Virus en mi pc

Eliminar Malwares
11

Hola

De acuerdo, me comentas y vemos si puedo ayudarte por aquí :+1:

:arrow_forward: MUY Importante :arrow_backward: Realiza una copia de seguridad del registro :

  • Para hacerlo descarga :arrow_forward: DelFix.exe( en tu escritorio).

  • Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona -Ejecutar como Administrador-).

  • Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO.

  • Pulsar en Run.

Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.

A continuación :warning: con los demás programas cerrados ve a :arrow_forward: Inicio :arrow_forward: Ejecutar :arrow_forward: y escribe Notepad.exe.

  • Ahora debes copiar y pegar los códigos/líneas que están en el interior del recuadro de más abajo, dentro del Notepad.
START
CREATERESTOREPOINT:
CLOSEPROCESSES:
HKU\S-1-5-21-2950211697-1468767441-3156804741-500\...\MountPoints2: {6a3fb52c-b3b2-11e7-b3ac-94de80c43434} - L:\HiSuiteDownLoader.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500\...\MountPoints2: {6e486fb0-da4c-11e4-8f1f-94de80c43434} - H:\iLinker.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500\...\MountPoints2: {ac5d9ff9-f739-11e9-a20c-94de80c43434} - H:\LG_PC_Programs.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352\...\MountPoints2: {6a3fb52c-b3b2-11e7-b3ac-94de80c43434} - L:\HiSuiteDownLoader.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352\...\MountPoints2: {6e486fb0-da4c-11e4-8f1f-94de80c43434} - H:\iLinker.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352\...\MountPoints2: {ac5d9ff9-f739-11e9-a20c-94de80c43434} - H:\LG_PC_Programs.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050\...\MountPoints2: {6a3fb52c-b3b2-11e7-b3ac-94de80c43434} - L:\HiSuiteDownLoader.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050\...\MountPoints2: {6e486fb0-da4c-11e4-8f1f-94de80c43434} - H:\iLinker.exe
HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050\...\MountPoints2: {ac5d9ff9-f739-11e9-a20c-94de80c43434} - H:\LG_PC_Programs.exe
CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN
Task: {0590848B-9871-45AB-92A2-82C290DC8F89} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\bahagabe => C:\Program Files (x86)\Common Files\Cemofukoc\bahagabe.exe [476160 2013-05-05] () [Archivo no firmado]
Task: {1F645732-BED9-4BD8-B60F-ED402B524B64} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\laculik => C:\Program Files (x86)\Common Files\Degelahen\laculik.exe [609280 2013-04-18] () [Archivo no firmado]
Task: {22A75FA6-0686-4E3A-803A-F37CE21A37FD} - System32\Tasks\{72D981E8-AD03-4168-9E7E-81701B44FB6F} => C:\Windows\system32\pcalua.exe -a C:\Users\Administrador\Downloads\com.activision.callofduty.shooter_900205109_NormalPackage_2384.exe -d C:\Users\Administrador\Downloads
"C:\Windows\System32\Tasks\{2486AF5C-17EA-A885-6D85-6E98DE5A8CF5}" no pudo ser desbloqueado. <==== ATENCIÓN
Task: {2774E1AE-47AE-4024-99FB-F7CA2140302E} - System32\Tasks\{2486AF5C-17EA-A885-6D85-6E98DE5A8CF5}
Task: {2DEF167A-3F7A-4229-AEDC-6E37A8126625} - System32\Tasks\{2DE7156C-37E6-D178-5D20-22EE22323BB9}\pinotenar => C:\Program Files (x86)\Common Files\Goperasu\pinotenar.exe [498688 2013-04-15] () [Archivo no firmado]
Task: {3268DAE0-9BA2-4DA8-B27F-026F350E252C} - System32\Tasks\{67E0376A-6E98-5592-F1CE-1EC76888F026} => C:\Users\Administrador\AppData\Local\67e0376a6e985592f1ce1ec76888f026\Sidihohena.exe [2068992 2013-04-20] () [Archivo no firmado]
Task: {35F075C8-E004-4F3A-A672-57095783A598} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\kimub => C:\Program Files (x86)\Common Files\Sotola\kimub.exe [684544 2013-04-14] () [Archivo no firmado]
Task: {365B34B3-FB61-4715-B4E5-502808AD6522} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\tebomoc => C:\Program Files (x86)\Common Files\Lanosub\tebomoc.exe [2068992 2013-04-08] () [Archivo no firmado]
Task: {36604D87-D6C2-42F6-B2DF-ACBDE570C227} - System32\Tasks\{2DE7156C-37E6-D178-5D20-22EE22323BB9}\pemega => C:\Program Files (x86)\Common Files\Seharoni\pemega.exe [2170880 2013-04-16] () [Archivo no firmado]
Task: {3D3ADD37-24AB-4A2B-836D-2A1F12631EF6} - \Re-Markable Update -> Ningún archivo <==== ATENCIÓN
Task: {4C9BC620-9390-47CF-BA05-85E72888EAB1} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\coluriboke => C:\Program Files (x86)\Common Files\Kurocir\coluriboke.exe [968704 2013-04-15] () [Archivo no firmado]
Task: {4E875CF5-2FB4-4DE2-B671-D22B551C27EC} - System32\Tasks\ByteFence => C:\Program Files\ByteFence\ByteFence.exe <==== ATENCIÓN
Task: {5AC3722E-9ADB-4AEC-9D43-7BC5BBA4DCE0} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\rotoba => C:\Program Files (x86)\Common Files\Pigocidab\rotoba.exe [2070016 2013-04-19] () [Archivo no firmado]
Task: {7CEEF6C9-8798-41D6-B41F-4C68C0BB372E} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\lobuk => C:\Program Files (x86)\Common Files\Cohina\lobuk.exe [610816 2013-04-12] () [Archivo no firmado]
Task: {7CF2D249-E886-4B1A-9043-4A5F9B467832} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\pifotel => C:\Program Files (x86)\Common Files\Madobep\pifotel.exe [473088 2013-04-26] () [Archivo no firmado]
Task: {7D0F01C6-FD2D-45ED-B4C1-070FA3EE7FCD} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\galalihuhu => C:\Program Files (x86)\Common Files\Gadebece\galalihuhu.exe [540672 2013-05-03] () [Archivo no firmado]
Task: {8AD075E5-C08C-4473-AB85-5218886FA86E} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\kobeno => C:\Program Files (x86)\Common Files\Saganadid\kobeno.exe [660992 2013-04-21] () [Archivo no firmado]
Task: {8D31212C-10A3-45F8-976B-33DA810B2B98} - \tortuga -> Ningún archivo <==== ATENCIÓN
Task: {9EB1CAC6-FDEA-4F3D-B9AB-8E024B3689B0} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\relecalose => C:\Program Files (x86)\Common Files\Napake\relecalose.exe [615424 2013-04-29] () [Archivo no firmado]
Task: {A23C98A2-4402-49A0-932A-0EE7B7A1C7A4} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\sakamihe => C:\Program Files (x86)\Common Files\Lococadotes\sakamihe.exe [879104 2013-04-30] () [Archivo no firmado]
Task: {AB836F59-ADB6-48D6-B63A-2FFFAB5627A5} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\defone => C:\Program Files (x86)\Common Files\Kefusogomu\defone.exe [2237952 2013-04-23] () [Archivo no firmado]
Task: {B21BE3EE-6CD7-42AF-9CFF-1E7CA372EE49} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\ripedocen => C:\Program Files (x86)\Common Files\Hoforet\ripedocen.exe [634368 2013-05-06] () [Archivo no firmado]
Task: {B6C2053E-E76E-440C-9FA1-C839D0EA26A3} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\kifaneno => C:\Program Files (x86)\Common Files\Mosalebodaso\kifaneno.exe [2148352 2013-04-30] () [Archivo no firmado]
Task: {C565CFE1-7CE0-44B8-9DB0-6FF01D1CC828} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\semehalec => C:\Program Files (x86)\Common Files\Kiresamoh\semehalec.exe [619008 2013-04-15] () [Archivo no firmado]
Task: {D7019B12-C7C6-42F3-B87E-44CDA7D40003} - System32\Tasks\{2486AF5C-17EA-A885-6D85-6E98DE5A8CF5}\synhelper => C:\Users\Administrador\AppData\Roaming\Benibol\synhelper.exe [2107904 2013-04-21] () [Archivo no firmado] <==== ATENCIÓN
Task: {DF94F8AB-2289-44EB-9865-9467BC1EC953} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\cobeta => C:\Program Files (x86)\Common Files\Hekadarogade\cobeta.exe [476160 2013-05-03] () [Archivo no firmado]
Task: {FA880010-BFE7-4398-8D17-F900DD5F6864} - System32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}\sicorisebe => C:\Program Files (x86)\Common Files\Loragoponi\sicorisebe.exe [622080 2013-05-06] () [Archivo no firmado]
Task: C:\Windows\Tasks\{2486AF5C-17EA-A885-6D85-6E98DE5A8CF5}.job => C:\Users\ADMINI~1\AppData\Roaming\DOCONO~1\synctask.exe <==== ATENCIÓN
Task: C:\Windows\Tasks\{67E0376A-6E98-5592-F1CE-1EC76888F026}.job => C:\Users\ADMINI~1\AppData\Local\67E037~1\SIDIHO~1.EXE <==== ATENCIÓN
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ar.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_mpcpfs_18_33_10&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dar%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzyyE0D0EzztD0CyEtAyEtAyEyDtDzy0CtN0D0Tzu0StByEtCzztN1L2XzuyEtFtByCtFtDtFtCtDzztN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyC0A0D0EtB0AyEyCtGtBtC0DtBtGzz0AtA0AtGtAtDzy0DtG0BzytByEtAyB0BtA0BtC0Bzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0EyCtCyC0D0FyDtGyB0ByD0EtGyEtByByEtG0AtB0ByDtGyDzz0DyEzz0F0EtByD0CtC0E2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtAyEtAyByBtBzzyB%26cr%3D1850684604%26a%3Dwcg_mpcpfs_18_33_10%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://ar.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_mpcpfs_18_33_10&param1=1&param2=f%3D1%26b%3DIE%26cc%3Dar%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuzyyE0D0EzztD0CyEtAyEtAyEyDtDzy0CtN0D0Tzu0StByEtCzztN1L2XzuyEtFtByCtFtDtFtCtDzztN1L1CzutN1L1G1B1V1N2Y1L1Qzu2SyC0A0D0EtB0AyEyCtGtBtC0DtBtGzz0AtA0AtGtAtDzy0DtG0BzytByEtAyB0BtA0BtC0Bzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2StC0EyCtCyC0D0FyDtGyB0ByD0EtGyEtByByEtG0AtB0ByDtGyDzz0DyEzz0F0EtByD0CtC0E2QtN0A0LzuyEtN1B2Z1V1T1S1NzutN1Q2Z1B1P1RzutCyDtAyEtAyByBtBzzyB%26cr%3D1850684604%26a%3Dwcg_mpcpfs_18_33_10%26os_ver%3D6.1%26os%3DWindows%2B7%2BUltimate
SearchScopes: HKLM -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = 
BHO-x32: Sin Nombre -> {5C255C8A-E604-49b4-9D64-90988571CECB} -> Ningún archivo
FF Homepage: Mozilla\Firefox\Profiles\27em5aya.default -> hxxps://ar.search.yahoo.com/yhs/web?hspart=shnl&hsimp=yhs-001&type=c11045c094222110fb01a412b01&param1=Firefox&param2=1&param3=campaignID%3D564%26UserID%3D1214485376&param4=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
FF SearchPlugin: C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\27em5aya.default\searchplugins\yahoo! provided.xml [2018-11-23]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\lh893hfb.default\extensions => no encontrado
FF HKU\S-1-5-21-2950211697-1468767441-3156804741-500\...\Firefox\Extensions: [[email protected]] - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\lh893hfb.default\extensions => no encontrado
FF HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352\...\Firefox\Extensions: [[email protected]] - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\lh893hfb.default\extensions => no encontrado
FF HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050\...\Firefox\Extensions: [[email protected]] - C:\Users\Administrador\AppData\Roaming\Mozilla\Firefox\Profiles\lh893hfb.default\extensions => no encontrado
FF Plugin HKU\S-1-5-21-2950211697-1468767441-3156804741-500: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Ningún archivo]
FF Plugin HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Ningún archivo]
FF Plugin HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [Ningún archivo]
CHR Extension: (Slither.io) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmplapbomebhmdffmlhgbelgcnfajapj [2016-04-25]
CHR Extension: (Chrome Media Router) - C:\Users\Administrador\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-03-20]
CHR HKLM\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce]
CHR HKLM\...\Chrome\Extension: [bhdinjalofclbacjijgifpahcnjapclb]
CHR HKU\S-1-5-21-2950211697-1468767441-3156804741-500\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce]
CHR HKU\S-1-5-21-2950211697-1468767441-3156804741-500\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bhdinjalofclbacjijgifpahcnjapclb]
CHR HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce]
CHR HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201626352\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bhdinjalofclbacjijgifpahcnjapclb]
CHR HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce]
CHR HKU\S-1-5-21-2950211697-1468767441-3156804741-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-03312020201631050\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bhdinjalofclbacjijgifpahcnjapclb]
CHR HKLM-x32\...\Chrome\Extension: [afgeoapebnkefelmpoepnmjiflidjjce]
CHR HKLM-x32\...\Chrome\Extension: [bhdinjalofclbacjijgifpahcnjapclb]
S4 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [304456 2017-05-30] (Byte Technologies LLC -> ) <==== ATENCIÓN
S2 Mobizen plugin; C:\Program Files (x86)\RSUPPORT\MobizenService\MobizenService.exe [X]
S2 QMEmulatorService; "D:\Program Files\TxGameAssistant\AppMarket_2880215\QMEmulatorService.exe" [X]
U3 axv4f6m2; C:\Windows\System32\Drivers\axv4f6m2.sys [0 0000-00-00] (Microsoft Corporation) <==== ATENCIÓN (cero bytes Archivo/Carpeta)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
S3 zlportio; \??\C:\Program Files (x86)\UltraStar Deluxe\zlportio.sys [X]
2020-03-29 08:58 - 2020-03-29 08:58 - 000002033 _____ C:\Users\Administrador\Desktop\Chromium.lnk
2020-03-29 08:57 - 2020-03-29 08:57 - 000158438 _____ C:\Users\Administrador\AppData\Roaming\Nedeba
2020-03-29 08:57 - 2020-03-29 08:57 - 000158438 _____ C:\Users\Administrador\AppData\Roaming\Hufadu
2020-03-29 08:57 - 2020-03-29 08:57 - 000158438 _____ C:\Users\Administrador\AppData\Roaming\Bomula
2020-03-16 00:10 - 2020-03-31 21:10 - 000000294 _____ C:\Windows\Tasks\{67E0376A-6E98-5592-F1CE-1EC76888F026}.job
2020-03-16 00:10 - 2020-03-16 00:10 - 000003264 _____ C:\Windows\system32\Tasks\{67E0376A-6E98-5592-F1CE-1EC76888F026}
2020-03-16 00:10 - 2020-03-16 00:10 - 000000000 ____D C:\Users\Administrador\AppData\Local\67e0376a6e985592f1ce1ec76888f026
2020-03-16 00:08 - 2020-03-16 00:08 - 000111316 _____ C:\Users\Administrador\AppData\Roaming\Daturoli
2020-03-08 09:55 - 2020-03-08 09:55 - 000294324 _____ C:\Users\Administrador\AppData\Roaming\Recudape
2020-03-31 20:22 - 2017-05-30 03:22 - 000000296 _____ C:\Windows\Tasks\{2486AF5C-17EA-A885-6D85-6E98DE5A8CF5}.job
2020-03-30 07:22 - 2018-12-10 12:07 - 000000000 ____D C:\Windows\system32\Tasks\{156F4622-28DC-4D4C-616A-13B7D7C0E7BC}
2020-03-30 07:22 - 2018-09-06 07:57 - 000000000 ____D C:\Windows\system32\Tasks\{2DE7156C-37E6-D178-5D20-22EE22323BB9}
2015-11-10 17:47 - 2015-11-10 19:00 - 000002879 _____ () C:\ProgramData\24188e0da34438d7.dat
2019-11-02 11:55 - 2019-11-02 11:55 - 000278072 _____ () C:\Users\Administrador\AppData\Roaming\Biposofacoc
2019-02-08 11:55 - 2019-02-08 11:55 - 000214718 _____ () C:\Users\Administrador\AppData\Roaming\Bogebepi
2020-03-29 08:57 - 2020-03-29 08:57 - 000158438 _____ () C:\Users\Administrador\AppData\Roaming\Bomula
2019-08-27 04:55 - 2019-08-27 04:55 - 000218578 _____ () C:\Users\Administrador\AppData\Roaming\Cemak
2020-03-16 00:08 - 2020-03-16 00:08 - 000111316 _____ () C:\Users\Administrador\AppData\Roaming\Daturoli
2019-03-25 12:55 - 2019-03-25 12:55 - 000116206 _____ () C:\Users\Administrador\AppData\Roaming\Degakutab
2019-08-02 18:08 - 2019-08-02 18:08 - 000158009 _____ () C:\Users\Administrador\AppData\Roaming\Doceninem
2019-12-26 21:55 - 2019-12-26 21:55 - 000244780 _____ () C:\Users\Administrador\AppData\Roaming\Fecekokagime
2019-02-27 14:08 - 2019-02-27 14:08 - 000218699 _____ () C:\Users\Administrador\AppData\Roaming\Fekupufanip
2020-02-01 16:55 - 2020-02-01 16:55 - 000218008 _____ () C:\Users\Administrador\AppData\Roaming\Folepa
2020-02-01 16:55 - 2020-02-01 16:55 - 000184320 _____ () C:\Users\Administrador\AppData\Roaming\Folepa.exe
2019-03-07 14:55 - 2019-03-07 14:55 - 000297633 _____ () C:\Users\Administrador\AppData\Roaming\Fonicibot
2019-04-23 11:08 - 2019-04-23 11:08 - 000246801 _____ () C:\Users\Administrador\AppData\Roaming\Hefun
2019-07-23 19:08 - 2019-07-23 19:08 - 000168748 _____ () C:\Users\Administrador\AppData\Roaming\Hidega
2019-10-25 12:55 - 2019-10-25 12:55 - 000139363 _____ () C:\Users\Administrador\AppData\Roaming\Hipocefoha
2019-12-16 11:55 - 2019-12-16 11:55 - 000340975 _____ () C:\Users\Administrador\AppData\Roaming\Hohes
2020-03-29 08:57 - 2020-03-29 08:57 - 000158438 _____ () C:\Users\Administrador\AppData\Roaming\Hufadu
2019-08-19 00:55 - 2019-08-19 00:55 - 000134927 _____ () C:\Users\Administrador\AppData\Roaming\Kabofohor
2020-01-12 23:55 - 2020-01-12 23:55 - 000186689 _____ () C:\Users\Administrador\AppData\Roaming\Kohare
2019-02-17 10:08 - 2019-02-17 10:08 - 000212398 _____ () C:\Users\Administrador\AppData\Roaming\Lamoge
2020-02-25 18:56 - 2020-02-25 18:56 - 000331217 _____ () C:\Users\Administrador\AppData\Roaming\Milopur
2020-02-17 15:55 - 2020-02-17 15:55 - 000175769 _____ () C:\Users\Administrador\AppData\Roaming\Mucasocat
2020-03-29 08:57 - 2020-03-29 08:57 - 000158438 _____ () C:\Users\Administrador\AppData\Roaming\Nedeba
2020-03-21 01:01 - 2020-03-21 01:01 - 000202535 _____ () C:\Users\Administrador\AppData\Roaming\Pakahucakil
2019-06-29 13:55 - 2019-06-29 13:55 - 000311108 _____ () C:\Users\Administrador\AppData\Roaming\Papapisem
2020-03-08 09:55 - 2020-03-08 09:55 - 000294324 _____ () C:\Users\Administrador\AppData\Roaming\Recudape
2020-01-04 00:55 - 2020-01-04 00:55 - 000297784 _____ () C:\Users\Administrador\AppData\Roaming\Ritanukeda
2019-03-15 17:08 - 2019-03-15 17:08 - 000174146 _____ () C:\Users\Administrador\AppData\Roaming\Rufagimemaku
2019-09-06 21:55 - 2019-09-06 21:55 - 000304931 _____ () C:\Users\Administrador\AppData\Roaming\Secamaho
2019-09-15 23:55 - 2019-09-15 23:55 - 000246440 _____ () C:\Users\Administrador\AppData\Roaming\Tomiko
2015-05-06 12:56 - 2015-05-06 12:56 - 000000000 _____ () C:\Users\Administrador\AppData\Local\{1E137B4C-E8C4-4FAD-B16D-468E4F8AECD8}
2015-10-13 12:43 - 2015-10-13 12:43 - 000000000 _____ () C:\Users\Administrador\AppData\Local\{B1BD034B-2345-439B-9BA6-40B0D6DA59D5}
2018-02-04 15:40 - 2018-02-04 15:40 - 000000000 _____ () C:\Users\Administrador\AppData\Local\{C4E7027D-24CD-4C9C-8AE1-B84D9740317D}
AlternateDataStreams: C:\Users\Public\AppData:CSM [470]

HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh int ipv4 reset
CMD: netsh int ipv6 reset
END

Guárdalo bajo el nombre de FIXLIST.TXT en el escritorio :arrow_backward: Esto es muy importante.

:o: Nota :o: Es importante que la herramienta FRST.exe (Farbar Recovery Scanner Tool) y FIXLIST.TXT se encuentren en la misma ubicación (escritorio) o si no, no trabajara.


Y ahora inicia en modo seguro para trabajar desde ese modo de windows.

  • Ejecuta FRST.exe.(Si usas Windows Vista/7/8 o 10, presiona clic derecho y seleccionas -Ejecutar como Administrador-).
  • Presionar el botón FIX/Corregir y aguardar a que termine.
  • La Herramienta guardara el reporte de reparación en el escritorio (FIXLOG.TXT).

Pega el contenido de este fichero en tu próxima respuesta.

Reiniciar el equipo y comprobar su funcionamiento en relación al problema planteado y comentarlo.

Un saludo