Avast llena mi ram

Miguelgrado · 31 Enero, 2019 08:36

Primeramente comentar.

Tienes la mayoria de programas desactualizados y eso no es bueno para nada.

Ademas, tu sistema Windows, tiene todas las actualizaciones de Windows update??

Y , tu Malwarebytes, es free o de pago con proteccion residente??

Responde a estas cuestiones en tu proxima respuesta, junto a esto otro:

Bien… y ahora sigue estos pasos, MUY Importante ~ Realiza una copia de seguridad del registro :

Para hacerlo descarga Delfix en tu escritorio.
Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona "Ejecutar como Administrador.")
Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO
Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

En el equipo con los demas programas cerrados:

Inicio >>> Ejecutar >>>Escribes notepad.exe.

Ahora copia y pega estos archivos dentro del Notepad:


Start
CreateRestorePoint:
CloseProcesses:

HKU\S-1-5-21-1615820223-3353691301-1937506479-1000\...\MountPoints2: H - H:\AurLaunch\LaunchScreen.exe
HKU\S-1-5-21-1615820223-3353691301-1937506479-1000\...\MountPoints2: {c9c3d2f8-1ea5-11e9-9020-24b6fd084903} - H:\AurLaunch\LaunchScreen.exe
HKU\S-1-5-21-1615820223-3353691301-1937506479-1000\...\MountPoints2: {e1aa7670-af7a-11e7-a658-24b6fd084903} - H:\setup.exe
HKU\S-1-5-21-1615820223-3353691301-1937506479-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
S2 avast; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /svc [X]
S3 avastm; "C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe" /medsvc [X]
S2 hshld; "C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe" [X]
C:\Program Files (x86)\AVAST Software
S3 AFTrafMgr1.3; \??\C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_3_64.sys [X]
S3 DxkgFilter; \??\C:\Program Files (x86)\iDisplay\idisplay.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
2019-01-31 00:22 - 2017-06-17 19:12 - 000000000 ____D C:\ProgramData\AVAST Software
2017-12-17 13:51 - 2017-12-30 20:13 - 000000000 _____ () C:\Users\Seniorbrayan\AppData\Local\Temp\2e7adecd915fad7ede6cff9c6c6e4e6e.dll
2017-12-17 13:51 - 2017-12-30 20:14 - 000000093 _____ () C:\Users\Seniorbrayan\AppData\Local\Temp\509055e8b8dc0d9f8193b1aee946c17e.dll
2018-10-15 02:09 - 2018-10-09 02:57 - 001205768 _____ (BlueStack Systems, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\BlueStacksUninstaller.exe
2018-06-17 15:35 - 2018-06-17 15:35 - 000010256 _____ () C:\Users\Seniorbrayan\AppData\Local\Temp\BullseyeCoverage-2-x64.dll
2018-06-17 15:33 - 2018-06-17 15:33 - 000008720 _____ () C:\Users\Seniorbrayan\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
2018-01-10 18:38 - 2018-01-10 18:42 - 017936808 _____ (Ellora Assets Corporation                                   ) C:\Users\Seniorbrayan\AppData\Local\Temp\FreemakeVideoDownloaderFull.exe
2018-10-15 02:09 - 2018-10-09 02:57 - 000999432 _____ (BlueStack Systems, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\HD-Common.dll
2018-09-08 15:59 - 2018-09-08 15:59 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-105171041085255376.dll
2018-04-03 16:49 - 2018-04-03 16:49 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-1103573053942864148.dll
2018-08-24 15:59 - 2018-08-24 15:59 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-1380850690840896310.dll
2018-07-24 15:53 - 2018-07-24 15:53 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-1766624620712202694.dll
2019-01-18 20:23 - 2019-01-18 20:23 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-179181501575082865.dll
2018-09-07 22:24 - 2018-09-07 22:24 - 000019968 _____ (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-1811573497735853371.dll
2018-04-03 17:26 - 2018-04-03 17:26 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-3166823144456414641.dll
2018-04-03 17:34 - 2018-04-03 17:34 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-3376248009030167847.dll
2018-07-08 21:11 - 2018-07-08 21:11 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-364270393055140055.dll
2018-04-03 16:54 - 2018-04-03 16:54 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-401164620343196908.dll
2018-04-03 16:50 - 2018-04-03 16:50 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-5049381704877134387.dll
2019-01-18 22:13 - 2019-01-18 22:13 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-5505109369765097115.dll
2018-04-03 16:54 - 2018-04-03 16:54 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-6402674476939187733.dll
2019-01-18 20:12 - 2019-01-18 20:12 - 000019968 _____ (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-6559232936513318233.dll
2018-06-17 16:47 - 2018-06-17 16:47 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-6882261829697735249.dll
2018-06-26 21:10 - 2018-06-26 21:10 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-7301403518998462380.dll
2018-04-04 14:46 - 2018-04-04 14:46 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-7382030158145992771.dll
2018-07-02 14:23 - 2018-07-02 14:23 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-7740933017855144662.dll
2018-09-07 23:03 - 2018-09-07 23:03 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-7769667029337219271.dll
2018-06-17 17:02 - 2018-06-17 17:02 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-8114322276334771118.dll
2018-07-24 15:40 - 2018-07-24 15:40 - 000019968 ____N (Red Hat®, Inc.) C:\Users\Seniorbrayan\AppData\Local\Temp\jansi-64-8701117442762486038.dll
2018-05-05 18:10 - 2018-05-05 18:10 - 001884616 _____ (Oracle Corporation) C:\Users\Seniorbrayan\AppData\Local\Temp\jre-8u171-windows-au.exe
2018-08-17 17:46 - 2018-08-17 17:46 - 001906040 _____ (Oracle Corporation) C:\Users\Seniorbrayan\AppData\Local\Temp\jre-8u181-windows-au.exe
2018-10-15 02:09 - 2018-10-09 02:57 - 000421472 _____ (CodeTitans) C:\Users\Seniorbrayan\AppData\Local\Temp\JSon.dll
2017-11-23 19:33 - 2010-11-20 20:24 - 000837632 _____ (Microsoft Corporation) C:\Users\Seniorbrayan\AppData\Local\Temp\kernel32.dll
2018-02-22 16:57 - 2018-02-22 16:57 - 000737280 _____ () C:\Users\Seniorbrayan\AppData\Local\Temp\sqlite-3.8.11.2-43961f6f-c8bb-4823-981b-a3e81e5eab7a-sqlitejdbc.dll
2018-02-26 15:51 - 2018-02-26 15:51 - 000737280 ____N () C:\Users\Seniorbrayan\AppData\Local\Temp\sqlite-3.8.11.2-b8ca9eef-3321-46e4-9bb1-0088f3223e4e-sqlitejdbc.dll
2018-04-19 16:54 - 2018-04-19 16:54 - 000737280 ____N () C:\Users\Seniorbrayan\AppData\Local\Temp\sqlite-3.8.11.2-eea9d09f-15c0-46bb-a0ef-6637fdc11d07-sqlitejdbc.dll
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.136.333 - AVAST Software) Hidden
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
Task: {CC4E7107-594D-4EC9-9B9C-4141EBBC2750} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {D09C11EE-F6E1-42C9-A7F1-2DA61B610277} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe
Task: {7F640924-1A0C-4548-8BCD-E046615DCE9D} - System32\Tasks\{17CDE09B-78F4-4E63-801D-519B599EF64C} => C:\Windows\system32\pcalua.exe -a "C:\Users\Seniorbrayan\Downloads\dotnetfx35setup (1).exe" -d C:\Users\Seniorbrayan\Downloads
Task: {824CEC83-4476-4CE5-ADCF-DB0B2F6D978F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2019-01-17] (AVAST Software)
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
ShortcutWithArgument: C:\Users\Seniorbrayan\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> -process-per-site
AlternateDataStreams: C:\Windows:CM_19eafbed2e5c22a84b131f38305ac75313a8de243df0836e0998844693ddf628 [74]
AlternateDataStreams: C:\Windows:CM_4386cde8041021fcce7b68f16f65ad5e6b497148db8fa4b297dc7a4ec19852ba [74]
AlternateDataStreams: C:\Windows:CM_599e40e338059b7c8201d84b6a6f021a4177c11e44d72cdd6d7af9f4fe138d3a [74]
AlternateDataStreams: C:\Windows:CM_aff357f688ff5f5fb57d8ec59ea9300afda1490d4f8cebb9bb96f3edff5eb67d [74]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [474]


HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Lo guardas bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.<<

Nota: Es importante que la Hta Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no no trabajara.

Y ahora usa esta Faq de Windows ¿Cómo iniciar Windows en Modo Seguro?, para trabajar desde ese modo de windows.
Ejecutas Frst.exe.
Presionas el botón Fix y aguardas a que termine.
La Herramienta guardara el reporte en tu escritorio (Fixlog.txt).

Lo pegas en tu próxima respuesta,