Start CloseProcesses: HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.129\Installer\chrmstp.exe [2020-04-30] (Google LLC -> Google LLC) FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restricción <==== ATENCIÓN CHR HKLM\SOFTWARE\Policies\Google: Restricción <==== ATENCIÓN Task: {19E030AA-A909-48A2-AE39-EB9D833726C4} - \Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask -> Ningún archivo <==== ATENCIÓN Task: {80543FD8-62FE-4302-B0D6-4E943ED5113E} - \Lenovo\ImController\TimeBasedEvents\48100650-6008-41e5-95b5-ca6b34b87e2b -> Ningún archivo <==== ATENCIÓN Task: {8787C62D-A965-4254-92BB-EA8D30941EDC} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe c:\Program Files (x86)\AVAST Software\Browser Task: {9127D290-636B-4079-8690-BE60C55EA895} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {9D87E762-CA68-412A-B2BA-F615CAFF99C0} - \Lenovo\ImController\TimeBasedEvents\9bf5eb51-fae9-4262-8277-2dc9534f4928 -> Ningún archivo <==== ATENCIÓN Task: {A8AC0511-A958-49EE-9DA3-F010B016C2BF} - \Lenovo\ImController\TimeBasedEvents\2ac33d3f-4403-4810-b9f6-f04c731d9028 -> Ningún archivo <==== ATENCIÓN Task: {D74DE8D4-3BBA-4993-B81B-EC3A51052AB9} - \Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance -> Ningún archivo <==== ATENCIÓN Task: {E40664B2-4951-4807-BD06-81EFE0C76BB9} - \Lenovo\ImController\TimeBasedEvents\2aa072c9-395f-4603-81e0-f7763bceb5bc -> Ningún archivo <==== ATENCIÓN Tcpip\..\Interfaces\{95f2841c-4b2e-4b1b-9f09-2417d2409027}: [DhcpNameServer] 172.168.137.2 HKU\S-1-5-21-2128198197-1177575996-1877542188-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE HKU\S-1-5-21-2128198197-1177575996-1877542188-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com SearchScopes: HKU\S-1-5-21-2128198197-1177575996-1877542188-1001 -> {2A23ab71-4ac6-41f2-a955-ea576e553146} URL = SearchScopes: HKU\S-1-5-21-2128198197-1177575996-1877542188-1001 -> {2f23ab71-4ac6-41f2-a955-ea576e553146} URL = hxxps://es.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87infr0srvimo2001320¶m1=y6bdVFVIsvuYsgEClQfz8I7gEdb7af9GSy3VsrdP%2BKIE%2FOcucWgyAKd7gRy7CNUqQQcmnOxcEiq6UzPnz1Q19%2BzZ2W9EF5%2BpUL3KzXZYJcrJh0fGTindM4jfI%2FSdMd%2BbCHFHeLut7XUshC9qS%2FvifUhA4mk%2FlVGhqvh2IZcjKAsKcf%2F%2FcZ9IJ2PAsjgVUR%2B%2FZjsCArrml8aZ1X4sPX2FF9giI%2BbwkcDZagLw3YGaIS10Va229XtDijzE2gCp7l95pPB6VJZphowKEaiMeF6k%2Fh4KP4fFphFCC10Zovpm8wbq9r1wFzNjc8iFufY5z4Adh6F1DzyNkR3lCqyDF01PmVQyiExrPX0HmwxFKSGRZ3cUGUXh5t6d2o5lsvKu0nyYoIStDbY%2Fl%2FJDJeA5XkivPw%3D%3D&p={searchTerms} Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - Ningún archivo Edge Extension: (AVG Online Security) -> EdgeExtension_51CA791EAVGOnlineSecurity_s1d0xtrs8dx04 => C:\Program Files\WindowsApps\51CA791E.AVGOnlineSecurity_19.4.444.0_neutral__s1d0xtrs8dx04 [2020-03-30] Edge HomePage: Default -> hxxps://es.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87infr0srvimo2001320¶m1=y6bdVFVIsvuYsgEClQfz8I7gEdb7af9GSy3VsrdP%2BKIE%2FOcucWgyAKd7gRy7CNUqbrpaaAUqjwMlNXMby6WcPGS8EtR1lF8LFxAD88R%2FkpUETJSCUbf0jdIlKL%2Bs8rIEJUPzKqzZ6Sjk6rKq2auTEW27KoOuY0irgD0stusitvh6d1IDdvVRIPwflucA7wQXWoODwH71jM2%2FvalHNB52paR75FTs%2FW0ko4vd5rFhHJgwTulR3lwNkre6c8lkicVoeYVwOSxCxZp94DJ6xmnwEva1fzhZrVkFbAKeIVG5Z%2BC0QG7bUtqsPlVXH0UwLceZwUcAFt7VDPtzK9BQw%2FzQN%2Bo%2B%2BsqL9xlVDkgCffW5NHHQ6a%2FFHkixODOjmSf2NaIbIPy44v7aULwDSxrnr2EoFQ%3D%3D Edge StartupUrls: Default -> "hxxps://es.search.yahoo.com/yhs/web?hspart=omr&hsimp=yhs-001&type=87infr0srvimo2001320¶m1=y6bdVFVIsvuYsgEClQfz8I7gEdb7af9GSy3VsrdP%2BKIE%2FOcucWgyAKd7gRy7CNUqbrpaaAUqjwMlNXMby6WcPLJobZLGelHpwVh1lmNhqpkMvjQEG1JZWIhzSi%2FMhEAGBObRC7qIyRamPD8XigAU%2Bf2Dm1TNNJaV8LQ3G0gSBAQq2RRXx7OVA17LgmOh8ddPIm3AO3u0t16ZMY8WMrybhh0dMVJAF32fuSpwi6BVxD7QpNU6dSkphC9hbinqxjY9g0OjCdUdNMyGS2tm2tFckw4Ahhko01nWa%2BipmUwseL72w4oLX%2FLQgDBdWTk9IcdinCekXXl3qlSApRqPC4kI6BGQAlE2CYViAsZtdXjSM9dMcPifbFjja0pOgFb98gw8lNfgj%2FKeqYuzJDG6iqbhBQ%3D%3D" Edge DefaultSearchURL: Default -> hxxps://es.search.yahoo.com/yhs/search?hspart=omr&hsimp=yhs-001&type=87infr0srvimo2001320¶m1=y6bdVFVIsvuYsgEClQfz8I7gEdb7af9GSy3VsrdP%2BKIE%2FOcucWgyAKd7gRy7CNUqbrpaaAUqjwMlNXMby6WcPFaaiwcYsHBW%2FvHrsy8D6%2B%2BZUdi26T6xUS9Dh9L7ZQ60cmhCf9BLqM0glwB9yZ1qc6PvaB0WKiwqorUu5nJ%2FsHaeT5od3orVee%2BWQ3BILz%2FDMlLSZ%2Bi7o4AFW2o%2BWG1VXkNUZMFuVxW0J3TucCcoEwsh2zMJj13NjrFJ6YyR%2BXJaloVk3vxVz3eeEbKt6uJ9uDc0cWEa1XTJjPlIxfhOdsBlnAZzR51usSnG0nM2gDGrr5xbhwq3G4Sl2SF36YjSpMcodIJ03E5mHJsdENrMIBh0Ai5jA0QJwVzzMIMjV4H%2BmmUzOs36yfxsk4A9r%2BvP%2Fg%3D%3D&p={searchTerms} Edge DefaultSearchKeyword: Default -> search.yahoo.com Edge DefaultSuggestURL: Default -> hxxps://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command={searchTerms} Edge HKU\S-1-5-21-2128198197-1177575996-1877542188-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] CHR HKLM\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh] CHR HKLM-x32\...\Chrome\Extension: [elhpdacimkjpccooodognopfhbdgnpbk] - hxxps://chrome.google.com/webstore/detail/elhpdacimkjpccooodognopfhbdgnpbk CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] S3 Hamachi; C:\WINDOWS\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.) R0 klbackupdisk; C:\WINDOWS\System32\DRIVERS\klbackupdisk.sys [79768 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [145504 2020-02-08] (Kaspersky Lab -> AO Kaspersky Lab) R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [93312 2019-03-12] (Kaspersky Lab -> AO Kaspersky Lab) S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [37816 2020-02-08] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab) R3 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [251800 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [516216 2019-09-17] (Kaspersky Lab -> AO Kaspersky Lab) R1 klhk; C:\WINDOWS\system32\DRIVERS\klhk.sys [1123664 2019-10-17] (Kaspersky Lab -> AO Kaspersky Lab) R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [998296 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [58192 2019-03-19] (Kaspersky Lab -> AO Kaspersky Lab) R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [79760 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [59512 2019-03-18] (Kaspersky Lab -> AO Kaspersky Lab) R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [51328 2019-03-13] (Kaspersky Lab -> AO Kaspersky Lab) S3 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [45904 2019-03-10] (Kaspersky Lab -> AO Kaspersky Lab) S3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) S3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [309968 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [117496 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) S3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [206880 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [105600 2019-03-05] (Kaspersky Lab -> AO Kaspersky Lab) R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [211048 2020-02-08] (Kaspersky Lab -> AO Kaspersky Lab) R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [232344 2020-04-23] (Kaspersky Lab -> AO Kaspersky Lab) S3 AscFileFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\drivers\win10_amd64\AscFileFilter.sys [X] S3 AscRegistryFilter; \??\C:\Program Files (x86)\IObit\Advanced SystemCare Ultimate\drivers\win10_amd64\AscRegistryFilter.sys [X] S3 cpuz145; \??\C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [X] S3 klids; \??\C:\ProgramData\Kaspersky Lab\AVP20.0\Bases\klids.sys [X] Kaspersky Internet Security (HKLM-x32\...\{D891550B-ACFE-4797-B368-BCFC434BBEB1}) (Version: 20.0.14.1085 - Kaspersky) Hidden ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Ningún archivo ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Ningún archivo ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Ningún archivo ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Ningún archivo ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Ningún archivo ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Ningún archivo ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Ningún archivo ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Ningún archivo ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => -> Ningún archivo ContextMenuHandlers1: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => -> Ningún archivo ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => -> Ningún archivo ContextMenuHandlers2: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => -> Ningún archivo ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Ningún archivo ContextMenuHandlers4: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => -> Ningún archivo ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Ningún archivo ContextMenuHandlers6: [Kaspersky Anti-Virus 20.0] -> {6E1B4453-548D-4C43-A4AB-DE8D1D3DE17B} => -> Ningún archivo HKU\S-1-5-21-2128198197-1177575996-1877542188-1001\Software\Classes\regfile: regedit.exe "%1" <==== ATENCIÓN HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui" HKU\S-1-5-21-2128198197-1177575996-1877542188-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_7D3840CBC27A716058E13BD96BCF0BE5" CMD: ipconfig /flushdns CMD: ipconfig /renew CMD: bitsadmin /reset /allusers CMD: netsh winsock reset CMD: netsh advfirewall reset CMD: netsh advfirewall set allprofiles state ON CMD: netsh int ipv4 reset CMD: netsh int ipv6 reset RemoveProxy: EmptyTemp: Hosts: END