Desaparecieron Marcadores de Firefox

#2

Hola,

Realiza el siguiente paso:

  • Realiza click sobre “Mi PC” o “ Equipo
  • Al lado derecho, podremos observar el espacio para la búsqueda, a donde nos dirigiremos.
  • En dicho espacio, escribe bookmarks.html busqueda-de-bookmark

Una vez encontrado el archivo, muevelo al escritorio, tienes 2 opciones, realizar doble click sobre el archivo, con lo que se advertirá el reemplazo de los marcadores que Mozilla ha puesto por defecto. El otro método en cambio utiliza el proceso mencionado antes, pero a través de la opción de “Importar y Respaldar” desde un archivo, teniendo que elegir al que hemos encontrado en nuestra búsqueda.

Realiza los pasos, y me comentas.

#3

Muchas gracias Facundo por responder. Prubé ambos procedimiento y seguimos como estábamos, sin aparecer los marcadores. El archivo bookmarks.html sólo pesa 4Kb, lo que me parece muy poco para la cantidad de marcadores que tenía “coleccionados” Tengo la sensación que AdwCleaner o Ccleaner, se los “cargaron” a partir de la pasada que hice el 25/11. En la cuarentena de Adwcleaner hay 112 elementos, que no me permite o no se restaurarlos.

#4

No creo que AdwCleaner borre marcadores, a no ser que los detecte como infectados… Ccleaner puede que sea el responsable. Pegame el log/reporte de AdwCleaner del escaneo que has realizado

#5

Aquí va el informe copiado:

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-11-19.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    11-25-2018
# Duration: 00:00:23
# OS:       Windows 7 Ultimate
# Cleaned:  121
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF68D769-7A84-4988-A3D3-C96CCD3BEEE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBC549BF-2180-4DD3-A5F0-B46A113AC92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B1170B-E892-4232-83A0-947F26634B2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1C14638-D46D-4BD6-92A2-60C5B8ABA59}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1446B0E-26EF-40F5-AA18-2012A0857245}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0C8F3F1-47E3-4310-94D2-42EF56888EB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F03D9FE0-B856-4358-8C93-F99E722FA7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEAC03E8-69D5-44BE-A1FD-BF09D7F9A9E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7133A-F0D1-4004-A655-8DC1AADCEE89}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA2DC3E9-E90D-46F1-B689-27B7DFD783FB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8769F57-ED80-4D80-A9B-B7FA57AB476}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7A4ED17-44B1-462B-8410-A2CB4BE358}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E700B023-AA98-48AE-999D-C235F1C4861}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3321FFC-1F50-4BF5-A23F-C7A4C3211F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E18E0400-6AA-454C-ADF3-AE10D65EEEDF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E043A7D5-AAA6-456E-97C7-55CB4A189B8B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4A331B-E359-4807-8598-9AF3E29C7A23}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEE980A3-6890-4029-A48C-2E30DA1F085}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE737BA8-51C9-4C50-B4F-A7B68D29F2F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBDBD16E-FDC-40FA-BE5-9CC48498B723}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB3D4C9A-3161-4B26-B089-99B9316B5675}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D890B920-592B-42BC-A73E-E172E48213D6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8869FB9-33D9-4B45-AE5-72C0833E3CA6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D51301A3-4C05-4DD8-A3DE-C8497897A8E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D30979F6-FAF8-40AE-B559-1E603F85D96}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1D10E6D-D914-4A4D-845C-FE16122F3FA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D05C52EF-D62F-4389-84EA-997D8192A677}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD303DDA-103-4E21-AEED-A883175CFF54}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC434407-C64F-4FD7-9775-C0BE13688BE2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C92062E0-5226-4585-97C8-70D6CBF2652D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3EB171A-F0B8-4992-AEA6-EC12D6F4FF0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C38CC503-26A6-4377-B4E9-587FBEBB061}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CC2688-A0B-4DB4-A15-1358A88CE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6B327B4-B04-42B2-A5FD-817BB67318C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B56E10A0-D08-4887-A19B-E6BEB55C7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2A071B2-5591-4AD2-9E54-917FA719ACE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23B8692-F98-4A69-AD12-ADC9139C9E5D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1E461B7-5AAA-471E-92C1-519EA49A5A8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1806DB6-AE7C-44E3-93C8-1C325D69B682}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B053FB49-3E7A-4756-A545-C596608FF8C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE405B8E-C033-46E5-9CF2-CA505E2C9BB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC3C90-97EE-48E6-90AA-CE7CAFDC910}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABA4C3B3-8CD7-4CAF-944B-C3BD208DB9D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8B2B89-B820-4A3C-9EA2-72856870B048}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B1D3C5-897F-4D35-9084-39383C15F353}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A36CDA7D-59ED-4731-AF4D-2B98A78DF6CD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2F50ADB-9155-4D00-8990-EFB1E99A334}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A198BF84-D4C0-4158-92D8-D3423DD95B30}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F650D73-AAB7-4BC8-9746-B12F32E2EDC}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EEF9A32-433C-45D7-AE16-99D98678E64}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D1A5A6F-4270-47DC-AB25-9D63A42EF93D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99F33689-7304-437E-ACDE-C414BE6D352C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{988279AC-DCE1-45F1-A3FB-19852E7359C3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95A9DF42-55E4-473F-A5C1-3960F38ACB7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F75BF0-63DA-4B55-A1CB-6CDCFFEDAD13}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{925E0C7-508D-4D6A-AEA4-4E2BEEFA26A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F8268BA-1721-4C68-889C-4A0C79D424D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DC76372-F40F-4995-8EE8-AAB62229D1E6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892B0245-8489-4F21-9CAC-A3D4C36D8417}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87DA6AF1-8A79-493D-A075-7A99D20B286}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83E1A39D-BF27-45D9-8289-91C71C8F0F7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE6A7EC-3CB2-4C3A-A928-96EB318EA47}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAAFC49-58A5-400A-843A-97CF2DD1670}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77BF7B6F-BF5D-4FBF-B691-B98A16191E4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7700307B-C81-470F-BDE7-FFA6B3FCF4F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7420BD41-D4CA-4CE3-B874-61A12D593112}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72CF001-67F8-4C47-ABAC-4F2BF4AB7F48}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A59511-22EB-4CBD-86B7-15CE5AB425A3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{728497BC-D4E5-4041-A591-5DCDF75208F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{703E97DA-D743-422E-A9B5-6413F1AAF2FD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F02D22F-6882-4C6F-A87E-C1B022D1FCA}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E67A2C3-37FB-43EA-A8B9-595927684C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692B96-36AA-47AA-B2D0-CA1A4E9AE185}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68CD16DE-8F38-4669-8C57-D124F383A51}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B6AB4F-11A7-4314-8DB7-6E06576C46}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62940B6-DF3B-4D9A-AFB8-B2524F68D7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D58342D-6E23-4EDF-AB2B-2924179E41FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C5EAE1-44D1-46BD-A6E7-FB9AD24C20}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F1CF4-52EC-4105-BC56-172F6E12262}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BDA6E6-87DF-4794-B7D6-2CDAD0D9C496}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F38DE3F-5074-49C8-925F-A1198245D0D9}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E8F845B-71D6-4D6D-8B44-63D26199F399}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B179B49-5EBA-4668-B9B0-8523C6280FF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49DF5F2C-FC27-4B61-B1A1-6B54B2899DDD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46BBD65D-4CE0-4885-AA88-EFCCABA4F73}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{467C8EED-F8B0-4479-AD12-DB5687218E8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4338D31B-66A6-4A23-90AC-8570A5331351}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EEC2A2-C545-4CF3-8C46-CD90C2CF021}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DED4BB6-24A5-4BDA-B78B-18C2A82A5673}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DAB177F-E90-41FD-82D2-C1C9E06CA7DE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C90D860-5545-4ED2-957E-20D55F32B2F0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37297109-D27-4705-A884-3BE427B6F52}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{366AAADA-BCC3-4FB4-8D8A-D22CFDE22C92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34BCDF71-FE28-4B62-B4D2-F8BDB7AFC819}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B5510E9-283D-43D7-B7D3-93B8ECB52A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2914C09B-A8B8-4911-84EC-6E36AA2FF6FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28BBFF07-13B3-4258-A77-57C7133E20F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{263A3974-88FE-4C1F-AFA7-43BAF66690}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23350BA-4401-4902-AAFB-4F9A50C3DB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D882E9-9EBC-4EEA-8FCD-7AB7A4AC595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20B7B237-6E3D-4B70-8786-8B758459AD4D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2014DBBD-7855-4E45-9798-F86C59917ED}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2001591C-C87E-47E3-ABEB-0B13438474}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20005627-A4C9-4D2E-B54D-3C36CF9AA081}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F7ACCAF-2CA8-416F-A239-ADD7ADD3925C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EF77DD-E844-44A5-81A5-E6941AB9961}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D7824E0-BBF2-41B5-BB6D-57525044AEA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CCA045-9AEC-4ADB-AADF-2368CE86766B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2A3062-5D59-47B8-9326-F310308B979}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD130BA9-DD01-413E-AC45-FBB9E3DE875}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2C983E2-F298-4428-87D4-A710F77FFEB6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4997867-4D85-4B3A-B156-F17C142857E7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0EB7315-BB45-40EB-AA59-DC1C81EE74}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79ED57C3-D7F-4EF9-AC3F-63C669187C98}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632B142-CCCD-450D-856F-FC6893BD7DB4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6390369-7E07-4A78-8E8A-384B9468D899}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB1E12AB-FABD-41EE-8B1-A94115FB252C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A379CF13-65E2-46E7-84F2-8D9D3C28539}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F95373-994D-4F5F-9166-824076B21595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ffc4124e-5ee8-42ba-82e8-84a332696756}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1cbcde8c-f460-427b-a80f-8c72196c4ab9}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
#6 

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-11-19.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    11-25-2018
# Duration: 00:00:23
# OS:       Windows 7 Ultimate
# Cleaned:  121
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF68D769-7A84-4988-A3D3-C96CCD3BEEE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBC549BF-2180-4DD3-A5F0-B46A113AC92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B1170B-E892-4232-83A0-947F26634B2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1C14638-D46D-4BD6-92A2-60C5B8ABA59}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1446B0E-26EF-40F5-AA18-2012A0857245}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0C8F3F1-47E3-4310-94D2-42EF56888EB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F03D9FE0-B856-4358-8C93-F99E722FA7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEAC03E8-69D5-44BE-A1FD-BF09D7F9A9E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7133A-F0D1-4004-A655-8DC1AADCEE89}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA2DC3E9-E90D-46F1-B689-27B7DFD783FB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8769F57-ED80-4D80-A9B-B7FA57AB476}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7A4ED17-44B1-462B-8410-A2CB4BE358}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E700B023-AA98-48AE-999D-C235F1C4861}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3321FFC-1F50-4BF5-A23F-C7A4C3211F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E18E0400-6AA-454C-ADF3-AE10D65EEEDF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E043A7D5-AAA6-456E-97C7-55CB4A189B8B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4A331B-E359-4807-8598-9AF3E29C7A23}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEE980A3-6890-4029-A48C-2E30DA1F085}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE737BA8-51C9-4C50-B4F-A7B68D29F2F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBDBD16E-FDC-40FA-BE5-9CC48498B723}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB3D4C9A-3161-4B26-B089-99B9316B5675}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D890B920-592B-42BC-A73E-E172E48213D6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8869FB9-33D9-4B45-AE5-72C0833E3CA6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D51301A3-4C05-4DD8-A3DE-C8497897A8E}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D30979F6-FAF8-40AE-B559-1E603F85D96}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1D10E6D-D914-4A4D-845C-FE16122F3FA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D05C52EF-D62F-4389-84EA-997D8192A677}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD303DDA-103-4E21-AEED-A883175CFF54}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC434407-C64F-4FD7-9775-C0BE13688BE2}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C92062E0-5226-4585-97C8-70D6CBF2652D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3EB171A-F0B8-4992-AEA6-EC12D6F4FF0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C38CC503-26A6-4377-B4E9-587FBEBB061}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CC2688-A0B-4DB4-A15-1358A88CE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6B327B4-B04-42B2-A5FD-817BB67318C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B56E10A0-D08-4887-A19B-E6BEB55C7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2A071B2-5591-4AD2-9E54-917FA719ACE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23B8692-F98-4A69-AD12-ADC9139C9E5D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1E461B7-5AAA-471E-92C1-519EA49A5A8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1806DB6-AE7C-44E3-93C8-1C325D69B682}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B053FB49-3E7A-4756-A545-C596608FF8C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE405B8E-C033-46E5-9CF2-CA505E2C9BB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC3C90-97EE-48E6-90AA-CE7CAFDC910}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABA4C3B3-8CD7-4CAF-944B-C3BD208DB9D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8B2B89-B820-4A3C-9EA2-72856870B048}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B1D3C5-897F-4D35-9084-39383C15F353}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A36CDA7D-59ED-4731-AF4D-2B98A78DF6CD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2F50ADB-9155-4D00-8990-EFB1E99A334}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A198BF84-D4C0-4158-92D8-D3423DD95B30}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F650D73-AAB7-4BC8-9746-B12F32E2EDC}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EEF9A32-433C-45D7-AE16-99D98678E64}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D1A5A6F-4270-47DC-AB25-9D63A42EF93D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99F33689-7304-437E-ACDE-C414BE6D352C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{988279AC-DCE1-45F1-A3FB-19852E7359C3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95A9DF42-55E4-473F-A5C1-3960F38ACB7A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F75BF0-63DA-4B55-A1CB-6CDCFFEDAD13}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{925E0C7-508D-4D6A-AEA4-4E2BEEFA26A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F8268BA-1721-4C68-889C-4A0C79D424D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DC76372-F40F-4995-8EE8-AAB62229D1E6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892B0245-8489-4F21-9CAC-A3D4C36D8417}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87DA6AF1-8A79-493D-A075-7A99D20B286}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83E1A39D-BF27-45D9-8289-91C71C8F0F7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE6A7EC-3CB2-4C3A-A928-96EB318EA47}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAAFC49-58A5-400A-843A-97CF2DD1670}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77BF7B6F-BF5D-4FBF-B691-B98A16191E4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7700307B-C81-470F-BDE7-FFA6B3FCF4F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7420BD41-D4CA-4CE3-B874-61A12D593112}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72CF001-67F8-4C47-ABAC-4F2BF4AB7F48}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A59511-22EB-4CBD-86B7-15CE5AB425A3}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{728497BC-D4E5-4041-A591-5DCDF75208F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{703E97DA-D743-422E-A9B5-6413F1AAF2FD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F02D22F-6882-4C6F-A87E-C1B022D1FCA}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E67A2C3-37FB-43EA-A8B9-595927684C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692B96-36AA-47AA-B2D0-CA1A4E9AE185}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68CD16DE-8F38-4669-8C57-D124F383A51}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B6AB4F-11A7-4314-8DB7-6E06576C46}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62940B6-DF3B-4D9A-AFB8-B2524F68D7B4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D58342D-6E23-4EDF-AB2B-2924179E41FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C5EAE1-44D1-46BD-A6E7-FB9AD24C20}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F1CF4-52EC-4105-BC56-172F6E12262}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BDA6E6-87DF-4794-B7D6-2CDAD0D9C496}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F38DE3F-5074-49C8-925F-A1198245D0D9}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E8F845B-71D6-4D6D-8B44-63D26199F399}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B179B49-5EBA-4668-B9B0-8523C6280FF}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49DF5F2C-FC27-4B61-B1A1-6B54B2899DDD}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46BBD65D-4CE0-4885-AA88-EFCCABA4F73}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{467C8EED-F8B0-4479-AD12-DB5687218E8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4338D31B-66A6-4A23-90AC-8570A5331351}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EEC2A2-C545-4CF3-8C46-CD90C2CF021}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DED4BB6-24A5-4BDA-B78B-18C2A82A5673}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DAB177F-E90-41FD-82D2-C1C9E06CA7DE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C90D860-5545-4ED2-957E-20D55F32B2F0}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37297109-D27-4705-A884-3BE427B6F52}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{366AAADA-BCC3-4FB4-8D8A-D22CFDE22C92}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34BCDF71-FE28-4B62-B4D2-F8BDB7AFC819}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B5510E9-283D-43D7-B7D3-93B8ECB52A}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2914C09B-A8B8-4911-84EC-6E36AA2FF6FE}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28BBFF07-13B3-4258-A77-57C7133E20F}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{263A3974-88FE-4C1F-AFA7-43BAF66690}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23350BA-4401-4902-AAFB-4F9A50C3DB}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D882E9-9EBC-4EEA-8FCD-7AB7A4AC595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20B7B237-6E3D-4B70-8786-8B758459AD4D}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2014DBBD-7855-4E45-9798-F86C59917ED}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2001591C-C87E-47E3-ABEB-0B13438474}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20005627-A4C9-4D2E-B54D-3C36CF9AA081}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F7ACCAF-2CA8-416F-A239-ADD7ADD3925C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EF77DD-E844-44A5-81A5-E6941AB9961}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D7824E0-BBF2-41B5-BB6D-57525044AEA8}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CCA045-9AEC-4ADB-AADF-2368CE86766B}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2A3062-5D59-47B8-9326-F310308B979}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD130BA9-DD01-413E-AC45-FBB9E3DE875}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2C983E2-F298-4428-87D4-A710F77FFEB6}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4997867-4D85-4B3A-B156-F17C142857E7}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0EB7315-BB45-40EB-AA59-DC1C81EE74}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79ED57C3-D7F-4EF9-AC3F-63C669187C98}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632B142-CCCD-450D-856F-FC6893BD7DB4}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6390369-7E07-4A78-8E8A-384B9468D899}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB1E12AB-FABD-41EE-8B1-A94115FB252C}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A379CF13-65E2-46E7-84F2-8D9D3C28539}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F95373-994D-4F5F-9166-824076B21595}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ffc4124e-5ee8-42ba-82e8-84a332696756}
Deleted       HKU\S-1-5-21-2385482525-178760063-3032261430-1137\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1cbcde8c-f460-427b-a80f-8c72196c4ab9}

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
#7

Realiza los siguientes pasos, , sin cambiar el orden

1) Descarga, actualiza y ejecuta Malwarebytes’ Anti-Malware,

Manual Malwarebytes , para que sepas usarlo y configurarlo.

  • Realiza un Análisis Personalizado, haciendo click en la sección “Analizar” y seguidamente haciendo click “Analisis personalizado” en y luego click en “Configurar análisis”, marcando Todas las casillas de la derecha y de la Izquierda actualizando si te lo pide.
  • Pulsar en “Eliminar Seleccionados” para enviarlo a la cuarentena y Reinicias el sistema.
  • Para acceder posteriormente al informe del análisis : Informes >> Registro de análisis >> Pulsar en >> Exportar >> Copiar al Portapapeles, y lo pegas en tu respuesta

2) Descarga Adwcleaner en el escritorio.

  • Desactiva tu antivirus :arrow_forward: Como deshabilitar temporalmente un antivirus y cualquier programa de seguridad.
  • Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona “Ejecutar como Administrador.”)
  • Pulsar en el botón Analizar Ahora, y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Iniciar Reparacion.
  • Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
  • Si no encuentra nada, pulsamos “Omitir Reparación”
  • El log lo encontramos en la pestaña “Informes”, volviendo a abrir el programa, si es necesario o en"C:\AdwCleaner\Logs\AdwCleaner[C0].txt"

Puedes mirar su manual >> Manual de Adwcleaner

3) Descarga Ccleaner. Aqui tienes manual para que sepas configurar y usarlo.

Instalalo y ejecútalo. En la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine > clic en ejecutar limpiador. Clic en la pestaña Registro > clic en buscar problemas esperas que termine > clic en Reparar Seleccionadas y haces una copia de seguridad.

Pega los reportes de Malwarebytes, AdwCleaner y comentas como va el problema.

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo :

  • No realices pasos/acciones que NOSOTROS no te hayamos indicado
  • No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.
  • No instales NADA(programas/software/complementos/extensiones del navegador…)
  • No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…)
  • No realices por tu cuenta otros procedimientos.
  • Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

:warning: Muy Importante :warning: Envuelve cada uno de los informes con una etiqueta escrita CODE_Inicial al inicio del informe y otra como este CODE_Final al final del mismo.

Saludos

#8

Envío en dos etapaas los informes, no me permite enviar todo en uno por exceder la cantidad de caracteres.

MALWAREBYTES:


Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 7/12/18
Hora del análisis: 21:43
Archivo de registro: 36c9c41a-fa82-11e8-8dc8-00ff8838d129.json

-Información del software-
Versión: 3.6.1.2711
Versión de los componentes: 1.0.508
Versión del paquete de actualización: 1.0.8219
Licencia: Prueba

-Información del sistema-
SO: Windows 7 Service Pack 1
CPU: x64
Sistema de archivos: NTFS
Usuario: Usuario-PC\Usuario

-Resumen del análisis-
Tipo de análisis: Análisis personalizado
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 1903493
Amenazas detectadas: 362
Amenazas en cuarentena: 359
Tiempo transcurrido: 42 hr, 43 min, 52 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Activado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 4
PUP.Optional.PCVARK, HKLM\SOFTWARE\QWR2YW5jZWRwY2NhcmUubmV0, En cuarentena, [428], [547455],1.0.8219
Adware.Agent.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\AccuDictation, En cuarentena, [3857], [512558],1.0.8219
Adware.Agent.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{C9AE1F5D-771C-4A3C-A049-BC8C68F2ACA8}, En cuarentena, [3857], [512558],1.0.8219
Adware.Agent.Generic, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\PLAIN\{C9AE1F5D-771C-4A3C-A049-BC8C68F2ACA8}, En cuarentena, [3857], [512558],1.0.8219

Valor del registro: 1
Adware.Elex.SHHKRST, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\SHELLEXECUTEHOOKS|{3354FF98-A5C7-11E6-B4A5-64006A5CFC23}, En cuarentena, [760], [398049],1.0.8219

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 29
Adware.Elex.SHHKRST, C:\Users\Usuario\AppData\Roaming\Oguing, En cuarentena, [760], [433320],1.0.8219
PUP.Optional.ScreenShot, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot, En cuarentena, [3512], [392618],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\userCode, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\defaults\preferences, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\locale\en-US, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\defaults, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\locale, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content\images, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected], En cuarentena, [64], [176736],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences, En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults, En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected], En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\components, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected], En cuarentena, [70], [173602],1.0.8219

Archivo: 328
Adware.Agent.Generic, C:\WINDOWS\TASKS\AccuDictation.job, En cuarentena, [3857], [512558],1.0.8219
Adware.Agent.Generic, C:\WINDOWS\SYSTEM32\TASKS\AccuDictation, En cuarentena, [3857], [512558],1.0.8219
Adware.Elex.SHHKRST, C:\PROGRAM FILES (X86)\PRUCDOMZUKOPY\CRASHREPORT.DLL, En cuarentena, [760], [390380],1.0.8219
PUP.Optional.FusionCore, C:\USERS\USUARIO\APPDATA\ROAMING\FREE AVI MPEG WMV MP4 FLV VIDEO JOINER\FREEAVIMPEGWMVMP4FLVVIDEOJOINER.EXE, En cuarentena, [7784], [352241],1.0.8219
PUP.Optional.Trotux, C:\USERS\USUARIO\APPDATA\ROAMING\PROFILES\REEDESYWEGERDOM.DEFAULT\PREFS.JS, Sustituido, [2762], [324486],1.0.8219
PUP.Optional.Trotux, C:\USERS\USUARIO\APPDATA\ROAMING\PROFILES\REEDESYWEGERDOM.DEFAULT\PREFS.JS, Sustituido, [2762], [324486],1.0.8219
PUP.Optional.Trotux, C:\USERS\USUARIO\APPDATA\ROAMING\PROFILES\REEDESYWEGERDOM.DEFAULT\PREFS.JS, Sustituido, [2762], [324486],1.0.8219
Adware.OpenCandy, C:\USERS\USUARIO\APPDATA\ROAMING\UTORRENT\UPDATES\3.4.2_38758.EXE, En cuarentena, [7789], [501762],1.0.8219
PUP.Optional.FusionCore, C:\USERS\USUARIO\DOWNLOADS\FREEAVIMPEGWMVMP4FLVVIDEOJOINER.EXE, En cuarentena, [7784], [352241],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\FILEQUARANTINE\C\PROGRAM FILES (X86)\03000200-1465497311-0500-0006-000700080009\UNINSTALL.EXE.VIR, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\ADVANCEDSYSTEMPROTECTOR.EXE.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\ASPMANAGER.EXE.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\APPRESOURCE.DLL.VIR, En cuarentena, [1467], [326774],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\FILETYPEHELPER.EXE.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.AdvancedSystemProtector, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\SCANDLL.DLL.VIR, En cuarentena, [751], [326579],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\ASP\UNINS000.EXE.VIR, En cuarentena, [1467], [115211],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\03000200-1441405279-0500-0006-000700080009\UNINSTALL.EXE.VIR, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.AppInstaller, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\FLVM PLAYER\FLVPLAYERUNINSTALLER.EXE.VIR, En cuarentena, [12645], [49800],1.0.8219
PUP.Optional.CrossRider, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\IWEBAR\UTILS.EXE.VIR, En cuarentena, [411], [8462],1.0.8219
Adware.Elex, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\MIUITAB\UNINSTALL.EXE.VIR, En cuarentena, [684], [356383],1.0.8219
PUP.Optional.MyPCBackup, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\OLBPRE\UNINST.EXE.VIR, En cuarentena, [558], [281868],1.0.8219
Adware.Elex, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\XTAB\UNINSTALL.EXE.VIR, En cuarentena, [684], [356383],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\C\PROGRAM FILES (X86)\SFK\YRREHS.ZIP.VIR, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.Delta, C:\ADWCLEANER\QUARANTINE\C\PROGRAMDATA\DSEARCHLINK\DSEARCHLINK.EXE.VIR, En cuarentena, [285], [286544],1.0.8219
PUP.Optional.ASK.Generic, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\COMODO\DRAGON\USER DATA\DEFAULT\EXTENSIONS\AAAALIPAOKHKCCGMGKDGLFINFNFHFLKO\30.10_0\BACKGROUND\CHROMEUTILPLUGIN.DLL.VIR, En cuarentena, [1983], [345551],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\AAPT.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\CRASHRPT.DLL.VIR, En cuarentena, [3138], [361649],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\CRASHREPORT.EXE.VIR, En cuarentena, [3138], [110074],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DEVCON_X64.EXE.VIR, En cuarentena, [3138], [361649],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DRIVERINSTALL_X64.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DEVCON_X86.EXE.VIR, En cuarentena, [3138], [361649],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\DRIVERINSTALL_X86.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\LSUSB.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\MGUSB.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\MGADB.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE\OUTLOOKOPERATORC.EXE.VIR, En cuarentena, [3138], [117172],1.0.8219
Adware.MoboGenie, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\MOBOGENIE\VERSION\OLDVERSION\MOBOGENIE2.2.0.ZIP.VIR, En cuarentena, [3138], [117172],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\LOCAL\SYSTWEAK\ADVANCED SYSTEM PROTECTOR\ASPCONTEXTHELPER64.DLL.VIR, En cuarentena, [1467], [326774],1.0.8219
PUP.Optional.MindSpark, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VSM4VL1C.DEFAULT-1396527927891\EXTENSIONS\[email protected]_39.COM\PLUGINS\NATIVEMESSAGINGDISPATCHER.DLL.VIR, En cuarentena, [578], [76927],1.0.8219
PUP.Optional.MindSpark, C:\ADWCLEANER\QUARANTINE\C\USERS\USUARIO\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\VSM4VL1C.DEFAULT-1396527927891\EXTENSIONS\[email protected]\PLUGINS\NATIVEMESSAGINGDISPATCHER.DLL.VIR, En cuarentena, [578], [76927],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\WINDOWS\SYSTEM32\ROBOOT64.EXE.VIR, En cuarentena, [1467], [107517],1.0.8219
PUP.Optional.PCVARK, C:\ADWCLEANER\QUARANTINE\FILES\BYSXXBVIJJQTZGIIMZPUYUOJTUVSHXLL\APC.EXE, En cuarentena, [428], [606234],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.SysTweak, C:\ADWCLEANER\QUARANTINE\C\WINDOWS\SYSTEM32\SASNATIVE64.EXE.VIR, En cuarentena, [1467], [326774],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.EasyFileOpener, C:\ADWCLEANER\QUARANTINE\FILES\TEJZVJTFTRNTWNGHNXZYSHABJQMSLVQT\EFO.EXE, En cuarentena, [3914], [24565],1.0.8219
PUP.Optional.AdvancedPCCare, C:\ADWCLEANER\QUARANTINE\FILES\UGZNKSYZJBKJESCTTJTPYBUIHHUIARMQ\ADVANCED-PC-CARE\APCSRV.EXE, En cuarentena, [748], [342213],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFPFFZBFMNZJQABSECBLHBIRCTQAKQLZ\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.EasyFileOpener, C:\ADWCLEANER\QUARANTINE\FILES\ULUNOKIBFQVJWEZFHPMYXVLXWUPCZGOU\EFO.EXE, En cuarentena, [3914], [24565],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RDNKLQUYVDWAXLKHPOLSWELFDJATLDMX\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SMHPMSZFTLMFBYPYFYOIQCBMPUWKLZDF\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\XSUTAXLAVFAFERSFEQKPXQURZSIDRPIT\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YOZLGSZABIACIHGAMIOQSHLVRNJGYTSI\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLLS.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLLS64.DLL, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLSERVICE.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLVKNLG.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLVKNLG32.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\YPBKVTGSOSXFGSSGDMQVEBXLABWTBVMK\RLVKNLG64.EXE, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\ARQJTWIFUSOEAPSPWXCJCNGDZQJXYOKI.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\DWZKADZVSIITVOTPCNETDHZZHUEVMZEL.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\FXQVHPKZXIBADOVAEBRHEWXHTIFIUBPN.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\GJYTNPAEQIMZWMEVFWHZSEFQBYNFJRYK.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\HFDOHRYMVBGFHKTJLKNEDCDCJUNWJKMF.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\IPNSZSQVXVAGSVRUHLYRJTZBQQGNRPKW.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\KBALUIEBGRKXRJXUJKUARRGQSLURPOBF.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\SGRFYQJUELXGZBWJWUFPYZXEBBCVACYP.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\RHSFAAQGZRZTLLUFZCKJWFNQAVCYZVFU.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\VGELHURLJESLPAVXTTZHVEBGHOVAOVNB.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\WUVINBZXQEUPWSOCZCQUZLSZEMJPEXZF.BACK, En cuarentena, [1284], [296186],1.0.8219
PUP.Optional.RelevantKnowledge, C:\ADWCLEANER\QUARANTINE\FILES\WXCBXODOONDAQONNBXODQPXVRPUIQFLY.BACK, En cuarentena, [1284], [296186],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\FILES\NWPMASMYKOYTFDYYECIJGRJEQSZEHLSG\APPVERIFIERAPC.EXE, En cuarentena, [0], [392686],1.0.8219
Generic.Malware/Suspicious, C:\ADWCLEANER\QUARANTINE\FILES\YBYHVBMNIORDCOYGAHXKFRWHGCRISWMK\DOFILTERHOST.EXE, En cuarentena, [0], [392686],1.0.8219
PUP.Optional.ScreenShot, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot\ScreenShot.lnk, En cuarentena, [3512], [392618],1.0.8219
PUP.Optional.ScreenShot, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScreenShot\SSInst.lnk, En cuarentena, [3512], [392618],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\asyncDB.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\background.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\browserAction.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\contextMenu.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\dbManager.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\dom_bg.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\fileManager.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\firefox.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\firefoxNotifications.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2[email protected]\chrome\content\api\firefoxOmnibox.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\message.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\pageAction.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\request.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\tabs.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\webRequest.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api\windowsMessagingHandler.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\addressBarChangeObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\console.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\consts.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\delegate.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\extensionDataStore.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\folderIOWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\httpObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\IDBWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\installer.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\logFile.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\prefs.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\progressListenerObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\registry.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\reloadObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\reports.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\requestObject.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\searchSettings.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\uninstallObserver.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\updateManager.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\utils.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\core\xhr.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\api.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\background.html, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\baseObject.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\browser.xul, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\dialog.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\ffCoreFilesIndex.txt, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\options.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\options.xul, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\platformVersion.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome\content\search_dialog.xul, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\defaults\preferences\prefs.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1000020_analytics.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1000025_analyticsFront.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1000030_mz.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\13_CrossriderAppUtils.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\14_CrossriderUtils.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\16_FFAppAPIWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\177_crossriderDashboard.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\17_jQuery.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\180_bpo_serp_m.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\182_openUrl.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\183_tabsWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\1_base.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\207_dbWrapper.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\21_debug.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\226_set_campaign_id_m.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\22_resources.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\28_initializer.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\47_resources_background.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\4_jquery_1_7_1.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\64_appApiMessage.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\72_appApiValidation.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\78_CrossriderInfo.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\91_monetizationLoader.js.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins\98_omniCommands.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\userCode\background.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\userCode\extension.js, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\manifest.xml, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\extensionData\plugins.json, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\locale\en-US\translations.dtd, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button1.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button2.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button3.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button4.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\button5.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\crossrider_statusbar.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon128.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon16.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon24.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\icon48.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\panelarrow-up.png, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\popup.html, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\skin.css, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\skin\update.css, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\chrome.manifest, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.CrossRider, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]c2592d0df.com\install.rdf, En cuarentena, [411], [176333],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content\images\icon32.png, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome\content\dealplyshopping.xul, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences\defaults.js, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome.manifest, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.DealPly, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\install.rdf, En cuarentena, [64], [176736],1.0.8219
PUP.Optional.Babylon, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\defaults\preferences\dflt.js, En cuarentena, [331], [175551],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\components\FFDisp.dll, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ae.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\bg.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ch.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\cn.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\cz.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\de.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\eg.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\en.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\es.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\fr.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\gr.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\he.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\il.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\it.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ja.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\jp.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\nl.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\no.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\pl.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\pt.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ro.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ru.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\sa.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\se.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\sv.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\tr.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\ua.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\flgs\us.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\arwDwn.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\closeo.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\help_16.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\home.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\icon_seperator.png, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\logo.PNG, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\privecy_16_hot.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\sign.jpg, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\specialoffer.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\tellafriend.gif, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\imgs\uninstall.gif, En cuarentena, [70], [173602],1.0.8219
#9 
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\delta.css, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\delta.xul, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\dpk.htm, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\hlprs.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\loader.xul, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\mtstart.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\serp.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\content\tmplt.js, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\chrome.manifest, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.Delta.ShrtCln, C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Mozilla\Firefox\Profiles\i09pg7or.default\extensions\[email protected]\install.rdf, En cuarentena, [70], [173602],1.0.8219
PUP.Optional.SearchGol, C:\WINDOWS\SYSWOW64\CONFIG\SYSTEMPROFILE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\I09PG7OR.DEFAULT\PREFS.JS, Sustituido, [1842], [301629],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR1067\SHADESOFBLUE.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR1102\RUS_13.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR1564\SAM_0644.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR191\BACKGROUND.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-CSRSRV.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_7DCE8CF3F635F307\SAMSUNG 057.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-E..TVRATINGS.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_273A0EA3972B3B5D\100_5747.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-G..IN-GPEDIT.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_0504D2CA6BABB08B\969737_10201685571967946_1716039216_N.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..IONAL-CODEPAGE-1148_31BF3856AD364E35_6.1.7600.16385_NONE_249A66AD69EA80C9\100_58411.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..IONAL-CODEPAGE-1148_31BF3856AD364E35_6.1.7600.16385_NONE_249A66AD69EA80C9\100_5876.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..L-KEYBOARD-00000439_31BF3856AD364E35_6.1.7600.16385_NONE_EAA46F86C343C016\100_5521.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-I..L-KEYBOARD-00010418_31BF3856AD364E35_6.1.7600.16385_NONE_8D5159F1B61DA586\SAM_0409.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-NTLANMAN.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_3B97DD76A9B0DC17\SAM_0075.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE19.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE20.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE33.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-USERTILES_31BF3856AD364E35_6.1.7600.16385_NONE_97671F46F12FAD55\USERTILE34.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-W..CTION-ADM.RESOURCES_31BF3856AD364E35_6.1.7600.16385_EN-US_ED6D5B83BD823071\JUGAMOS CON LOS COLORES\20140521_110654.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_MICROSOFT-WINDOWS-WWANHC.RESOURCES_31BF3856AD364E35_6.1.7600.16385_PT-BR_BCE21647CD07B20B\4F18FABB\WC141.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR206\X86_SETUP-UXWIZARD-CLIENTIMAGES_31BF3856AD364E35_6.1.7600.16385_NONE_48ADA01D8FF36E68\BACKGROUND.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\DREAM_CHRONICLES3T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\DREAM_CHRONICLES1T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\FASHION_SOLITAIRE_SICON.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\GALAPAGO3T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\LUXOR_AMUN2T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\MAHJONG_WORLD2.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\MONSTER_MASH3.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\PUTTMANIA_ICON02.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2247\TURBO_PIZZA2T.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2250\CAT-SPRT.BMP, Error durante la eliminación, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2551\BG-ERROR-TOP-501.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR2554\LOGO-OFFICE.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3024\BG-ERROR-TOP-501.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE20.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE19.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE33.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR335\USERTILE34.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3405\SWE_05.JPG, En cuarentena, [10502], [79314],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3516\TITLETEXT.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3554\MEG_TONGUE.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3958\MEDSS.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3958\MENWP.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3958\MOVSS.BMP, En cuarentena, [10502], [79308],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3967\TRJPLZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3967\STRGSZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\CRDZ39W.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\FUNBWZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\GCLGIZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\INSBSZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR3986\NEWOCZ.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR4006\CRDUS08W.GIF, En cuarentena, [10502], [79309],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR579\1351176212650.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, H:\ANALIA ARCHIVOS RESCATADOS\DIR579\1357415057373.JPG, En cuarentena, [10502], [79311],1.0.8219
RiskWare.ExtensionMismatch, E:\MIS DOCUMENTOS\ANALIA ARCHIVOS RESCATADOS\DIR1347\ALBUMARTSMALL.JPG, En cuarentena, [10502], [79314],1.0.8219
CrackTool.AutoDesk.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\AUTOCAD\19J9IXB56F\19J9IXB56F\AUTODESK.AUTOCAD.V2017.SPANISH.WIN64\CRACK\XF-ADSK2017_X64.ZIP, En cuarentena, [11035], [117344],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\BITLORD\BITLORDSETUP.EXE, En cuarentena, [407], [387958],1.0.8219
CrackTool.AutoDesk.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\AUTOCAD\19J9IXB56F\19J9IXB56F\AUTODESK.AUTOCAD.V2017.SPANISH.WIN64\CRACK\XF-ADSK2017_X64.EXE, En cuarentena, [11035], [117344],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\COMPILADOR DE VIDEOS\FREEAVIMPEGWMVMP4FLVVIDEOJOINER.EXE, En cuarentena, [407], [304782],1.0.8219
CrackTool.Agent.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\CONVERT X TO DVD\2018_07_04 VERSION THE KILLERS\CONVERTXTODVD 5\FIX\MEGAHERTZ.EXE, En cuarentena, [7858], [367635],1.0.8219
CrackTool.Agent.Keygen, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\CONVERT X TO DVD\2018_07_04 VERSION THE KILLERS\CONVERTXTODVD 5 BY THEKILLERSTUTORIALES.RAR, En cuarentena, [7858], [367635],1.0.8219
PUP.Optional.OpenCandy, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\IMAGE BURN\SETUPIMGBURN_2.5.8.0.EXE, En cuarentena, [1091], [297667],1.0.8219
RiskWare.Tool.HCK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\INTERNET DOWNLOAD MANAGER\INTERNET.DOWNLOAD.MANAGER.V6.23.BUILD.10.RETAIL.FINAL.INCL.CRACK-REIS\62310.7Z, En cuarentena, [7722], [298931],1.0.8219
RiskWare.MalPack, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MICROSOFT OFFICE\OFFICE TAB\OFFICE TAB ENTERPRISE 10 50 X86X64 DC 13 08\CRACK\OFFICETABLOADER64.DLL, En cuarentena, [8765], [354563],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MIPONY\MIPONY-SETUP.ZIP, En cuarentena, [407], [81349],1.0.8219
PUP.Optional.Magicbit, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MOZILLA Y COMPLEMENTOS\SAVEFROMNETHELPER-WEB-0FC77F8A01-[360].EXE, En cuarentena, [12202], [105445],1.0.8219
RiskWare.MalPack, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\OFFICE 10\OFFICE.TAB.ENTERPRISE.10.50.X86X64.DC.13.08.2015.RAR, En cuarentena, [8765], [354563],1.0.8219
RiskWare.MalPack, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MICROSOFT OFFICE\OFFICE TAB\OFFICE TAB ENTERPRISE 10 50 X86X64 DC 13 08\OFFICE.TAB.ENTERPRISE.10.50.X86X64.DC.13.08.2015.RAR, En cuarentena, [8765], [354563],1.0.8219
RiskWare.Tool.HCK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\PHOTOSHOP\ADOBE.PHOTOSHOP.CC.2015.V16.0.WIN64.MULTILINGUAL.INCL.KEYGEN-XFORCE\CRACK\UNIVERSAL ADOBE PATCHER V2.0\ADOBE UNIVERSAL PATCHER 2014.EXE, Error durante la eliminación, [7722], [69152],1.0.8219
PUP.Optional.ASK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\TUBE CATCHER\ATUBE_CATCHER_7986.EXE, En cuarentena, [2], [398182],1.0.8219
RiskWare.Tool.HCK, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\PHOTOSHOP\ADOBE.PHOTOSHOP.CC.2015.V16.0.WIN64.MULTILINGUAL.INCL.KEYGEN-XFORCE\CRACK\UNIVERSAL ADOBE PATCHER 1.4\ADOBE.SNR.PATCH-PAINTER.EXE, Error durante la eliminación, [7722], [69152],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEOENHANCERSETUP\VIDEO.ENHANCER.1.9-PATCH.RAR, En cuarentena, [3911], [1570],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEOENHANCERSETUP\VIDEO.ENHANCER.1.9-PATCH\VIDEO.ENHANCER.1.9-PATCH.EXE, En cuarentena, [3911], [1570],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEO.ENHANCER.1.9-PATCH\VIDEO.ENHANCER.1.9-PATCH.EXE, En cuarentena, [3911], [1570],1.0.8219
HackTool.Agent, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VIDEO ENHANCER\VIDEOENHANCERSETUP.RAR, En cuarentena, [3911], [1570],1.0.8219
PUP.Optional.InstallCore, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\TUBE CATCHER\INSTALLER_ATUBECATCHER_SPANISH.EXE, En cuarentena, [407], [301105],1.0.8219
PUP.Optional.SofTonic, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\UNIVERSAL INSTALLER\SOFTONICDOWNLOADER_PARA_UNIVERSAL-USB-INSTALLER.EXE, En cuarentena, [1882], [8262],1.0.8219
HackTool.FilePatch, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\VUESCAN\VSCAN92180.RAR, En cuarentena, [7809], [281135],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\ECUALIZADOR DE SONIDOS\ECUALIZADOR\SRS AUDIO SANDBOX 1.10.2.0.RAR, En cuarentena, [0], [392686],1.0.8219
MachineLearning/Anomalous.100%, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\CYBERLINK\POWERDVD ULTRA V14 CRACK\POWERDVD ULTRA V14 CRACK\ACTIVATE.EXE, En cuarentena, [0], [392687],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\IMAGE BURN\SETUPIMGBURN_2.5.8.0.EXE, En cuarentena, [0], [392686],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\MIPONY\MIPONY-INSTALLER.EXE, En cuarentena, [0], [392686],1.0.8219
Generic.Malware/Suspicious, E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\WIN XP LIVE\ARCHIVOS DE PROGRAMA\ROADKIL\SCANPORT.EXE, En cuarentena, [0], [392686],1.0.8219
Adware.Agent.NSIS, E:\PEN DRIVE\DATA-RECOVERY-STUDIO-V2.1_INSTALLER.EXE, En cuarentena, [8845], [450534],1.0.8219

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)

AdwCleaner

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-09-21.1 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-09-2018
# Duration: 00:00:46
# OS:       Windows 7 Ultimate
# Scanned:  42056
# Detected: 127


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Adware.Heuristic            HKU\S-1-5-18\SOFTWARE\5257d8dfb235eb44
PUP.Adware.Heuristic            HKCU\SOFTWARE\C44859214A19ADA0BF679C905D9F7B55
PUP.Adware.Heuristic            HKU\.DEFAULT\SOFTWARE\5257d8dfb235eb44
PUP.Adware.Heuristic            HKLM\Software\Wow6432Node\C44859214A19ADA0BF679C905D9F7B55
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF68D769-7A84-4988-A3D3-C96CCD3BEEE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FBC549BF-2180-4DD3-A5F0-B46A113AC92}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F3B1170B-E892-4232-83A0-947F26634B2}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1C14638-D46D-4BD6-92A2-60C5B8ABA59}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F1446B0E-26EF-40F5-AA18-2012A0857245}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F0C8F3F1-47E3-4310-94D2-42EF56888EB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F03D9FE0-B856-4358-8C93-F99E722FA7A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEAC03E8-69D5-44BE-A1FD-BF09D7F9A9E}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EEA7133A-F0D1-4004-A655-8DC1AADCEE89}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EA2DC3E9-E90D-46F1-B689-27B7DFD783FB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E8769F57-ED80-4D80-A9B-B7FA57AB476}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E7A4ED17-44B1-462B-8410-A2CB4BE358}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E700B023-AA98-48AE-999D-C235F1C4861}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E3321FFC-1F50-4BF5-A23F-C7A4C3211F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E18E0400-6AA-454C-ADF3-AE10D65EEEDF}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E043A7D5-AAA6-456E-97C7-55CB4A189B8B}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DF4A331B-E359-4807-8598-9AF3E29C7A23}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DEE980A3-6890-4029-A48C-2E30DA1F085}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DE737BA8-51C9-4C50-B4F-A7B68D29F2F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DBDBD16E-FDC-40FA-BE5-9CC48498B723}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB3D4C9A-3161-4B26-B089-99B9316B5675}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D890B920-592B-42BC-A73E-E172E48213D6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D8869FB9-33D9-4B45-AE5-72C0833E3CA6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D51301A3-4C05-4DD8-A3DE-C8497897A8E}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D30979F6-FAF8-40AE-B559-1E603F85D96}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1D10E6D-D914-4A4D-845C-FE16122F3FA8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D05C52EF-D62F-4389-84EA-997D8192A677}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD303DDA-103-4E21-AEED-A883175CFF54}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CC434407-C64F-4FD7-9775-C0BE13688BE2}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C92062E0-5226-4585-97C8-70D6CBF2652D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C3EB171A-F0B8-4992-AEA6-EC12D6F4FF0}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C38CC503-26A6-4377-B4E9-587FBEBB061}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C0CC2688-A0B-4DB4-A15-1358A88CE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B6B327B4-B04-42B2-A5FD-817BB67318C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B56E10A0-D08-4887-A19B-E6BEB55C7B4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2A071B2-5591-4AD2-9E54-917FA719ACE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B23B8692-F98-4A69-AD12-ADC9139C9E5D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1E461B7-5AAA-471E-92C1-519EA49A5A8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B1806DB6-AE7C-44E3-93C8-1C325D69B682}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B053FB49-3E7A-4756-A545-C596608FF8C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{AE405B8E-C033-46E5-9CF2-CA505E2C9BB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABFC3C90-97EE-48E6-90AA-CE7CAFDC910}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ABA4C3B3-8CD7-4CAF-944B-C3BD208DB9D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8B2B89-B820-4A3C-9EA2-72856870B048}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B1D3C5-897F-4D35-9084-39383C15F353}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A36CDA7D-59ED-4731-AF4D-2B98A78DF6CD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2F50ADB-9155-4D00-8990-EFB1E99A334}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A198BF84-D4C0-4158-92D8-D3423DD95B30}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9F650D73-AAB7-4BC8-9746-B12F32E2EDC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EEF9A32-433C-45D7-AE16-99D98678E64}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D1A5A6F-4270-47DC-AB25-9D63A42EF93D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99F33689-7304-437E-ACDE-C414BE6D352C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{988279AC-DCE1-45F1-A3FB-19852E7359C3}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{95A9DF42-55E4-473F-A5C1-3960F38ACB7A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{93F75BF0-63DA-4B55-A1CB-6CDCFFEDAD13}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{925E0C7-508D-4D6A-AEA4-4E2BEEFA26A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8F8268BA-1721-4C68-889C-4A0C79D424D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DC76372-F40F-4995-8EE8-AAB62229D1E6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{892B0245-8489-4F21-9CAC-A3D4C36D8417}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87DA6AF1-8A79-493D-A075-7A99D20B286}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{83E1A39D-BF27-45D9-8289-91C71C8F0F7}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FE6A7EC-3CB2-4C3A-A928-96EB318EA47}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7EAAFC49-58A5-400A-843A-97CF2DD1670}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77BF7B6F-BF5D-4FBF-B691-B98A16191E4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7700307B-C81-470F-BDE7-FFA6B3FCF4F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7420BD41-D4CA-4CE3-B874-61A12D593112}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72CF001-67F8-4C47-ABAC-4F2BF4AB7F48}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{72A59511-22EB-4CBD-86B7-15CE5AB425A3}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{728497BC-D4E5-4041-A591-5DCDF75208F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{703E97DA-D743-422E-A9B5-6413F1AAF2FD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F02D22F-6882-4C6F-A87E-C1B022D1FCA}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E67A2C3-37FB-43EA-A8B9-595927684C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{692B96-36AA-47AA-B2D0-CA1A4E9AE185}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68CD16DE-8F38-4669-8C57-D124F383A51}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B6AB4F-11A7-4314-8DB7-6E06576C46}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{62940B6-DF3B-4D9A-AFB8-B2524F68D7B4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5D58342D-6E23-4EDF-AB2B-2924179E41FE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C5EAE1-44D1-46BD-A6E7-FB9AD24C20}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58F1CF4-52EC-4105-BC56-172F6E12262}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{56BDA6E6-87DF-4794-B7D6-2CDAD0D9C496}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4F38DE3F-5074-49C8-925F-A1198245D0D9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4E8F845B-71D6-4D6D-8B44-63D26199F399}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B179B49-5EBA-4668-B9B0-8523C6280FF}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{49DF5F2C-FC27-4B61-B1A1-6B54B2899DDD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{46BBD65D-4CE0-4885-AA88-EFCCABA4F73}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{467C8EED-F8B0-4479-AD12-DB5687218E8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4338D31B-66A6-4A23-90AC-8570A5331351}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3EEC2A2-C545-4CF3-8C46-CD90C2CF021}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DED4BB6-24A5-4BDA-B78B-18C2A82A5673}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3DAB177F-E90-41FD-82D2-C1C9E06CA7DE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C90D860-5545-4ED2-957E-20D55F32B2F0}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{37297109-D27-4705-A884-3BE427B6F52}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{366AAADA-BCC3-4FB4-8D8A-D22CFDE22C92}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{34BCDF71-FE28-4B62-B4D2-F8BDB7AFC819}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2B5510E9-283D-43D7-B7D3-93B8ECB52A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2914C09B-A8B8-4911-84EC-6E36AA2FF6FE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28BBFF07-13B3-4258-A77-57C7133E20F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{263A3974-88FE-4C1F-AFA7-43BAF66690}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{23350BA-4401-4902-AAFB-4F9A50C3DB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20D882E9-9EBC-4EEA-8FCD-7AB7A4AC595}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20B7B237-6E3D-4B70-8786-8B758459AD4D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2014DBBD-7855-4E45-9798-F86C59917ED}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2001591C-C87E-47E3-ABEB-0B13438474}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{20005627-A4C9-4D2E-B54D-3C36CF9AA081}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1F7ACCAF-2CA8-416F-A239-ADD7ADD3925C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1EF77DD-E844-44A5-81A5-E6941AB9961}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1D7824E0-BBF2-41B5-BB6D-57525044AEA8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1CCA045-9AEC-4ADB-AADF-2368CE86766B}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C2A3062-5D59-47B8-9326-F310308B979}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CD130BA9-DD01-413E-AC45-FBB9E3DE875}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2C983E2-F298-4428-87D4-A710F77FFEB6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A4997867-4D85-4B3A-B156-F17C142857E7}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A0EB7315-BB45-40EB-AA59-DC1C81EE74}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79ED57C3-D7F-4EF9-AC3F-63C669187C98}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{632B142-CCCD-450D-856F-FC6893BD7DB4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6390369-7E07-4A78-8E8A-384B9468D899}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DB1E12AB-FABD-41EE-8B1-A94115FB252C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A379CF13-65E2-46E7-84F2-8D9D3C28539}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3F95373-994D-4F5F-9166-824076B21595}
PUP.Optional.Legacy             HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\BCSSync
PUP.Optional.Legacy             HKLM\Software\Microsoft\Shared Tools\MSConfig\startupreg\Ad-Aware Browsing Protection
PUP.Optional.Legacy             HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C0C3A6C6-03BC-4195-8FCB-AEA091301353}
PUP.Optional.Legacy             HKCU\Software\Microsoft\Internet Explorer\Main|Start Page

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]
AdwCleaner[C01].txt - [21750 octets] - [25/11/2018 12:27:32]
AdwCleaner[S02].txt - [1561 octets] - [02/12/2018 00:48:29]
AdwCleaner[C02].txt - [1727 octets] - [02/12/2018 00:52:00]
AdwCleaner[S03].txt - [1623 octets] - [04/12/2018 11:56:23]
AdwCleaner[C03].txt - [1809 octets] - [04/12/2018 11:56:57]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S04].txt ##########

Continúa sin aparecer el historial, ni los marcadores. Al intentar restaurar los marcadores, abre la ventana que indica que “no se puede resaturar el archivo de resguardo”

#10

Realizaste la eliminación de lo encontrado por AdwCleaner? si no es el caso, repite el análisis y esta vez eliminalo, y pegame su log.

#11 
# -------------------------------
# Malwarebytes AdwCleaner 7.2.5.0
# -------------------------------
# Build:    11-26-2018
# Database: 2018-11-14.2 (Local)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    12-10-2018
# Duration: 00:00:50
# OS:       Windows 7 Ultimate
# Scanned:  32162
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [18629 octets] - [03/11/2018 09:30:36]
AdwCleaner[C00].txt - [16526 octets] - [03/11/2018 13:46:44]
AdwCleaner[S01].txt - [23743 octets] - [25/11/2018 12:24:57]
AdwCleaner[C01].txt - [21750 octets] - [25/11/2018 12:27:32]
AdwCleaner[S02].txt - [1561 octets] - [02/12/2018 00:48:29]
AdwCleaner[C02].txt - [1727 octets] - [02/12/2018 00:52:00]
AdwCleaner[S03].txt - [1623 octets] - [04/12/2018 11:56:23]
AdwCleaner[C03].txt - [1809 octets] - [04/12/2018 11:56:57]
AdwCleaner[S04].txt - [19135 octets] - [09/12/2018 17:21:33]
AdwCleaner[C04].txt - [17034 octets] - [09/12/2018 17:30:26]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S05].txt ##########
#12

A ver, lee esta pagina donde explica unos pasos Firefox de como recuperarlos, pones a pruebas los pasos indicados y vuelves aqui y me comentas si funciono o no.

Saludos.

#13

Hola chicos:

@omargarcia:

Se ven en tus navegadores severas infecciones por PUPs, en Mozila Firefox los marcadores están asociados a los Perfiles y segun se muestra en el reporte de Malwarebyets hubo muchas eliminaciones desde alli:

Profiles default=tu perfil predeterminado

Profiles\i09pg7or.default\

Prueba lo siguiente:

1.- Primero activa Ver los Archivos Ocultos.

2.- Luego Ve al Botón de Inicio >>> en la línea de búsqueda pega tal cual lo siguiente:

%APPDATA%\Mozilla\Firefox\Profiles\

No presiones enter, solo toma una imagen de lo que aparezca y pegala en tu próxima respuesta.

Deberías ver algo como lo siguiente:

perfiles

Puede haber mas de una carpeta, entra a cada una y vuelves a tomar una imagen.

Las pegas en tu próxima respuesta.

Como insertar una imagen?

Salu2.

#14

El sistema no me permite pegar imágenes.

En la búsqueda aparecen cinco carpetas.

#15

Hola @omargarcia

Lee dos o tres temas por el Foro distintos a este y ya te lo permitirá o al menos dos o sino subelo a un sitio de imágenes y pasame los enlaces por MP y yo lo edito y las coloco.

Salu2.

#16
  1. Imágen de la búsqueda:

Captura%2012-12-18%20%20%2013-40
Captura 12-12-18 13-40.jpg520×610 23.4 KB

Captura carpeta Nº 1

carpeta%201443143977027
carpeta 1443143977027.jpg700×290 20.8 KB

Captura carpeta Nº 2

carpeta%201479326772039
carpeta 1479326772039.jpg798×258 22.7 KB

Captura carpeta Nº 3

default
carpetagx4xnj4k.default.jpg706×336 31.9 KB

Captura carpeta Nº 4

dafault-148511552264-1543675597432
carpetau48yhiwf.dafault-148511552264-1543675597432.jpg781×690 86.6 KB

Captura carpeta Nº 4B

dafault-148511552264-1543675597432%20%202
carpetau48yhiwf.dafault-148511552264-1543675597432 2.jpg738×697 89.1 KB

Captura carpeta Nº 4C

3
05-C u48yhiwf.dafault-148511552264-1543675597432 .3.jpg730×337 45.7 KB

Captura carpeta Nº 5

default-1467293777012
06 utedf7t1.default-1467293777012.jpg718×272 22.3 KB

#17

Hola @omargarcia:

Aparentemente en tu Carpeta Nª 4, parece estar tu perfil de Firefox. Allí se ven los bookmarkbackups o sea tus marcadores :thinking: ademas de otros datos de tu perfil.

Toma nota del nombre exacto de esa carpeta, ya que al ser números y letras aleatorios presta a confusión…

Antes de continuar por alguna razón tu has abierto nuevos perfiles en Firefox? Eres el único Usuario que usa ese equipo?

Espero tu respuesta para tratar de darte el paso a paso para recuperar tu perfil.

Mientras tanto también realiza lo siguiente:

1.- Desactiva temporalmente tu antivirus y cualquier programa de seguridad.

2.- Descarga Farbar Recovery Scan Tool. en el escritorio, seleccionando la versión adecuada para la arquitectura (32 o 64bits) de su equipo. >> Como saber si mi Windows es de 32 o 64 bits.?

  • Ejecuta FRST.exe.
  • En el mensaje de la ventana del Disclaimer, pulsamos Yes
  • En la ventana principal pulsamos en el botón Scan y esperamos a que concluya el proceso.
  • Se abrirán dos(2) archivos(Logs), Frst.txt y Addition.txt, estos quedaran grabados en el escritorio.

Guía: Como Ejecutar FRST

3.- En tu próxima respuesta, pega los reportes generados.

Guía : ¿Como Pegar reportes en el Foro?

Esperamos esos reporte.

Salu2

#18

“Antes de continuar por alguna razón tu has abierto nuevos perfiles en Firefox? Eres el único Usuario que usa ese equipo?” Nunca he abierto mas que un perfil de Firefox. Somos varioslos que usamos el equipo, pero unicamente yo uso Firefox, los demás usan Chrome

#19

Hola @omagarcia

Por aquí esperamos los reportes entonces.

Salu2.

#20

Addition.txt Parte 1 de 2. No me permite mandar todo el texto

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 09.12.2018
Ran by Usuario (13-12-2018 01:42:32)
Running from E:\MIS DOCUMENTOS\DOWNLOAD\SOFTWARE\FARBAR
Windows 7 Ultimate Service Pack 1 (X64) (2013-09-10 02:35:51)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrador (S-1-5-21-2385482525-178760063-3032261430-500 - Administrator - Disabled)
AVIGNON (S-1-5-21-2385482525-178760063-3032261430-1137 - Limited - Enabled) => C:\Users\AVIGNON
Invitado (S-1-5-21-2385482525-178760063-3032261430-501 - Limited - Disabled)
Usuario (S-1-5-21-2385482525-178760063-3032261430-1000 - Administrator - Enabled) => C:\Users\Usuario

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\uTorrent) (Version: 3.5.4.44846 - BitTorrent Inc.)
7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
A360 Desktop (HKLM\...\{7758802D-9486-4883-9927-CCAC366A3BA4}) (Version: 7.2.3.1800 - Autodesk)
ACA & MEP 2017 Object Enabler (HKLM\...\{28B89EEF-0004-0000-5102-CF3F3A09B77D}) (Version: 7.9.45.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{28B89EEF-0001-0000-3102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
Adobe ActiveShare 1.5 (HKLM-x32\...\{B3C7CA81-27EB-11D4-A59C-00E02C071F5C}) (Version:  - )
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.10) - Español (HKLM-x32\...\{AC76BA86-7AD7-1034-7B44-AB0000000001}) (Version: 11.0.10 - Adobe Systems Incorporated)
Advanced Archive Password Recovery (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.)
Advanced RAR Repair v1.2 (HKLM-x32\...\Advanced RAR Repair v1.2) (Version:  - )
AIDA64 Extreme Edition v3.20 (HKLM-x32\...\AIDA64 Extreme Edition_is1) (Version: 3.20 - FinalWire Ltd.)
AirDroid 3.3.1.0 (HKLM-x32\...\AirDroid) (Version: 3.3.1.0 - Sand Studio)
AllShare Framework DMS (HKLM\...\{83232C27-8C3F-44A5-9EB2-BB7161228ADD}) (Version: 1.3.23 - Samsung)
Amazon Kindle (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Amazon Kindle) (Version: 1.17.1.44183 - Amazon)
AMD Catalyst Install Manager (HKLM\...\{FD8FD2BD-A82D-C528-EDA0-A6635F47C19C}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
Anti-reCAPTCHA v4.01 JD (HKLM-x32\...\{74252365-7BB1-437A-8D61-5B0BD1D9AFAA}) (Version: 4.01 - SONY-TEAM)
Any Video Converter 5.5.5 (HKLM-x32\...\Any Video Converter_is1) (Version:  - Any-Video-Converter.com)
Any Video Converter 5.9.6 (HKLM-x32\...\Any Video Converter) (Version: 5.9.6 - Anvsoft)
Aplicación de escritorio de Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 7.0.6.378 - Autodesk)
Aplicación para detectar Winamp (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Aplicaciones destacadas de Autodesk 2016-2017 (HKLM-x32\...\{27C15055-713B-4D0E-881F-19598A2DFD59}) (Version: 2.2.0 - Autodesk)
Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 1.0.0.36 - Atheros Communications Inc.)
aTube Catcher (HKLM-x32\...\aTube Catcher) (Version: 3.8.7955 - DsNET Corp)
aTube Catcher versión 3.8 (HKLM-x32\...\{D43B360E-722D-421B-BC77-20B9E0F8B6CD}_is1) (Version: 3.8 - DsNET Corp)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
AutoCAD 2017 - Español (Spanish) (HKLM\...\{28B89EEF-0001-040A-2102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017  Language Pack - Español (Spanish) (HKLM\...\{28B89EEF-0001-040A-1102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD 2017 (HKLM\...\{28B89EEF-0001-0000-0102-CF3F3A09B77D}) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk App Manager 2016-2017 (HKLM-x32\...\{C0954809-F5DC-426C-847E-8409DE14E4C0}) (Version: 2.2.0 - Autodesk)
Autodesk AutoCAD 2017 - Español (Spanish) (HKLM\...\AutoCAD 2017 - Español (Spanish)) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.5 (HKLM-x32\...\{8600F844-9AA5-412E-B6F2-F9C6CBCFD268}) (Version: 1.2.5.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2017 Add-in 64 bit (HKLM\...\{276A67E0-71EB-4827-B5F7-2ACF02BC1A5B}) (Version: 4.37.6853 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
Autodesk ReCap 360 (HKLM\...\{5F0F7049-0000-1033-0102-73A6DA3D7FA6}) (Version: 3.0.0.52 - Autodesk) Hidden
Autodesk ReCap 360 (HKLM\...\Autodesk ReCap 360) (Version: 3.0.0.52 - Autodesk)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 70.0.917.102 - AVAST Software)
Bonjour (HKLM-x32\...\{07287123-B8AC-41CE-8346-3D777245C35B}) (Version: 1.0.106 - Apple Inc.)
calibre 64bit (HKLM\...\{A9CFF5B2-9CF6-4903-ACD1-CE9CFDFD6206}) (Version: 3.34.0 - Kovid Goyal)
Capture-A-ScreenShot (HKLM-x32\...\Capture-A-ScreenShot_is1) (Version:  - PopDrops.com)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.3.4746 - CDBurnerXP)
Clip2Net 0.8.2b (HKLM-x32\...\Clip2Net_is1) (Version:  - AU78)
ConvertXtoDVD 3.8.0.193j (HKLM-x32\...\{76C24F39-B161-498F-BD8B-C64789812D13}_is1) (Version: 3.8.0.193j - )
Corel Shell Extension - 64Bit (HKLM\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF011}) (Version: 14.0 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Capture (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF012}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Content (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF016}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Draw (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF013}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Filters (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF017}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - FontNav (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF019}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics SUite X4 - ICA (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF010}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - IPM (HKLM-x32\...\{9D0798D0-AF6C-4E62-94B1-AEBF1A43E00A}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - Lang ES (HKLM-x32\...\{D2827848-7D2A-4547-9AD1-C965FB3E6344}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - PP (HKLM-x32\...\{7F05E704-30A6-421A-97A7-8EEB1C7FF014}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 - VBA (HKLM-x32\...\{BF439B41-0252-48DE-8B8B-0430CB26A181}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW Graphics Suite X4 (HKLM-x32\...\{44A27085-0616-4181-A0C3-81C7ECA17F73}) (Version: 14.2 - Corel Corporation) Hidden
CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension (HKLM-x32\...\_{CE2DA11A-917F-4CF5-AB55-755EC115DD10}) (Version:  - Corel Corporation)
CorelDRAW(R) Graphics Suite X4 - Windows Shell Extension (HKLM-x32\...\{CE2DA11A-917F-4CF5-AB55-755EC115DD10}) (Version: 1.1 - Corel Corporation) Hidden
CorelDRAW(R) Graphics Suite X4 (HKLM-x32\...\_{7F05E704-30A6-421A-97A7-8EEB1C7FF010}) (Version:  - Corel Corporation)
coverXP (remove only) (HKLM-x32\...\coverXP) (Version:  - )
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Datel 2001 V1.12 R2 (HKLM-x32\...\ST6UNST #1) (Version:  - )
[email protected] Espasa (HKLM-x32\...\[email protected] Espasa) (Version:  - )
Dropbox (HKLM-x32\...\Dropbox) (Version: 64.3.120 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.143.1 - Dropbox, Inc.) Hidden
E.M. PowerPoint Video Converter 3.20 (HKLM-x32\...\E.M. PowerPoint Video Converter_is1) (Version:  - EffectMatrix, Inc.)
Epson Easy Photo Print 2 (HKLM-x32\...\{445E91BC-EC9D-423F-A6CA-80B80C894EF7}) (Version: 2.3.0.0 - SEIKO EPSON CORPORATION)
Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) (HKLM-x32\...\{B2D55EB8-32C5-4B43-9006-9E97DECBA178}) (Version: 1.00.0000 - SEIKO EPSON CORPORATION2)
EPSON L800 Series Printer Uninstall (HKLM\...\EPSON L800 Series) (Version:  - SEIKO EPSON Corporation)
Epson Print CD (HKLM-x32\...\{D16A31F9-276D-4968-A753-FFEAC56995D0}) (Version: 2.05.00 - SEIKO EPSON CORPORATION)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
FARO LS 1.1.505.0 (64bit) (HKLM-x32\...\{8834451B-6209-4E02-9EF4-4EF9E3C1F70F}) (Version: 5.5.0.44203 - FARO Scanner Production)
Firemin 6.1.0.4963 (HKLM\...\Firemin_is1) (Version: 6.1.0.4963 - Rizonesoft)
FolderSizes 6 (HKLM\...\{C2321D5C-FD93-462C-9908-5CED4E9B07B8}) (Version: 6.1.76 - Key Metric Software) Hidden
FolderSizes 6 (HKLM-x32\...\FolderSizes 6 6.1.76) (Version: 6.1.76 - Key Metric Software)
FormatFactory 3.9.5.2 (HKLM-x32\...\FormatFactory) (Version: 3.9.5.2 - Free Time)
Foxit Advanced PDF Editor 3 (HKLM-x32\...\B521582C-6BE3-491D-BCC8-FFB8301298E9_is1) (Version: 3.0.5.0 - Foxit Corporation)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.4.311 - Foxit Software Inc.)
Free AVI MPEG WMV MP4 FLV Video Joiner 8.8.0 (HKLM-x32\...\Free AVI MPEG WMV MP4 FLV Video Joiner_is1) (Version:  - FreeAudioVideoSoftTech, Inc.)
Free Video Flip and Rotate version 2.1.9.822 (HKLM-x32\...\Free Video Flip and Rotate_is1) (Version: 2.1.9.822 - DVDVideoSoft Ltd.)
Galería de fotos (HKLM-x32\...\{198CEF22-A27F-4DC7-9B66-2C22A4B1CA09}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.110 - Google Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
Grabadora de Audio Gratis V2.3.2 (HKLM-x32\...\{E35F91E4-C68C-43E8-BE90-35CDEE4E5730}_is1) (Version: 2.3.2 - APOWERSOFT LIMITED)
HP PrecisionScan LTX (HKLM-x32\...\HP PrecisionScan LTX) (Version:  - )
hubiC - x64 (HKLM\...\{0A945801-D93C-46BF-9417-697DCE52E5B4}) (Version: 2.0.2.124 - OVH) Hidden
hubiC (HKLM-x32\...\{6c91e652-071b-4014-9477-f57cacecb32b}) (Version: 2.0.2.124 - OVH)
HydraVision (HKLM-x32\...\{10EDA005-3CCE-56EA-B9FE-FCE959672BB5}) (Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden
ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)
Importación de SketchUp 2016-2017 (HKLM-x32\...\{063925DB-9D8C-48E2-8F04-1B7038B6C783}) (Version: 2.2.0 - Autodesk)
InkReset version 2.25 (HKLM-x32\...\{1C557D95-74B6-4AC2-9811-46F0441D6646}_is1) (Version: 2.25 - )
Java 7 Update 76 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417076FF}) (Version: 7.0.760 - Oracle)
Java 7 Update 76 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F03217076FF}) (Version: 7.0.760 - Oracle)
JDownloader 0.9 (HKLM-x32\...\5513-1208-7298-9440) (Version: 0.9 - AppWork GmbH)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.1.5.8 - PandoraTV)
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )
Malwarebytes versión 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Manager (HKLM-x32\...\{38251B9A-C44B-42D9-9A6A-0697986E334A}) (Version: 4.1.4.27792 - 2015 pdfforge GmbH. All rights reserved) Hidden
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Framework 4.7.2 (español) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 3082) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{9C82436F-F19C-42A4-B476-F87A28A95BF9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 64.0 (x64 es-AR) (HKLM\...\Mozilla Firefox 64.0 (x64 es-AR)) (Version: 64.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 64.0.0.6914 - Mozilla)
Mozilla Thunderbird 52.9.1 (x86 es-ES) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 es-ES)) (Version: 52.9.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.1.0 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version:  - SEIKO EPSON Corporation)
Nero 7.5.9.0 (HKLM-x32\...\Nero 7_is1) (Version:  - Nero AG)
OLYMPUS ib (HKLM-x32\...\{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.1.1404 - OLYMPUS IMAGING CORP.) Hidden
OLYMPUS ib (HKLM-x32\...\InstallShield_{89A43E80-AC6C-4DA8-9800-F4B30ED577C0}) (Version: 1.1.1404 - OLYMPUS IMAGING CORP.)
Oracle VM VirtualBox 4.3.16 (HKLM\...\{D7FAEA32-7CE3-4D9F-9139-F7B87BCC50AF}) (Version: 4.3.16 - Oracle Corporation)
Páginas Amarillas (HKLM-x32\...\Guía de Teléfonos de Páginas Amarillas_is1) (Version:  - YELL ARGENTINA S.A.)
Paquete de controladores de Windows - OLYMPUS IMAGING CORP. Camera Communication Driver Package (09/09/2009 1.0.0.0) (HKLM\...\2C1C2F29FADF39F533CEEE67B90F07A5306A4BDB) (Version: 09/09/2009 1.0.0.0 - OLYMPUS IMAGING CORP.)
Paquete de idioma de Microsoft Visual Studio 2010 Tools para Office Runtime (x64) - ESN (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - ESN) (Version: 10.0.50903 - Microsoft Corporation)
PDF Architect 2 (HKLM-x32\...\PDF Architect 2) (Version: 2.0.24.16092 - pdfforge GmbH)
PDF Architect 2 Create Module (HKLM-x32\...\{3D0D9604-0173-488D-9694-2638C44D7579}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 Edit Module (HKLM-x32\...\{8B0A956F-9BE6-495B-AF80-7B5B42061D79}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 2 View Module (HKLM-x32\...\{D691E998-CF53-4F6C-AC20-E4284660E0E7}) (Version: 2.1.6.19758 - pdfforge GmbH)
PDF Architect 4 (HKLM-x32\...\PDF Architect 4) (Version: 4.0.34.26215 - pdfforge GmbH)
PDF Architect 4 Create Module (HKLM\...\{72B9DF2C-76FA-40B5-A469-16EAB159CE72}) (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDF Architect 4 Edit Module (HKLM\...\{BDF7326B-7ED4-4034-B867-F4E88D4E628B}) (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDF Architect 4 View Module (HKLM\...\{03E04B47-9270-4613-8D7E-DA4AD2B259A0}) (Version: 4.1.5.29097 - pdfforge GmbH) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.4.0 - pdfforge GmbH)
PicosmosTools 1.7.6.0 (HKLM-x32\...\PicosmosTools) (Version: 1.7.6.0 - Free Time)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.) Hidden
Polaris Office Sync (HKLM-x32\...\{1A971E8B-7C02-4155-97F2-23704B513276}) (Version: 2.006.002 - Polaris Office, Inc.) Hidden
Polaris Office Sync (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\InstallShield_{1A971E8B-7C02-4155-97F2-23704B513276}) (Version: 2.006.002 - Polaris Office, Inc.)
qBittorrent 3.3.0 (HKLM-x32\...\qBittorrent) (Version: 3.3.0 - The qBittorrent project)
QuickTime 7 (HKLM-x32\...\{3D2CBC2C-65D4-4463-87AB-BB2C859C1F3E}) (Version: 7.76.80.95 - Apple Inc.)
Readon TV Movie Radio Player 7.6.0.0 (HKLM-x32\...\{80074966-5231-428D-9AE7-B7D5D2DC3246}) (Version: 7.6.0 - Readon Technology)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
REAPER (HKLM-x32\...\REAPER) (Version:  - )
RegSeeker (HKLM-x32\...\RegSeeker) (Version: 3.01.3680 - HoverDesk)
Samsung Kies (HKLM-x32\...\{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.) Hidden
Samsung Kies (HKLM-x32\...\InstallShield_{758C8301-2696-4855-AF45-534B1200980A}) (Version: 2.6.3.14044_17 - Samsung Electronics Co., Ltd.)
Samsung Link 2.0.0.1603091618 (HKLM\...\8474-7877-9059-0204) (Version: 2.0.0.1603091618 - Samsung Electronics Co.,Ltd)
Samsung SideSync (HKLM-x32\...\Samsung SideSync) (Version: 4.6.5.13 - Samsung Electronics Co., Ltd.)
Samsung Story Album Viewer (HKLM-x32\...\{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Nombre de su organización) Hidden
Samsung Story Album Viewer (HKLM-x32\...\InstallShield_{698BBAD8-B116-495D-B879-0F07A533E57F}) (Version: 1.0.0.13054_1 - Nombre de su organización)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.51.0 - SAMSUNG Electronics Co., Ltd.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version:  - Microsoft)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.3.16540.9015 - Microsoft Corporation)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18091.6 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.18091.6 - Samsung Electronics Co., Ltd.)
Speccy (HKLM\...\Speccy) (Version: 1.25 - Piriform)
Spotify (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Spotify) (Version: 1.0.90.268.ga8a0ceb4 - Spotify AB)
Spotydl 0.9.36.0 (HKLM-x32\...\Spotydl_is1) (Version: 0.9.36.0 - spotydl.com)
SSC Service Utility v4.30 (HKLM-x32\...\SSC Service Utility_is1) (Version:  - SSC Localization Group)
System Ninja version 3.1.5 (HKLM-x32\...\{6E67710E-206D-43AB-BF21-E7CD63056C55}_is1) (Version: 3.1.5 - SingularLabs)
TapinRadio Pro (HKLM\...\TapinRadio Pro_is1) (Version: 1.70.2 - Raimersoft)
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.44109 - TeamViewer)
Temperature Monitor (HKLM-x32\...\{6642BF47-D82A-447B-90E7-658FA865AFD7}) (Version:  - )
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.50 - Ghisler Software GmbH)
TunnelBear (HKLM-x32\...\{6842EAA3-D175-41D1-9F4A-DF20BA70483A}) (Version: 2.3.29.0 - TunnelBear) Hidden
TunnelBear (HKLM-x32\...\{70b32981-56bc-4340-82c1-6b0dc0d5bc2a}) (Version: 2.3.29.0 - TunnelBear)
Ubuntu (HKLM-x32\...\Wubi) (Version: 9.10ubuntu1-rev160 - Ubuntu)
UltraISO Premium V8.66 (HKLM-x32\...\UltraISO_is1) (Version:  - )
UmmyVideoDownloader (HKLM-x32\...\{E028DBDA-EEE7-48A0-ADF7-D250589A02C5}_is1) (Version: 1.4.0.1 - ) <==== ATTENTION
VdhCoApp 1.1.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
Vegas Pro 12.0 (64-bit) (HKLM\...\{A278E021-9C9F-11E2-A232-F04DA23A5C58}) (Version: 12.0.563 - Sony)
VIA Administrador de dispositivos de plataforma (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.36 - VIA Technologies, Inc.)
Video Enhancer 1.9.12 (HKLM-x32\...\Video Enhancer_is1) (Version:  - Infognition Co. Ltd.)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN)
VSO ConvertXToDVD (HKLM-x32\...\{CE1F93C0-4353-4C9D-84DA-AB4E7C63ED32}_is1) (Version: 5.2.0.7 - VSO Software)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows XP Mode (HKLM\...\{1374CC63-B520-4f3f-98E8-E9020BF01CFF}) (Version: 1.3.7600.16422 - Microsoft Corporation)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wondershare Dr.Fone for Android(Build 6.2.0.42) (HKLM-x32\...\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 6.2.0.42 - Wondershare Software Co.,Ltd.)
Wuala (HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\Wuala) (Version: 1.0.444.0 - LaCie)
Wuala CBFS (HKLM-x32\...\Wuala CBFS) (Version: 3.2.107.0 - LaCie)
Wuala OverlayIcons (HKLM-x32\...\Wuala OverlayIcons) (Version: 1.0.0.2 - LaCie)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-2385482525-178760063-3032261430-1000_Classes\CLSID\{0D327DA6-B4DF-4842-B833-2CFF84F0948F}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2385482525-178760063-3032261430-1000_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2017\acad.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-2385482525-178760063-3032261430-1000_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2017\es-ES\acadficn.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ 0POLinkIconDone] -> {4931EE43-90CB-4D46-A50F-474D7C5D97BE} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ 1POLinkIconFailed] -> {828F1FF1-021C-4EC0-A4F8-B1BFF6390DD3} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ 2POLinkIconIng] -> {8AE3CBEA-8E21-4883-BFD0-925F5513F190} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ 3POLinkIconProhibited] -> {DED0F1AF-0505-4FB7-83AA-C2E51FA0721F} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ShellIconOverlayIdentifiers: [0POLinkIconDone] -> {4931EE43-90CB-4D46-A50F-474D7C5D97BE} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon1] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon2] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon3] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [0WualaOverlayIcon4] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Wuala OverlayIcons\OverlayIcon.dll [2012-05-02] (LaCie AG)
ShellIconOverlayIdentifiers: [1EldosIconOverlay] -> {595A7934-FFB9-4C7D-BDFE-5737B967D8EE} => C:\Windows\System32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers: [1POLinkIconFailed] -> {828F1FF1-021C-4EC0-A4F8-B1BFF6390DD3} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [2POLinkIconIng] -> {8AE3CBEA-8E21-4883-BFD0-925F5513F190} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [3POLinkIconProhibited] -> {DED0F1AF-0505-4FB7-83AA-C2E51FA0721F} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2016-02-07] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} =>  -> No File
ShellIconOverlayIdentifiers: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers: [HubicBackupRootOverlayHandler] -> {2DF0C6DB-1E85-4894-9D4F-63CB0EAB17EA} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicPublishedItemOverlayHandler] -> {7C76B697-27DF-4CFF-9909-863905561298} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicSyncItemOverlayHandler] -> {9B497753-D273-4A80-9DE8-72248D7FA595} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicUnsyncItemOverlayHandler] -> {D5454A6E-0904-4BA3-9E4A-240A5080259D} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [1EldosIconOverlay] -> {595A7934-FFB9-4C7D-BDFE-5737B967D8EE} => C:\Windows\System32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [EldosIconOverlay] -> {5BB532A2-BF14-4CCC-86B7-71B81EF6F8BC} => C:\Windows\system32\CbFsMntNtf3.dll [2012-04-09] (EldoS Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2016-02-07] (Autodesk)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ContextMenuHandlers1: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} =>  -> No File
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ContextMenuHandlers1: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\ConvertToPDFShellExtension_x64.dll [2016-03-09] (Foxit Software Inc.)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers1: [PDFArchitect4_ManagerExt] -> {3AECFCB3-8472-48E9-BC7B-5A3CD945C886} => C:\Program Files\PDF Architect 4\creator-context-menu.dll [2016-08-05] (pdfforge GmbH)
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-05] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-05] (Alexander Roshal)
ContextMenuHandlers1-x32: [{26fe3a74-9007-44b7-bdef-68cdd4dce946}] -> {26fe3a74-9007-44b7-bdef-68cdd4dce946} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers2: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} =>  -> No File
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2007-07-17] (EZB Systems, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ContextMenuHandlers4: [FormatFactoryShell] -> {A3777921-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_103.dll [2013-06-17] (Free Time)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll [2017-10-18] ()
ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2007-07-17] (EZB Systems, Inc.)
ContextMenuHandlers4: [{26fe3a74-9007-44b7-bdef-68cdd4dce946}] -> {26fe3a74-9007-44b7-bdef-68cdd4dce946} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2013-12-06] (Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.26.0.dll [2018-12-12] (Dropbox, Inc.)
ContextMenuHandlers5: [{26fe3a74-9007-44b7-bdef-68cdd4dce946}] -> {26fe3a74-9007-44b7-bdef-68cdd4dce946} => C:\Windows\system32\mscoree.dll [2010-11-04] (Microsoft Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-02] (AVAST Software)
ContextMenuHandlers6: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} =>  -> No File
ContextMenuHandlers6: [FSShellExt] -> {56160A70-D083-4856-9998-F565ABC03F86} => C:\Program Files\Key Metric Software\FolderSizes 6\FSShellExt.dll [2013-08-22] (Key Metric Software, LLC.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2007-07-17] (EZB Systems, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-05] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-05] (Alexander Roshal)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {003181B1-06EB-4760-BA70-330CC770A537} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS.exe
Task: {089097FA-B31B-40CC-A8C6-2CACCF3B4DBC} - System32\Tasks\{D0FB9DCF-84E3-4592-8340-7A41FFBCFDBF} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe [2001-07-26] (Hewlett-Packard)
Task: {233CB579-BE5F-45F7-8AF7-B54AB29B9F89} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-08] (Google Inc.)
Task: {300A326C-A1D0-4609-BFCE-1BF1B02BEA9F} - System32\Tasks\{979C15B0-E89E-4C30-9EEE-F078D8C3BB5D} => C:\Windows\system32\pcalua.exe -a D:\IsInstallPending.exe -d D:\
Task: {353F734E-2D9B-4BA0-950E-25DB67064B61} - System32\Tasks\MyDefrag v4.3.1 Daily => C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticDaily.MyD [2010-05-21] ()
Task: {39A7FFEF-2C81-435A-BDC3-595926629415} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-10] (Piriform Ltd)
Task: {41B1B22C-FF61-48E3-870D-FC63A6731077} - System32\Tasks\{52543DC8-CC95-41CC-86F7-2BBCD3841977} => C:\Windows\system32\pcalua.exe -a "C:\Users\Usuario\Desktop\DISCO 3\New Volume\Archivos de programa\CCleaner\uninst.exe" -d C:\Users\Usuario\Desktop -c C:\Users\Usuario\Desktop\CCleaner.exe
Task: {624152D9-A2BE-4C07-B9E1-371A1F472A02} - System32\Tasks\MyDefrag v4.3.1 Monthly => C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticMonthly.MyD [2010-05-21] ()
Task: {79B9A5A2-5B27-4E03-A3E2-8B3031D6C538} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
Task: {7F49A1E1-FB99-43A6-AC1F-C948C9AA07F1} - System32\Tasks\Driver Booster SkipUAC (Usuario) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {8A874E15-7A81-43FC-9F96-83D497BD7E4D} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-31] (AVAST Software)
Task: {99718312-781A-45A3-8C72-0B9414DFAE46} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-10] (Piriform Ltd)
Task: {A96D78EB-8D65-4A9F-B313-69C38D1CA6F5} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2016-07-27] (Dropbox, Inc.)
Task: {B1695C9E-8464-4D37-B325-09E1D86D36FB} - System32\Tasks\{C662EC5D-D325-4935-8E44-415AC6C337C3} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe [2001-07-26] (Hewlett-Packard)
Task: {C6009FC5-1AEA-4875-9403-BF89A8787E5A} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2385482525-178760063-3032261430-1000
Task: {CF4065E0-99F0-4F4B-B683-0DE51AFC6E93} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-2385482525-178760063-3032261430-1000 => C:\Users\Usuario\AppData\Local\MEGAsync\MEGAupdater.exe [2018-01-29] (Mega Limited)
Task: {D4466B31-8D42-45DE-89A4-3AB2B9B19A47} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-12] (Adobe Systems Incorporated)
Task: {D62314E3-7C58-4A1E-91FA-AB6408BADB1C} - System32\Tasks\{6B688EB6-3D5B-480D-93FF-7F62D0694354} => C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe [2001-07-26] (Hewlett-Packard)
Task: {D8F113DB-5CE7-4E96-BD01-FE5099A31566} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-12-02] (AVAST Software)
Task: {E10CAD41-28A1-46D9-9DB9-BDAE61F57A6A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-08] (Google Inc.)
Task: {EA26A0F2-527D-4E91-821C-984C90CEB6C7} - System32\Tasks\{F0D0B5B5-F732-4862-BB85-81BD010D7D25} => C:\Windows\system32\pcalua.exe -a C:\Windows\system32\pcwrun.exe -c "C:\Program Files (x86)\Hewlett-Packard\HP PrecisionScan\PrecisionScan LTX\hppsapp.exe"
Task: {F178E87C-D799-4956-AC3A-6159B36A7F90} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-03-31] (AVAST Software)
Task: {F4561B33-1298-4F67-A23A-0F6B04A5814F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-12] (Adobe Systems Incorporated)
Task: {FE6864F6-6906-4B06-911D-7E7CB1418AC5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-11-02] (AVAST Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
#21

Addition.txt Parte 2 de 2

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\Usuario\Favorites\NCH Software Download Site.lnk -> hxxp://www.nchsoftware.com/index.htm

==================== Loaded Modules (Whitelisted) ==============

2013-12-06 16:06 - 2013-12-06 16:06 - 000214528 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.PerformanceTuning.dll
2013-07-26 05:59 - 2013-07-26 05:59 - 000814592 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll
2013-07-26 05:59 - 2013-07-26 05:59 - 003650560 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Platform.dll
2017-10-18 18:51 - 2017-10-18 18:51 - 000598528 _____ () C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX64.dll
2014-02-20 22:53 - 2018-09-10 12:38 - 000095168 _____ () C:\Program Files\CCleaner\lang\lang-1034.dll
2014-11-08 14:13 - 2016-03-09 16:18 - 000025088 _____ () C:\Program Files\SAMSUNG\Samsung Link\JniSys.dll
2014-11-08 14:13 - 2016-03-09 16:18 - 002513920 _____ () C:\Program Files\SAMSUNG\Samsung Link\scone_proxy.dll
2014-11-08 14:13 - 2016-03-09 16:18 - 002436096 _____ () C:\Program Files\SAMSUNG\Samsung Link\scone_stub.dll
2013-12-21 11:25 - 2013-12-21 11:25 - 000036864 _____ () C:\Program Files\SAMSUNG\AllShare Framework DMS\1.3.23\64bit\JNIInterface.dll
2013-12-21 11:26 - 2013-12-21 11:26 - 000144384 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\ASFAPI.dll
2013-12-21 11:27 - 2013-12-21 11:27 - 000018944 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\MediaDB_Manager.dll
2013-10-22 09:52 - 2013-10-22 09:52 - 000030720 _____ () C:\Windows\system32\MediaDB64.dll
2013-10-22 09:52 - 2013-10-22 09:52 - 000908800 _____ () C:\Windows\system32\ContentDirectoryPresenter64.dll
2013-12-21 11:27 - 2013-12-21 11:27 - 000521728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\64bit\DMS_Manager.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 000049152 _____ () C:\Windows\system32\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 000016896 _____ () C:\Windows\system32\boost_system-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 000058880 _____ () C:\Windows\system32\boost_thread-vc90-mt-1_47.dll
2013-07-23 19:19 - 2013-07-23 19:19 - 000299520 _____ () C:\Windows\system32\boost_serialization-vc90-mt-1_47.dll
2016-04-25 13:18 - 2016-04-25 13:18 - 000669696 ____N () C:\Windows\Temp\sqlite-3.7.151-amd64-sqlitejdbc.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 001114624 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DMSManager.dll
2013-10-22 09:48 - 2013-10-22 09:48 - 000707072 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ContentDirectoryPresenter.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 000107008 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMCDP.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 000102400 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\FolderCDP.dll
2013-12-11 16:46 - 2013-12-11 16:46 - 000077312 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MetadataFramework.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000520234 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\sqlite3.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000450560 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\MoodExtractor.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 005717504 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\DCMImgExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000028672 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AutoChaptering.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000147456 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexpat.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoThumb.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 004671488 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avcodec-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000070656 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avutil-50.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000686080 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\avformat-52.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000152064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\swscale-0.dll
2013-10-25 19:49 - 2013-10-25 19:49 - 000028160 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\AudioExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000064000 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ID3Driver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000366592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\tag.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000289792 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libThumbnail.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000023040 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RichInfoDriver.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 000017920 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoExtractor.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 000117248 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ThumbnailMaker.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 001033728 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageMagickWrapper.dll
2013-12-11 16:45 - 2013-12-11 16:45 - 000134144 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\VideoMetadataDriver.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000290816 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libKeyFrame.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\SECMetaDriver.dll
2013-10-25 19:53 - 2013-10-25 19:53 - 000012288 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\ImageExtractor.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000024064 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\photoDriver.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000399826 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\libexif-12.dll.dll
2013-10-25 19:48 - 2013-10-25 19:48 - 000013824 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\TextExtractor.dll
2013-10-24 16:53 - 2013-10-24 16:53 - 000032768 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\Autobackup.dll
2013-04-19 16:38 - 2013-04-19 16:38 - 000055808 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\RosettaAllShare.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 000227840 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_serialization-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 000038912 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_date_time-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 000012800 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_system-vc90-mt-1_47.dll
2013-07-23 19:18 - 2013-07-23 19:18 - 000046592 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\boost_thread-vc90-mt-1_47.dll
2013-02-14 19:42 - 2013-02-14 19:42 - 000044032 _____ () C:\Program Files\Samsung\AllShare Framework DMS\1.3.23\us.dll
2018-12-02 20:36 - 2018-12-02 20:36 - 000919256 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-12-02 20:36 - 2018-12-02 20:36 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2018-12-12 20:31 - 2018-12-12 20:31 - 005786256 _____ () C:\Program Files\AVAST Software\Avast\defs\18121204\algo.dll
2018-12-02 20:36 - 2018-12-02 20:36 - 000496344 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-12-02 20:36 - 2018-12-02 20:36 - 001112280 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2013-12-06 15:53 - 2013-12-06 15:53 - 000094208 _____ () C:\Program Files (x86)\ATI Technologies\HydraVision\HydraEsp.dll
2017-10-18 18:58 - 2017-10-18 18:58 - 000570368 _____ () C:\Users\Usuario\AppData\Local\MEGAsync\ShellExtX32.dll
2018-11-03 09:55 - 2018-11-03 09:55 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-12-12 18:23 - 2018-12-12 09:42 - 001140552 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2018-12-12 18:23 - 2018-12-12 09:42 - 002103112 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2018-12-12 18:23 - 2018-12-12 09:44 - 000023376 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000025456 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000148968 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 001878888 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000025960 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000118232 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes36.dll
2018-12-12 18:23 - 2018-12-12 09:42 - 000109024 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000082760 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000418776 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom36.dll
2018-12-12 18:23 - 2018-12-12 09:43 - 000074072 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000027616 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000049128 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000026600 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000131552 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000182752 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000027616 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000119272 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000401752 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000028640 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000034664 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000062304 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000023520 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000053736 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000065504 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000025944 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000068968 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000028520 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000032224 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000156504 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000092496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt562.sip.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 001778000 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000518992 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000052056 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 001929552 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 003821392 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000044888 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000132944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000218456 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000205656 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000061408 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000051552 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000027624 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000033632 _____ () C:\Program Files (x86)\Dropbox\Client\winreindex.compiled._winreindex.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000028008 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000025960 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000025448 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000025960 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000031600 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000486880 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000029040 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 011820368 _____ () C:\Program Files (x86)\Dropbox\Client\nucleus_python.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000029024 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:42 - 000036312 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2018-12-12 18:23 - 2018-12-12 09:44 - 000025960 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.advapi32.compiled._winffi_advapi32.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000433992 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2018-12-12 18:23 - 2018-12-12 09:44 - 000038240 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000025920 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2018-12-12 18:23 - 2018-12-12 09:43 - 001592128 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2018-12-12 18:23 - 2018-12-12 09:44 - 000029544 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.shell32.compiled._winffi_shell32.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000241488 _____ () C:\Program Files (x86)\Dropbox\Client\windragdrop.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000102736 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000025448 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.gdi32.compiled._winffi_gdi32.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000037200 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:44 - 000029544 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000530768 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.cp36-win32.pyd
2018-12-12 18:23 - 2018-12-12 09:43 - 000348496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.cp36-win32.pyd

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\ProgramData\Temp:56E2E879 [118]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

HKU\S-1-5-21-2385482525-178760063-3032261430-1000\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7865 more sites.

IE trusted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\localhost -> localhost
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-2385482525-178760063-3032261430-1000\...\123simsen.com -> www.123simsen.com

There are 7865 more sites.


==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-13 23:34 - 2017-08-25 18:36 - 000450575 ____R C:\Windows\system32\Drivers\etc\hosts

127.0.0.1	www.007guard.com
127.0.0.1	007guard.com
127.0.0.1	008i.com
127.0.0.1	www.008k.com
127.0.0.1	008k.com
127.0.0.1	www.00hq.com
127.0.0.1	00hq.com
127.0.0.1	010402.com
127.0.0.1	www.032439.com
127.0.0.1	032439.com
127.0.0.1	www.0scan.com
127.0.0.1	0scan.com
127.0.0.1	1000gratisproben.com
127.0.0.1	www.1000gratisproben.com
127.0.0.1	1001namen.com
127.0.0.1	www.1001namen.com
127.0.0.1	100888290cs.com
127.0.0.1	www.100888290cs.com
127.0.0.1	www.100sexlinks.com
127.0.0.1	100sexlinks.com
127.0.0.1	10sek.com
127.0.0.1	www.10sek.com
127.0.0.1	www.1-2005-search.com
127.0.0.1	1-2005-search.com
127.0.0.1	123fporn.info
127.0.0.1	www.123fporn.info
127.0.0.1	123haustiereundmehr.com
127.0.0.1	www.123haustiereundmehr.com
127.0.0.1	123moviedownload.com
127.0.0.1	www.123moviedownload.com

There are 15459 more lines.


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-2385482525-178760063-3032261430-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Usuario\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^BackupRemind.lnk => C:\Windows\pss\BackupRemind.lnk.CommonStartup
MSCONFIG\startupfolder: C:^Users^Usuario^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk => C:\Windows\pss\Dropbox.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Usuario^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Firemin.lnk => C:\Windows\pss\Firemin.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Usuario^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk => C:\Windows\pss\MEGAsync.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Usuario^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Polaris Office Sync.lnk => C:\Windows\pss\Polaris Office Sync.lnk.Startup
MSCONFIG\startupfolder: C:^Users^Usuario^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Recorte de pantalla y Selector de OneNote 2010.lnk => C:\Windows\pss\Recorte de pantalla y Selector de OneNote 2010.lnk.Startup
MSCONFIG\startupreg: AdAwareTray => 
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: APSDaemon => 
MSCONFIG\startupreg: Autodesk Desktop App => "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
MSCONFIG\startupreg: Autodesk Sync => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
MSCONFIG\startupreg: Chromium => "c:\users\usuario\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session
MSCONFIG\startupreg: Clip2Net => C:\Program Files (x86)\Clip2Net\clip2net.exe
MSCONFIG\startupreg: CorelDRAW Graphics Suite 11b => 
MSCONFIG\startupreg: Draughts => "C:\Users\Usuario\AppData\Roaming\Checkers\Draughts\Draughts.exe"
MSCONFIG\startupreg: Dropbox Update => "C:\Users\Usuario\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c
MSCONFIG\startupreg: EPSON L800 Series => C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIG5P.EXE /FU "C:\Windows\TEMP\E_S55FD.tmp" /EF "HKCU"
MSCONFIG\startupreg: GoogleChromeAutoLaunch_CF0D12F859BF15DAB73FDD0B7E1E013D => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window
MSCONFIG\startupreg: HDAudDeck => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe -r
MSCONFIG\startupreg: iTunesHelper => 
MSCONFIG\startupreg: KiesPDLR.exe => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: LanguageShortcut => 
MSCONFIG\startupreg: LifeCam => "C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe"
MSCONFIG\startupreg: MDS_Menu => "C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\Olympus\ib" UpdateWithCreateOnce "Software\OLYMPUS\ib\1.0"
MSCONFIG\startupreg: Olympus ib => "C:\Program Files (x86)\Olympus\ib\olycamdetect.exe" /Startup
MSCONFIG\startupreg: Polaris Office Sync => C:\Users\Usuario\AppData\Roaming\PolarisOfficeLink\POLinkLauncher.exe
MSCONFIG\startupreg: PowerDVD14Agent => 
MSCONFIG\startupreg: PSafeTray => 
MSCONFIG\startupreg: PSafeWDS => 
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
MSCONFIG\startupreg: RemoteControl => 
MSCONFIG\startupreg: SDTray => 
MSCONFIG\startupreg: SideSync => C:\Program Files (x86)\Samsung\SideSync4\SideSync.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: Spotify => "C:\Users\Usuario\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized
MSCONFIG\startupreg: Spotify Web Helper => C:\Users\Usuario\AppData\Roaming\Spotify\SpotifyWebHelper.exe --autostart
MSCONFIG\startupreg: SSC Service Utility => C:\Program Files (x86)\SSC Service Utility\ssc_serv.exe /s
MSCONFIG\startupreg: StartCCC => 
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: TunnelBear => C:\Program Files (x86)\TunnelBear\TBear.Client.exe -autoconnect
MSCONFIG\startupreg: uTorrent => "C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
MSCONFIG\startupreg: VX1000 => C:\Windows\vVX1000.exe

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{E722B8F5-AC8A-4D4A-90C8-7D4E4B534F84}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [UDP Query User{0904E8C9-8D84-4D79-B57D-7EA2B88BC77C}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe
FirewallRules: [TCP Query User{81E39A98-9ABA-40DA-AD0B-289E6DA0A93D}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{C15FBE1A-AAA6-43A5-B2A5-389136F66929}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{2FD100E4-0A60-4F1F-B3D2-B90C6E06A6B4}C:\users\usuario\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\usuario\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{7BC413A3-5337-446D-8F6A-22EC547F78E6}C:\users\usuario\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\usuario\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{01D6D7D6-45A4-44F3-AAA2-520A034E139F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9D19973C-EF58-4E96-A4E3-B06F72452CE4}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1AA4A925-DB3E-489B-B1E3-021B9B40DD79}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{9D4D61AD-C584-43E6-ABB4-8CEAFB1C6CB0}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [UDP Query User{508F35E1-A721-4808-877F-DB8137C425CB}C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe] => (Allow) C:\windows\microsoft.net\framework\v2.0.50727\vbc.exe
FirewallRules: [TCP Query User{4F937B47-800A-4D67-BC23-DF35E42E7B93}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{2C07B46F-D9C6-4DC9-9106-3BD34DE2527A}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{635F1155-8187-4A86-9444-FE08DFF17049}C:\users\usuario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\usuario\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{3716DBD9-185F-4C4B-892E-6AF6A7D44E63}C:\users\usuario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\usuario\appdata\roaming\spotify\spotify.exe
FirewallRules: [{39D4598A-26DD-41CB-94A2-46F3931C63D0}] => (Allow) C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D3FA529B-58F6-4335-A3D8-2E4F48EC43A2}] => (Allow) C:\Users\Usuario\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{88CC4BAD-5DF4-42DA-9AE3-383B556560CB}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [UDP Query User{E861FB15-8623-4F4D-BA1D-CBF64B6F338E}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe
FirewallRules: [TCP Query User{5AB421A8-CE57-4352-8946-D7F47D62A9F6}C:\program files (x86)\formatfactory\formatfactory.exe] => (Block) C:\program files (x86)\formatfactory\formatfactory.exe
FirewallRules: [UDP Query User{2E0848BB-F52D-4800-BBC5-B143CF4BC840}C:\program files (x86)\formatfactory\formatfactory.exe] => (Block) C:\program files (x86)\formatfactory\formatfactory.exe
FirewallRules: [TCP Query User{2104D34B-3CCE-44C9-958D-C49343952F21}C:\program files (x86)\microsoft office\office14\groove.exe] => (Block) C:\program files (x86)\microsoft office\office14\groove.exe
FirewallRules: [UDP Query User{3FB9A8E4-EDFB-4F9A-9E50-A09EFF42896B}C:\program files (x86)\microsoft office\office14\groove.exe] => (Block) C:\program files (x86)\microsoft office\office14\groove.exe
FirewallRules: [{35430691-6B12-4A25-A8E7-6035A1F1799A}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [{59F66543-A68F-4E33-A199-D9DF894036BB}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe
FirewallRules: [TCP Query User{64BDAE3E-1EFC-45C5-ADD0-D772E3F5F0CA}C:\program files (x86)\reaper\reaper.exe] => (Block) C:\program files (x86)\reaper\reaper.exe
FirewallRules: [UDP Query User{27B0743F-BE5F-44CF-BF40-31B36FD928D2}C:\program files (x86)\reaper\reaper.exe] => (Block) C:\program files (x86)\reaper\reaper.exe
FirewallRules: [TCP Query User{1C54E26C-A3D0-43F1-B706-3CF1571219B3}C:\program files (x86)\reaper\reamote.exe] => (Block) C:\program files (x86)\reaper\reamote.exe
FirewallRules: [UDP Query User{D2783017-5547-4AAE-9E4C-91D2BE67BC3A}C:\program files (x86)\reaper\reamote.exe] => (Block) C:\program files (x86)\reaper\reamote.exe
FirewallRules: [{C837D156-D8D7-4DB4-B453-13AE16C134B7}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
FirewallRules: [{9D4CA4CA-1FA5-4A6E-A1F9-977E075B659E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F97A3D26-F29A-488E-BF00-5A2DA6C29CF3}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{5DD7105D-3EEC-4576-B7F1-1D44EB136F65}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{5EBDF409-0101-4BB4-ACAD-724C11766B85}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

==================== Restore Points =========================

12-12-2018 19:58:43 Removed McAfee Safe Connect
12-12-2018 20:02:06 Windows Update

==================== Faulty Device Manager Devices =============

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (12/13/2018 01:42:07 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. La cuenta especificada ya existe.

Error: (12/13/2018 12:57:13 AM) (Source: DbxSvc) (EventID: 293) (User: )
Description: Failed to validate client process executable is signed: C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

Error: (12/13/2018 12:57:13 AM) (Source: DbxSvc) (EventID: 282) (User: )
Description: Certificate mismatch for file: C:\Program Files (x86)\Dropbox\Client\Dropbox.exe

Error: (12/13/2018 12:46:02 AM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. La cuenta especificada ya existe.

Error: (12/12/2018 11:44:34 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. La cuenta especificada ya existe.

Error: (12/12/2018 10:44:57 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. La cuenta especificada ya existe.

Error: (12/12/2018 09:42:16 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. La cuenta especificada ya existe.

Error: (12/12/2018 08:42:43 PM) (Source: MsiInstaller) (EventID: 11316) (User: NT AUTHORITY)
Description: Product: Avast Update Helper -- Error 1316. La cuenta especificada ya existe.


System errors:
=============
Error: (12/13/2018 12:55:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Wondershare Application Framework Service no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (12/13/2018 12:55:09 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio Wondershare Application Framework Service.

Error: (12/13/2018 12:54:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio VBoxAsw Support Driver no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar la ruta especificada.

Error: (12/13/2018 12:54:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio TunnelBear Maintenance no pudo iniciarse debido al siguiente error: 
El servicio no respondió a tiempo a la solicitud de inicio o de control.

Error: (12/13/2018 12:54:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Se agotó el tiempo de espera (30000 ms) para la conexión con el servicio TunnelBear Maintenance.

Error: (12/13/2018 12:53:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Hddb Build Service no pudo iniciarse debido al siguiente error: 
El sistema no puede encontrar el archivo especificado.

Error: (12/13/2018 12:51:24 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: El servicio Malwarebytes Service no se cerró correctamente después de recibir un control de aviso de apagado.

Error: (12/12/2018 08:40:53 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: El servicio Windows Search no respondió después de iniciar.


Windows Defender:
===================================
Date: 2014-11-24 23:51:11.428
Description: 
Windows Defender detectó spyware u otro software potencialmente no deseado.
Para obtener más información, consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/NewDotNet&threatid=9108
Nombre:Adware:Win32/NewDotNet
Id.:9108
Gravedad:Alta
Categoría:Adware
Ruta de acceso encontrada:file:C:\Program Files (x86)\ProMp3Recorder\NNGLZA638.EXE;file:C:\Windows\NDNuninstall6_38.exe;regkey:[email protected]\software\new.net
Tipo de detección:Concreto
Origen de detección:Sistema
Estado:Desconocido
Usuario:NT AUTHORITY\SYSTEM
Nombre de proceso:

Date: 2014-11-24 23:41:57.722
Description: 
Windows Defender detectó spyware u otro software potencialmente no deseado.
Para obtener más información, consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/NewDotNet&threatid=9108
Nombre:Adware:Win32/NewDotNet
Id.:9108
Gravedad:Alta
Categoría:Adware
Ruta de acceso encontrada:file:C:\Program Files (x86)\NewDotNet\newdotnet6_38.dll;file:C:\Program Files (x86)\ProMp3Recorder\NNGLZA638.EXE;file:C:\Windows\NDNuninstall6_38.exe;process:pid:2976;process:pid:3128;process:pid:4128;process:pid:5304;process:pid:5572;process:pid:5704;process:pid:5932;process:pid:5952;process:pid:6648
Tipo de detección:Concreto
Origen de detección:Protección en tiempo real
Estado:Desconocido
Usuario:\
Nombre de proceso:

Date: 2014-11-24 23:41:31.280
Description: 
Windows Defender detectó spyware u otro software potencialmente no deseado.
Para obtener más información, consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/NewDotNet&threatid=9108
Nombre:Adware:Win32/NewDotNet
Id.:9108
Gravedad:Alta
Categoría:Adware
Ruta de acceso encontrada:file:C:\Program Files (x86)\NewDotNet\newdotnet6_38.dll;file:C:\Program Files (x86)\ProMp3Recorder\NNGLZA638.EXE;file:C:\Windows\NDNuninstall6_38.exe;process:pid:2976;process:pid:3128;process:pid:4128;process:pid:5304;process:pid:5704;process:pid:5932;process:pid:5952;process:pid:6648
Tipo de detección:Concreto
Origen de detección:Protección en tiempo real
Estado:Desconocido
Usuario:\
Nombre de proceso:

Date: 2014-11-24 23:41:15.445
Description: 
Windows Defender detectó spyware u otro software potencialmente no deseado.
Para obtener más información, consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/NewDotNet&threatid=9108
Nombre:Adware:Win32/NewDotNet
Id.:9108
Gravedad:Alta
Categoría:Adware
Ruta de acceso encontrada:file:C:\Program Files (x86)\NewDotNet\newdotnet6_38.dll;file:C:\Program Files (x86)\ProMp3Recorder\NNGLZA638.EXE;file:C:\Windows\NDNuninstall6_38.exe;process:pid:2976;process:pid:3128;process:pid:4128;process:pid:5304;process:pid:5704;process:pid:5932;process:pid:6648
Tipo de detección:Concreto
Origen de detección:Protección en tiempo real
Estado:Desconocido
Usuario:\
Nombre de proceso:

Date: 2014-11-24 23:40:25.116
Description: 
Windows Defender detectó spyware u otro software potencialmente no deseado.
Para obtener más información, consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=Adware:Win32/NewDotNet&threatid=9108
Nombre:Adware:Win32/NewDotNet
Id.:9108
Gravedad:Alta
Categoría:Adware
Ruta de acceso encontrada:file:C:\Program Files (x86)\NewDotNet\newdotnet6_38.dll;file:C:\Program Files (x86)\ProMp3Recorder\NNGLZA638.EXE;file:C:\Windows\NDNuninstall6_38.exe;process:pid:2976;process:pid:3128;process:pid:4128;process:pid:5304;process:pid:5704;process:pid:5932
Tipo de detección:Concreto
Origen de detección:Protección en tiempo real
Estado:Desconocido
Usuario:\
Nombre de proceso:

Date: 2014-07-11 20:14:47.420
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Actual
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 
Versión de firma:0.0.0.0
Versión de motor:0.0.0.0

Date: 2014-07-11 20:02:18.445
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Actual
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 
Versión de firma:0.0.0.0
Versión de motor:0.0.0.0

Date: 2014-05-30 15:21:14.220
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Actual
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 
Versión de firma:0.0.0.0
Versión de motor:0.0.0.0

Date: 2014-03-25 15:54:45.907
Description: 
Windows Defender encontró un error al intentar cargar firmas e intentará restablecer un conjunto de firmas conocidas.
Firmas intentadas:Actual
Código de error:0x80070002
Descripción de error:El sistema no puede encontrar el archivo especificado. 
Versión de firma:0.0.0.0
Versión de motor:0.0.0.0

CodeIntegrity:
===================================

Date: 2014-12-21 12:16:34.648
Description: 
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Users\Usuario\AppData\Local\Temp\EverestDriver.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

Date: 2014-12-21 12:16:34.438
Description: 
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Users\Usuario\AppData\Local\Temp\EverestDriver.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

Date: 2014-12-21 12:16:29.572
Description: 
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

Date: 2014-12-21 12:16:29.360
Description: 
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Program Files (x86)\Lavalys\EVEREST Home Edition\kerneld.amd64 porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

==================== Memory info =========================== 

Processor: AMD A6-3500 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 73%
Total physical RAM: 4073.55 MB
Available physical RAM: 1085.72 MB
Total Virtual: 8145.25 MB
Available Virtual: 4717.78 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:475.74 GB) (Free:131.74 GB) NTFS
Drive e: (Nuevo vol) (Fixed) (Total:455.42 GB) (Free:179.3 GB) NTFS
Drive f: (Reservado para el sistema) (Fixed) (Total:0.1 GB) (Free:0.05 GB) NTFS
Drive h: (ANALIA AGUSTINA CAMILA) (Fixed) (Total:237.91 GB) (Free:83.79 GB) NTFS
Drive i: (Nuevo vol) (Fixed) (Total:227.75 GB) (Free:186.81 GB) NTFS
Drive j: (Nuevo vol) (Fixed) (Total:1863.01 GB) (Free:1485.25 GB) NTFS

\\?\Volume{bc87ece0-1996-11e3-a98f-806e6f6e6963}\ (Reservado para el sistema) (Fixed) (Total:0.35 GB) (Free:0.31 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 2BD2C32A)
Partition 1: (Active) - (Size=356 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=475.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=455.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: D7D2BF09)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=227.7 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: 0C699BCF)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================