Hola @Lucas_B
El problema con AdwCleaner fue la ubicación del archivo, no lo descargaste al escritorio como debe estar si no en una ruta larga dentro de varias carpetas:
C:\Users\User\Desktop\MEGA ESCRITORIO NIVEL DIOS\vergeadas de la de la derecha\pendrive fit todolo que tenia\lo otro que tenia\AdwCleaner.exe
Ejecutaste FRST desde un lugar incorrecto:
- Running from C:\Users\User\ Downloads
Corta el ejecutable y pegalo en tu escritorio <<< Esto es Muy Importante.
Luego con mucha atención sigue estos pasos:
1.- Muy Importante >>> Realizar una copia de Seguridad de su Registro.
- Descarga DelFix en el escritorio de Windows.
- Clic Derecho, “Ejecutar como Administrador”.
- En la ventana principal, marca solamente la casilla “Create Registry Backup”.
- Clic en Run.
Al terminar se abrirá un reporte llamado DelFix.txt, guárdelo por si fuera necesario y cierre la herramienta…
2.- Luego vaya a::
Inicio >>> Ejecutar >>> Escribe notepad.exe o abra un nuevo archivo Notepad y copie y pegue lo siguiente:
Start
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-101217576-2858605893-2529171766-1000\...\MountPoints2: {495dde5d-72b8-11e6-a500-74d43556f1f4} - setup.exe
Task: {17245DAD-07FE-4DD0-AF96-E61D0C12F2FF} - System32\Tasks\{D7A3690E-9DE4-40A3-8914-F2B3A424AB7F} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/es/abandoninstall?page=tsProgressBar
Task: {22024E13-6921-4E40-A370-F3D40B0597E1} - System32\Tasks\{EF37042D-7BCF-4331-8CD5-563F3200665C} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.109/es/abandoninstall?page=tsProgressBar
Task: {2EAD83E9-40AF-4EE2-AD7C-8832912FFA40} - System32\Tasks\{B6EAFEC2-F62D-490C-9680-2AB300580857} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/es/abandoninstall?page=tsProgressBar
Task: {392582B4-618E-49EF-BB71-3A814A8062DC} - System32\Tasks\{F680BDD0-BF01-491C-8041-F6830C2FEBDF} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/es/abandoninstall?page=tsProgressBar
Task: {3A770D46-2522-43A2-81AB-794D8D9A6C57} - System32\Tasks\{36EE2500-BABE-424F-B57A-673A9F6F6C75} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.109/es/abandoninstall?source=lightinstaller&page=tsInstall
Task: {5BB5D420-6440-4209-9219-82A032CF7DB5} - System32\Tasks\{F3222736-4F9E-41F9-8B26-50EF87A21FB8} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.20.0.104/es/abandoninstall?page=tsProgressBar
Task: {64DB0993-A4DD-437F-8377-C55EC0232E73} - System32\Tasks\{BCE46DC2-551C-4904-B596-128DA2586151} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/es/abandoninstall?page=tsProgressBar
Task: {B7FABADE-1685-4FDE-B717-A009CC190F82} - System32\Tasks\{55777623-B17E-4BEC-AE22-7E2D9B602595} => C:\Windows\system32\pcalua.exe -a "C:\Users\User\Desktop\Medicina Battlefield 3.exe" -d C:\Users\User\Desktop
Task: {E1C4FBB6-96C6-421C-96FA-7DC938156940} - System32\Tasks\{CDB71C8D-E08A-4653-9B87-0D7ED7B7FB8D} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.20.0.104/es/abandoninstall?page=tsProgressBar
Task: {EACE0372-C71A-4F62-BC4F-931671B967FD} - System32\Tasks\{C6BEA6B0-4CE8-4EC2-AF6B-5FDFEBD6E7B9} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.112/es/abandoninstall?page=tsProgressBar
Task: {FD975823-BDDB-4277-96B2-F08F9C341F15} - System32\Tasks\{5C343C60-F899-4C80-937C-70E3040EEE50} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.18.0.109/es/abandoninstall?source=lightinstaller&page=tsInstall
Tcpip\Parameters: [DhcpNameServer] 200.114.96.10 200.114.96.11
Tcpip\..\Interfaces\{222FE9D5-3B44-454B-9711-3A3EE89DB5B5}: [DhcpNameServer] 200.114.96.10 200.114.96.11
Tcpip\..\Interfaces\{AA79CC30-6F8E-4E23-9E0D-A6196DEA0CDE}: [DhcpNameServer] 200.114.96.10 200.114.96.11
Tcpip\..\Interfaces\{B812565C-C70F-4C82-BDF0-1656AFD335DD}: [DhcpNameServer] 7.254.254.254
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.sxe-anticheat.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://search.sxe-anticheat.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.sxe-anticheat.com/
HKU\S-1-5-21-101217576-2858605893-2529171766-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.sxe-anticheat.com/
HKU\S-1-5-21-101217576-2858605893-2529171766-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ar.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope value is missing
SearchScopes: HKU\S-1-5-21-101217576-2858605893-2529171766-1000 -> {33D59858-89D9-4AC2-A956-93875EB02323} URL = hxxp://search.sxe-anticheat.com/?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-11-25] (Oracle America, Inc. -> Oracle Corporation
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-11-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-11-25] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @t.garena.com/garenatalk -> C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll [No File]
CHR HKU\S-1-5-21-101217576-2858605893-2529171766-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys
S1 Bfilter; \??\C:\Windows\System32\drivers\Bfilter.sys [X]
S1 Bfmon; \??\C:\Windows\System32\drivers\Bfmon.sys [X]
2019-10-18 16:36 - 2016-01-29 13:58 - 000000000 ____D C:\Users\User\AppData\LocalLow\IObit
2019-10-18 16:36 - 2016-01-29 13:58 - 000000000 ____D C:\Program Files (x86)\IObit
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers1: [UnLockerMenu] -> {A6FF0E3A-8437-482C-8E04-4F9E15C57538} => -> No File
HKLM\...\Drivers32: [VIDC.CFHD] => C:\Windows\system32\CFHD.dll [1355264 2015-09-22] (CineForm Inc.) [File not signed]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [105984 2018-09-25] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.vorbis] => C:\Windows\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [File not signed]
HKLM\...\Drivers32: [VIDC.CFHD] => C:\Windows\SysWOW64\CFHD.dll [1138688 2015-09-22] (CineForm Inc.) [File not signed]
HKLM\...\Drivers32: [vidc.iv50] => C:\Windows\SysWOW64\ir50_32.dll [746496 2009-07-13] (Microsoft Windows -> Intel Corporation)
HKLM\...\Drivers32: [msacm.iac2] => C:\Windows\SysWOW64\iac25_32.ax [197632 2009-07-13] (Microsoft Windows -> Intel Corporation)
HKLM\...\Drivers32: [VIDC.IV41] => C:\Windows\SysWOW64\IR41_32.AX [839680 2009-07-13] (Microsoft Windows -> Intel Corporation)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [94208 2018-09-25] (Beepa P/L) [File not signed]
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
AlternateDataStreams: C:\Windows:CM_19eafbed2e5c22a84b131f38305ac75313a8de243df0836e0998844693ddf628 [74]
AlternateDataStreams: C:\Windows:CM_599e40e338059b7c8201d84b6a6f021a4177c11e44d72cdd6d7af9f4fe138d3a [74]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [488]
FirewallRules: [TCP Query User{164FC2A3-663C-4B86-9161-A96B7D4D7650}C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [UDP Query User{CC49BE41-4DC1-4321-99AA-361AA23F8CB5}C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_111\bin\javaw.exe
CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
END- Lo guarda bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.
Nota: Es necesario que el ejecutable Frst.exe/Frst64.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no la herramienta no trabajará.
3.- Inicie su ordenador en >>> Modo Seguro sin Red <<< esto es muy importante.
- Ejecute Frst.exe o Frst64.exe. según el caso.
- Presione el botón Fix y aguarde a que termine.
- La Herramienta guardará el reporte en su escritorio (Fixlog.txt).
- Reinicia y lo pega en su próxima respuesta.
Al reiniciar actualiza Java a su ultima versión.
Nos comentas.
Salu2