hola, necesito hacerle un mantenimiento general al pc para que ande mas rapido, la verdad hace tiempo como 1 año o 2 que lo tengo sin antivirus ni nada, alguien podria ayudarme con un buen manual para dejarla bien libre de virus y cosas asi? plis 
años atras usaba ese manual de 11 pasos pero ahora esta cambiado, solo tengo que seguir los 9 pasos del nuevo? saludos, tambien me gustaria poner ese reporte y pegarlo aca para saber si tengo algo indeseado en la pc ayuda plis
Bienvenido/a al nuevo foro Infospyware.
Para detectar malewares sigue estos pasos:
CCleaner
Descarga, instala y/o actualiza Ccleaner
Consulta si es necesario su manual
haces clic en Analyze (Analizar) y esperas que termine clic en Run Cleaner (Ejecutar Limpiador).
Malewarebytes Anti-Maleware
• Descarga, actualiza y ejecuta Malwarebytes’ Anti-Malware , revisa en detalle el manual, para que sepas usarlo y configurarlo.
AdwCleaner
Descarga AdwCleaner | InfoSpyware en el escritorio.
• Cierra también todos los programas que tengas abiertos.
• Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona "Ejecutar como Administrador.)
• Pulsar en el botón Escanear , y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Limpiar .
• Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas .
• Guardas el reporte que te aparecerá y lo anexas en un mensaje.
• El informe también se puede encontrar en C:\Archivos de programa o C: Archivos de programa(x86), si el sistema es de 64 bits –Adwcleaner- AdwCleaner[CX].txt
ZHPCleaner
Ejecutar ZHPCleaner siguiendo su manual. Anexas el reporte en un nuevo mensaje del foro.
CCleaner
clic en buscar problemas y esperas que termine clic en Reparar Seleccionadas y haces una copia de seguridad
Por favor no pegue directamente los informes en su mensaje de respuesta ya que quedaría ilegible y no podré analizarlos dificultando que tus problemas sean resuelto. Sigue el método 2 o 3 indicados en la siguiente guía:
muchas gracias amigo hare todo eso y pegare mi reporte, una consulta aparte de todo eso es necesario instalar un antivirus? o los programas mencionados tambien hacen de antivirus?, sorry si la pregunta es muy ignorante, en el caso que si seria bueno instalar uno despues de todos estos pasos?
amigo de nuevo gracias por la ayuda, aqui van mis reportes, ya hice todo y todo va bien
# -------------------------------
# Malwarebytes AdwCleaner 8.0.3.0
# -------------------------------
# Build:03-03-2020
# Database: 2020-03-23.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:03-23-2020
# Duration: 00:01:54
# OS: Windows 8.1 Single Language
# Cleaned: 229
# Failed: 1
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\58F7CC32_JUMPEASY
Deleted C:\Program Files (x86)\Common Files\Tencent
Deleted C:\Program Files (x86)\Stancine
Deleted C:\Program Files (x86)\Tencent
Deleted C:\Program Files (x86)\deskapp
Deleted C:\Program Files (x86)\globalUpdate
Deleted C:\Program Files (x86)\pandasecuritytb
Deleted C:\Program Files (x86)\reports
Deleted C:\Program Files\Common Files\Tencent
Deleted C:\Program Files\Hola
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\mipony
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\????
Deleted C:\ProgramData\TXQMPC
Deleted C:\ProgramData\Tencent
Deleted C:\Users\Belen\AppData\LocalLow\pandasecuritytb
Deleted C:\Users\Belen\AppData\Local\Stancine
Deleted C:\Users\Belen\AppData\Local\VirtualStore\ProgramData\Tencent
Deleted C:\Users\Belen\AppData\Local\globalUpdate
Deleted C:\Users\Belen\AppData\Roaming\ASP
Deleted C:\Users\Belen\AppData\Roaming\Firefox
Deleted C:\Users\Belen\AppData\Roaming\Firefox\Firefox\naweriweentcofise
Deleted C:\Users\Belen\AppData\Roaming\Hola
Deleted C:\Users\Belen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\????
Deleted C:\Users\Belen\AppData\Roaming\Tencent
Deleted C:\Users\Belen\AppData\Roaming\com
Deleted C:\Users\Belen\AppData\Roaming\mipony
Deleted C:\Users\Belen\AppData\Roaming\shortCutStore
Deleted C:\Users\Belen\Documents\mipony
Deleted C:\Users\Public\Pokki
Deleted C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\Tencent
***** [ Files ] *****
Deleted C:\Program Files (x86)\settings.dat
Deleted C:\ProgramData\{262E20B8-6E20-4CEF-B1FD-D022AB1085F5}.dat
Deleted C:\Users\Belen\Downloads\Hola-Setup.exe
Deleted C:\Users\Public\Documents\report.dat
Deleted C:\Users\Public\Documents\temp.dat
Deleted C:\Windows\System32\drivers\TFsFltX64.sys
Deleted C:\Windows\System32\log\iSafeKrnlCall.log
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
Deleted C:\Windows\System32\Tasks\{13541864-B5FB-4B7E-B0DE-96E25EC79295}
Deleted C:\Windows\Tasks\{58798841-6D62-1E6D-86EC-059B756FE02D}.job
***** [ Registry ] *****
Deleted HKCU\SOFTWARE\4C5C913161DB377E5D0509A4D38094C9
Deleted HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
Deleted HKCU\Software\Classes\pokki
Deleted HKCU\Software\Conduit
Deleted HKCU\Software\GlobalUpdate
Deleted HKCU\Software\INSTALLPATH\STATUS
Deleted HKCU\Software\Installer
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1B5D5DBD-C857-4377-A755-06E50B4AC2B0}
Deleted HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{639B74F1-0594-432C-97C8-68C8C17A1E1D}
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B79A645A-9F5A-4074-8860-A6341A613DFB}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|CrashService
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Save Serp Now
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|System
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|bobrowser
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{29B6CFD5-0064-411A-8C42-9890C83F9921}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\hola.org
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Deleted HKCU\Software\PPTAssist
Deleted HKCU\Software\Softonic
Deleted HKCU\Software\csastats
Deleted HKLM\SOFTWARE\4C5C913161DB377E5D0509A4D38094C9
Deleted HKLM\SOFTWARE\Classes\AppID\AmazonAppIE.dll
Deleted HKLM\SOFTWARE\Classes\AppID\DownloadProxy.EXE
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{817E2B76-798E-42BD-806C-9F44B593CE23}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F9CA6FA1-48F0-4BC0-8ED5-D17CF517A582}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{817E2B76-798E-42BD-806C-9F44B593CE23}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F9CA6FA1-48F0-4BC0-8ED5-D17CF517A582}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{13541864-B5FB-4B7E-B0DE-96E25EC79295}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{58798841-6D62-1E6D-86EC-059B756FE02D}
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost|SNAREA
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost|SNARER
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost|WANARE
Deleted HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost|WINSNARE
Deleted HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP
Deleted HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP
Deleted HKLM\SYSTEM\CurrentControlSet\Control\iSafeKrnlBoot
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{02FFD378-F51A-4979-8C5B-C116FD043DE3}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{1E51FBDC-7107-4D0D-86A9-E52F2B643189}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{21BA31DC-7A84-4E58-B28A-DEC26C7DEBCE}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{37ABA18B-478F-43E3-A7DA-4F2BCFCB2CB1}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{4D4EBF6B-BE2D-4D9D-9CD2-BA73D2761EC7}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{76FE6A30-15FD-4989-8FF3-EE31F9B77172}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{B549FB86-8A89-463B-AC4B-08ED5A5A433C}
Deleted HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{E3936DF0-8D13-4C4E-99E3-CC61E4AF12DB}
Deleted HKLM\Software\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Deleted HKLM\Software\Classes\Installer\Features\C3F6D7A0BA2FDE84EB329997B1FF786D
Deleted HKLM\Software\Classes\Installer\Products\C3F6D7A0BA2FDE84EB329997B1FF786D
Deleted HKLM\Software\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}
Deleted HKLM\Software\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}
Deleted HKLM\Software\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Deleted HKLM\Software\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}
Deleted HKLM\Software\Classes\METNSD
Deleted HKLM\Software\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}
Deleted HKLM\Software\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}
Deleted HKLM\Software\Classes\TypeLib\{6E1533F0-E0B5-465A-9F16-98FF0C76D493}
Deleted HKLM\Software\Classes\TypeLib\{8519F1E4-E25B-42B1-B361-0C643F45CF11}
Deleted HKLM\Software\Classes\qmgcfiles
Deleted HKLM\Software\Classes\qqapp
Deleted HKLM\Software\InterSect Alliance
Deleted HKLM\Software\Microsoft\Internet Explorer\AboutUrls|Tab
Deleted HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Userinit
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|hola
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C3F6D7A0BA2FDE84EB329997B1FF786D
Deleted HKLM\Software\Wow6432Node\4C5C913161DB377E5D0509A4D38094C9
Deleted HKLM\Software\Wow6432Node\Clara
Deleted HKLM\Software\Wow6432Node\Conduit
Deleted HKLM\Software\Wow6432Node\GlobalUpdate
Deleted HKLM\Software\Wow6432Node\Hola
Deleted HKLM\Software\Wow6432Node\NetTcpHandler
Deleted HKLM\Software\Wow6432Node\NtSvcHandler
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\AmazonAppIE.dll
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\DownloadProxy.EXE
Deleted HKLM\Software\Wow6432Node\\Classes\AppID\{51BEE30D-EEC8-4BA3-930B-298B8E759EB1}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Deleted HKLM\Software\Wow6432Node\\Classes\CLSID\{70DE12EA-79F4-46BC-9812-86DB50A2FD64}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{BF8946CD-EEBE-436B-8282-B19A021C9EFE}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{D8CB24E3-DDA3-4B7F-8BA3-871DB7D3D986}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{E7270EC6-0113-4A78-B610-E501D0A9E48E}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7}
Deleted HKLM\Software\Wow6432Node\\Classes\Interface\{F6DF4318-A699-4E88-BE1D-84F4A009B08A}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{38DD0B4A-E4E0-4A57-99EE-DCCB185B4728}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{45965C76-4C88-4512-9358-368483E1C3B1}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{6E1533F0-E0B5-465A-9F16-98FF0C76D493}
Deleted HKLM\Software\Wow6432Node\\Classes\TypeLib\{8519F1E4-E25B-42B1-B361-0C643F45CF11}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Internet Explorer\AboutUrls|Tab
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows NT\CurrentVersion\Svchost|Kitty
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows NT\CurrentVersion\Svchost|WinSAPSvc
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{50F4150A-48B2-417A-BE4C-C83F580FB904}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved|{754DF2CE-51E8-4895-B53C-6381418B84AE}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\SU
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{56B2B28A-E663-4D28-84A3-3846068A7D63}
Deleted HKLM\Software\Wow6432Node\amule-custom
Deleted HKLM\System\CurrentControlSet\Services\EventLog\Application\Crashhd
Deleted HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
Deleted HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Deleted HKU\.DEFAULT\Software\Hola
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Deleted HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Installer
Deleted HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_
Deleted HKU\S-1-5-18\Software\Hola
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Deleted HKU\S-1-5-21-1847079648-2300478010-880254355-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\dospop.com
Deleted HKU\S-1-5-21-1847079648-2300478010-880254355-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\zonemap\domains\incredibar.com
Not Deleted HKLM\Software\Hola
***** [ Chromium (and derivatives) ] *****
Deleted jcgcoifbkbphhjnekfkmohklfaimhikk
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
Deleted ourluckysites
Deleted startpageing123
Deleted trotux
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
Deleted Preinstalled.ACERAOPFramework Folder C:\Program Files (x86)\ACER\AOP FRAMEWORK
Deleted Preinstalled.ACERAOPFramework Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{4A37A114-702F-4055-A4B6-16571D4A5353}
Deleted Preinstalled.ACERClear.fiShellExtension Registry HKLM\Software\Classes\CLSID\{ED32C084-BABB-11E1-B491-D4D66088709B}
Deleted Preinstalled.ACERClear.fiShellExtension Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{ED32C084-BABB-11E1-B491-D4D66088709B}
Deleted Preinstalled.AcerDocsOfficeAddIn Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{DCBF3379-246B-47E1-8173-639B63940838}
Deleted Preinstalled.AcerIdentityCard Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{3D9CB654-99AD-4301-89C6-0D12A790767C}
Deleted Preinstalled.AcerPortal Folder C:\Program Files (x86)\ACER\ACER PORTAL
Deleted Preinstalled.AcerPortal Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|AcerPortal
Deleted Preinstalled.AcerPortal Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7D0F9E0-9729-4308-93FB-AC063C58D838}
Deleted Preinstalled.AcerPortal Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AcerCloud
Deleted Preinstalled.AcerPortal Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}
Deleted Preinstalled.AcerabBox Registry HKLM\Software\Classes\CLSID\{5CCE71FA-9F61-4F24-9CD1-98D819B40D68}
Deleted Preinstalled.AcerabDocs Folder C:\Program Files (x86)\ACER\ABDOCS
Deleted Preinstalled.AcerabDocs Folder C:\Program Files (x86)\ACER\ABDOCS OFFICE ADDIN
Deleted Preinstalled.AcerabDocs Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32|abDocsDllLoader
Deleted Preinstalled.AcerabDocs Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}
Deleted Preinstalled.AcerabDocs Registry HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run|abDocsDllLoader
Deleted Preinstalled.AcerabDocs Registry HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run|abDocsDllLoader
Deleted Preinstalled.GatewayLiveUpdater Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{859857F6-DAED-4406-906E-B52730587FF5}
Deleted Preinstalled.GatewayLiveUpdater Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2018A44C-37FD-46F8-BF78-7B9C9CDAE454}
Deleted Preinstalled.GatewayLiveUpdater Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{859857F6-DAED-4406-906E-B52730587FF5}
Deleted Preinstalled.GatewayLiveUpdater Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ALU
Deleted Preinstalled.GatewayLiveUpdater Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ALUAgent
Deleted Preinstalled.GatewayLiveUpdater Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{EE26E302-876A-48D9-9058-3129E5B99999}
Deleted Preinstalled.GatewayPowerManagement Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E13572B-492E-4A58-84EA-A1A85AF6B403}
Deleted Preinstalled.GatewayPowerManagement Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Power Management
Deleted Preinstalled.HPCleanFLC File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office.lnk
Deleted Preinstalled.PackardBellPowerManagement Folder C:\Program Files\PACKARD BELL\PACKARD BELL POWER MANAGEMENT
Deleted Preinstalled.PackardBellPowerManagement Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{91F52DE4-B789-42B0-9311-A349F10E5479}
Deleted Preinstalled.WildTangentGamesBundle File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WildTangent Games App - acer.lnk
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\ALOHA TRIPEAKS
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\CRADLE OF EGYPT COLLECTORS EDITION
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\GOVERNOR OF POKER 2 PREMIUM EDITION
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\LUXOR EVOLVED
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\MAGIC ACADEMY
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\PEGGLE NIGHTS
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\PLANTS VS ZOMBIES - GAME OF THE YEAR
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDGAMES\TRINKLIT SUPREME
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES
Deleted Preinstalled.WildTangentGamesBundle Folder C:\Program Files (x86)\WILDTANGENT GAMES\APP
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Ext\Preapproved\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangent wildgames Master Uninstall
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangentGameProvider-acer-genres
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\WildTangentGameProvider-acer-main
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App
Deleted Preinstalled.WildTangentGamesBundle Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-acer
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-19\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-20\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
Deleted Preinstalled.WildTangentGamesBundle Registry HKU\S-1-5-21-1847079648-2300478010-880254355-1001\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7A97880C-7DD3-4C6E-8DE0-881B1FC02BE6}
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [26585 octets] - [23/03/2020 20:27:23]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########~ ZHPCleaner v2020.3.18.187 by Nicolas Coolman (2020/03/18)
~ Run by lvtx (Administrator) (23/03/2020 21:34:21)
~ Web: https://www.nicolascoolman.com
~ Blog: https://nicolascoolman.eu/
~ Facebook : https://www.facebook.com/nicolascoolman1
~ State version : Version OK
~ Certificate ZHPCleaner: Legal
~ Type : Reparar
~ Report : C:\Users\Belen\Desktop\ZHPCleaner (R).txt
~ Quarantine : C:\Users\Belen\AppData\Roaming\ZHP\ZHPCleaner_Reg.txt
~ UAC : Activate
~ Boot Mode : Normal (Normal boot)
Windows 8.1 Single Language, 64-bit (Build 9600)
---\ Alternate Data Stream (ADS). (0)
~ No malintencionados o innecesarios artículos encontrados. (ADS)
---\ Servicios (0)
~ No malintencionados o innecesarios artículos encontrados. (Servicio)
---\ Navegadores de Internet (5)
BORRADOS: [lpw3croe.default] - user_pref('browser.search.defaultenginename', 'trotux'); =>.SUP.Trotux
BORRADOS: [lpw3croe.default] - user_pref('browser.search.searchengine.hp', 'http://www.trotux.com/?z=f67b1f68ebc756e03a37eb9gbzebbq[...] =>.SUP.Trotux
BORRADOS: [lpw3croe.default] - user_pref('browser.search.searchengine.sp', 'http://www.trotux.com/search/?from=icb&q={searchTerms}&[...] =>.SUP.Trotux
BORRADOS: [lpw3croe.default] - user_pref('browser.search.searchengine.url', 'http://www.trotux.com/search/?from=icb&q={searchTerms}[...] =>.SUP.Trotux
BORRADOS: [lpw3croe.default] - user_pref('browser.search.selectedEngine', 'trotux'); =>.SUP.Trotux
---\ Hosts carpeta (1)
~ El archivo hosts es legítimo (15643)
---\ Tareas automáticas programadas. (0)
~ No malintencionados o innecesarios artículos encontrados. (Tarea)
---\ Explorador ( Archivos, Carpetas ) (20)
MOVIDO carpeta: C:\Users\Belen\AppData\Roaming\gTCQKq.exe=>Adware.Pirrit
MOVIDO carpeta: C:\Users\Belen\AppData\Roaming\ZngHdwh.exe=>Adware.Pirrit
MOVIDO carpeta: C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringb.exe [Visicom Media Inc. - Anti-phishing Domain Advisor (Powered by Pa] =>.SUP.VisicomMedia
MOVIDO carpeta: C:\ProgramData\Panda Security URL Filtering\Panda_URL_Filteringc.dll [Visicom Media Inc. - Anti-phishing Domain Advisor (Powered by Pa] =>.SUP.VisicomMedia
MOVIDO carpeta: C:\Program Files (x86)\MIO\MIO.exe=>.SUP.Elex
MOVIDO archivo: C:\Program Files (x86)\06cdfc8b-3b37-4e25-b421-95942faf1c0b =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\14ad988d-d2c9-4811-a52d-380f89b6ed52 =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\30bd052c-74e9-43f5-82ec-d03ee4ccba3d =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\331a9ec1-e04c-48c9-b85d-54620676d69b =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\47824500-d9c6-4ff7-8f62-870cdc263b64 =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\4b727960-5c0a-41c6-bfd2-c25c4e3c7feb =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\90621e2d-aff3-4e08-b0d2-4cf57db5b674 =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\be3c4786-834f-4330-88da-6f9473809b1f =>Adware.CrossRider
MOVIDO archivo: C:\Program Files (x86)\d8bb42e4-7e61-47ea-a881-e2448d704c67 =>Adware.CrossRider
MOVIDO archivo: C:\ProgramData\panda_url_filtering =>SUP.Optional.StartSearch
MOVIDO archivo: C:\Users\Belen\AppData\Local\AdvinstAnalytics =>.SUP.Various
MOVIDO archivo: C:\Users\Belen\AppData\Local\Firefox =>Hijacker.Browser
MOVIDO archivo: C:\Users\Belen\AppData\Local\kitty =>.SUP.Elex
MOVIDO archivo: C:\Program Files (x86)\Firefox =>Hijacker.Browser
MOVIDO archivo: C:\Program Files (x86)\Remote Mouse =>Adware.Suspect
---\ Registro ( Claves, Valores, Datos) (32)
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\3de63afe-ab19-4ae7-b115-55811384475e [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\5114b726-a9df-4bc5-8a51-7d8d449419fb [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\69235d5c-bc69-46cb-aaac-7458204e9547 [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\742fe641-6d12-4803-81b7-3af90563518d [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\8637fdcf-0964-47b4-97b1-5476e43bf00b [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\b80b9323-9723-4016-a492-a1c7a5080e2e [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\ba1ee0ad-ff7f-486f-943f-1f228dc68306 [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\ea985008-704c-4fc5-8e45-4e5d93169b57 [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\ec16cf00-24c6-4336-91cb-a4b3fd5f3fe5 [] =>Adware.CrossRider
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\efb6c890-e3ea-4175-b44a-4270032f57dc [] =>Adware.CrossRider
BORRADOS clave*: HKLM\SOFTWARE\Wow6432Node\pandasecuritytb [AdditionalScan 320] =>.SUP.VisicomMedia
BORRADOS clave*: HKLM\SOFTWARE\Wow6432Node\Firefox [AdditionalScan 325] =>Adware.GhokswaBrowser
BORRADOS clave*: HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} [AdditionalScan 361] =>PUP.Optional.Legacy
BORRADOS clave**: HKLM\SOFTWARE\Firefox [AdditionalScan 450] =>Adware.GhokswaBrowser
BORRADOS clave**: HKLM\SOFTWARE\pandasecuritytb [AdditionalScan 451] =>.SUP.VisicomMedia
BORRADOS clave**: HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5} [AdditionalScan 508] =>PUP.Optional.Legacy
BORRADOS clave*: HKCU\Software\AppDataLow\Software\pandasecuritytb [] =>.SUP.VisicomMedia
BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} [IMyOverlayIcon] =>PUP.Optional.Legacy
BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL [] =>PUP.Optional.BonanzaDeals
BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\Installer\Products\461D8763BD4837F4FA6D1936241E7046 [BikaQ Rss] =>.SUP.BikaQ
BORRADOS clave*: [X64] HKLM\SOFTWARE\Classes\Installer\Products\A82B2B65366E82D4483A836460A8D736 [BikaQ Rss Reader] =>.SUP.BikaQ
BORRADOS clave*: [X64] HKLM\SOFTWARE\panda_url_filtering [] =>SUP.Optional.StartSearch
BORRADOS clave*: [X64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9B9BF5E1-0E0E-418D-B9C7-7A7EB56B22B3} [C:\Program Files (x86)\pandasecuritytb (Not File)] =>.SUP.VisicomMedia
BORRADOS clave*: [X64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\01FA40D665B73684D985D010B1695026 [c:\Program Files (x86)\Amazon\Amazon1ButtonApp\ (Not File)] =>.SUP.Amazon1ButtonApp
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Elex-tech [] =>.SUP.Elex
BORRADOS clave**: [X64] HKLM\SOFTWARE\Wow6432Node\pandasecuritytb [] =>.SUP.VisicomMedia
BORRADOS clave**: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\AppID\OverlayIcon.DLL [] =>PUP.Optional.BonanzaDeals
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474} [IMyOverlayIcon] =>PUP.Optional.Legacy
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9B9BF5E1-0E0E-418D-B9C7-7A7EB56B22B3} [C:\Program Files (x86)\pandasecuritytb (Not File)] =>.SUP.VisicomMedia
BORRADOS clave*: [X64] HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB2DE08D-AF76-42f2-80E9-E5EEE624A973} [C:\Program Files (x86)\pandasecuritytb (Not File)] =>.SUP.VisicomMedia
BORRADOS valor: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\gTCQKq [C:\Users\Belen\AppData\Roaming\gTCQKq.exe] =>Heuristic.KeyRun
BORRADOS valor: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\ZngHdwh [C:\Users\Belen\AppData\Roaming\ZngHdwh.exe] =>Heuristic.KeyRun
---\ Resumen de elementos en su estación de trabajo (15)
https://nicolascoolman.eu/2017/03/14/superfluous-trotux/ =>.SUP.Trotux
https://nicolascoolman.eu/2017/02/25/adware-pirrit/ =>Adware.Pirrit
https://nicolascoolman.eu/2017/03/18/superfluous-visicommedia/ =>.SUP.VisicomMedia
https://nicolascoolman.eu/2017/03/28/superfluous-elex/ =>.SUP.Elex
https://nicolascoolman.eu/2017/03/11/pup-optional-crossrider/ =>Adware.CrossRider
https://nicolascoolman.eu/2017/09/11/sup-startsearch/ =>SUP.Optional.StartSearch
https://nicolascoolman.eu/2017/01/20/logiciels-superflus/ =>.SUP.Various
https://nicolascoolman.eu/2017/11/10/hijacker-browser-3/ =>Hijacker.Browser
https://nicolascoolman.eu/2017/03/02/adware-suspect/ =>Adware.Suspect
https://nicolascoolman.eu/2017/02/19/adware-ghokswabrowser/ =>Adware.GhokswaBrowser
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.Legacy
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>PUP.Optional.BonanzaDeals
https://nicolascoolman.eu/2017/02/17/superfluous-bikaq/ =>.SUP.BikaQ
https://nicolascoolman.eu/2017/12/01/sup-amazon1buttonapp/ =>.SUP.Amazon1ButtonApp
https://nicolascoolman.eu/2017/01/27/repaquetage-et-infection/ =>Heuristic.KeyRun
---\ Limpieza adicional. (2)
~ Clave de registro Tracing borrados (2)
~ Quitar los antiguos informes de ZHPCleaner. (0)
---\ Resultado de la reparación.
~ Reparación llevada a cabo con éxito
~ Google Chrome OK
~ Mozilla Firefox OK
~ Internet Explorer OK
~ Opera OK
---\ STATISTIQUES
~ Items escaneado : 33503
~ Items encontrado : 0
~ artículos cancelados : 0
~ Ahorro de espacio (bytes) : 0
~ Items opciones : 9/16
---\ OPCIONES NO ACTIVAS
~ Análisis temporal de archivos
~ Análisis temporal de carpetas
~ Análisis de CLSID de carpetas vacías
~ Vaciar otro análisis de carpetas
~ Análisis de carpetas locales vacías
~ Análisis de archivos de instalación obsoleto
~ End of clean in 00h03mn25s
---\ Reporte (2)
ZHPCleaner-[S]-23032020-21_25_53.txt
ZHPCleaner-[R]-23032020-21_37_46.txtsaludos
Gracias por lo informes. Echo en falta el informe de Malewarebyte Antimaleware. Cuando pueda me lo envías por favor.
Hola, que tal, hace unos dias escribi un post sobre este tema, crei que estaba arreglado pero de nuevo observo que la bateria de mi portatil se descarga un poco cuando el equipo esta apagado, quiero decir apago el equipo con la bateria cargada al 100% y a la mañana siquiente cuando inicio sesion la bateria no aparece 100% cargada sino un 90 o 95% de su maxima capacidad, eso es normal?, gracias, saludos
pd: esa descarga no aparece siempre algunos dias cuando he iniciado sesion estaba 100% como la noche anterior
pd2: comentar tambien que mi portatil es casi nuevo, tiene unas tres semanas, pero es un i3 es decir gama baja