Fix result of Farbar Recovery Scan Tool (x86) Version: 25-04-2019
Ran by VICKYs (27-04-2019 11:54:28) Run:1
Running from C:\Documents and Settings\VICKYs\Escritorio\Antivirus
Loaded Profiles: VICKYs (Available Profiles: VICKYs & Administrador)
Boot Mode: Safe Mode (minimal)
==============================================
fixlist content:
*****************
Start
CreateRestorePoint:
CloseProcesses:
HKLM\...\Run: [UserFaultCheck] => %systemroot%\system32\dumprep 0 -u
HKLM\...\Run: [KernelFaultCheck] => %systemroot%\system32\dumprep 0 -k
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {1d7642a6-c6dc-11e5-9de5-00268229c54e} - F:\AutoRun.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {1d7642a8-c6dc-11e5-9de5-00268229c54e} - F:\AutoRun.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {26e38160-add6-11e5-9dcd-00268229c54e} - F:\AutoRun.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {63d3b732-e5f0-11e8-9eaf-00268229c54e} - F:\LG_PC_Programs.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {69ad677e-625a-11e5-9db8-00268229c54e} - G:\AutoRun.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {69ad6781-625a-11e5-9db8-00268229c54e} - G:\AutoRun.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {d0d0be06-aa49-11e5-9dca-00268229c54e} - F:\AutoRun.exe
HKU\S-1-5-21-839522115-746137067-1417001333-1003\...\MountPoints2: {ec7c074a-91b5-11e3-9c9a-00268229c54e} - F:\MotorolaDeviceManagerSetup.exe -a
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\searchinstaller.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\searchsettings.exe: [Debugger] tasklist.exe
IFEO\searchsettings64.exe: [Debugger] tasklist.exe
IFEO\umbrella.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
IFEO\websteroids.exe: [Debugger] tasklist.exe
IFEO\websteroidsservice.exe: [Debugger] tasklist.exe
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <==== ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx
S3 btaudio; system32\drivers\btaudio.sys [X]
S3 BTCFilterService; system32\DRIVERS\motfilt.sys [X]
S3 BTDriver; system32\DRIVERS\btport.sys [X]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [X]
S3 btwhid; system32\DRIVERS\btwhid.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S4 IntelIde; no ImagePath
S3 motccgp; system32\DRIVERS\motccgp.sys [X]
S3 MotoSwitchService; system32\DRIVERS\motswch.sys [X]
S3 Motousbnet; system32\DRIVERS\Motousbnet.sys [X]
S3 motusbdevice; system32\DRIVERS\motusbdevice.sys [X]
U1 WS2IFSL; no ImagePath
2014-02-01 04:19 - 2019-04-24 16:01 - 000000000 _____ () C:\Documents and Settings\VICKYs\TempWmicBatchFile.bat
2014-02-01 02:48 - 2014-02-01 02:49 - 050053120 _____ () C:\Archivos de programa\GUT17A.tmp
WMI:subscription\__FilterToConsumerBinding->\\.\root\subscription:MSFT_UCScenarioControl.Name=\"Microsoft WMI Updating Consumer Scenario Control\"",Filter="\\.\root\subscription:__EventFilter.Name=\"Microsoft WMI Updating Consumer Scenario Control\"::
WMI:subscription\__EventFilter->Microsoft WMI Updating Consumer Scenario Control::[Query => SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario']
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END
*****************
Error: Restore point can only be created in normal mode.
Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\UserFaultCheck" => removed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KernelFaultCheck" => removed successfully.
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1d7642a6-c6dc-11e5-9de5-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{1d7642a6-c6dc-11e5-9de5-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1d7642a8-c6dc-11e5-9de5-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{1d7642a8-c6dc-11e5-9de5-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{26e38160-add6-11e5-9dcd-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{26e38160-add6-11e5-9dcd-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{63d3b732-e5f0-11e8-9eaf-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{63d3b732-e5f0-11e8-9eaf-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{69ad677e-625a-11e5-9db8-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{69ad677e-625a-11e5-9db8-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{69ad6781-625a-11e5-9db8-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{69ad6781-625a-11e5-9db8-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d0d0be06-aa49-11e5-9dca-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{d0d0be06-aa49-11e5-9dca-00268229c54e} => not found
HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ec7c074a-91b5-11e3-9c9a-00268229c54e} => removed successfully.
HKLM\Software\Classes\CLSID\{ec7c074a-91b5-11e3-9c9a-00268229c54e} => not found
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\dprotectsvc.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\jumpflip => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchinstaller.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotector.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchsettings.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchsettings64.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\umbrella.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\utiljumpflip.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\volaro => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\vonteera => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\websteroids.exe => removed successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\websteroidsservice.exe => removed successfully.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Local Page => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs\\Tabs => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670} => removed successfully.
HKLM\Software\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670} => not found
HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - hxxp://clients2.google.com/service/update2/crx => Error: No automatic fix found for this entry.
HKLM\System\CurrentControlSet\Services\btaudio => removed successfully.
btaudio => service removed successfully.
HKLM\System\CurrentControlSet\Services\BTCFilterService => removed successfully.
BTCFilterService => service removed successfully.
HKLM\System\CurrentControlSet\Services\BTDriver => removed successfully.
BTDriver => service removed successfully.
HKLM\System\CurrentControlSet\Services\BTWDNDIS => removed successfully.
BTWDNDIS => service removed successfully.
HKLM\System\CurrentControlSet\Services\btwhid => removed successfully.
btwhid => service removed successfully.
HKLM\System\CurrentControlSet\Services\ew_hwusbdev => removed successfully.
ew_hwusbdev => service removed successfully.
HKLM\System\CurrentControlSet\Services\huawei_cdcacm => removed successfully.
huawei_cdcacm => service removed successfully.
HKLM\System\CurrentControlSet\Services\huawei_enumerator => removed successfully.
huawei_enumerator => service removed successfully.
HKLM\System\CurrentControlSet\Services\IntelIde => removed successfully.
IntelIde => service removed successfully.
HKLM\System\CurrentControlSet\Services\motccgp => removed successfully.
motccgp => service removed successfully.
HKLM\System\CurrentControlSet\Services\MotoSwitchService => removed successfully.
MotoSwitchService => service removed successfully.
HKLM\System\CurrentControlSet\Services\Motousbnet => removed successfully.
Motousbnet => service removed successfully.
HKLM\System\CurrentControlSet\Services\motusbdevice => removed successfully.
motusbdevice => service removed successfully.
HKLM\System\CurrentControlSet\Services\WS2IFSL => removed successfully.
WS2IFSL => service removed successfully.
C:\Documents and Settings\VICKYs\TempWmicBatchFile.bat => moved successfully
C:\Archivos de programa\GUT17A.tmp => moved successfully
"\\.\root\subscription:MSFT_UCScenarioControl.Name=\"Microsoft WMI Updating Consumer Scenario Control\"",Filter="\\.\root\subscription:__EventFilter.Name=\"Microsoft WMI Updating Consumer Scenario Control\"" => removed successfully.
"Microsoft WMI Updating Consumer Scenario Control" => removed successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.
========= RemoveProxy: =========
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully.
"HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully.
"HKU\S-1-5-21-839522115-746137067-1417001333-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully.
========= End of RemoveProxy: =========
========= netsh winsock reset =========
Restablecer satisfactoriamente el cat logo Winsock.
Debe reiniciar el equipo para finalizar el restablecimiento.
========= End of CMD: =========
========= ipconfig /renew =========
Configuración IP de Windows
Error interno: Solicitud no compatible.
Póngase en contacto con los servicios de soporte técnico de Microsoft para
obtener ayuda.
Información adicional: no se puede encontrar el nombre de host.
========= End of CMD: =========
========= ipconfig /flushdns =========
Configuración IP de Windows
Error interno: Solicitud no compatible.
Póngase en contacto con los servicios de soporte técnico de Microsoft para
obtener ayuda.
Información adicional: no se puede encontrar el nombre de host.
========= End of CMD: =========
========= bitsadmin /reset /allusers =========
"bitsadmin" no se reconoce como un comando interno o externo,
programa o archivo por lotes ejecutable.
========= End of CMD: =========
========= netsh advfirewall reset =========
No se encuentra el comando: advfirewall reset
========= End of CMD: =========
========= netsh advfirewall set allprofiles state ON =========
No se encuentra el comando: advfirewall set allprofiles state ON
========= End of CMD: =========
========= netsh int ipv4 reset =========
No se encuentra el comando: int ipv4 reset
========= End of CMD: =========
========= netsh int ipv6 reset =========
IPv6 no est instalado.
========= End of CMD: =========
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStoree, IE Recovery, AppCache, Feeds Cache, Thumbcache => 9331 B
Java, Flash, Steam htmlcache => 740 B
Windows/system/dllcache/drivers => 13435909 B
Edge => 0 B
Chrome => 299898004 B
Firefox => 0 B
Opera => 17651537 B
Temp, IE cache, history, cookies, recent:
Documents and Settings => 0 B
Default User => 66164 B
All Users => 0 B
systemprofile => 297477671 B
LocalService => 12088046 B
NetworkService => 66164 B
VICKYs => 12316117 B
Administrador => 66164 B
RecycleBin => 7487 B
EmptyTemp: => 622.8 MB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 11:55:28 ====
No se ha solucionado el problema inicial…