Desaparecieron Marcadores de Firefox


#1

Uso con regularidad AdwCleaner y Ccleaner en SO W7 Ultimate Después de una de las pasadas de ambos, me desaparecieron en Firefox (v63.0.3) los marcadores y el historial completo. He tratado de restaurarlos desde Marcadores–>Mostrar todos los marcadores–>Importar y resguardar–>Restaurar, aquí me aparecen varias opciones de puntos(fechas) de restauración y ninguna responde He tratado de restaurar lo que está en cuarentena en adwcleaner y no me lo permite.


#2

Hola,

Realiza el siguiente paso:

  • Realiza click sobre “Mi PC” o “ Equipo
  • Al lado derecho, podremos observar el espacio para la búsqueda, a donde nos dirigiremos.
  • En dicho espacio, escribe bookmarks.html busqueda-de-bookmark

Una vez encontrado el archivo, muevelo al escritorio, tienes 2 opciones, realizar doble click sobre el archivo, con lo que se advertirá el reemplazo de los marcadores que Mozilla ha puesto por defecto. El otro método en cambio utiliza el proceso mencionado antes, pero a través de la opción de “Importar y Respaldar” desde un archivo, teniendo que elegir al que hemos encontrado en nuestra búsqueda.

Realiza los pasos, y me comentas.


#3

Muchas gracias Facundo por responder. Prubé ambos procedimiento y seguimos como estábamos, sin aparecer los marcadores. El archivo bookmarks.html sólo pesa 4Kb, lo que me parece muy poco para la cantidad de marcadores que tenía “coleccionados” Tengo la sensación que AdwCleaner o Ccleaner, se los “cargaron” a partir de la pasada que hice el 25/11. En la cuarentena de Adwcleaner hay 112 elementos, que no me permite o no se restaurarlos.


#4

No creo que AdwCleaner borre marcadores, a no ser que los detecte como infectados… Ccleaner puede que sea el responsable. Pegame el log/reporte de AdwCleaner del escaneo que has realizado


#5

Aquí va el informe copiado:

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-11-19.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    11-25-2018
# Duration: 00:00:23
# OS:       Windows 7 Ultimate
# Cleaned:  121
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF68D769-7A84-4988-A3D3-C96CCD3BEEE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBC549BF-2180-4DD3-A5F0-B46A113AC92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B1170B-E892-4232-83A0-947F26634B2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1C14638-D46D-4BD6-92A2-60C5B8ABA59}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1446B0E-26EF-40F5-AA18-2012A0857245}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0C8F3F1-47E3-4310-94D2-42EF56888EB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F03D9FE0-B856-4358-8C93-F99E722FA7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEAC03E8-69D5-44BE-A1FD-BF09D7F9A9E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7133A-F0D1-4004-A655-8DC1AADCEE89}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA2DC3E9-E90D-46F1-B689-27B7DFD783FB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8769F57-ED80-4D80-A9B-B7FA57AB476}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7A4ED17-44B1-462B-8410-A2CB4BE358}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E700B023-AA98-48AE-999D-C235F1C4861}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3321FFC-1F50-4BF5-A23F-C7A4C3211F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E18E0400-6AA-454C-ADF3-AE10D65EEEDF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E043A7D5-AAA6-456E-97C7-55CB4A189B8B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4A331B-E359-4807-8598-9AF3E29C7A23}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEE980A3-6890-4029-A48C-2E30DA1F085}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE737BA8-51C9-4C50-B4F-A7B68D29F2F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBDBD16E-FDC-40FA-BE5-9CC48498B723}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB3D4C9A-3161-4B26-B089-99B9316B5675}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D890B920-592B-42BC-A73E-E172E48213D6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8869FB9-33D9-4B45-AE5-72C0833E3CA6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D51301A3-4C05-4DD8-A3DE-C8497897A8E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D30979F6-FAF8-40AE-B559-1E603F85D96}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1D10E6D-D914-4A4D-845C-FE16122F3FA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D05C52EF-D62F-4389-84EA-997D8192A677}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD303DDA-103-4E21-AEED-A883175CFF54}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC434407-C64F-4FD7-9775-C0BE13688BE2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C92062E0-5226-4585-97C8-70D6CBF2652D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3EB171A-F0B8-4992-AEA6-EC12D6F4FF0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C38CC503-26A6-4377-B4E9-587FBEBB061}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CC2688-A0B-4DB4-A15-1358A88CE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6B327B4-B04-42B2-A5FD-817BB67318C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B56E10A0-D08-4887-A19B-E6BEB55C7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2A071B2-5591-4AD2-9E54-917FA719ACE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23B8692-F98-4A69-AD12-ADC9139C9E5D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1E461B7-5AAA-471E-92C1-519EA49A5A8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1806DB6-AE7C-44E3-93C8-1C325D69B682}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B053FB49-3E7A-4756-A545-C596608FF8C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE405B8E-C033-46E5-9CF2-CA505E2C9BB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC3C90-97EE-48E6-90AA-CE7CAFDC910}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABA4C3B3-8CD7-4CAF-944B-C3BD208DB9D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8B2B89-B820-4A3C-9EA2-72856870B048}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B1D3C5-897F-4D35-9084-39383C15F353}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A36CDA7D-59ED-4731-AF4D-2B98A78DF6CD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2F50ADB-9155-4D00-8990-EFB1E99A334}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A198BF84-D4C0-4158-92D8-D3423DD95B30}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F650D73-AAB7-4BC8-9746-B12F32E2EDC}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EEF9A32-433C-45D7-AE16-99D98678E64}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D1A5A6F-4270-47DC-AB25-9D63A42EF93D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99F33689-7304-437E-ACDE-C414BE6D352C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{988279AC-DCE1-45F1-A3FB-19852E7359C3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95A9DF42-55E4-473F-A5C1-3960F38ACB7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F75BF0-63DA-4B55-A1CB-6CDCFFEDAD13}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{925E0C7-508D-4D6A-AEA4-4E2BEEFA26A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F8268BA-1721-4C68-889C-4A0C79D424D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DC76372-F40F-4995-8EE8-AAB62229D1E6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892B0245-8489-4F21-9CAC-A3D4C36D8417}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87DA6AF1-8A79-493D-A075-7A99D20B286}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83E1A39D-BF27-45D9-8289-91C71C8F0F7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE6A7EC-3CB2-4C3A-A928-96EB318EA47}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAAFC49-58A5-400A-843A-97CF2DD1670}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77BF7B6F-BF5D-4FBF-B691-B98A16191E4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7700307B-C81-470F-BDE7-FFA6B3FCF4F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7420BD41-D4CA-4CE3-B874-61A12D593112}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72CF001-67F8-4C47-ABAC-4F2BF4AB7F48}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A59511-22EB-4CBD-86B7-15CE5AB425A3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{728497BC-D4E5-4041-A591-5DCDF75208F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{703E97DA-D743-422E-A9B5-6413F1AAF2FD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F02D22F-6882-4C6F-A87E-C1B022D1FCA}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E67A2C3-37FB-43EA-A8B9-595927684C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692B96-36AA-47AA-B2D0-CA1A4E9AE185}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68CD16DE-8F38-4669-8C57-D124F383A51}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B6AB4F-11A7-4314-8DB7-6E06576C46}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62940B6-DF3B-4D9A-AFB8-B2524F68D7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D58342D-6E23-4EDF-AB2B-2924179E41FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C5EAE1-44D1-46BD-A6E7-FB9AD24C20}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F1CF4-52EC-4105-BC56-172F6E12262}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BDA6E6-87DF-4794-B7D6-2CDAD0D9C496}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F38DE3F-5074-49C8-925F-A1198245D0D9}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E8F845B-71D6-4D6D-8B44-63D26199F399}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B179B49-5EBA-4668-B9B0-8523C6280FF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49DF5F2C-FC27-4B61-B1A1-6B54B2899DDD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46BBD65D-4CE0-4885-AA88-EFCCABA4F73}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{467C8EED-F8B0-4479-AD12-DB5687218E8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4338D31B-66A6-4A23-90AC-8570A5331351}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EEC2A2-C545-4CF3-8C46-CD90C2CF021}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DED4BB6-24A5-4BDA-B78B-18C2A82A5673}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DAB177F-E90-41FD-82D2-C1C9E06CA7DE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C90D860-5545-4ED2-957E-20D55F32B2F0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37297109-D27-4705-A884-3BE427B6F52}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{366AAADA-BCC3-4FB4-8D8A-D22CFDE22C92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34BCDF71-FE28-4B62-B4D2-F8BDB7AFC819}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B5510E9-283D-43D7-B7D3-93B8ECB52A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2914C09B-A8B8-4911-84EC-6E36AA2FF6FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28BBFF07-13B3-4258-A77-57C7133E20F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{263A3974-88FE-4C1F-AFA7-43BAF66690}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23350BA-4401-4902-AAFB-4F9A50C3DB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D882E9-9EBC-4EEA-8FCD-7AB7A4AC595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20B7B237-6E3D-4B70-8786-8B758459AD4D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2014DBBD-7855-4E45-9798-F86C59917ED}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2001591C-C87E-47E3-ABEB-0B13438474}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20005627-A4C9-4D2E-B54D-3C36CF9AA081}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F7ACCAF-2CA8-416F-A239-ADD7ADD3925C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EF77DD-E844-44A5-81A5-E6941AB9961}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D7824E0-BBF2-41B5-BB6D-57525044AEA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CCA045-9AEC-4ADB-AADF-2368CE86766B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2A3062-5D59-47B8-9326-F310308B979}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD130BA9-DD01-413E-AC45-FBB9E3DE875}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2C983E2-F298-4428-87D4-A710F77FFEB6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4997867-4D85-4B3A-B156-F17C142857E7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0EB7315-BB45-40EB-AA59-DC1C81EE74}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79ED57C3-D7F-4EF9-AC3F-63C669187C98}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632B142-CCCD-450D-856F-FC6893BD7DB4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6390369-7E07-4A78-8E8A-384B9468D899}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB1E12AB-FABD-41EE-8B1-A94115FB252C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A379CF13-65E2-46E7-84F2-8D9D3C28539}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F95373-994D-4F5F-9166-824076B21595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ffc4124e-5ee8-42ba-82e8-84a332696756}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1cbcde8c-f460-427b-a80f-8c72196c4ab9}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

#6

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-11-19.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    11-25-2018
# Duration: 00:00:23
# OS:       Windows 7 Ultimate
# Cleaned:  121
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF68D769-7A84-4988-A3D3-C96CCD3BEEE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBC549BF-2180-4DD3-A5F0-B46A113AC92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B1170B-E892-4232-83A0-947F26634B2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1C14638-D46D-4BD6-92A2-60C5B8ABA59}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1446B0E-26EF-40F5-AA18-2012A0857245}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0C8F3F1-47E3-4310-94D2-42EF56888EB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F03D9FE0-B856-4358-8C93-F99E722FA7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEAC03E8-69D5-44BE-A1FD-BF09D7F9A9E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7133A-F0D1-4004-A655-8DC1AADCEE89}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA2DC3E9-E90D-46F1-B689-27B7DFD783FB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8769F57-ED80-4D80-A9B-B7FA57AB476}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7A4ED17-44B1-462B-8410-A2CB4BE358}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E700B023-AA98-48AE-999D-C235F1C4861}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3321FFC-1F50-4BF5-A23F-C7A4C3211F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E18E0400-6AA-454C-ADF3-AE10D65EEEDF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E043A7D5-AAA6-456E-97C7-55CB4A189B8B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4A331B-E359-4807-8598-9AF3E29C7A23}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEE980A3-6890-4029-A48C-2E30DA1F085}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE737BA8-51C9-4C50-B4F-A7B68D29F2F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBDBD16E-FDC-40FA-BE5-9CC48498B723}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB3D4C9A-3161-4B26-B089-99B9316B5675}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D890B920-592B-42BC-A73E-E172E48213D6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8869FB9-33D9-4B45-AE5-72C0833E3CA6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D51301A3-4C05-4DD8-A3DE-C8497897A8E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D30979F6-FAF8-40AE-B559-1E603F85D96}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1D10E6D-D914-4A4D-845C-FE16122F3FA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D05C52EF-D62F-4389-84EA-997D8192A677}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD303DDA-103-4E21-AEED-A883175CFF54}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC434407-C64F-4FD7-9775-C0BE13688BE2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C92062E0-5226-4585-97C8-70D6CBF2652D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3EB171A-F0B8-4992-AEA6-EC12D6F4FF0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C38CC503-26A6-4377-B4E9-587FBEBB061}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CC2688-A0B-4DB4-A15-1358A88CE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6B327B4-B04-42B2-A5FD-817BB67318C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B56E10A0-D08-4887-A19B-E6BEB55C7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2A071B2-5591-4AD2-9E54-917FA719ACE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23B8692-F98-4A69-AD12-ADC9139C9E5D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1E461B7-5AAA-471E-92C1-519EA49A5A8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1806DB6-AE7C-44E3-93C8-1C325D69B682}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B053FB49-3E7A-4756-A545-C596608FF8C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE405B8E-C033-46E5-9CF2-CA505E2C9BB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC3C90-97EE-48E6-90AA-CE7CAFDC910}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABA4C3B3-8CD7-4CAF-944B-C3BD208DB9D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8B2B89-B820-4A3C-9EA2-72856870B048}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B1D3C5-897F-4D35-9084-39383C15F353}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A36CDA7D-59ED-4731-AF4D-2B98A78DF6CD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2F50ADB-9155-4D00-8990-EFB1E99A334}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A198BF84-D4C0-4158-92D8-D3423DD95B30}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F650D73-AAB7-4BC8-9746-B12F32E2EDC}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EEF9A32-433C-45D7-AE16-99D98678E64}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D1A5A6F-4270-47DC-AB25-9D63A42EF93D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99F33689-7304-437E-ACDE-C414BE6D352C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{988279AC-DCE1-45F1-A3FB-19852E7359C3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95A9DF42-55E4-473F-A5C1-3960F38ACB7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F75BF0-63DA-4B55-A1CB-6CDCFFEDAD13}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{925E0C7-508D-4D6A-AEA4-4E2BEEFA26A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F8268BA-1721-4C68-889C-4A0C79D424D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DC76372-F40F-4995-8EE8-AAB62229D1E6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892B0245-8489-4F21-9CAC-A3D4C36D8417}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87DA6AF1-8A79-493D-A075-7A99D20B286}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83E1A39D-BF27-45D9-8289-91C71C8F0F7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE6A7EC-3CB2-4C3A-A928-96EB318EA47}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAAFC49-58A5-400A-843A-97CF2DD1670}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77BF7B6F-BF5D-4FBF-B691-B98A16191E4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7700307B-C81-470F-BDE7-FFA6B3FCF4F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7420BD41-D4CA-4CE3-B874-61A12D593112}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72CF001-67F8-4C47-ABAC-4F2BF4AB7F48}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A59511-22EB-4CBD-86B7-15CE5AB425A3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{728497BC-D4E5-4041-A591-5DCDF75208F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{703E97DA-D743-422E-A9B5-6413F1AAF2FD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F02D22F-6882-4C6F-A87E-C1B022D1FCA}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E67A2C3-37FB-43EA-A8B9-595927684C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692B96-36AA-47AA-B2D0-CA1A4E9AE185}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68CD16DE-8F38-4669-8C57-D124F383A51}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B6AB4F-11A7-4314-8DB7-6E06576C46}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62940B6-DF3B-4D9A-AFB8-B2524F68D7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D58342D-6E23-4EDF-AB2B-2924179E41FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C5EAE1-44D1-46BD-A6E7-FB9AD24C20}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F1CF4-52EC-4105-BC56-172F6E12262}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BDA6E6-87DF-4794-B7D6-2CDAD0D9C496}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F38DE3F-5074-49C8-925F-A1198245D0D9}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E8F845B-71D6-4D6D-8B44-63D26199F399}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B179B49-5EBA-4668-B9B0-8523C6280FF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49DF5F2C-FC27-4B61-B1A1-6B54B2899DDD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46BBD65D-4CE0-4885-AA88-EFCCABA4F73}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{467C8EED-F8B0-4479-AD12-DB5687218E8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4338D31B-66A6-4A23-90AC-8570A5331351}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EEC2A2-C545-4CF3-8C46-CD90C2CF021}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DED4BB6-24A5-4BDA-B78B-18C2A82A5673}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DAB177F-E90-41FD-82D2-C1C9E06CA7DE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C90D860-5545-4ED2-957E-20D55F32B2F0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37297109-D27-4705-A884-3BE427B6F52}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{366AAADA-BCC3-4FB4-8D8A-D22CFDE22C92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34BCDF71-FE28-4B62-B4D2-F8BDB7AFC819}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B5510E9-283D-43D7-B7D3-93B8ECB52A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2914C09B-A8B8-4911-84EC-6E36AA2FF6FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28BBFF07-13B3-4258-A77-57C7133E20F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{263A3974-88FE-4C1F-AFA7-43BAF66690}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23350BA-4401-4902-AAFB-4F9A50C3DB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D882E9-9EBC-4EEA-8FCD-7AB7A4AC595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20B7B237-6E3D-4B70-8786-8B758459AD4D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2014DBBD-7855-4E45-9798-F86C59917ED}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2001591C-C87E-47E3-ABEB-0B13438474}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20005627-A4C9-4D2E-B54D-3C36CF9AA081}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F7ACCAF-2CA8-416F-A239-ADD7ADD3925C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EF77DD-E844-44A5-81A5-E6941AB9961}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D7824E0-BBF2-41B5-BB6D-57525044AEA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CCA045-9AEC-4ADB-AADF-2368CE86766B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2A3062-5D59-47B8-9326-F310308B979}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD130BA9-DD01-413E-AC45-FBB9E3DE875}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2C983E2-F298-4428-87D4-A710F77FFEB6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4997867-4D85-4B3A-B156-F17C142857E7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0EB7315-BB45-40EB-AA59-DC1C81EE74}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79ED57C3-D7F-4EF9-AC3F-63C669187C98}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632B142-CCCD-450D-856F-FC6893BD7DB4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6390369-7E07-4A78-8E8A-384B9468D899}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB1E12AB-FABD-41EE-8B1-A94115FB252C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A379CF13-65E2-46E7-84F2-8D9D3C28539}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F95373-994D-4F5F-9166-824076B21595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ffc4124e-5ee8-42ba-82e8-84a332696756}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1cbcde8c-f460-427b-a80f-8c72196c4ab9}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########

#7

Realiza los siguientes pasos, , sin cambiar el orden

1) Descarga, actualiza y ejecuta Malwarebytes’ Anti-Malware,

Manual Malwarebytes , para que sepas usarlo y configurarlo.

  • Realiza un Análisis Personalizado, haciendo click en la sección “Analizar” y seguidamente haciendo click “Analisis personalizado” en y luego click en “Configurar análisis”, marcando Todas las casillas de la derecha y de la Izquierda actualizando si te lo pide.
  • Pulsar en “Eliminar Seleccionados” para enviarlo a la cuarentena y Reinicias el sistema.
  • Para acceder posteriormente al informe del análisis : Informes >> Registro de análisis >> Pulsar en >> Exportar >> Copiar al Portapapeles, y lo pegas en tu respuesta

2) Descarga Adwcleaner en el escritorio.

  • Desactiva tu antivirus :arrow_forward: Como deshabilitar temporalmente un antivirus y cualquier programa de seguridad.
  • Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona “Ejecutar como Administrador.”)
  • Pulsar en el botón Analizar Ahora, y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Iniciar Reparacion.
  • Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
  • Si no encuentra nada, pulsamos “Omitir Reparación”
  • El log lo encontramos en la pestaña “Informes”, volviendo a abrir el programa, si es necesario o en"C:\AdwCleaner\Logs\AdwCleaner[C0].txt"

Puedes mirar su manual >> Manual de Adwcleaner

3) Descarga Ccleaner. Aqui tienes manual para que sepas configurar y usarlo.

Instalalo y ejecútalo. En la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine > clic en ejecutar limpiador. Clic en la pestaña Registro > clic en buscar problemas esperas que termine > clic en Reparar Seleccionadas y haces una copia de seguridad.

Pega los reportes de Malwarebytes, AdwCleaner y comentas como va el problema.

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo :

  • No realices pasos/acciones que NOSOTROS no te hayamos indicado
  • No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.
  • No instales NADA(programas/software/complementos/extensiones del navegador…)
  • No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…)
  • No realices por tu cuenta otros procedimientos.
  • Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

:warning: Muy Importante :warning: Envuelve cada uno de los informes con una etiqueta escrita CODE_Inicial al inicio del informe y otra como este CODE_Final al final del mismo.

Saludos


#8

Envío en dos etapaas los informes, no me permite enviar todo en uno por exceder la cantidad de caracteres.

MALWAREBYTES:


Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 7/12/18
Hora del análisis: 21:43
Archivo de registro: 36c9c41a-fa82-11e8-8dc8-00ff8838d129.json

-Información del software-
Versión: 3.6.1.2711
Versión de los componentes: 1.0.508
Versión del paquete de actualización: 1.0.8219
Licencia: Prueba

-Información del sistema-
SO: Windows 7 Service Pack 1
CPU: x64
Sistema de archivos: NTFS
Usuario: Usuario-PC\Usuario

-Resumen del análisis-
Tipo de análisis: Análisis personalizado
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 1903493
Amenazas detectadas: 362
Amenazas en cuarentena: 359
Tiempo transcurrido: 42 hr, 43 min, 52 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Activado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 4
PUP.Optional.PCVARK, HKLM\SOFTWARE\QWR2YW5jZWRwY2NhcmUubmV0, En cuarentena, [428], [547455],1.0.8219
Adware.Agent.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\AccuDictation, En cuarentena, [3857], [512558],1.0.8219
Adware.Agent.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C9AE1F5D-771C-4A3C-A049-BC8C68F2ACA8}, En cuarentena, [3857], [512558],1.0.8219
Adware.Agent.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{C9AE1F5D-771C-4A3C-A049-BC8C68F2ACA8}, En cuarentena, [3857], [512558],1.0.8219

Valor del registro: 1
Adware.Elex.SHHKRST, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELLEXECUTEHOOKS|{3354FF98-A5C7-11E6-B4A5-64006A5CFC23}, En cuarentena, [760], [398049],1.0.8219

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 29
Adware.Elex.SHHKRST, C:\Users\Usuario\AppData\Roaming\Oguing, En cuarentena, [760], [433320],1.0.8219
PUP.Optional.ScreenShot, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot, En cuarentena, [3512], [392618],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\userCode, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\defaults\preferences, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\locale\en-US, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\defaults, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\locale, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content\images, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected], En cuarentena, [64], [176736],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences, En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults, En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected], En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\components, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected], En cuarentena, [70], [173602],1.0.8219

Archivo: 328
Adware.Agent.Generic, C:\WINDOWS\TASKS\AccuDictation.job, En cuarentena, [3857], [512558],1.0.8219
Adware.Agent.Generic, C:\WINDOWS\SYSTEM32\TASKS\AccuDictation, En cuarentena, [3857], [512558],1.0.8219
Adware.Elex.SHHKRST, C:\PROGRAM FILES (X86)\PRUCDOMZUKOPY\CRASHREPORT.DLL, En cuarentena, [760], [390380],1.0.8219
PUP.Optional.FusionCore, C:\USERS\USUARIO\APPDATA\ROAMING\FREE AVI MPEG WMV MP4 FLV VIDEO JOINER\FREEAVIMPEGWMVMP4FLVVIDEOJOINER.EXE, En cuarentena, [7784], [352241],1.0.8219
PUP.Optional.Trotux, C:\USERS\USUARIO\APPDATA\ROAMING\PROFILES\REEDESYWEGERDOM.DEFAULT\PREFS.JS, Sustituido, [2762], [324486],1.0.8219
PUP.Optional.Trotux, C:\USERS\USUARIO\APPDATA\ROAMING\PROFILES\REEDESYWEGERDOM.DEFAULT\PREFS.JS, Sustituido, [2762], [324486],1.0.8219
PUP.Optional.Trotux, C:\USERS\USUARIO\APPDATA\ROAMING\PROFILES\REEDESYWEGERDOM.DEFAULT\PREFS.JS, Sustituido, [2762], [324486],1.0.8219
Adware.OpenCandy, C:\USERS\USUARIO\APPDATA\ROAMING\UTORRENT\UPDATES\3.4.2_38758.EXE, En cuarentena, [7789], [501762],1.0.8219
PUP.Optional.FusionCore, C:\USERS\USUARIO\DOWNLOADS\FREEAVIMPEGWMVMP4FLVVIDEOJOINER.EXE, En cuarentena, [7784], [352241],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\FILEQUARANTINE\C\PROGRAM FILES (X86)\03000200-1465497311-0500-0006-000700080009\UNINSTALL.EXE.VIR, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\ADVANCEDSYSTEMPROTECTOR.EXE.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\ASPMANAGER.EXE.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\APPRESOURCE.DLL.VIR, En cuarentena, [1467], [326774],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\FILETYPEHELPER.EXE.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\SCANDLL.DLL.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\UNINS000.EXE.VIR, En cuarentena, [1467], [115211],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\03000200-1441405279-0500-0006-000700080009\UNINSTALL.EXE.VIR, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.AppInstaller, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\FLVM PLAYER\FLVPLAYERUNINSTALLER.EXE.VIR, En cuarentena, [12645], [49800],1.0.8219
PUP.Optional.CrossRider, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\IWEBAR\UTILS.EXE.VIR, En cuarentena, [411], [8462],1.0.8219
Adware.Elex, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\MIUITAB\UNINSTALL.EXE.VIR, En cuarentena, [684], [356383],1.0.8219
PUP.Optional.MyPCBackup, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\OLBPRE\UNINST.EXE.VIR, En cuarentena, [558], [281868],1.0.8219
Adware.Elex, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\XTAB\UNINSTALL.EXE.VIR, En cuarentena, [684], [356383],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\SFK\YRREHS.ZIP.VIR, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.Delta, C:\ADWCLEANER\QUARANTINE\C\PROGRAMDATA\DSEARCHLINK\DSEARCHLINK.EXE.VIR, En cuarentena, [285], [286544],1.0.8219
PUP.Optional.ASK.Generic, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\COMODO\DRAGON\USER DATA\DEFAULT\EXTENSIONS\AAAALIPAOKHKCCGMGKDGLFINFNFHFLKO\30.10_0\BACKGROUND\CHROMEUTILPLUGIN.DLL.VIR, En cuarentena, [1983], [345551],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\AAPT.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\CRASHRPT.DLL.VIR, En cuarentena, [3138], [361649],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\CRASHREPORT.EXE.VIR, En cuarentena, [3138], [110074],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DEVCON_X64.EXE.VIR, En cuarentena, [3138], [361649],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DRIVERINSTALL_X64.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DEVCON_X86.EXE.VIR, En cuarentena, [3138], [361649],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DRIVERINSTALL_X86.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\LSUSB.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\MGUSB.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\MGADB.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\OUTLOOKOPERATORC.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE2.2.0.ZIP.VIR, En cuarentena, [3138], [117172],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\SYSTWEAK\ADVANCED SYSTEM PROTECTOR\ASPCONTEXTHELPER64.DLL.VIR, En cuarentena, [1467], [326774],1.0.8219
PUP.Optional.MindSpark, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VSM4VL1C.DEFAULT-1396527927891\EXTENSIONS\[email protected]_39.COM\PLUGINS\NATIVEMESSAGINGDISPATCHER.DLL.VIR, En cuarentena, [578], [76927],1.0.8219
PUP.Optional.MindSpark, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VSM4VL1C.DEFAULT-1396527927891\EXTENSIONS\[email protected]\PLUGINS\NATIVEMESSAGINGDISPATCHER.DLL.VIR, En cuarentena, [578], [76927],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\WINDOWS\SYSTEM32\ROBOOT64.EXE.VIR, En cuarentena, [1467], [107517],1.0.8219
PUP.Optional.PCVARK, C:\ADWCLEANER\QUARANTINE\FILES\BYSXXBVIJJQTZGIIMZPUYUOJTUVSHXLL\APC.EXE, En cuarentena, [428], [606234],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\WINDOWS\SYSTEM32\SASNATIVE64.EXE.VIR, En cuarentena, [1467], [326774],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.EasyFileOpener, C:\ADWCLEANER\QUARANTINE\FILES\TEJZVJTFTRNTWNGHNXZYSHABJQMSLVQT\EFO.EXE, En cuarentena, [3914], [24565],1.0.8219
PUP.Optional.AdvancedPCCare, C:\ADWCLEANER\QUARANTINE\FILES\UGZNKSYZJBKJESCTTJTPYBUIHHUIARMQ\ADVANCED-PC-CARE\APCSRV.EXE, En cuarentena, [748], [342213],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.EasyFileOpener, C:\ADWCLEANER\QUARANTINE\FILES\ULUNOKIBFQVJWEZFHPMYXVLXWUPCZGOU\EFO.EXE, En cuarentena, [3914], [24565],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\ARQJTWIFUSOEAPSPWXCJCNGDZQJXYOKI.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\DWZKADZVSIITVOTPCNETDHZZHUEVMZEL.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\FXQVHPKZXIBADOVAEBRHEWXHTIFIUBPN.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\GJYTNPAEQIMZWMEVFWHZSEFQBYNFJRYK.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFDOHRYMVBGFHKTJLKNEDCDCJUNWJKMF.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\IPNSZSQVXVAGSVRUHLYRJTZBQQGNRPKW.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\KBALUIEBGRKXRJXUJKUARRGQSLURPOBF.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SGRFYQJUELXGZBWJWUFPYZXEBBCVACYP.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RHSFAAQGZRZTLLUFZCKJWFNQAVCYZVFU.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\VGELHURLJESLPAVXTTZHVEBGHOVAOVNB.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\WUVINBZXQEUPWSOCZCQUZLSZEMJPEXZF.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\WXCBXODOONDAQONNBXODQPXVRPUIQFLY.BACK, En cuarentena, [1284], [296186],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\FILES\NWPMASMYKOYTFDYYECIJGRJEQSZEHLSG\APPVERIFIERAPC.EXE, En cuarentena, [0], [392686],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\FILES\YBYHVBMNIORDCOYGAHXKFRWHGCRISWMK\DOFILTERHOST.EXE, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.ScreenShot, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot\ScreenShot.lnk, En cuarentena, [3512], [392618],1.0.8219
PUP.Optional.ScreenShot, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot\SSInst.lnk, En cuarentena, [3512], [392618],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\asyncDB.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\background.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\browserAction.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\contextMenu.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\dbManager.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\dom_bg.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\fileManager.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\firefox.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\firefoxNotifications.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\firefoxOmnibox.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\message.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\pageAction.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\request.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\tabs.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\webRequest.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\windowsMessagingHandler.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\addressBarChangeObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\console.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\consts.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\delegate.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\extensionDataStore.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\folderIOWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\httpObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\IDBWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\installer.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\logFile.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\prefs.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\progressListenerObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\registry.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\reloadObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\reports.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\requestObject.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\searchSettings.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\uninstallObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\updateManager.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\utils.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\xhr.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\background.html, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\baseObject.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\browser.xul, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\dialog.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\ffCoreFilesIndex.txt, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\options.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\options.xul, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\platformVersion.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\search_dialog.xul, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\defaults\preferences\prefs.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1000020_analytics.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1000025_analyticsFront.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1000030_mz.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\13_CrossriderAppUtils.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\14_CrossriderUtils.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\16_FFAppAPIWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\177_crossriderDashboard.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\17_jQuery.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\180_bpo_serp_m.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\182_openUrl.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\183_tabsWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1_base.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\207_dbWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\21_debug.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\226_set_campaign_id_m.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\22_resources.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\28_initializer.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\47_resources_background.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\4_jquery_1_7_1.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\64_appApiMessage.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\72_appApiValidation.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\78_CrossriderInfo.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\91_monetizationLoader.js.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]-d3c0-4ec9-8624-5fac2592d0df.com\extensionData\plugins\98_omniCommands.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\userCode\background.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\userCode\extension.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\manifest.xml, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins.json, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\locale\en-US\translations.dtd, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button1.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button2.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button3.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button4.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button5.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\crossrider_statusbar.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon128.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon16.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon24.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon48.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\panelarrow-up.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\popup.html, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\skin.css, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\update.css, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome.manifest, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\install.rdf, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content\images\icon32.png, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content\dealplyshopping.xul, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences\defaults.js, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome.manifest, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\install.rdf, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences\dflt.js, En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\components\FFDisp.dll, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ae.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\bg.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ch.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\cn.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\cz.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\de.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\eg.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\en.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\es.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\fr.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\gr.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\he.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\il.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\it.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ja.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\jp.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\nl.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\no.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\pl.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\pt.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ro.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ru.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\sa.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\se.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\sv.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\tr.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ua.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\us.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\arwDwn.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\closeo.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\help_16.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\home.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\icon_seperator.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\logo.PNG, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\privecy_16_hot.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\sign.jpg, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\specialoffer.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\tellafriend.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\uninstall.gif, En cuarentena, [70], [173602],1.0.8219

#9
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\delta.css, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\delta.xul, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\dpk.htm, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\hlprs.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\loader.xul, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\mtstart.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\serp.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\tmplt.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome.manifest, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\install.rdf, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.SearchGol, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I09PG7OR.DEFAULT\PREFS.JS, Sustituido, [1842], [301629],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR1067\SHADESOFBLUE.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR1102\RUS_13.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR1564\SAM_0644.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR191\BACKGROUND.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-CSRSRV.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_7DCE8CF3F635F307\SAMSUNG 057.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-E..TVRATINGS.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_273A0EA3972B3B5D\100_5747.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-G..IN-GPEDIT.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_0504D2CA6BABB08B\969737_10201685571967946_1716039216_N.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..IONAL-CODEPAGE-1148_31BF3856AD364E35_6.1.7600.16385_NONE_249A66AD69EA80C9\100_58411.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..IONAL-CODEPAGE-1148_31BF3856AD364E35_6.1.7600.16385_NONE_249A66AD69EA80C9\100_5876.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..L-KEYBOARD-00000439_31BF3856AD364E35_6.1.7600.16385_NONE_EAA46F86C343C016\100_5521.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..L-KEYBOARD-00010418_31BF3856AD364E35_6.1.7600.16385_NONE_8D5159F1B61DA586\SAM_0409.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-NTLANMAN.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_3B97DD76A9B0DC17\SAM_0075.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE19.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE20.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE33.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE34.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-W..CTION-ADM.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_ED6D5B83BD823071\JUGAMOS CON LOS COLORES\20140521_110654.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-WWANHC.RESOURCES_31BF3856AD364E35_6.1.7600.16385_PT-BR_BCE21647CD07B20B\4F18FABB\WC141.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_SETUP-UXWIZARD-CLIENTIMAGES_31BF3856AD364E35_6.1.7600.16385_NONE_48ADA01D8FF36E68\BACKGROUND.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\DREAM_CHRONICLES3T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\DREAM_CHRONICLES1T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\FASHION_SOLITAIRE_SICON.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\GALAPAGO3T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\LUXOR_AMUN2T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\MAHJONG_WORLD2.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\MONSTER_MASH3.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\PUTTMANIA_ICON02.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\TURBO_PIZZA2T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2250\CAT-SPRT.BMP, Error durante la eliminación, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2551\BG-ERROR-TOP-501.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2554\LOGO-OFFICE.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3024\BG-ERROR-TOP-501.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE20.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE19.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE33.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE34.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3405\SWE_05.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3516\TITLETEXT.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3554\MEG_TONGUE.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3958\MEDSS.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3958\MENWP.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3958\MOVSS.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3967\TRJPLZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3967\STRGSZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\CRDZ39W.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\FUNBWZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\GCLGIZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\INSBSZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\NEWOCZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR4006\CRDUS08W.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR579\1351176212650.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR579\1357415057373.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, E:\MIS DOCUMENTOS\ANALIA ARCHIVOS RESCATADOS\DIR1347\ALBUMARTSMALL.JPG, En cuarentena, [10502], [79314],1.0.8219
CrackTool.AutoDesk.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\AUTOCAD\19J9IXB56F\19J9IXB56F\AUTODESK.AUTOCAD.V2017.SPANISH.WIN64\CRACK\XF-ADSK2017_X64.ZIP, En cuarentena, [11035], [117344],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\BITLORD\BITLORDSETUP.EXE, En cuarentena, [407], [387958],1.0.8219
CrackTool.AutoDesk.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\AUTOCAD\19J9IXB56F\19J9IXB56F\AUTODESK.AUTOCAD.V2017.SPANISH.WIN64\CRACK\XF-ADSK2017_X64.EXE, En cuarentena, [11035], [117344],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\COMPILADOR DE VIDEOS\FREEAVIMPEGWMVMP4FLVVIDEOJOINER.EXE, En cuarentena, [407], [304782],1.0.8219
CrackTool.Agent.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\CONVERT X TO DVD\2018_07_04 VERSION THE KILLERS\CONVERTXTODVD 5\FIX\MEGAHERTZ.EXE, En cuarentena, [7858], [367635],1.0.8219
CrackTool.Agent.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\CONVERT X TO DVD\2018_07_04 VERSION THE KILLERS\CONVERTXTODVD 5 BY THEKILLERSTUTORIALES.RAR, En cuarentena, [7858], [367635],1.0.8219
PUP.Optional.OpenCandy, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\IMAGE BURN\SETUPIMGBURN_2.5.8.0.EXE, En cuarentena, [1091], [297667],1.0.8219
RiskWare.Tool.HCK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\INTERNET DOWNLOAD MANAGER\INTERNET.DOWNLOAD.MANAGER.V6.23.BUILD.10.RETAIL.FINAL.INCL.CRACK-REIS\62310.7Z, En cuarentena, [7722], [298931],1.0.8219
RiskWare.MalPack, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MICROSOFT OFFICE\OFFICE TAB\OFFICE TAB ENTERPRISE 10 50 X86X64 DC 13 08\CRACK\OFFICETABLOADER64.DLL, En cuarentena, [8765], [354563],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MIPONY\MIPONY-SETUP.ZIP, En cuarentena, [407], [81349],1.0.8219
PUP.Optional.Magicbit, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MOZILLA Y COMPLEMENTOS\SAVEFROMNETHELPER-WEB-0FC77F8A01-[360].EXE, En cuarentena, [12202], [105445],1.0.8219
RiskWare.MalPack, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\OFFICE 10\OFFICE.TAB.ENTERPRISE.10.50.X86X64.DC.13.08.2015.RAR, En cuarentena, [8765], [354563],1.0.8219
RiskWare.MalPack, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MICROSOFT OFFICE\OFFICE TAB\OFFICE TAB ENTERPRISE 10 50 X86X64 DC 13 08\OFFICE.TAB.ENTERPRISE.10.50.X86X64.DC.13.08.2015.RAR, En cuarentena, [8765], [354563],1.0.8219
RiskWare.Tool.HCK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\PHOTOSHOP\ADOBE.PHOTOSHOP.CC.2015.V16.0.WIN64.MULTILINGUAL.INCL.KEYGEN-XFORCE\CRACK\UNIVERSAL ADOBE PATCHER V2.0\ADOBE UNIVERSAL PATCHER 2014.EXE, Error durante la eliminación, [7722], [69152],1.0.8219
PUP.Optional.ASK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\TUBE CATCHER\ATUBE_CATCHER_7986.EXE, En cuarentena, [2], [398182],1.0.8219
RiskWare.Tool.HCK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\PHOTOSHOP\ADOBE.PHOTOSHOP.CC.2015.V16.0.WIN64.MULTILINGUAL.INCL.KEYGEN-XFORCE\CRACK\UNIVERSAL ADOBE PATCHER 1.4\ADOBE.SNR.PATCH-PAINTER.EXE, Error durante la eliminación, [7722], [69152],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEOENHANCERSETUP\VIDEO.ENHANCER.1.9-PATCH.RAR, En cuarentena, [3911], [1570],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEOENHANCERSETUP\VIDEO.ENHANCER.1.9-PATCH\VIDEO.ENHANCER.1.9-PATCH.EXE, En cuarentena, [3911], [1570],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEO.ENHANCER.1.9-PATCH\VIDEO.ENHANCER.1.9-PATCH.EXE, En cuarentena, [3911], [1570],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEOENHANCERSETUP.RAR, En cuarentena, [3911], [1570],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\TUBE CATCHER\INSTALLER_ATUBECATCHER_SPANISH.EXE, En cuarentena, [407], [301105],1.0.8219
PUP.Optional.SofTonic, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\UNIVERSAL INSTALLER\SOFTONICDOWNLOADER_PARA_UNIVERSAL-USB-INSTALLER.EXE, En cuarentena, [1882], [8262],1.0.8219
HackTool.FilePatch, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VUESCAN\VSCAN92180.RAR, En cuarentena, [7809], [281135],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\ECUALIZADOR DE SONIDOS\ECUALIZADOR\SRS AUDIO SANDBOX 1.10.2.0.RAR, En cuarentena, [0], [392686],1.0.8219
MachineLearning/Anomalous.100%, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\CYBERLINK\POWERDVD ULTRA V14 CRACK\POWERDVD ULTRA V14 CRACK\ACTIVATE.EXE, En cuarentena, [0], [392687],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\IMAGE BURN\SETUPIMGBURN_2.5.8.0.EXE, En cuarentena, [0], [392686],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MIPONY\MIPONY-INSTALLER.EXE, En cuarentena, [0], [392686],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\WIN XP LIVE\ARCHIVOS DE PROGRAMA\ROADKIL\SCANPORT.EXE, En cuarentena, [0], [392686],1.0.8219
Adware.Agent.NSIS, E:\PEN DRIVE\DATA-RECOVERY-STUDIO-V2.1_INSTALLER.EXE, En cuarentena, [8845], [450534],1.0.8219

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)

AdwCleaner

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-09-21.1 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-09-2018
# Duration: 00:00:46
# OS:       Windows 7 Ultimate
# Scanned:  42056
# Detected: 127


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Adware.Heuristic            HKU\S-1-5-18\SOFTWARE\5257d8dfb235eb44
PUP.Adware.Heuristic            HKCU\SOFTWARE\C44859214A19ADA0BF679C905D9F7B55
PUP.Adware.Heuristic            HKU\.DEFAULT\SOFTWARE\5257d8dfb235eb44
PUP.Adware.Heuristic            HKLM\Software\Wow6432Node\C44859214A19ADA0BF679C905D9F7B55
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF68D769-7A84-4988-A3D3-C96CCD3BEEE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBC549BF-2180-4DD3-A5F0-B46A113AC92}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B1170B-E892-4232-83A0-947F26634B2}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1C14638-D46D-4BD6-92A2-60C5B8ABA59}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1446B0E-26EF-40F5-AA18-2012A0857245}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0C8F3F1-47E3-4310-94D2-42EF56888EB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F03D9FE0-B856-4358-8C93-F99E722FA7A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEAC03E8-69D5-44BE-A1FD-BF09D7F9A9E}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7133A-F0D1-4004-A655-8DC1AADCEE89}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA2DC3E9-E90D-46F1-B689-27B7DFD783FB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8769F57-ED80-4D80-A9B-B7FA57AB476}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7A4ED17-44B1-462B-8410-A2CB4BE358}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E700B023-AA98-48AE-999D-C235F1C4861}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3321FFC-1F50-4BF5-A23F-C7A4C3211F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E18E0400-6AA-454C-ADF3-AE10D65EEEDF}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E043A7D5-AAA6-456E-97C7-55CB4A189B8B}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4A331B-E359-4807-8598-9AF3E29C7A23}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEE980A3-6890-4029-A48C-2E30DA1F085}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE737BA8-51C9-4C50-B4F-A7B68D29F2F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBDBD16E-FDC-40FA-BE5-9CC48498B723}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB3D4C9A-3161-4B26-B089-99B9316B5675}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D890B920-592B-42BC-A73E-E172E48213D6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8869FB9-33D9-4B45-AE5-72C0833E3CA6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D51301A3-4C05-4DD8-A3DE-C8497897A8E}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D30979F6-FAF8-40AE-B559-1E603F85D96}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1D10E6D-D914-4A4D-845C-FE16122F3FA8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D05C52EF-D62F-4389-84EA-997D8192A677}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD303DDA-103-4E21-AEED-A883175CFF54}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC434407-C64F-4FD7-9775-C0BE13688BE2}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C92062E0-5226-4585-97C8-70D6CBF2652D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3EB171A-F0B8-4992-AEA6-EC12D6F4FF0}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C38CC503-26A6-4377-B4E9-587FBEBB061}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CC2688-A0B-4DB4-A15-1358A88CE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6B327B4-B04-42B2-A5FD-817BB67318C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B56E10A0-D08-4887-A19B-E6BEB55C7B4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2A071B2-5591-4AD2-9E54-917FA719ACE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23B8692-F98-4A69-AD12-ADC9139C9E5D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1E461B7-5AAA-471E-92C1-519EA49A5A8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1806DB6-AE7C-44E3-93C8-1C325D69B682}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B053FB49-3E7A-4756-A545-C596608FF8C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE405B8E-C033-46E5-9CF2-CA505E2C9BB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC3C90-97EE-48E6-90AA-CE7CAFDC910}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABA4C3B3-8CD7-4CAF-944B-C3BD208DB9D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8B2B89-B820-4A3C-9EA2-72856870B048}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B1D3C5-897F-4D35-9084-39383C15F353}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A36CDA7D-59ED-4731-AF4D-2B98A78DF6CD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2F50ADB-9155-4D00-8990-EFB1E99A334}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A198BF84-D4C0-4158-92D8-D3423DD95B30}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F650D73-AAB7-4BC8-9746-B12F32E2EDC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EEF9A32-433C-45D7-AE16-99D98678E64}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D1A5A6F-4270-47DC-AB25-9D63A42EF93D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99F33689-7304-437E-ACDE-C414BE6D352C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{988279AC-DCE1-45F1-A3FB-19852E7359C3}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95A9DF42-55E4-473F-A5C1-3960F38ACB7A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F75BF0-63DA-4B55-A1CB-6CDCFFEDAD13}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{925E0C7-508D-4D6A-AEA4-4E2BEEFA26A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F8268BA-1721-4C68-889C-4A0C79D424D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DC76372-F40F-4995-8EE8-AAB62229D1E6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892B0245-8489-4F21-9CAC-A3D4C36D8417}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87DA6AF1-8A79-493D-A075-7A99D20B286}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83E1A39D-BF27-45D9-8289-91C71C8F0F7}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE6A7EC-3CB2-4C3A-A928-96EB318EA47}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAAFC49-58A5-400A-843A-97CF2DD1670}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77BF7B6F-BF5D-4FBF-B691-B98A16191E4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7700307B-C81-470F-BDE7-FFA6B3FCF4F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7420BD41-D4CA-4CE3-B874-61A12D593112}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72CF001-67F8-4C47-ABAC-4F2BF4AB7F48}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A59511-22EB-4CBD-86B7-15CE5AB425A3}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{728497BC-D4E5-4041-A591-5DCDF75208F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{703E97DA-D743-422E-A9B5-6413F1AAF2FD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F02D22F-6882-4C6F-A87E-C1B022D1FCA}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E67A2C3-37FB-43EA-A8B9-595927684C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692B96-36AA-47AA-B2D0-CA1A4E9AE185}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68CD16DE-8F38-4669-8C57-D124F383A51}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B6AB4F-11A7-4314-8DB7-6E06576C46}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62940B6-DF3B-4D9A-AFB8-B2524F68D7B4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D58342D-6E23-4EDF-AB2B-2924179E41FE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C5EAE1-44D1-46BD-A6E7-FB9AD24C20}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F1CF4-52EC-4105-BC56-172F6E12262}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BDA6E6-87DF-4794-B7D6-2CDAD0D9C496}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F38DE3F-5074-49C8-925F-A1198245D0D9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E8F845B-71D6-4D6D-8B44-63D26199F399}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B179B49-5EBA-4668-B9B0-8523C6280FF}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49DF5F2C-FC27-4B61-B1A1-6B54B2899DDD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46BBD65D-4CE0-4885-AA88-EFCCABA4F73}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{467C8EED-F8B0-4479-AD12-DB5687218E8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4338D31B-66A6-4A23-90AC-8570A5331351}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EEC2A2-C545-4CF3-8C46-CD90C2CF021}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DED4BB6-24A5-4BDA-B78B-18C2A82A5673}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DAB177F-E90-41FD-82D2-C1C9E06CA7DE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C90D860-5545-4ED2-957E-20D55F32B2F0}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37297109-D27-4705-A884-3BE427B6F52}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{366AAADA-BCC3-4FB4-8D8A-D22CFDE22C92}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34BCDF71-FE28-4B62-B4D2-F8BDB7AFC819}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B5510E9-283D-43D7-B7D3-93B8ECB52A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2914C09B-A8B8-4911-84EC-6E36AA2FF6FE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28BBFF07-13B3-4258-A77-57C7133E20F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{263A3974-88FE-4C1F-AFA7-43BAF66690}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23350BA-4401-4902-AAFB-4F9A50C3DB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D882E9-9EBC-4EEA-8FCD-7AB7A4AC595}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20B7B237-6E3D-4B70-8786-8B758459AD4D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2014DBBD-7855-4E45-9798-F86C59917ED}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2001591C-C87E-47E3-ABEB-0B13438474}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20005627-A4C9-4D2E-B54D-3C36CF9AA081}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F7ACCAF-2CA8-416F-A239-ADD7ADD3925C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EF77DD-E844-44A5-81A5-E6941AB9961}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D7824E0-BBF2-41B5-BB6D-57525044AEA8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CCA045-9AEC-4ADB-AADF-2368CE86766B}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2A3062-5D59-47B8-9326-F310308B979}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD130BA9-DD01-413E-AC45-FBB9E3DE875}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2C983E2-F298-4428-87D4-A710F77FFEB6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4997867-4D85-4B3A-B156-F17C142857E7}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0EB7315-BB45-40EB-AA59-DC1C81EE74}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79ED57C3-D7F-4EF9-AC3F-63C669187C98}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632B142-CCCD-450D-856F-FC6893BD7DB4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6390369-7E07-4A78-8E8A-384B9468D899}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB1E12AB-FABD-41EE-8B1-A94115FB252C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A379CF13-65E2-46E7-84F2-8D9D3C28539}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F95373-994D-4F5F-9166-824076B21595}
PUP.Optional.Legacy             HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync
PUP.Optional.Legacy             HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Ad-Aware Browsing Protection
PUP.Optional.Legacy             HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}
PUP.Optional.Legacy             HKCU\Software\Microsoft\Internet Explorer\Main|Start Page

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]
AdwCleaner[C01].txt - [21750 octets] - [25/11/2018 12:27:32]
AdwCleaner[S02].txt - [1561 octets] - [02/12/2018 00:48:29]
AdwCleaner[C02].txt - [1727 octets] - [02/12/2018 00:52:00]
AdwCleaner[S03].txt - [1623 octets] - [04/12/2018 11:56:23]
AdwCleaner[C03].txt - [1809 octets] - [04/12/2018 11:56:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S04].txt ##########

Continúa sin aparecer el historial, ni los marcadores. Al intentar restaurar los marcadores, abre la ventana que indica que “no se puede resaturar el archivo de resguardo”


#10

Realizaste la eliminación de lo encontrado por AdwCleaner? si no es el caso, repite el análisis y esta vez eliminalo, y pegame su log.


#11
# -------------------------------
# Malwarebytes AdwCleaner 7.2.5.0
# -------------------------------
# Build:    11-26-2018
# Database: 2018-11-14.2 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-10-2018
# Duration: 00:00:50
# OS:       Windows 7 Ultimate
# Scanned:  32162
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]
AdwCleaner[C01].txt - [21750 octets] - [25/11/2018 12:27:32]
AdwCleaner[S02].txt - [1561 octets] - [02/12/2018 00:48:29]
AdwCleaner[C02].txt - [1727 octets] - [02/12/2018 00:52:00]
AdwCleaner[S03].txt - [1623 octets] - [04/12/2018 11:56:23]
AdwCleaner[C03].txt - [1809 octets] - [04/12/2018 11:56:57]
AdwCleaner[S04].txt - [19135 octets] - [09/12/2018 17:21:33]
AdwCleaner[C04].txt - [17034 octets] - [09/12/2018 17:30:26]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S05].txt ##########

#12

A ver, lee esta pagina donde explica unos pasos Firefox de como recuperarlos, pones a pruebas los pasos indicados y vuelves aqui y me comentas si funciono o no.

Saludos.


#13

Hola chicos:

@omargarcia:

Se ven en tus navegadores severas infecciones por PUPs, en Mozila Firefox los marcadores están asociados a los Perfiles y segun se muestra en el reporte de Malwarebyets hubo muchas eliminaciones desde alli:

Profiles default=tu perfil predeterminado

Profiles\i09pg7or.default\

Prueba lo siguiente:

1.- Primero activa Ver los Archivos Ocultos.

2.- Luego Ve al Botón de Inicio >>> en la línea de búsqueda pega tal cual lo siguiente:

%APPDATA%\Mozilla\Firefox\Profiles\

No presiones enter, solo toma una imagen de lo que aparezca y pegala en tu próxima respuesta.

Deberías ver algo como lo siguiente:

perfiles

Puede haber mas de una carpeta, entra a cada una y vuelves a tomar una imagen.

Las pegas en tu próxima respuesta.

Como insertar una imagen?

Salu2.


#14

El sistema no me permite pegar imágenes.

En la búsqueda aparecen cinco carpetas.


#15

Hola @omargarcia

Lee dos o tres temas por el Foro distintos a este y ya te lo permitirá o al menos dos o sino subelo a un sitio de imágenes y pasame los enlaces por MP y yo lo edito y las coloco.

Salu2.


#16
  1. Imágen de la búsqueda:

Captura carpeta Nº 1

Captura carpeta Nº 2

Captura carpeta Nº 3

Captura carpeta Nº 4

Captura carpeta Nº 4B

Captura carpeta Nº 4C

Captura carpeta Nº 5


#17

Hola @omargarcia:

Aparentemente en tu Carpeta Nª 4, parece estar tu perfil de Firefox. Allí se ven los bookmarkbackups o sea tus marcadores :thinking: ademas de otros datos de tu perfil.

Toma nota del nombre exacto de esa carpeta, ya que al ser números y letras aleatorios presta a confusión…

Antes de continuar por alguna razón tu has abierto nuevos perfiles en Firefox? Eres el único Usuario que usa ese equipo?

Espero tu respuesta para tratar de darte el paso a paso para recuperar tu perfil.

Mientras tanto también realiza lo siguiente:

1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

2.- Descarga Farbar Recovery Scan Tool. en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de su equipo. >> Como saber si mi Windows es de 32 o 64 bits.?

  • Ejecuta FRST.exe.
  • En el mensaje de la ventana del Disclaimer, pulsamos Yes
  • En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.
  • Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Guía: Como Ejecutar FRST

3.- En tu próxima respuesta, pega los reportes generados.

Guía : ¿Como Pegar reportes en el Foro?

Esperamos esos reporte.

Salu2


#18

“Antes de continuar por alguna razón tu has abierto nuevos perfiles en Firefox? Eres el único Usuario que usa ese equipo?” Nunca he abierto mas que un perfil de Firefox. Somos varioslos que usamos el equipo, pero unicamente yo uso Firefox, los demás usan Chrome


#19

Hola @omagarcia

Por aquí esperamos los reportes entonces.

Salu2.


#20

Addition.txt Parte 1 de 2. No me permite mandar todo el texto

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09.12.2018
Ran by Usuario (13-12-2018 01:42:32)
Running from E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\FARBAR
Windows 7 Ultimate Service Pack 1 (X64) (2013-09-10 02:35:51)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-2385482525-178760063-3032261430-500 - Administrator - Disabled)
AVIGNON (S-1-5-21-2385482525-178760063-3032261430-1137 - Limited - Enabled) => C:\Users\AVIGNON
Invitado (S-1-5-21-2385482525-178760063-3032261430-501 - Limited - Disabled)
Usuario (S-1-5-21-2385482525-178760063-3032261430-1000 - Administrator - Enabled) => C:\Users\Usuario

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\uTorrent) (Version: 3.5.4.44846 - BitTorrent Inc.)
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
A360 Desktop (HKLM\...\{7758802D-9486-4883-9927-CCAC366A3BA4}) (Version: 7.2.3.1800 - Autodesk)
ACA & MEP 2017 Object Enabler (HKLM\...\{28B89EEF-0004-0000-5102-CF3F3A09B77D}) (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{28B89EEF-0001-0000-3102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
Adobe ActiveShare 1.5 (HKLM-x32\...\{B3C7CA81-27EB-11D4-A59C-00E02C071F5C}) (Version:  - )
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced RAR Repair v1.2 (HKLM-x32\...\Advanced RAR Repair v1.2) (Version:  - )
AIDA64 Extreme Edition v3.20 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 3.20 - FinalWire Ltd.)
AirDroid 3.3.1.0 (HKLM-x32\...\AirDroid) (Version: 3.3.1.0 - Sand Studio)
AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung)
Amazon Kindle (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Amazon Kindle) (Version: 1.17.1.44183 - Amazon)
AMD Catalyst Install Manager (HKLM\...\{FD8FD2BD-A82D-C528-EDA0-A6635F47C19C}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Anti-reCAPTCHA v4.01 JD (HKLM-x32\...\{74252365-7BB1-437A-8D61-5B0BD1D9AFAA}) (Version: 4.01 - SONY-TEAM)
Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Any Video Converter 5.9.6 (HKLM-x32\...\Any Video Converter) (Version: 5.9.6 - Anvsoft)
Aplicación de escritorio de Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.6.378 - Autodesk)
Aplicación para detectar Winamp (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Aplicaciones destacadas de Autodesk 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7955 - DsNET Corp)
aTube Catcher versión 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
AutoCAD 2017 - Español (Spanish) (HKLM\...\{28B89EEF-0001-040A-2102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017  Language Pack - Español (Spanish) (HKLM\...\{28B89EEF-0001-040A-1102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (HKLM\...\{28B89EEF-0001-0000-0102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - Español (Spanish) (HKLM\...\AutoCAD 2017 - Español (Spanish)) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit (HKLM\...\{276A67E0-71EB-4827-B5F7-2ACF02BC1A5B}) (Version: 4.37.6853 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk ReCap 360 (HKLM\...\{5F0F7049-0000-1033-0102-73A6DA3D7FA6}) (Version: 3.0.0.52 - Autodesk) Hidden
Autodesk ReCap 360 (HKLM\...\Autodesk ReCap 360) (Version: 3.0.0.52 - Autodesk)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 70.0.917.102 - AVAST Software)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
calibre 64bit (HKLM\...\{A9CFF5B2-9CF6-4903-ACD1-CE9CFDFD6206}) (Version: 3.34.0 - Kovid Goyal)
Capture-A-ScreenShot (HKLM-x32\...\Capture-A-ScreenShot_is1) (Version:  - PopDrops.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)
Clip2Net 0.8.2b (HKLM-x32\...\Clip2Net_is1) (Version:  - AU78)
ConvertXtoDVD 3.8.0.193j (HKLM-x32\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.8.0.193j - )
Corel Shell Extension - 64Bit (HKLM\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF011}) (Version: 14.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Capture (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF012}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Content (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF016}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Draw (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF013}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Filters (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF017}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - FontNav (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF019}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics SUite X4 - ICA (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF010}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - IPM (HKLM-x32\...\{9D0798D0-AF6C-4E62-94B1-AEBF1A43E00A}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Lang ES (HKLM-x32\...\{D2827848-7D2A-4547-9AD1-C965FB3E6344}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - PP (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF014}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - VBA (HKLM-x32\...\{BF439B41-0252-48DE-8B8B-0430CB26A181}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 (HKLM-x32\...\{44A27085-0616-4181-A0C3-81C7ECA17F73}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension (HKLM-x32\...\_{CE2DA11A-917F-4CF5-AB55-755EC115DD10}) (Version:  - Corel Corporation)
CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension (HKLM-x32\...\{CE2DA11A-917F-4CF5-AB55-755EC115DD10}) (Version: 1.1 - Corel Corporation) Hidden
CorelDRAW(R) Graphics Suite X4 (HKLM-x32\...\_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}) (Version:  - Corel Corporation)
coverXP (remove only) (HKLM-x32\...\coverXP) (Version:  - )
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Datel 2001 V1.12 R2 (HKLM-x32\...\ST6UNST #1) (Version:  - )
[email protected] Espasa (HKLM-x32\...\[email protected] Espasa) (Version:  - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 64.3.120 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.143.1 - Dropbox, Inc.) Hidden
E.M. PowerPoint Video Converter 3.20 (HKLM-x32\...\E.M. PowerPoint Video Converter_is1) (Version:  - EffectMatrix, Inc.)
Epson Easy Photo Print 2 (HKLM-x32\...\{445E91BC-EC9D-423F-A6CA-80B80C894EF7}) (Version: 2.3.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
EPSON L800 Series Printer Uninstall (HKLM\...\EPSON L800 Series) (Version:  - SEIKO EPSON Corporation)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.05.00 - SEIKO EPSON CORPORATION)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production)
Firemin 6.1.0.4963 (HKLM\...\Firemin_is1) (Version: 6.1.0.4963 - Rizonesoft)
FolderSizes 6 (HKLM\...\{C2321D5C-FD93-462C-9908-5CED4E9B07B8}) (Version: 6.1.76 - Key Metric Software) Hidden
FolderSizes 6 (HKLM-x32\...\FolderSizes 6 6.1.76) (Version: 6.1.76 - Key Metric Software)
FormatFactory 3.9.5.2 (HKLM-x32\...\FormatFactory) (Version: 3.9.5.2 - Free Time)
Foxit Advanced PDF Editor 3 (HKLM-x32\...\B521582C-6BE3-491D-BCC8-FFB8301298E9_is1) (Version: 3.0.5.0 - Foxit Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
Free AVI MPEG WMV MP4 FLV Video Joiner 8.8.0 (HKLM-x32\...\Free AVI MPEG WMV MP4 FLV Video Joiner_is1) (Version:  - FreeAudioVideoSoftTech, Inc.)
Free Video Flip and Rotate version 2.1.9.822 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.9.822 - DVDVideoSoft Ltd.)
Galería de fotos (HKLM-x32\...\{198CEF22-A27F-4DC7-9B66-2C22A4B1CA09}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.110 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Grabadora de Audio Gratis V2.3.2 (HKLM-x32\...\{E35F91E4-C68C-43E8-BE90-35CDEE4E5730}_is1) (Version: 2.3.2 - APOWERSOFT LIMITED)
HP PrecisionScan LTX (HKLM-x32\...\HP PrecisionScan LTX) (Version:  - )
hubiC - x64 (HKLM\...\{0A945801-D93C-46BF-9417-697DCE52E5B4}) (Version: 2.0.2.124 - OVH) Hidden
hubiC (HKLM-x32\...\{6c91e652-071b-4014-9477-f57cacecb32b}) (Version: 2.0.2.124 - OVH)
HydraVision (HKLM-x32\...\{10EDA005-3CCE-56EA-B9FE-FCE959672BB5}) (Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Importación de SketchUp 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
InkReset version 2.25 (HKLM-x32\...\{1C557D95-74B6-4AC2-9811-46F0441D6646}_is1) (Version: 2.25 - )
Java 7 Update 76 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417076FF}) (Version: 7.0.760 - Oracle)
Java 7 Update 76 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217076FF}) (Version: 7.0.760 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.1.5.8 - PandoraTV)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes versión 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Manager (HKLM-x32\...\{38251B9A-C44B-42D9-9A6A-0697986E334A}) (Version: 4.1.4.27792 - 2015 pdfforge GmbH. All rights reserved) Hidden
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.7.2 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{9C82436F-F19C-42A4-B476-F87A28A95BF9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 64.0 (x64 es-AR) (HKLM\...\Mozilla Firefox 64.0 (x64 es-AR)) (Version: 64.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 64.0.0.6914 - Mozilla)
Mozilla Thunderbird 52.9.1 (x86 es-ES) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 es-ES)) (Version: 52.9.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.1.0 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)
Nero 7.5.9.0 (HKLM-x32\...\Nero 7_is1) (Version:  - Nero AG)
OLYMPUS ib (HKLM-x32\...\{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.1.1404 - OLYMPUS IMAGING CORP.) Hidden
OLYMPUS ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.1.1404 - OLYMPUS IMAGING CORP.)
Oracle VM VirtualBox 4.3.16 (HKLM\...\{D7FAEA32-7CE3-4D9F-9139-F7B87BCC50AF}) (Version: 4.3.16 - Oracle Corporation)
Páginas Amarillas (HKLM-x32\...\Guía de Teléfonos de Páginas Amarillas_is1) (Version:  - YELL ARGENTINA S.A.)
Paquete de controladores de Windows - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (HKLM\...\{72B9DF2C-76FA-40B5-A469-16EAB159CE72}) (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (HKLM\...\{BDF7326B-7ED4-4034-B867-F4E88D4E628B}) (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (HKLM\...\{03E04B47-9270-4613-8D7E-DA4AD2B259A0}) (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.4.0 - pdfforge GmbH)
PicosmosTools 1.7.6.0 (HKLM-x32\...\PicosmosTools) (Version: 1.7.6.0 - Free Time)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.) Hidden
Polaris Office Sync (HKLM-x32\...\{1A971E8B-7C02-4155-97F2-23704B513276}) (Version: 2.006.002 - Polaris Office, Inc.) Hidden
Polaris Office Sync (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\InstallShield_{1A971E8B-7C02-4155-97F2-23704B513276}) (Version: 2.006.002 - Polaris Office, Inc.)
qBittorrent 3.3.0 (HKLM-x32\...\qBittorrent) (Version: 3.3.0 - The qBittorrent project)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Readon TV Movie Radio Player 7.6.0.0 (HKLM-x32\...\{80074966-5231-428D-9AE7-B7D5D2DC3246}) (Version: 7.6.0 - Readon Technology)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
REAPER (HKLM-x32\...\REAPER) (Version:  - )
RegSeeker (HKLM-x32\...\RegSeeker) (Version: 3.01.3680 - HoverDesk)
Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Link 2.0.0.1603091618 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1603091618 - Samsung Electronics Co.,Ltd)
Samsung SideSync (HKLM-x32\...\Samsung SideSync) (Version: 4.6.5.13 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (HKLM-x32\...\{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Nombre de su organización) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Nombre de su organización)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18091.6 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18091.6 - Samsung Electronics Co., Ltd.)
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
Spotify (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Spotify) (Version: 1.0.90.268.ga8a0ceb4 - Spotify AB)
Spotydl 0.9.36.0 (HKLM-x32\...\Spotydl_is1) (Version: 0.9.36.0 - spotydl.com)
SSC Service Utility v4.30 (HKLM-x32\...\SSC Service Utility_is1) (Version:  - SSC Localization Group)
System Ninja version 3.1.5 (HKLM-x32\...\{6E67710E-206D-43AB-BF21-E7CD63056C55}_is1) (Version: 3.1.5 - SingularLabs)
TapinRadio Pro (HKLM\...\TapinRadio Pro_is1) (Version: 1.70.2 - Raimersoft)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.44109 - TeamViewer)
Temperature Monitor (HKLM-x32\...\{6642BF47-D82A-447B-90E7-658FA865AFD7}) (Version:  - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
TunnelBear (HKLM-x32\...\{6842EAA3-D175-41D1-9F4A-DF20BA70483A}) (Version: 2.3.29.0 - TunnelBear) Hidden
TunnelBear (HKLM-x32\...\{70b32981-56bc-4340-82c1-6b0dc0d5bc2a}) (Version: 2.3.29.0 - TunnelBear)
Ubuntu (HKLM-x32\...\Wubi) (Version: 9.10ubuntu1-rev160 - Ubuntu)
UltraISO Premium V8.66 (HKLM-x32\...\UltraISO_is1) (Version:  - )
UmmyVideoDownloader (HKLM-x32\...\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1) (Version: 1.4.0.1 - ) <==== ATTENTION
VdhCoApp 1.1.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A278E021-9C9F-11E2-A232-F04DA23A5C58}) (Version: 12.0.563 - Sony)
VIA Administrador de dispositivos de plataforma (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)
Video Enhancer 1.9.12 (HKLM-x32\...\Video Enhancer_is1) (Version:  - Infognition Co. Ltd.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN)
VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.2.0.7 - VSO Software)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wondershare Dr.Fone for Android(Build 6.2.0.42) (HKLM-x32\...\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 6.2.0.42 - Wondershare Software Co.,Ltd.)
Wuala (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Wuala) (Version: 1.0.444.0 - LaCie)
Wuala CBFS (HKLM-x32\...\Wuala CBFS) (Version: 3.2.107.0 - LaCie)
Wuala OverlayIcons (HKLM-x32\...\Wuala OverlayIcons) (Version: 1.0.0.2 - LaCie)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2385482525-178760063-3032261430-1000_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2385482525-178760063-3032261430-1000_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2385482525-178760063-3032261430-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\es-ES\acadficn.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ 0POLinkIconDone] -> {4931EE43-90CB-4D46-A50F-474D7C5D97BE} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ 1POLinkIconFailed] -> {828F1FF1-021C-4EC0-A4F8-B1BFF6390DD3} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ 2POLinkIconIng] -> {8AE3CBEA-8E21-4883-BFD0-925F5513F190} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ 3POLinkIconProhibited] -> {DED0F1AF-0505-4FB7-83AA-C2E51FA0721F} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ShellIconOverlayIdentifiers: [0POLinkIconDone] -> {4931EE43-90CB-4D46-A50F-474D7C5D97BE} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon1] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon2] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon3] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon4] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [1EldosIconOverlay] -> {595A7934-FFB9-4C7D-BDFE-5737B967D8EE} => C:\Windows\System32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers: [1POLinkIconFailed] -> {828F1FF1-021C-4EC0-A4F8-B1BFF6390DD3} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [2POLinkIconIng] -> {8AE3CBEA-8E21-4883-BFD0-925F5513F190} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [3POLinkIconProhibited] -> {DED0F1AF-0505-4FB7-83AA-C2E51FA0721F} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} =>  -> No File
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers: [HubicBackupRootOverlayHandler] -> {2DF0C6DB-1E85-4894-9D4F-63CB0EAB17EA} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicPublishedItemOverlayHandler] -> {7C76B697-27DF-4CFF-9909-863905561298} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicSyncItemOverlayHandler] -> {9B497753-D273-4A80-9DE8-72248D7FA595} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicUnsyncItemOverlayHandler] -> {D5454A6E-0904-4BA3-9E4A-240A5080259D} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [1EldosIconOverlay] -> {595A7934-FFB9-4C7D-BDFE-5737B967D8EE} => C:\Windows\System32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2016-02-07] (Autodesk)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ContextMenuHandlers1: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} =>  -> No File
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\ConvertToPDFShellExtension_x64.dll [2016-03-09] (Foxit Software Inc.)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers1: [PDFArchitect4_ManagerExt] -> {3AECFCB3-8472-48E9-BC7B-5A3CD945C886} => C:\Program Files\PDF Architect 4\creator-context-menu.dll [2016-08-05] (pdfforge GmbH)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-05] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-05] (Alexander Roshal)
ContextMenuHandlers1-x32: [{26fe3a74-9007-44b7-bdef-68cdd4dce946}] -> {26fe3a74-9007-44b7-bdef-68cdd4dce946} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers2: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} =>  -> No File
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2007-07-17] (EZB Systems, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2007-07-17] (EZB Systems, Inc.)
ContextMenuHandlers4: [{26fe3a74-9007-44b7-bdef-68cdd4dce946}] -> {26fe3a74-9007-44b7-bdef-68cdd4dce946} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2013-12-06] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ContextMenuHandlers5: [{26fe3a74-9007-44b7-bdef-68cdd4dce946}] -> {26fe3a74-9007-44b7-bdef-68cdd4dce946} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ContextMenuHandlers6: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} =>  -> No File
ContextMenuHandlers6: [FSShellExt] -> {56160A70-D083-4856-9998-F565ABC03F86} => C:\Program Files\Key Metric Software\FolderSizes 6\FSShellExt.dll [2013-08-22] (Key Metric Software, LLC.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2007-07-17] (EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-05] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-05] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {003181B1-06EB-4760-BA70-330CC770A537} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: {089097FA-B31B-40CC-A8C6-2CACCF3B4DBC} - System32\Tasks\{D0FB9DCF-84E3-4592-8340-7A41FFBCFDBF} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe [2001-07-26] (Hewlett-Packard)
Task: {233CB579-BE5F-45F7-8AF7-B54AB29B9F89} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-08] (Google Inc.)
Task: {300A326C-A1D0-4609-BFCE-1BF1B02BEA9F} - System32\Tasks\{979C15B0-E89E-4C30-9EEE-F078D8C3BB5D} => C:\Windows\system32\pcalua.exe -a D:\IsInstallPending.exe -d D:\
Task: {353F734E-2D9B-4BA0-950E-25DB67064B61} - System32\Tasks\MyDefrag v4.3.1 Daily => C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticDaily.MyD [2010-05-21] ()
Task: {39A7FFEF-2C81-435A-BDC3-595926629415} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {41B1B22C-FF61-48E3-870D-FC63A6731077} - System32\Tasks\{52543DC8-CC95-41CC-86F7-2BBCD3841977} => C:\Windows\system32\pcalua.exe -a "C:\Users\Usuario\Desktop\DISCO 3\New Volume\Archivos de programa\CCleaner\uninst.exe" -d C:\Users\Usuario\Desktop -c C:\Users\Usuario\Desktop\CCleaner.exe
Task: {624152D9-A2BE-4C07-B9E1-371A1F472A02} - System32\Tasks\MyDefrag v4.3.1 Monthly => C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticMonthly.MyD [2010-05-21] ()
Task: {79B9A5A2-5B27-4E03-A3E2-8B3031D6C538} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
Task: {7F49A1E1-FB99-43A6-AC1F-C948C9AA07F1} - System32\Tasks\Driver Booster SkipUAC (Usuario) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {8A874E15-7A81-43FC-9F96-83D497BD7E4D} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-31] (AVAST Software)
Task: {99718312-781A-45A3-8C72-0B9414DFAE46} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {A96D78EB-8D65-4A9F-B313-69C38D1CA6F5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
Task: {B1695C9E-8464-4D37-B325-09E1D86D36FB} - System32\Tasks\{C662EC5D-D325-4935-8E44-415AC6C337C3} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe [2001-07-26] (Hewlett-Packard)
Task: {C6009FC5-1AEA-4875-9403-BF89A8787E5A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2385482525-178760063-3032261430-1000
Task: {CF4065E0-99F0-4F4B-B683-0DE51AFC6E93} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-2385482525-178760063-3032261430-1000 => C:\Users\Usuario\AppData\Local\MEGAsync\MEGAupdater.exe [2018-01-29] (Mega Limited)
Task: {D4466B31-8D42-45DE-89A4-3AB2B9B19A47} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-12] (Adobe Systems Incorporated)
Task: {D62314E3-7C58-4A1E-91FA-AB6408BADB1C} - System32\Tasks\{6B688EB6-3D5B-480D-93FF-7F62D0694354} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe [2001-07-26] (Hewlett-Packard)
Task: {D8F113DB-5CE7-4E96-BD01-FE5099A31566} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-12-02] (AVAST Software)
Task: {E10CAD41-28A1-46D9-9DB9-BDAE61F57A6A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-08] (Google Inc.)
Task: {EA26A0F2-527D-4E91-821C-984C90CEB6C7} - System32\Tasks\{F0D0B5B5-F732-4862-BB85-81BD010D7D25} => C:\Windows\system32\pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe"
Task: {F178E87C-D799-4956-AC3A-6159B36A7F90} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-31] (AVAST Software)
Task: {F4561B33-1298-4F67-A23A-0F6B04A5814F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-12] (Adobe Systems Incorporated)
Task: {FE6864F6-6906-4B06-911D-7E7CB1418AC5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-11-02] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe