Resultados de la corrección de Farbar Recovery Scan Tool (x64) Versión: 13-05-2020 01 Ejecutado por Usuario (14-05-2020 13:49:10) Run:1 Ejecutado desde C:\Users\Usuario\Desktop Perfiles cargados: Usuario Modo de Inicio: Safe Mode (with Networking) ============================================== fixlist contenido: ***************** Start CloseProcesses: (Popcorn Time) [Archivo no firmado] C:\Program Files (x86)\Popcorn Time\Updater.exe HKLM-x32\...\Run: [] => [X] HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\...\MountPoints2: {2c4b1839-f9d4-11e5-82ed-902b348d1606} - "F:\RunGame.exe" HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\Installer\chrmstp.exe [2020-05-05] (Google LLC -> Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{9459C573-B17A-45AE-9F64-1857B5D58CEE}] -> C:\Program Files (x86)\Microsoft\Edge\Application\81.0.416.72\Installer\setup.exe [2020-05-13] (Microsoft Corporation -> Microsoft Corporation) HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2020-05-03] (Adobe Inc. -> Adobe Systems, Inc.) GroupPolicy\User: Restricción ? <==== ATENCIÓN CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN Task: {013DF4C6-6A9F-4420-9CAA-F79443D2B165} - System32\Tasks\{A7CC1ADD-71D3-49D0-A884-0D642F3955E2} => C:\Windows\system32\pcalua.exe -a "C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcLauncher.exe" -d "C:\Users\Usuario\Desktop\Autocad 2009" -c /O "C:\Users\Usuario\Desktop\Autocad 2009\A4.dwg" Task: {7E5236E3-CFF1-498B-9893-5331E436B941} - System32\Tasks\{FDB3F290-39D4-46CF-83A5-8CE10514444C} => C:\Windows\system32\pcalua.exe -a "C:\Users\Usuario\Desktop\Half life 1 - Full Español PC\halflife_full_Español.exe" -d "C:\Users\Usuario\Desktop\Half life 1 - Full Español PC" Task: {97C45FD1-341F-4F00-95C2-443AF00934F9} - System32\Tasks\0415avUpdateInfo => C:\ProgramData\Avg_Update_0415av\0415av_AVG-Secure-Search-Update.exe [2809880 2015-04-21] (AVG Technologies -> ) Task: {9F9982B2-9492-4452-8AC7-9F6F40510DA9} - System32\Tasks\{642F8308-B74B-4CDF-8754-EE84D5D7D2B5} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.30.0.105&LastError=12007 Task: {C3F7C3A9-F537-4F97-98C2-A749D66E184D} - System32\Tasks\{3C9DD299-E747-4669-A3CA-84E9B9C19AF1} => C:\Windows\system32\pcalua.exe -a C:\Users\Usuario\Downloads\Actib331(1).exe -d C:\Users\Usuario\Downloads Task: {DE22A6E3-C4A1-4A03-ACEA-4A79E120082C} - \WinTaske -> Ningún archivo <==== ATENCIÓN Task: {F83B6D72-A0B5-496B-BA9E-F2D0A01CBDF9} - System32\Tasks\{06D34419-FD37-48CD-9A07-FD18292233DA} => C:\Windows\system32\pcalua.exe -a "C:\Users\Usuario\Pictures\banda\Age of Empires 2\SETUPREG.EXE" -d "C:\Users\Usuario\Pictures\banda\Age of Empires 2" Task: C:\Windows\Tasks\0415avUpdateInfo.job => C:\ProgramData\Avg_Update_0415av\0415av_AVG-Secure-Search-Update.exe HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings: [ProxySettingsPerUser] 0 <==== ATENCIÓN (Restricción - ProxySettings) AutoConfigURL: [HKLM] => hxxp://127.0.0.1:86/ AutoConfigURL: [HKLM-x32] => hxxp://127.0.0.1:86/ AutoConfigURL: [{A4259597-20B3-4975-816B-FF8B060F7004}] => hxxp://127.0.0.1:86/ ManualProxies: 0hxxp://127.0.0.1:86/ HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restricción <==== ATENCIÓN Toolbar: HKU\S-1-5-21-2578429969-1676600159-2030188128-1001 -> Sin Nombre - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - Ningún archivo FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js [2019-09-17] <==== ATENCIÓN (Apunta a archivo *.cfg) FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\bd_config.cfg [2019-09-17] <==== ATENCIÓN CHR DefaultSearchURL: Default -> hxxps://www.bing.com/search?q={searchTerms}&PC=U316&FORM=CHROMN CHR DefaultSearchKeyword: Default -> bing.com CHR DefaultNewTabURL: Default -> hxxps://www.bing.com/chrome/newtab CHR DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}&language={language}&PC=U316 CHR HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] CHR HKLM-x32\...\Chrome\Extension: [eedgghdcpmmmilkmfpnklknlenbiolec] ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Ningún archivo ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Ningún archivo ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Ningún archivo ContextMenuHandlers1: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Ningún archivo ContextMenuHandlers4: [###MegaContextMenuExt] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Ningún archivo AlternateDataStreams: C:\Users\Public\AppData:CSM [482] HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\str => ""="service" C:\Program Files (x86)\Popcorn Time C:\ProgramData\Avg_Update_0415av CMD: ipconfig /flushdns CMD: ipconfig /renew CMD: bitsadmin /reset /allusers CMD: netsh winsock reset CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: Hosts: END ***************** Procesos cerrados correctamente. C:\Program Files (x86)\Popcorn Time\Updater.exe => No se encontró ningún proceso en ejecución "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => eliminado correctamente HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2c4b1839-f9d4-11e5-82ed-902b348d1606} => eliminado correctamente HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => eliminado correctamente HKLM\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} => eliminado correctamente HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{A6EADE66-0000-0000-484E-7E8A45000000} => eliminado correctamente C:\Windows\system32\GroupPolicy\User => movido correctamente C:\Windows\system32\GroupPolicy\GPT.ini => movido correctamente HKLM\SOFTWARE\Policies\Google => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{013DF4C6-6A9F-4420-9CAA-F79443D2B165}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{013DF4C6-6A9F-4420-9CAA-F79443D2B165}" => eliminado correctamente C:\Windows\System32\Tasks\{A7CC1ADD-71D3-49D0-A884-0D642F3955E2} => movido correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A7CC1ADD-71D3-49D0-A884-0D642F3955E2}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7E5236E3-CFF1-498B-9893-5331E436B941}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7E5236E3-CFF1-498B-9893-5331E436B941}" => eliminado correctamente C:\Windows\System32\Tasks\{FDB3F290-39D4-46CF-83A5-8CE10514444C} => movido correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{FDB3F290-39D4-46CF-83A5-8CE10514444C}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{97C45FD1-341F-4F00-95C2-443AF00934F9}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{97C45FD1-341F-4F00-95C2-443AF00934F9}" => eliminado correctamente C:\Windows\System32\Tasks\0415avUpdateInfo => movido correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\0415avUpdateInfo" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9F9982B2-9492-4452-8AC7-9F6F40510DA9}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F9982B2-9492-4452-8AC7-9F6F40510DA9}" => eliminado correctamente C:\Windows\System32\Tasks\{642F8308-B74B-4CDF-8754-EE84D5D7D2B5} => movido correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{642F8308-B74B-4CDF-8754-EE84D5D7D2B5}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C3F7C3A9-F537-4F97-98C2-A749D66E184D}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C3F7C3A9-F537-4F97-98C2-A749D66E184D}" => eliminado correctamente C:\Windows\System32\Tasks\{3C9DD299-E747-4669-A3CA-84E9B9C19AF1} => movido correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3C9DD299-E747-4669-A3CA-84E9B9C19AF1}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE22A6E3-C4A1-4A03-ACEA-4A79E120082C}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE22A6E3-C4A1-4A03-ACEA-4A79E120082C}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinTaske" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F83B6D72-A0B5-496B-BA9E-F2D0A01CBDF9}" => eliminado correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F83B6D72-A0B5-496B-BA9E-F2D0A01CBDF9}" => eliminado correctamente C:\Windows\System32\Tasks\{06D34419-FD37-48CD-9A07-FD18292233DA} => movido correctamente "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{06D34419-FD37-48CD-9A07-FD18292233DA}" => eliminado correctamente C:\Windows\Tasks\0415avUpdateInfo.job => movido correctamente "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxySettingsPerUser" => eliminado correctamente "HKLM\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL" => eliminado correctamente "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\\AutoConfigURL" => eliminado correctamente HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\ProxyMgr\{A4259597-20B3-4975-816B-FF8B060F7004} => eliminado correctamente "HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies\\" => eliminado correctamente HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => eliminado correctamente "HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93}" => eliminado correctamente C:\Program Files (x86)\mozilla firefox\defaults\pref\bd_js_config.js => movido correctamente C:\Program Files (x86)\mozilla firefox\bd_config.cfg => movido correctamente "Chrome DefaultSearchURL" => eliminado correctamente "Chrome DefaultSearchKeyword" => eliminado correctamente "Chrome DefaultNewTabURL" => eliminado correctamente "Chrome DefaultSuggestURL" => eliminado correctamente HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\SOFTWARE\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd => eliminado correctamente HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\eedgghdcpmmmilkmfpnklknlenbiolec => eliminado correctamente HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending => eliminado correctamente HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced => eliminado correctamente HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing => eliminado correctamente HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending => eliminado correctamente HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced => eliminado correctamente HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing => eliminado correctamente HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\###MegaContextMenuExt => eliminado correctamente HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers\###MegaContextMenuExt => eliminado correctamente C:\Users\Public\AppData => ":CSM" ADS eliminado correctamente HKLM\System\CurrentControlSet\Control\SafeBoot\Network\str => eliminado correctamente C:\Program Files (x86)\Popcorn Time => movido correctamente C:\ProgramData\Avg_Update_0415av => movido correctamente ========= ipconfig /flushdns ========= Configuraci¢n IP de Windows Se vaci¢ correctamente la cach‚ de resoluci¢n de DNS. ========= Final de CMD: ========= ========= ipconfig /renew ========= Configuraci¢n IP de Windows No se puede realizar ninguna operaci¢n en Ethernet mientras los medios est‚n desconectados. ========= Final de CMD: ========= ========= bitsadmin /reset /allusers ========= BITSADMIN version 3.0 [ 7.7.9600 ] BITS administration utility. (C) Copyright 2000-2006 Microsoft Corp. BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows. Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets. Unable to connect to BITS - 0x8007042c ========= Final de CMD: ========= ========= netsh winsock reset ========= El cat logo Winsock se restableci¢ correctamente. Debe reiniciar el equipo para completar el restablecimiento. ========= Final de CMD: ========= ========= netsh advfirewall reset ========= Aceptar ========= Final de CMD: ========= ========= netsh advfirewall set allprofiles state ON ========= Aceptar ========= Final de CMD: ========= ========= netsh int ipv4 reset ========= Global se restableci¢ correctamente. Interfaz se restableci¢ correctamente. Direcci¢n de unidifusi¢n se restableci¢ correctamente. Vecino se restableci¢ correctamente. Ruta de acceso se restableci¢ correctamente. Ruta se restableci¢ correctamente. Error al restablecer . Acceso denegado. se restableci¢ correctamente. Reinicie el equipo para completar esta acci¢n. ========= Final de CMD: ========= ========= netsh int ipv6 reset ========= Interfaz se restableci¢ correctamente. Direcci¢n de unidifusi¢n se restableci¢ correctamente. Vecino se restableci¢ correctamente. Ruta de acceso se restableci¢ correctamente. Ruta se restableci¢ correctamente. Error al restablecer . Acceso denegado. se restableci¢ correctamente. se restableci¢ correctamente. Reinicie el equipo para completar esta acci¢n. ========= Final de CMD: ========= ========= RemoveProxy: ========= "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente "HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente "HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => eliminado correctamente "HKU\S-1-5-21-2578429969-1676600159-2030188128-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => eliminado correctamente ========= Final de RemoveProxy: ========= C:\Windows\System32\Drivers\etc\hosts => movido correctamente Hosts restaurado correctamente. =========== EmptyTemp: ========== BITS transfer queue => 8388608 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 54381750 B Java, Flash, Steam htmlcache => 109764544 B Windows/system/drivers => 15233800 B Edge => 0 B Chrome => 603415805 B Firefox => 126733159 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B Users => 0 B ProgramData => 0 B Public => 0 B systemprofile => 128 B systemprofile32 => 256 B LocalService => 9376 B NetworkService => 127684840 B Usuario => 581148762 B RecycleBin => 3847203 B EmptyTemp: => 1.5 GB datos temporales eliminados. ================================ El sistema necesita reiniciarse. ==== Final de Fixlog 14:01:24 ====