Ayuda eliminar troyano

MARCELO_BRAVO · 16 Agosto, 2021 22:28

con todo cerrado el administrador me indicaba un 50% cpu y 2,5gb de ram en uso con todo cerrado. Entrado al monitor de recursos en la pestaña de memoria me percato que el primer servicio que esta ocupando mas ram es uno denominado wup.exe tras una googleada rapida me arroja el resultado inmediato de que consiste en un troyano usado para minar criptomonedas que es capaz de reinstalarse a si mismo tras ser eliminado, por lo que consulto. Como yo podria eliminar wup.exe de mi computador de una vez por todas y ademas saber si tengo otras infecciones?

Marr0n · 17 Agosto, 2021 23:52

Hola, buenas @MARCELO_BRAVO

EN BUSCA / ELIMINACIÓN DE MALWARE

(Mantén conectados todos tus dispositivos externos que tengas como: USBs, discos duros externos, etc).

Por favor, descarga todo el software de los enlaces que pongo/de sus respectivos manuales.

Ahora ejecutarás una serie de herramientas respetando el orden los pasos con todos los programas cerrados incluidos los navegadores.

Conectas todos tus dispositivos externos (todos los discos duros externos que tengas, así como todas las USB que tengas y discos duros externos si también tienes.

Realiza los pasos que te pongo a continuación, sin cambiar el orden y síguelos al pie de la letra:

0) Descarga Ccleaner Aquí te dejo su manual: Manual de CCleaner , para que sepas como usarlo y configurarlo correctamente.

Lo instalas y lo ejecutas. En la pestaña Limpieza personalizada dejas la configuración predeterminada. Haces clic en Analizar y esperas a que termine. Seguidamente haz clic en Ejecutar Limpiador. Clic en la pestaña Registro > clic en Buscar Problemas esperas que termine. Finalmente clic en Reparar Seleccionadas y realizas una Copia de Seguridad del registro de Windows.

1) Descarga, instala, actualiza y ejecuta Malwarebytes’ Anti-Malware. Aquí te dejo su manual: Manual de Malwarebytes, para que sepas como usarlo y configurarlo correctamente.

Realizas un Análisis Personalizado, marcando Todas las casillas de la Derecha y de la Izquierda, actualizando si te lo pide. Es decir: conectas todos tus dispositivos externos (todos los discos duros externos que tengas, así como todas las USB que tengas, incluida la que me has dicho anteriormente y marcas todas las unidades de disco disponibles y las siguientes casillas:

1. Analizar objetos en memoria

2. Analizar configuracion de inicio y registro

3. Analizar dentro de los archivos

Pulsar en “Eliminar Seleccionados” para enviar las infecciones a la cuarentena y Reinicias el ordenador.
Para acceder posteriormente al informe del análisis te diriges a: Informes >> Registro de análisis >> pulsas en Exportar >> Copiar al Portapapeles y pones el informe en tu próxima respuesta.

2) Descarga Adwcleaner en el escritorio.

Desactiva tu antivirus Como deshabilitar temporalmente un antivirus y cualquier programa de seguridad que tengas activado.
Ejecuta Adwcleaner.exe (Si usas Windows Vista/7/8 u 10 presiona clic derecho y selecciona “Ejecutar como Administrador.”)
Pulsar en el botón Analizar Ahora, y espera a que se termine el análisis. Inmediatamente pulsa sobre el botón Iniciar Reparación.
Espera a que termine y sigue las instrucciones que te aparezcan. Si te pidiera Reiniciar, pues reinicias el ordenador pulsando en Aceptar.
Si no encuentra nada, pulsa en Omitir Reparación.
El log lo encontrarás en la pestaña Informes, volviendo a abrir el programa, si es necesario o en la siguiente ubicación: C:\AdwCleaner\Logs\AdwCleaner[C0].txt.
Para más información aquí te dejo su manual: Manual de Adwcleaner.
Activa de nuevo tu antivirus y cualquier programa de seguridad que tengas activado.

3) Utiliza nuevamente CCleaner tal como te dije en el punto 0.

Pegas los reportes de Malwarebytes y AdwCleaner y comentas como va el problema inicial planteado por el cual abriste este tema. También responde a las preguntas que te haya realizado a lo largo de este Post, siempre que te haya hecho alguna, si no, no

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:

No realices pasos/acciones que NOSOTROS no te hayamos indicado.

No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.

No instales NADA (programas/software/complementos/extensiones del navegador…).

No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…).

No realices por tu cuenta otros procedimientos.

Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

Muy Importante Coloca los diferentes reportes que te he pedido como se muestra en la siguiente imagen:

Salu2.

MARCELO_BRAVO · 19 Agosto, 2021 19:10

REPORTE ANTIMALWARE

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 18/8/21
Hora del análisis: 18:33
Archivo de registro: de02f598-006b-11ec-9802-00ffa4be5133.json

-Información del software-
Versión: 4.4.4.126
Versión de los componentes: 1.0.1413
Versión del paquete de actualización: 1.0.44228
Licencia: Prueba

-Información del sistema-
SO: Windows 7 Service Pack 1
CPU: x64
Sistema de archivos: NTFS
Usuario: Krays-PC\Krays

-Resumen del análisis-
Tipo de análisis: Análisis personalizado
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 1772300
Amenazas detectadas: 394
Amenazas en cuarentena: 392
Tiempo transcurrido: 14 hr, 56 min, 29 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Activado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 7
Trojan.Glupteba.E, HKU\S-1-5-21-92709713-2119811057-2010954664-1000\SOFTWARE\MICROSOFT\e7212547, En cuarentena, 514, 821174, 1.0.44228, , ame, , , 
Trojan.Glupteba.E, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinmonFS, En cuarentena, 514, 781211, 1.0.44228, , ame, , , 
Trojan.Glupteba.E, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\WinmonProcessMonitor, En cuarentena, 514, 781210, 1.0.44228, , ame, , , 
Trojan.Glupteba.E, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ScheduledUpdate, En cuarentena, 514, 781223, , , , , , 
Trojan.Glupteba.E, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{D9A21A21-D34D-43A0-9B55-0A60A81F2B83}, En cuarentena, 514, 781223, , , , , , 
Trojan.Glupteba.E, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\LOGON\{D9A21A21-D34D-43A0-9B55-0A60A81F2B83}, En cuarentena, 514, 781223, , , , , , 
Adware.Wajam.PrxySvrRST, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, En cuarentena, 5176, -1, 0.0.0, , action, , , 

Valor del registro: 8
Trojan.Glupteba.E, HKU\S-1-5-21-92709713-2119811057-2010954664-1000\SOFTWARE\MICROSOFT\e7212547|CAMPAIGNID, En cuarentena, 514, 821174, 1.0.44228, , ame, , , 
PUM.Optional.DisableMRT, HKLM\SOFTWARE\WOW6432NODE\POLICIES\MICROSOFT\MRT|DONTREPORTINFECTIONINFORMATION, En cuarentena, 7056, 676881, 1.0.44228, , ame, , , 
PUM.Optional.DisableMRT, HKLM\SOFTWARE\POLICIES\MICROSOFT\MRT|DONTREPORTINFECTIONINFORMATION, En cuarentena, 7056, 676881, 1.0.44228, , ame, , , 
Adware.Wajam.PrxySvrRST, HKU\S-1-5-18\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, En cuarentena, 5176, -1, 0.0.0, , action, , , 
Adware.Wajam.PrxySvrRST, HKU\S-1-5-21-92709713-2119811057-2010954664-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, En cuarentena, 5176, -1, 0.0.0, , action, , , 
Adware.Wajam.PrxySvrRST, HKU\.DEFAULT\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|PROXYENABLE, En cuarentena, 5176, -1, 0.0.0, , action, , , 
Adware.Linkury.ACMB1, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, En cuarentena, 1002, -1, 0.0.0, , action, , , 
Adware.Linkury.ACMB1, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINDOWS|APPINIT_DLLS, En cuarentena, 1002, -1, 0.0.0, , action, , , 

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 146
Adware.Wajam.PrxySvrRST, C:\PROGRAM FILES\95397537B86DF4444FB73C6431A00DF9, En cuarentena, 5176, 878870, 1.0.44228, , ame, , , 
Adware.OnlineIO, C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0, En cuarentena, 1412, 716213, , , , , , 
Adware.OnlineIO, C:\Program Files (x86)\Microleaves\Online Application, En cuarentena, 1412, 716213, , , , , , 
Adware.OnlineIO, C:\Program Files (x86)\Microleaves, En cuarentena, 1412, 716213, 1.0.44228, , ame, , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\es_419, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\en_GB, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\en_US, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pt_BR, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pt_PT, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\zh_CN, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\zh_TW, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fil, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\be, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\bg, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\bn, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ca, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\es, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\da, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\de, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\el, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\en, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\et, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fa, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fi, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fr, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\gu, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\he, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\hi, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\hr, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\hu, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\id, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\it, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ja, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\kn, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ko, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\lt, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\lv, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\mk, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ml, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\mr, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ms, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\nl, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\no, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pl, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pt, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\cs, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ro, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ru, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sk, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sl, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sq, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sr, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sv, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sw, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ta, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\te, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\th, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\tr, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\uk, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\vi, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\am, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ar, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\files, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files, En cuarentena, 1257, 488159, , , , , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE, En cuarentena, 1257, 488159, 1.0.44228, , ame, , , 
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\GXZiGyYLSHyU2, En cuarentena, 1257, 488164, 1.0.44228, , ame, , , 
Adware.Linkury, C:\ProgramData\PrefsSecure, En cuarentena, 441, 377396, 1.0.44228, , ame, , , 
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\ondemand, En cuarentena, 1002, 378434, , , , , , 
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam, En cuarentena, 1002, 378434, 1.0.44228, , ame, , , 
Adware.Linkury, C:\ProgramData\Logic Cramble, En cuarentena, 441, 431817, 1.0.44228, , ame, , , 
Adware.OnlineIO, C:\ProgramData\Microleaves\Online Application\updates, En cuarentena, 1412, 399763, , , , , , 
Adware.OnlineIO, C:\ProgramData\Microleaves\Online Application, En cuarentena, 1412, 399763, , , , , , 
Adware.OnlineIO, C:\ProgramData\Microleaves, En cuarentena, 1412, 399763, 1.0.44228, , ame, , , 
PUP.Optional.Linkury.Generic, C:\PROGRAMDATA\VOYASOLLAMS, En cuarentena, 198, 380106, 1.0.44228, , ame, , , 
Adware.Neoreklami.ChrPRST, C:\USERS\KRAYS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\CMHOMIPKKLCKPOMAFALOJOBPPMMIDLGL, En cuarentena, 406, 488216, 1.0.44228, , ame, , , 
PUP.Optional.StartPage, C:\USERS\KRAYS\APPDATA\ROAMING\BROWSERMODULE, En cuarentena, 241, 335017, 1.0.44228, , ame, , , 
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\dictionaries, En cuarentena, 4395, 431769, , , , , , 
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\gmp-fake\1.0, En cuarentena, 4395, 431769, , , , , , 
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\gmp-fake, En cuarentena, 4395, 431769, , , , , , 
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\Update, En cuarentena, 4395, 431769, , , , , , 
PUP.Optional.SSN, C:\USERS\KRAYS\APPDATA\ROAMING\SSN, En cuarentena, 4395, 431769, 1.0.44228, , ame, , , 
PUP.Optional.BitCoinMiner, C:\Users\Krays\AppData\Roaming\isMiner, En cuarentena, 1330, 352440, 1.0.44228, , ame, , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\es_419, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en_GB, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en_US, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pt_BR, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pt_PT, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\zh_CN, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\zh_TW, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fil, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\be, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\bg, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\bn, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ca, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\es, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\da, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\de, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\el, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\et, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fa, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fi, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fr, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\gu, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\he, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\hi, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\hr, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\hu, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\id, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\it, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ja, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\kn, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ko, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\lt, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\lv, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\mk, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ml, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\mr, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ms, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\nl, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\no, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pl, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pt, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\cs, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ro, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ru, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sk, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sl, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sq, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sr, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sv, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sw, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ta, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\te, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\th, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\tr, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\uk, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\vi, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\am, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ar, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\icons, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0, En cuarentena, 361, 437828, , , , , , 
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd, En cuarentena, 361, 437828, 1.0.44228, , ame, , , 
PUP.Optional.MirageISO, C:\USERS\PUBLIC\DOCUMENTS\XMUPDATE, En cuarentena, 4608, 443706, 1.0.44228, , ame, , , 

Archivo: 233
RiskWare.Agent.TDL, C:\Windows\System32\drivers\VBoxDrv.backup, En cuarentena, 10761, 778686, 0.0.0, , ame, , EAEA9CCB40C82AF8F3867CD0F4DD5E9D, CF3A7D4285D65BF8688215407BCE1B51D7C6B22497F09021F0FCE31CBEB78986
RiskWare.Agent.TDL, C:\Windows\System32\drivers\VBoxDrv.sys, En cuarentena, 10761, 778686, 0.0.0, , ame, , EAEA9CCB40C82AF8F3867CD0F4DD5E9D, CF3A7D4285D65BF8688215407BCE1B51D7C6B22497F09021F0FCE31CBEB78986
Trojan.Glupteba, C:\Windows\System32\drivers\Winmon.sys, En cuarentena, 4432, 781348, 0.0.0, 3E6E6C6E8DD94D190C09A33E, dds, , 69989105F151015C16A2F422F5722590, B1C321B5E495473A401BD6E6ADFE1EC931F8247B1B2646B0E259BFF011A0958C
Trojan.Glupteba, C:\Windows\System32\drivers\WinmonFS.sys, En cuarentena, 4432, 781343, 0.0.0, 83E5DE604A2397F5F8823DF5, dds, , EAAA87F39F2C23D8C3B9063EF6727998, 8196A5A470BD04F612E9B1CCD9CE6A26C96FE6153A82B97A8E10085DC0193F00
Trojan.Glupteba, C:\Windows\System32\drivers\WinmonProcessMonitor.sys, En cuarentena, 4432, 781349, 0.0.0, 46394ABB514953E2FD533AFB, dds, , D224F811A86A02649C46FD4BE0F4708E, ECC19AB3F3AF94CD2D51A2158BA3A851F44A3B5B1F5BC8400F795D340F2354E0
Trojan.Glupteba.E, C:\WINDOWS\SYSTEM32\DRIVERS\WINMONFS.SYS, En cuarentena, 514, 781211, , , , , EAAA87F39F2C23D8C3B9063EF6727998, 8196A5A470BD04F612E9B1CCD9CE6A26C96FE6153A82B97A8E10085DC0193F00
Trojan.Glupteba.E, C:\WINDOWS\SYSTEM32\DRIVERS\WINMONPROCESSMONITOR.SYS, En cuarentena, 514, 781210, , , , , D224F811A86A02649C46FD4BE0F4708E, ECC19AB3F3AF94CD2D51A2158BA3A851F44A3B5B1F5BC8400F795D340F2354E0
Trojan.Glupteba.E, C:\WINDOWS\SYSTEM32\TASKS\ScheduledUpdate, En cuarentena, 514, 781223, 1.0.44228, , ame, , A02A6F027B4175E72DC8E91C03D45349, DC9EFEF81746FCC0071CEFF4B5C939446CFDD21229A377EB13C748FF3CF635E1
Adware.Wajam.PrxySvrRST, C:\PROGRAM FILES\95397537B86DF4444FB73C6431A00DF9\WBE_UNINSTALL.DAT, En cuarentena, 5176, 878870, 1.0.44228, , ame, , DAA5223B32B9899EA20FEB3CA6D5CFCE, 78662636B31A7AD4798885A6E573CE156AD886ED6CE3265C1997001FAE1FB297
Adware.Wajam.PrxySvrRST, C:\Program Files\95397537b86df4444fb73c6431a00df9\0e8835cd5579e654ef2ca9b0cb3aa134, En cuarentena, 5176, 878870, , , , , E4451B0679FF1C8B753066EEE02A5335, 4F57254F537B1005EF74AB7551969EE3925D69B47A425ABDC609D66A792A57E1
Adware.Wajam.PrxySvrRST, C:\Program Files\95397537b86df4444fb73c6431a00df9\4bfb3d0903b7768344c667f773514af4, En cuarentena, 5176, 878870, , , , , 68D011C34DF410CB5219A113E1B006E3, DBEDDAFA3070658F3C374980E9092BE83BF0A3AE042430C6CAA78E1BA77D25B5
Adware.Wajam.PrxySvrRST, C:\Program Files\95397537b86df4444fb73c6431a00df9\d37224a9100ff6e89cbe60ceb98c16c9, En cuarentena, 5176, 878870, , , , , BF17F870F8E54CF9AF160E08C22A3945, CC5BAECA2CA5BF70F14C04A102449E47DD2C8A21C97CB807A870DEF6C7EE361C
Adware.Wajam.PrxySvrRST, C:\Program Files\95397537b86df4444fb73c6431a00df9\service.dat, En cuarentena, 5176, 878870, , , , , EE1F0E650256CF967390B364F2830FFD, 6B4A0FAAA01CA67347078C4BC8D92D4BE27F9D5BF22B3DACA758489322C26EE5
Adware.Wajam.PrxySvrRST, C:\Program Files\95397537b86df4444fb73c6431a00df9\service_64.dat, En cuarentena, 5176, 878870, , , , , EE1F0E650256CF967390B364F2830FFD, 6B4A0FAAA01CA67347078C4BC8D92D4BE27F9D5BF22B3DACA758489322C26EE5
Malware.AI.3740140694, C:\PROGRAM FILES (X86)\2K GAMES\BORDERLANDS - GAME OF THE YEAR EDITION\BINARIES\STEAM_API.DLL, Error durante la eliminación, 1000000, 0, 1.0.44228, 42EE2BF3F80E3CD5DEEE0496, dds, 01382764, C1DE0517531BD9ECFDE3F4B30771B697, 0B29409E3823F8A60B02759BD47CDD39910B1413B1E097069537EC1FDBBF3D84
Malware.Heuristic.1001, C:\PROGRAM FILES (X86)\AGE OF EMPIRES II HD\STEAM_API.DLL, Error durante la eliminación, 1000001, 0, 1.0.44228, 0000000000000000000003E9, dds, 01382764, CA459A8754EFC3027DE7FC4F16A00C40, E64CE9857F2816A600F2B179EC91F5CAE270D55C75C4F088D6773AC27F2BF926
RiskWare.GameHack, C:\PROGRAM FILES (X86)\WARNER BROS. INTERACTIVE ENTERTAINMENT\LEGO® THE LORD OF THE RINGS™\RLD.DLL, En cuarentena, 7475, 352892, 1.0.44228, 8626491CB5366D44FE542E83, dds, 01382764, F54D6BB54E2D9C25A99E2E4549C49D25, AF6DA49A724578C5C18F1ACFB2B280EEA0FC30514A9D13A5444BF4A286A5559F
Adware.OnlineIO, C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online.io EULA.url, En cuarentena, 1412, 716213, , , , , C9F58E7F8E6928DFD78A2E42A54E3137, 5551EC0376B4107033ED83206C0E18B327B432C3455C4F2F2EC275BDB793C692
Adware.OnlineIO, C:\Program Files (x86)\Microleaves\Online Application\Version 2.6.0\Online.io Privacy.url, En cuarentena, 1412, 716213, , , , , 919C347441CEA3F5405D08EB5E20C454, B4670591C7DA9326111A79E8B59DA438D3857BB2374C366A089116FA357752A8
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\files\main.css, En cuarentena, 1257, 488159, , , , , 38A75499C5704DD6727BB11C66BD5207, 7027A7D74B215C85DDF3252C760563140EB2BB9BBC8B1B41EB53A5A50DDFA362
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\am\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ar\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\be\messages.json, En cuarentena, 1257, 488159, , , , , 5A56E498EACF6CEED5F1C69EDAF05441, C381EAC12310F44DBB7E80C12B99B536173339063C004747587A826C5CE414E4
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\bg\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\bn\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ca\messages.json, En cuarentena, 1257, 488159, , , , , 9558EF405369500EC74EC48B16C67123, AFBC3A7F222C6C4AAC9BB72ACB89079751F1B26BCFB622AABFF3095D35E953C0
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\cs\messages.json, En cuarentena, 1257, 488159, , , , , 524629E383646EE89AB2F678B4BE3FF6, 2D09BA1FD1682BE5630353AEF92E3EB7F6BF82FA6E86CF6EDB38102D2B6811E3
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\da\messages.json, En cuarentena, 1257, 488159, , , , , F013F8F66453B7BB32ADFBAB94F43265, BC000154FEA83481537A4F9DBAB369970E83CA8335E52C451D9363C2BED20F45
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\de\messages.json, En cuarentena, 1257, 488159, , , , , DE39EA44F2A12A934757A93C64251ACB, 66A7A4DE9D4A548E9109821EF598273032833B5644BF1157BF4045E9A14782B4
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\el\messages.json, En cuarentena, 1257, 488159, , , , , 09A7A7CD38C78FF410EEDE8878408C74, F64C79D2C0340FDFD1355E5CF7402411E52DFD8C4E19B4F0D244A8E8DDFD64E8
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\en\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\en_GB\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\en_US\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\es\messages.json, En cuarentena, 1257, 488159, , , , , A14D4B287E82B0C724252D7060B6D9E9, 1E16982FAC30651F8214B23B6D81D451CC7DBB322EB1242AE40B0B9558345152
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\es_419\messages.json, En cuarentena, 1257, 488159, , , , , A14D4B287E82B0C724252D7060B6D9E9, 1E16982FAC30651F8214B23B6D81D451CC7DBB322EB1242AE40B0B9558345152
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\et\messages.json, En cuarentena, 1257, 488159, , , , , E47E22D7E235CDA9AB5CE8B0F4F1E1F8, D66AF121A08B3CA39E89DD2B5630C9E62772CD8D12A025D5529BCD26C9D8589A
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fa\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fi\messages.json, En cuarentena, 1257, 488159, , , , , DFB95328C33900FC5F0943DB17BB7A7B, 9FE90EC988C0D089C7756146124CC656A56C9336AD7049456200817E1D597E32
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fil\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\fr\messages.json, En cuarentena, 1257, 488159, , , , , 460291C4926F8C24D245A74A76B88155, 33976589FF5232B39103D8A8E474F4044258DFA30AE667B90F176FA93C7E9AD2
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\gu\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\he\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\hi\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\hr\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\hu\messages.json, En cuarentena, 1257, 488159, , , , , 10461FD634DC768A6B93196B0879FD0F, FF48B5761FE27245CD49308014EEC10BF057B395846A4E1091B13458CCD84848
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\id\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\it\messages.json, En cuarentena, 1257, 488159, , , , , 4CF617F75C36EF8C5C566F7E9689A123, 2603AA798E78D7DC60EB166545436A264658F7B1B6B4B7436D367A969033B263
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ja\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\kn\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ko\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\lt\messages.json, En cuarentena, 1257, 488159, , , , , 1AD07246758F88714FD02AEE442F86EC, 4F19A929F71B3A20E145B12B61377E610D70CA1A020CEE8D0E8EBF38D7F1F0CA
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\lv\messages.json, En cuarentena, 1257, 488159, , , , , C903EB1F9762BB428DF73858E79FC5C6, BD607C80998190DE84D4D5610A2B8F4BCEE0D9500BC753DDFEB0B5A94F4DD4AE
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\mk\messages.json, En cuarentena, 1257, 488159, , , , , 711BE6153463FB924A8CB817DC59DCEC, 28DF1E64F5E5EE71277B6C154A7905F11C20C6C1115433DF23485FAE299AD7AE
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ml\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\mr\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ms\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\nl\messages.json, En cuarentena, 1257, 488159, , , , , 7EECC4311200A6726C4EDFCEEAEF1220, EA3C7300E6523FE08C28F073E7A34D043467E6EED330A031BC23CADA905762DC
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\no\messages.json, En cuarentena, 1257, 488159, , , , , CE1C94D6CE80894AC99A2E9076B30B7C, DA8F186B15A95192E69A3924545DE56516C7618236E85BD2C84AB3AAD8B117FB
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pl\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pt\messages.json, En cuarentena, 1257, 488159, , , , , 5C5A1426FF0C1128C1C6B8BC20CA29AC, 5E206DD2DAD597AC1D7FE5A94FF8A1A75F189D1FE41C8144DF44E3093A46B839
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pt_BR\messages.json, En cuarentena, 1257, 488159, , , , , 5C5A1426FF0C1128C1C6B8BC20CA29AC, 5E206DD2DAD597AC1D7FE5A94FF8A1A75F189D1FE41C8144DF44E3093A46B839
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\pt_PT\messages.json, En cuarentena, 1257, 488159, , , , , 5C5A1426FF0C1128C1C6B8BC20CA29AC, 5E206DD2DAD597AC1D7FE5A94FF8A1A75F189D1FE41C8144DF44E3093A46B839
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ro\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ru\messages.json, En cuarentena, 1257, 488159, , , , , CA49D076ACD74F2FAF38C51BB94A7655, 506CFB234C07A5087B7522469415660710FD9112BEFFFF2008C6E68DC05F0A3B
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sk\messages.json, En cuarentena, 1257, 488159, , , , , A43FFF6CFE872C583DB062871D25CA36, 4988A2D80C4F9E21C5C1614E3499C85A363E945D1288BC855A4A716A7FA5CA20
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sl\messages.json, En cuarentena, 1257, 488159, , , , , D8084714517DD44C55C4CD0F73A2B0BD, B0F22F0F3C8361CAD77040ACD0FBFC8904D697F108119F0CAC61C35243EA0729
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sq\messages.json, En cuarentena, 1257, 488159, , , , , BED2C5E327380FAD31DD34DFF7874A74, 481D2C35471F8C852438AD51BD45B237FCD29A6FF859AD7EC25D4F195FA17B13
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sr\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sv\messages.json, En cuarentena, 1257, 488159, , , , , 910A00B8A4A73C896AAD63A769D682E8, 89DDAFA626E66297FE0FFB684756D959AC5774DA65197CCB7C1EEDAA7186CB42
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\sw\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\ta\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\te\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\th\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\tr\messages.json, En cuarentena, 1257, 488159, , , , , 9222A5F6A75F38F60ABF1D5F5137CFE3, EC917A8DCB1D40EAB935C4BC7F9F9057CF7AF892D56DEBC945DD283A294766F8
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\uk\messages.json, En cuarentena, 1257, 488159, , , , , 984B0001491DCC9814D4954EB7009008, AA3211517E590FDAF9866DC06C59018C16617109782866466F8296741EAE7400
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\vi\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\zh_CN\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\_locales\zh_TW\messages.json, En cuarentena, 1257, 488159, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
Adware.Neoreklami.TskLnk, C:\Program Files (x86)\QYERbvxRHIE\files\background.html, En cuarentena, 1257, 488159, , , , , F296F957C5734E042FBDE73EE3F7A0B6, 275D07C674151F4AD43E9C663E3A98F457795B100426E481A8927BEAC70962B3
Trojan.FakeAlert.ASC, C:\PROGRAM FILES (X86)\I-FUNBOX DEVTEAM\IFUNBOX.EXE, En cuarentena, 10944, 1254, 1.0.44228, 207E1AB026FAEAB5C39E6418, dds, 01382764, 05CB4732D841179EAB7A97A5D59D056E, 2A75B4C2ADE8136807C490BCA9FC4FDAA14BEB5371362B6DE4A21F98EC0BF7E6
Malware.AI.731531002, C:\PROGRAMDATA\MICROSOFT\SEARCH\DATA\APPLICATIONS\WINDOWS\TMP.EDB, En cuarentena, 1000000, 0, 1.0.44228, 76264F53A8BAACDD2B9A46FA, dds, 01382764, 744D1C4C55AFFF0CF16FF42C8259D6FC, 39D3C43C0C29A0852597BA9DDD73A82668A04414DE79F54D9AFF41873FDA1D0B
Adware.Linkury, C:\ProgramData\PrefsSecure\prefs.xml, En cuarentena, 441, 377396, , , , , F40FB9AB17B09769F8F2950ECEDDF715, 275F58EFA6B94B18C5CDE6099086C46222F0B37F4DA90F86A3FA5D084507E4DD
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\DonSoft.bin, En cuarentena, 1002, 378434, , , , , 73C7F255788EF5669EAE18B18472F41A, F165A1B48FB911CBD992594458DF63EF67764BA2540E2425472ACC451100BC07
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\DuoDax.bin, En cuarentena, 1002, 378434, , , , , 588C3DD1A8A034568469494FCDE03C6A, 693E26ED4F61D84C69F5B016913C34F928E22DF92F083D8C8405AB86D91170AD
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Hotfix.bin, En cuarentena, 1002, 378434, , , , , 51FDFE3CF4D61EA480CFEBF54CD6B42D, 78CDA5A58E5E2393CA77C030D10AA16E918BD8CAB7287C603A8FA1F4D8329B44
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Infind.bin, En cuarentena, 1002, 378434, , , , , 6E791D613A24CD84183DEFAF2E0170B4, F6E90645E081795AACE21DE297BC21FECD0CEB0F0FD4C17BB935596E914C614F
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Lamlux.dat, En cuarentena, 1002, 378434, , , , , 09EAB69315E00B74DFA2CA27A5542829, 1932EA0CDDDD375F97F990E76738FEA8D10BEB5F0107B21C9C0EE0713B429221
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\md.xml, En cuarentena, 1002, 378434, , , , , FFB9BF1A895AC00778EB2C27941240FB, 856E979BC8B8BDD37312FE3CA0C89AF832886591F8EAB1D0F582F89D53DAB3FC
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\p40tl0bn.xml, En cuarentena, 1002, 378434, , , , , C9324293A0EDAA24F45760F5475B4AB6, 95943B30EA33B891D8FA46F7967FE15F63188CC7A4E27C1B68D3A1A5CE34B8A3
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Quotetone.dat, En cuarentena, 1002, 378434, , , , , 6C0B81E2B9D5ED38D1C7EEE3BC91DC50, 205FC9B60CDD14EAC0848065FA53A28C03EF89284C69732019CD8BD4D7A9AFE0
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Stringlab.bin, En cuarentena, 1002, 378434, , , , , , 
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\U-fan.bin, En cuarentena, 1002, 378434, , , , , , 
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\uninstall.dat, En cuarentena, 1002, 378434, , , , , 04AB151EFED2FF982B079D069C7CFA9F, 7E7EB3A7F5B80B0F25F13918402918203BA498D50DC9E6FFDF5B41442B9987CC
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\VaiaRedit.bin, En cuarentena, 1002, 378434, , , , , , 
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Voyasollam.d.dat, En cuarentena, 1002, 378434, , , , , D27C57F8EAA6C0FF3ECDB9B59BD69B85, 75B24730EA8B839A457BB59EC65C8CB7946E47B1B9366B4E4F521A47146ECAA2
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Voyasollam.dat, En cuarentena, 1002, 378434, , , , , 56C5063B3037ACB3DA925AF7F0AE6662, 6F4080E6CF28C52AA4328EC2D08238019370BB870C218CC7AE070DF9A052A247
Adware.Linkury.ACMB1, C:\ProgramData\Voyasollam\Zummazap.dat, En cuarentena, 1002, 378434, , , , , , 
Adware.Linkury, C:\ProgramData\Logic Cramble\Config.json, En cuarentena, 441, 431817, , , , , 98F61932DC1F85F8BC6888F8016EF249, E9F3C2575332BF814082876D24DA7052F1E72A34D2DBAC1E5632AD88221050B9
Adware.Linkury, C:\ProgramData\Logic Cramble\System.Data.SQLite.xml, En cuarentena, 441, 431817, , , , , 1BCF619EE70B01E642C2F7E140A7CE21, 549076194447BF90DE7B742CE55DF438BBE536D113E66DF2DA071B926D67BC22
Adware.OnlineIO, C:\ProgramData\Microleaves\Online Application\updates\basic_updates.aiu, En cuarentena, 1412, 399763, , , , , 6B31786B37F3F62E38F26313A0978DDA, 1A95FE11CD64CDB0E7CFB12085D9D3CB87DB3D5A7C24DB485E23FBE8D54223CD
PUP.Optional.Linkury.Generic, C:\PROGRAMDATA\VOYASOLLAMS\FF.HP, En cuarentena, 198, 380106, 1.0.44228, , ame, , 0E1F0B27A5D1F7B532479C9F2D742048, EC5C5231B893D0BE53CB004D167B2E125EE8A8F406833E4D05344EB5B5FDD5F5
PUP.Optional.Linkury.Generic, C:\ProgramData\Voyasollams\ff.NT, En cuarentena, 198, 380106, , , , , 98684120767D0EAFFE894FFCE9B0115F, 5B19C937ADCEFA1368495BDE4D3142F6AA50B60FFA592E0994EB0AA9D579E1F7
PUP.Optional.Linkury.Generic, C:\ProgramData\Voyasollams\snp.sc, En cuarentena, 198, 380106, , , , , 87D44FAC9AA933C2C01BFB8DAB1DA18D, 920213197D867B7FE28E6A4C64F52E773DAEB2B7544C8C6CCEB4D7453E3704F5
RiskWare.Patcher, C:\USERS\KRAYS\DESKTOP\WONDERSHARE_PDFELEMENT_PROFESSIONAL_7.5.3.4801\WONDERSHARE_PDFELEMENT_PROFESSIONAL_7.5.3.4801\CRACK\PATCH.EXE, En cuarentena, 7987, 834484, 1.0.44228, B2C2E9DD00C428BBC9D79408, dds, 01382764, E8BF473CCAB335D19C7D570F6F651F3A, 7C71EAB6ED15B1ACECE93719FE317B4A7339A8B925112FB4A80314D7A06555A0
PUP.Optional.OpenCandy, C:\USERS\KRAYS\DESKTOP\LUKAS\INSTALADORES\UTORRENT.EXE, En cuarentena, 1335, 747337, 1.0.44228, , ame, , 808080AF2137CBDAEFD501A866335586, 03B0757938F0661C760BA8C5E31BFFD22D6D14F001084978F13D9EDF340FB024
CrackTool.Agent, C:\USERS\KRAYS\DOWNLOADS\TRAP PACK\DAEMON TOOLS PRO 6\ACTIVATOR.EXE, En cuarentena, 6084, 353138, 1.0.44228, F107069FE721362EFEDE5A93, dds, 01382764, A63E83BC2A68828811F4276CE54F4276, 869C0F64D1D8C646994C2CCDEDF655C76B2E3C3B8CAC03E3CCA48C2D3E5E9D3A
HackTool.FilePatch, C:\USERS\KRAYS\DOWNLOADS\PATCH\PATCH\WSC.PATCH-XENOCODER.EXE, En cuarentena, 7720, 281135, 1.0.44228, 905DD738FA44BF7FE9E5C3B2, dds, 01382764, 850BC3F62BAEFC43765705B646142FFC, 757268AB7B624BB98780422BCA4AF459F8ED79D8429D791E948694D76C5E541D
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\DOWNLOADS\ADOBE ACTIVADOR - 2017 FER AZUA\ACTIVADOR PRO.EXE, En cuarentena, 1000002, 0, 1.0.44228, 9082695A2E6099F583AC763F, dds, 01382764, 8ABDC20F619641E29AA9AD2B999A0DCC, CDC95D0113A2AF05C2E70FAB23F6C218AE583EBCB47077DD5B705A476F9D6B96
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\DOWNLOADS\AE CRACK TRITAX 2017\AE CRACK TRITAX 2017.EXE, En cuarentena, 1000002, 0, 1.0.44228, 9082695A2E6099F583AC763F, dds, 01382764, 8ABDC20F619641E29AA9AD2B999A0DCC, CDC95D0113A2AF05C2E70FAB23F6C218AE583EBCB47077DD5B705A476F9D6B96
Malware.AI.1769581833, C:\USERS\KRAYS\DOWNLOADS\W7L\W7L\WIND0WS LOAD3R.EXE, En cuarentena, 1000000, 0, 1.0.44228, E400AE94EFA509826979AD09, dds, 01382764, F43AAB2EACA2ECFA91C5EB31F19AD070, E0A11866E9F34733712AFA3C2E6B6A3EB8C16A4B3F3E03F85D1743E26A4ACF2C
Malware.AI.4232998684, C:\USERS\KRAYS\DOWNLOADS\KMSPICO-10.2-PORTABLE\KMSPICO PORTABLE V10.2.0.EXE, En cuarentena, 1000000, 0, 1.0.44228, EC8B3674CD360855FC4E6F1C, dds, 01382764, 16B2B70F065816582F4A3A4ECD9BBCA0, DFFE8BE8141EF8290BCA1ECDB1F6D704ABDE98993D2ABD25AE38EB672E55B53E
Qbot.Backdoor.Stealer.DDS, C:\USERS\KRAYS\DOWNLOADS\ADBPATCH.2017.BY.ZENYKID\ADBPATCH.2017.BY.ZENYKID\ADOBE UNIVERSAL PATCHER 2017\ADOBE UNIVERSAL PATCHER 2017.EXE, En cuarentena, 1000002, 0, 1.0.44228, 53FC5885EA82E778D260CE26, dds, 01382764, B31679DB7DB878992B4553290A9E6C7C, 256C2A409C97448D168F3EB1BFB89AF3D259DFC05A510A3F464D8E4B348116D4
Qbot.Backdoor.Stealer.DDS, C:\USERS\KRAYS\DOWNLOADS\ADBPATCH.2017.BY.ZENYKID\ADBPATCH.2017.BY.ZENYKID\ADOBE UNIVERSAL PATCHER 2017.EXE, En cuarentena, 1000002, 0, 1.0.44228, 53FC5885EA82E778D260CE26, dds, 01382764, B31679DB7DB878992B4553290A9E6C7C, 256C2A409C97448D168F3EB1BFB89AF3D259DFC05A510A3F464D8E4B348116D4
Qbot.Backdoor.Stealer.DDS, C:\USERS\KRAYS\DOWNLOADS\ADBPATCH.2017.BY.ZENYKID\ADBPATCH.2017.BY.ZENYKID\ADOBE UNIVERSAL PATCHER 2017.RAR, En cuarentena, 1000002, 0, 1.0.44228, 53FC5885EA82E778D260CE26, dds, 01382764, D1F5ACF28CD69C7B5DFB73DCB546B4EE, D090EDC24B6C08B3D76272361373F577E3E9B85038D77D6EECB65590BFD5D10F
CrackTool.Agent, C:\USERS\KRAYS\DOWNLOADS\DAEMON TOOLS PRO\DAEMON TOOLS PRO 6\ACTIVATOR.EXE, En cuarentena, 6084, 353138, 1.0.44228, F107069FE721362EFEDE5A93, dds, 01382764, A63E83BC2A68828811F4276CE54F4276, 869C0F64D1D8C646994C2CCDEDF655C76B2E3C3B8CAC03E3CCA48C2D3E5E9D3A
Qbot.Backdoor.Stealer.DDS, C:\USERS\KRAYS\DOWNLOADS\APPCC2018-PVP\ADOBE PREMIERE PRO CC 2018\PATCH (PAINTER)\ADOBE.SNR.PATCH.V2.0-PAINTER\ADOBE.SNR.PATCH.V2.0-PAINTER.EXE, En cuarentena, 1000002, 0, 1.0.44228, 53FC5885EA82E778D260CE26, dds, 01382764, B31679DB7DB878992B4553290A9E6C7C, 256C2A409C97448D168F3EB1BFB89AF3D259DFC05A510A3F464D8E4B348116D4
Qbot.Backdoor.Stealer.DDS, C:\USERS\KRAYS\DOWNLOADS\APPCC2018-PVP\ADOBE PREMIERE PRO CC 2018\PATCH (PAINTER)\ADOBE.SNR.PATCH.V2.0-PAINTER.ZIP, En cuarentena, 1000002, 0, 1.0.44228, 53FC5885EA82E778D260CE26, dds, 01382764, 0CF0907EA199909CA9C86DE3097FFD21, 7B0BDEDD52B08BBED1DF72F13F333A556286AA6B0E9804422477994A245A4FE6
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\DOWNLOADS\APPCC2018-PVP\ADOBE PREMIERE PRO CC 2018\PATCH (PAINTER)\AMTEMU.V0.9.2.WIN-PAINTER.ZIP, En cuarentena, 1000002, 0, 1.0.44228, 9082695A2E6099F583AC763F, dds, 01382764, 7BC12F9386DF469D3A630C333E7C4360, 11AFC1CEEFB43B9C029AB11C7118E2CE7B1FB8504DCAD750291689C378AF7898
Malware.AI.1769581833, C:\USERS\KRAYS\DOWNLOADS\W7L.RAR, En cuarentena, 1000000, 0, 1.0.44228, E400AE94EFA509826979AD09, dds, 01382764, 8CC713660F12457CFF1984F7FB6C958F, 9DCE2CDE64A240E9E7768506FB22020380FD3EC6470B668B9930D4EE555F2B7E
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\DOWNLOADS\AE CRACK TRITAX 2017.RAR, En cuarentena, 1000002, 0, 1.0.44228, 9082695A2E6099F583AC763F, dds, 01382764, 03882F76158AC85C220429ED449ED3E1, 672B78AE4B0A1E5CC680662C97F3C5651AF32532C41DADA6E40C13E0AF4DCB0F
Qbot.Backdoor.Stealer.DDS, C:\USERS\KRAYS\DOWNLOADS\ADBPATCH.2017.BY.ZENYKID.RAR, En cuarentena, 1000002, 0, 1.0.44228, 53FC5885EA82E778D260CE26, dds, 01382764, 90313760C6F063E476BAF7A3A8735D41, AD04A156326CC1117B71BBA88F50DDB115A2A5BF839011D284B06492451CA4B6
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\DOWNLOADS\APPCC2018-PVP\ADOBE PREMIERE PRO CC 2018\PATCH (PAINTER)\AMTEMU.V0.9.2.WIN-PAINTER\AMTEMU.V0.9.2-PAINTER.EXE, En cuarentena, 1000002, 0, 1.0.44228, 9082695A2E6099F583AC763F, dds, 01382764, 8ABDC20F619641E29AA9AD2B999A0DCC, CDC95D0113A2AF05C2E70FAB23F6C218AE583EBCB47077DD5B705A476F9D6B96
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\DOWNLOADS\ADOBE ACTIVADOR - 2017 FER AZUA.RAR, En cuarentena, 1000002, 0, 1.0.44228, 9082695A2E6099F583AC763F, dds, 01382764, 4FEDF2B8346FE897AD52A48B6916B99A, 56368541E8F564733EEE6316998AD0FEC828C0B97DB915B64808C44759058C66
Trojan.Agent.TskLnk, C:\USERS\KRAYS\APPDATA\LOCAL\MICROSOFT\TASKPLAY\CACHES.DAT, En cuarentena, 1420, 437096, 1.0.44228, 1565717F241C89CDE886439F, dds, 01382764, 73F119A0806056A5EBBC96210476AEB6, D58E3416DDCDCF448270C8470931DDE33E1C53AFCB02FC07F760BF4191BC5E65
Adware.Agent, C:\USERS\KRAYS\APPDATA\LOCAL\MICROSOFT\TASKPLAY\INDEX64.DAT, En cuarentena, 86, 420084, 1.0.44228, , ame, , 5E92EF331719EDCD516914560305AB90, FB9050F057BAF7A3365975DDA62F78E37225E4212BFD0731A953FA2ECB7EC763
Adware.Agent, C:\USERS\KRAYS\APPDATA\LOCAL\MICROSOFT\TASKPLAY\INDEX.DAT, En cuarentena, 86, 420084, 1.0.44228, , ame, , 7DD2FA58AF8760929BDA5887CF0DCA22, 88FF2A86AA6D44B02E56F8E289DE051E60219366E0974D3092EEA74993FF9EBD
Malware.AI.3901113247, C:\USERS\KRAYS\APPDATA\LOCAL\MICROSOFT\WINDOWS\SYSTEM32\MULTITASK.DAT, En cuarentena, 1000000, 0, 1.0.44228, 1565717F241C89CDE886439F, dds, 01382764, E685BAA196B436D74213ED422601C674, 9E51D90DB88E19D7555386584FA1DD12C9CA1CCA1A32C72065AC8B0C0C178768
Malware.AI.646924172, C:\USERS\KRAYS\APPDATA\LOCAL\MICROSOFT\WINDOWS\SYSTEM32\MULTITASK64.DAT, En cuarentena, 1000000, 0, 1.0.44228, 312EFF58649C6224268F478C, dds, 01382764, 26228856A1882BD4F8D7FB458653C02C, 9F287E6EE22C65CAA92F35D5B9481F0DB5F6864196300B71EB899FA058A1FB27
Backdoor.Bot, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\WUP\WUP.EXE, En cuarentena, 3618, 874960, 1.0.44228, 327CDD49E887EF3297ECEE50, dds, 01382764, CE4395EDBBF9869A5E276781AF2E0FB5, F059A5358C24CC362C2F74B362C75E02035FDF82F9FFAE8D553AFEE1A271AFD0
HackTool.Agent, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\SMB\DEPS.ZIP, En cuarentena, 4035, 400073, 1.0.44228, 8A91F74707A7A19375F577CA, dds, 01382764, DFEC087301654E1603CBC92CA93CE2C0, 7C1D7122AFDA31764F7465812E69764F71A6F2040387B3B019D2B83912339084
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\ML20201223.EXE, En cuarentena, 1000002, 0, 1.0.44228, FFF9242574186E1BFDD7ED76, dds, 01382764, D54ADE674CB0C3E6D322ED7380E8ADF6, 5191548B8EDF4B98E623F055F5205E2DB17AA220C28928B1DA1C3A9BA1A75EE0
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\MG20201223-1.EXE, En cuarentena, 1000002, 0, 1.0.44228, 9A7A6AFB3102800D547A4E88, dds, 01382764, 0A13D106FA3997A0C911EDD5AA0E147A, 5E46ECFFCFF9440E97BF4F0A85AD34132407F925B27A8759F5A01DE5EA4DA6AF
Trojan.Ranumbot, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\GETDISKSPACE.EXE, En cuarentena, 7848, 963903, 1.0.44228, 62AF6C5113E988A52C964094, dds, 01382764, 8FA6BDDC1A44FDD411EFF61A2B11D4CF, BE5404679F1A6CC100FDCC660EB2E849E50F32EC94A9190CA625EFE3B2C70914
Trojan.Dropper, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\NUPLOAD05053.EXE, En cuarentena, 606, 937705, 1.0.44228, F8A23424BD4D9885B045D7E1, dds, 01382764, 04C1F4395F80A3890AA8B12EBC2B4855, FAD16599A866F466BDEFF2A716B9AA79FAA6677F2895F0B262CF9402DEB4B66C
Trojan.Ranumbot, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\KILLPROCESS2005.EXE, En cuarentena, 7848, 963907, 1.0.44228, ED4AA48599916E6A8508782D, dds, 01382764, 1510073EF64B27437486F97CA9C1398A, DE0C1F000485654F9305B396FFDB009DBBC4D8671C951EE3D67F6AD64F7045D7
Trojan.Glupteba, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\GETFP.EXE, En cuarentena, 4432, 916786, 1.0.44228, 6F23616F94EE6220A0C2C51F, dds, 01382764, 941B755A404A616A55EA57FF4DBFE184, 9AFABDF762EA2E412019CE0F6004F7FE1C948F2B36E1AAB347E623FEDD5EF440
Trojan.Dropper.GO, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\WW31.EXE, En cuarentena, 7956, 944512, 1.0.44228, 2B817CE6404AE18D25E5BCA9, dds, 01382764, 9A4B7B0849A274F6F7AC13C7577DAAD8, C1D5A585FCE188423D31DF3EA806272F3DAA5EB989E18E9ECF3D94B97B965F8E
Trojan.Ranumbot, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\SMBSCANLOCAL0906.EXE, En cuarentena, 7848, 963887, 1.0.44228, 76264F53A8BAACDD2B9A46FA, dds, 01382764, 6BE10A13C17391218704DC24B34CF736, 9A74640CA638B274BC8E81F4561B4C48B0C5FBCB78F6350801746003DED565EB
Trojan.Ranumbot, C:\USERS\KRAYS\APPDATA\LOCAL\TEMP\CSRSS\REMOVESMBDEPS1801.EXE, En cuarentena, 7848, 963913, 1.0.44228, EB98A8DCD8931C6C1B1C4B97, dds, 01382764, 1F4CF84B4E0C57DFBF5611749F7C907D, D338E58F41CB6AB1361FC574182F68B74EC955A93FC64E8D06972468398E67AD
Adware.Neoreklami.ChrPRST, C:\USERS\KRAYS\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\CMHOMIPKKLCKPOMAFALOJOBPPMMIDLGL\0.1.4_0\MANIFEST.JSON, En cuarentena, 406, 488216, 1.0.44228, , ame, , ED6B2E28608A0C5BE510C08B2655FCEC, 98C3F9222FEF8B70884346478CD9CF08066F0A681A7ED17E92A493E246E42D5D
Adware.Linkury.Generic, C:\USERS\KRAYS\APPDATA\LOCAL\AGENT.DAT, En cuarentena, 3864, 404872, 1.0.44228, , ame, , D27C57F8EAA6C0FF3ECDB9B59BD69B85, 75B24730EA8B839A457BB59EC65C8CB7946E47B1B9366B4E4F521A47146ECAA2
Adware.Linkury.Generic, C:\USERS\KRAYS\APPDATA\LOCAL\CONFIG.XML, En cuarentena, 3864, 404859, 1.0.44228, , ame, , EF2F29ABEE3A876B02D5E668B966023D,

MARCELO_BRAVO · 19 Agosto, 2021 19:13

REPORTE ANTIMALWARE PARTE 2 POR MAXIMO CHAR

E3600E87187343E13E46CE67B2174A150CC571993C20EAA1474106FD4055F30B
Adware.Linkury.Generic, C:\USERS\KRAYS\APPDATA\LOCAL\MD.XML, En cuarentena, 3864, 404866, 1.0.44228, , ame, , FFB9BF1A895AC00778EB2C27941240FB, 856E979BC8B8BDD37312FE3CA0C89AF832886591F8EAB1D0F582F89D53DAB3FC
Adware.Linkury.Generic, C:\USERS\KRAYS\APPDATA\LOCAL\NOAH.DAT, En cuarentena, 3864, 404865, 1.0.44228, , ame, , 04AB151EFED2FF982B079D069C7CFA9F, 7E7EB3A7F5B80B0F25F13918402918203BA498D50DC9E6FFDF5B41442B9987CC
Adware.Linkury.Generic, C:\USERS\KRAYS\APPDATA\LOCAL\MAIN.DAT, En cuarentena, 3864, 442900, 1.0.44228, , ame, , 56C5063B3037ACB3DA925AF7F0AE6662, 6F4080E6CF28C52AA4328EC2D08238019370BB870C218CC7AE070DF9A052A247
Adware.Linkury, C:\USERS\KRAYS\APPDATA\LOCAL\INSTALLER.DAT, En cuarentena, 441, 715618, 1.0.44228, , ame, , 1556484133B2EC69A13E3FB07411524D, 141DD45FCB935EFB2992E2CC6BC15CAC18AA3718F2C508FB8E4181F4AE4510CE
Adware.Linkury.Generic, C:\USERS\KRAYS\APPDATA\LOCAL\MATHTOUCH.TST, En cuarentena, 3864, 404871, 1.0.44228, , ame, , 359E8B1105BB8971022DF4F463D33476, CE3135AB069DF36B827F23F4A4456EB8BCD45A8D7719E408FCD9F8D5DBED809C
Adware.Linkury.TskLnk, C:\USERS\KRAYS\APPDATA\LOCAL\INSTALLATIONCONFIGURATION.XML, En cuarentena, 16731, 444923, 1.0.44228, , ame, , 18ACEBF838C8DEEC5C92C23A15EFEEAD, 09BA635B5E95D60F4FAE4705420EE9C16EAE709C41C14A92835F2A7CFD18DFE8
Generic.Trojan.Malicious.DDS, C:\USERS\KRAYS\APPDATA\LOCAL\VENTOTRAX.BIN, En cuarentena, 1000002, 0, 1.0.44228, 4DC46F118F0D58E6271EDB9E, dds, 01382764, 8ABB64D9FA00C40600B5A03D8B390022, 176BA935853B9A7A2EAE116E415E640750A77BC466FD2D0E9F8DFCE2D398922B
Malware.AI.1811614059, C:\USERS\KRAYS\APPDATA\LOCAL\YEARKAYSTRONG.BIN, En cuarentena, 1000000, 0, 1.0.44228, 56A4C2E0FB1B9C926BFB096B, dds, 01382764, E0356515EEAA2F0D9CEEA803A163CFE5, 8608E422646A5309801EE4712744BE9D4B19E5D56699EBE23D07E12691C7FF95
PUP.Optional.StartPage, C:\USERS\KRAYS\APPDATA\ROAMING\BROWSERMODULE\COMPONENT.LOG, En cuarentena, 241, 335017, 1.0.44228, , ame, , C270204168C375CC2DD440D71AE0D668, E811F04504F18855E1C3ECA5F2CA795B023A01B070CD755ECD217FEA6ECECE35
PUP.Optional.SSN, C:\USERS\KRAYS\APPDATA\ROAMING\SSN\UPDATE\SETUP.PHP, En cuarentena, 4395, 431769, 1.0.44228, , ame, , CD9B2B9E26A33072D9C8B87836EC0A3E, 366065A0082F7BBA861499D4F4B7E0BD43DAF8BA561212B406D4FCED5913C921
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\dictionaries\en-US.aff, En cuarentena, 4395, 431769, , , , , F80199AACF017B9A4CAA61045DC025E6, C36C141A72C69E59D0D52840E0E8BE483F509236CBD12A0A416CE66032202C86
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\dictionaries\en-US.dic, En cuarentena, 4395, 431769, , , , , 7070DA51B95C765976BA141AE5588434, CFFD9A088DC5CE15732F3A38DADA04F0ED929B66389E687DE9A744ACAE640861
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\gmp-fake\1.0\fake.info, En cuarentena, 4395, 431769, , , , , A3ECD28F55FFB1CE60980AB42FE3A2C7, 3B92740A81E32BB41B0CDCB68390C575A4BACF9D1D4BCC8E32B6BBE4460B11C5
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\dependentlibs.list, En cuarentena, 4395, 431769, , , , , 86E693A8BD9E76562DBB45143DB3173A, 79410096BCA862F524D5B277D4642F292683D98F69E9A9D506666A55253F6955
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\freebl3.chk, En cuarentena, 4395, 431769, , , , , 642160FABFE1C0D1B2999B14B35710B0, E803CDB8CA22F56A763C2BA32EBEF9D33A20E5F41DBF6BF25D34A9002B10ED71
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\js-gdb.py, En cuarentena, 4395, 431769, , , , , DC6FDD9989DE948D32CCD56DF4E5EA84, F5C5FD6B39FDEE3124F0FB90B1ED20BA92D670862C406E46D51C7684C3A61CBE
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\LICENSE, En cuarentena, 4395, 431769, , , , , DC9B6ECD19A14A54A628EDAAF23733BF, A799ADF18BFB1911F16086DC0E2A6D1CD0E31272F47E7EE6841B465B74D249DE
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\Newtonsoft.Json.xml, En cuarentena, 4395, 431769, , , , , F1037BE758DF0F047CD8B310DB4927F6, 4C843591D5B97121690075528B7B0FA96EC5F457E5F30F9F1F9283AD59ED7F83
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\nssdbm3.chk, En cuarentena, 4395, 431769, , , , , 3D2C9BE1CAF6AC262D302DE585AEFD71, BA2D4833DB6C178068926AB573BD0745E073C16F6B263A6875B55B1988BB1093
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\precomplete, En cuarentena, 4395, 431769, , , , , 80FA4B6018014EA69C5BF0B3ADCC4901, 812B6A01B65A8F4D7B2B60A116BC4C74488CF94CD5D5777D06836D86D9BC2679
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\README.xulrunner, En cuarentena, 4395, 431769, , , , , E20FDCF4B78A6029E057C60AC8087BBB, 261A86757896861F2034E40AF6709AEA4609827CD0D773606644A5FEE471A8B3
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\softokn3.chk, En cuarentena, 4395, 431769, , , , , 9B293A71200F6FB636DA7CDD1B0DAE27, F1020F30F24C2CCDDA60AFEC7DA9E11B8D4DBC7EDDB5BE7CC98A8061B626BBCA
PUP.Optional.SSN, C:\Users\Krays\AppData\Roaming\ssn\version.txt, En cuarentena, 4395, 431769, , , , , 1385974ED5904A438616FF7BDB3F7439, DBAE772DB29058A88F9BD830E957C695347C41B6162A7EB9A9EA13DEF34BE56B
PUP.Optional.BitCoinMiner, C:\Users\Krays\AppData\Roaming\isMiner\isMiner.log, En cuarentena, 1330, 352440, , , , , A8D651A87EDA1638A8D8DF4527218974, 767CF2661408FBD3DE74D0E0EF8983314064F5831C2A8B7644EEAB8794F1A79C
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\icons\icon128.png, En cuarentena, 361, 437828, , , , , A488210AE174A304ECA7091136646C16, 780FD5E6105D8E59CD24C797B9C6200293BD89D735F64A918F89A3FD2850F207
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\icons\icon16.png, En cuarentena, 361, 437828, , , , , A4B312C792EC1CEA9C8116D7A085DEC5, 54272DE6075587CD55DF8C0E6F7EC819AB01803DA861EA6F3DD4F665D77BC728
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\icons\icon48.png, En cuarentena, 361, 437828, , , , , 1E001C21C2A87A52EAB0B0D08A06E753, 88999ED5F6AAC39C82A4AF4C775F82439AE050D1EA2F03250758CA685A189504
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\am\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ar\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\be\messages.json, En cuarentena, 361, 437828, , , , , 5A56E498EACF6CEED5F1C69EDAF05441, C381EAC12310F44DBB7E80C12B99B536173339063C004747587A826C5CE414E4
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\bg\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\bn\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ca\messages.json, En cuarentena, 361, 437828, , , , , 9558EF405369500EC74EC48B16C67123, AFBC3A7F222C6C4AAC9BB72ACB89079751F1B26BCFB622AABFF3095D35E953C0
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\cs\messages.json, En cuarentena, 361, 437828, , , , , 524629E383646EE89AB2F678B4BE3FF6, 2D09BA1FD1682BE5630353AEF92E3EB7F6BF82FA6E86CF6EDB38102D2B6811E3
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\da\messages.json, En cuarentena, 361, 437828, , , , , F013F8F66453B7BB32ADFBAB94F43265, BC000154FEA83481537A4F9DBAB369970E83CA8335E52C451D9363C2BED20F45
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\de\messages.json, En cuarentena, 361, 437828, , , , , DE39EA44F2A12A934757A93C64251ACB, 66A7A4DE9D4A548E9109821EF598273032833B5644BF1157BF4045E9A14782B4
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\el\messages.json, En cuarentena, 361, 437828, , , , , 09A7A7CD38C78FF410EEDE8878408C74, F64C79D2C0340FDFD1355E5CF7402411E52DFD8C4E19B4F0D244A8E8DDFD64E8
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en\main.css, En cuarentena, 361, 437828, , , , , FB573263301B9899955E628A22E9ACD2, 97C70A2756D5951EFBD4072301E16A44AA8C4B35811F5F354C1E1714603EFC12
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en_GB\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\en_US\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\es\messages.json, En cuarentena, 361, 437828, , , , , A14D4B287E82B0C724252D7060B6D9E9, 1E16982FAC30651F8214B23B6D81D451CC7DBB322EB1242AE40B0B9558345152
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\es_419\messages.json, En cuarentena, 361, 437828, , , , , A14D4B287E82B0C724252D7060B6D9E9, 1E16982FAC30651F8214B23B6D81D451CC7DBB322EB1242AE40B0B9558345152
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\et\messages.json, En cuarentena, 361, 437828, , , , , E47E22D7E235CDA9AB5CE8B0F4F1E1F8, D66AF121A08B3CA39E89DD2B5630C9E62772CD8D12A025D5529BCD26C9D8589A
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fa\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fi\messages.json, En cuarentena, 361, 437828, , , , , DFB95328C33900FC5F0943DB17BB7A7B, 9FE90EC988C0D089C7756146124CC656A56C9336AD7049456200817E1D597E32
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fil\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\fr\messages.json, En cuarentena, 361, 437828, , , , , 460291C4926F8C24D245A74A76B88155, 33976589FF5232B39103D8A8E474F4044258DFA30AE667B90F176FA93C7E9AD2
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\gu\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\he\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\hi\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\hr\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\hu\messages.json, En cuarentena, 361, 437828, , , , , 10461FD634DC768A6B93196B0879FD0F, FF48B5761FE27245CD49308014EEC10BF057B395846A4E1091B13458CCD84848
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\id\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\it\messages.json, En cuarentena, 361, 437828, , , , , 4CF617F75C36EF8C5C566F7E9689A123, 2603AA798E78D7DC60EB166545436A264658F7B1B6B4B7436D367A969033B263
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ja\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\kn\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ko\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\lt\messages.json, En cuarentena, 361, 437828, , , , , 1AD07246758F88714FD02AEE442F86EC, 4F19A929F71B3A20E145B12B61377E610D70CA1A020CEE8D0E8EBF38D7F1F0CA
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\lv\messages.json, En cuarentena, 361, 437828, , , , , C903EB1F9762BB428DF73858E79FC5C6, BD607C80998190DE84D4D5610A2B8F4BCEE0D9500BC753DDFEB0B5A94F4DD4AE
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\mk\messages.json, En cuarentena, 361, 437828, , , , , 711BE6153463FB924A8CB817DC59DCEC, 28DF1E64F5E5EE71277B6C154A7905F11C20C6C1115433DF23485FAE299AD7AE
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ml\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\mr\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ms\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\nl\messages.json, En cuarentena, 361, 437828, , , , , 7EECC4311200A6726C4EDFCEEAEF1220, EA3C7300E6523FE08C28F073E7A34D043467E6EED330A031BC23CADA905762DC
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\no\messages.json, En cuarentena, 361, 437828, , , , , CE1C94D6CE80894AC99A2E9076B30B7C, DA8F186B15A95192E69A3924545DE56516C7618236E85BD2C84AB3AAD8B117FB
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pl\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pt\messages.json, En cuarentena, 361, 437828, , , , , 5C5A1426FF0C1128C1C6B8BC20CA29AC, 5E206DD2DAD597AC1D7FE5A94FF8A1A75F189D1FE41C8144DF44E3093A46B839
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pt_BR\messages.json, En cuarentena, 361, 437828, , , , , 5C5A1426FF0C1128C1C6B8BC20CA29AC, 5E206DD2DAD597AC1D7FE5A94FF8A1A75F189D1FE41C8144DF44E3093A46B839
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\pt_PT\messages.json, En cuarentena, 361, 437828, , , , , 5C5A1426FF0C1128C1C6B8BC20CA29AC, 5E206DD2DAD597AC1D7FE5A94FF8A1A75F189D1FE41C8144DF44E3093A46B839
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ro\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ru\messages.json, En cuarentena, 361, 437828, , , , , CA49D076ACD74F2FAF38C51BB94A7655, 506CFB234C07A5087B7522469415660710FD9112BEFFFF2008C6E68DC05F0A3B
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sk\messages.json, En cuarentena, 361, 437828, , , , , A43FFF6CFE872C583DB062871D25CA36, 4988A2D80C4F9E21C5C1614E3499C85A363E945D1288BC855A4A716A7FA5CA20
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sl\messages.json, En cuarentena, 361, 437828, , , , , D8084714517DD44C55C4CD0F73A2B0BD, B0F22F0F3C8361CAD77040ACD0FBFC8904D697F108119F0CAC61C35243EA0729
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sq\messages.json, En cuarentena, 361, 437828, , , , , BED2C5E327380FAD31DD34DFF7874A74, 481D2C35471F8C852438AD51BD45B237FCD29A6FF859AD7EC25D4F195FA17B13
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sr\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sv\messages.json, En cuarentena, 361, 437828, , , , , 910A00B8A4A73C896AAD63A769D682E8, 89DDAFA626E66297FE0FFB684756D959AC5774DA65197CCB7C1EEDAA7186CB42
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\sw\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\ta\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\te\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\th\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\tr\messages.json, En cuarentena, 361, 437828, , , , , 9222A5F6A75F38F60ABF1D5F5137CFE3, EC917A8DCB1D40EAB935C4BC7F9F9057CF7AF892D56DEBC945DD283A294766F8
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\uk\messages.json, En cuarentena, 361, 437828, , , , , 984B0001491DCC9814D4954EB7009008, AA3211517E590FDAF9866DC06C59018C16617109782866466F8296741EAE7400
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\vi\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\zh_CN\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\_locales\zh_TW\messages.json, En cuarentena, 361, 437828, , , , , 33292C7C04BA45E9630BB3D6C5CABF74, 9BB88EA0DCD22868737F42A3ADBDA7BF773B1EA07EE9F4C33D7A32EE1D902249
PUP.Optional.RussAd, C:\Users\Krays\AppData\Roaming\Opera Software\Opera Stable\Extensions\pgkbgflmbfpkbehmfneoglkjkagbkhgd\2.0.0.321_0\manifest.json, En cuarentena, 361, 437828, , , , , ED19983B859D04EDC0F3CA93C2AE4BBB, D45EF3CD94F266C99CBB96FE96B604F5D2CB33B0E5E42992156416E561A49187
PUP.Optional.OpenCandy, C:\USERS\KRAYS\APPDATA\ROAMING\UTORRENT\UPDATES\3.4.2_38913.EXE, En cuarentena, 1335, 747337, 1.0.44228, , ame, , 808080AF2137CBDAEFD501A866335586, 03B0757938F0661C760BA8C5E31BFFD22D6D14F001084978F13D9EDF340FB024
Trojan.Injector, C:\USERS\KRAYS\APPDATA\ROAMING\TMP546.DAT, En cuarentena, 749, 432070, 1.0.44228, 44574EBD5A93545EDCF1EFA1, dds, 01382764, B58BD18CB5B1266854D28296007ED185, A9B8734A621E03818168C54FB8FB68C04D2F605686901FE56FC9FBF5216078D0
PUP.Optional.MirageISO, C:\USERS\PUBLIC\DOCUMENTS\XMUPDATE\CONF.DB, En cuarentena, 4608, 443706, 1.0.44228, , ame, , 85A08F7858A6DD01BE20BC297A19024F, 269FE51EEBE641CDA809C7EFEE9CC7CB5A838B6D5EC1C70B022064F3F8632EF7
Trojan.MalPack.GS, C:\WINDOWS\SYSTEM32\CONFIG\SYSTEMPROFILE\APPDATA\LOCALLOW\MICROSOFT\CRYPTNETURLCACHE\CONTENT\358EF424AAAEE505CCBE18AD71E8F724, En cuarentena, 8454, 969654, 1.0.44228, AE7BDEC0BF05652CCF05CDD5, dds, 01382764, 91BCB96E2AA00B2E5A117227B5E1CDD7, 78029ADAE854DF1BFDAFE550FA6F94F601837120535687945DA1AA2290A3C91F

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)

REPORTE ADWCLEANER

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build:    06-29-2021
# Database: 2021-08-09.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    08-19-2021
# Duration: 00:00:04
# OS:       Windows 7 Ultimate
# Cleaned:  13
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\Program Files (x86)\UCBrowser
Deleted       C:\ProgramData\IObit\Advanced SystemCare
Deleted       C:\Users\Krays\AppData\Local\UCBrowser
Deleted       C:\Users\Krays\AppData\Roaming\IObit\Advanced SystemCare
Deleted       C:\Users\Krays\AppData\Roaming\UCChannel
Deleted       C:\Users\Krays\AppData\Roaming\vnlgp
Deleted       C:\Windows\rss

***** [ Files ] *****

Deleted       C:\ProgramData\_lg.3sap
Deleted       C:\Users\Krays\AppData\Local\PO.DB

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

Deleted       C:\Windows\System32\Tasks\DRIVER BOOSTER SCHEDULER

***** [ Registry ] *****

Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{726469CD-91BA-4F5B-93C6-6D0EF4AA9A52}
Deleted       HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scheduler
Deleted       HKLM\Software\Microsoft\Shared Tools\MSConfig\services\Windefender

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

No Preinstalled Software cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [2371 octets] - [19/08/2021 15:45:02]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

MARCELO_BRAVO · 19 Agosto, 2021 19:57

Por el momento no he visto la aparicion de wup.exe en los servicios ni tampoco un aumento injustificado del uso de los recursos

Marr0n · 20 Agosto, 2021 18:58

Hola, buenas @MARCELO_BRAVO

Respecto Malwarebytes >> ha detectado muchísimos Malwares y de tipos Muy Variados. De todas formas, veo que hay dos malwares que no han sido enviados a la Cuarentena. Así que vuelves a repetir el Análisis con Malwarebytes tal y como lo hiciste, pero sin marcar la opción de Rootkits. Ya que por loq ue veo, la marcaste: Rootkits: Activado.

Respecto al AdwCleaner >> ha detectado varios Malware de tipo Adware. Y estos han sido erradicados correctamente.

PRÓXIMA RESPUESTA

Pegas el nuevo reporte de Malwarebytes y comentas como va el PC.

NOTA IMPORTANTE

Por Favor, mientras estemos desinfectando tu maquina o terminando de hacerlo:

No realices pasos/acciones que NOSOTROS no te hayamos indicado.

No descargues NADA de Internet y/o conectes dispositivos externos a tu equipo.

No instales NADA (programas/software/complementos/extensiones del navegador…).

No ejecutes otros programas de seguridad (Antivirus, Antimalware, ANTINADA…).

No realices por tu cuenta otros procedimientos.

Usa tu equipo EXCLUSIVAMENTE para desinfectarlo siguiendo nuestras indicaciones.

Muy Importante Coloca los diferentes reportes que te he pedido como se muestra en la siguiente imagen:

Salu2.

MARCELO_BRAVO · 20 Agosto, 2021 19:23

Consulta. mi computador tiene conectado un disco duro con 800 gb de uso que ante un analisis de malware antimalware demoro 14 horas en realizarse.¿ Hay alguna forma de realizar el análisis mas rapido o de atacar focalizadamente a las amenazas que previamente no fueron eliminadas? para evitar el gran tiempo muerto y gasto en luz de mantener un computador prendido por 14 consecutivas.

Marr0n · 20 Agosto, 2021 19:36

Hola, buenas @MARCELO_BRAVO

No. Y Aunque no lo dije este tardo 15 h aprox., ya que tenía activada la opción de RootKit del Malwarebytes.

No la debías de haber marcado. Pues dicha opción hoy en día puede hacer que el programa se cuelgue y no finalice el análisis o hacer que este tarde muchísimo (como lo es en tu caso 15 h aprox.).

Los Rootkits hoy en día ya no son tan abundantes como lo eran antes, ni tampoco son el pan de cada día, así que no la marques, ya que si no sucederá lo que está sucediendo (que tarda muchas horas) o incluso que pueda colgarse el malwarebytes.

Si sospechas que hay Rootkits, pues hay mejores formas de buscar este tipo de infecciones. De forma más rápida y eficiente.

De todas formas, no creo que este sea tu caso por el momento.

Traes ese reporte y no marques la opción de Analizar RootKits de MalwareBytes.

Salu2.