| |||||||
| Foro Oficial de HijackThis en español Analizamos tu log de HijackThis para eliminar Hijackers, Spyware, Adware, ToolBars, Virus, Troyanos y Malwares en gral. Antes lea las Políticas del Foro de HijackThis. |
![]() |
| | Enviar a: | Herramientas |
![]() | ![]() |
| InfoSpyware | ||
| |
![]() | ![]() |
| ||||
| Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis) Hola!!! Disculpa por la demora en la respuesta, pero es que hemos tomado la costumbre de comenzar a responder primero los mensajes con cero respuestas, y como ya respondiste sobre tu propio mensaje, pues ya no aparecía como "0 respuestas". Bueno, en tu log no veo nada de gravedad, eso sí no soy muy partidario de tener instalados estos prgramas (agregan adware): MessengerPlus FlashGet (la versión gratuita) Esta entrada son restos del adware "YourSiteBar": O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file) Y estas dos tienen que ver con "Alexa" (conocido distribuidor de adware y spyware): O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm Así que ejecuta HijackThis con todos los programas cerrados, seleciona esas 3 entradas y pulsa en "Fix Checked". Elimina tambien este archivo: C:\WINDOWS\web\related.htm Luego realiza estos pasos: - Pasa Ewido Online - Limpia el registro con RegSeeker y pasa Ad-Aware actualizado. - Elimina cookies y temporales con Disk Cleaner y vacía la papelera. Reinicia y nos cuentas como va todo. Saludos Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog * Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando. * Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !! * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro. |
![]() | ![]() |
| ||||
| Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis) hula ya hice todos los pasos k me pedistes pero sigo con el problema k nu puedo entrar al panel de control pk me aparece una ventana de explorer.exe y yo queria entrar para cambiar la velocidad de mi puntero ya que la siento demasiada lenta y mira voe a volver a colocar lo k puse antes en otros foros en dodne nu recibi ayuda Cita:
Logfile of HijackThis v1.99.1 Scan saved at 08:57:03 p.m., on 08/10/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Archivos de programa\Raxco\PerfectDisk\PDSched.exe C:\WINDOWS\System32\hkcmd.exe C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe C:\program files\Common Files\system\proxycfg.exe C:\WINDOWS\System32\ctfmon.exe C:\Archivos de programa\Nikon\PictureProject\NkbMonitor.exe C:\WINDOWS\System32\svchost.exe C:\Archivos de programa\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe C:\WINDOWS\explorer.exe C:\Archivos de programa\Opera\Opera.exe C:\Documents and Settings\Propietario\Mis documentos\Unzipped\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 200.94.210.170:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\ARCHIV~1\FlashGet\jccatch.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar1.dll O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\ARCHIV~1\FlashFXP\IEFlash.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar1.dll O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\fgiebar.dll O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe O4 - HKLM\..\Run: [MessengerPlus3] "C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [Proxy Config Tool for Windows] C:\program files\Common Files\system\proxycfg.exe O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: NkbMonitor.exe.lnk = C:\Archivos de programa\Nikon\PictureProject\NkbMonitor.exe O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\Archivos de programa\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe O8 - Extra context menu item: &Google Search - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: &MSN Search - res://C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll/search.htm O8 - Extra context menu item: Backward Links - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Descargar con Fl&ashGet - C:\Archivos de programa\FlashGet\jc_link.htm O8 - Extra context menu item: Descargar con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dllink.htm O8 - Extra context menu item: Descargar seleccionados con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlselected.htm O8 - Extra context menu item: Descargar sitio web con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlpage.htm O8 - Extra context menu item: Descargar todo con Flas&hGet - C:\Archivos de programa\FlashGet\jc_all.htm O8 - Extra context menu item: Descargar todo con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlall.htm O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Open in new background tab - res://C:\Archivos de programa\MSN Toolbar Suite\TAB\02.05.0000.1082\en-us\msntabres.dll/229?6acd1fa3f324490944dbf2576a9918c O8 - Extra context menu item: Open in new foreground tab - res://C:\Archivos de programa\MSN Toolbar Suite\TAB\02.05.0000.1082\en-us\msntabres.dll/230?6acd1fa3f324490944dbf2576a9918c O8 - Extra context menu item: Similar Pages - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by20fd.bay20.hotmail.msn.com/resources/MsnPUpld.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1122433487640 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing) O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: kavsvc - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe O23 - Service: PDEngine - Raxco Software, Inc. - C:\Archivos de programa\Raxco\PerfectDisk\PDEngine.exe O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Archivos de programa\Raxco\PerfectDisk\PDSched.exe O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Archivos de programa\TuneUp Utilities 2006\WinStylerThemeSvc.exe |
![]() | ![]() |
| ||||
| Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis) Hola!!! No veo restos de malware directamente en tu log, por lo que en principio podriamos descartar problemas por virus. ¿Usas un Proxy? Para descartar que tu problema sea debido a malware descarga MWAV.exe y déjanos un log de esta herramienta (copia sólo las entradas reconocidas como infectadas). Saludos Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog * Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando. * Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !! * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro. |
![]() | ![]() |
| ||||
| Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis) hulaa mira sha hice lo k me pedistes y si me lleve una sorpresa me detecto 31 virus!!! y nu uso proxy quien sabe pk se carga eso en mi windows bueno te dejo los datos k me pedistes y gracias por ayudarme espero resolver mi problema jijiji creo k nu vendria mal crecar tb el k se supone es un windows limpio (sha sabes tengo 2 )Tue Oct 11 01:30:09 2005 => ************************************************** ******** Tue Oct 11 01:30:09 2005 => MicroWorld Anti Virus & Spyware Toolkit Utility. Tue Oct 11 01:30:09 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc. Tue Oct 11 01:30:09 2005 => ************************************************** ******** Tue Oct 11 01:30:09 2005 => Version 7.2.4 (C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\mwavscan.com) Tue Oct 11 01:30:09 2005 => Log File: C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\MWAV.LOG Tue Oct 11 01:30:09 2005 => MWAV Registered: FALSE. Tue Oct 11 01:30:09 2005 => MWAV Mode: Only Scan files. Tue Oct 11 01:30:10 2005 => Latest Date of files inside MWAV: 08 Oct 2005 12:15:33. Tue Oct 11 01:30:23 2005 => AV Library Loaded... Tue Oct 11 01:30:23 2005 => MWAV doing self scanning... Tue Oct 11 01:30:23 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavss.exe Tue Oct 11 01:30:23 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\Getvlist.exe Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavss.dll Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavssdi.dll Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavssi.dll Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavvlg.dll Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\msvlclnt.dll Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\ipc.dll Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\main.avi Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\virus.avi Tue Oct 11 01:30:24 2005 => MWAV files are clean. Tue Oct 11 01:30:34 2005 => Fecha de Base de Datos de Virus: 2005/10/08 Tue Oct 11 01:30:34 2005 => Conteo de Base de Datos de Virus: 152936 Tue Oct 11 01:30:43 2005 => Generando Lista de Virus... getvlist.exe C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\vlist.txt Tue Oct 11 01:32:46 2005 => ***** Scanning Registry and File system for Adware/Spyware ***** Tue Oct 11 01:32:46 2005 => Loading Spyware Signatures from new External Database (Size: 145065). Tue Oct 11 01:32:51 2005 => Indexed Spyware Databases Successfully Created... Tue Oct 11 01:32:51 2005 => System found infected with searchexe Spyware/Adware ({807553e5-5146-11d5-a672-00b0d022e945})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({a5366673-e8ca-11d3-9cd9-0090271d075b})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({e0e899ab-f487-11d5-8d29-0050ba6940e3})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with flashfxp Spyware/Adware ({e5a1691b-d188-4419-ad02-90002030b8ee})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({e0e899ab-f487-11d5-8d29-0050ba6940e3})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with yoursitebar Spyware/Adware ({86227d9c-0efe-4f8a-aa55-30386a3f5686})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({a5366673-e8ca-11d3-9cd9-0090271d075b})! Action taken: No Action Taken. Tue Oct 11 01:32:51 2005 => System found infected with flashfxp Spyware/Adware ({e5a1691b-d188-4419-ad02-90002030b8ee})! Action taken: No Action Taken. Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uni nstall\limewire !!! Tue Oct 11 01:32:53 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\magnet\handlers\limewire !!! Tue Oct 11 01:32:53 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\edonkey2000 !!! Tue Oct 11 01:32:53 2005 => Object "edonkey2000 Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\gnu !!! Tue Oct 11 01:32:53 2005 => Object "bearshare Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\limewire !!! Tue Oct 11 01:32:53 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:53 2005 => Offending Key found: HKCU\Software\maxthon !!! Tue Oct 11 01:32:53 2005 => Object "abxtoolbar Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:55 2005 => Offending Folder found: C:\WINDOWS\DOWNLO~1\conflict.1 Tue Oct 11 01:32:55 2005 => Object "180solutions Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:56 2005 => Offending Folder found: C:\Archivos de programa\flashget Tue Oct 11 01:32:56 2005 => Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:32:56 2005 => Offending Folder found: C:\Archivos de programa\limewire Tue Oct 11 01:32:56 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:34:58 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\notepad2.exe Tue Oct 11 01:34:58 2005 => System found infected with popuper Spyware/Adware (notepad2.exe)! Action taken: No Action Taken. Tue Oct 11 01:35:00 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\search.htm Tue Oct 11 01:35:00 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken. Tue Oct 11 01:35:08 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_2_0rc2\tinymce\jscript s\tiny_mce\plugins\searchreplace\search.htm Tue Oct 11 01:35:08 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken. Tue Oct 11 01:35:15 2005 => Offending Folder found: C:\Documents and Settings\Propietario\Menú Inicio\programas\limewire Tue Oct 11 01:35:15 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:35:15 2005 => Offending Folder found: C:\Documents and Settings\Propietario\Menú Inicio\Programas\limewire Tue Oct 11 01:35:15 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:35:20 2005 => Offending Folder found: C:\Documents and Settings\All Users\Menú Inicio\Programas\flashget Tue Oct 11 01:35:20 2005 => Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:35:21 2005 => Offending Folder found: C:\Documents and Settings\All Users\Menú Inicio\programas\flashget Tue Oct 11 01:35:21 2005 => Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Tue Oct 11 01:35:24 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\notepad2.exe Tue Oct 11 01:35:24 2005 => System found infected with popuper Spyware/Adware (notepad2.exe)! Action taken: No Action Taken. Tue Oct 11 01:35:24 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\search.htm Tue Oct 11 01:35:24 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken. Tue Oct 11 01:35:24 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_2_0rc2\tinymce\jscript s\tiny_mce\plugins\searchreplace\search.htm Tue Oct 11 01:35:24 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken. Tue Oct 11 01:35:25 2005 => Offending file found: C:\WINDOWS\iun6002.exe Tue Oct 11 01:35:25 2005 => System found infected with zipitpro Spyware/Adware (C:\WINDOWS\iun6002.exe)! Action taken: No Action Taken. Tue Oct 11 01:35:26 2005 => ***** Scanning Registry for errors created because of Adware/Spyware ***** Tue Oct 11 01:35:30 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\Archivos de programa\Archivos comunes\Microsoft Shared\Triedit\DHTMLED.OCX". Action Taken: No Action Taken. Tue Oct 11 01:35:30 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Paths\cmmgr32.exe" refers to invalid object "C:\WINDOWS\System32\cmmgr32.exe". Action Taken: No Action Taken. Tue Oct 11 01:35:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\". Action Taken: No Action Taken. Tue Oct 11 01:35:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\Required\". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".adr". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".cmw". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".jpg_". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".ssa". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "eMusic Promotion". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB873339". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB883939". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB885250". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB886185". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887472". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887742". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890175". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890859". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB891781". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893086". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893803v2". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB894391". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896428". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896727". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB898461". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899588". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899591". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "QuickTime". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "Windows XP Service Pack". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "WinRAR archiver". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{4E9C3F2D-C654-453E-B1AD-9F231905A50D}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{73819BA2-2E8B-430B-A6C9-0D89657DC865}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{7BF7B688-4A95-4003-BA98-EA8A79DA0ABA}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{9C2EDC9C-EF3B-443A-BB2C-3488DAC7247E}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{A27F2A64-3D23-4449-B395-75335CED458E}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{DBB034F0-9616-45F1-8CD3-ACB78262BE4E}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E583ED6F-BD99-4066-A420-C815BF692B69}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E8D25E54-D172-4FB0-929B-48D51E2E9C6D}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{FB015BB0-5518-4767-9DE4-F9A5C7C62E46}". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{0180E49C-13BF-46DB-9AFD-9F52292E1C22}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{01CFC007-C263-420A-80DC-2988DA4C6105}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{01EF6E5C-C79B-4E3E-A320-4B57B84F1807}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{02391F44-2767-4E6A-A484-9B47B506F3A4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{078C3DAA-9E58-4D42-9E1C-7C8EE79539C5}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0835DC4B-AA01-48C3-A42D-FD62C530A3E1}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0A32EC6C-E4A0-4529-A20C-DA41716F8E16}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0A68C3B5-9164-4A54-AFAF-995B2FF0E0D4}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0D69FA1E-E90D-4BAF-B39E-6EA5EE2A7B49}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D00001}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D0611C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{12C79975-0C8E-46BF-A680-2BAB64E2F4A4}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{149D2E01-C32E-4939-80F6-C07B81015A7A}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{1B62A3D1-9C04-4BD5-84B5-D2607302501F}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{227949BE-EBB8-4D13-9E2B-AC98CAFB9E78}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{26859A4B-BFCD-442A-96E3-6E3A03FD57C8}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{38BE3000-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{38BE3001-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{38BE3002-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{4B420C26-B393-48B3-8A84-BC60827689E8}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{51D9596F-50F7-483D-934F-746378AA8CCC}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{52B63861-DC93-11CE-A099-00AA00479A58}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{53D9DE0B-FC61-4650-9773-74D13CC7E582}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{5DBB7F32-16AF-41C8-9D4B-7D47654B7650}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{60765CF5-01C2-4EE7-A44B-C791CF25FEA0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{64697678-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{64F2005C-6CF5-4652-B94F-600360B15B27}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{66EA14E6-E2B3-433D-923E-EE401CADBBD9}" refers to invalid object "C:\WINDOWS\System32\MonkeySource.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{68D0B5CF-3EC6-4113-86DF-8A34456B3A0C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{77983549-FFDA-4A88-B48F-B924E8D1F01C}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{78766964-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{7B63A013-DC2C-462E-9292-CAF8C867100F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{812C4C66-8B64-47ED-9651-AD6500005553}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{8643B615-6A76-4060-8A29-C2C6BDF5D70F}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{876B9304-359C-42E2-864E-B98B03F33C9D}" refers to invalid object "C:\WINDOWS\System32\MPCDec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{889EF574-0656-4B52-9091-072E52BB1B80}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{895322C5-84A1-450C-8478-C57793CAE86F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{8CAE96B7-85B1-4605-B23C-17FF5262B296}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{8DD6C641-98CB-11D1-9846-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{915E0060-918C-4A02-A585-1B912BA71CEE}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{9710BDB0-E61E-4A99-B70B-FB18A19830F1}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{9DD46B28-8A7F-409B-A365-C5CE3946A0C7}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{A8B25C0E-0894-4531-B668-AB1599FAF7F6}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{AB97AFC3-D08E-4E2D-98E0-AEE6D4634BA4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{AC031383-1479-4896-B296-E5032FDAD90C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{AF99DEEC-9680-4E45-BC34-DC6D0427669F}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{B3DE7EDC-0CD4-4d07-B1C5-92219CD475CC}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mp4.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{C2D6D98F-09CA-4524-AF64-1049B5665C9C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{C5379125-FD36-4277-A7CD-FAB469EF3A2F}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{D8CF6A42-3E09-4922-A452-21DFF10BEEBA}" refers to invalid object "C:\WINDOWS\System32\WavPackDSSplitter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{D9C9D526-5F0E-45FC-BAEC-CD94ABE2FEBC}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{E1D57D79-AA6E-4BDC-82BA-59A7895AF9BD}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{E232386E-CC39-4F03-8B19-A35F4DD86DAB}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{EB9FACE4-B2D7-40A9-9922-24B6528E84AA}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F07E245F-5A1F-4D1E-8BFF-DC31D84A55AB}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F0B801B1-A239-473B-B6B4-6AE3DB3ABBD3}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F8C0C726-FEE7-4175-A7B5-1A4068EB5C47}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{FBA5FB05-58C3-45CB-8B0D-C2313EA048CF}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Tue Oct 11 01:35:50 2005 => Entry "HKCR\.386" refers to invalid object "vxdfile". Action Taken: No Action Taken. Tue Oct 11 01:35:50 2005 => Entry "HKCR\.bkf" refers to invalid object "msbackupfile". Action Taken: No Action Taken. Tue Oct 11 01:35:50 2005 => Entry "HKCR\.mp4\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:50 2005 => Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken. Tue Oct 11 01:35:51 2005 => Entry "HKCR\.vob" refers to invalid object "vobfile". Action Taken: No Action Taken. Tue Oct 11 01:35:51 2005 => Entry "HKCR\.vxd" refers to invalid object "vxdfile". Action Taken: No Action Taken. Tue Oct 11 01:35:51 2005 => Entry "HKCR\AcroAccess.AcrobatAccess" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken. Tue Oct 11 01:35:51 2005 => Entry "HKCR\AcroAccess.AcrobatAccess.1" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken. Tue Oct 11 01:35:52 2005 => Entry "HKCR\Connection Manager Profile\shell\open\command" refers to invalid object "C:\WINDOWS\System32\CMMGR32.EXE "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\Matroska File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\MPEG File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\MPEG-4 File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\Ms40uw1.UploadCtl" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\Ms40uw1.UploadCtl.1" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\Ogg File (*.ogg)\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\ogmfile\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\PDFShellServer.PDFShellInfo" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken. Tue Oct 11 01:35:53 2005 => Entry "HKCR\PDFShellServer.PDFShellInfo.1" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken. Tue Oct 11 01:35:54 2005 => Entry "HKCR\Windows Media Video\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Tue Oct 11 01:35:54 2005 => Entry "HKCR\WMSServer.Server" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken. Tue Oct 11 01:35:54 2005 => Entry "HKCR\WMSServer.Server.9" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken. Tue Oct 11 01:41:25 2005 => ***** Chequeando por virus ITW específicos ***** Tue Oct 11 01:41:25 2005 => Buscando por el Virus Welchia ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus LovGate ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus CodeRed ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus OpaServ ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Sobig.e ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Winupie ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Swen ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus JS.Fortnight ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Novarg ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Pagabot ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Parite.b ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Parite.a ... Tue Oct 11 01:41:25 2005 => Buscando por el Virus Adware.SeekSeek ... Tue Oct 11 01:41:25 2005 => ***** Examen Completo. ***** Tue Oct 11 01:41:26 2005 => Archivos Examinados:: 24364 Tue Oct 11 01:41:26 2005 => Virus Encontrados:: 31 Tue Oct 11 01:41:26 2005 => Archivos Desinfectados:: 0 Tue Oct 11 01:41:26 2005 => Archivos Renombrados:: 0 Tue Oct 11 01:41:26 2005 => Archivos Eliminados:: 0 Tue Oct 11 01:41:26 2005 => Errores:: 133 Tue Oct 11 01:41:26 2005 => Tiempo Transcurrido:: 00 05Tue Oct 11 01:41:26 2005 => Fecha de Base de Datos de Virus: 2005/10/08 Tue Oct 11 01:41:26 2005 => Conteo de Base de Datos de Virus: 152936 Tue Oct 11 01:41:26 2005 => Examen Completo. |
![]() | ![]() |
| ||||
| Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis) hula perdona k siga colocando mas info pero creo k esta tb es importante pues me decias is usaba proxy y en la lista de virus me aparece marcado el proxycfg.exe y sho k pense k nu tenia virus!! Archivo C:\PROGRA~1\COMMON~1\system\proxycfg.exe marcado como not-a-virus:RemoteAdmin.Win32.WinVNC-based.h. No se tomó acción. Archivo C:\PROGRA~1\COMMON~1\system\VNCHOOKS.DLL marcado como not-a-virus:RemoteAdmin.Win32.WinVNC-based.b. No se tomó acción. Archivo C:\PROGRA~1\COMMON~1\system\proxycfg.exe marcado como not-a-virus:RemoteAdmin.Win32.WinVNC-based.h. No se tomó acción. Object "searchexe Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashfxp Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "yoursitebar Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashfxp Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "edonkey2000 Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "bearshare Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "abxtoolbar Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "180solutions Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "popuper Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "popuper Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken. Object "zipitpro Spyware/Adware" found in File System! Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\Archivos de programa\Archivos comunes\Microsoft Shared\Triedit\DHTMLED.OCX". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Paths\cmmgr32.exe" refers to invalid object "C:\WINDOWS\System32\cmmgr32.exe". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\Required\". Action Taken: No Action Taken. Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".adr". Action Taken: No Action Taken. Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".cmw". Action Taken: No Action Taken. Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".jpg_". Action Taken: No Action Taken. Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".ssa". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "eMusic Promotion". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB873339". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB883939". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB885250". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB886185". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887472". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887742". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890175". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890859". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB891781". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893086". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893803v2". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB894391". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896428". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896727". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB898461". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899588". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899591". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "QuickTime". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "Windows XP Service Pack". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "WinRAR archiver". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{4E9C3F2D-C654-453E-B1AD-9F231905A50D}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{73819BA2-2E8B-430B-A6C9-0D89657DC865}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{7BF7B688-4A95-4003-BA98-EA8A79DA0ABA}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{9C2EDC9C-EF3B-443A-BB2C-3488DAC7247E}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{A27F2A64-3D23-4449-B395-75335CED458E}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{DBB034F0-9616-45F1-8CD3-ACB78262BE4E}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E583ED6F-BD99-4066-A420-C815BF692B69}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E8D25E54-D172-4FB0-929B-48D51E2E9C6D}". Action Taken: No Action Taken. Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{FB015BB0-5518-4767-9DE4-F9A5C7C62E46}". Action Taken: No Action Taken. Entry "HKCR\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0180E49C-13BF-46DB-9AFD-9F52292E1C22}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{01CFC007-C263-420A-80DC-2988DA4C6105}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{01EF6E5C-C79B-4E3E-A320-4B57B84F1807}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{02391F44-2767-4E6A-A484-9B47B506F3A4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{078C3DAA-9E58-4D42-9E1C-7C8EE79539C5}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0835DC4B-AA01-48C3-A42D-FD62C530A3E1}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0A32EC6C-E4A0-4529-A20C-DA41716F8E16}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0A68C3B5-9164-4A54-AFAF-995B2FF0E0D4}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0D69FA1E-E90D-4BAF-B39E-6EA5EE2A7B49}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D00001}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D0611C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{12C79975-0C8E-46BF-A680-2BAB64E2F4A4}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{149D2E01-C32E-4939-80F6-C07B81015A7A}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{1B62A3D1-9C04-4BD5-84B5-D2607302501F}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{227949BE-EBB8-4D13-9E2B-AC98CAFB9E78}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{26859A4B-BFCD-442A-96E3-6E3A03FD57C8}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{38BE3000-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{38BE3001-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{38BE3002-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{4B420C26-B393-48B3-8A84-BC60827689E8}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{51D9596F-50F7-483D-934F-746378AA8CCC}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{52B63861-DC93-11CE-A099-00AA00479A58}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{53D9DE0B-FC61-4650-9773-74D13CC7E582}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{5DBB7F32-16AF-41C8-9D4B-7D47654B7650}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{60765CF5-01C2-4EE7-A44B-C791CF25FEA0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{64697678-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{64F2005C-6CF5-4652-B94F-600360B15B27}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{66EA14E6-E2B3-433D-923E-EE401CADBBD9}" refers to invalid object "C:\WINDOWS\System32\MonkeySource.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{68D0B5CF-3EC6-4113-86DF-8A34456B3A0C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{77983549-FFDA-4A88-B48F-B924E8D1F01C}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{78766964-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{7B63A013-DC2C-462E-9292-CAF8C867100F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{812C4C66-8B64-47ED-9651-AD6500005553}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{8643B615-6A76-4060-8A29-C2C6BDF5D70F}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{876B9304-359C-42E2-864E-B98B03F33C9D}" refers to invalid object "C:\WINDOWS\System32\MPCDec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{889EF574-0656-4B52-9091-072E52BB1B80}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{895322C5-84A1-450C-8478-C57793CAE86F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{8CAE96B7-85B1-4605-B23C-17FF5262B296}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{8DD6C641-98CB-11D1-9846-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{915E0060-918C-4A02-A585-1B912BA71CEE}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{9710BDB0-E61E-4A99-B70B-FB18A19830F1}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{9DD46B28-8A7F-409B-A365-C5CE3946A0C7}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{A8B25C0E-0894-4531-B668-AB1599FAF7F6}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{AB97AFC3-D08E-4E2D-98E0-AEE6D4634BA4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{AC031383-1479-4896-B296-E5032FDAD90C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{AF99DEEC-9680-4E45-BC34-DC6D0427669F}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{B3DE7EDC-0CD4-4d07-B1C5-92219CD475CC}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mp4.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{C2D6D98F-09CA-4524-AF64-1049B5665C9C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{C5379125-FD36-4277-A7CD-FAB469EF3A2F}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{D8CF6A42-3E09-4922-A452-21DFF10BEEBA}" refers to invalid object "C:\WINDOWS\System32\WavPackDSSplitter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{D9C9D526-5F0E-45FC-BAEC-CD94ABE2FEBC}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{E1D57D79-AA6E-4BDC-82BA-59A7895AF9BD}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{E232386E-CC39-4F03-8B19-A35F4DD86DAB}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{EB9FACE4-B2D7-40A9-9922-24B6528E84AA}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{F07E245F-5A1F-4D1E-8BFF-DC31D84A55AB}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{F0B801B1-A239-473B-B6B4-6AE3DB3ABBD3}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken. Entry "HKCR\CLSID\{F8C0C726-FEE7-4175-A7B5-1A4068EB5C47}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken. Entry "HKCR\CLSID\{FBA5FB05-58C3-45CB-8B0D-C2313EA048CF}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken. Entry "HKCR\.386" refers to invalid object "vxdfile". Action Taken: No Action Taken. Entry "HKCR\.bkf" refers to invalid object "msbackupfile". Action Taken: No Action Taken. Entry "HKCR\.mp4\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken. Entry "HKCR\.vob" refers to invalid object "vobfile". Action Taken: No Action Taken. Entry "HKCR\.vxd" refers to invalid object "vxdfile". Action Taken: No Action Taken. Entry "HKCR\AcroAccess.AcrobatAccess" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken. Entry "HKCR\AcroAccess.AcrobatAccess.1" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken. Entry "HKCR\Connection Manager Profile\shell\open\command" refers to invalid object "C:\WINDOWS\System32\CMMGR32.EXE "%1"". Action Taken: No Action Taken. Entry "HKCR\Matroska File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\MPEG File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\MPEG-4 File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\Ms40uw1.UploadCtl" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken. Entry "HKCR\Ms40uw1.UploadCtl.1" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken. Entry "HKCR\Ogg File (*.ogg)\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\ogmfile\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\PDFShellServer.PDFShellInfo" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken. Entry "HKCR\PDFShellServer.PDFShellInfo.1" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken. Entry "HKCR\Windows Media Video\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken. Entry "HKCR\WMSServer.Server" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken. Entry "HKCR\WMSServer.Server.9" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken. |
![]() | ![]() |
| ||||
| Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis) Hola!!! Bueno, pues ahora comprenderás que cuando se te recomienda no usar ciertos programas no es por ningún capricho, ni porque le tenga manía, sino porque hay muchos programas que no son lo que aparentan y terminan por ser dañinos para tu pc. Bien, pues ve al Panel de Control/Agregar o Quitar Programas y desinstala si está: FlashGet Limewire Ahora descarga KillBox y siguiendo las indicaciones delprograma ve eliminando de a uno estos archivos y reinicia tu pc cuando hayas eliminado el ultimo: C:\WINDOWS\DOWNLO~1\conflict.1 C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\notepad2.exe C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\search.htm C:\WINDOWS\iun6002.exe C:\PROGRA~1\COMMON~1\system\proxycfg.exe C:\PROGRA~1\COMMON~1\system\VNCHOOKS.DLL Eliminina también estas carpetas con todo su contenido, volviendo a emplear KillBox si algún archivo no se deja eliminar: C:\Archivos de programa\limewire C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\ C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\ C:\Documents and Settings\Propietario\Menú Inicio\programas\limewire C:\Documents and Settings\All Users\Menú Inicio\Programas\flashget C:\Archivos de programa\FlashGet\ Descarga Ewido, actualizalo y analiza tu sistema. Limpia bien el registro con RegSeeker, pasandolo varias veces hasta que no te detecte nada. Elimina cookies y temporales con Disk Cleaner (marca todas las casillas y le das a "Clean") y vacía la papelera. Reinicia y nos cuentas los resultados. Saludos PD// Con los archivos que te marco en rojo, me quedan ciertas dudas, ya que podrían ser legítimos o podria ser que te estuvieran intentando acceder remotamente a tu pc. Sólo eliminalos si no usas proxy (cosa que ya has dicho que no) y si no usas ningún programa de acceso remoto (VNC). Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog * Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando. * Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !! * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro. |
![]() |
| Herramientas | |
| |
![]() |
Temas Similares | ![]() |
| Tema | Autor | Foro | Respuestas | Último mensaje |
| No apaga, tarda en iniciar, se reinicia, se guinda | fal | Foro Oficial de HijackThis en español | 21 | 22/09/05 06:54:03 |
| MI PC está demasiado lenta y tarda mucho en cargar (solucionado) | ubaldo1980 | Temas Solucionados | 4 | 21/09/05 10:13:49 |
| Error en actualizacion en Windows XP | Instick | Ayuda General | 6 | 11/08/05 05:58:25 |
| Problema al iniciar windows xp (terminado) | Viloria | Temas Solucionados | 1 | 03/08/05 21:00:21 |
| No puedo iniciar sesion en Windows 2000 | Indeciso50 | Ayuda General | 2 | 15/04/05 08:49:39 |