod_RASMANCS [] =>.SUP.Softonic
      BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62155D33-3CE2-401E-8967-5A270628A3D5} [C:\Program Files (x86)\Toolbar Cleaner (Not File)] =>PUP.Optional.ToolbarCleaner


      ---\\ Resumen de elementos en su estación de trabajo (15)
      https://nicolascoolman.eu/2017/02/06...luous-conduit/ =>.SUP.Conduit
      https://nicolascoolman.eu/2017/01/27...-et-infection/ =>Hacktool.Office
      https://nicolascoolman.eu/2017/01/13...-winactivator/ =>HackTool.WinActivator
      https://nicolascoolman.eu/2017/02/02/hacktool-autokms/ =>HackTool.AutoKMS
      https://nicolascoolman.eu/2017/09/23/trojan-elpman/ =>Trojan.Elpman
      https://www.nicolascoolman.com/fr/pup-toolbarcleaner/ =>PUP.Optional.ToolbarCleaner
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>Toolbar.YahooPartner
      https://nicolascoolman.eu/2017/01/27...-et-infection/ =>PUP.Optional.Generic
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>.SUP.AdvancedSystemCare
      https://nicolascoolman.eu/2017/11/10...ker-browser-3/ =>Hijacker.Browser
      https://nicolascoolman.eu/2017/01/20...els-superflus/ =>.SUP.Softonic
      https://nicolascoolman.eu/2017/04/12/adware-bprotector/ =>Adware.BProtector
      https://nicolascoolman.eu/2017/01/27...-et-infection/ =>PUP.Optional.Camec
      https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.SUP.Elex
      https://nicolascoolman.eu/2017/02/28/toolbar-ask/ =>Toolbar.Ask


      ---\\ Limpieza adicional. (223)
      ~ Clave de registro Tracing borrados (223)
      ~ Quitar los antiguos informes de ZHPCleaner. (0)


      ---\\ Resultado de la reparación.
      ~ Reparación llevada a cabo con éxito
      ~ falta este navegador! (Opera Software)


      ---\\ Statistiques
      ~ Items escaneado : 1472
      ~ Items encontrado : 0
      ~ artículos cancelados : 0
      ~ Items reparado : 40


      ~ End of clean in 00h00mn49s
      ~====================
      ZHPCleaner-[R]-21122017-20_35_47.txt
      ZHPCleaner-[S]-21122017-20_31_53.txt

      Muchas gracias @Leosolari por tu tiempo

    5. #5
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.878

      Re: Problemas con el consumo de cpu de google chrome

      Hola


      Descargá la herramienta Delfix a Tu escritorio.

      Ejecutala, Tildá la casilla Remove disinfection tools y presioná Run

      Al terminar Se abrirá un reporte llamado DelFix.txt, verifica que se hayan eliminado las herramientas usadas para desinfectar el Pc.



      Nos comentas como sigue ...



      Saludos
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    6. #6
      Usuario Avatar de kanoute74
      Registrado
      dic 2017
      Ubicación
      españa
      Mensajes
      9

      Re: Problemas con el consumo de cpu de google chrome

      Correcto, se han eliminado las herramientas usadas y el reporte es el siguiente

      # DelFix v1.010 - Logfile created 21/12/2017 at 22:18:25
      # Updated 26/04/2015 by Xplode
      # Username : MIGUEL - MIGUEL-PC
      # Operating System : Windows 7 Home Premium (64 bits)

      ~ Removing disinfection tools ...

      Deleted : C:\AdwCleaner
      Deleted : C:\log.txt
      Deleted : C:\Users\MIGUEL\Desktop\AdwCleaner.exe
      Deleted : C:\Users\MIGUEL\Desktop\AdwCleaner[C0].txt
      Deleted : C:\Users\MIGUEL\Desktop\ZHPCleaner.exe
      Deleted : C:\Users\MIGUEL\Desktop\ZHPCleaner.lnk
      Deleted : C:\Users\MIGUEL\Desktop\ZHPCleaner.txt

      ########## - EOF - ##########

    7. #7
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.878

      Re: Problemas con el consumo de cpu de google chrome

      .-.

      Y como sigue el problema que planteaste inicialmente ?
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    8. #8
      Usuario Avatar de kanoute74
      Registrado
      dic 2017
      Ubicación
      españa
      Mensajes
      9

      Re: Problemas con el consumo de cpu de google chrome

      de momento la aplicacion svchost.exe sigue igual se queda en 26% de cpu un consumo de ram
      de 408.636 kb

    9. #9
      Moderador Gral.
      Avatar de @Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      58.878

      Re: Problemas con el consumo de cpu de google chrome

      Hola


      Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

      Descarga a Tu Escritorio Farbar Recovery Scan Tool considerando la versión adecuada para tu equipo.

      ¿Cómo saber si mi Windows es de 32 o 64 bits?


      Doble clic para ejecutar Frst.exe. En la ventana del Disclaimer, presiona Yes.

      En la nueva ventana que se abre, presiona el botón Scan y espera a que concluya el análisis.

      Se abrirán dos (2) archivos (Logs), Frst.txt y Addition.txt, que estarán grabados en Tu escritorio.


      En Tu próxima respuesta, [B]copias y pegas el reporte Frst.txt de FRST


      Saludos
      Síguenos en Twitter y hazte nuestro amigo en Facebook.

    10. #10
      Usuario Avatar de kanoute74
      Registrado
      dic 2017
      Ubicación
      españa
      Mensajes
      9

      Re: Problemas con el consumo de cpu de google chrome

      buenas tardes Leosolari.
      los reportes son los siguientes:
      Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-12-2017
      Ran by MIGUEL (administrator) on MIGUEL-PC (22-12-2017 20:39:39)
      Running from C:\Users\MIGUEL\Desktop
      Loaded Profiles: MIGUEL (Available Profiles: MIGUEL)
      Platform: Windows 7 Home Premium (X64) Language: Español (España, internacional)
      Internet Explorer Version 8 (Default browser: IE)
      Boot Mode: Normal
      Tutorial for Farbar Recovery Scan Tool: ***********************************************************************************************************

      ==================== Processes (Whitelisted) =================

      (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

      (ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
      (ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
      (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
      (Microsoft Corporation) C:\Windows\System32\wlanext.exe
      (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
      (Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
      (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
      (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
      (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
      (ASUS) C:\Windows\AsScrPro.exe
      (CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
      (Intel Corporation) C:\Windows\System32\igfxpers.exe
      (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
      () C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
      (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
      (Intel Corporation) C:\Windows\System32\igfxtray.exe
      (Intel Corporation) C:\Windows\System32\hkcmd.exe
      (ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
      (Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
      (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
      (LULU SOFTWARE LIMITED) C:\Program Files (x86)\Soda PDF 7\creator-ws.exe
      (DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
      (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
      (SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Premium Sound Control Panel\SRSPremiumPanel_64.exe
      () C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
      (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
      (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
      (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
      (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
      (Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
      (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
      (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
      (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
      (Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
      (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
      (ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
      (ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe
      () C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
      (ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
      (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
      (HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
      (HP Inc.) C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe
      (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
      (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
      (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
      (Microsoft Corporation) C:\Windows\System32\dllhost.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Microsoft Corporation) C:\Windows\System32\taskmgr.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
      (BitTorrent Inc.) C:\Users\MIGUEL\AppData\Roaming\uTorrent\uTorrent.exe
      (BitTorrent Inc.) C:\Users\MIGUEL\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe
      (BitTorrent Inc.) C:\Users\MIGUEL\AppData\Roaming\uTorrent\updates\3.5.0_44294\utorrentie.exe
      (Microsoft Corporation) C:\Windows\System32\msiexec.exe
      (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

      ==================== Registry (Whitelisted) ===========================

      (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

      HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1928976 2010-03-05] (Intel(R) Corporation)
      HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [621440 2009-09-30] (ELAN Microelectronic Corp.)
      HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-07-01] (Adobe Systems Incorporated)
      HKLM\...\Run: [Windows Mobile Device Center] => C:\Windows\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
      HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1597440 2010-08-12] ()
      HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
      HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3567928 2017-12-05] (Dropbox, Inc.)
      HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [1871344 2017-11-04] (Adobe Systems Inc.)
      HKLM-x32\...\Run: [] => [X]
      Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [10249048 2017-12-13] (Piriform Ltd)
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {0b2fb28e-5974-11e6-9293-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {17d1bba9-4252-11e5-b956-bcaec59f7440} - F:\Startme.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {30a40532-5fd9-11e6-bf06-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {30a40597-5fd9-11e6-bf06-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {3614d866-59b1-11e7-96f8-bcaec59f7440} - F:\Startme.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {74640ff7-489b-11e6-8003-bcaec59f7440} - F:\autorun.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {74641028-489b-11e6-8003-bcaec59f7440} - F:\autorun.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {746410e0-489b-11e6-8003-bcaec59f7440} - F:\autorun.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {7a1679bd-12b8-11e7-954c-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {7a1679c8-12b8-11e7-954c-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {95024987-f1ff-11e6-ba80-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {b09dc4fc-b597-11e6-beb7-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {b73fd0a9-4d89-11e4-9bfb-bcaec59f7440} - G:\Startme.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {ec04410c-60fe-11e6-baad-bcaec59f7440} - F:\HiSuiteDownLoader.exe
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\...\MountPoints2: {f6e8b476-a4f4-11e7-8140-bcaec59f7440} - F:\Startme.exe
      Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk [2014-04-14]
      ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe (ASUSTeK Computer Inc.)
      Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SRS Premium Sound.lnk [2010-12-14]
      ShortcutTarget: SRS Premium Sound.lnk -> C:\Windows\Installer\{E5CF6B9C-3ABE-43C9-9413-AD5FFC98F049}\NewShortcut5_21C7B668029A47458B27645FE6E4A715.exe (Acresso Software Inc.)

      ==================== Internet (Whitelisted) ====================

      (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

      ProxyServer: [.DEFAULT] => :0
      ProxyServer: [S-1-5-21-2183408265-664017598-3477349624-1001] => :0
      Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1
      Tcpip\..\Interfaces\{CB97592E-0D94-4D59-9011-78AC24C53555}: [DhcpNameServer] 192.168.43.1
      Tcpip\..\Interfaces\{F4333E96-4A85-499C-A655-F8270FAAD700}: [DhcpNameServer] 192.168.0.1 192.168.0.1

      Internet Explorer:
      ==================
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
      HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
      HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.es/
      HKU\S-1-5-21-2183408265-664017598-3477349624-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
      SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
      SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=MAAU&src=IE-SearchBox
      SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
      SearchScopes: HKU\S-1-5-21-2183408265-664017598-3477349624-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
      SearchScopes: HKU\S-1-5-21-2183408265-664017598-3477349624-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ASUT
      BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2016-05-23] (IObit)
      BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
      BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2014-10-25] (Oracle Corporation)
      BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
      BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-25] (Google Inc.)
      BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2014-01-23] (Microsoft Corporation)
      BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
      BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-10-25] (Oracle Corporation)
      BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      BHO-x32: Soda PDF 7 Helper -> {1D31AA81-4D4B-4BFB-B3AF-B6DDD6DF43B1} -> C:\Program Files (x86)\Soda PDF 7\creator-ie-helper.dll [2015-01-06] (LULU SOFTWARE LIMITED)
      BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-12-12] (Oracle Corporation)
      BHO-x32: Aplicación auxiliar de inicio de sesión de Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.)
      BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2011-05-13] (Microsoft Corporation)
      BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-25] (Google Inc.)
      BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2014-01-22] (Microsoft Corporation)
      BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-01-21] (Microsoft Corporation)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-12-12] (Oracle Corporation)
      BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-25] (Google Inc.)
      Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      Toolbar: HKLM-x32 - Soda PDF 7 Toolbar - {7C68E87F-4487-4AE5-BBC2-C398C530DE9A} - C:\Program Files (x86)\Soda PDF 7\creator-ie-plugin.dll [2015-01-06] (LULU SOFTWARE LIMITED)
      Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2016-04-25] (Google Inc.)
      Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      Toolbar: HKU\S-1-5-21-2183408265-664017598-3477349624-1001 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2016-04-25] (Google Inc.)
      Toolbar: HKU\S-1-5-21-2183408265-664017598-3477349624-1001 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2016-12-23] (Adobe Systems Incorporated)
      DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
      Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2015-02-17] (Microsoft Corporation)
      Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2013-03-02] (Microsoft Corporation)
      Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2013-03-02] (Microsoft Corporation)
      Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2013-03-02] (Microsoft Corporation)
      Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2013-03-02] (Microsoft Corporation)

      FireFox:
      ========
      FF DefaultProfile: zpcbg4u5.default
      FF ProfilePath: C:\Users\MIGUEL\AppData\Roaming\Mozilla\Firefox\Profiles\zpcbg4u5.default [2017-12-22]
      FF Extension: (signTextJS) - C:\Users\MIGUEL\AppData\Roaming\Mozilla\Firefox\Profiles\zpcbg4u5.default\Extensions\[email protected] [2017-12-18] [Legacy]
      FF HKLM\...\Firefox\Extensions: [web2pdfext[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
      FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2017-11-27]
      FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird => not found
      FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Soda PDF 7\resources\sodapdf7firefoxextension
      FF Extension: (Soda PDF 7 Creator) - C:\Program Files (x86)\Soda PDF 7\resources\sodapdf7firefoxextension [2015-02-05] [Legacy] [not signed]
      FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
      FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_28_0_0_126.dll [2017-12-13] ()
      FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-10-25] (Oracle Corporation)
      FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-10-25] (Oracle Corporation)
      FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
      FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
      FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_28_0_0_126.dll [2017-12-13] ()
      FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll [2013-09-17] (DivX, LLC.)
      FF Plugin-x32: @java.com/DTPlugin,version=10.72.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-12-12] (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=10.72.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2014-12-12] (Oracle Corporation)
      FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
      FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-05-21] (Microsoft Corporation)
      FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
      FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
      FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
      FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2017-11-04] (Adobe Systems Inc.)
      FF Plugin-x32: Soda PDF 7 -> C:\Program Files (x86)\Soda PDF 7\np-previewer.dll [2015-01-06] (LULU SOFTWARE LIMITED)

      Chrome:
      =======
      CHR DefaultProfile: Default
      CHR HomePage: Default -> hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-03-02&ent=hp&u=182511923B9E42799F2B0C5312744DD7
      CHR StartupUrls: Default -> "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_8&idate=2014-03-02&ent=hp&u=182511923B9E42799F2B0C5312744DD7","hxxp://www.google.com/ig/redirectdomain?brand=ASUT&bmod=ASUT"
      CHR Profile: C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default [2017-12-22]
      CHR Extension: (Google Drive) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-23]
      CHR Extension: (YouTube) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-28]
      CHR Extension: (Adblock Plus) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-09-29]
      CHR Extension: (Búsqueda de Google) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
      CHR Extension: (Documentos de Google sin conexión) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
      CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-08-23]
      CHR Extension: (Gmail) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
      CHR Extension: (Chrome Media Router) - C:\Users\MIGUEL\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-12-15]
      CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
      CHR HKLM-x32\...\Chrome\Extension: [oejkcgajlodefenbbjdnaiahmbnnoole] - <no Path/update_url>

      ==================== Services (Whitelisted) ====================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      R3 ADSMService; C:\Program Files (x86)\ASUS\ASUS Data Security Manager\ADSMSrv.exe [225280 2008-03-31] (ASUSTek Computer Inc.) [File not signed]
      R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2257016 2017-08-23] (Adobe Systems, Incorporated)
      S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)
      S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2017-03-28] (Dropbox, Inc.)
      R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [51016 2017-12-05] (Dropbox, Inc.)
      S2 DroidExplorerService; C:\Program Files\Droid Explorer\DroidExplorer.Service.exe [254976 2013-08-25] (Ryan Conrad) [File not signed]
      R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2770312 2017-04-24] (ESET)
      R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [332144 2017-11-21] (HP Inc.)
      R2 HPTouchpointAnalyticsService; C:\Program Files\HP\HP Touchpoint Analytics Client\TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc.)
      R2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [192200 2016-08-26] () [File not signed]
      R2 LMS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [262144 2009-10-01] (Intel Corporation) [File not signed]
      R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6234056 2017-11-01] (Malwarebytes)
      S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-03-05] ()
      S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1451336 2017-12-18] (Overwolf LTD)
      R3 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [244904 2010-04-06] () [File not signed]
      S2 SODA Manager; C:\ProgramData\LULU Software\Soda Manager\Soda Manager.exe [868688 2015-01-29] (LULU Software Limited)
      S3 Soda PDF 7; C:\Program Files (x86)\Soda PDF 7\ws.exe [2127160 2015-01-06] (LULU SOFTWARE LIMITED)
      S3 Soda PDF 7 CrashHandler; C:\Program Files (x86)\Soda PDF 7\crash-handler-ws.exe [785720 2015-01-06] (LULU SOFTWARE LIMITED)
      R2 Soda PDF 7 Creator; C:\Program Files (x86)\Soda PDF 7\creator-ws.exe [622904 2015-01-06] (LULU SOFTWARE LIMITED)
      R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
      R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10803952 2017-12-05] (TeamViewer GmbH)
      R2 UNS; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2314240 2009-10-01] (Intel Corporation) [File not signed]
      R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

      ===================== Drivers (Whitelisted) ======================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

      S3 awUSB; C:\Windows\System32\DRIVERS\USBDrv_AMD64.sys [17280 2015-09-02] (Scott)
      R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [262792 2017-04-24] (ESET)
      U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [251632 2015-07-14] (ESET)
      R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [197248 2017-04-24] (ESET)
      R2 ekbdflt; C:\Windows\System32\DRIVERS\ekbdflt.sys [153216 2017-04-24] (ESET)
      R1 epfw; C:\Windows\System32\DRIVERS\epfw.sys [208520 2017-04-24] (ESET)
      R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [61568 2017-04-24] (ESET)
      R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [84616 2017-04-24] (ESET)
      R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77432 2017-11-29] ()
      R1 eusk2par; C:\Windows\system32\Drivers\eusk2par-amd64.sys [32336 2008-12-18] (Aladdin Knowledge Systems Ltd.)
      S3 HWHandSet; C:\Windows\System32\DRIVERS\hw_quusbmdm.sys [223232 2016-05-25] (Huawei Technologies Co., Ltd.)
      U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2016-05-25] (Huawei Technologies Co., Ltd.)
      R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-04-24] (Intel Corporation)
      R3 int0800; C:\Windows\System32\DRIVERS\flashud.sys [51712 2009-09-09] (Intel Corporation)
      R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
      R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [193968 2017-12-21] (Malwarebytes)
      R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [110016 2017-12-21] (Malwarebytes)
      R3 MBAMProtection; C:\Windows\System32\DRIVERS\mbam.sys [46008 2017-12-21] (Malwarebytes)
      R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [253880 2017-12-21] (Malwarebytes)
      R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [84256 2017-12-22] (Malwarebytes)
      S3 PSKMAD; C:\Windows\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.)
      R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
      S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
      R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33448 2015-07-18] (Synaptics Incorporated)
      R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1800832 2010-09-07] (Sonix Technology Co., Ltd.)
      S3 dbx; system32\DRIVERS\dbx.sys [X]
      S3 EsgScanner; system32\DRIVERS\EsgScanner.sys [X]
      U3 tmlwf; no ImagePath
      U3 tmwfp; no ImagePath

      ==================== NetSvcs (Whitelisted) ===================

      (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


      ==================== One Month Created files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2017-12-22 20:39 - 2017-12-22 20:40 - 000029279 _____ C:\Users\MIGUEL\Desktop\FRST.txt
      2017-12-22 20:39 - 2017-12-22 20:39 - 000000000 ____D C:\FRST
      2017-12-22 20:38 - 2017-12-22 20:38 - 002392064 _____ (Farbar) C:\Users\MIGUEL\Desktop\FRST64.exe
      2017-12-22 20:35 - 2017-12-22 20:35 - 3059910319 _____ C:\Users\MIGUEL\Downloads\Bright m720p www.DESCARGASMIX.com.mkv
      2017-12-22 20:33 - 2017-12-22 20:33 - 000000000 ____D C:\Users\MIGUEL\AppData\LocalLow\uTorrent
      2017-12-21 22:18 - 2017-12-21 22:18 - 000000552 _____ C:\DelFix.txt
      2017-12-21 21:23 - 2017-12-21 21:23 - 000001543 _____ C:\Users\MIGUEL\Desktop\malwarebytes informe.txt
      2017-12-21 21:21 - 2017-12-22 20:32 - 000084256 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
      2017-12-21 21:21 - 2017-12-21 22:46 - 000253880 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
      2017-12-21 21:21 - 2017-12-21 22:46 - 000110016 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
      2017-12-21 21:21 - 2017-12-21 22:46 - 000046008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
      2017-12-21 21:21 - 2017-12-21 21:21 - 000193968 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
      2017-12-21 21:19 - 2017-12-21 21:19 - 083316440 _____ (Malwarebytes ) C:\Users\MIGUEL\Downloads\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.3374 (1).exe
      2017-12-21 21:01 - 2017-12-21 21:01 - 000010542 _____ C:\Users\MIGUEL\Documents\cc_20171221_210023.reg
      2017-12-21 20:54 - 2017-12-21 20:54 - 000003872 _____ C:\Windows\System32\Tasks\CCleaner Update
      2017-12-21 20:20 - 2017-12-21 20:35 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\ZHP
      2017-12-21 20:20 - 2017-12-21 20:20 - 000000000 ____D C:\Users\MIGUEL\AppData\Local\ZHP
      2017-12-20 18:42 - 2017-12-21 20:20 - 000003758 _____ C:\Windows\System32\Tasks\AutoKMS
      2017-12-19 01:54 - 2017-12-21 19:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
      2017-12-16 23:16 - 2017-12-16 23:32 - 518918463 _____ C:\Users\MIGUEL\Downloads\atvx86-nougat.7z
      2017-12-15 19:31 - 2017-12-15 19:31 - 000001869 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
      2017-12-15 19:31 - 2017-12-15 19:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
      2017-12-15 19:31 - 2017-12-15 19:31 - 000000000 ____D C:\Program Files\Malwarebytes
      2017-12-15 19:31 - 2017-11-29 09:11 - 000077432 _____ C:\Windows\system32\Drivers\mbae64.sys
      2017-12-15 19:29 - 2017-12-15 19:29 - 083316440 _____ (Malwarebytes ) C:\Users\MIGUEL\Downloads\mb3-setup-consumer-3.3.1.2183-1.0.262-1.0.3374.exe
      2017-12-12 20:08 - 2017-12-12 20:10 - 344076485 _____ C:\Users\MIGUEL\Downloads\Devour by SansMinds Creative Lab.mp4
      2017-12-10 23:40 - 2017-12-10 23:40 - 000708284 _____ C:\Users\MIGUEL\Downloads\1512945616592.pdf
      2017-12-07 00:53 - 2017-12-07 00:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
      2017-12-05 02:06 - 2017-12-05 02:06 - 000051016 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
      2017-12-05 02:06 - 2017-12-05 02:06 - 000045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
      2017-12-05 02:06 - 2017-12-05 02:06 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
      2017-12-05 02:06 - 2017-12-05 02:06 - 000045640 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
      2017-12-02 03:46 - 2017-12-02 03:46 - 126925120 ____C (Microsoft Corporation) C:\Windows\system32\MRT-KB890830.exe
      2017-12-02 03:18 - 2017-12-02 03:18 - 000000000 ____D C:\Users\Default\AppData\Local\Microsoft Help
      2017-12-02 03:18 - 2017-12-02 03:18 - 000000000 ____D C:\Users\Default User\AppData\Local\Microsoft Help
      2017-12-01 19:39 - 2017-12-01 19:40 - 000000000 ____D C:\Users\MIGUEL\AppData\Local\Apps\Windows 7 USB DVD Download Tool
      2017-12-01 19:39 - 2017-12-01 19:39 - 000002528 _____ C:\Users\MIGUEL\Desktop\Windows 7 USB DVD Download Tool.lnk
      2017-12-01 19:39 - 2017-12-01 19:39 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows 7 USB DVD Download Tool
      2017-12-01 19:38 - 2017-12-01 19:38 - 002721168 _____ (Microsoft Corporation) C:\Users\MIGUEL\Downloads\Windows7-USB-DVD-Download-Tool-Installer-en-US.exe
      2017-12-01 06:09 - 2017-12-01 06:09 - 000000000 ____D C:\Users\MIGUEL\Documents\Plantillas personalizadas de Office
      2017-11-30 20:42 - 2017-11-30 20:42 - 000003701 _____ C:\Users\MIGUEL\Downloads\MeControlMediumUserTile
      2017-11-29 22:54 - 2017-11-29 22:54 - 000012636 _____ C:\Users\MIGUEL\Downloads\101996_trolls-holiday-bluray-rip-ac3-2-0-espaa-a-ol-latino-2017 (1).torrent
      2017-11-29 22:53 - 2017-11-29 22:54 - 000012636 _____ C:\Users\MIGUEL\Downloads\101996_trolls-holiday-bluray-rip-ac3-2-0-espaa-a-ol-latino-2017.torrent
      2017-11-29 00:17 - 2017-12-02 03:54 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
      2017-11-29 00:17 - 2017-11-29 00:17 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
      2017-11-29 00:16 - 2017-11-29 00:16 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
      2017-11-29 00:15 - 2017-11-29 00:15 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
      2017-11-29 00:14 - 2017-11-29 00:16 - 000000000 ____D C:\Program Files\Microsoft SQL Server
      2017-11-29 00:14 - 2017-11-29 00:14 - 000000000 ____D C:\Windows\PCHEALTH
      2017-11-29 00:10 - 2017-11-29 00:14 - 000000000 ____D C:\Program Files\Microsoft Office
      2017-11-29 00:10 - 2017-11-29 00:10 - 000000000 ____D C:\Users\MIGUEL\AppData\Local\Microsoft Help
      2017-11-29 00:10 - 2017-11-29 00:10 - 000000000 ____D C:\Program Files\Microsoft Analysis Services
      2017-11-29 00:10 - 2017-11-29 00:10 - 000000000 ____D C:\Program Files (x86)\Microsoft Analysis Services
      2017-11-29 00:08 - 2017-11-29 00:08 - 000000000 __RHD C:\MSOCache
      2017-11-28 23:38 - 2017-11-28 23:38 - 000017330 _____ C:\Users\MIGUEL\Downloads\mirosoft-office-proffesional-plus-2013x64.torrent
      2017-11-28 21:31 - 2017-11-28 21:31 - 000000715 _____ C:\Users\MIGUEL\Downloads\Settings.ini
      2017-11-28 21:24 - 2017-11-28 21:24 - 000000000 ____D C:\Users\MIGUEL\Downloads\activador de office2010 marlon tutos
      2017-11-28 21:23 - 2017-11-28 21:23 - 012653570 _____ C:\Users\MIGUEL\Downloads\activador de office2010 marlon tutos.rar
      2017-11-28 21:15 - 2017-11-28 21:15 - 000050125 _____ C:\Users\MIGUEL\Downloads\DIOS SE HACE HOMBRE.pdf
      2017-11-28 21:13 - 2017-11-28 21:32 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\.oit
      2017-11-28 21:12 - 2017-11-28 21:12 - 000003135 _____ C:\Windows\SysWOW64\FoxPowerPointVUninstall.ini
      2017-11-28 21:12 - 2017-11-28 21:12 - 000002202 _____ C:\Users\MIGUEL\AppData\Roaming\Microsoft\Windows\Start Menu\PPTX Viewer 2.0.lnk
      2017-11-28 21:12 - 2017-11-28 21:12 - 000002178 _____ C:\Users\MIGUEL\Desktop\PPTX Viewer 2.0.lnk
      2017-11-28 21:12 - 2017-11-28 21:12 - 000000000 ____D C:\Program Files (x86)\FoxPDF Software Inc
      2017-11-28 21:11 - 2017-11-28 21:12 - 011786751 _____ (FoxPDF Software Inc ) C:\Users\MIGUEL\Downloads\PPTXViewer.exe
      2017-11-28 21:03 - 2017-11-28 21:03 - 000000000 ____D C:\Program Files (x86)\MSECache
      2017-11-28 21:02 - 2017-11-28 21:03 - 039027096 _____ (Microsoft Corporation) C:\Users\MIGUEL\Downloads\FileFormatConverters.exe
      2017-11-24 19:24 - 2017-11-24 19:24 - 021967947 _____ C:\Users\MIGUEL\Downloads\209349090-Caldereria-Trazado-de-Cuerpos-de-Chapa-2.pdf
      2017-11-24 19:24 - 2017-11-24 19:24 - 004837649 _____ C:\Users\MIGUEL\Downloads\145379919-Formulas-Caldereria-Basica.pdf
      2017-11-24 19:24 - 2017-11-24 19:24 - 002633130 _____ C:\Users\MIGUEL\Downloads\220425361-TRAZADO-CALDERERIA-pdf.pdf
      2017-11-23 22:56 - 2017-11-23 22:56 - 001872442 _____ C:\Users\MIGUEL\Downloads\TNod-1.6.3.1-final-setup.rar

      ==================== One Month Modified files and folders ========

      (If an entry is included in the fixlist, the file/folder will be moved.)

      2017-12-22 20:39 - 2014-02-27 22:43 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\uTorrent
      2017-12-22 20:32 - 2017-03-28 20:08 - 000000992 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
      2017-12-22 20:32 - 2015-05-17 15:17 - 000001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d090ac46972dcb.job
      2017-12-22 20:32 - 2014-10-23 17:08 - 000001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfeedb8fa16615.job
      2017-12-22 20:31 - 2015-07-15 20:27 - 000001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0bf3450e377a7.job
      2017-12-22 20:31 - 2015-02-05 10:23 - 000001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d0412569cd7a0d.job
      2017-12-22 20:31 - 2014-06-20 19:02 - 000001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf8cb1ddd22a48.job
      2017-12-22 02:00 - 2014-03-05 17:26 - 000000000 ____D C:\Users\MIGUEL\AppData\Local\Adobe
      2017-12-22 01:01 - 2015-08-02 19:00 - 000000000 ____D C:\Program Files (x86)\Overwolf
      2017-12-22 00:59 - 2017-11-19 16:06 - 000003192 _____ C:\Windows\System32\Tasks\HPCeeScheduleForMIGUEL
      2017-12-22 00:59 - 2017-11-19 16:06 - 000000336 _____ C:\Windows\Tasks\HPCeeScheduleForMIGUEL.job
      2017-12-21 23:01 - 2017-03-28 20:08 - 000000988 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
      2017-12-21 23:01 - 2010-12-14 00:06 - 000001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
      2017-12-21 23:01 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
      2017-12-21 23:00 - 2009-07-14 06:08 - 000032648 _____ C:\Windows\Tasks\SCHEDLGU.TXT
      2017-12-21 22:52 - 2009-07-14 05:45 - 000016112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      2017-12-21 22:52 - 2009-07-14 05:45 - 000016112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      2017-12-21 21:17 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
      2017-12-21 20:58 - 2016-01-02 21:02 - 000000000 ____D C:\Users\MIGUEL\AppData\Local\CrashDumps
      2017-12-21 20:58 - 2014-02-27 22:53 - 000000000 ____D C:\Program Files (x86)\TeamViewer
      2017-12-21 20:54 - 2016-09-04 10:09 - 000000824 _____ C:\Users\Public\Desktop\CCleaner.lnk
      2017-12-21 20:54 - 2014-07-21 20:03 - 000000000 ____D C:\Program Files\CCleaner
      2017-12-21 20:46 - 2014-12-10 20:07 - 000000000 ____D C:\Users\MIGUEL\AppData\LocalLow\IObit
      2017-12-21 20:46 - 2014-12-10 20:07 - 000000000 ____D C:\ProgramData\IObit
      2017-12-21 20:46 - 2014-12-10 20:06 - 000000000 ____D C:\Program Files (x86)\IObit
      2017-12-21 20:35 - 2014-12-10 20:06 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\IObit
      2017-12-21 19:38 - 2016-06-16 00:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
      2017-12-18 22:11 - 2014-12-10 20:07 - 000000000 ____D C:\ProgramData\ProductData
      2017-12-18 20:18 - 2016-08-29 18:32 - 000000000 ____D C:\Users\MIGUEL\Documents\ORGAZ
      2017-12-16 00:00 - 2014-02-27 21:40 - 000000024 _____ C:\Windows\ATKPF.ini
      2017-12-15 19:43 - 2015-12-13 21:08 - 000000000 ____D C:\Program Files (x86)\TNod
      2017-12-15 19:31 - 2014-07-20 09:48 - 000000000 ____D C:\ProgramData\Malwarebytes
      2017-12-14 04:34 - 2014-02-27 21:42 - 000002183 _____ C:\Users\Public\Desktop\Google Chrome.lnk
      2017-12-14 04:34 - 2010-12-14 00:06 - 000002195 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
      2017-12-13 01:01 - 2014-03-05 17:30 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
      2017-12-13 01:01 - 2014-03-05 17:30 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
      2017-12-13 01:01 - 2014-03-05 17:30 - 000004320 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
      2017-12-13 01:01 - 2014-03-05 17:30 - 000000000 ____D C:\Windows\system32\Macromed
      2017-12-13 01:01 - 2010-12-14 00:22 - 000000000 ____D C:\Windows\SysWOW64\Macromed
      2017-12-11 20:07 - 2009-08-04 10:57 - 000746622 _____ C:\Windows\system32\perfh00A.dat
      2017-12-11 20:07 - 2009-08-04 10:57 - 000158576 _____ C:\Windows\system32\perfc00A.dat
      2017-12-11 20:07 - 2009-07-14 06:13 - 001673974 _____ C:\Windows\system32\PerfStringBackup.INI
      2017-12-09 19:56 - 2017-04-16 11:03 - 000000973 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 12.lnk
      2017-12-09 19:56 - 2017-04-16 11:03 - 000000961 _____ C:\Users\Public\Desktop\TeamViewer 12.lnk
      2017-12-09 17:54 - 2017-03-13 21:01 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\PhotoScape
      2017-12-09 17:54 - 2015-03-19 05:32 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\MPC-HC
      2017-12-07 00:54 - 2017-03-28 20:08 - 000000000 ____D C:\Program Files (x86)\Dropbox
      2017-12-02 08:47 - 2014-02-27 21:36 - 000118128 _____ C:\Users\MIGUEL\AppData\Local\GDIPFONTCACHEV1.DAT
      2017-12-02 04:13 - 2009-07-14 05:45 - 005006040 _____ C:\Windows\system32\FNTCACHE.DAT
      2017-12-02 04:11 - 2014-03-15 03:02 - 000000000 ____D C:\Program Files\Microsoft Silverlight
      2017-12-02 04:11 - 2014-03-15 03:02 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
      2017-12-02 03:53 - 2014-03-02 14:13 - 000000000 ____D C:\Windows\system32\MRT
      2017-12-02 03:46 - 2014-03-02 14:13 - 126925120 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
      2017-12-02 03:44 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\System
      2017-12-02 03:44 - 2009-07-14 03:34 - 000000510 _____ C:\Windows\win.ini
      2017-12-02 03:40 - 2009-07-14 04:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
      2017-12-02 03:25 - 2014-03-15 03:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
      2017-12-01 06:09 - 2017-03-14 07:29 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
      2017-11-29 20:52 - 2015-08-27 21:10 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\vlc
      2017-11-29 00:17 - 2009-07-14 08:45 - 000000000 ____D C:\Windows\ShellNew
      2017-11-29 00:14 - 2010-12-13 23:56 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
      2017-11-29 00:06 - 2015-01-13 18:59 - 000000000 ____D C:\Users\MIGUEL\AppData\Roaming\SoftGrid Client
      2017-11-23 22:57 - 2017-06-25 20:12 - 000001739 _____ C:\Users\Public\Desktop\Actualizar licencia de NOD32.lnk
      2017-11-23 21:50 - 2010-12-14 00:49 - 000001770 _____ C:\Windows\system32\ServiceFilter.ini

      ==================== Files in the root of some directories =======

      2007-06-12 18:34 - 2007-06-12 18:34 - 000035822 _____ () C:\Program Files (x86)\Common Files\ASPG_icon.ico
      2008-05-22 17:35 - 2008-05-22 17:35 - 000051962 _____ () C:\Program Files (x86)\Common Files\banner.jpg
      2009-04-08 19:31 - 2009-04-08 19:31 - 000106496 _____ () C:\Program Files (x86)\Common Files\CPInstallAction.dll
      2008-08-12 06:45 - 2008-08-12 06:45 - 000155648 _____ (ASUS) C:\Program Files (x86)\Common Files\MSIactionall.dll
      2014-08-25 15:50 - 2016-09-03 15:29 - 000013824 _____ () C:\Users\MIGUEL\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2017-07-14 19:46 - 2017-07-14 20:00 - 000465408 _____ (Dirección General de la Policía) C:\Users\MIGUEL\AppData\Local\DNIeService.exe
      2015-12-06 20:18 - 2015-12-06 20:18 - 000009025 _____ () C:\Users\MIGUEL\AppData\Local\recently-used.xbel
      2014-03-01 20:13 - 2015-08-07 20:50 - 000007607 _____ () C:\Users\MIGUEL\AppData\Local\Resmon.ResmonCfg

      ==================== Bamital & volsnap ======================

      (There is no automatic fix for files that do not pass verification.)

      C:\Windows\system32\winlogon.exe => File is digitally signed
      C:\Windows\system32\wininit.exe => File is digitally signed
      C:\Windows\SysWOW64\wininit.exe => File is digitally signed
      C:\Windows\explorer.exe => File is digitally signed
      C:\Windows\SysWOW64\explorer.exe => File is digitally signed
      C:\Windows\system32\svchost.exe => File is digitally signed
      C:\Windows\SysWOW64\svchost.exe => File is digitally signed
      C:\Windows\system32\services.exe => File is digitally signed
      C:\Windows\system32\User32.dll => File is digitally signed
      C:\Windows\SysWOW64\User32.dll => File is digitally signed
      C:\Windows\system32\userinit.exe => File is digitally signed
      C:\Windows\SysWOW64\userinit.exe => File is digitally signed
      C:\Windows\system32\rpcss.dll => File is digitally signed
      C:\Windows\system32\dnsapi.dll => File is digitally signed
      C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
      C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

      LastRegBack: 2017-11-29 21:18

      ==================== End of FRST.txt ============================

    Página 1 de 2 12 ÚltimoÚltimo