==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => -> No File
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers1: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers1: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-04-26] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers2: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-04-26] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers4: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-04-26] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.27.0.dll [2019-04-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers6: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers6: [Kaspersky Anti-Virus 19.0.0] -> {755D388B-420B-4692-A974-84AAF0E577D3} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Free 19.0.0\x64\ShellEx.dll [2019-04-26] (Kaspersky Lab -> AO Kaspersky Lab)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2018-09-30] (win.rar GmbH -> Alexander Roshal)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2014-10-01 19:19 - 2010-11-20 15:26 - 000503296 _____ (Microsoft Windows -> Microsoft Corporation) [File not signed] C:\Windows\system32\imapi2.dll
2009-07-14 01:55 - 2009-07-14 03:40 - 000053248 _____ (Microsoft Corporation) [File not signed] C:\Windows\System32\AltTab.dll
2014-10-01 19:19 - 2010-11-20 15:27 - 001808384 _____ (Microsoft Corporation) [File not signed] C:\Windows\System32\pnidui.dll
2014-10-01 19:16 - 2010-11-20 15:24 - 000721408 _____ (Microsoft Corporation) [File not signed] C:\Windows\System32\bthprops.cpl
2017-07-26 09:58 - 2017-07-26 09:58 - 000192200 _____ (Huawei Software Technologies Co., LTD. -> ) [File not signed] C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE trusted site: HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\dell.com -> dell.com
IE trusted site: HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\fnmt.es -> hxxp://fnmt.es
IE trusted site: HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\fnmt.es -> hxxps://fnmt.es
IE trusted site: HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\fnmt.gob.es -> hxxps://fnmt.gob.es
IE trusted site: HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\fnmt.gob.es -> hxxp://fnmt.gob.es
IE trusted site: HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\localhost -> localhost
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2016-06-09 16:29 - 000000035 _____ C:\Windows\system32\drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\AutoFirma\AutoFirma;C:\Program Files (x86)\AOMEI Backupper
HKU\S-1-5-21-3820194532-172373095-3644825477-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\meryglez\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
If an entry is included in the fixlist, it will be removed.
MSCONFIG\Services: BsrSvc => 3
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^TMMonitor.lnk => C:\Windows\pss\TMMonitor.lnk.CommonStartup
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: CCleaner Monitoring =>
MSCONFIG\startupreg: CCleaner Smart Cleaning => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: Dropbox => "C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" /systemstartup
MSCONFIG\startupreg: GoogleChromeAutoLaunch_21D46F547B6A55BB173786BE090FBD6F => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5
MSCONFIG\startupreg: GUDelayStartup => "D:\Glary Utilities 5\StartupManager.exe" -delayrun
MSCONFIG\startupreg: HotKeysCmds => C:\Windows\system32\hkcmd.exe
MSCONFIG\startupreg: IgfxTray => C:\Windows\system32\igfxtray.exe
MSCONFIG\startupreg: MSC => "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{0424451A-ECF0-4FF8-8DD7-408F8471EBB3}] => (Allow) D:\TotalMedia.exe (ArcSoft, Inc.) [File not signed]
FirewallRules: [{85F44B3A-C332-43D0-ACE6-E1731895848D}] => (Allow) D:\TotalMedia.exe (ArcSoft, Inc.) [File not signed]
FirewallRules: [{9BE2636F-2C3E-4D50-AF46-85F5D9119441}] => (Allow) C:\Users\meryglez\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{0AFE1D9C-ED8C-4F37-8029-40764751F3B4}] => (Allow) C:\Users\meryglez\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{2D06B236-FAB7-4535-BEE6-B006AB1AECE5}G:\descargass\emule\emule.exe] => (Allow) G:\descargass\emule\emule.exe No File
FirewallRules: [UDP Query User{0C785867-5C6C-4E3F-B966-6E2871209E40}G:\descargass\emule\emule.exe] => (Allow) G:\descargass\emule\emule.exe No File
FirewallRules: [{A247B668-4499-40C2-A6F5-997DBC435C03}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B4EA54BC-2548-4270-BA5C-FDC56AF1421B}] => (Allow) LPort=2869
FirewallRules: [{0C8C7F09-2F80-4D0C-97B8-94C2AA2E5DE8}] => (Allow) LPort=1900
FirewallRules: [{EB58FE34-DB38-48A0-B495-F23DD4F57485}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0DF730DA-1B7A-45F8-974C-2BF15F39BF66}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5C0D258B-25F7-4A8D-A46C-4F0D7CDC92F3}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F171DD54-7DF2-4C12-AD7D-BCB4CAFFC5CF}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{822B254D-45B0-46A0-AA0B-3A55AA546B2D}] => (Allow) LPort=1688
FirewallRules: [{531A2F23-320D-40EC-B836-6931F5ADAD86}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{52FC5FC3-2A7E-49AE-BB4E-F7E4D120D3C5}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8EEB97C4-069C-40AF-8B7A-7064CADE8116}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0CEC7FD4-2D6B-47B5-8942-8622CD9FB2DC}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{E87D0A2E-5593-4641-A553-7378B7A0B94A}C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.7_42331.exe] => (Allow) C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.7_42331.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{E0E728A8-A380-428F-A1D2-88C871B299E1}C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.7_42331.exe] => (Allow) C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.7_42331.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{198BB079-CB56-439C-9FEF-9C3C842E7B5D}C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.9_42974.exe] => (Block) C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.9_42974.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [UDP Query User{37D4A527-2DC6-4EA4-A771-990968B8C131}C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.9_42974.exe] => (Block) C:\users\meryglez\appdata\roaming\bittorrent\updates\7.9.9_42974.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{EDDA2B4D-22B3-473A-B213-471BE69EEE3B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B9B93287-3F17-469E-B952-227C3A318959}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A5020342-A229-4014-9BF5-CE3AC4E1B028}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E10282C1-B137-4D6B-8D44-04330CE007BF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{B1CC1D17-E5EF-404E-8EF6-328184EE9F74}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{82F0561B-A148-416E-8B88-EDF611AF7DE0}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{6383BFA3-4DAD-4620-9A8E-1B9EC5334CFC}] => (Allow) C:\Program Files\HP\HP DeskJet 3700 series\Bin\DeviceSetup.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{BEB46EA7-C0BA-4EED-BE32-FD55CECD182C}] => (Allow) LPort=5357
FirewallRules: [{F4E88682-CBAC-4E40-B49E-50419865B331}] => (Allow) C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> HP Inc.)
FirewallRules: [{D41E602C-C18B-41A7-B1FA-F536F785A37E}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{33011905-4CB8-4082-8536-FB17DB1F179A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{778771EB-884F-45A9-BBF1-E96CAC870933}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{17BA037D-5CD0-4573-8EDD-BA519A05D126}C:\program files\videolan\vlc\vlc.exe] => (Block) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{8005633C-F969-4E2C-8631-A397F44C9FC0}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{792121B3-13C0-4EF7-B7C0-ABC9B87B5564}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F18FD50B-4AF3-43C7-A10C-7AB78F0FA448}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{7C91D2E8-DD0C-400B-819E-FA0DFB38749B}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{2E3EBCF5-901C-428A-9F7C-3CE396A78CA4}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{E37CF83D-DEED-4D90-935A-8A17507063D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{34A86F64-ABD0-40E6-816B-3BADF6CAB5AA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{BA619A84-EC94-45FE-8FBC-DE28A27C049D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
==================== Restore Points =========================
28-04-2019 17:29:11 Windows Update
29-04-2019 13:41:35 Copias de seguridad de Windows
==================== Faulty Device Manager Devices =============
Name: MpKsl5aeeb8ce
Description: MpKsl5aeeb8ce
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: MpKsl5aeeb8ce
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.==================== Event log errors: =========================
Application errors:
==================
Error: (04/29/2019 01:24:42 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/29/2019 01:21:26 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa FRST64.exe, versión 28.4.2019.0, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.
Identificador de proceso: 1720
Hora de inicio: 01d4fe7b656864e7
Hora de finalización: 293
Ruta de acceso de la aplicación: C:\Users\meryglez\Desktop\FRST64.exe
Identificador de informe: b787e5c2-6a70-11e9-8d27-0014224f0235
Error: (04/28/2019 04:24:10 PM) (Source: ESENT) (EventID: 489) (User: )
Description: taskhost (1644) Al intentar abrir el archivo "C:\Users\meryglez\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat" para acceso de sólo lectura se produjo el error de sistema 32 (0x00000020): "El proceso no tiene acceso al archivo porque está siendo utilizado por otro proceso. ". La operación para abrir el archivo se cerrará con el error -1032 (0xfffffbf8).
Error: (04/28/2019 12:12:29 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/27/2019 01:47:11 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/26/2019 08:35:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: El programa IEXPLORE.EXE, versión 11.0.9600.19326, dejó de interactuar con Windows y se cerró. Para ver si hay más información disponible acerca del problema, compruebe el historial de problemas en el panel de control Centro de actividades.
Identificador de proceso: 17a4
Hora de inicio: 01d4fc5d818f1a9e
Hora de finalización: 0
Ruta de acceso de la aplicación: C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
Identificador de informe:
Error: (04/26/2019 02:20:55 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (04/25/2019 05:52:28 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
System errors:
=============
Error: (04/29/2019 01:07:19 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: El servicio Windows Update no respondió después de iniciar.
Error: (04/29/2019 01:01:34 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
y APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
al usuario NT AUTHORITY\SERVICIO LOCAL con SID (S-1-5-19) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.
Error: (04/29/2019 01:01:28 PM) (Source: DCOM) (EventID: 10016) (User: NT AUTHORITY)
Description: La configuración de permisos específico de la aplicación no concede el permiso Iniciar Local para la aplicación de servidor COM con CLSID
{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}
y APPID
{344ED43D-D086-4961-86A6-1106F4ACAD9B}
al usuario NT AUTHORITY\SYSTEM con SID (S-1-5-18) en la dirección LocalHost (con LRPC). Este permiso de seguridad se puede modificar mediante la herramienta administrativa Servicios de componentes.
Error: (04/29/2019 01:00:32 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio Moon Secure Antivirus Core no pudo iniciarse debido al siguiente error:
El sistema no puede encontrar el archivo especificado.
Error: (04/29/2019 01:00:21 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: El servicio Microsoft Antimalware Service se cerró con el siguiente error:
%%-2147024894 = El sistema no puede encontrar el archivo especificado.
Error: (04/28/2019 09:56:34 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: El servidor {752073A1-23F2-4396-85F0-8FDB879ED0ED} no se registró con DCOM dentro del tiempo de espera requerido.
Error: (04/28/2019 09:56:09 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: El servicio Instalador de módulos de Windows se cerró con el siguiente error:
Recursos insuficientes en el sistema para completar el servicio solicitado.
Error: (04/28/2019 09:37:14 PM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: El servicio Windows Update no respondió después de iniciar.
Windows Defender:
===================================
Date: 2019-04-24 15:35:19.830
Description:
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{7BCAF54E-13C2-4B55-A76C-03F1A4CB7C37}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:meryglez-PC\meryglez
Date: 2018-08-31 10:32:08.815
Description:
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{63302126-55F2-45BB-905F-DD0C8DAF921A}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:meryglez-PC\meryglez
Date: 2018-06-13 13:15:50.381
Description:
Windows Defender detectó spyware u otro software potencialmente no deseado.
Para obtener más información, consulte lo siguiente:
http://go.microsoft.com/fwlink/?linkid=37020&name=SoftwareBundler:Win32/ICLoader&threatid=222548
Nombre:SoftwareBundler:Win32/ICLoader
Id.:222548
Gravedad:Alta
Categoría:Software que instala varios programas
Ruta de acceso encontrada:containerfile:D:\descargas\Amiti_Antivirus_24_0_340.rar;file:D:\descargas\Amiti_Antivirus_24_0_340.rar->Amiti_Antivirus_24_0_340.exe;filelocalcopy:C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{518B23F0-79A6-4E94-9E32-505528792A8F}-Amiti_Antivirus_24_0_340.rar;webfile:C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{518B23F0-79A6-4E94-9E32-505528792A8F}-Amiti_Antivirus_24_0_340.rar|http://ec2-18-196-203-238.eu-central-1.compute.amazonaws.com/find/9b147f9fa6258da860fca3d791602670/result-495358845.dl?source=direct&return_url=http{D0AEB633-EFB9-44AB-8205-8CB1CCBA8E81}A6.1.7601.18170F6.1.7601.18170Fdownload.ap.bittorrent.com6.1.7601.18170Ftrack6.1.7601.18170Fstable6.1.7601.18170Fendpoint6.1.7601.18170Futorrent6.1.7601.18170Fos6.1.7601.18170Fwindows;webfile:D:\descargas\Amiti_Antivirus_24_0_340.rar|http://ec2-18-196-203-238.eu-central-1.compute.amazonaws.com/find/9b147f9fa6258da860fca3d791602670/result-495358845.dl?source=direct&return_url=http{D0AEB633-EFB9-44AB-8205-8CB1CCBA8E81}A6.1.7601.18170F6.1.7601.18170Fdownload.ap.bittorrent.com6.1.7601.18170Ftrack6.1.7601.18170Fstable6.1.7601.18170Fendpoint6.1.7601.18170Futorrent6.1.7601.18170Fos6.1.7601.18170Fwindows
Tipo de detección:Concreto
Origen de detección:Descargas y datos adjuntos
Estado:Desconocido
Usuario:meryglez-PC\meryglez
Nombre de proceso:C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
Date: 2016-01-25 10:19:08.794
Description:
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{E1508956-534A-4319-885F-4A857BE37A4A}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:meryglez-PC\meryglez
Date: 2016-01-25 10:10:15.681
Description:
El examen de Windows Defender se detuvo antes de completarse.
Id. de examen:{FBC708D9-68F2-4299-88C6-DE11E6893A16}
Tipo de examen:AntiSpyware
Parámetros de examen:Examen rápido
Usuario:meryglez-PC\meryglez
Date: 2018-07-04 13:47:21.336
Description:
Windows Defender encontró un error al intentar actualizar las firmas.
Nueva versión de firma:1.271.442.0
Versión de firma anterior:1.269.1961.0
Origen de actualización:Usuario
Tipo de firma:AntiSpyware
Tipo de actualización:Diferencia
Usuario:NT AUTHORITY\SYSTEM
Versión de motor actual:1.1.15000.2
Versión de motor anterior:1.1.14901.4
Código de error:0x80070666
Descripción de error:Ya está instalada otra versión de este producto. La instalación de esta versión no puede continuar. Para configurar o quitar la versión existente de este producto, use Agregar o quitar programas del Panel de control.
Date: 2018-07-04 13:47:21.320
Description:
Windows Defender encontró un error al intentar actualizar el motor.
Nueva versión de motor:1.1.15000.2
Versión de motor anterior:1.1.14901.4
Origen de actualización:Usuario
Usuario:NT AUTHORITY\SYSTEM
Código de error:0x80070666
Descripción de error:Ya está instalada otra versión de este producto. La instalación de esta versión no puede continuar. Para configurar o quitar la versión existente de este producto, use Agregar o quitar programas del Panel de control.
Date: 2017-03-20 19:05:18.811
Description:
El motor de %1 se detuvo debido a un error inesperado.
Tipo de error:%5
Código de excepción:%6
Recurso:%3
Date: 2017-03-20 19:03:13.705
Description:
El motor de %1 se detuvo debido a un error inesperado.
Tipo de error:%5
Código de excepción:%6
Recurso:%3
Date: 2017-03-20 19:03:12.661
Description:
El motor de %1 se detuvo debido a un error inesperado.
Tipo de error:%5
Código de excepción:%6
Recurso:%3
CodeIntegrity:
===================================
Date: 2017-06-22 19:03:43.916
Description:
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Users\meryglez\AppData\Local\Temp\DellBIOS.Sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.
Date: 2017-06-22 19:03:43.774
Description:
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Users\meryglez\AppData\Local\Temp\DellBIOS.Sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.
Date: 2016-06-13 19:44:13.427
Description:
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe porque el conjunto de hashes de imagen por página no se encuentra en el sistema.
Date: 2016-06-13 19:44:12.933
Description:
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe porque el conjunto de hashes de imagen por página no se encuentra en el sistema.
Date: 2016-06-13 19:44:12.465
Description:
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe porque el conjunto de hashes de imagen por página no se encuentra en el sistema.
Date: 2016-06-13 19:44:12.192
Description:
Integridad de código no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe porque el conjunto de hashes de imagen por página no se encuentra en el sistema.
Date: 2016-06-09 17:31:40.840
Description:
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Users\meryglez\AppData\Local\Temp\DellBIOS.Sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.
Date: 2016-06-09 17:31:40.756
Description:
Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume3\Users\meryglez\AppData\Local\Temp\DellBIOS.Sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.
==================== Memory info ===========================
BIOS: Dell Inc. DELL - 7 10/13/2005
Motherboard: Dell Inc. 0F8098
Processor: Intel(R) Pentium(R) 4 CPU 3.40GHz
Percentage of memory in use: 90%
Total physical RAM: 2038.14 MB
Available physical RAM: 186.13 MB
Total Virtual: 4463.93 MB
Available Virtual: 579.81 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:149.01 GB) (Free:46.48 GB) NTFS ==>[system with boot components (obtained from drive)]
Drive d: () (Fixed) (Total:931.36 GB) (Free:693.66 GB) NTFS
6e6f6e6963}\ ((H:)) (Fixed) (Total:0.15 GB) (Free:0.03 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: EBA6C63F)
Partition 1: (Active) - (Size=149 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 149 GB) (Disk ID: AFBE7972)
Partition 1: (Active) - (Size=149 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================Hola
Utilizas como antivirus Baidu?
Te has dejado parte de los dos reportes sin ponerlo.
Adjunta los dos reportes en tu próxima respuesta.
Un saludo
FRST.txt (77,6 KB) Addition.txt (46,2 KB) BAIDU LO TUVE ANTERIORMENTE. AHORA NO ESTA BIEN ADJUNTADO? SALU2
Hola
MUY Importante 
Realiza una copia de seguridad del registro :
-
Para hacerlo descarga
DelFix.exe( en tu escritorio). -
Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).
-
Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO.
-
Pulsar en Run.
Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.
A continuación inicia tu equipo desde el Modo Seguro de Windows sin función de red
Con los demás programas cerrados ve a Inicio Ejecutar y escribe Notepad.exe.
- Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\MountPoints2: {1e37cadd-7cc1-11e6-bccd-0014224f0235} - H:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A14B03 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [205824 2009-05-29] () [File not signed]
HKLM\...\Drivers32: [VIDC.YV12] => C:\Windows\SysWOW64\yv12vfw.dll [217088 2004-01-25] (www.helixcommunity.org) [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [151552 2010-01-17] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [749056 2010-02-28] (hxxp://www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [85504 2010-03-10] () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Task: {07138346-D9DA-4F37-B374-260C49DD1335} - System32\Tasks\{6070CBF8-8B9D-4725-856D-A1756F05EDCF} => C:\Windows\system32\pcalua.exe -a "C:\Users\meryglez\Desktop\wmp11-windowsxp-x86-ES-ES (2).exe" -d C:\Users\meryglez\Desktop
Task: {0F868A52-0145-4229-AB39-B969AE2BB634} - System32\Tasks\Baidu Antivirus Update => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.148966.0\BavUpdater.exe
Task: {8E148D2C-DCDA-47FA-8A7F-D8328C0AE40F} - System32\Tasks\{CE8F039F-1EE9-4849-AA0F-A2F251E9E77D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe" -c REMOVESERIALNUMBER="9M03-01A5-0WA4-5TAA-KA2P-8WZ5-CLA7-6122"
Task: {BEAB00EE-1EB0-4401-8B23-A6965464AAE7} - System32\Tasks\KMSpico Updater => C:\Windows\system32\wscript.exe //nologo //E:jscript //B "C:\Program Files (x86)\KMSpico Updater\updater.ini" <==== ATTENTION
Task: {BF7DFB42-A9C6-4668-A336-0534CF74EB95} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {EB766F4E-C494-4E98-B069-A56620FA9254} - System32\Tasks\{46CCA089-3B0C-4397-8D6D-6D58B511F39E} => C:\Windows\system32\pcalua.exe -a "C:\Users\meryglez\Downloads\wmp11-windowsxp-x86-ES-ES (1).exe" -d C:\Users\meryglez\Downloads
Task: C:\Windows\Tasks\KMSpico Updater.job => Wscript.exe N/nologo /E:jscript /B C:\Program Files (x86)\KMSpico Updater\updater.ini <==== ATTENTION
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-04-28] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-04-28] <==== ATTENTION
CHR Extension: (Chrome Media Router) - C:\Users\meryglez\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-26]
S2 msav; C:\Program Files (x86)\Moon Secure Antivirus\msavcore.exe [X]
S3 VClone; C:\Windows\System32\DRIVERS\VClone.sys [34816 2013-07-24] (Elaborate Bytes AG) [File not signed]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S1 MpKsl5aeeb8ce; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{413AFE93-7823-4504-B847-C00AD3B1835D}\MpKsl5aeeb8ce.sys [X]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => -> No File
ContextMenuHandlers1: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers1: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers2: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers4: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers6: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers6: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
FirewallRules: [{0424451A-ECF0-4FF8-8DD7-408F8471EBB3}] => (Allow) D:\TotalMedia.exe (ArcSoft, Inc.) [File not signed]
FirewallRules: [{85F44B3A-C332-43D0-ACE6-E1731895848D}] => (Allow) D:\TotalMedia.exe (ArcSoft, Inc.) [File not signed]
FirewallRules: [TCP Query User{2D06B236-FAB7-4535-BEE6-B006AB1AECE5}G:\descargass\emule\emule.exe] => (Allow) G:\descargass\emule\emule.exe No File
FirewallRules: [UDP Query User{0C785867-5C6C-4E3F-B966-6E2871209E40}G:\descargass\emule\emule.exe] => (Allow) G:\descargass\emule\emule.exe No File
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
ENDGuárdalo bajo el nombre de FIXLIST.TXT en el escritorio Esto es muy importante.
Nota Es importante que la herramienta FRST.exe (Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.
- Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).
- Presionar el botón FIX y aguardar a que termine.
- La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).
Pega el contenido de este fichero en tu próxima respuesta.
Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.
Un saludo
Fix result of Farbar Recovery Scan Tool (x64) Version: 28.04.2019
Ran by meryglez (07-05-2019 11:18:37) Run:1
Running from C:\Users\meryglez\Desktop
Loaded Profiles: meryglez (Available Profiles: meryglez)
Boot Mode: Safe Mode (minimal)
==============================================
fixlist content:
*****************
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKU\S-1-5-21-3820194532-172373095-3644825477-1001\...\MountPoints2: {1e37cadd-7cc1-11e6-bccd-0014224f0235} - H:\AutoRun.exe {D2D77DC2-8299-11D1-8949-444553540000} 5.2066.1.A14B03 PID_0083 {01D42BF0-ED08-463f-8A28-99EB6FEE962B}
HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [205824 2009-05-29] () [File not signed]
HKLM\...\Drivers32: [VIDC.YV12] => C:\Windows\SysWOW64\yv12vfw.dll [217088 2004-01-25] (www.helixcommunity.org) [File not signed]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [151552 2010-01-17] (fccHandler) [File not signed]
HKLM\...\Drivers32: [msacm.lameacm] => C:\Windows\SysWOW64\lameACM.acm [749056 2010-02-28] (hxxp://www.mp3dev.org/) [File not signed]
HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [85504 2010-03-10] () [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Task: {07138346-D9DA-4F37-B374-260C49DD1335} - System32\Tasks\{6070CBF8-8B9D-4725-856D-A1756F05EDCF} => C:\Windows\system32\pcalua.exe -a "C:\Users\meryglez\Desktop\wmp11-windowsxp-x86-ES-ES (2).exe" -d C:\Users\meryglez\Desktop
Task: {0F868A52-0145-4229-AB39-B969AE2BB634} - System32\Tasks\Baidu Antivirus Update => C:\Program Files (x86)\Baidu Security\Baidu Antivirus\5.4.3.148966.0\BavUpdater.exe
Task: {8E148D2C-DCDA-47FA-8A7F-D8328C0AE40F} - System32\Tasks\{CE8F039F-1EE9-4849-AA0F-A2F251E9E77D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Common Files\Nero\Nero ProductInstaller 4\SetupX.exe" -c REMOVESERIALNUMBER="9M03-01A5-0WA4-5TAA-KA2P-8WZ5-CLA7-6122"
Task: {BEAB00EE-1EB0-4401-8B23-A6965464AAE7} - System32\Tasks\KMSpico Updater => C:\Windows\system32\wscript.exe //nologo //E:jscript //B "C:\Program Files (x86)\KMSpico Updater\updater.ini" <==== ATTENTION
Task: {BF7DFB42-A9C6-4668-A336-0534CF74EB95} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {EB766F4E-C494-4E98-B069-A56620FA9254} - System32\Tasks\{46CCA089-3B0C-4397-8D6D-6D58B511F39E} => C:\Windows\system32\pcalua.exe -a "C:\Users\meryglez\Downloads\wmp11-windowsxp-x86-ES-ES (1).exe" -d C:\Users\meryglez\Downloads
Task: C:\Windows\Tasks\KMSpico Updater.job => Wscript.exe N/nologo /E:jscript /B C:\Program Files (x86)\KMSpico Updater\updater.ini <==== ATTENTION
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=3.0.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [No File]
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2019-04-28] <==== ATTENTION (Points to *.cfg file)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2019-04-28] <==== ATTENTION
CHR Extension: (Chrome Media Router) - C:\Users\meryglez\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-26]
S2 msav; C:\Program Files (x86)\Moon Secure Antivirus\msavcore.exe [X]
S3 VClone; C:\Windows\System32\DRIVERS\VClone.sys [34816 2013-07-24] (Elaborate Bytes AG) [File not signed]
S3 dbx; system32\DRIVERS\dbx.sys [X]
S1 MpKsl5aeeb8ce; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{413AFE93-7823-4504-B847-C00AD3B1835D}\MpKsl5aeeb8ce.sys [X]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers: [BaiduAntivirusIconLock] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => -> No File
ContextMenuHandlers1: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers1: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers2: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
ContextMenuHandlers4: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => -> No File
ContextMenuHandlers6: [AmitiAntivirus] -> {1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => -> No File
ContextMenuHandlers6: [Baidu_Scan] -> {0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => -> No File
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> No File
FirewallRules: [{0424451A-ECF0-4FF8-8DD7-408F8471EBB3}] => (Allow) D:\TotalMedia.exe (ArcSoft, Inc.) [File not signed]
FirewallRules: [{85F44B3A-C332-43D0-ACE6-E1731895848D}] => (Allow) D:\TotalMedia.exe (ArcSoft, Inc.) [File not signed]
FirewallRules: [TCP Query User{2D06B236-FAB7-4535-BEE6-B006AB1AECE5}G:\descargass\emule\emule.exe] => (Allow) G:\descargass\emule\emule.exe No File
FirewallRules: [UDP Query User{0C785867-5C6C-4E3F-B966-6E2871209E40}G:\descargass\emule\emule.exe] => (Allow) G:\descargass\emule\emule.exe No File
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************
Error: Restore point can only be created in normal mode.
Processes closed successfully.
HKU\S-1-5-21-3820194532-172373095-3644825477-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1e37cadd-7cc1-11e6-bccd-0014224f0235} => removed successfully
HKLM\Software\Classes\CLSID\{1e37cadd-7cc1-11e6-bccd-0014224f0235} => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\\VIDC.XVID" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\\VIDC.YV12" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\\msacm.ac3acm" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\\msacm.lameacm" => not found
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32\\VIDC.FFDS" => not found
C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{07138346-D9DA-4F37-B374-260C49DD1335}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{07138346-D9DA-4F37-B374-260C49DD1335}" => removed successfully
C:\Windows\System32\Tasks\{6070CBF8-8B9D-4725-856D-A1756F05EDCF} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{6070CBF8-8B9D-4725-856D-A1756F05EDCF}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0F868A52-0145-4229-AB39-B969AE2BB634}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0F868A52-0145-4229-AB39-B969AE2BB634}" => removed successfully
C:\Windows\System32\Tasks\Baidu Antivirus Update => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Baidu Antivirus Update" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8E148D2C-DCDA-47FA-8A7F-D8328C0AE40F}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E148D2C-DCDA-47FA-8A7F-D8328C0AE40F}" => removed successfully
C:\Windows\System32\Tasks\{CE8F039F-1EE9-4849-AA0F-A2F251E9E77D} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{CE8F039F-1EE9-4849-AA0F-A2F251E9E77D}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BEAB00EE-1EB0-4401-8B23-A6965464AAE7}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BEAB00EE-1EB0-4401-8B23-A6965464AAE7}" => removed successfully
C:\Windows\System32\Tasks\KMSpico Updater => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KMSpico Updater" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{BF7DFB42-A9C6-4668-A336-0534CF74EB95}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF7DFB42-A9C6-4668-A336-0534CF74EB95}" => removed successfully
C:\Windows\System32\Tasks\AutoKMS => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EB766F4E-C494-4E98-B069-A56620FA9254}" => removed successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB766F4E-C494-4E98-B069-A56620FA9254}" => removed successfully
C:\Windows\System32\Tasks\{46CCA089-3B0C-4397-8D6D-6D58B511F39E} => moved successfully
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{46CCA089-3B0C-4397-8D6D-6D58B511F39E}" => removed successfully
C:\Windows\Tasks\KMSpico Updater.job => moved successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.6 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.8 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.0 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.1 => removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=3.0.2 => removed successfully
C:\Program Files (x86)\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js => moved successfully
C:\Program Files (x86)\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg => moved successfully
CHR Extension: (Chrome Media Router) - C:\Users\meryglez\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-04-26] => Error: No automatic fix found for this entry.
HKLM\System\CurrentControlSet\Services\msav => removed successfully
msav => service removed successfully
HKLM\System\CurrentControlSet\Services\VClone => removed successfully
VClone => service removed successfully
HKLM\System\CurrentControlSet\Services\dbx => removed successfully
dbx => service removed successfully
HKLM\System\CurrentControlSet\Services\MpKsl5aeeb8ce => removed successfully
MpKsl5aeeb8ce => service removed successfully
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => removed successfully
HKLM\Software\Classes\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => not found
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\BaiduAntivirusIconLock => removed successfully
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CC} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\AmitiAntivirus => removed successfully
HKLM\Software\Classes\CLSID\{1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Baidu_Scan => removed successfully
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\EPP => removed successfully
HKLM\Software\Classes\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780} => not found
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\Glary Utilities => removed successfully
HKLM\Software\Classes\CLSID\{B3C418F8-922B-4faf-915E-59BC14448CF7} => not found
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Baidu_Scan => removed successfully
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => not found
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\EPP => removed successfully
HKLM\Software\Classes\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780} => not found
HKLM\Software\Classes\Drive\ShellEx\ContextMenuHandlers\Glary Utilities => removed successfully
HKLM\Software\Classes\CLSID\{B3C418F8-922B-4faf-915E-59BC14448CF7} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\AmitiAntivirus => removed successfully
HKLM\Software\Classes\CLSID\{1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => not found
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\EPP => removed successfully
HKLM\Software\Classes\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\AmitiAntivirus => removed successfully
HKLM\Software\Classes\CLSID\{1763C0A7-C7BF-4a16-9A20-8207A5D6A00F} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Baidu_Scan => removed successfully
HKLM\Software\Classes\CLSID\{0A93904A-BB1E-4a0c-9753-B57B9AE272CB} => not found
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\Glary Utilities => removed successfully
HKLM\Software\Classes\CLSID\{B3C418F8-922B-4faf-915E-59BC14448CF7} => not found
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{0424451A-ECF0-4FF8-8DD7-408F8471EBB3}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{85F44B3A-C332-43D0-ACE6-E1731895848D}" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{2D06B236-FAB7-4535-BEE6-B006AB1AECE5}G:\descargass\emule\emule.exe" => removed successfully
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{0C785867-5C6C-4E3F-B966-6E2871209E40}G:\descargass\emule\emule.exe" => removed successfully
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
========= RemoveProxy: =========
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
"HKU\S-1-5-21-3820194532-172373095-3644825477-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-3820194532-172373095-3644825477-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully
========= End of RemoveProxy: =========
========= netsh winsock reset =========
El cat logo Winsock se restableci¢ correctamente.
Debe reiniciar el equipo para completar el restablecimiento.
========= End of CMD: =========
========= ipconfig /renew =========
Configuraci¢n IP de Windows
========= End of CMD: =========
========= ipconfig /flushdns =========
Configuraci¢n IP de Windows
No se puede vaciar la cach‚ de resoluci¢n de DNS: Error de una funci¢n durante la ejecuci¢n.
========= End of CMD: =========
========= bitsadmin /reset /allusers =========
BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.
BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.
Unable to connect to BITS - 0x8007042c
No se puede iniciar el servicio o grupo de dependencia.
========= End of CMD: =========
========= netsh advfirewall reset =========
Error al intentar ponerse en contacto con el servicio Firewall de Windows. Aseg£rese de que el servicio se est ejecutando e intente la solicitud de nuevo.
========= End of CMD: =========
========= netsh advfirewall set allprofiles state ON =========
Error al intentar ponerse en contacto con el servicio Firewall de Windows. Aseg£rese de que el servicio se est ejecutando e intente la solicitud de nuevo.
========= End of CMD: =========
========= netsh int ipv4 reset =========
No hay valores configurados por el usuario para restablecer.
========= End of CMD: =========
========= netsh int ipv6 reset =========
No hay valores configurados por el usuario para restablecer.
========= End of CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 12886771 B
Java, Flash, Steam htmlcache => 1102 B
Windows/system/drivers => 4673453 B
Edge => 0 B
Chrome => 222746757 B
Firefox => 18810261 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 128 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 963480096 B
meryglez => 3479862 B
RecycleBin => 0 B
EmptyTemp: => 1.1 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 11:20:28 ====
Hola
Como sigue el problema.
Un saludo
ha mejorado bastante,pero el navegador sigue quedándose pillado de vez en cuando, gracias
Hola
Restablece Chrome como se indica aquí >> Restablecer Google Chrome
Comenta como sigue el funcionamiento.
Un saludo
bastante mejor, a ver cuanto dura. veré la posibilidad de reinstalar el w-7, si no pierdo documentacion. muchas gracias daniela por tu ayuda y paciencia. salu2
Hola @corre
Sigue estos pasos, para eliminar las herramientas utilizadas:
Para hacerlo utiliza de nuevo/descarga >> DelFix.exe en tu escritorio.
-
Doble clic para ejecutarlo. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador)
-
Marca todas las casillas, y pulsas en Run
Se abrirá el informe (DelFix.txt), puedes cerrarlo.
Gracias a ti por confiar en ForoSpyware. Ha sido un placer ayudarte 
Nos alegramos que se te haya resuelto :Bien: Damos el tema por solucionado.
Solucionado
Un saludo