Tengo el navegador capturado por un sitio start.iminent.com

[selajp]

Se me ha instalado este malware, que me ha cambiado pagina de inicio y me impide acceder a Gmail . Me podrán ayudar a solucionarlo? Busqué el tema con la referencia start.iminent.com y no encontré ningún post. Muchas gracias!!!

[Daniela]

Hola selajp

Realiza los siguientes pasos, aunque hayas hecho alguno, sin cambiar el orden:

1) Descarga, actualiza y ejecuta Malwarebytes’ Anti-Malware, revisa en detalle el manual, para que sepas usarlo y configurarlo.

• Realiza un Análisis de amenazas, actualizando si te lo pide.
• Pulsar en “Cuarentena seleccionado” para enviarlo a la cuarentena y Reinicias el sistema.
• En el apartado del manual Informes Informe de análisis encontrarás el reporte de MBAM, clic en Exportar Copiar al portapapeles.

2) Descarga AdwCleaner | InfoSpyware en el escritorio.

• Desactiva temporalmente el Antivirus Cómo deshabilitar temporalmente su Antivirus.
• Cierra también todos los programas que tengas abiertos.
• Ejecuta Adwcleaner.exe (Si usas Windows Vista/7 u 8 presiona clic derecho y selecciona "Ejecutar como Administrador".)
• Pulsar en el botón Escanear, y espera a que se realice el proceso, inmediatamente pulsa sobre el botón Limpiar.
• Espera a que se complete y sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
• Guardas el reporte que te aparecerá, para copiarlo y pegarlo en tu próxima respuesta.
• El informe también se puede encontrar en C:\AdwCleaner\AdwCleaner[C1].txt

3) Descarga CCleaner

• Instala Ccleaner
• Abres Ccleaner en la pestaña limpiador dejas como esta configurada predeterminadamente, haces clic en analizar esperas que termine clic en ejecutar limpiador
• Clic en la pestaña Registro clic en buscar problemas esperas que termine clic en Reparar Seleccionadas y haces una copia de seguridad
• Vuelves a darle clic en buscar problemas hasta que no encuentre ninguno.

Pega los reportes de Malwarebytes y AdwCleaner y comentas como va el problema.

Muy Importante envuelve cada uno de los informes con una etiqueta escrita al inicio del informe y otra como este al final del mismo.

Un saludo

[selajp]

Malwarebytes
www.malwarebytes.com

-Detalles del registro-
Fecha del análisis: 2/11/18
Hora del análisis: 20:27
Archivo de registro: d10831f8-def6-11e8-8eab-74d02bb04a4e.json

-Información del software-
Versión: 3.6.1.2711
Versión de los componentes: 1.0.482
Versión del paquete de actualización: 1.0.7661
Licencia: Prueba

-Información del sistema-
SO: Windows 10 (Build 17134.345)
CPU: x64
Sistema de archivos: NTFS
Usuario: NOTEBOOK-ASUS\W

-Resumen del análisis-
Tipo de análisis: Análisis de amenazas
Análisis iniciado por:: Manual
Resultado: Completado
Objetos analizados: 348896
Amenazas detectadas: 2
Amenazas en cuarentena: 2
Tiempo transcurrido: 16 min, 3 seg

-Opciones de análisis-
Memoria: Activado
Inicio: Activado
Sistema de archivos: Activado
Archivo: Activado
Rootkits: Desactivado
Heurística: Activado
PUP: Detectar
PUM: Detectar

-Detalles del análisis-
Proceso: 0
(No hay elementos maliciosos detectados)

Módulo: 0
(No hay elementos maliciosos detectados)

Clave del registro: 0
(No hay elementos maliciosos detectados)

Valor del registro: 0
(No hay elementos maliciosos detectados)

Datos del registro: 0
(No hay elementos maliciosos detectados)

Secuencia de datos: 0
(No hay elementos maliciosos detectados)

Carpeta: 0
(No hay elementos maliciosos detectados)

Archivo: 2
PUP.Optional.Linkury, C:\USERS\W\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\SyncData.sqlite3, Sustituido, [244], [455234],1.0.7661
PUP.Optional.Linkury, C:\USERS\W\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Web Data, Sustituido, [244], [455234],1.0.7661

Sector físico: 0
(No hay elementos maliciosos detectados)

WMI: 0
(No hay elementos maliciosos detectados)


(end)

[Daniela]

Hola

Falta el reporte de AdwCleaner y no olvides comentar como sigue el problema,

Un saludo

[selajp]

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-10-31.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    11-02-2018
# Duration: 00:01:35
# OS:       Windows 10 Pro
# Scanned:  32026
# Detected: 111


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy             C:\_acestream_cache_
PUP.Optional.Legacy             C:\Users\W\AppData\LocalLow\.acestream
PUP.Optional.Legacy             C:\Users\W\AppData\Roaming\.acestream
PUP.Optional.Legacy             C:\Users\W\AppData\Roaming\acestream

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF442AB5-80E5-49BB-9E31-FF9FD7A4ADEF}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA73F0AC-C954-4447-9985-C475B652321F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F75BEF15-FBDE-4274-9C25-F723DAD868B}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F6EDC85C-9B0F-4AEA-8CBE-DF493DB782F7}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F317125B-D7FF-4050-BB2D-6A326C13A7DD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED110151-43F6-440F-AA47-EF8B77958B}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9E488A7-8172-4512-8B49-5E5BCAFF2C63}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9510512-63C1-4216-9E26-992D0C1E549}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1204612-5C21-4F7B-9341-DC59F7A3311}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0519CC6-8707-4ADB-A628-276AB7DCCDEC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC6DA1A5-70CC-477D-BAAF-1D6FCC3341}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D5AC998E-2052-47E5-AED9-51314A262B1}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4480AD-DAC7-42BC-9D9F-EF666AFA1E51}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D39FBBF2-78AB-45DC-9FAC-1F9ADE5DC2}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF49D750-18AE-4AB3-9BD8-CE2C34CF58C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CBF11818-8AD4-4ADF-AE64-18D9A6391B8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C86759A8-A265-415B-B86F-E09074EF299}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7A67718-AA2F-4409-AEA6-C3E6D5798BD1}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4BB025B-5E33-461D-9AEE-18A399FA24B8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C16677FD-F09E-4EFE-85E-57C24F25F4EC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C01F84F9-18B7-49E3-BED-9951A7409335}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C01AA27A-401A-448E-B2A7-BAAA212FE39}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B36B9DAF-9916-42C3-B8FA-E7479B7E21D5}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B25BE637-B701-44F3-B896-1608A59407C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A98CF6FE-1C1E-4E0F-8924-5B3CF57DD7C}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8D1FD71-C00C-4322-9B6E-92C012B5468}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A78D14A7-8933-4719-AAB4-8E74B3D2A549}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B327C9-C5A-4F49-9878-8E9A2EECD74}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3156058-8D62-479F-80C3-45528D26B1E5}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2B0AC7E-F9F1-4779-B83E-871F73E428FA}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A06DC218-D9E2-44B2-B592-B47C23B8FFC4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EBD0F0B-3AA5-41FF-B6C5-1B7E1C0B9C9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E27EC9D-4CB9-4F37-B4A6-4D3276A12D3}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D755E06-1055-4D67-894C-2C268FE7223}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9AF1A747-78C8-4573-898D-E825A1619920}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9941AA93-B324-4685-BDFE-D47C4E395EB4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FA9F634-D034-4C78-A64A-BF27F5E6F4C3}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8BF84247-64A4-4CD5-8992-C6AD4BAE6713}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87D01ADF-B49E-40D5-9BE2-5802796E4CC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FDA74B1-3994-4BC7-A1C3-8211FB383374}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F365B30-9F77-45E6-933-F6B61FB143D1}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7ED6C97C-97A1-487C-913C-57E41FDBB24}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E889E83-66E-4929-9489-EF6122A66E20}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E41B461-B509-4A79-80AE-E446BCFAA48}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DCAC65C-CA46-467D-953F-A48981AAD824}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D7E4556-FCD-43E7-B530-EC9414282FE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D4F94B0-55C7-4585-8A80-F454F222249}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79D5ADFD-C51F-4D20-A712-697A7B25DBC1}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{760ACE68-52B7-4BCE-AD43-B6752F3CABBC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F5521C3-FF7-4BC7-A0C3-3C77AE7B5F0}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6DB2195-7790-49A2-99CE-E498F0AF79F9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CB10B50-916B-428C-8DBA-5DD063F5AFC4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B3C9C6C-CA9C-44C6-B6EB-9927BD9AB95}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A5C15E9-1974-49F0-95D5-83425DEB99AE}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{699E5962-C1CE-44D5-94BC-2B92FCB4E20}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{683B8113-3F25-45C0-8AFF-E041AEC3B26F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{66E8E09A-C57A-4F42-B68E-BEE72C41E9B4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64082883-3F1B-4751-9223-D2C8DF5834C9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612B018B-E2CF-4C8C-8F80-4A1A8C94BBF}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6095CD6C-2050-441C-853D-E7EE7355111D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{601C72BE-CD66-4757-98F9-FDA0AD9B1C88}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F554191-B915-4DDB-B9D5-59191F42CD93}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BB8FC83-7BF6-47B8-868D-56DF3EECA87}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BA0E70F-4875-4DFD-87B3-3943CB8D780}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5A49F432-943-4B15-B31-D4437176AA8}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58239A2E-7E69-48BF-BAFB-A0B38EB6C3F}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5732B0C8-EC6-4AEC-A1BD-AAEA42802BC9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{558F02F8-D9A9-4F9B-9AD4-398AE0C1EBD}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4BA0A65-A4D0-4138-9220-32844FC7EC48}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B14216-4F8C-4C35-A359-284294781FDC}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42DFC9D0-D26C-4FAA-8E1E-D0AC93A4A175}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4080F16E-8E4A-4744-90B2-A94769F98C3D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3CE620AC-B4FD-496A-A07B-A3AEF0784C1D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A545E8F-71A2-4C10-A9EF-B99CA897D95D}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FB87E99-F403-4324-BA61-CBA02E6E72EB}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E073879-628B-4361-BDF6-9C2C723F4B9A}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E0606CE-BF49-4505-A5CA-ACA5EF8EDC41}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2AADC16E-FC97-4EF8-9E8-3084158129B6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28CAB48C-860D-4AE1-B610-EB4BDD58FF9}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{270C3D14-CA7F-4F2C-A82-C5DBD7BCA8A4}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{266C70F-3346-4A86-BD0-E67480BBF121}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22276D39-AAB4-49BF-8D2B-5BDA74B34180}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C4A2579-348B-4A07-97B3-33728C1FC813}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1ADF545C-5B-4FA7-881C-19F4296C37EA}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17EF90FD-1A0E-439F-AA69-D9CE17E528F6}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{171A71E-899A-4D0B-861-E8138FAAD653}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14651484-3936-4785-A87E-DB35FAA8B0F1}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{125B7DA1-3800-4CB8-995F-68D79F3CF618}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11EA5165-990E-49B4-9BC3-B88CD8B9A2D0}
PUP.CrossRider.Heuristic        HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1058C67C-E291-4BB5-BDC9-E5B1493AB2C8}
PUP.Optional.ASMagicPlayer      HKCU\Software\Classes\acestream
PUP.Optional.AceStream          HKCU\Software\RegisteredApplications|AceStream
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95}
PUP.Optional.Legacy             HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A}
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
PUP.Optional.Legacy             HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
PUP.Optional.Legacy             HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
PUP.Optional.TheBrightTag       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\thebrighttag.com
PUP.Optional.TheBrightTag       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\s.thebrighttag.com
PUP.Optional.TheBrightTag       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\thebrighttag.com
PUP.Optional.TheBrightTag       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\s.thebrighttag.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

PUP.Optional.Legacy             http://start.iminent.com/?appId=67C0AB14-AE08-47DC-BAB3-B27A600C827B
PUP.Optional.Legacy             StartWeb
PUP.Optional.SofTonicAssistant  Softonic ES

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

# -------------------------------
# Malwarebytes AdwCleaner 7.2.4.0
# -------------------------------
# Build:    09-25-2018
# Database: 2018-10-31.2 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    11-02-2018
# Duration: 00:00:13
# OS:       Windows 10 Pro
# Cleaned:  111
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\_acestream_cache_
Deleted       C:\Users\W\AppData\LocalLow\.acestream
Deleted       C:\Users\W\AppData\Roaming\.acestream
Deleted       C:\Users\W\AppData\Roaming\acestream

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FF442AB5-80E5-49BB-9E31-FF9FD7A4ADEF}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{FA73F0AC-C954-4447-9985-C475B652321F}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F75BEF15-FBDE-4274-9C25-F723DAD868B}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F6EDC85C-9B0F-4AEA-8CBE-DF493DB782F7}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F317125B-D7FF-4050-BB2D-6A326C13A7DD}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ED110151-43F6-440F-AA47-EF8B77958B}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9E488A7-8172-4512-8B49-5E5BCAFF2C63}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E9510512-63C1-4216-9E26-992D0C1E549}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E1204612-5C21-4F7B-9341-DC59F7A3311}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E0519CC6-8707-4ADB-A628-276AB7DCCDEC}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DC6DA1A5-70CC-477D-BAAF-1D6FCC3341}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D5AC998E-2052-47E5-AED9-51314A262B1}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D4480AD-DAC7-42BC-9D9F-EF666AFA1E51}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D39FBBF2-78AB-45DC-9FAC-1F9ADE5DC2}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CF49D750-18AE-4AB3-9BD8-CE2C34CF58C}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CBF11818-8AD4-4ADF-AE64-18D9A6391B8}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C86759A8-A265-415B-B86F-E09074EF299}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7A67718-AA2F-4409-AEA6-C3E6D5798BD1}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C4BB025B-5E33-461D-9AEE-18A399FA24B8}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C16677FD-F09E-4EFE-85E-57C24F25F4EC}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C01F84F9-18B7-49E3-BED-9951A7409335}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C01AA27A-401A-448E-B2A7-BAAA212FE39}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B36B9DAF-9916-42C3-B8FA-E7479B7E21D5}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B25BE637-B701-44F3-B896-1608A59407C}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A98CF6FE-1C1E-4E0F-8924-5B3CF57DD7C}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A8D1FD71-C00C-4322-9B6E-92C012B5468}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A78D14A7-8933-4719-AAB4-8E74B3D2A549}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A6B327C9-C5A-4F49-9878-8E9A2EECD74}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A3156058-8D62-479F-80C3-45528D26B1E5}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A2B0AC7E-F9F1-4779-B83E-871F73E428FA}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A06DC218-D9E2-44B2-B592-B47C23B8FFC4}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9EBD0F0B-3AA5-41FF-B6C5-1B7E1C0B9C9}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9E27EC9D-4CB9-4F37-B4A6-4D3276A12D3}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9D755E06-1055-4D67-894C-2C268FE7223}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9AF1A747-78C8-4573-898D-E825A1619920}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9941AA93-B324-4685-BDFE-D47C4E395EB4}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8FA9F634-D034-4C78-A64A-BF27F5E6F4C3}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8BF84247-64A4-4CD5-8992-C6AD4BAE6713}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{87D01ADF-B49E-40D5-9BE2-5802796E4CC}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7FDA74B1-3994-4BC7-A1C3-8211FB383374}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7F365B30-9F77-45E6-933-F6B61FB143D1}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7ED6C97C-97A1-487C-913C-57E41FDBB24}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E889E83-66E-4929-9489-EF6122A66E20}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7E41B461-B509-4A79-80AE-E446BCFAA48}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7DCAC65C-CA46-467D-953F-A48981AAD824}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D7E4556-FCD-43E7-B530-EC9414282FE}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7D4F94B0-55C7-4585-8A80-F454F222249}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79D5ADFD-C51F-4D20-A712-697A7B25DBC1}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{760ACE68-52B7-4BCE-AD43-B6752F3CABBC}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6F5521C3-FF7-4BC7-A0C3-3C77AE7B5F0}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6DB2195-7790-49A2-99CE-E498F0AF79F9}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6CB10B50-916B-428C-8DBA-5DD063F5AFC4}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6B3C9C6C-CA9C-44C6-B6EB-9927BD9AB95}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6A5C15E9-1974-49F0-95D5-83425DEB99AE}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{699E5962-C1CE-44D5-94BC-2B92FCB4E20}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{683B8113-3F25-45C0-8AFF-E041AEC3B26F}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{66E8E09A-C57A-4F42-B68E-BEE72C41E9B4}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64082883-3F1B-4751-9223-D2C8DF5834C9}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612B018B-E2CF-4C8C-8F80-4A1A8C94BBF}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6095CD6C-2050-441C-853D-E7EE7355111D}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{601C72BE-CD66-4757-98F9-FDA0AD9B1C88}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5F554191-B915-4DDB-B9D5-59191F42CD93}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BB8FC83-7BF6-47B8-868D-56DF3EECA87}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5BA0E70F-4875-4DFD-87B3-3943CB8D780}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5A49F432-943-4B15-B31-D4437176AA8}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{58239A2E-7E69-48BF-BAFB-A0B38EB6C3F}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5732B0C8-EC6-4AEC-A1BD-AAEA42802BC9}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{558F02F8-D9A9-4F9B-9AD4-398AE0C1EBD}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4BA0A65-A4D0-4138-9220-32844FC7EC48}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4B14216-4F8C-4C35-A359-284294781FDC}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{42DFC9D0-D26C-4FAA-8E1E-D0AC93A4A175}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4080F16E-8E4A-4744-90B2-A94769F98C3D}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3CE620AC-B4FD-496A-A07B-A3AEF0784C1D}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3A545E8F-71A2-4C10-A9EF-B99CA897D95D}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2FB87E99-F403-4324-BA61-CBA02E6E72EB}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E073879-628B-4361-BDF6-9C2C723F4B9A}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2E0606CE-BF49-4505-A5CA-ACA5EF8EDC41}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2AADC16E-FC97-4EF8-9E8-3084158129B6}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{28CAB48C-860D-4AE1-B610-EB4BDD58FF9}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{270C3D14-CA7F-4F2C-A82-C5DBD7BCA8A4}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{266C70F-3346-4A86-BD0-E67480BBF121}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{22276D39-AAB4-49BF-8D2B-5BDA74B34180}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1C4A2579-348B-4A07-97B3-33728C1FC813}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1ADF545C-5B-4FA7-881C-19F4296C37EA}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{17EF90FD-1A0E-439F-AA69-D9CE17E528F6}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{171A71E-899A-4D0B-861-E8138FAAD653}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{14651484-3936-4785-A87E-DB35FAA8B0F1}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{125B7DA1-3800-4CB8-995F-68D79F3CF618}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11EA5165-990E-49B4-9BC3-B88CD8B9A2D0}
Deleted       HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1058C67C-E291-4BB5-BDC9-E5B1493AB2C8}
Deleted       HKCU\Software\Classes\acestream
Deleted       HKCU\Software\RegisteredApplications|AceStream
Deleted       HKLM\SOFTWARE\Classes\Record\{8F54FA54-1DF8-3B20-890C-CDD95364BC95}
Deleted       HKLM\SOFTWARE\Classes\Record\{181480C8-90AC-3430-B39A-CD121E034A1A}
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSyncing
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtSynced
Deleted       HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
Deleted       HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\###MegaShellExtPending
Deleted       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\thebrighttag.com
Deleted       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\s.thebrighttag.com
Deleted       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\thebrighttag.com
Deleted       HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\s.thebrighttag.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

Deleted       http://start.iminent.com/?appId=67C0AB14-AE08-47DC-BAB3-B27A600C827B
Deleted       StartWeb
Deleted       Softonic ES

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [16388 octets] - [02/11/2018 19:41:09]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

[selajp]

Habiendo realizado eso, parece haber sido suficiente para eliminarlo. Abrí el navegador, y parece funcionar nuevamente con la configuración que lo yo lo tenía. Ayer mi hijo instaló Flow para poder utilizar cablevisión, y parece que ahí se coló el problema… muchísimas gracias!!

[Daniela]

Hola

Sigue estos pasos, para eliminar las herramientas utilizadas:

Para hacerlo utiliza de nuevo/descarga >> DelFix.exe en tu escritorio.

• Doble clic para ejecutarlo. (Si usas Windows Vista/7/8 o 10 presiona clic derecho y selecciona - Ejecutar como Administrador -).

• Marca todas las casillas, y pulsas en Run

Se abrirá el informe (DelFix.txt), puedes cerrarlo.

Confirmanos si sigue todo bien.

Un saludo

[selajp]

Hola Daniela! Terminé recién d ejecutar el DelFix, y creo que está todo bien… El único problema, es que ahora quiero utilizar el flow de Cablevision (de Argentina), y funciona un rato y se corta y me pide que instale una extensión de Chrome (que está instalada, y que creo que el iminent se me coló cuando la instalé…). Pero entiendo que ese es otro problema. Por lo pronto, el navegador Chrome se inicia sin problema. Muchísimas gracias por la ayuda!!!

[Daniela]

Hola

@selajp

Ayer mi hijo instaló Flow para poder utilizar cablevisión, y parece que ahí se coló el problema…

Aquí también comentabas que el problema fue causado por instalar Flow, asi que si lo vuelves a instalar el problema volverá

Gracias a ti por confiar en ForoSpyware. Ha sido un placer ayudarte :manos:

Nos alegramos que se te haya resuelto :Bien: Damos el tema por solucionado.

Como recomendación final, te invitamos a seguirnos en nuestros canales de difusión:
Blog, Twitter, Facebook, para estar al tanto de los nuevos malwares y cómo prevenirlos.

Solucionado

Un saludo