Buenas @SanMar , perdón por no haber contestado antes el tema, tuve que alejar de esta PC por una corta temporada jejeje
Aquí te dejo el reporte solicitado. Comento que ya no apareció más la ventana molesta por la cual inicié el tema. Muchas gracias!
Fix result of Farbar Recovery Scan Tool (x86) Version: 02-05-2019
Ran by Dolly (02-05-2019 14:37:00) Run:1
Running from C:\Users\Dolly\Desktop
Loaded Profiles: Dolly (Available Profiles: Dolly)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM\...\Run: [AvgUi] => "C:\Program Files\AVG\Framework\Common\avguirnx.exe" /lps=fmw
C:\Program Files\AVG
HKLM\...\Run: [vProt] => "C:\Program Files\AVG Web TuneUp\vprot.exe"
C:\Program Files\AVG Web TuneUp
HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\...\Run: [radsuperloaver] => C:\streamerdata\streamer.exe /AutoIt3ExecuteScript "C:\streamerdata\ghghghf.zip"
C:\streamerdata
Task: {A2F46567-247E-40DD-A947-76FFA7E12B3B} - System32\Tasks\AVG EUpdate Task => avgsetupx.exe
Task: {85539B48-FAAD-465B-A4F4-96D5DBC311C5} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\rundll32.exe aepdu.dll,AePduRunUpdate -nolegacy
SearchScopes: HKU\S-1-5-21-1986104296-3163790973-3246301206-1000 -> DefaultScope {B6B36D2F-B08C-4D6D-B2F9-F9128329AF6E} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1986104296-3163790973-3246301206-1000 -> {B6B36D2F-B08C-4D6D-B2F9-F9128329AF6E} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1986104296-3163790973-3246301206-1000 -> {F0EB293B-E47D-4203-9CD6-8CF22BF3E945} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-07-10] (Oracle America, Inc. -> Oracle Corporation)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-07-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @avg.com/AVG SiteSafety plugin, version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\40.3.8\\npsitesafety.dll [No File]
C:\Program Files\Common Files\AVG Secure Search
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2015-07-09] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-10] (Oracle America, Inc. -> Oracle Corporation)
S3 EverestDriver; \??\G:\$Correcto\Install\DVD_01 Install 2015\Everest Ultimate\kerneld.wnt [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2019-04-25 18:38 - 2019-04-25 18:38 - 000031478 _____ C:\Windows\system32\avgremover_msilog.txt
2019-04-25 18:37 - 2019-04-25 18:39 - 000000000 ____D C:\Program Files\Common Files\AVG
2019-04-25 18:32 - 2019-04-25 18:33 - 012240240 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Dolly\Downloads\avgclear.exe
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
MSCONFIG\startupreg: vProt => "C:\Program Files\AVG Web TuneUp\vprot.exe"
FirewallRules: [{FDAF9B63-4FDD-43B7-BBBF-779788513291}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe No File
FirewallRules: [{AA20C00E-33EA-4898-A72A-30285C9BF59E}] => (Allow) C:\Program Files\AVG\AVG2015\avgmfapx.exe No File
FirewallRules: [{F26B557D-6F53-47CB-8EDC-8C7B90336743}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe No File
FirewallRules: [{3D32AB55-F707-4D62-AD40-7E199C4455C8}] => (Allow) C:\Program Files\AVG\AVG2015\avgdiagex.exe No File
FirewallRules: [{FE540893-B05D-4E8A-868D-E29EBE56853A}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe No File
FirewallRules: [{AF4809AB-B82C-4AA4-A468-4854DC8F5513}] => (Allow) C:\Program Files\AVG\AVG2015\avgemcx.exe No File
CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
END
*****************
Processes closed successfully.
Restore point was successfully created.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AvgUi" => removed successfully.
"C:\Program Files\AVG" => not found
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\vProt" => not found
"C:\Program Files\AVG Web TuneUp" => not found
"HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\Software\Microsoft\Windows\CurrentVersion\Run\\radsuperloaver" => removed successfully.
"C:\streamerdata" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A2F46567-247E-40DD-A947-76FFA7E12B3B}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2F46567-247E-40DD-A947-76FFA7E12B3B}" => removed successfully.
C:\Windows\System32\Tasks\AVG EUpdate Task => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AVG EUpdate Task" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{85539B48-FAAD-465B-A4F4-96D5DBC311C5}" => removed successfully.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{85539B48-FAAD-465B-A4F4-96D5DBC311C5}" => removed successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" => removed successfully.
"HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => removed successfully.
HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B6B36D2F-B08C-4D6D-B2F9-F9128329AF6E} => removed successfully.
HKLM\Software\Classes\CLSID\{B6B36D2F-B08C-4D6D-B2F9-F9128329AF6E} => not found
HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F0EB293B-E47D-4203-9CD6-8CF22BF3E945} => removed successfully.
HKLM\Software\Classes\CLSID\{F0EB293B-E47D-4203-9CD6-8CF22BF3E945} => not found
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => removed successfully.
HKLM\Software\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} => removed successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => removed successfully.
HKLM\Software\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => not found
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => removed successfully.
HKLM\Software\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => removed successfully.
HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin, version=11.0.0.1,application/x-avg-sitesafety-plugin => not found
"C:\Program Files\Common Files\AVG Secure Search" => not found
"HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2 -> C:\Windows\system32\npDeployJava1.dll [2015-07-09] (Oracle America, Inc." => not found
"C:\Windows\system32\npDeployJava1.dll" => not found
"HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-07-10] (Oracle America, Inc." => not found
"C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll" => not found
HKLM\System\CurrentControlSet\Services\EverestDriver => removed successfully.
EverestDriver => service removed successfully.
HKLM\System\CurrentControlSet\Services\VGPU => removed successfully.
VGPU => service removed successfully.
C:\Windows\system32\avgremover_msilog.txt => moved successfully
C:\Program Files\Common Files\AVG => moved successfully
C:\Users\Dolly\Downloads\avgclear.exe => moved successfully
"CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"" => removed successfully.
"BVTFilter" => removed successfully.
"BVTConsumer" => removed successfully.
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CCleaner Monitoring => removed successfully.
HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\vProt => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FDAF9B63-4FDD-43B7-BBBF-779788513291}" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AA20C00E-33EA-4898-A72A-30285C9BF59E}" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{F26B557D-6F53-47CB-8EDC-8C7B90336743}" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3D32AB55-F707-4D62-AD40-7E199C4455C8}" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{FE540893-B05D-4E8A-868D-E29EBE56853A}" => removed successfully.
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{AF4809AB-B82C-4AA4-A468-4854DC8F5513}" => removed successfully.
========= ipconfig /flushdns =========
Configuraci¢n IP de Windows
Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.
========= End of CMD: =========
========= ipconfig /renew =========
Configuraci¢n IP de Windows
No se puede realizar ninguna operaci¢n en Conexi¢n de red Bluetooth mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Conexi¢n de rea local mientras los medios
est‚n desconectados.
Adaptador de Ethernet Conexi¢n de red Bluetooth:
Estado de los medios. . . . . . . . . . . : medios desconectados
Sufijo DNS espec¡fico para la conexi¢n. . :
Adaptador de Ethernet Conexi¢n de rea local:
Estado de los medios. . . . . . . . . . . : medios desconectados
Sufijo DNS espec¡fico para la conexi¢n. . :
Adaptador de LAN inal mbrica Conexi¢n de red inal mbrica:
Sufijo DNS espec¡fico para la conexi¢n. . :
V¡nculo: direcci¢n IPv6 local. . . : fe80::ac7f:b75e:9b82:baf4%11
Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.43.101
M scara de subred . . . . . . . . . . . . : 255.255.255.0
Puerta de enlace predeterminada . . . . . : 192.168.43.1
Adaptador de t£nel isatap.{1AB6BB58-D71E-408A-8CBF-0D7D98449406}:
Estado de los medios. . . . . . . . . . . : medios desconectados
Sufijo DNS espec¡fico para la conexi¢n. . :
Adaptador de t£nel isatap.{957B07AB-75BD-4614-A32E-18758E355809}:
Estado de los medios. . . . . . . . . . . : medios desconectados
Sufijo DNS espec¡fico para la conexi¢n. . :
Adaptador de t£nel isatap.{DF7D4A36-592C-4B74-804D-C443FA2C7DE3}:
Estado de los medios. . . . . . . . . . . : medios desconectados
Sufijo DNS espec¡fico para la conexi¢n. . :
========= End of CMD: =========
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
0 out of 0 jobs canceled.
========= End of CMD: =========
========= netsh winsock reset =========
El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.
========= End of CMD: =========
========= netsh advfirewall reset =========
Aceptar
========= End of CMD: =========
========= netsh advfirewall set allprofiles state ON =========
Aceptar
========= End of CMD: =========
========= netsh int ipv4 reset =========
Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.
========= End of CMD: =========
========= netsh int ipv6 reset =========
No hay valores configurados por el usuario para restablecer.
========= End of CMD: =========
========= RemoveProxy: =========
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully.
"HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully.
"HKU\S-1-5-21-1986104296-3163790973-3246301206-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully.
========= End of RemoveProxy: =========
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25988387 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 2486879 B
Edge => 0 B
Chrome => 113762676 B
Firefox => 0 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 16674 B
LocalService => 0 B
NetworkService => 4464 B
Dolly => 11516051 B
RecycleBin => 895437 B
EmptyTemp: => 155.5 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 14:38:31 ====