Bien… y ahora sigue estos pasos, MUY Importante ~ Realiza una copia de seguridad del registro :
-
Para hacerlo descarga Delfix en tu escritorio.
-
Doble clic para ejecutarlo.(Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona "Ejecutar como Administrador.")
-
Atención, ahora marca/selecciona únicamente la casilla "Create registry backup", las demás NO
-
Pulsar en Run.
Se abrirá el informe (DelFix.txt), guárdalo por si fuera necesario y cierra la herramienta.
En el equipo con los demas programas cerrados:
Inicio >>> Ejecutar >>>Escribes notepad.exe.
Ahora copia y pega estos archivos dentro del Notepad:
Start
CreateRestorePoint:
CloseProcesses:
HKLM-x32\...\Run: [] => [X]
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-2590789392-3709184063-2437184007-1000\...\Run: [dc85d83f] => C:\ProgramData\dc85d83f\dc85d83f.exe [0 ] (AutoIt Team)
HKU\S-1-5-21-2590789392-3709184063-2437184007-1000\...\Run: [dc85d83f2] => C:\ProgramData\WlNAgat\dc85d83f.exe [937776 2018-10-22] (AutoIt Team)
C:\ProgramData\WlNAgat
C:\ProgramData\dc85d83f
Startup: C:\Users\Mavi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\bdc85d83f2db73c8e70c270b7fa8a3fb.lnk [2018-10-21]
ShortcutTarget: bdc85d83f2db73c8e70c270b7fa8a3fb.lnk -> C:\MAVI-PC\iiwtvmhgfq.exe (AutoIt Team)
GroupPolicy: Restriction - Firefox <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKU\S-1-5-21-2590789392-3709184063-2437184007-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
U0 aswVmm; no ImagePath
S3 dbx; system32\DRIVERS\dbx.sys [X]
2018-10-22 15:16 - 2018-10-22 15:16 - 000000000 ____D C:\ProgramData\nWjkROdAr
2018-10-09 09:57 - 2018-10-09 09:57 - 000000040 ____H C:\331FF0D3E3DD
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> No File
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> No File
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers3: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> No File
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> No File
Task: {028EEE8F-D508-4830-A870-AA58BA00EC7F} - \{047F0447-0C08-0D7E-7911-050C0B7F117E} -> No File <==== ATTENTION
Task: {2D7DB9F2-B7E9-4DC1-B06F-459F3C4235B6} - \Jaserpyhawuph -> No File <==== ATTENTION
Task: {4656AE70-9ACB-47CD-8B1E-7902C7DDC206} - System32\Tasks\{24EDF3FD-BF4C-BC2C-7C3A-B266F17EDD0F} => C:\PROGRA~2\FASTDA~1\FASTDA~1.EXE
Task: {BF01D680-FB46-4B8E-9582-68E28AB93783} - \AM2q18BNiX -> No File <==== ATTENTION
Task: {DBD10E25-05B2-41FC-B7C9-67BFEAA64DED} - \{0E7E0F47-087A-0A04-0411-0A0F7878117D} -> No File <==== ATTENTION
Task: {EE7E5355-0B21-4671-A073-93465FF6F26D} - \Kaushkermse -> No File <==== ATTENTIO
AlternateDataStreams: C:\Users\Mavi\Desktop\carteraR20180811_151115_1534021609490R.jpg:SummaryInformation [0]
AlternateDataStreams: C:\Users\Mavi\Desktop\carteraR20180811_151115_1534021609490R.jpg:Updt_SummaryInformation [151]
AlternateDataStreams: C:\Users\Mavi\Desktop\carteraR20180811_151115_1534021609490R.jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Mavi\Desktop\pc2music:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\Mavi\Desktop\R20180811_151115_1534021609490R.jpg:SummaryInformation [0]
AlternateDataStreams: C:\Users\Mavi\Desktop\R20180811_151115_1534021609490R.jpg:Updt_SummaryInformation [151]
AlternateDataStreams: C:\Users\Mavi\Desktop\R20180811_151115_1534021609490R.jpg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
HOSTS:
REMOVEPROXY:
EMPTYTEMP:
CMD: netsh winsock reset
CMD: ipconfig /renew
CMD: ipconfig /flushdns
CMD: bitsadmin /reset /allusers
END
Lo guardas bajo el nombre de fixlist.txt en el escritorio <<< Esto es muy importante.<<
Nota: Es importante que la Hta Frst.exe y fixlist.txt se encuentren en la misma ubicación (escritorio) o si no no trabajara.
-
Y ahora usa esta Faq de Windows ¿Cómo iniciar Windows en Modo Seguro?, para trabajar desde ese modo de windows.
-
Ejecutas Frst.exe.
-
Presionas el botón Fix y aguardas a que termine.
-
La Herramienta guardara el reporte en tu escritorio (Fixlog.txt).
Lo pegas en tu próxima respuesta, comentado como va el problema