Hola @Jimena_Pedraza
Con mucha atención sigue estos pasos:
1.- Muy Importante >>> Realizar nuevamente una copia de Seguridad de su Registro.
- Descarga/Ejecuta DelFix desde el escritorio de Windows.
- Clic Derecho, “Ejecutar como Administrador”.
- En la ventana principal, marca solamente la casilla “Create Registry Backup”.
- Clic en Run.
Al terminar se abrirá un reporte llamado DelFix.txt, guárdelo por si fuera necesario y cierre la herramienta…
Luego ve a::
2.- Inicio >>> Ejecutar >>> Escribe notepad.exe o abra un nuevo archivo Notepad y copie y pegue lo siguiente:
Start
CloseProcesses:
HKLM\...\Run: [AVGUI.exe] => "C:\Program Files (x86)\AVG\Antivirus\AvLaunch.exe" /gui
HKLM-x32\...\RunOnce: [AvgRemover] => C:\Windows\system32\avgremoverx.exe /run_number=2 /max_runs=2 /ndis_nextstep=4 /norestart /selfremove
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restricción <==== ATENCIÓN
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\RunOnce: [mb-runtask] => [X]
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: E - E:\Autorun.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: G - G:\RunGame.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: H - H:\RunGame.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: {9bfb48d0-e43d-11e7-8e5f-001c233e7c8b} - F:\Autorun.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: {d9857b39-e63b-11e7-8e51-001c233e7c8b} - H:\RunGame.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: {e7d0555d-e4d3-11e7-890a-001c233e7c8b} - E:\Autorun.exe
HKU\S-1-5-21-1634448849-352997038-3322466404-1000\...\MountPoints2: {e7d05578-e4d3-11e7-890a-001c233e7c8b} - G:\RunGame.exe
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\64.0.3282.186\Installer\chrmstp.exe [2018-02-23] (Google Inc -> Google Inc.)
Task: {478FF4D3-19D5-45F8-9453-83AA27A96570} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {6F9BAFE8-B5E3-4E21-B5CF-07AADA272801} - System32\Tasks\avastBCLRestart_chrome.exe => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Task: {95D8BF6C-93ED-4A78-9A7D-8400B1D3FC35} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\Windows\Tasks\AdwCleaner_onReboot.job => C:\Users\Pedraza\Desktop\adwcleaner_7.4.1.exe
Task: C:\Windows\Tasks\AVGPCTuneUp_Task_BkGndMaintenance.job => C:\Program Files (x86)\AVG\AVG PC TuneUp\tuscanx.exe
Winsock: Catalog5 08 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo
Winsock: Catalog5 09 C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo
Winsock: Catalog5-x64 08 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo
Winsock: Catalog5-x64 09 C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL => Ningún archivo
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
S2 BitDefenderCOM; C:\Program Files\BDServices\BitDefenderCom.exe [1028096 2016-12-12] (Digital Care Solutions) [Archivo no firmado]
U0 aswVmm; no ImagePath
2020-05-03 21:14 - 2020-05-03 21:14 - 000002352 _____ C:\Users\Pedraza\Desktop\mb-clean-results.txt
2020-05-03 21:08 - 2020-05-03 21:08 - 004146112 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgremoverx.exe
2020-05-03 21:08 - 2020-05-03 21:08 - 000000000 ____D C:\Program Files\AVG
2020-05-03 20:22 - 2020-05-03 20:23 - 000858912 _____ (Malwarebytes) C:\Users\Pedraza\Downloads\mb-clean-3.1.0.1035.exe
2020-05-03 20:21 - 2020-05-03 20:23 - 012638592 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Pedraza\Downloads\avgclear.exe
2020-05-03 20:21 - 2020-05-03 20:23 - 001526784 _____ (Microsoft Corporation) C:\Users\Pedraza\Downloads\BitDefender_Uninstall_Tool_x64.exe
2020-05-01 20:11 - 2020-05-01 20:12 - 000000000 ____D C:\Program Files (x86)\GUM9A9C.tmp
2020-04-29 20:26 - 2020-04-29 20:27 - 001980016 _____ (Malwarebytes) C:\Users\Pedraza\Downloads\MBSetup.exe
2020-04-29 20:16 - 2020-04-29 20:21 - 038869320 _____ (Tweaking.com) C:\Users\Pedraza\Downloads\tweaking.com_windows_repair_aio_setup (1).exe
2020-04-29 20:08 - 2020-04-29 20:09 - 000000000 ____D C:\Program Files (x86)\GUM7EC.tmp
2020-04-30 12:16 - 2020-04-30 12:17 - 001943800 _____ (Bleeping Computer, LLC) C:\Users\Pedraza\Desktop\IExplore.exe.exe
2020-05-03 21:14 - 2019-09-17 21:13 - 000000000 ____D C:\Program Files\Malwarebytes
2020-05-03 21:10 - 2016-05-19 20:50 - 000000000 ____D C:\ProgramData\Avg
2020-05-03 20:56 - 2016-05-19 20:51 - 000000000 ____D C:\Program Files (x86)\AVG
2020-04-29 17:31 - 2019-10-01 20:12 - 000000288 _____ C:\Windows\Tasks\AdwCleaner_onReboot.job
2016-01-05 21:00 - 2016-02-21 16:33 - 000009216 ____R () C:\Users\Pedraza\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-08-12 15:01 - 2015-08-12 15:01 - 000000000 ____R () C:\Users\Pedraza\AppData\Local\{124D4E24-BFA9-4A41-A096-B6F6B426E767}
2015-08-14 23:17 - 2015-08-14 23:17 - 000000000 ____R () C:\Users\Pedraza\AppData\Local\{8152E4D6-FFDB-47BF-9AB5-48B81B353353}
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo
ContextMenuHandlers4: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> Ningún archivo
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\camsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dps => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\lfsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\semgrsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\shellhwdetection => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TokenBroker => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
C:\Program Files\Common Files\AV
C:\Program Files\AVAST Software
C:\Program Files\BDServices
CMD: ipconfig /flushdns
CMD: ipconfig /renew
CMD: bitsadmin /reset /allusers
CMD: netsh winsock reset
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
RemoveProxy:
EmptyTemp:
Hosts:
END
- Lo guarda bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.
Nota: Es necesario que el ejecutable Frst.exe/Frst64.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no la herramienta no trabajará.
3.- Inicie su ordenador en >>> Modo Seguro >>> Aplicable a Windows 10. o Windows 7.
- Ejecute Frst.exe o Frst64.exe. según el caso.
- Presione el botón Fix/Corregir y aguarde a que termine.
- La Herramienta guardará el reporte en su escritorio (Fixlog.txt).
- Reinicia y lo pega en su próxima respuesta.
Nos comentas como sientes el equipo.
Salu2