Necesito ayuda

Eliminar Malwares
22

Hola @Ismael_Longat_Marrer

Realiza lo siguiente:

Paso 1:

Desinstala con Revo Uninstaller en su Modo Avanzado:

  • Driver Booster
  • FXWebPlayer

Manual de Revo Uninstaller.

Paso 2:

Con mucha atención:

1.- Muy Importante >>> Realizar una copia de Seguridad de su Registro.

  • Descarga/Ejecuta DelFix desde el escritorio de Windows.
  • Clic Derecho, “Ejecutar como Administrador”.
  • En la ventana principal, marca solamente la casilla “Create Registry Backup”.
  • Clic en Run.

Al terminar se abrirá un reporte llamado DelFix.txt, guárdelo por si fuera necesario y cierre la herramienta…

Luego ve a::

2.- Inicio >>> Ejecutar >>> Escribe notepad.exe o abra un nuevo archivo Notepad y copie y pegue lo siguiente:

Start::
CloseProcesses:
HKU\S-1-5-21-2375054329-1883842248-1515162951-1001\...\MountPoints2: {0504b5ae-1728-11e8-9974-9061ae195865} - "F:\setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\84.0.4147.89\Installer\chrmstp.exe [2020-07-21] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SPDriverInstall.lnk [2019-12-11]
ShortcutTarget: SPDriverInstall.lnk -> C:\Program Files\MediaTek\SP Driver\SPDriverInstall (No File)
GroupPolicy: Restriction ? <==== ATTENTION
Task: {AF421F4C-4304-425D-ACD8-7D60B564D961} - System32\Tasks\Driver Booster SkipUAC (Ismael) => C:\Program Files (x86)\IObit\Driver Booster\5.4.0\DriverBooster.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.bing.com?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HCTE
HKU\S-1-5-21-2375054329-1883842248-1515162951-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.bing.com?pc=HCTE
Toolbar: HKU\S-1-5-21-2375054329-1883842248-1515162951-1001 -> No Name - {EF293C5A-9F37-49FD-91C4-2B867063FC54} - No File
Edge HKU\S-1-5-21-2375054329-1883842248-1515162951-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [elhpdacimkjpccooodognopfhbdgnpbk]
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [No File]
CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
Tcpip\Parameters: [DhcpNameServer] 10.1.192.12 10.1.192.13
Tcpip\..\Interfaces\{18228e1c-9e80-4594-83c0-542fa1bccdea}: [DhcpNameServer] 10.1.192.12 10.1.192.13
Tcpip\..\Interfaces\{e684d1f8-8dac-4380-94ca-257858004af5}: [DhcpNameServer] 10.1.192.13 10.1.192.12
2020-07-24 00:32 - 2018-11-15 21:36 - 000000000 ____D C:\Users\Ismael\AppData\Local\Lavasoft
2020-07-24 00:32 - 2018-11-15 21:32 - 000000000 ____D C:\ProgramData\Lavasoft
2020-07-24 00:32 - 2018-05-29 00:05 - 000000000 ____D C:\Users\Ismael\AppData\Roaming\IObit
2020-07-24 00:32 - 2018-05-29 00:05 - 000000000 ____D C:\ProgramData\IObit
2020-07-18 04:00 - 2019-01-02 13:43 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
FXWebPlayer (HKLM-x32\...\FXWebPlayer) (Version: - FX Interactive) <==== ATTENTION
ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll -> No File
ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll -> No File
ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => C:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll -> No File
C:\Program Files (x86)\IObit
AlternateDataStreams: C:\ProgramData:9E4957CE5A9494B2 [217]
AlternateDataStreams: C:\Users\All Users:9E4957CE5A9494B2 [217]
AlternateDataStreams: C:\ProgramData\Application Data:9E4957CE5A9494B2 [217]
AlternateDataStreams: C:\Users\Ismael\Desktop\adwcleaner_8.0.7.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Ismael\Desktop\FRST64.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Ismael\Desktop\MBSetup.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Ismael\Desktop\ZHPCleaner.exe:SmartScreen [7]
AlternateDataStreams: C:\Users\Ismael\Downloads\reaper612c_x64-install.exe:SmartScreen [7]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\25399ADF.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\25399ADF.sys => ""="Driver"
FirewallRules: [UDP Query User{077A5548-225F-4CB9-89A1-C1A640637D65}C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe => No File
FirewallRules: [TCP Query User{6F0AA92C-9E5E-42D5-8AC3-89FD2F4A095D}C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe => No File
FirewallRules: [UDP Query User{9553889A-9CDA-484A-B485-F9901A0E71B2}C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe => No File
FirewallRules: [TCP Query User{AB0CA59B-2213-4E83-B759-F3923C82E212}C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_211\bin\javaw.exe => No File
FirewallRules: [UDP Query User{55A5AE0B-5788-487C-91B9-C1883BD8F6C5}C:\program files (x86)\red faction guerrilla remarstered\rfg.exe] => (Allow) C:\program files (x86)\red faction guerrilla remarstered\rfg.exe => No File
FirewallRules: [TCP Query User{84457690-4CD2-41F3-8B17-9B2EF57A6E54}C:\program files (x86)\red faction guerrilla remarstered\rfg.exe] => (Allow) C:\program files (x86)\red faction guerrilla remarstered\rfg.exe => No File
FirewallRules: [{F4D2D018-8F69-4E37-9673-847C0A83192C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{35480715-3187-4270-9103-F3C13B85201C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => No File
FirewallRules: [{4CD7A90D-1DA7-446A-9F4E-3B1F9C833EEC}] => (Block) C:\program files\epic games\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe => No File
FirewallRules: [{C874E0FA-7F23-412C-95C9-85CFEC1930A3}] => (Block) C:\program files\epic games\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe => No File
FirewallRules: [UDP Query User{57884E9F-ED6E-4CEE-B29A-6EC09C27426A}C:\program files\epic games\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe] => (Allow) C:\program files\epic games\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe => No File
FirewallRules: [TCP Query User{082F2F76-A4C4-49F0-AC32-61CD81E70783}C:\program files\epic games\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe] => (Allow) C:\program files\epic games\unrealtournament\engine\binaries\win64\ue4-win64-shipping.exe => No File
FirewallRules: [UDP Query User{2C971467-C98E-4800-A0E1-7E8A4F82575F}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => No File
FirewallRules: [TCP Query User{720DC142-CFE7-49DE-A163-1130428D3EC3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => No File
FirewallRules: [{E49A90F2-4EB5-4AAB-AB92-9C38E2638D8A}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe => No File
FirewallRules: [{40A4F4CA-535C-47EB-9933-D7B8248FF171}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe => No File
C:\Program Files (x86)\Common Files\Mcafee
FirewallRules: [TCP Query User{2FBF7B6E-DC3F-4BBC-8DB7-AF868CC4EAA6}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => No File
FirewallRules: [UDP Query User{35EBB063-B3D1-43CC-809D-CDEA5262D68C}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => No File
FirewallRules: [{5DA0979D-F70E-4156-8D24-DC937C4B285D}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [{D51490EF-CE8A-4D40-83EE-1FCD417DC724}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => No File
FirewallRules: [TCP Query User{89D9A460-9057-44A4-92AA-2A03A300004F}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe => No File
FirewallRules: [UDP Query User{F56A06A4-D6BE-44D7-8A0F-AA5E39511EDB}C:\program files\transmission\transmission-qt.exe] => (Allow) C:\program files\transmission\transmission-qt.exe => No File
FirewallRules: [{690D989C-4CF4-4236-AB93-1DD68A399024}] => (Allow) C:\Program Files\Avid\Pro Tools\AvidVideoEngine.exe => No File
FirewallRules: [{3063B923-12D3-4C9E-B4DF-07D1A3568196}] => (Allow) C:\Users\Ismael\AppData\Roaming\Zoom\bin\airhost.exe => No File
FirewallRules: [TCP Query User{2B0EF755-6C03-4BD5-B58A-3F78B28398C5}C:\program files (x86)\steam\steamapps\common\goat of duty\goatofduty\binaries\win64\goatofduty-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\goat of duty\goatofduty\binaries\win64\goatofduty-win64-shipping.exe => No File
FirewallRules: [UDP Query User{46589817-4E1B-4373-B1E0-A35E38677AD6}C:\program files (x86)\steam\steamapps\common\goat of duty\goatofduty\binaries\win64\goatofduty-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\goat of duty\goatofduty\binaries\win64\goatofduty-win64-shipping.exe => No File

CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
End::
  • Lo guarda bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.

Nota: Es necesario que el ejecutable Frst.exe/Frst64.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no la herramienta no trabajará.

3.- Inicie su ordenador en >>> Modo Seguro >>> Aplicable a Windows 10. o Windows 7.

4.- Desconecte el equipo de Internet, apague el router, desconecte el cable.

  • Ejecute Frst.exe o Frst64.exe. según el caso.
  • Presione el botón Fix/Corregir y aguarde a que termine.
  • La Herramienta guardará el reporte en su escritorio (Fixlog.txt).
  • Reinicia y lo pega en su próxima respuesta.

Nos comentas…

Salu2