Bien, pues ya he ejecutado las tres herramientas y en la configuración de Chrome siguen apareciendo los tres motores de búsqueda que no deberían aparecer.
Aquí dejo los reportes, decir que me ha sorprendido mucho que haya encontrado malware en la carpeta IOBIT ya que ahí es dónde está el programa Advanced System Care que sirve para limpiar el PC de archivos basura y para optimizarlo, y yo que pensaba que era un programa fiable…
**Malwarebytes Anti-Malware:**
Malwarebytes
www.malwarebytes.com
-Detalles del registro-
Fecha del análisis: 2/4/19
Hora del análisis: 17:24
Archivo de registro: 75661762-555b-11e9-88fb-0c9d922f881b.json
-Información del software-
Versión: 3.7.1.2839
Versión de los componentes: 1.0.563
Versión del paquete de actualización: 1.0.9970
Licencia: Gratis
-Información del sistema-
SO: Windows 10 (Build 17134.648)
CPU: x64
Sistema de archivos: NTFS
Usuario: LAPTOP-8FCRD808\airda
-Resumen del análisis-
Tipo de análisis: Análisis personalizado
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 838429
Amenazas detectadas: 25
Amenazas en cuarentena: 25
Tiempo transcurrido: 2 hr, 35 min, 50 seg
-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Activado
Heurística: Activado
PUP: Detectar
PUM: Detectar
-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)
Módulo: 0
(No hay elementos maliciosos detectados)
Clave del registro: 0
(No hay elementos maliciosos detectados)
Valor del registro: 0
(No hay elementos maliciosos detectados)
Datos del registro: 0
(No hay elementos maliciosos detectados)
Secuencia de datos: 0
(No hay elementos maliciosos detectados)
Carpeta: 0
(No hay elementos maliciosos detectados)
Archivo: 25
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WLH_AMD64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\XP_AMD64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WIN10_IA64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WNET_AMD64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WIN7_IA64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WLH_X86\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\AUTOSWEEP.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\AUTOUPDATE.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DISKDEFRAG.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\FEEDBACK.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WIN10_AMD64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WIN7_AMD64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WNET_X86\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\AUTOCARE.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WIN10_X86\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WIN7_X86\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WXP_X86\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCDOWNLOAD.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\SCANNER.DLL, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\HARDWARELIB.DLL, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DRIVERS\WXP_AMD64\REGISTRYDEFRAGBOOTTIME.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\DATABASE\AUTOUPDATE.DAT, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\JUMPLISTDLL.DLL, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\ASCINIT.EXE, En cuarentena, [3812], [396386],1.0.9970
PUP.Optional.AdvancedSystemCare, C:\PROGRAM FILES (X86)\IOBIT\ADVANCED SYSTEMCARE\CPUIDINTERFACE.DLL, En cuarentena, [3812], [396386],1.0.9970
Sector físico: 0
(No hay elementos maliciosos detectados)
WMI: 0
(No hay elementos maliciosos detectados)
(end)
**Adwcleaner (archivo C00):**
# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-04-01.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-02-2019
# Duration: 00:00:02
# OS: Windows 10 Home
# Cleaned: 36
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\ProgramData\IObit\Advanced SystemCare
Deleted C:\Program Files (x86)\IObit\Advanced SystemCare
Deleted C:\Program Files (x86)\Common Files\IObit\Advanced SystemCare
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\Users\airda\AppData\LocalLow\IObit\Advanced SystemCare
Deleted C:\Users\airda\AppData\Roaming\IObit\Advanced SystemCare
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
Deleted C:\ProgramData\Tencent
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Tencent
Deleted C:\Users\airda\AppData\Roaming\Tencent
Deleted C:\Program Files\WiperSoft
***** [ Files ] *****
Deleted C:\Users\airda\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\eBay.lnk
Deleted C:\Users\airda\AppData\Roaming\Microsoft\Windows\Start Menu\eBay.lnk
Deleted C:\Users\airda\Downloads\WIPERSOFT-INSTALLER.EXE
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKLM\Software\Wow6432Node\IObit\RealTimeProtector
Deleted HKCU\Software\IObit\Advanced SystemCare
Deleted HKLM\Software\Wow6432Node\IObit\Advanced SystemCare
Deleted HKLM\Software\Wow6432Node\IOBIT\ASC
Deleted HKLM\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shellex\ContextMenuHandlers\Advanced SystemCare
Deleted HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Advanced SystemCare
Deleted HKLM\SOFTWARE\CLASSES\LNKFILE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
Deleted HKLM\SOFTWARE\CLASSES\DRIVE\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
Deleted HKLM\SOFTWARE\CLASSES\DIRECTORY\SHELLEX\CONTEXTMENUHANDLERS\Advanced SystemCare
Deleted HKLM\Software\Wow6432Node\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
Deleted HKLM\Software\Classes\TypeLib\{60AD0991-ECD4-49DC-B170-8B7E7C60F51B}
Deleted HKLM\Software\Classes\CLSID\{2803063F-4B8D-4dc6-8874-D1802487FE2D}
Deleted HKLM\Software\Wow6432Node\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
Deleted HKLM\Software\Classes\Interface\{BA935377-E17C-4475-B1BF-DE3110613A99}
Deleted HKLM\Software\Microsoft\Shared Tools\MSConfig\services\AdvancedSystemCareService11
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{D65C2087-9226-4C06-B3C9-EEB6656333EE}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{20B75E99-D8C2-4ECA-BDDF-57BC07341E74}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{A2E07695-38AF-4015-A9DD-963202F45895}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{6591C2ED-14A3-43E7-A6AE-DF0E2EA7A27F}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3CF65B90-160D-450A-9281-0CFAF5C81090}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{F165DED7-D9C6-4DAA-95F3-8F33991DE58E}
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [5053 octets] - [02/04/2019 20:38:57]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########