Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 20-06-2026
Ejecutado por Sizfp (administrador) sobre DESKTOP-2RC395F (MSI MS-7721) (22-06-2026 12:11:14)
Ejecutado desde C:\Users\Sizfp\OneDrive\Escritorio\FRST64.exe
Perfiles cargados: Sizfp & MSSQLSERVER
Plataforma: Microsoft Windows 10 Home Versión 22H2 19045.6466 (X64) Idioma: Español (España, internacional)
Navegador predeterminado: Chrome
Modo de Inicio: Normal

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Brother Industries, Ltd. -> Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe ->) (Brother Industries, Ltd. -> Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_w32.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\tv_x64.exe
(C:\Users\Sizfp\AppData\Local\Microsoft\Windows\Caches\svcdeb11d3704\svcdeb11d3704.exe ->) () [Archivo no firmado] C:\Users\Sizfp\AppData\Local\.cache-telemetry\svctelemetry.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (AUTOIT CONSULTING LTD -> AutoIt Team) C:\Users\Sizfp\AppData\Local\Microsoft\Windows\Caches\svcdeb11d3704\svcdeb11d3704.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\148.0.3967.83\msedgewebview2.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\attrib.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\mobsync.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PDF Professional 7\PdfPro7Hook.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(services.exe ->) (Brother Industries, Ltd.) [Archivo no firmado] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSIRegister\MSIRegisterService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> ) [Archivo no firmado] C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(Sun Microsystems, Inc. -> Sun Microsystems, Inc.) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.6465_none_7e0fb53c7c8be091\TiWorker.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe
(svchost.exe ->) (WPS SOFTWARE PTE. LTD. -> WPS SOFTWARE PTE. LTD.) C:\Users\Sizfp\AppData\Local\Kingsoft\WPS Office\12.1.0.26372\office6\wpscloudsvr.exe

==================== Registro (Lista blanca) ===================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9270560 2019-05-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9501160 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26327864 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [MSIRegister] => C:\Program Files (x86)\MSI\MSIRegister\MSIRegister.exe [1259008 2021-08-12] (Micro-Star INT'L CO., LTD.) [Archivo no firmado]
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835680 2016-06-14] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [M15A] => C:\Windows\twain_32\Brimm15a\Common\TwDsUiLaunch.exe [85928 2020-12-21] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [145344 2019-07-22] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3146752 2022-02-07] (Brother Industries, Ltd.) [Archivo no firmado]
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5237416 2021-02-24] (Adobe Inc. -> Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254696 2012-01-18] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)
HKLM-x32\...\Run: [PaperPort PTD] => C:\Program Files (x86)\Nuance\PaperPort\pptd40nt.exe [35648 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [IndexSearch] => C:\Program Files (x86)\Nuance\PaperPort\IndexSearch.exe [17600 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [PDFProHook] => C:\Program Files (x86)\Nuance\PDF Professional 7\pdfpro7hook.exe [641864 2013-03-20] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [BrStsInd00] => C:\Program Files (x86)\BrownyInd\Brother\BrIndicator.exe [1885184 2012-12-18] (Brother Industries, Ltd.) [Archivo no firmado]
HKU\S-1-5-21-1776358763-2458317571-4144040908-500\...\RunOnce: [!BCILauncher] => C:\Windows\Temp\MUBSTemp\BCILauncher.exe bgaupmi=DEBE4A22D0CC48669BD1870EAB0A588E (Ningún archivo)
HKLM\...\Windows x64\Print Processors\ssi1mPC: C:\Windows\System32\spool\prtprocs\x64\ssi1mpc.dll [41984 2013-09-30] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Windows x64\Print Processors\us016PC: C:\Windows\System32\spool\prtprocs\x64\us016pc.dll [61736 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65496 2021-02-24] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\ssi1m Langmon: C:\Windows\system32\ssi1mlm.dll [34304 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\us016 Langmon: C:\Windows\system32\us016lm.dll [40744 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\148.0.7778.216\Installer\chrmstp.exe [7617688 2026-05-27] (Google LLC -> Google LLC)
Startup: C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\9ob.lnk [2024-11-06]
ShortcutTarget: 9ob.lnk -> C:\drq372a5\d4v2bo9ai.exe (AutoIt Consulting Ltd -> AutoIt Team)
Startup: C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\pOIXltMZlLL.lnk [2025-03-28]
ShortcutTarget: pOIXltMZlLL.lnk -> C:\fzPYpBsWu\TdWDuXj.exE (AutoIt Consulting Ltd -> AutoIt Team)
Startup: C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\svcdeb11d3704.lnk [2026-05-29]
ShortcutTarget: svcdeb11d3704.lnk -> C:\Users\Sizfp\AppData\Local\Microsoft\Windows\Caches\svcdeb11d3704\svcdeb11d3704.exe (AUTOIT CONSULTING LTD -> AutoIt Team) <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) =================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {40D94C48-6FB7-459A-86C0-E0D3F00B1777} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {9FED8758-4B47-4738-A0FC-D8DAB824C9DF} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9501160 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {68FB066F-808E-42BC-8F3F-5C479711A080} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [9818088 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {1AACC810-D50C-4AD7-93CD-8B7C95D1EF64} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem149.0.7814.0{DA60A992-934A-439E-B949-FFC3CE7B3CC6} => C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe [8770200 2026-04-28] (Google LLC -> Google LLC)
Task: {2E7DA327-8847-4A50-B918-D23985AB176C} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem150.0.7863.0{0DEFBFC6-1900-4A34-A3CC-8F89ADD42FA5} => C:\Program Files (x86)\Google\GoogleUpdater\150.0.7863.0\updater.exe [8728216 2026-05-28] (Google LLC -> Google LLC)
Task: {A326B0F1-B119-4F38-A86E-41F53154F009} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_FirstRun => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
Task: {6FF4C59C-BA9A-4F53-B924-CB8F7819272A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\System32\MRT.exe [222431176 2026-06-22] (Microsoft Windows -> Microsoft Corporation) -> C:\Windows\system32\/EHB /HeartbeatFailure "SubmitHeartbeatReportData" /HeartbeatError "0x80072ee7"
Task: {05AB09A7-F382-4C4D-B209-7F23BAC6E777} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7488D730-5D85-4A88-B4D8-654103988DB3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7BC3675-FFC7-469E-800D-E9C511C5D53A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E17C66BE-FED5-43A6-BA09-5359B85F75D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4F0CB5E7-6025-408E-92B9-006572A55E67} - System32\Tasks\MSI_Toast_Server => C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe [31904 2019-03-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {4C540E3C-541F-4D43-BBD5-735FE43206B5} - System32\Tasks\PowerENGAGE => Command(1): msiexec -> /f {400A01BF-E908-4393-BD39-31E386377BDA} /quiet /qn
Task: {4C540E3C-541F-4D43-BBD5-735FE43206B5} - System32\Tasks\PowerENGAGE => Command(2): PowerENGAGE.exe -> C:\Program Files (x86)\PowerENGAGE\\scheduled-run
Task: {78E5A364-C32C-4518-BC67-619F012DDE63} - System32\Tasks\WpsExternal_Sizfp_interval => C:\Users\Sizfp\AppData\Local\Kingsoft\WPS Office\12.1.0.26372\office6\wpscloudsvr.exe [1147776 2026-05-28] (WPS SOFTWARE PTE. LTD. -> WPS SOFTWARE PTE. LTD.) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external_interval
Task: {45E2FC42-9311-4C63-A139-DEB057C75A09} - System32\Tasks\WpsExternal_Sizfp_startup => C:\Users\Sizfp\AppData\Local\Kingsoft\WPS Office\12.1.0.26372\office6\wpscloudsvr.exe [1147776 2026-05-28] (WPS SOFTWARE PTE. LTD. -> WPS SOFTWARE PTE. LTD.) -> /wpscloudlaunch /run_plugin /plugin_name=ktaskschdtool /plugin_entry=ktaskschdtool.dll /task=wpsexternal /launchtask /ver=1.0 /start_from=task_external_startup
Task: {CE36BAA0-4880-4320-A2B5-D25537CBDBB3} - System32\Tasks\WpsUpdateTask_Sizfp => C:\Users\Sizfp\AppData\Local\Kingsoft\WPS Office\ksolaunch.exe [794496 2026-05-28] (WPS SOFTWARE PTE. LTD. -> WPS SOFTWARE PTE. LTD.)
Task: {38F4561F-4B60-4920-B407-01DC4F23F291} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1776358763-2458317571-4144040908-1001 => C:\Users\Sizfp\AppData\Roaming\Zoom\bin\Zoom.exe [507784 2026-03-18] (Zoom Communications, Inc. -> Zoom Communications, Inc.)

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)


==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Hosts: Hay más de una entrada en Hosts. Consulte la sección Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5919b929-5fb4-4732-a6f6-596848320eeb}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5919b929-5fb4-4732-a6f6-596848320eeb}: [DhcpDomain] lan

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-24]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin-x32: @java.com/DTPlugin,version=1.6.0_33 -> C:\Windows\SysWOW64\npdeployJava1.dll [2023-05-22] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
FF Plugin-x32: @java.com/JavaPlugin -> C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll [2023-05-22] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-02-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 -> C:\Program Files (x86)\Nuance\PDF Professional 7\bin\nppdf.dll [2011-07-15] (Zeon Corporation -> Zeon Corporation)
FF Plugin HKU\S-1-5-21-1776358763-2458317571-4144040908-1001: @wpspdf.com/nppdf -> C:\Users\Sizfp\AppData\Local\Kingsoft\WPS Office\12.1.0.26372\office6\addons\knppdfplugin\knppdfplugin.dll [Ningún archivo]

Edge: 
=======
Edge Profile: C:\Users\Sizfp\AppData\Local\Microsoft\Edge\User Data\Default [2026-04-08]
Edge Extension: (Documentos de Google sin conexión) - C:\Users\Sizfp\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-08]
Edge Extension: (Edge relevant text changes) - C:\Users\Sizfp\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-03-15]
Edge Extension: (AnyDoc Translator - Translate Web and PDF) - C:\Users\Sizfp\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\pajdgpfjcgcdfkccnbinpalbihedpkfm [2026-04-08]
Edge HKU\S-1-5-21-1776358763-2458317571-4144040908-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [pajdgpfjcgcdfkccnbinpalbihedpkfm]

Chrome: 
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Default [2026-05-07]
CHR Notifications: Default -> hxxps://berazategui.gob.ar; hxxps://berazategui.gov.ar; hxxps://self2.fedpat.com.ar; hxxps://web.whatsapp.com
CHR Extension: (Google Docs Offline) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-05-22]
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Guest Profile [2024-04-29]
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 1 [2024-08-02]
CHR Notifications: Profile 1 -> hxxps://self2.fedpat.com.ar
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-08-02]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-06-05]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-06-06]
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 2 [2026-05-29]
CHR Notifications: Profile 2 -> hxxps://www.youtube.com
CHR Extension: (Sin Nombre) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-05-29] [UpdateUrl:0] <==== ATENCIÓN
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 4 [2025-05-09]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-05-09]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-05-09]
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 4\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-05-09]
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\Profile 5 [2026-05-27]
CHR Profile: C:\Users\Sizfp\AppData\Local\Google\Chrome\User Data\System Profile [2026-05-29]
CHR HKU\S-1-5-21-1776358763-2458317571-4144040908-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [aopddeflghjljihihabdclejbojaomaf]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [9824744 2025-11-12] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [351944 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [321536 2022-01-26] (Brother Industries, Ltd.) [Archivo no firmado]
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe [2096384 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4167504 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2209104 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4175696 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2102880 2017-02-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2333008 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSIREGISTER_MR; C:\Program Files (x86)\MSI\MSIRegister\MSIRegisterService.exe [2023224 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2079568 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [615248 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2210616 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183472 2020-03-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSSQLSERVER; c:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\sqlservr.exe [194240 2014-05-15] (Microsoft Corporation -> Microsoft Corporation)
R2 PDFProFiltSrvPP; C:\Program Files (x86)\Nuance\PaperPort\PDFProFiltSrvPP.exe [77336 2015-01-19] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
R2 SamsungUPDUtilSvc; C:\Windows\SysWOW64\SecUPDUtilSvc.exe [143664 2023-07-14] (Samsung Electronics CO., LTD. -> ) [Archivo no firmado]
S4 SQLSERVERAGENT; c:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Binn\SQLAGENT.EXE [613056 2014-05-15] (Microsoft Corporation -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [27047760 2026-06-19] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe [4484680 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe [290704 2026-05-28] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Archivo no firmado]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Archivo no firmado]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Archivo no firmado]
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-05-28] (Microsoft Windows -> Microsoft Corporation)
R3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [29576 2021-08-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S4 RsFx0201; C:\Windows\System32\DRIVERS\RsFx0201.sys [337088 2014-05-15] (Microsoft Corporation -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [21888 2026-05-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [606600 2026-05-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100784 2026-05-28] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) (Lista blanca) =========

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-06-22 12:11 - 2026-06-22 12:15 - 000027866 _____ C:\Users\Sizfp\OneDrive\Escritorio\FRST.txt
2026-06-22 12:09 - 2026-06-22 12:14 - 000000000 ____D C:\FRST
2026-06-22 12:08 - 2026-06-22 12:05 - 002449920 _____ (Farbar) C:\Users\Sizfp\OneDrive\Escritorio\FRST64.exe
2026-06-22 11:18 - 2026-06-22 11:18 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.005
2026-06-22 11:18 - 2026-06-22 11:18 - 000000000 ____D C:\Users\TEMP.Font Driver Host.005
2026-05-29 15:24 - 2026-05-29 15:24 - 000000000 ___SD C:\Users\Sizfp\AppData\Roaming\Microsoft\Protect
2026-05-28 15:32 - 2026-05-28 15:32 - 004475469 _____ C:\Users\Sizfp\OneDrive\Escritorio\Telecentro Vto Junio.pdf
2026-05-28 13:19 - 2026-05-28 13:20 - 000051177 _____ C:\Users\Sizfp\OneDrive\Escritorio\Comprobante_libre_deuda.pdf
2026-05-28 13:12 - 2026-05-28 13:12 - 000069173 _____ C:\Users\Sizfp\OneDrive\Escritorio\Constancia de CUIL.pdf
2026-05-28 13:01 - 2026-05-28 13:01 - 000162579 _____ C:\Users\Sizfp\OneDrive\Escritorio\IMG-20260519-WA0056.jpg.pdf
2026-05-28 12:41 - 2026-05-28 12:41 - 000576599 _____ C:\Users\Sizfp\OneDrive\Escritorio\Screenshot_20260528_121932_Mercado Libre.jpg.pdf
2026-05-28 12:40 - 2026-05-28 12:41 - 000800481 _____ C:\Users\Sizfp\OneDrive\Escritorio\Screenshot_20260528_121848_Mercado Libre.jpg.pdf
2026-05-28 12:40 - 2026-05-28 12:40 - 001068508 _____ C:\Users\Sizfp\OneDrive\Escritorio\Screenshot_20260528_121447_Mercado Libre.jpg.pdf
2026-05-28 12:40 - 2026-05-28 12:40 - 000736442 _____ C:\Users\Sizfp\OneDrive\Escritorio\Screenshot_20260528_122706_Mercado Libre.jpg.pdf
2026-05-28 12:37 - 2026-05-28 12:37 - 000444284 _____ C:\Users\Sizfp\OneDrive\Escritorio\Screenshot_20260528_121532_Mercado Libre.jpg.pdf
2026-05-28 12:36 - 2026-05-28 12:36 - 000565823 _____ C:\Users\Sizfp\OneDrive\Escritorio\Screenshot_20260528_121327_Mercado Libre.jpg.pdf
2026-05-28 12:33 - 2026-05-28 12:33 - 000204879 _____ C:\Users\Sizfp\OneDrive\Escritorio\Presupuesto_PodasDelSur_TEMPLATE 4.pdf
2026-05-28 11:54 - 2026-05-28 11:54 - 000333905 _____ C:\Users\Sizfp\OneDrive\Escritorio\Eolicos presupuesto.pdf
2026-05-28 11:46 - 2026-05-28 11:46 - 000086448 _____ C:\Users\Sizfp\OneDrive\Escritorio\Eolicos.pdf
2026-05-28 11:15 - 2026-05-28 11:15 - 000031221 _____ C:\Users\Sizfp\OneDrive\Escritorio\Detalle m3 firmados.xlsx
2026-05-28 10:11 - 2026-05-28 11:14 - 000031221 _____ C:\Users\Sizfp\OneDrive\Escritorio\Detalle (1).xlsx
2026-05-28 10:10 - 2026-05-28 10:10 - 000218524 _____ C:\Users\Sizfp\OneDrive\Escritorio\Detalle.xlsx
2026-05-28 09:12 - 2026-05-28 09:12 - 000004082 _____ C:\Windows\system32\Tasks\WpsExternal_Sizfp_interval
2026-05-28 09:10 - 2026-05-28 09:10 - 000002639 _____ C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Docs.lnk
2026-05-28 09:10 - 2026-05-28 09:10 - 000002625 _____ C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Sheets.lnk
2026-05-28 09:10 - 2026-05-28 09:10 - 000002623 _____ C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Slides.lnk
2026-05-28 09:10 - 2026-05-28 09:10 - 000002607 _____ C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS PDF.lnk
2026-05-28 09:09 - 2026-05-28 09:09 - 000003818 _____ C:\Windows\system32\Tasks\WpsExternal_Sizfp_startup
2026-05-28 09:09 - 2026-05-28 09:09 - 000002515 _____ C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WPS Office.lnk
2026-05-28 09:08 - 2026-05-28 09:08 - 000003764 _____ C:\Windows\system32\Tasks\WpsUpdateTask_Sizfp

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2026-06-22 12:10 - 2019-12-07 06:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-06-22 11:57 - 2023-05-22 12:15 - 000000000 ____D C:\Windows\system32\SleepStudy
2026-06-22 11:45 - 2022-09-08 00:14 - 000000000 ____D C:\Windows\SystemTemp
2026-06-22 11:44 - 2023-05-22 16:24 - 000000000 ____D C:\Windows\system32\MRT
2026-06-22 11:34 - 2019-12-07 06:14 - 000000000 ____D C:\Windows\AppReadiness
2026-06-22 11:33 - 2024-05-13 08:14 - 000000000 ___HD C:\Users\Sizfp\WPS Cloud Files
2026-06-22 11:26 - 2026-04-10 15:56 - 000002636 _____ C:\Users\Sizfp\OneDrive\Escritorio\Microsoft Edge.lnk
2026-06-22 11:26 - 2026-04-10 15:56 - 000002439 _____ C:\Users\Sizfp\OneDrive\Escritorio\Google Chrome.lnk
2026-06-22 11:26 - 2023-05-22 16:24 - 222431176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2026-06-22 11:22 - 2023-05-22 12:16 - 000003636 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-06-22 11:22 - 2023-05-22 12:16 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-06-22 11:19 - 2024-09-04 12:37 - 000000000 ____D C:\Program Files\TeamViewer
2026-06-22 11:19 - 2019-12-07 06:13 - 000000000 ____D C:\Windows\INF
2026-06-22 11:17 - 2023-05-22 12:15 - 000008192 ___SH C:\DumpStack.log.tmp
2026-06-22 11:17 - 2023-05-22 12:15 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-05-29 15:07 - 2019-12-07 06:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-05-29 15:01 - 2023-05-22 12:31 - 000000000 ____D C:\Users\Sizfp
2026-05-28 10:38 - 2026-04-22 08:46 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1776358763-2458317571-4144040908-1001
2026-05-28 10:38 - 2025-08-13 10:06 - 000002428 _____ C:\Users\Sizfp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-05-28 10:38 - 2025-02-06 10:54 - 000003576 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-1776358763-2458317571-4144040908-1001
2026-05-28 10:38 - 2023-05-22 12:37 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1776358763-2458317571-4144040908-1001
2026-05-28 09:43 - 2023-05-22 15:17 - 000002342 ____H C:\Users\Sizfp\OneDrive\Documentos\Default.rdp
2026-05-28 09:09 - 2023-05-22 12:55 - 000002631 _____ C:\Users\Sizfp\OneDrive\Escritorio\WPS PDF.lnk
2026-05-28 09:09 - 2023-05-22 12:55 - 000002527 _____ C:\Users\Sizfp\OneDrive\Escritorio\WPS Office.lnk
2026-05-28 09:01 - 2023-05-22 15:00 - 000000000 ____D C:\Program Files (x86)\PowerENGAGE
2026-05-28 08:39 - 2023-05-22 12:33 - 000000000 ____D C:\Users\Sizfp\AppData\Local\Packages
2026-05-28 08:11 - 2023-05-22 12:15 - 000000000 ____D C:\Windows\system32\Drivers\wd
2026-05-28 07:56 - 2023-05-22 12:16 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-05-27 16:36 - 2025-10-21 12:01 - 000000000 ____D C:\Windows\system32\Tasks\GoogleUserPEH
2026-05-27 16:33 - 2023-05-22 13:03 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

==================== Archivos en la raíz de algunos directorios ========

2024-04-29 08:35 - 2024-04-29 09:32 - 001732963 _____ () C:\Program Files (x86)\KitMalvinaCL24033ZFI5000040@.imp
2023-05-22 15:34 - 2023-05-22 15:34 - 000000410 _____ () C:\Users\Sizfp\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)

==================== Final de FRST.txt ========================