Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 06-12-2020 Ejecutado por selohu (06-12-2020 15:29:24) Run:1 Ejecutado desde C:\Users\xxxx\Desktop Perfiles cargados: selohu Modo de Inicio: Normal ============================================== fixlist contenido: ***************** Start: CloseProcesses: CreateRestorePoint: Policies: C:\ProgramData\NTUSER.pol: Restricción <==== ATENCIÓN HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe FF HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\selohu\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => no encontrado FF Plugin HKU\S-1-5-21-991384485-3360299836-4042273512-1001: @acestream.net/acestreamplugin,version=3.1.1 -> C:\Users\selohu\AppData\Roaming\ACEStream\player\npace_plugin.dll [Ningún archivo] CHR DefaultSearchURL: Default -> hxxps://www.ecosia.org/search?q={searchTerms}&addon=chrome&addonversion=3.3.0&method=topbar CHR DefaultSearchKeyword: Default -> ecosia CHR DefaultSuggestURL: Default -> hxxps://ac.ecosia.org/?q={searchTerms}&type=list&mkt=es 2020-12-02 03:23 - 2020-12-02 03:24 - 000001870 _____ C:\Users\selohu\Desktop\Rkill.txt 2020-12-01 02:51 - 2020-12-01 11:37 - 000000000 ____D C:\ProgramData\Avast Software 2020-12-01 01:14 - 2020-12-01 01:14 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job 2020-11-25 04:23 - 2020-05-13 18:08 - 000000000 ____D C:\Users\selohu\AppData\Roaming\Wondershare 2020-11-25 04:22 - 2020-05-13 18:08 - 000000000 ____D C:\ProgramData\Wondershare 2020-11-25 04:22 - 2020-05-13 18:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare 2020-11-25 04:22 - 2020-05-13 18:08 - 000000000 ____D C:\Program Files (x86)\Wondershare ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Ningún archivo AlternateDataStreams: C:\Windows:CM_36faabd924501fcd2f743302621d89eb425ec11f74fef19a5e0fe69c3f0b5201 [74] AlternateDataStreams: C:\Windows:CM_e0501b65315a77c6cde279a3a8d62a1a6c48bf2c2e353a3654218165115f1673 [74] HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\34007419.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\45856810.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\81134711.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\34007419.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\45856810.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\81134711.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR523 => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SMR523.SYS => ""="Driver" HKLM\...\StartupApproved\StartupFolder: => "WSAppHelper.lnk" HKLM\...\StartupApproved\StartupFolder: => "WSAndroidAppHelper.lnk" HKLM\...\StartupApproved\Run32: => "Avira SystrayStartTrigger" HKLM\...\StartupApproved\Run32: => "Avira System Speedup User Starter" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKU\S-1-5-21-991384485-3360299836-4042273512-1001\...\StartupApproved\Run: => "SUPERAntiSpyware" EmptyTemp: END: ***************** Procesos cerrados correctamente. Error: (0) Error al crear un punto de restauración. "C:\ProgramData\NTUSER.pol" => no encontrado HKLM\SOFTWARE\Policies\Mozilla => no encontrado "C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job" => no encontrado "HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\Mozilla\Firefox\Extensions\\acewebextension_unlisted@acestream.org" => eliminado correctamente HKU\S-1-5-21-991384485-3360299836-4042273512-1001\Software\MozillaPlugins\@acestream.net/acestreamplugin,version=3.1.1 => no encontrado "C:\Users\selohu\AppData\Roaming\ACEStream\player\npace_plugin.dll" => no encontrado "Chrome DefaultSearchURL" => no encontrado "Chrome DefaultSearchKeyword" => no encontrado "Chrome DefaultSuggestURL" => no encontrado "C:\Users\selohu\Desktop\Rkill.txt" => no encontrado "C:\ProgramData\Avast Software" => no encontrado "C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job" => no encontrado "C:\Users\selohu\AppData\Roaming\Wondershare" => no encontrado "C:\ProgramData\Wondershare" => no encontrado C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare => movido correctamente "C:\Program Files (x86)\Wondershare" => no encontrado HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00asw => no encontrado "C:\Windows" => ":CM_36faabd924501fcd2f743302621d89eb425ec11f74fef19a5e0fe69c3f0b5201" ADS no encontrado. "C:\Windows" => ":CM_e0501b65315a77c6cde279a3a8d62a1a6c48bf2c2e353a3654218165115f1673" ADS no encontrado. HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\34007419.sys => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\45856810.sys => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\81134711.sys => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MB3Service => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Network\34007419.sys => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Network\45856810.sys => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Network\81134711.sys => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Network\SMR523 => no encontrado HKLM\System\CurrentControlSet\Control\SafeBoot\Network\SMR523.SYS => no encontrado "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WSAppHelper.lnk" => no encontrado "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\WSAppHelper.lnk" => no encontrado "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WSAndroidAppHelper.lnk" => no encontrado "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\StartupFolder\\WSAndroidAppHelper.lnk" => no encontrado "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Avira SystrayStartTrigger" => no encontrado "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Avira SystrayStartTrigger" => no encontrado "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Avira System Speedup User Starter" => no encontrado "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Avira System Speedup User Starter" => no encontrado "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\\Wondershare Helper Compact.exe" => no encontrado "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Wondershare Helper Compact.exe" => no encontrado "HKU\S-1-5-21-991384485-3360299836-4042273512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run\\SUPERAntiSpyware" => no encontrado "HKU\S-1-5-21-991384485-3360299836-4042273512-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware" => no encontrado =========== EmptyTemp: ========== BITS transfer queue => 6316032 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 67108043 B Java, Flash, Steam htmlcache => 0 B Windows/system/drivers => 11727575 B Edge => 0 B Chrome => 0 B Firefox => 0 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 49776 B NetworkService => 74950 B selohu => 57973267 B RecycleBin => 2424 B EmptyTemp: => 136.6 MB datos temporales eliminados. ================================ El sistema necesita reiniciarse. ==== Final de Fixlog 15:29:33 ====