Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016 Ran by samuel (02-09-2016 23:56:45) Running from C:\Users\samuel\Desktop Windows 10 Education Version 1607 (X64) (2016-08-28 00:07:11) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrador (S-1-5-21-3690298984-718693576-1200642337-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3690298984-718693576-1200642337-503 - Limited - Disabled) Invitado (S-1-5-21-3690298984-718693576-1200642337-501 - Limited - Disabled) samuel (S-1-5-21-3690298984-718693576-1200642337-1001 - Administrator - Enabled) => C:\Users\samuel SophosSAUDESKTOP-RE0 (S-1-5-21-3690298984-718693576-1200642337-1006 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371} AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.29.1517 - Bitdefender) Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.29.1517 - Bitdefender) CCleaner (HKLM\...\CCleaner) (Version: 5.21 - Piriform) Chromodo (HKLM-x32\...\Chromodo) (Version: 50.14.22.468 - Comodo) DFX (HKLM-x32\...\DFX) (Version: 12.017.0.0 - Power Technology) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.14.265 - SurfRight B.V.) Malwarebytes Anti-Malware versión 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) Microsoft Office 365 ProPlus - es-es (HKLM\...\O365ProPlusRetail - es-es) (Version: 16.0.7167.2040 - Microsoft Corporation) Mozilla Firefox 48.0.2 (x86 es-MX) (HKLM-x32\...\Mozilla Firefox 48.0.2 (x86 es-MX)) (Version: 48.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 48.0.2 - Mozilla) Office 16 Click-to-Run Extensibility Component (Version: 16.0.7167.2040 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.7167.2040 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (Version: 16.0.7167.2040 - Microsoft Corporation) Hidden Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Ralink RT2860 Wireless LAN Card (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309B0}) (Version: 5.0.57.0 - Ralink) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7581 - Realtek Semiconductor Corp.) RogueKiller versión 12 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12 - Adlice Software) Software Intel® PROSet/Wireless (HKLM-x32\...\{e6f0207e-ac43-48a9-bfff-3d879b45694d}) (Version: 18.12.1 - Intel Corporation) Spotify (HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\Spotify) (Version: 1.0.36.124.g1cba1920 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Telegram Desktop versión 0.10.1 (HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.10.1 - Telegram Messenger LLP) Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.30.37 - Zemana Ltd.) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-3690298984-718693576-1200642337-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\samuel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\FileCoAuth.exe (Microsoft Corporation) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {10408CAB-EAED-4FFC-8686-96E9CC82F1E1} - System32\Tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {26E1AEB5-DB46-4741-8F13-EE79BDE4A655} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-07-22] (Realtek Semiconductor) Task: {336631E1-B02C-40A5-AA42-65B225DD53DC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-08-27] (Microsoft Corporation) Task: {3F965E7D-E571-4E28-B809-B19BD04BE885} - System32\Tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {53E7D820-833D-43BF-B1A0-4613DEF196D5} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-07-22] (Realtek Semiconductor) Task: {7A306C3C-88B8-4281-80FE-50826A258FB4} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-05] (Piriform Ltd) Task: {8AB45E23-DCEC-42CA-A17B-C0F40CF6ACD6} - System32\Tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe Task: {9E861650-0A7A-4323-A45A-A58D562092B5} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-06-14] (Bitdefender) Task: {AEE7A4EA-9DFC-46FA-82C5-FF6F0888F2D4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2016-08-27] (Microsoft Corporation) Task: {B2E1DFF7-C485-41CD-8BEF-F23657516272} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-08-11] (Microsoft Corporation) Task: {B71B66DD-6D8F-4DBB-B5C0-D73816372D62} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-08-27] (Microsoft Corporation) Task: {D29E1A8B-B1B0-46F5-8B74-C70B5FEDB4DA} - System32\Tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe Task: {DCFE5B37-1ADD-4C0A-891F-81E760692D45} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-07-22] (Realtek Semiconductor) Task: {E038DAEF-ADB6-4538-82E6-3D46F87A99C4} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-27] (Adobe Systems Incorporated) Task: {EB1D13E6-9DA1-4C0D-A675-149229F9BE8C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-08-11] (Microsoft Corporation) Task: {F248122D-FEE1-40FA-92E2-7AD8D04D1758} - System32\Tasks\COMODO\COMODO Cache Builder {0FB77674-7905-4F34-A362-C5A9A26F8CF9} => C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe Task: C:\WINDOWS\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901}.job => C:\Program Files\Common Files\AV\Kaspersky Lab\upgrade_launcher.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) Shortcut: C:\Users\samuel\Favorites\Sitio para descargas de NCH Software.lnk -> hxxp://www.nchsoftware.com/es/index.html ==================== Loaded Modules (Whitelisted) ============== 2016-07-16 05:42 - 2016-07-16 05:42 - 00231424 ____N () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-07-16 05:42 - 2016-07-16 05:42 - 02681200 ____N () C:\WINDOWS\system32\CoreUIComponents.dll 2016-09-01 00:28 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll 2016-09-01 00:28 - 2016-05-09 11:29 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl 2016-09-01 00:28 - 2016-05-09 11:29 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl 2016-09-01 00:28 - 2016-05-09 11:29 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl 2016-09-01 00:28 - 2016-05-09 11:29 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl 2016-07-16 05:42 - 2016-07-16 05:42 - 02681200 ____N () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-08-27 22:46 - 2016-08-27 22:46 - 00959168 _____ () C:\Users\samuel\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_1\amd64\ClientTelemetry.dll 2016-07-16 05:42 - 2016-07-16 05:42 - 00130048 ____N () C:\WINDOWS\SYSTEM32\CHARTV.dll 2016-09-01 21:28 - 2016-09-01 21:28 - 00123760 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll 2016-05-27 15:50 - 2016-06-09 22:13 - 00402520 _____ () C:\WINDOWS\system32\igfxTray.exe 2016-07-16 05:42 - 2016-07-16 05:42 - 00134656 ____N () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-07-16 05:43 - 2016-08-27 17:29 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2016-07-16 05:43 - 2016-08-27 17:30 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-08-31 17:17 - 2016-08-19 22:54 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-07-16 05:43 - 2016-08-27 17:30 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2016-08-31 17:17 - 2016-08-19 22:54 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-08-31 17:17 - 2016-08-19 22:56 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-06-22 10:04 - 2016-06-22 10:04 - 01595384 _____ () C:\Program Files (x86)\DFX\DFX.exe 2016-06-22 09:52 - 2016-06-22 09:52 - 00161784 _____ () C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp32.exe 2016-06-22 09:59 - 2016-06-22 09:59 - 00176120 _____ () C:\Program Files (x86)\DFX\Universal\Apps\DfxSharedApp64.exe 2016-06-22 10:57 - 2016-06-22 10:57 - 00098296 _____ () C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared64.dll 2016-09-02 22:12 - 2016-08-29 11:49 - 25124424 _____ () C:\Program Files\RogueKiller\RogueKiller64.exe 2016-08-30 14:10 - 2016-08-30 14:11 - 00071168 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2016-08-30 14:10 - 2016-08-30 14:11 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2016-06-22 10:49 - 2016-06-22 10:49 - 00083960 _____ () C:\Program Files (x86)\Common Files\DFX\Dlls\dfxShared32.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\setup.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\acmigration.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAC64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\AERTAR64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\appraiser.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ASGCoInstaller_x64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AzureSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CloudBackupSettings.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CompatTelRunner.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\ConsoleLogon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\container.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dafpos.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\das.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dasHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPA64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPD64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPO64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DDPP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\deviceassociation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DeviceCensus.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\difx64.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\domgmt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\dosvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DPTopologyApp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DPTopologyAppv2_0.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSBoostDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPONS64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSLFXAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSLimiterDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSNeoPCDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSSymmetryDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PGFX64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PLFX64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PREC64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\dxmasf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\FMAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\generaltel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\GenValObj.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\GfxUIEx.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Gfxv2_0.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Gfxv4_0.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ie4uinit.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ieframe.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iernonce.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iertutil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\iesetup.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxCUIService.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxEM.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\igfxext.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxHK.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxSDK.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxTray.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IntelCpHDCPSvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IntelWiDiUMS64.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\KAAPORT64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\LockAppHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\lsasrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO20.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO30.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO4064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioEQ64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxVolumeSDAPO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\mf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfpmp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfsrcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mfsvr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MSAJApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msdxm.ocx:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\netiougc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\offlinelsa.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\offlinesam.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\OneDriveSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\pidgenx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\qmgr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEA64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EED64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEG64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEL64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RCoInstII64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\reseteng.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ResetEngine.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ResetEngine.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RltkAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RP3DAA64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RP3DHT64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\rpcrt4.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTCOM64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtDataProc64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEED64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEEG64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEEL64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTEEP64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtkApi64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtkCfg64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtkCoLDR64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtlCPAPI64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RtPgEx64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTSnMg64.cpl:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\samlib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\samsrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingsHandlers_WorkAccess.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingSyncCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingSyncHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SettingSyncPolicy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFAPO64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SFCOM64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SFNHK64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SFSS_APO.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\slc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\slcext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppcext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sppsvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\spwmp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSHP64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSTSH64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSTSX64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\SRSWOW64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\StorageUsage.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\StorSvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SysResetErr.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\systemreset.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tadefxapo.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tadefxapo264.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tcpipcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tepeqapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tosade.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tsmf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\uReFS.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\urlmon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\w32time.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wdfcoinstaller01009.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wfdprov.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WiFiConfigSP.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wifiprofilessettinghandler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\win32kbase.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WinBioDataModel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WinBioDataModelOOBE.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Xaml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\winmde.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlanapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlanhlp.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\wlanmsm.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlansec.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlansvc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wlansvcpal.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wmp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wmploc.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WpAXHolder.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wpninprc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\CloudBackupSettings.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\container.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\deviceassociation.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\dxmasf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iedkcs32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ieframe.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iernonce.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iertutil.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\iesetup.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\inetcpl.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\IntelCpHeciSvc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\LockAppHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfpmp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsrcsnk.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mfsvr.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\MSAJApi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msdxm.ocx:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msfeeds.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\netiougc.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\offlinelsa.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\offlinesam.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\OneDriveSettingSyncProvider.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\pidgenx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\rpcrt4.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\samlib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingSyncCore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingSyncHost.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SettingSyncPolicy.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SFCOM.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\slc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\slcext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\sppc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\sppcext.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\spwmp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tcpipcfg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\tsmf.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\uReFS.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\urlmon.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wfdprov.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\winmde.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlanapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wlanhlp.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\wmp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\wmploc.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\AsusTP.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\cng.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\hidclass.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\hidparse.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\hidusb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ksecpkg.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\massfilter_hs.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\mrxsmb20.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\partmgr.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\rdbss.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\RTKVHD64.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\stornvme.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\viahsets.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\viahsser.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\wof.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\zghsser.sys:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\AdwCleaner.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\AdwCleaner.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Desktop\aswmbr.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\aswmbr.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Desktop\bkjhk.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\bkjhk.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Desktop\FRST64.exe:BDU [0] AlternateDataStreams: C:\Users\samuel\Desktop\JRT.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\JRT.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Desktop\v1xua0j0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Desktop\v1xua0j0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Desktop\Vldaurri Aguirre Hector M - Matematicas Financieras.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Downloads\El economista camuflado.pdf:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Downloads\El economista camuflado.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Downloads\El Papel de la Bolsa Mexicana de Valores y su impacto en la economía de México.docx:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Downloads\El Papel de la Bolsa Mexicana de Valores y su impacto en la economía de México.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Downloads\readerdc_es_xa_install.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\samuel\Downloads\readerdc_es_xa_install.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Downloads\u3l3.pdf:$CmdTcID [130] AlternateDataStreams: C:\Users\samuel\Downloads\u3l3.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\samuel\Downloads\Zemana.AntiMalware.Setup.exe:BDU [0] ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mbamchameleon => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mbamchameleon => ""="Driver" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) IE trusted site: HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\sharepoint.com -> hxxps://alumnosuacj-files.sharepoint.com ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2016-08-27 17:34 - 2016-09-02 23:24 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3690298984-718693576-1200642337-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\samuel\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 200.94.160.248 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\StartupApproved\Run: => "Spotify Web Helper" HKU\S-1-5-21-3690298984-718693576-1200642337-1001\...\StartupApproved\Run: => "Steam" ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{BE83D6C3-3B5A-44DC-85C1-FAB630C68560}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{9A938705-7164-445D-B4C6-02D61369A9D5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{7B8F6AE6-06CE-4559-AC52-B2085AA6E3DA}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [{934372CB-A0DE-4D31-A2E7-B2A016E1ABFC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{7A7D5566-413B-4BB3-A5E7-BE8FBF547F59}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{A3836351-F2ED-4D31-9DDD-4AEF03512876}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{F5C183C0-C07D-4BEF-BFFD-F39D2909B831}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{5B95F8B4-57CA-49C3-BD32-80831D869402}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{A473B261-5158-4CED-BF01-3F0637C77C69}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{EE544363-9411-4E7D-8ABA-B4660AE18262}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{19547777-5075-4E9C-BA91-E65AA8121439}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{CED2E87F-E8F7-4B18-9BF4-94E2CF718F35}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe ==================== Restore Points ========================= 31-08-2016 20:47:55 Windows Update ==================== Faulty Device Manager Devices ============= Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Controladora de adquisición de datos y procesamiento de señal PCI Description: Controladora de adquisición de datos y procesamiento de señal PCI Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Event log errors: ========================= Application errors: ================== Error: (09/02/2016 11:25:49 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Error al generar el contexto de activación para "C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe". Error en el archivo de manifiesto o directiva "" en la línea . Una versión de componente requerida por la aplicación está en conflicto con la versión de otro componente activo. Los componentes en conflicto son:. Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest. Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest. Error: (09/02/2016 10:49:24 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-REU8NRJ) Description: No se pudo activar la aplicación Microsoft.Getstarted_4.0.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca debido al error: -2144927149. Consulte el registro Microsoft-Windows-TWinUI/Operational para obtener más información. Error: (09/02/2016 10:49:05 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Error al generar el contexto de activación para "C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe". Error en el archivo de manifiesto o directiva "" en la línea . Una versión de componente requerida por la aplicación está en conflicto con la versión de otro componente activo. Los componentes en conflicto son:. Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest. Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest. Error: (09/02/2016 10:33:10 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-REU8NRJ) Description: No se pudo activar la aplicación Microsoft.Getstarted_4.0.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca debido al error: -2144927149. Consulte el registro Microsoft-Windows-TWinUI/Operational para obtener más información. Error: (09/02/2016 10:32:54 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Error al generar el contexto de activación para "C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe". Error en el archivo de manifiesto o directiva "" en la línea . Una versión de componente requerida por la aplicación está en conflicto con la versión de otro componente activo. Los componentes en conflicto son:. Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest. Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest. Error: (09/02/2016 10:30:02 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-REU8NRJ) Description: No se pudo activar la aplicación Microsoft.Getstarted_4.0.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca debido al error: -2144927149. Consulte el registro Microsoft-Windows-TWinUI/Operational para obtener más información. Error: (09/02/2016 10:29:43 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Error al generar el contexto de activación para "C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe". Error en el archivo de manifiesto o directiva "" en la línea . Una versión de componente requerida por la aplicación está en conflicto con la versión de otro componente activo. Los componentes en conflicto son:. Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest. Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest. Error: (09/02/2016 10:26:57 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-REU8NRJ) Description: No se pudo activar la aplicación Microsoft.Getstarted_4.0.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca debido al error: -2144927149. Consulte el registro Microsoft-Windows-TWinUI/Operational para obtener más información. Error: (09/02/2016 10:26:53 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: Error al generar el contexto de activación para "C:\Users\samuel\Desktop\esetsmartinstaller_esn.exe". Error en el archivo de manifiesto o directiva "" en la línea . Una versión de componente requerida por la aplicación está en conflicto con la versión de otro componente activo. Los componentes en conflicto son:. Componente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_2d0f50fcbdb171b8.manifest. Componente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.14393.0_none_74bc87d3d22d9abe.manifest. Error: (09/02/2016 10:10:13 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-REU8NRJ) Description: No se pudo activar la aplicación Microsoft.Getstarted_4.0.12.0_x64__8wekyb3d8bbwe:App.AppX7mv0s3r0wanj0n66dy6vax24ps6avzvz.mca debido al error: -2144927149. Consulte el registro Microsoft-Windows-TWinUI/Operational para obtener más información. System errors: ============= Error: (09/02/2016 11:49:18 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY) Description: La configuración automática de WLAN detectó conectividad limitada realizando Reset/Recover.adapter. Código: 8 0x0 0x0 Error: (09/02/2016 11:49:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY) Description: La configuración automática de WLAN detectó conectividad limitada realizando Reset/Recover.adapter. Código: 2 0xdeaddeed 0xeeec Error: (09/02/2016 11:49:17 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: NT AUTHORITY) Description: La configuración automática de WLAN detectó conectividad limitada realizando Reset/Recover.adapter. Código: 1 0xc 0x4 Error: (09/02/2016 11:33:18 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY) Description: Error de instalación: error de Windows al instalar la siguiente actualización, error 0x80070103: Intel - Other hardware - Intel(R) Dynamic Platform and Thermal Framework Manager. Error: (09/02/2016 11:26:42 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: El servicio Servicio de plataforma de dispositivos conectados se cerró con el siguiente error: Error no especificado Error: (09/02/2016 11:25:12 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY) Description: La configuración de permisos específico de la aplicación no concede el permiso Activación Local para la aplicación de servidor COM con CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} y APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC) que se ejecuta en el contenedor de aplicaciones con SID No disponible (No disponible). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes. Error: (09/02/2016 11:24:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio ZAMSvc. Error: (09/02/2016 11:21:39 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY) Description: Error de DCOM "1084" al intentar iniciar el servicio dps con argumentos "No disponible" para ejecutar el servidor: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A} Error: (09/02/2016 11:21:39 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY) Description: Error de DCOM "1084" al intentar iniciar el servicio dps con argumentos "No disponible" para ejecutar el servidor: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A} Error: (09/02/2016 11:21:38 PM) (Source: DCOM) (EventID: 10005) (User: NT AUTHORITY) Description: Error de DCOM "1084" al intentar iniciar el servicio dps con argumentos "No disponible" para ejecutar el servidor: {DDCFD26B-FEED-44CD-B71D-79487D2E5E5A} CodeIntegrity: =================================== Date: 2016-09-02 22:45:52.965 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:47.771 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:09.159 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:08.864 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:08.400 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:07.932 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:07.926 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:07.559 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:07.555 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2016-09-02 22:36:07.132 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\hitmanpro37.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-4030U CPU @ 1.90GHz Percentage of memory in use: 52% Total physical RAM: 5579.43 MB Available physical RAM: 2672.13 MB Total Virtual: 7179.43 MB Available Virtual: 4904.79 MB ==================== Drives ================================ Drive c: (OS) (Fixed) (Total:276.15 GB) (Free:131.8 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (Size: 465.8 GB) (Disk ID: B4FA98D2) Partition: GPT. ==================== End of Addition.txt ============================