Additional scan result of Farbar Recovery Scan Tool (x64) Version: 31-08-2016 Ran by CerTit (06-09-2016 09:47:07) Running from C:\Users\CerTit\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2016-06-09 07:05:00) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrador (S-1-5-21-2019033431-2003819915-3938332270-500 - Administrator - Disabled) ASPNET (S-1-5-21-2019033431-2003819915-3938332270-1002 - Limited - Enabled) CerTit (S-1-5-21-2019033431-2003819915-3938332270-1000 - Administrator - Enabled) => C:\Users\CerTit HomeGroupUser$ (S-1-5-21-2019033431-2003819915-3938332270-1004 - Limited - Enabled) Invitado (S-1-5-21-2019033431-2003819915-3938332270-501 - Limited - Disabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: Avast Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: Avast Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 21.0.0.215 - Adobe Systems Incorporated) Adobe Flash Player 10 Plugin (HKLM-x32\...\{35F7D0BF-08AB-42E3-A403-AF9772AC216A}) (Version: 10.1.102.64 - Adobe Systems Incorporated) Adobe Flash Player 22 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 22.0.0.210 - Adobe Systems Incorporated) Adobe Reader X (10.1.16) - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated) Adobe Shockwave Player 11.5 (HKLM-x32\...\{ECCA150B-31A5-412E-B8D0-4CB5DDA900D3}) (Version: 11.5.9.615 - Adobe Systems, Inc) Adobe Support Advisor (HKLM-x32\...\AdobeSupportAdvisor.E7BED6E5DDA59983786DD72EBFA46B1598278E07.1) (Version: 1.6.1.20120504 - Adobe Systems Incorporated) Ares 2.1.7 (HKLM-x32\...\Ares) (Version: 2.1.7-Build#3041 - Ares Development Group) Avast Premier (HKLM-x32\...\avast) (Version: 12.3.2279 - AVAST Software) CCleaner (HKLM\...\CCleaner) (Version: 3.01 - Piriform) Chuzzle Christmas Edition en Español (HKLM-x32\...\Chuzzle Christmas Edition en Español) (Version: - ) Chuzzle Deluxe (HKLM-x32\...\Chuzzle Deluxe_is1) (Version: - ) Compresor WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) ConvertXtoDVD 3.1.3.40 (HKLM-x32\...\VSO ConvertXtoDVD 3_is1) (Version: - ) Corel Graphics - Windows Shell Extension (HKLM\...\_{340C451C-F2FD-4309-B259-580FD5E44025}) (Version: 18.1.0.661 - Corel Corporation) Corel Graphics - Windows Shell Extension (Version: 18.1.661 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 32 Bit Keys (Version: 18.1.661 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Capture (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Common (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Connect (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Custom Data (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Draw (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - ES (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Filters (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Font Manager (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - IPM Content (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - IPM T (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - PHOTO-PAINT (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Redist (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Setup Files (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - VBA (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - VideoBrowser (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Workspaces (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 - Writing Tools (x64) (Version: 18.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite X8 (64-Bit) (HKLM\...\_{4B3FC55D-E999-4BEC-AF29-1091E574961F}) (Version: 18.1.0.661 - Corel Corporation) CorelDRAW Graphics Suite X8 (Version: 18.1 - Corel Corporation) Hidden CyberLink PowerDVD 10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.1516 - CyberLink Corp.) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.40.1.0127 - DT Soft Ltd) Desinstalar impresora EPSON L220 Series (HKLM\...\EPSON L220 Series) (Version: - SEIKO EPSON Corporation) Dynomite Deluxe (HKLM-x32\...\Dynomite Deluxe_is1) (Version: - ) Epson Easy Photo Print 2 (HKLM-x32\...\{922E2D91-9314-45AA-9AEF-E585F93B59A9}) (Version: 2.6.1.0 - Seiko Epson Corporation) Epson Event Manager (HKLM-x32\...\{4B22C430-7EA8-4534-8358-376FD900B953}) (Version: 3.10.0042 - Seiko Epson Corporation) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Ghostscript GPL 8.64 (Msi Setup) (x32 Version: 8.64 - Corel Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.) Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.7619.1252 - Google Inc.) Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Iggle Pop Deluxe (HKLM-x32\...\Iggle Pop Deluxe_is1) (Version: - ) Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{D2437C5C-2D8C-40D2-8059-689AD7239FA3}) (Version: 11.1.048 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation) IPM_Installer (Version: 2.2 - Your Company Name) Hidden Java(TM) 6 Update 23 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216023FF}) (Version: 6.0.230 - Oracle) Manual Epson L220 versión 1.0 (HKLM-x32\...\UsersGuideManual Epson L220_is1) (Version: 1.0 - ) Messenger Plus! Live (HKLM-x32\...\Messenger Plus! Live) (Version: 4.85.0.386 - Yuna Software) Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation) Mozilla Firefox (3.6.13) (HKLM-x32\...\Mozilla Firefox (3.6.13)) (Version: 3.6.13 (es-ES) - Mozilla) Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN (HKLM\...\Microsoft .NET Framework 4 Client Profile ESN Language Pack) (Version: 4.0.30319 - Microsoft Corporation) Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation) Peggle Deluxe (HKLM-x32\...\Peggle Deluxe_is1) (Version: - ) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.8 - Google, Inc.) Plantas Contra Zombis (HKLM-x32\...\Plantas Contra Zombis) (Version: - ) QBeez 2 (HKLM-x32\...\QBeez 2_is1) (Version: - ) QT Lite 2.9.0 (HKLM-x32\...\qt7lite_is1) (Version: 2.9.0 - ) Real Alternative 1.9.0 (HKLM-x32\...\RealAlt_is1) (Version: 1.9.0 - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7195 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft) Skype Toolbars (HKLM-x32\...\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}) (Version: 5.0.4137 - Skype Technologies S.A.) Skype™ 7.27 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.27.101 - Skype Technologies S.A.) Software Updater (HKLM-x32\...\{8DBC5A0A-31C4-46C7-B252-6B593EA11A87}) (Version: 4.3.7 - SEIKO EPSON CORPORATION) Tumblebugs 2 en Español (HKLM-x32\...\Tumblebugs 2 en Español) (Version: - ) Tumblebugs en Español (HKLM-x32\...\Tumblebugs en Español) (Version: - ) VLC media player 1.1.7 (HKLM-x32\...\VLC media player) (Version: 1.1.7 - VideoLAN) Winamp (HKLM-x32\...\Winamp) (Version: 5.6 - Nullsoft, Inc) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) Zuma Deluxe (HKLM-x32\...\Zuma Deluxe) (Version: - PopCap) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-2019033431-2003819915-3938332270-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {1A3FE3C0-7DB4-43A1-84D7-ADE6706F392C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-01] (Google Inc.) Task: {291B35A8-A7B3-4F73-A370-C8F3331019C3} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-08-01] (Google Inc.) Task: {3D3015EE-6C7F-40AC-9153-804DED0C56F9} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2016-08-16] (AVAST Software) Task: {8525C668-D491-4158-8A86-AF5FE0AA1125} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2016-06-23] (Corel Corporation) Task: {874C7113-D861-49A2-A655-31862E83C978} - System32\Tasks\{E20D4384-ADE4-4097-99AF-801840FC3504} => c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDRW.exe [2016-06-25] (Corel Corporation) Task: {8AA99214-23B4-4238-AAD3-7790CCDA5A26} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-08-01] (Adobe Systems Incorporated) Task: {8ED12C71-2349-4951-BAD7-AA55BC5196BC} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation) Task: {9CD16DCD-B234-4861-A048-D02585DD3135} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-08-18] (AVAST Software) Task: {A4A67A48-FC18-459B-B314-6DF7A7F0F213} - System32\Tasks\{3956AED9-3E14-4913-A23E-B002467E507C} => C:\Windows\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe Task: {B1375077-F109-4F75-9F73-A34153F569D2} - System32\Tasks\{7FA218E5-87E8-47DF-AFDE-2271E66EE367} => c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDRW.exe [2016-06-25] (Corel Corporation) Task: {BA5AB059-6F41-44BB-AF13-85A201E60C39} - System32\Tasks\{88385013-B710-4C5A-9523-F7760B63F582} => c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDRW.exe [2016-06-25] (Corel Corporation) Task: {C4300B9F-541F-421A-AEA9-0BE552A8D645} - System32\Tasks\EPSON L220 Series Update {69288AE5-9F4F-49E7-9329-8BDDACA16CEC} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSN2E.EXE [2013-11-21] (SEIKO EPSON CORPORATION) Task: {E8E27B2E-71AA-409E-B5DC-6771ED50FEF4} - System32\Tasks\{173B5A17-B2B1-4AA5-A693-BF23963FD384} => pcalua.exe -a "C:\Program Files\Alwil Software\Avast5\aswRunDll.exe" -c "C:\Program Files\Alwil Software\Avast5\Setup\setiface.dll" RunSetup (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\EPSON L220 Series Update {69288AE5-9F4F-49E7-9329-8BDDACA16CEC}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSN2E.EXE:/EXE:{69288AE5-9F4F-49E7-9329-8BDDACA16CEC} /F:Update SYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2013-04-04 01:09 - 2013-04-04 01:09 - 04300432 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2016-06-09 03:38 - 2010-03-15 04:28 - 00052224 _____ () C:\Program Files (x86)\Winrar\rarext64.dll 2016-08-16 11:40 - 2016-08-16 11:40 - 00169064 _____ () C:\Program Files\Alwil Software\Avast5\JsonRpcServer.dll 2016-09-05 12:05 - 2016-09-05 12:05 - 03080312 _____ () C:\Program Files\Alwil Software\Avast5\defs\16090502\algo.dll 2016-08-16 11:40 - 2016-08-16 11:40 - 00482928 _____ () C:\Program Files\Alwil Software\Avast5\ffl2.dll 2016-08-16 11:40 - 2016-08-16 11:40 - 48936448 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll 2013-04-04 01:09 - 2013-04-04 01:09 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2016-08-05 09:20 - 2016-08-02 19:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll 2016-08-05 09:20 - 2016-08-02 19:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DFServ => ""="Service" ==================== Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-13 21:34 - 2016-06-09 03:59 - 00000864 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 validation.sls.microsoft.com ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2019033431-2003819915-3938332270-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\CerTit\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{CB7C1D0B-6018-44EF-9EF2-C1E4D54D1EED}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\wlcsdk.exe FirewallRules: [{46766FFE-D332-4EE5-ABD0-798483FBEED3}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{537F5706-412C-4B05-AF02-D892E9F5D13B}] => (Allow) svchost.exe FirewallRules: [{EC081C1D-39A0-4B41-9551-9FAA4B9FB3F7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{4348D214-91FB-4EB4-BEEC-E899246A8ECB}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{0D87BD84-90E5-425E-A448-DFA002BEA00E}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD9.EXE FirewallRules: [TCP Query User{F124C0C2-2685-4DF6-A2B5-9CE63AA31CC7}C:\users\certit\appdata\local\temp\kmsemul.exe] => (Allow) C:\users\certit\appdata\local\temp\kmsemul.exe FirewallRules: [UDP Query User{63AC8366-BBD9-4B35-BEDC-A3006EBC0635}C:\users\certit\appdata\local\temp\kmsemul.exe] => (Allow) C:\users\certit\appdata\local\temp\kmsemul.exe FirewallRules: [TCP Query User{7244B6ED-8477-4A66-A5C2-F72AF66457B1}C:\program files (x86)\ares\ares.exe] => (Allow) C:\program files (x86)\ares\ares.exe FirewallRules: [UDP Query User{9581348D-2408-4A3A-B8D8-20A7FD8B22F4}C:\program files (x86)\ares\ares.exe] => (Allow) C:\program files (x86)\ares\ares.exe FirewallRules: [{DD54C9A1-FF3F-4623-AB46-7E3CA646EC09}] => (Block) C:\program files (x86)\ares\ares.exe FirewallRules: [{DA2EC6F6-2D64-41A7-817A-E9C188F39EB2}] => (Block) C:\program files (x86)\ares\ares.exe FirewallRules: [{4CC6AAB6-64F6-4524-BD05-80F78627B4E4}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe FirewallRules: [{3338EC4C-56CD-4257-9B40-B8416CA5BCA3}] => (Allow) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe FirewallRules: [TCP Query User{A72A776B-E9E9-4066-B368-AAD5EE328284}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe FirewallRules: [UDP Query User{A4272762-1F5C-42D7-8A76-5B5019FFE9CB}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe FirewallRules: [{7E37943A-E1CE-45B7-8512-2E8743680D4A}] => (Allow) C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe FirewallRules: [{377D8FD8-24EA-43E5-8B7F-89972B5273B0}] => (Allow) C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe FirewallRules: [{C382EBF6-0D0E-4217-B9B4-9F533E427CEE}] => (Allow) C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe FirewallRules: [{4C1A4F2D-D52B-419F-AB5C-3EA4A9122471}] => (Allow) C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe FirewallRules: [TCP Query User{ADE00F65-6B77-4156-9CDB-5B95DEA009B9}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe FirewallRules: [UDP Query User{0E23B797-351B-4CD8-A1B7-3A0E50536113}C:\program files (x86)\epson software\event manager\eeventmanager.exe] => (Allow) C:\program files (x86)\epson software\event manager\eeventmanager.exe FirewallRules: [TCP Query User{EB0C5C17-9C7F-41B4-83BB-E86117EC8CA5}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe FirewallRules: [UDP Query User{8704EF9D-067B-4534-9112-6CEB04AE35C4}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe FirewallRules: [{3DDFB554-9B75-4312-A877-919E88BD8817}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{8C25A51A-FA3B-49DF-9CA9-D49F6BDAADFB}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelDrw.exe FirewallRules: [{377739C8-19CD-45B7-B90F-BC29045C4721}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite X8\Programs64\CorelPP.exe ==================== Restore Points ========================= 31-08-2016 10:20:14 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 31-08-2016 10:39:29 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 31-08-2016 12:24:49 Instalador de Módulos de Windows 05-09-2016 09:06:27 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 05-09-2016 09:30:07 Copias de seguridad de Windows 05-09-2016 10:00:28 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 05-09-2016 10:05:34 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 05-09-2016 11:21:33 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 05-09-2016 11:34:48 Removed Microsoft .NET Framework 1.1 05-09-2016 11:38:59 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 05-09-2016 11:46:02 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 05-09-2016 12:05:17 Removed Corel Graphics - Windows Shell Extension. 05-09-2016 12:06:27 Removed Corel Graphics - Windows Shell Extension 32 Bit Keys. 05-09-2016 12:15:10 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 05-09-2016 12:18:01 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 05-09-2016 13:04:28 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 06-09-2016 09:11:17 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (09/05/2016 12:17:36 PM) (Source: MsiInstaller) (EventID: 11935) (User: CerTit-PC) Description: Product: CorelDRAW Graphics Suite X8 - Common (x64) -- Error 1935.An error occurred during the installation of assembly component {EB015B83-6B0F-4C7C-83F1-3989BA17EB6F}. HRESULT: 0x80070020. assembly interface: IAssemblyCacheItem, function: Commit, assembly name: Corel.Interop.VGCore,Version="18.1.0.661",Culture="neutral",FileVersion="18.1.0.661",ProcessorArchitecture="MSIL",PublicKeyToken="E4835428E22AD6F9" Error: (09/05/2016 11:08:08 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nombre de la aplicación con errores: Connect.exe, versión: 5.0.0.448, marca de tiempo: 0x56da654b Nombre del módulo con errores: KERNELBASE.dll, versión: 6.1.7601.18015, marca de tiempo: 0x50b8479b Código de excepción: 0xe0434352 Desplazamiento de errores: 0x0000000000009e5d Id. del proceso con errores: 0x5e4 Hora de inicio de la aplicación con errores: 0x01d2078fa8fc4ec9 Ruta de acceso de la aplicación con errores: C:\Program Files\Corel\CorelDRAW Graphics Suite X8\Connect64\Connect.exe Ruta de acceso del módulo con errores: C:\Windows\system32\KERNELBASE.dll Id. del informe: ef3c9fc9-7382-11e6-b4fa-94de801ebc14 Error: (09/05/2016 11:08:05 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Aplicación: Connect.exe Versión de Framework: v4.0.30319 Descripción: el proceso terminó debido a una excepción no controlada. Información de la excepción: System.DllNotFoundException Pila: en Connect.App.Main() Error: (09/05/2016 10:36:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Error en la recuperación de actualización automática del certificado raíz de terceros de: con el error: El servidor especificado no puede ejecutar la operación solicitada. . Error: (09/05/2016 10:36:32 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Error en la recuperación de actualización automática del certificado raíz de terceros de: con el error: El servidor especificado no puede ejecutar la operación solicitada. . Error: (09/05/2016 10:36:29 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: ) Description: Error en la recuperación de actualización automática del certificado raíz de terceros de: con el error: Se devolvió esta operación porque se agotó el tiempo de espera. . Error: (09/05/2016 10:18:36 AM) (Source: VSS) (EventID: 12289) (User: ) Description: Error del Servicio de instantáneas de volumen: error inesperado DeviceIoControl(\\?\Volume{c6ba8ef7-32e7-11e6-9ec2-806e6f6e6963} - 000000000000006C,0x00530024,0000000000000000,0,0000000000441020,4096,[0]). HR = 0x80070001, Función incorrecta. . Operación: Consultar áreas de diferencia de este volumen Contexto: Nombre del volumen: \\?\Volume{d805d7e4-2e0e-11e6-b859-806e6f6e6963}\ Error: (08/31/2016 08:57:09 AM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY) Description: No se pudo iniciar una transacción de Windows Installer ASU_MSI_TRAN. Error 1603 al iniciar la transacción. Error: (08/23/2016 11:54:25 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: El programa winamp.exe, versión 5.6.0.3081, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades. Identificador de proceso: 1070 Hora de inicio: 01d1fd5d55b12f63 Hora de finalización: 13 Ruta de acceso de la aplicación: C:\Program Files (x86)\Winamp\winamp.exe Identificador de informe: 37ac694d-6952-11e6-8091-94de801ebc14 Error: (08/18/2016 10:51:16 AM) (Source: MsiInstaller) (EventID: 1041) (User: NT AUTHORITY) Description: No se pudo iniciar una transacción de Windows Installer ASU_MSI_TRAN. Error 1603 al iniciar la transacción. System errors: ============= Error: (09/06/2016 09:36:05 AM) (Source: Disk) (EventID: 11) (User: ) Description: El controlador detectó un error de controladora en \Device\Harddisk6\DR12. Error: (09/06/2016 08:35:42 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. Error: (09/06/2016 08:35:42 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen C:. Error: (09/06/2016 08:35:42 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen C:. Error: (09/06/2016 08:32:41 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. Error: (09/06/2016 08:32:41 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. Error: (09/06/2016 08:32:41 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. Error: (09/06/2016 08:32:41 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. Error: (09/06/2016 08:32:41 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. Error: (09/06/2016 08:32:41 AM) (Source: Ntfs) (EventID: 55) (User: ) Description: La estructura del sistema de archivos en el disco está dañada y no se puede usar. Ejecute la utilidad chkdsk en el volumen \Device\HarddiskVolume3. ==================== Memory info =========================== Processor: Intel(R) Core(TM) i3-3220 CPU @ 3.30GHz Percentage of memory in use: 70% Total physical RAM: 3989.43 MB Available physical RAM: 1187.84 MB Total Virtual: 7977.04 MB Available Virtual: 4588.21 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:221.52 GB) (Free:153.71 GB) NTFS Drive d: (D) (Fixed) (Total:244.14 GB) (Free:191.6 GB) NTFS Drive l: (ThawSpace0) (Fixed) (Total:1 GB) (Free:0.96 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 5EAE55F9) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=244.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=221.5 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================