AutoIt Error

Izmet · 11 Enero, 2020 16:41

Hola,

Hace unos días que cuando enciendo el ordenador me sale una ventana con el mensaje: Line 0 (File"C:\ProgramData\Intel\Wireless\5229512\3858067.au3"):

Cuando cierro esta ventana el ordenador va muy lento. He intentado poner el Antivirus, el Malwarebytes i el CCleaner pero el ordenador se cuelga después de un rato de escaneo… i no me deja seguir…

Gracias

Daniela · 11 Enero, 2020 16:43

Hola @Izmet bienvenid@ al ForoSpyware

Desactiva temporalmente el Antivirus >> Cómo deshabilitar temporalmente su Antivirus

Descarga Farbar Recovery Scan Tool.en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de tu equipo. Como saber si Mi Windows es de 32 o 64 Bits ?.

Ejecuta FRST.exe.
En el mensaje de la ventana del Disclaimer, pulsamos Yes
En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.
Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Pon los dos reportes generados.

Debes copiarlos y pegarlos con todo su contenido y usaras varios mensajes si recibes un mensaje de error indicando que es muy largo(mas de 50.000 caracteres aprox.).

Un saludo

Izmet · 11 Enero, 2020 17:40

Resultado del análisis realizado por Farbar Recovery Scan Tool (FRST) (x64) Versión: 08-01-2020
Ejecutado por Mònica (administrador) sobre MÒNICA-PC (Acer Aspire 5742) (11-01-2020 18:31:49)
Ejecutado desde C:\Users\Mònica\Downloads
Perfiles cargados: Mònica (Perfiles disponibles: Mònica)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Idioma: Español (España, internacional)
Internet Explorer Versión 11 (Navegador predeterminado: FF)
Modo de Inicio: Safe Mode (with Networking)
Tutorial para Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Procesos (Lista blanca) =================

(Si una entrada es incluida en el fixlist, el proceso será cerrado. El archivo no será movido.)

(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\ssonsvr.exe
(McAfee, LLC -> McAfee, Inc.) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

==================== Registro (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, el elemento del registro será restaurado a su valor predeterminado o será eliminado. El archivo no será movido.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronics Corporation -> ELAN Microelectronic Corp.)
HKLM\...\Run: [PLFSetI] => C:\Windows\PLFSetI.exe [206208 2010-06-09] (SONIX TECHNOLOGY CO. , LTD -> )
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
HKLM\...\Run: [CsrHCRPServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrHCRPServer.exe [1134288 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [CsrAudioguiCtrl] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrAudioguiCtrl.exe [511696 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [CsrSyncMLServer] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrSyncMLServer.exe [244944 2012-03-22] (Cambridge Silicon Radio Ltd. -> )
HKLM\...\Run: [vksts] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\vksts.exe [25792 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [HarmonyUserStartup] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\HarmonyUserStartup.exe [39128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [CSRHarmonySkypePlugin] => C:\Program Files (x86)\CSR\CSR Harmony Wireless Software Stack\CSRHarmonySkypePlugin.exe [146656 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\...\Run: [TrayApplication] => C:\Program Files\CSR\CSR Harmony Wireless Software Stack\TrayApplication.exe [529616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-04-13] (Intel Corporation -> Intel Corporation)
HKLM-x32\...\Run: [EgisUpdate] => C:\Program Files (x86)\EgisTec IPS\EgisUpdate.exe [201584 2010-03-11] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [968272 2010-06-22] (Dritek System Inc. -> Dritek System Inc.)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe [642664 2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
HKLM-x32\...\Run: [Nikon Message Center 2] => C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [619008 2010-05-25] (Nikon Corporation) [Archivo no firmado]
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [309184 2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [6261760 2020-01-07] (Dropbox, Inc -> Dropbox, Inc.)
HKLM\...\Policies\Explorer: [NoDesktop] 0
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIVCE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\Run: [c5b0c566] => C:\ProgramData\Intel\Wireless\5229512\abdfdcf.exe [943784 2019-10-27] (AutoIt Consulting Ltd -> AutoIt Team)
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"hxxp://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\79.0.3945.88\Installer\chrmstp.exe [2020-01-06] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\57.0.2987.133\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\...\Authentication\Credential Providers: [{5355DA8C-FE32-49b4-A567-A67535C86592}] -> C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BLEtokenCredentialProvider.dll [2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
HKLM\Software\...\Authentication\Credential Providers: [{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}] -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDCREDPROV.DLL [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Moveslink for Movestick Mini.lnk [2011-08-30]
ShortcutTarget: Moveslink for Movestick Mini.lnk -> C:\Windows\Installer\{A1D727D7-498D-4FB8-8C75-EA4A506C5FEF}\_7130A06DF4B807CD9347ED.exe () [Archivo no firmado]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Moveslink.lnk [2012-03-08]
ShortcutTarget: Moveslink.lnk -> C:\Windows\Installer\{0ED016B2-C009-4253-9DDD-BDB8DA9CE181}\_E02D80CCF13FCD5A87F526.exe () [Archivo no firmado]
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN

==================== Tareas programadas (Lista blanca) ============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

Task: {00F2F7DF-6867-48EF-B0F2-18679EC3B43E} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-04] (Dropbox, Inc -> Dropbox, Inc.)
Task: {0EBDA104-936A-4175-B10B-C0B6BB730138} - System32\Tasks\{8E5790B3-0AF7-4A84-B50B-884DADED1360} => C:\Users\Mònica\Documents\Renta2010\RENTA 2010.exe
Task: {165A6D90-7A3D-415C-BDC4-BD6B3BF73427} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {1BFAFC6E-3DC0-46B8-8686-BDE3B7B734D1} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {1BFAFC6E-3DC0-46B8-8686-BDE3B7B734D1} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [358400  [358400 2016-04-24]] (Microsoft Windows -> Microsoft Corporation)
Task: {238CD45B-C7B9-4058-A8DD-AA692D92C216} - System32\Tasks\{BDE631EB-EA8B-4CC8-B422-EFE019C0542F} => C:\Windows\system32\pcalua.exe -a "C:\ProgramData\Citrix\Citrix online plug-in\TrolleyExpress.exe" -c /uninstall /cleanup
Task: {26AC6E5C-9887-4906-B244-DC9C50313BDC} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
Task: {29AE1669-A21F-46FF-ADE1-386DE7E948CB} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_303_Plugin.exe [1457720 2020-01-06] (Adobe Inc. -> Adobe)
Task: {2C3074ED-42AC-49BC-9E1F-76307C2696F9} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
Task: {2FE63626-4B55-46FA-BF54-BD7BFA846402} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {2FE63626-4B55-46FA-BF54-BD7BFA846402} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [358400  [358400 2016-04-24]] (Microsoft Windows -> Microsoft Corporation)
Task: {4235C39D-069E-47F7-AA90-1E9F2634890D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(1): %windir%\system32\GWX\GWXUXWorker.exe -> /ScheduleUpgradeReminderTime
Task: {4235C39D-069E-47F7-AA90-1E9F2634890D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [358400  [358400 2016-04-24]] (Microsoft Windows -> Microsoft Corporation)
Task: {47A4A73A-2D01-4CA2-A1EB-DA12E081C3F1} - System32\Tasks\{45F8B551-B89D-47EA-A5A8-DB0A755BD2B1} => C:\Users\Mònica\Documents\Renta2010\RENTA 2010.exe
Task: {4F3EFAA5-CA60-42ED-9B0B-10208E66A026} - System32\Tasks\{A973B0B6-6C2A-4ED2-9298-605BAF2FE430} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/6.18.0.106/es/abandoninstall?source=lightinstaller&page=tsPlugin
Task: {548A4E53-EDD2-46D3-9A11-D75C6131D166} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {548A4E53-EDD2-46D3-9A11-D75C6131D166} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {548A4E53-EDD2-46D3-9A11-D75C6131D166} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [358400  [358400 2016-04-24]] (Microsoft Windows -> Microsoft Corporation)
Task: {68DFE7C2-E632-44A9-90DD-91ABEC295C38} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {6C9E3244-CF47-4FF5-A828-36E4D0798E00} - System32\Tasks\{4BF1010D-E6C8-43C6-B1C9-EB91919DA881} => C:\Windows\system32\pcalua.exe -a "C:\Users\Mònica\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\876H4BDA\JavaSetup8u25[1].exe" -d C:\Users\Mònica\Desktop
Task: {6E7CFE78-0F80-454C-B186-EFB3ABBF98FD} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [1873288 2019-09-21] (AVAST Software s.r.o. -> AVAST Software)
Task: {72F56C85-5B16-4FA8-917F-897CE6343AA5} - System32\Tasks\{E21C4FAD-6C22-497D-B8B3-F7CADCC33725} => C:\Program Files\AVAST Software\Avast\AvastUI.exe [12128648 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
Task: {834AF714-C48C-4974-A163-E9FFE22957F5} - System32\Tasks\{30222E80-7F51-48A5-8C8A-D576B1ADADF5} => C:\Users\Mònica\Documents\Renta2010\RENTA 2010.exe
Task: {86787340-417D-4DAC-8FBB-2EFBDA98B0AE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [144200 2015-08-31] (Google Inc -> Google Inc.)
Task: {8E5F0092-BD00-4413-B40B-F1BBB6C364D5} - System32\Tasks\EPSON XP-255 257 Series Update {FF72FD90-E134-4957-B2FB-BA9C1ED2632D} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSVCE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {93B5BA9C-6DBA-46CA-B7AC-0D2F60E3E7D0} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-04] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9BE545B6-3F15-451B-9674-22F9DCC585F2} - System32\Tasks\{76016891-F362-49CE-AC8E-843B18C594F8} => C:\Users\Mònica\Documents\Renta2010\RENTA 2010.exe
Task: {A3C24B7A-283E-431B-B6F8-9579E6AA2BA4} - System32\Tasks\Programme de mise à jour en ligne de Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {A4F72A82-7F7E-474B-8A91-157CE861EA46} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-01-06] (Adobe Inc. -> Adobe)
Task: {ADCF1B3F-8BB2-4796-931C-F306DA01C735} - System32\Tasks\{6306A7F2-704E-42E7-9457-CB978459F755} => C:\Windows\system32\pcalua.exe -a C:\Users\Mònica\Downloads\JavaSetup8u25.exe -d C:\Users\Mònica\Downloads
Task: {BFE0A83E-816C-4A18-BA5E-FB7B0BB7897C} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C0603A5A-5C63-4CE4-B969-C2262A75E69D} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2014\OneClick.exe [460088 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
Task: {CECB0D19-E6CF-433E-82E8-D8316D648A18} - System32\Tasks\{0AF2DBDB-711D-4749-804A-66B7CC761501} => C:\Program Files\AVAST Software\Avast\AvastUI.exe [12128648 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
Task: {D1BD64C0-303D-4AD7-A124-2EA962E39679} - System32\Tasks\{FEBAF989-C6D5-49A4-AD66-03D9B9EE79E4} => C:\Users\Mònica\Documents\Renta2010\RENTA 2010.exe
Task: {EAF4A699-BE87-42BB-85C9-7FE4B209BF41} - System32\Tasks\{4E8DA82E-A84F-4EA7-A49D-DF3898137A31} => C:\Users\Mònica\Documents\Renta2010\RENTA 2010.exe
Task: {FA9BD770-9549-4F65-8DC8-443E39EC7511} - System32\Tasks\{23180B57-1592-4E4F-8E1B-FA210AD8BD45} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=4.1.0.179.367&LastError=400

(Si una entrada es incluida en el fixlist, el archivo de tarea (.job) será movido. El archivo que está siendo ejecutado por la tarea no será movido.)

Task: C:\Windows\Tasks\AdwCleaner_onReboot.job => C:\Users\Mònica\Downloads\adwcleaner_8.0.1.exe
Task: C:\Windows\Tasks\CCleaner Update.job => C:\Program Files\CCleaner\CCUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\EPSON XP-255 257 Series Update {FF72FD90-E134-4957-B2FB-BA9C1ED2632D}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSVCE.EXE:/EXE:{FF72FD90-E134-4957-B2FB-BA9C1ED2632D} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Lista blanca) ====================

(Si un elemento es incluido en el fixlist, y éste pertenece al registro, será eliminado o restaurado a su valor predeterminado.)

Winsock: Catalog5 05 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5 06 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [145280 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 05 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Winsock: Catalog5-x64 06 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL [170880 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
Tcpip\Parameters: [DhcpNameServer] 212.231.6.7 46.6.113.34
Tcpip\..\Interfaces\{33B3949C-D3FA-4C5A-9454-E9E032048071}: [DhcpNameServer] 212.231.6.7 46.6.113.34
Tcpip\..\Interfaces\{FBE8EDFF-40B4-4F01-B66D-8CE039DB5E4E}: [DhcpNameServer] 80.58.61.250 80.58.61.254

Internet Explorer:
==================
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.es/
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0c0a&m=aspire_5742&r=27360711r985l0424z1j5v48021324
URLSearchHook: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 - (Sin Nombre) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Ningún archivo
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\.DEFAULT -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\.DEFAULT -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
SearchScopes: HKU\.DEFAULT -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> DefaultScope {66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} URL = hxxps://es.search.yahoo.com/search?fr=mcafee&type=C010ES662D20110728&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = 
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} URL = hxxps://es.search.yahoo.com/search?fr=mcafee&type=C010ES662D20110728&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_esES442ES443
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\x64\IEPlugin.dll [2020-01-06] (McAfee, LLC -> McAfee, Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Ningún archivo
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\ssv.dll [2020-01-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Aplicación auxiliar de inicio de sesión de Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
BHO-x32: McAfee WebAdvisor -> {B164E929-A1B6-4A06-B104-2CD0E90A88FF} -> C:\Program Files\McAfee\WebAdvisor\win32\IEPlugin.dll [2020-01-06] (McAfee, LLC -> McAfee, Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\jp2ssv.dll [2020-01-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Ningún archivo
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\.DEFAULT -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Toolbar: HKU\.DEFAULT -> Sin Nombre - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> Sin Nombre - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
DPF: HKLM-x32 {2DAB6EF1-66C3-427C-87CD-8DC448C47EAE} hxxps://www5.aeat.es/es13/h/tgvicab.cab
DPF: HKLM-x32 {947B00D2-962D-4A35-9E48-98EE6A442B41} hxxps://www1.agenciatributaria.gob.es/ADUA/internet/aded1503.cab
DPF: HKLM-x32 {B785FA3C-1DE9-4D20-8396-613C486FE95E} hxxps://www1.agenciatributaria.gob.es/es13/h/cactivex.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Ningún archivo
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Ningún archivo
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-07-18] (Skype Software Sarl -> Skype Technologies)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2012-03-28] (Citrix Systems, Inc. -> Citrix Systems, Inc.)

FireFox:
========
FF DefaultProfile: lzk9r22e.default-1422990210123-1505501226012
FF ProfilePath: C:\Users\Mònica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012 [2020-01-11]
FF user.js: detected! => C:\Users\Mònica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012\user.js [2019-01-17]
FF Homepage: Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012 -> hxxps://www.google.es/
FF Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Mònica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012\Extensions\[email protected] [2019-04-13]
FF Extension: (Avast Online Security) - C:\Users\Mònica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012\Extensions\[email protected] [2020-01-10]
FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Extension: (McAfee® WebAdvisor) - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi [2020-01-06]
FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files\McAfee\WebAdvisor\e10ssaffplg.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_303.dll [2020-01-06] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=1.6.0_45 -> C:\Windows\system32\npdeployJava1.dll [2013-05-16] (Sun Microsystems, Inc. -> Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled [Ningún archivo]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_303.dll [2020-01-06] (Adobe Inc. -> )
FF Plugin-x32: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2020-01-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files (x86)\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2020-01-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Ningún archivo]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2020-01-06] (Google LLC -> Google LLC)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.35.422\npGoogleUpdate3.dll [2020-01-06] (Google LLC -> Google LLC)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\Air\nppdf32.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/search?fr=mcafee&type=E210ES662G0&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR DefaultSuggestURL: Default -> hxxps://es.search.yahoo.com/sugg/gossip/gossip-es-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
CHR Profile: C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default [2020-01-10]
CHR Extension: (Presentaciones) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-12-16]
CHR Extension: (Documentos) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-12-16]
CHR Extension: (Google Drive) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-28]
CHR Extension: (YouTube) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-28]
CHR Extension: (Búsqueda de Google) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-28]
CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-01-05]
CHR Extension: (Hojas de cálculo) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-12-24]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2020-01-05]
CHR Extension: (Documentos de Google sin conexión) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-12-16]
CHR Extension: (Avast Online Security) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-01-05]
CHR Extension: (SweetIM for Facebook) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCSocialUpdate.xml] <==== ATENCIÓN
CHR Extension: (Sistema de pagos de Chrome Web Store) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2019-10-12]
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCToolbarUpdate.xml] <==== ATENCIÓN
CHR Extension: (Gmail) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2019-06-10]
CHR Extension: (Chrome Media Router) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-05]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-07-03]
CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-10-22]

==================== Servicios (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

S3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6259592 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S2 BtSwitcherService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe [64216 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S2 CSRBtAudioService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe [465624 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S2 CsrBtService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe [825032 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-04] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-01-04] (Dropbox, Inc -> Dropbox, Inc.)
S2 DbxSvc; C:\Windows\system32\DbxSvc.exe [44552 2020-01-07] (Dropbox, Inc -> Dropbox, Inc.)
S2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2017-11-13] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S2 HFGService; C:\Windows\System32\HFGService.dll [535552 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Archivo no firmado]
S2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [913208 2020-01-06] (McAfee, LLC -> McAfee, Inc.)
S4 MWLService; C:\Program Files (x86)\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
S2 NMSAccess64; C:\Windows\SysWOW64\NMSAccess64.exe [82872 2009-01-12] (Numedia Soft, Inc. -> )
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesService64.exe [2145080 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [43320 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36152 2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
S2 wlidsvc; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2286976 2010-09-21] (Microsoft Corporation -> Microsoft Corp.)
S2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [X]
S2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [X]
S4 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [X]
S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [X]

===================== Controladores (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37616 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [204824 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [274456 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [209552 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [65120 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [276952 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42736 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [171520 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110320 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83792 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848432 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460448 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S2 aswStm; C:\Windows\System32\drivers\aswStm.sys [236024 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316528 2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
S3 BthAudioHF; C:\Windows\System32\DRIVERS\BthAudioHF.sys [52224 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 CsrBthAudioHF; C:\Windows\System32\DRIVERS\CsrBthAudioHF.sys [39120 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S3 CsrBtPort; C:\Windows\System32\DRIVERS\CsrBtPort.sys [2784968 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S3 csrhfgcc; C:\Windows\System32\DRIVERS\csrhfgcc.sys [38080 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S3 csrpan; C:\Windows\System32\DRIVERS\csrpan.sys [39616 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S3 csrserial; C:\Windows\System32\DRIVERS\csrserial.sys [61128 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csrusb; C:\Windows\System32\Drivers\csrusb.sys [47296 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
R3 csrusbfilter; C:\Windows\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S3 csr_a2dp; C:\Windows\System32\drivers\bthav.sys [78848 2009-12-21] (Microsoft Windows Hardware Compatibility Publisher -> CSR, plc)
S3 csr_bthav; C:\Windows\System32\drivers\csrbthav.sys [99520 2012-03-22] (Cambridge Silicon Radio Ltd. -> Cambridge Silicon Radio Limited)
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [68800 2008-03-13] (Future Technology Devices International Ltd -> FTDI Ltd.)
S3 FTSER2K; C:\Windows\System32\drivers\ftser2k.sys [84288 2008-03-13] (Future Technology Devices International Ltd -> FTDI Ltd.)
S3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44032 2011-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Research in Motion Ltd)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2014\TuneUpUtilitiesDriver64.sys [31144 2015-06-04] (AVG Technologies CZ, s.r.o. -> TuneUp Software)
S2 TurboB; C:\Windows\System32\DRIVERS\TurboB.sys [13784 2009-11-02] (Intel(R) Extreme Tuning Utility -> )
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [X]

==================== NetSvcs (Lista blanca) ===================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)


==================== Un mes (creado) ===================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-01-11 18:31 - 2020-01-11 18:31 - 002573312 _____ (Farbar) C:\Users\Mònica\Downloads\FRST64(1).exe
2020-01-11 18:26 - 2020-01-11 18:27 - 000044178 _____ C:\Users\Mònica\Downloads\Addition.txt
2020-01-11 18:23 - 2020-01-11 18:32 - 000041507 _____ C:\Users\Mònica\Downloads\FRST.txt
2020-01-11 18:23 - 2020-01-11 18:32 - 000000000 ____D C:\FRST
2020-01-11 18:23 - 2020-01-11 18:23 - 002573312 _____ (Farbar) C:\Users\Mònica\Downloads\FRST64.exe
2020-01-10 22:44 - 2020-01-10 22:44 - 000000290 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
2020-01-10 22:43 - 2020-01-10 22:44 - 000000000 ____D C:\AdwCleaner
2020-01-10 22:42 - 2020-01-10 22:43 - 008237744 _____ (Malwarebytes) C:\Users\Mònica\Downloads\adwcleaner_8.0.1.exe
2020-01-10 22:07 - 2020-01-10 22:07 - 000000000 ____D C:\Intel
2020-01-10 20:01 - 2020-01-10 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2020-01-10 19:39 - 2020-01-10 19:39 - 000002812 _____ C:\Windows\system32\Tasks\CCleanerSkipUAC
2020-01-10 19:17 - 2020-01-11 18:15 - 000559434 _____ C:\Windows\ntbtlog.txt
2020-01-10 19:12 - 2020-01-10 19:12 - 000000786 _____ C:\Users\Public\Desktop\CCleaner.lnk
2020-01-10 19:12 - 2020-01-10 19:12 - 000000300 ____H C:\Windows\Tasks\CCleaner Update.job
2020-01-10 19:12 - 2020-01-10 19:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2020-01-10 19:12 - 2020-01-10 19:12 - 000000000 ____D C:\Program Files\CCleaner
2020-01-10 19:11 - 2020-01-10 19:11 - 024578944 _____ (Piriform Software Ltd) C:\Users\Mònica\Downloads\ccleaner-5-63-7540.exe
2020-01-10 19:09 - 2020-01-10 19:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2020-01-10 19:09 - 2020-01-10 19:09 - 024581800 _____ (Piriform Software Ltd) C:\Users\Mònica\Downloads\cctrialsetup.exe
2020-01-10 18:27 - 2020-01-10 18:27 - 000000000 ____H C:\Users\Mònica\AppData\Local\BIT1D50.tmp
2020-01-10 18:27 - 2020-01-10 18:27 - 000000000 ____H C:\Users\Mònica\AppData\Local\BIT1219.tmp
2020-01-10 18:25 - 2020-01-10 18:25 - 000000000 _____ C:\Users\Mònica\AppData\Local\{901D67BF-314F-499E-8D22-14A1AF5F3993}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\Mònica\AppData\Local\{ECB58AD4-0C9C-434B-8921-AEB84B3C70EE}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\Mònica\AppData\Local\{71FA161F-5360-4EBF-98E9-15D47046C2A3}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\Mònica\AppData\Local\{4FA956B3-A7CE-4534-852A-9254B7BD9ED1}
2020-01-07 14:21 - 2020-01-07 14:21 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
2020-01-07 14:21 - 2020-01-07 14:21 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
2020-01-07 14:21 - 2020-01-07 14:21 - 000047600 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
2020-01-07 14:21 - 2020-01-07 14:21 - 000044552 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
2020-01-06 11:38 - 2020-01-06 11:38 - 000000000 ____D C:\Users\Mònica\AppData\Roaming\Sun
2020-01-06 11:33 - 2020-01-06 11:33 - 000001849 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2020-01-06 11:33 - 2020-01-06 11:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2020-01-06 11:33 - 2020-01-06 11:33 - 000000000 ____D C:\Program Files (x86)\QuickTime
2020-01-05 23:54 - 2020-01-05 23:51 - 000355720 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2020-01-05 23:54 - 2020-01-05 23:51 - 000236024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2020-01-05 23:54 - 2020-01-05 23:51 - 000171520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2020-01-05 14:29 - 2020-01-05 14:29 - 000000000 _____ C:\Users\Mònica\AppData\Local\{65AD0D8C-65B3-4CDE-8A8D-4C4296CAB8F0}
2020-01-02 20:18 - 2020-01-02 20:18 - 000000000 ____D C:\Users\Mònica\AppData\Roaming\dvdcss
2020-01-02 19:08 - 2020-01-02 19:14 - 2131405184 ____R C:\Users\Mònica\Downloads\Objetivo Washington DC (2019).avi
2019-12-26 06:46 - 2019-12-26 06:52 - 000000000 ____D C:\Users\Mònica\Documents\Eurocrivasa
2019-12-26 06:43 - 2019-12-26 06:45 - 000000000 ____D C:\Users\Mònica\Documents\Impost circulació

==================== Un mes (modificado) ==================

(Si una entrada es incluida en el fixlist, el archivo/carpeta será eliminado/a.)

2020-01-11 18:28 - 2016-11-20 20:37 - 000000000 ____D C:\Users\Mònica\AppData\LocalLow\Mozilla
2020-01-11 18:10 - 2016-01-04 20:39 - 000000988 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
2020-01-11 18:09 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-01-11 17:55 - 2014-11-14 21:44 - 000129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2020-01-11 17:36 - 2009-07-14 05:45 - 000015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2020-01-11 17:36 - 2009-07-14 05:45 - 000015792 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2020-01-10 22:44 - 2010-07-13 12:52 - 000000000 ____D C:\ProgramData\Acer
2020-01-10 22:03 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2020-01-10 20:04 - 2012-03-28 21:45 - 000003706 _____ C:\Windows\system32\Tasks\Java Update Scheduler
2020-01-10 20:01 - 2016-01-04 20:39 - 000000000 ____D C:\Program Files (x86)\Dropbox
2020-01-10 19:58 - 2016-01-04 20:39 - 000000992 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
2020-01-10 19:57 - 2018-11-05 19:56 - 000000911 _____ C:\Windows\Tasks\EPSON XP-255 257 Series Update {FF72FD90-E134-4957-B2FB-BA9C1ED2632D}.job
2020-01-10 19:45 - 2010-10-11 10:32 - 000781764 _____ C:\Windows\system32\perfh00A.dat
2020-01-10 19:45 - 2010-10-11 10:32 - 000171662 _____ C:\Windows\system32\perfc00A.dat
2020-01-10 19:45 - 2009-07-14 06:13 - 000006264 _____ C:\Windows\system32\PerfStringBackup.INI
2020-01-10 19:36 - 2015-02-02 21:45 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-01-10 19:14 - 2016-10-30 17:04 - 000000000 ____D C:\Users\Mònica\AppData\Roaming\uTorrent
2020-01-10 19:14 - 2015-12-28 14:15 - 000000000 ____D C:\Users\Mònica\AppData\Roaming\PhotoScape
2020-01-10 19:14 - 2015-06-06 10:19 - 000000000 ____D C:\Windows\Minidump
2020-01-10 19:14 - 2012-10-22 08:53 - 000000000 ____D C:\Users\Mònica\Tracing
2020-01-10 19:14 - 2007-07-12 02:49 - 000000000 ____D C:\Windows\Panther
2020-01-10 18:36 - 2017-08-20 20:24 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2020-01-06 21:33 - 2019-06-28 13:07 - 000002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2020-01-06 21:33 - 2015-12-28 14:14 - 000002226 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-01-06 11:42 - 2017-03-15 22:41 - 000000000 ___RD C:\Program Files (x86)\Skype
2020-01-06 11:42 - 2017-03-15 22:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2020-01-06 11:42 - 2013-08-07 19:03 - 000000000 ____D C:\ProgramData\Skype
2020-01-06 11:41 - 2018-04-07 18:29 - 000001074 _____ C:\Users\Public\Desktop\VLC media player.lnk
2020-01-06 11:36 - 2014-11-17 21:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-01-06 11:35 - 2014-11-17 21:18 - 000099192 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2020-01-06 11:34 - 2012-04-05 09:23 - 000000000 ____D C:\Program Files (x86)\Java
2020-01-06 11:28 - 2011-07-28 15:07 - 000003536 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2020-01-06 11:28 - 2011-07-28 15:07 - 000003408 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2020-01-06 11:19 - 2018-03-13 20:25 - 000004496 _____ C:\Windows\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-01-06 11:19 - 2012-06-09 14:01 - 000842296 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerApp.exe
2020-01-06 11:19 - 2012-06-09 14:01 - 000004320 _____ C:\Windows\system32\Tasks\Adobe Flash Player Updater
2020-01-06 11:19 - 2012-06-09 14:01 - 000000000 ____D C:\Windows\system32\Macromed
2020-01-06 11:19 - 2011-08-09 11:35 - 000175160 _____ (Adobe) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2020-01-06 11:19 - 2010-07-13 13:02 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2020-01-05 23:56 - 2011-10-05 20:41 - 000848432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2020-01-05 23:56 - 2011-10-05 20:41 - 000460448 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2020-01-05 23:52 - 2013-04-15 21:33 - 000316528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2020-01-05 23:51 - 2018-01-09 19:58 - 000276952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2020-01-05 23:51 - 2013-04-15 21:33 - 000083792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2020-01-05 23:51 - 2013-04-15 21:33 - 000042736 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2020-01-05 23:51 - 2012-03-24 10:59 - 000110320 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2020-01-05 23:50 - 2019-04-13 20:57 - 000274456 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdriver.sys
2020-01-05 23:50 - 2019-04-13 20:57 - 000209552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsh.sys
2020-01-05 23:50 - 2019-04-13 20:57 - 000065120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniv.sys
2020-01-05 23:50 - 2019-04-13 20:57 - 000037616 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArDisk.sys
2020-01-05 23:50 - 2018-01-09 19:58 - 000204824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2020-01-05 23:35 - 2015-06-01 14:09 - 000001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2020-01-05 23:23 - 2018-12-16 16:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hofmann
2020-01-05 23:23 - 2018-04-07 18:29 - 000000000 ____D C:\Users\Mònica\AppData\Roaming\vlc
2020-01-05 23:23 - 2016-01-04 20:43 - 000000000 ___RD C:\Users\Mònica\Dropbox
2020-01-05 23:23 - 2015-12-21 21:23 - 000000000 ___SD C:\Users\Mònica\Documents\My Hofmann
2020-01-05 23:23 - 2015-04-07 17:41 - 000000000 ___SD C:\Windows\system32\GWX
2020-01-05 23:23 - 2011-07-28 14:49 - 000000000 ____D C:\Users\Mònica
2020-01-05 23:23 - 2010-07-13 12:59 - 000000000 ____D C:\ProgramData\FLEXnet
2020-01-05 23:23 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2020-01-05 23:22 - 2019-12-02 21:21 - 000000000 ____D C:\testintel2
2020-01-05 23:22 - 2013-04-29 12:17 - 000000000 ____D C:\Users\Mònica\AppData\Local\Downloaded Installations
2020-01-05 23:22 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2020-01-05 23:21 - 2015-12-21 21:23 - 000000000 ____D C:\Users\Mònica\AppData\Local\Hofmann
2020-01-05 23:21 - 2013-08-07 19:05 - 000000000 ____D C:\Users\Mònica\AppData\Roaming\Skype
2020-01-02 20:08 - 2019-06-24 17:33 - 000000000 ____D C:\Users\Mònica\AppData\Local\BitTorrentHelper
2019-12-28 19:44 - 2019-02-02 10:43 - 000029696 _____ C:\Users\Mònica\Documents\Data Naixament_familia.xls
2019-12-28 10:14 - 2012-09-02 17:55 - 000000020 ____H C:\ProgramData\PKP_DLev.DAT
2019-12-26 06:56 - 2015-11-20 17:18 - 000000000 ____D C:\Users\Mònica\Documents\FEINA_INTERMAS

==================== Archivos en la raíz de algunos directorios ========

2015-06-01 21:17 - 2015-06-01 21:18 - 050063360 _____ () C:\Program Files (x86)\GUTCD50.tmp
2014-11-14 18:54 - 2014-11-17 19:55 - 000000093 _____ () C:\Users\Mònica\AppData\Roaming\ARCompanion.log
2012-09-02 17:55 - 2012-09-02 17:55 - 000000268 ___RH () C:\Users\Mònica\AppData\Roaming\Quartz Composer
2012-09-02 17:55 - 2012-09-02 17:55 - 000000268 ___RH () C:\Users\Mònica\AppData\Roaming\Radio Sounds
2012-09-02 17:55 - 2012-09-02 17:55 - 000000268 ___RH () C:\Users\Mònica\AppData\Roaming\Receipts
2015-02-02 21:43 - 2015-02-02 21:43 - 000000287 _____ () C:\Users\Mònica\AppData\Roaming\removeAllComponents.bat
2013-01-21 20:56 - 2013-11-07 22:51 - 000000616 _____ () C:\Users\Mònica\AppData\Roaming\Rim.Desktop.Exception.log
2013-01-21 20:56 - 2014-11-20 20:04 - 000002021 _____ () C:\Users\Mònica\AppData\Roaming\Rim.Desktop.HttpServerSetup.log
2013-01-21 20:56 - 2013-11-07 22:51 - 000000616 _____ () C:\Users\Mònica\AppData\Roaming\Rim.DesktopHelper.Exception.log
2014-11-05 20:13 - 2014-11-05 20:13 - 000000130 _____ () C:\Users\Mònica\AppData\Roaming\tmp_register.bat
2015-02-02 21:43 - 2015-02-02 21:43 - 000000135 _____ () C:\Users\Mònica\AppData\Roaming\tmp_unregister.bat
2013-07-26 23:16 - 2014-03-28 01:30 - 000000230 _____ () C:\Users\Mònica\AppData\Roaming\WB.CFG
2013-06-21 22:35 - 2013-06-21 22:35 - 000000005 _____ () C:\Users\Mònica\AppData\Roaming\WBPU-Q2-TTL.DAT
2013-12-31 16:16 - 2014-01-03 18:51 - 000000005 _____ () C:\Users\Mònica\AppData\Roaming\WBPU-Q5-TTL.DAT
2013-06-17 15:16 - 2014-02-01 13:23 - 000000005 _____ () C:\Users\Mònica\AppData\Roaming\WBPU-TTL.DAT
2020-01-10 18:27 - 2020-01-10 18:27 - 000000000 ____H () C:\Users\Mònica\AppData\Local\BIT1219.tmp
2020-01-10 18:27 - 2020-01-10 18:27 - 000000000 ____H () C:\Users\Mònica\AppData\Local\BIT1D50.tmp
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ () C:\Users\Mònica\AppData\Local\{4FA956B3-A7CE-4534-852A-9254B7BD9ED1}
2020-01-05 14:29 - 2020-01-05 14:29 - 000000000 _____ () C:\Users\Mònica\AppData\Local\{65AD0D8C-65B3-4CDE-8A8D-4C4296CAB8F0}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ () C:\Users\Mònica\AppData\Local\{71FA161F-5360-4EBF-98E9-15D47046C2A3}
2020-01-10 18:25 - 2020-01-10 18:25 - 000000000 _____ () C:\Users\Mònica\AppData\Local\{901D67BF-314F-499E-8D22-14A1AF5F3993}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ () C:\Users\Mònica\AppData\Local\{ECB58AD4-0C9C-434B-8921-AEB84B3C70EE}

==================== SigCheck ============================

(No existe una corrección automática para los archivos que no pasan la verificación.)


LastRegBack: 2019-12-28 11:33
==================== Final de FRST.txt ========================
/CODE

Izmet · 11 Enero, 2020 17:41

Resultados del Análisis Adicional de Farbar Recovery Scan Tool (x64) Versión: 08-01-2020
Ejecutado por Mònica (11-01-2020 18:32:25)
Ejecutado desde C:\Users\Mònica\Downloads
Windows 7 Home Premium Service Pack 1 (X64) (2011-07-28 13:49:41)
Modo de Inicio: Safe Mode (with Networking)
==========================================================


==================== Cuentas: =============================

Administrador (S-1-5-21-3505058533-3891674970-1505442175-500 - Administrator - Disabled)
HomeGroupUser$ (S-1-5-21-3505058533-3891674970-1505442175-1002 - Limited - Enabled)
Invitado (S-1-5-21-3505058533-3891674970-1505442175-501 - Limited - Disabled)
Mònica (S-1-5-21-3505058533-3891674970-1505442175-1001 - Administrator - Enabled) => C:\Users\Mònica

==================== Centro de Seguridad ========================

(Si una entrada es incluida en el fixlist, será eliminada.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Programas instalados ======================

(Solo los programas de adware con indicador "Oculto", pueden ser añadidos al fixlist para hacerlos visibles. Los programas adware deben ser desinstalados manualmente.)

µTorrent (HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\uTorrent) (Version: 3.5.5.45341 - BitTorrent Inc.)
Acer Crystal Eye Webcam (HKLM-x32\...\{7760D94E-B1B5-40A0-9AA0-ABF942108755}) (Version: 5.2.19.3 - Suyin Optronics Corp)
Acer eRecovery Management (HKLM-x32\...\{7F811A54-5A09-4579-90E1-C93498E230D9}) (Version: 4.05.3013 - Acer Incorporated)
Acer ScreenSaver (HKLM-x32\...\Acer Screensaver) (Version: 1.1.0707.2010 - Acer Incorporated)
Acrobat.com (HKLM-x32\...\{287ECFA4-719A-2143-A09B-D6A12DE54E40}) (Version: 1.6.65 - Adobe Systems Incorporated)
Adobe Acrobat 9 Pro - Italiano, Español, Nederlands, Português (HKLM-x32\...\{AC76BA86-1040-7D70-7760-000000000004}{AC76BA86-1040-7D70-7760-000000000004}) (Version: 9.5.5 - Adobe Systems)
Adobe Acrobat 9.5.5 - CPSID_83708 (HKLM-x32\...\{AC76BA86-1040-7D70-7760-000000000004}_955) (Version:  - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.2090 - Adobe Systems Incorporated)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.303 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.303 - Adobe)
Adobe Reader 9.2 MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-A91000000001}) (Version: 9.2.0 - Adobe Systems Incorporated)
Apple Application Support (HKLM-x32\...\{553255F3-78FD-40F1-A6F8-6882140265FE}) (Version: 1.2.1 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 19.8.2393 - AVAST Software)
Broadcom Gigabit NetLink Controller (HKLM\...\{A84DB02B-9C2B-4272-9D2D-A80E00A56513}) (Version: 14.0.2.3 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Citrix online plug-in (HKLM-x32\...\CitrixOnlinePluginFull) (Version: 12.3.0.8 - Citrix Systems, Inc.)
CSR Harmony Wireless Software Stack (HKLM\...\{17DEA095-8EE1-49A2-AC5A-9663DB098FA9}) (Version: 2.1.63.0 - CSR Plc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 88.4.172 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.241.1 - Dropbox, Inc.) Hidden
EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version:  - EaseUS)
Epson Printer Connection Checker (HKLM-x32\...\{9ABD2971-9B8B-4958-9100-4EAFCC32A86D}) (Version: 3.0.0.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version:  - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.)
Epson Software Updater (HKLM-x32\...\{60A3CB9F-4429-4C7A-AA97-77CC4FE10671}) (Version: 4.4.9 - Seiko Epson Corporation)
EPSON XP-255 257 Series Printer Uninstall (HKLM\...\EPSON XP-255 257 Series) (Version:  - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
ETDWare PS/2-x64 7.0.6.5_WHQL (HKLM\...\Elantech) (Version: 7.0.6.5 - ELAN Microelectronics Corp.)
face2face Second edition Intermediate application (HKLM-x32\...\{D8CA1E5D-8860-A2F7-55DC-D2B4BA3404A8}) (Version: 1.0.0 - Cambridge University Press Holdings Limited) Hidden
face2face Second edition Intermediate application (HKLM-x32\...\face2faceSecondeditionIntermediate) (Version: 1.0.0 - Cambridge University Press Holdings Limited)
face2face Second edition Intermediate content (HKLM-x32\...\face2face Second edition Intermediate content) (Version: 1.0.0.0 - Cambridge University Press)
FotoPrix FotoLibro v4 (HKLM-x32\...\{2FEC2258-5F07-400B-82AE-232510ED187D}) (Version: 6.10.0049 - FotoPrix, S.A.)
Free Editor (HKLM\...\{1BF14E04-85DE-480C-9A04-EB36744C66B4}_is1) (Version: 2.0.3 - Blue Labs, LLC)
Galería fotográfica de Windows Live (HKLM-x32\...\{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Garmin MapSource (HKLM-x32\...\{AFBAB9A0-DDE8-49AE-8C17-A01B61BEE64B}) (Version: 6.16.3 - Garmin Ltd or its subsidiaries)
Garmin USB Drivers (HKLM-x32\...\{510D2239-6C2E-457B-9590-485EC552D94D}) (Version: 2.3.0.0 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 79.0.3945.88 - Google LLC)
Google Earth Pro (HKLM\...\{70A0F34E-564B-4F93-ADD6-3BAEC6E44075}) (Version: 7.3.2.5776 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.421 - Google LLC) Hidden
Hofmann 12.0.0.11 (HKLM-x32\...\{FAF6DF16-51F8-4A8A-B3B2-D349A5FD491F}) (Version: 12.0.0 - Hofmann)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1007 - Intel Corporation)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2125 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 6.0.0.1179 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 9.6.2.1001 - Intel Corporation)
Java 8 Update 201 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Launch Manager (HKLM-x32\...\LManager) (Version: 4.0.12 - Acer Inc.)
Malwarebytes Anti-Malware versión 2.0.3.1025 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.0.3.1025 - Malwarebytes Corporation)
Manuales de EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.54.0.0 - Seiko Epson Corporation)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.57 - McAfee, LLC.)
Microsoft .NET Framework 4.6.1 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version:  - Microsoft)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Excel 2007 Help Actualización (KB963678) (HKLM-x32\...\{90120000-0016-0C0A-0000-0000000FF1CE}_PROPLUS_{59E09C3D-4878-47D9-87DB-6D0018026889}) (Version:  - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook 2007 Help Actualización (KB963677) (HKLM-x32\...\{90120000-001A-0C0A-0000-0000000FF1CE}_PROPLUS_{59C244C2-0C37-4E85-8F7E-DBDD3958B694}) (Version:  - Microsoft)
Microsoft Office Powerpoint 2007 Help Actualización (KB963669) (HKLM-x32\...\{90120000-0018-0C0A-0000-0000000FF1CE}_PROPLUS_{F318245D-05AE-4681-A749-A036CE44AF29}) (Version:  - Microsoft)
Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Word 2007 Help Actualización (KB963665) (HKLM-x32\...\{90120000-001B-0C0A-0000-0000000FF1CE}_PROPLUS_{377BA42A-1C84-45D6-94B8-6D00887D172D}) (Version:  - Microsoft)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Monitor de la tecnología Intel® Turbo Boost (HKLM\...\{39F4C6F9-618A-4E5B-8FB2-6BD661174E32}) (Version: 1.0.186.6 - Intel)
Moveslink (HKLM-x32\...\{0ED016B2-C009-4253-9DDD-BDB8DA9CE181}) (Version: 1.0.39 - Suunto)
Moveslink for Movestick Mini (HKLM-x32\...\{A1D727D7-498D-4FB8-8C75-EA4A506C5FEF}) (Version: 1.1.0 - Suunto)
Mozilla Firefox 72.0.1 (x64 es-ES) (HKLM\...\Mozilla Firefox 72.0.1 (x64 es-ES)) (Version: 72.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 72.0.1.7311 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyWinLocker (HKLM-x32\...\{0D7CD0D9-4A88-4A63-8F91-3F4E8F371768}) (Version: 3.1.212.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}) (Version: 3.1.212.0 - Egis Technology Inc.) Hidden
MyWinLocker Suite (HKLM-x32\...\InstallShield_{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}) (Version: 3.1.212.0 - Egis Technology Inc.)
Nikon File Uploader 2 (HKLM-x32\...\{D1E7142C-6BC3-49EB-A71A-E5D7ADAC7599}) (Version: 2.00.0001 - Nikon)
Nikon Message Center 2 (HKLM-x32\...\{B014EE44-9197-4513-9613-71E6EB1B514E}) (Version: 2.0.1 - Nikon)
NMSDVDX64 v1.1 (HKLM\...\{49C4A807-A535-4E85-BD6D-5A7803473CA3}) (Version: 1.01.0001 - FOTOPRIX)
PhotoScape (HKLM-x32\...\PhotoScape) (Version:  - )
Picture Control Utility (HKLM-x32\...\{87441A59-5E64-4096-A170-14EFE67200C3}) (Version: 1.2.0 - Nikon)
Poker Pop (HKLM-x32\...\{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111355427}) (Version:  - Oberon Media)
QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6141 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30122 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform)
Shredder (HKLM\...\{1F557316-CFC0-41BD-AFF7-8BC49CE444D7}) (Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Shredder (HKLM-x32\...\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}) (Version: 2.0.8.3 - Egis Technology Inc.) Hidden
Suunto Track Exporter (HKLM-x32\...\SuuntoTrackExporter_is1) (Version:  - Suunto Oy)
Suunto Trek Manager (HKLM-x32\...\Suunto Trek Manager_is1) (Version:  - Suunto Oy)
Suunto USB Driver (HKLM\...\SuuntoUSBFTDIVista_is1) (Version: 2.08.02.0 - Suunto Oy)
Suunto USB Driver (HKLM-x32\...\SuuntoUSBDriver_is1) (Version:  - )
Suunto USB Serial Port (Driver Removal) (HKLM-x32\...\SUUVCOMM&10C4&80F6) (Version:  - Suunto)
TOPO PIRINEOS 6.1 (HKLM-x32\...\TOPO PIRINEOS) (Version:  6.1 - Topopiris)
TOPOHISPANIA_DEM_2.04 (HKLM-x32\...\TOPOHISPANIA_DEM_2.04) (Version: _2.04 - SinRenKor)
TuneUp Utilities 2014 (es-MX) (HKLM-x32\...\{460EA1C5-B71F-4DEA-99C1-A82016ADECD2}) (Version: 14.0.1000.353 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}) (Version: 14.0.1000.353 - TuneUp Software) Hidden
TuneUp Utilities 2014 (HKLM-x32\...\TuneUp Utilities) (Version: 14.0.1000.353 - TuneUp Software)
TuneUp Utilities Language Pack (en-US) (HKLM-x32\...\{A95A76C9-6F65-477E-83A0-9F884B6DC21B}) (Version: 12.0.3600.104 - TuneUp Software) Hidden
Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version:  - Microsoft)
ViewNX 2 (HKLM-x32\...\{DDD62492-32A7-412B-8AF1-2CF032AD42E3}) (Version: 2.0.1 - Nikon)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Web Browser Packages (HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\Web Browser Packages) (Version:  - ) <==== ATENCIÓN
Welcome Center (HKLM-x32\...\Acer Welcome Center) (Version: 1.02.3002 - Acer Incorporated)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (06/03/2009 2.3.0.0) (HKLM\...\49CF605F02C7954F4E139D18828DE298CD59217C) (Version: 06/03/2009 2.3.0.0 - Garmin)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
Windows Live Sync (HKLM-x32\...\{953D4586-9A16-495E-BA1F-EE5AA66604DB}) (Version: 14.0.8089.726 - Microsoft Corporation)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Wisdom-soft ScreenHunter 6.0 Free (HKLM-x32\...\Wisdom-soft ScreenHunter 6.0 Free) (Version:  - Wisdom Software Inc.)

==================== Personalizado CLSID (Lista blanca): ==============

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll [2010-05-27] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\psdprotect.dll [2010-05-27] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [EDSshellExt] -> {29FF7AB0-BE34-4992-A30B-53A9D86EE239} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\mwlshellext.dll [2010-05-27] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ContextMenuHandlers1: [TuneUp Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-x64.dll [2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Archivo no firmado]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2012-06-09] (Alexander Roshal) [Archivo no firmado]
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [ShredderContextMenu] -> {521065F1-DE6C-4E46-BBCB-89B0D0BE860D} => C:\Program Files (x86)\EgisTec Shredder\x64\ShredderContextMenu.dll [2010-04-02] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [EDSshellExt] -> {29FF7AB0-BE34-4992-A30B-53A9D86EE239} => C:\Program Files (x86)\EgisTec MyWinLocker\x64\mwlshellext.dll [2010-05-27] (EGIS TECHNOLOGY INC. -> Egis Technology Inc.)
ContextMenuHandlers4: [TuneUp Disk Space Explorer Shell Extension] -> {4838CD50-7E5D-4811-9B17-C47A85539F28} => C:\Program Files (x86)\TuneUp Utilities 2014\DseShExt-x64.dll [2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
ContextMenuHandlers4: [TuneUp Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\TuneUp Utilities 2014\SDShelEx-x64.dll [2015-06-25] (AVG Netherlands B.V. -> TuneUp Software)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Archivo no firmado]
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2012-06-09] (Alexander Roshal) [Archivo no firmado]
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-10-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2010-04-30] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 9.0\Acrobat\..\Acrobat Elements\ContextMenu64.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-01-05] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Archivo no firmado]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2012-06-09] (Alexander Roshal) [Archivo no firmado]

==================== Codecs (Lista blanca) ====================

==================== Accesos directos & WMI ========================

==================== Módulos cargados (Lista blanca) =============

==================== Alternate Data Streams (Lista blanca) ========

(Si una entrada es incluida en el fixlist, solamente los ADS serán eliminados.)

AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 [256]
AlternateDataStreams: C:\ProgramData\Temp:1A60DE96 [270]
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 [140]
AlternateDataStreams: C:\ProgramData\Temp:798A3728 [250]
AlternateDataStreams: C:\ProgramData\Temp:93EB7685 [143]
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE [288]
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D [272]
AlternateDataStreams: C:\ProgramData\Temp:E36F5B57 [272]
AlternateDataStreams: C:\ProgramData\Temp:E3C56885 [240]

==================== Modo Seguro (Lista blanca) ==================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El "AlternateShell" será restaurado.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"

==================== Asociación (Lista blanca) =================

==================== Internet Explorer sitios de confianza/restringidos ==========

(Si una entrada es incluida en el fixlist, será eliminada del registro.)

IE trusted site: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\gob.es -> hxxps://agenciatributaria.gob.es
IE trusted site: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\intermasgroup.com -> hxxps://remote.intermasgroup.com

==================== Hosts contenido: =========================

(Si es necesario, la directiva Hosts: puede ser incluida en el fixlist para restablecer Hosts.)

2009-07-14 03:34 - 2019-04-06 13:11 - 000000837 _____ C:\Windows\system32\drivers\etc\hosts

==================== Otras Áreas ===========================

(Actualmente no existe una corrección automática para esta sección.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\EgisTec MyWinLocker\x86;C:\Program Files (x86)\EgisTec MyWinLocker\x64;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\QuickTime\QTSystem\
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mònica\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 212.231.6.7 - 46.6.113.34
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Firewall de Windows está habilitado.

==================== MSCONFIG/TASK MANAGER elementos deshabilitados ==

==================== Reglas de firewall (Lista blanca) ================

(Si una entrada es incluida en el fixlist, será eliminada del registro. El archivo no se moverá a menos que sea añadido al listado por separado.)

FirewallRules: [{4F636F1E-827A-4116-9231-F3351E07738B}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{FF74EC99-06A4-45ED-B2C9-E22476274706}C:\Program Files (x86)\eMule\emule.exe] => (Allow) C:\Program Files (x86)\eMule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [UDP Query User{24C808D8-9675-4B43-BAD3-23117D211DA2}C:\Program Files (x86)\eMule\emule.exe] => (Allow) C:\Program Files (x86)\eMule\emule.exe (hxxp://www.emule-project.net) [Archivo no firmado]
FirewallRules: [{3CE3CBB3-7D77-4A2A-B303-C135C85F0C59}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{4F5A5DB9-7665-4274-8A17-FA08CC1B2EA9}] => (Allow) C:\Windows\SysWOW64\msiexec.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{7EA91DE8-12D1-4307-8BB8-2B4FF24D6AE0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{21E3F97A-8F4A-4B67-B778-9A679F5C02A3}] => (Allow) LPort=2869
FirewallRules: [{1390EE1D-62DF-49C8-8A4E-546C3289EBB6}] => (Allow) LPort=1900
FirewallRules: [{1BA1EB6C-1D3B-4ECA-9A4C-4D3D7E6895A3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{99F36D4F-3071-4089-B414-1922221404F3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{48CB331F-C20B-4CE5-B323-0F75FEB602FF}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{DF2DD435-ACD0-46A3-A663-031A9C3E5326}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D1F0DAE3-5DB4-42C9-9987-0F0DD3EFFF83}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{4EAA4393-88D7-45A0-92A8-469B551F2FD5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{DD3A3FD1-1CFA-4923-B056-D6A2C57C9C2D}C:\users\mònica\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\mònica\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{5B66314E-A49D-4742-B49F-8865FD3F4011}C:\users\mònica\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\mònica\appdata\roaming\utorrent\utorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{95D65D26-B0F1-43FC-826F-C38BEC2D23B3}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B0FB0047-A300-40C0-8884-25E0CCBAA103}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

==================== Puntos de Restauración =========================


==================== Dispositivos defectuosos en el Administrador de dispositivos ============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: aswRvrt
Description: aswRvrt
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: aswRvrt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface
Description: Adaptador de tunelización Teredo de Microsoft
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: aswVmm
Description: aswVmm
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: aswVmm
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Errores del registro de eventos: ========================

Errores de aplicación:
==================
Error: (01/11/2020 06:07:49 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 512) (User: )
Description: Los Servicios de cifrado no pudieron inicializar el objeto "System Writer" de la copia de seguridad de VSS.

Details:
Could not query the status of the EventSystem service.

System Error:
Se está cerrando el sistema.
.

Error: (01/10/2020 10:44:40 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: No se pudo crear el punto de restauración (proceso = C:\Users\Mònica\Downloads\adwcleaner_8.0.1.exe ; descripción = AdwCleaner_BeforeCleaning_10/01/2020_22:44:40; error = 0x8007043c).

Error: (01/10/2020 07:45:29 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT AUTHORITY)
Description: Error al descargar las cadenas del contador de rendimiento para el servicio WmiApRpl (WmiApRpl). El primer valor DWORD de la sección de datos contiene el código de error.

Error: (01/10/2020 07:45:29 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Las cadenas de rendimiento del valor del Registro de rendimiento están dañadas al procesar el proveedor de contador de extensión Performance. El valor BaseIndex del Registro de rendimiento es el primer valor DWORD, el valor LastCounter es el segundo valor DWORD y el valor LastHelp es el tercer valor DWORD de la sección de datos.

Error: (01/10/2020 07:45:28 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT AUTHORITY)
Description: Las cadenas de rendimiento del valor del Registro de rendimiento están dañadas al procesar el proveedor de contador de extensión Performance. El valor BaseIndex del Registro de rendimiento es el primer valor DWORD, el valor LastCounter es el segundo valor DWORD y el valor LastHelp es el tercer valor DWORD de la sección de datos.

Error: (01/10/2020 07:39:24 PM) (Source: Windows Search Service) (EventID: 7042) (User: )
Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: The catalog is corrupt.

Detalles:
	El catálogo del índice de contenido está dañado.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/10/2020 07:39:24 PM) (Source: Windows Search Service) (EventID: 7010) (User: )
Description: No se puede inicializar el índice.

Detalles:
	El catálogo del índice de contenido está dañado.  (HRESULT : 0xc0041801) (0xc0041801)

Error: (01/10/2020 07:39:24 PM) (Source: Windows Search Service) (EventID: 3058) (User: )
Description: No se puede inicializar la aplicación.

Contexto: aplicación Windows

Detalles:
	El catálogo del índice de contenido está dañado.  (HRESULT : 0xc0041801) (0xc0041801)


Errores del sistema:
=============
Error: (01/11/2020 06:31:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:42 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.

Error: (01/11/2020 06:31:03 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: El servicio Examinador de equipos depende del servicio Servidor, el cual no pudo iniciarse debido al siguiente error: 
No se puede iniciar el servicio o grupo de dependencia.


Windows Defender:
===================================
Date: 2016-05-25 06:40:50.383
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{1B61FA98-66CB-46B4-BBB0-953D30BAAA2D}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:NT AUTHORITY\Servicio de red

Date: 2015-08-03 10:34:00.850
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{3D5498BE-AEE2-4B95-89B3-09ABDDA2DE4F}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:Mònica-PC\Mònica

Date: 2015-03-18 07:16:45.992
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{B0507CC7-9AF7-45BC-BB05-4F6B27DDA069}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:NT AUTHORITY\Servicio de red

Date: 2014-11-09 11:15:35.630
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{9D2B80BF-15FE-4FC7-9C72-ACBC5D605DF2}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:NT AUTHORITY\Servicio de red

Date: 2014-09-08 14:31:21.176
Description: 
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{EA36ED6F-D2EA-42CB-8311-6CC80DD5EB41}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:NT AUTHORITY\Servicio de red

CodeIntegrity:
===================================

Date: 2017-08-20 20:35:04.400
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-20 20:33:50.897
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-20 20:33:50.632
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-13 16:47:00.354
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-13 16:45:51.100
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-13 16:45:50.882
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Windows\System32\drivers\aswSnx.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-11 19:33:44.252
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\McAfee\SiteAdvisor\x64\mfesapsn.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

Date: 2017-08-11 19:32:35.882
Description: 
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Windows\System32\drivers\aswKbd.sys porque el conjunto de hashes de imagen por página no se encuentra en el sistema.

==================== Información de la memoria =========================== 

BIOS: Acer V1.07 09/27/2010
Placa base: Acer Aspire 5742
Procesador: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz
Porcentaje de memoria en uso: 69%
RAM física total: 3766.71 MB
RAM física disponible: 1131.22 MB
Virtual total: 7531.61 MB
Virtual disponible: 4957.71 MB

==================== Unidades ================================

Drive c: (Acer) (Fixed) (Total:284.99 GB) (Free:142.12 GB) NTFS

\\?\Volume{601ba0f1-d4c7-11df-8b67-806e6f6e6963}\ (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{601ba0f0-d4c7-11df-8b67-806e6f6e6963}\ (PQSERVICE) (Fixed) (Total:13 GB) (Free:1.51 GB) NTFS

==================== MBR & Tabla de particiones ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 298.1 GB) (Disk ID: 37BCB143)
Partition 1: (Not Active) - (Size=13 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=285 GB) - (Type=07 NTFS)

==================== Final de Addition.txt =======================

Daniela · 11 Enero, 2020 23:38

Hola

No descargaste y ejecutaste FRST desde el escritorio como te indiqué, muevelo allí si no no funcionará el paso siguiente.

MUY Importante Realiza una copia de seguridad del registro :

Para hacerlo descarga DelFix.exe( en tu escritorio).
Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).
Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO.
Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

A continuación con los demás programas cerrados ve a Inicio Ejecutar y escribe Notepad.exe.

Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.

START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\Run: [c5b0c566] => C:\ProgramData\Intel\Wireless\5229512\abdfdcf.exe [943784 2019-10-27] (AutoIt Consulting Ltd -> AutoIt Team)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN
Task: C:\Windows\Tasks\AdwCleaner_onReboot.job => C:\Users\Mònica\Downloads\adwcleaner_8.0.1.exe
URLSearchHook: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 - (Sin Nombre) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Ningún archivo
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> DefaultScope {66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} URL = hxxps://es.search.yahoo.com/search?fr=mcafee&type=C010ES662D20110728&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} URL = hxxps://es.search.yahoo.com/search?fr=mcafee&type=C010ES662D20110728&p={searchTerms}
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Ningún archivo
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Ningún archivo
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\.DEFAULT -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Toolbar: HKU\.DEFAULT -> Sin Nombre - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> Sin Nombre - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Ningún archivo
Toolbar: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ningún archivo
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Ningún archivo
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Ningún archivo
FF Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Mònica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012\Extensions\[email protected] [2019-04-13]
FF Plugin: @microsoft.com/GENUINE -> disabled [Ningún archivo]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Ningún archivo]
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/search?fr=mcafee&type=E210ES662G0&p={searchTerms}
CHR DefaultSuggestURL: Default -> hxxps://es.search.yahoo.com/sugg/gossip/gossip-es-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-01-05]
CHR Extension: (Avast Online Security) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-01-05]
CHR Extension: (SweetIM for Facebook) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCSocialUpdate.xml] <==== ATENCIÓN
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCToolbarUpdate.xml] <==== ATENCIÓN
CHR Extension: (Chrome Media Router) - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-05]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-07-03]
CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\Mònica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-10-22]
S2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [X]
S2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [X]
S4 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [X]
S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [X]
2020-01-10 22:44 - 2020-01-10 22:44 - 000000290 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
2020-01-10 18:25 - 2020-01-10 18:25 - 000000000 _____ C:\Users\Mònica\AppData\Local\{901D67BF-314F-499E-8D22-14A1AF5F3993}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\Mònica\AppData\Local\{ECB58AD4-0C9C-434B-8921-AEB84B3C70EE}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\Mònica\AppData\Local\{71FA161F-5360-4EBF-98E9-15D47046C2A3}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\Mònica\AppData\Local\{4FA956B3-A7CE-4534-852A-9254B7BD9ED1}
2020-01-05 14:29 - 2020-01-05 14:29 - 000000000 _____ C:\Users\Mònica\AppData\Local\{65AD0D8C-65B3-4CDE-8A8D-4C4296CAB8F0}
2020-01-05 23:22 - 2019-12-02 21:21 - 000000000 ____D C:\testintel2
AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 [256]
AlternateDataStreams: C:\ProgramData\Temp:1A60DE96 [270]
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 [140]
AlternateDataStreams: C:\ProgramData\Temp:798A3728 [250]
AlternateDataStreams: C:\ProgramData\Temp:93EB7685 [143]
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE [288]
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D [272]
AlternateDataStreams: C:\ProgramData\Temp:E36F5B57 [272]
AlternateDataStreams: C:\ProgramData\Temp:E3C56885 [240]
C:\ProgramData\Intel\Wireless\5229512

HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Guárdalo bajo el nombre de FIXLIST.TXT en el escritorio Esto es muy importante.

Nota Es importante que la herramienta FRST.exe (Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.

Y ahora inicia en modo seguro para realizar los siguiente:

Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).
Presionar el botón FIX y aguardar a que termine.
La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).

Pega el contenido de este fichero en tu próxima respuesta.

Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.

Un saludo

Izmet · 12 Enero, 2020 09:53

Hola,

Me ha desaparecido el mensaje de Autolt Error pero el ordenador sigue lento y se cuelga…

Te paso el informeFixlog.txt (18,1 KB) Gracias


Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 08-01-2020
Ejecutado por Mònica (12-01-2020 08:23:37) Run:1
Ejecutado desde C:\Users\Mònica\Desktop
Perfiles cargados: Mònica (Perfiles disponibles: Mònica)
Modo de Inicio: Safe Mode (with Networking)
==============================================

fixlist contenido:
*****************
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricci�n <==== ATENCI�N
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\...\Run: [c5b0c566] => C:\ProgramData\Intel\Wireless\5229512\abdfdcf.exe [943784 2019-10-27] (AutoIt Consulting Ltd -> AutoIt Team)
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricci�n <==== ATENCI�N
Task: C:\Windows\Tasks\AdwCleaner_onReboot.job => C:\Users\M�nica\Downloads\adwcleaner_8.0.1.exe
URLSearchHook: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 - (Sin Nombre) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - Ning�n archivo
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> DefaultScope {66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} URL = hxxps://es.search.yahoo.com/search?fr=mcafee&type=C010ES662D20110728&p={searchTerms}
SearchScopes: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> {66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} URL = hxxps://es.search.yahoo.com/search?fr=mcafee&type=C010ES662D20110728&p={searchTerms}
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => Ning�n archivo
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Ning�n archivo
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2013-05-08] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Toolbar: HKU\.DEFAULT -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ning�n archivo
Toolbar: HKU\.DEFAULT -> Sin Nombre - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Ning�n archivo
Toolbar: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> Sin Nombre - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Ning�n archivo
Toolbar: HKU\S-1-5-21-3505058533-3891674970-1505442175-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  Ning�n archivo
Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Ning�n archivo
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} -  Ning�n archivo
FF Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\M�nica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012\Extensions\[email protected] [2019-04-13]
FF Plugin: @microsoft.com/GENUINE -> disabled [Ning�n archivo]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [Ning�n archivo]
CHR DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/search?fr=mcafee&type=E210ES662G0&p={searchTerms}
CHR DefaultSuggestURL: Default -> hxxps://es.search.yahoo.com/sugg/gossip/gossip-es-partner?output=fxjson&appid=mca&source=yahoo_mcafee_searchassist&command={searchTerms}
CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-01-05]
CHR Extension: (Avast Online Security) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-01-05]
CHR Extension: (SweetIM for Facebook) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCSocialUpdate.xml] <==== ATENCI�N
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCToolbarUpdate.xml] <==== ATENCI�N
CHR Extension: (Chrome Media Router) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-05]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx <no encontrado>
CHR HKLM-x32\...\Chrome\Extension: [jcdgjdiieiljkfkdcloehkohchhpekkn] - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx [2012-07-03]
CHR HKLM-x32\...\Chrome\Extension: [nbljechdpodpbchbmjcoamidppmpnmlc]
CHR HKLM-x32\...\Chrome\Extension: [ogccgbmabaphcakpiclgcnmcnimhokcj] - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx [2012-10-22]
S2 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [X]
S2 GREGService; C:\Program Files (x86)\Acer\Registration\GREGsvc.exe [X]
S4 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [X]
S2 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [X]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S3 RimUsb; System32\Drivers\RimUsb_AMD64.sys [X]
2020-01-10 22:44 - 2020-01-10 22:44 - 000000290 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
2020-01-10 18:25 - 2020-01-10 18:25 - 000000000 _____ C:\Users\M�nica\AppData\Local\{901D67BF-314F-499E-8D22-14A1AF5F3993}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\M�nica\AppData\Local\{ECB58AD4-0C9C-434B-8921-AEB84B3C70EE}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\M�nica\AppData\Local\{71FA161F-5360-4EBF-98E9-15D47046C2A3}
2020-01-10 18:21 - 2020-01-10 18:21 - 000000000 _____ C:\Users\M�nica\AppData\Local\{4FA956B3-A7CE-4534-852A-9254B7BD9ED1}
2020-01-05 14:29 - 2020-01-05 14:29 - 000000000 _____ C:\Users\M�nica\AppData\Local\{65AD0D8C-65B3-4CDE-8A8D-4C4296CAB8F0}
2020-01-05 23:22 - 2019-12-02 21:21 - 000000000 ____D C:\testintel2
AlternateDataStreams: C:\ProgramData\Temp:0B9176C0 [256]
AlternateDataStreams: C:\ProgramData\Temp:1A60DE96 [270]
AlternateDataStreams: C:\ProgramData\Temp:4D066AD2 [140]
AlternateDataStreams: C:\ProgramData\Temp:798A3728 [250]
AlternateDataStreams: C:\ProgramData\Temp:93EB7685 [143]
AlternateDataStreams: C:\ProgramData\Temp:CDFF58FE [288]
AlternateDataStreams: C:\ProgramData\Temp:E1F04E8D [272]
AlternateDataStreams: C:\ProgramData\Temp:E36F5B57 [272]
AlternateDataStreams: C:\ProgramData\Temp:E3C56885 [240]
C:\ProgramData\Intel\Wireless\5229512

HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************

Error: El punto de restauración solamente puede ser creado en modo normal.
Procesos cerrados correctamente.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => eliminado correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Software\Microsoft\Windows\CurrentVersion\Run\\c5b0c566" => eliminado correctamente
HKLM\SOFTWARE\Policies\Mozilla => eliminado correctamente
C:\Windows\Tasks\AdwCleaner_onReboot.job => movido correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064}" => eliminado correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope" => eliminado correctamente
HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{66FAFA32-E6D4-4CFA-96C0-ACAE1435BA48} => eliminado correctamente
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => eliminado correctamente
HKLM\Software\Classes\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => eliminado correctamente
"HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}" => eliminado correctamente
HKLM\Software\Classes\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => eliminado correctamente
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKLM\Software\Wow6432Node\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
"HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => eliminado correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F}" => eliminado correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente
HKLM\Software\Classes\PROTOCOLS\Handler\dssrequest => eliminado correctamente
HKLM\Software\Classes\PROTOCOLS\Handler\sacore => eliminado correctamente
"C:\Users\M�nica\AppData\Roaming\Mozilla\Firefox\Profiles\lzk9r22e.default-1422990210123-1505501226012\Extensions\[email protected]" => no encontrado
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => eliminado correctamente
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => eliminado correctamente
"Chrome DefaultSearchURL" => eliminado correctamente
"Chrome DefaultSuggestURL" => eliminado correctamente
CHR Extension: (Avast SafePrice | Comparaciones, ofertas y cupones) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-01-05] => Error: Ninguna corrección automática encontrada para esta entrada.
CHR Extension: (Avast Online Security) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2020-01-05] => Error: Ninguna corrección automática encontrada para esta entrada.
CHR Extension: (SweetIM for Facebook) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCSocialUpdate.xml] <==== ATENCI�N => Error: Ninguna corrección automática encontrada para esta entrada.
CHR Extension: (SweetPacks Chrome Extension) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj [2015-12-28] [UpdateUrl:hxxp://www.sweetim.com/simgcbar/GCToolbarUpdate.xml] <==== ATENCI�N => Error: Ninguna corrección automática encontrada para esta entrada.
CHR Extension: (Chrome Media Router) - C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-01-05] => Error: Ninguna corrección automática encontrada para esta entrada.
HKLM\SOFTWARE\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho => eliminado correctamente
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck => eliminado correctamente
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fheoggkfdfchfphceeifdbepaooicaho => eliminado correctamente
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\gomekmidlodglbbmalcneegieacbdmki => eliminado correctamente
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\2012-07-03 => no encontrado
"C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetFB.crx" => no encontrado
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\nbljechdpodpbchbmjcoamidppmpnmlc => no encontrado
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\2012-10-22 => no encontrado
"C:\Users\M�nica\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847}\SweetNT.crx" => no encontrado
HKLM\System\CurrentControlSet\Services\ePowerSvc => eliminado correctamente
ePowerSvc => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\GREGService => eliminado correctamente
GREGService => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\NTI IScheduleSvc => eliminado correctamente
NTI IScheduleSvc => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\Updater Service => eliminado correctamente
Updater Service => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\dbx => eliminado correctamente
dbx => servicio eliminado correctamente
HKLM\System\CurrentControlSet\Services\RimUsb => eliminado correctamente
RimUsb => servicio eliminado correctamente
"C:\Windows\Tasks\AdwCleaner_onReboot.job" => no encontrado
"C:\Users\M�nica\AppData\Local\{901D67BF-314F-499E-8D22-14A1AF5F3993}" => no encontrado
"C:\Users\M�nica\AppData\Local\{ECB58AD4-0C9C-434B-8921-AEB84B3C70EE}" => no encontrado
"C:\Users\M�nica\AppData\Local\{71FA161F-5360-4EBF-98E9-15D47046C2A3}" => no encontrado
"C:\Users\M�nica\AppData\Local\{4FA956B3-A7CE-4534-852A-9254B7BD9ED1}" => no encontrado
"C:\Users\M�nica\AppData\Local\{65AD0D8C-65B3-4CDE-8A8D-4C4296CAB8F0}" => no encontrado
C:\testintel2 => movido correctamente
C:\ProgramData\Temp => ":0B9176C0" ADS eliminado correctamente
C:\ProgramData\Temp => ":1A60DE96" ADS eliminado correctamente
C:\ProgramData\Temp => ":4D066AD2" ADS eliminado correctamente
C:\ProgramData\Temp => ":798A3728" ADS eliminado correctamente
C:\ProgramData\Temp => ":93EB7685" ADS eliminado correctamente
C:\ProgramData\Temp => ":CDFF58FE" ADS eliminado correctamente
C:\ProgramData\Temp => ":E1F04E8D" ADS eliminado correctamente
C:\ProgramData\Temp => ":E36F5B57" ADS eliminado correctamente
C:\ProgramData\Temp => ":E3C56885" ADS eliminado correctamente
C:\ProgramData\Intel\Wireless\5229512 => movido correctamente
C:\Windows\System32\Drivers\etc\hosts => movido correctamente
Hosts restaurado correctamente.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente
"HKU\S-1-5-21-3505058533-3891674970-1505442175-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente


========= Final de RemoveProxy: =========


========= netsh winsock reset =========


El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.


========= Final de CMD: =========


========= ipconfig /renew =========


Configuraci¢n IP de Windows

No se puede realizar ninguna operaci¢n en Conexi¢n de red inal mbrica 2 mientras los medios
est‚n desconectados.
No se puede realizar ninguna operaci¢n en Conexi¢n de  rea local mientras los medios
est‚n desconectados.

Adaptador de LAN inal mbrica Conexi¢n de red inal mbrica 2:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

Adaptador de LAN inal mbrica Conexi¢n de red inal mbrica:

   Sufijo DNS espec¡fico para la conexi¢n. . : Home
   V¡nculo: direcci¢n IPv6 local. . . : fe80::8c41:8fbf:9310:f77c%11
   Direcci¢n IPv4. . . . . . . . . . . . . . : 192.168.1.129
   M scara de subred . . . . . . . . . . . . : 255.255.255.0
   Puerta de enlace predeterminada . . . . . : 192.168.1.1

Adaptador de Ethernet Conexi¢n de  rea local:

   Estado de los medios. . . . . . . . . . . : medios desconectados
   Sufijo DNS espec¡fico para la conexi¢n. . : 

========= Final de CMD: =========


========= ipconfig /flushdns =========


Configuraci¢n IP de Windows

Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS.

========= Final de CMD: =========


========= bitsadmin /reset /allusers =========


BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

Unable to connect to BITS - 0x8007042c
No se puede iniciar el servicio o grupo de dependencia.



========= Final de CMD: =========


========= netsh advfirewall reset =========

Aceptar


========= Final de CMD: =========


========= netsh advfirewall set allprofiles state ON =========

Aceptar


========= Final de CMD: =========


========= netsh int ipv4 reset =========

Global se restableci¢ correctamente.
Interfaz se restableci¢ correctamente.
Reinicie el equipo para completar esta acci¢n.


========= Final de CMD: =========


========= netsh int ipv6 reset =========

No hay valores configurados por el usuario para restablecer.


========= Final de CMD: =========


=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 3161558 B
Java, Flash, Steam htmlcache => 524 B
Windows/system/drivers => 2671726 B
Edge => 0 B
Chrome => 346748 B
Firefox => 84195388 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 66228 B
Public => 66228 B
ProgramData => 66228 B
systemprofile => 60332281 B
systemprofile32 => 61811607 B
LocalService => 63270923 B
NetworkService => 63337151 B
Mònica => 122318909 B

RecycleBin => 0 B
EmptyTemp: => 448.3 MB datos temporales eliminados.

================================


El sistema necesita reiniciarse.

==== Final de Fixlog 08:24:34 ====

Daniela · 12 Enero, 2020 10:10

Hola

Vamos a ver si queda alguna infección.

Realiza los siguientes pasos, aunque hayas hecho alguno, sin cambiar el orden:

1) Descarga, actualiza y ejecuta Malwarebytes’ Anti-Malware, revisa en detalle el manual, para que sepas usarlo y configurarlo.

Realiza un Análisis personalizado, actualizando si te lo pide.
Pulsar en “Cuarentena seleccionado” para enviarlo a la cuarentena y Reinicias el sistema.
En el apartado del manual Historial de detecciones encontrarás el reporte de MBAM, clic en Exportar >> Copiar al portapapeles.

2) Descarga AdwCleaner | InfoSpyware en el escritorio.

Desactiva temporalmente el Antivirus >> Cómo deshabilitar temporalmente su Antivirus.
Cierra también todos los programas que tengas abiertos.
Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona "Ejecutar como Administrador".)
Pulsar en el botón Escanear, y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Limpiar.
Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
Guardas el reporte que te aparecerá, para copiarlo y pegarlo en tu próxima respuesta.
El informe también se puede encontrar en C:\AdwCleaner\AdwCleaner[C1].txt

3) Descarga CCleaner

Instala Ccleaner
Abres Ccleaner en la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine >> clic en ejecutar limpiador
Clic en la pestaña Registro >> clic en buscar problemas esperas que termine >> clic en Reparar Seleccionadas y haces una copia de seguridad
Vuelves a darle clic en buscar problemas hasta que no encuentre ninguno.

Pega los reportes de Malwarebytes y AdwCleaner y comentas como va el problema.

¿Cómo pegar reportes en el foro?

Un saludo