Blog Registrarse Manuales Programas Glosario

Regresar   Foro de Spyware » Spyware - Adware - Hijackers - Malwares » Foro Oficial de HijackThis en español
 

Para evitar Virus, Spyware y otros Malwares, te recomendamos mantenerte informado en: InfoSpyware Blog


Foro Oficial de HijackThis en español Analizamos tu log de HijackThis para eliminar Hijackers, Spyware, Adware, ToolBars, Virus, Troyanos y Malwares en gral. Antes lea las Políticas del Foro de HijackThis.

Tema Cerrado
 
Enviar a: Herramientas
  post #1  
Antiguo 03/10/05, 22:34:14
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Malware mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

hula a todos tengo problemas con mi sistema operativo al iniciar se tarda muchisimo tiempo y siempre k la reinicio o apago sale una ventanita de error del explorer.exe y tengo k darle finalizar tarea para k se reinicie o apage ademas de k tb aparece algo de messenger.exe y mi esta tengo 640 de Ram mi pc es pentium IV y debido a esto tuve k instalar de nuevo el windows peor en la misma particion pk nu keria formatear debido a k nu tenia como guardar mis archivos k nu kiero borrar y ahora tengo 2 windoes XP en la misma particion y kiero tratar de arreglar mi problema pk tb ya nu puedo instalar en esta (en la nueva si pude) el service pack 2 ahh y ya utilize la reparacion de windows y lo de restaurar el sistema y de nada me sirvio espero alguien me ayude ^___^

Logfile of HijackThis v1.99.1
Scan saved at 03:58:03 p.m., on 29/09/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Raxco\PerfectDisk\PDSched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\program files\Common Files\system\proxycfg.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Archivos de programa\Nikon\PictureProject\NkbMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Opera\Opera.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\Documents and Settings\Propietario\Escritorio\Kamaleon2.exe
C:\Documents and Settings\Propietario\Mis documentos\Unzipped\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 200.94.210.170:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\ARCHIV~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar1.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\ARCHIV~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar1.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\fgiebar.dll
O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll
O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Proxy Config Tool for Windows] C:\program files\Common Files\system\proxycfg.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Archivos de programa\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\Archivos de programa\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O8 - Extra context menu item: &Google Search - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll/search.htm
O8 - Extra context menu item: Backward Links - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Descargar con Fl&ashGet - C:\Archivos de programa\FlashGet\jc_link.htm
O8 - Extra context menu item: Descargar con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dllink.htm
O8 - Extra context menu item: Descargar seleccionados con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Descargar sitio web con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Descargar todo con Flas&hGet - C:\Archivos de programa\FlashGet\jc_all.htm
O8 - Extra context menu item: Descargar todo con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlall.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Archivos de programa\MSN Toolbar Suite\TAB\02.05.0000.1082\en-us\msntabres.dll/229?6acd1fa3f324490944dbf2576a9918c
O8 - Extra context menu item: Open in new foreground tab - res://C:\Archivos de programa\MSN Toolbar Suite\TAB\02.05.0000.1082\en-us\msntabres.dll/230?6acd1fa3f324490944dbf2576a9918c
O8 - Extra context menu item: Similar Pages - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by20fd.bay20.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1122433487640
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Archivos de programa\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Archivos de programa\Raxco\PerfectDisk\PDSched.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Archivos de programa\TuneUp Utilities 2006\WinStylerThemeSvc.exe
InfoSpyware

  post #2  
Antiguo 04/10/05, 15:13:06
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

k pasaaaa buuua pk dejan en ceros mi post pense k en este foro ayudaban T_________T
  post #3  
Antiguo 05/10/05, 05:35:58
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

pido disculpas por ser tan desesperada me he dado cuenta k tienen muchisimo trabajo y que debo ser paciente se k me ayudaran es nu hallo como solucionar mi problema
  post #4  
Antiguo 06/10/05, 21:26:19
Avatar de Jereque
Ex-Colaborador
 
Registrado: ene 2005
Mensajes: 9.010
Contactar con Jereque a través de MSN
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

Hola!!!

Disculpa por la demora en la respuesta, pero es que hemos tomado la costumbre de comenzar a responder primero los mensajes con cero respuestas, y como ya respondiste sobre tu propio mensaje, pues ya no aparecía como "0 respuestas".

Bueno, en tu log no veo nada de gravedad, eso sí no soy muy partidario de tener instalados estos prgramas (agregan adware):

MessengerPlus
FlashGet
(la versión gratuita)

Esta entrada son restos del adware "YourSiteBar":

O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)

Y estas dos tienen que ver con "Alexa" (conocido distribuidor de adware y spyware):

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm


Así que ejecuta HijackThis con todos los programas cerrados, seleciona esas 3 entradas y pulsa en "Fix Checked".

Elimina tambien este archivo:

C:\WINDOWS\web\related.htm

Luego realiza estos pasos:

- Pasa Ewido Online

- Limpia el registro con RegSeeker y pasa Ad-Aware actualizado.

- Elimina cookies y temporales con Disk Cleaner y vacía la papelera.

Reinicia y nos cuentas como va todo.

Saludos


Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog


* Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando.
* Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !!
* No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.
  post #5  
Antiguo 09/10/05, 01:18:53
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

hula ya hice todos los pasos k me pedistes pero sigo con el problema k nu puedo entrar al panel de control pk me aparece una ventana de explorer.exe y yo queria entrar para cambiar la velocidad de mi puntero ya que la siento demasiada lenta y mira voe a volver a colocar lo k puse antes en otros foros en dodne nu recibi ayuda

Cita:
hula a todos!! tengo toi desesperadaaaaaa nu puedo entrar a mi pc, panel
de control, mis documentos, mis imagenes,mi musica, ninguna
carpetaaaaaaaaa solo puedo entrar a los programas y mi explorador buuuaaa
todo sucedio apartir de k instale el tema visual Longhorn Inspirat 2 de la
pagina de crystal XP y a los pokos minutos note k mi internet estaba ma
slento luego mi pc tambien estaba lenta y de repente ya nu me dejo entrar
a la carpeta de mis documentos luego intente entrar a mi pc y nada a
ninguna carpetaaa luego intente al panel de control y ahi si entraba pero
nu me servia de mucho lo k hice despues de desinstalar ese tema visual y
regresar mi windows XP a como estaba y nadaa mi problema nu se soluciono
seguia en las mismas tambien agrego k usela herramienta de restaurar
sistema peor nu me funciono nu tenia puntos anteriores de restauracion
luego lo siguiente k intente hacer es reparar mi windows y eso hice y
nadaaaa todavia sigo con mi problema!!! nu me deja entrar a ninguna
carpetaaa, mi pc, panel de control, nadaaa solo programa mi pc es pentium
4 640 de ram y disco duro de 40 GB buuuaaaa alguien sabe el por que me
sucedio esto y si tiene algun solucion k nu sea formatear mi pc se lo
agradeceria de todo corazon ya pregunte en otros foros y nu me dan
respuestas

los kero estare esperando alguna respuesta
eso lo habias puesto en otros de ahi se me vinieron todos mis problemas con mi pc y entonces tuve k instalar en la misma particion un nuevo windoiws XP el cual ahorita esta limpio y lo uso sin problemas pero este tb lo quiero componer e intente instalar el service pack 2 y nu pude hasta ahorita nu puedo instalarlo y pues kero ver k tanto puede recuperar este primer windows XP k tengo instalado te dejo mi nuevo hijackthis log

Logfile of HijackThis v1.99.1
Scan saved at 08:57:03 p.m., on 08/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Raxco\PerfectDisk\PDSched.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\program files\Common Files\system\proxycfg.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Archivos de programa\Nikon\PictureProject\NkbMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Lavasoft\Ad-Aware SE Professional\Ad-Watch.exe
C:\WINDOWS\explorer.exe
C:\Archivos de programa\Opera\Opera.exe
C:\Documents and Settings\Propietario\Mis documentos\Unzipped\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 200.94.210.170:8080
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: IeCatch2 Class - {A5366673-E8CA-11D3-9CD9-0090271D075B} - C:\ARCHIV~1\FlashGet\jccatch.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar1.dll
O2 - BHO: MSN Search Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\ARCHIV~1\FlashFXP\IEFlash.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar1.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\fgiebar.dll
O3 - Toolbar: MSN Search Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Proxy Config Tool for Windows] C:\program files\Common Files\system\proxycfg.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Archivos de programa\Nikon\PictureProject\NkbMonitor.exe
O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\Archivos de programa\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe
O8 - Extra context menu item: &Google Search - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &MSN Search - res://C:\Archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\en-us\msntb.dll/search.htm
O8 - Extra context menu item: Backward Links - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Descargar con Fl&ashGet - C:\Archivos de programa\FlashGet\jc_link.htm
O8 - Extra context menu item: Descargar con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dllink.htm
O8 - Extra context menu item: Descargar seleccionados con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Descargar sitio web con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Descargar todo con Flas&hGet - C:\Archivos de programa\FlashGet\jc_all.htm
O8 - Extra context menu item: Descargar todo con Free Download Manager - file://C:\Archivos de programa\Free Download Manager\dlall.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Archivos de programa\MSN Toolbar Suite\TAB\02.05.0000.1082\en-us\msntabres.dll/229?6acd1fa3f324490944dbf2576a9918c
O8 - Extra context menu item: Open in new foreground tab - res://C:\Archivos de programa\MSN Toolbar Suite\TAB\02.05.0000.1082\en-us\msntabres.dll/230?6acd1fa3f324490944dbf2576a9918c
O8 - Extra context menu item: Similar Pages - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate into English - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\flashget.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by20fd.bay20.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1122433487640
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697516} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_mp3.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} (HeartbeatCtl Class) - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\kavsvc.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Archivos de programa\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - C:\Archivos de programa\Raxco\PerfectDisk\PDSched.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Archivos de programa\TuneUp Utilities 2006\WinStylerThemeSvc.exe
  post #6  
Antiguo 09/10/05, 01:19:57
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

por cierto el messenger plus! lo instale sin patrocinador asi k nu tengo ningun problema con el
  post #7  
Antiguo 10/10/05, 18:09:01
Avatar de Jereque
Ex-Colaborador
 
Registrado: ene 2005
Mensajes: 9.010
Contactar con Jereque a través de MSN
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

Hola!!!

No veo restos de malware directamente en tu log, por lo que en principio podriamos descartar problemas por virus.

¿Usas un Proxy?

Para descartar que tu problema sea debido a malware descarga MWAV.exe y déjanos un log de esta herramienta (copia sólo las entradas reconocidas como infectadas).

Saludos


Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog


* Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando.
* Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !!
* No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.
  post #8  
Antiguo 11/10/05, 04:52:01
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

hulaa mira sha hice lo k me pedistes y si me lleve una sorpresa me detecto 31 virus!!! y nu uso proxy quien sabe pk se carga eso en mi windows bueno te dejo los datos k me pedistes y gracias por ayudarme espero resolver mi problema jijiji creo k nu vendria mal crecar tb el k se supone es un windows limpio (sha sabes tengo 2 )

Tue Oct 11 01:30:09 2005 => ************************************************** ********
Tue Oct 11 01:30:09 2005 => MicroWorld Anti Virus & Spyware Toolkit Utility.
Tue Oct 11 01:30:09 2005 => Copyright © 2003-2005, MicroWorld Technologies Inc.
Tue Oct 11 01:30:09 2005 => ************************************************** ********
Tue Oct 11 01:30:09 2005 => Version 7.2.4 (C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\mwavscan.com)
Tue Oct 11 01:30:09 2005 => Log File: C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\MWAV.LOG
Tue Oct 11 01:30:09 2005 => MWAV Registered: FALSE.
Tue Oct 11 01:30:09 2005 => MWAV Mode: Only Scan files.
Tue Oct 11 01:30:10 2005 => Latest Date of files inside MWAV: 08 Oct 2005 12:15:33.
Tue Oct 11 01:30:23 2005 => AV Library Loaded...
Tue Oct 11 01:30:23 2005 => MWAV doing self scanning...
Tue Oct 11 01:30:23 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavss.exe
Tue Oct 11 01:30:23 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\Getvlist.exe
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavss.dll
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavssdi.dll
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavssi.dll
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\kavvlg.dll
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\msvlclnt.dll
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\ipc.dll
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\main.avi
Tue Oct 11 01:30:24 2005 => Scanning File C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\virus.avi
Tue Oct 11 01:30:24 2005 => MWAV files are clean.
Tue Oct 11 01:30:34 2005 => Fecha de Base de Datos de Virus: 2005/10/08
Tue Oct 11 01:30:34 2005 => Conteo de Base de Datos de Virus: 152936
Tue Oct 11 01:30:43 2005 => Generando Lista de Virus... getvlist.exe C:\DOCUME~1\PROPIE~1\CONFIG~1\Temp\vlist.txt

Tue Oct 11 01:32:46 2005 => ***** Scanning Registry and File system for Adware/Spyware *****
Tue Oct 11 01:32:46 2005 => Loading Spyware Signatures from new External Database (Size: 145065).
Tue Oct 11 01:32:51 2005 => Indexed Spyware Databases Successfully Created...

Tue Oct 11 01:32:51 2005 => System found infected with searchexe Spyware/Adware ({807553e5-5146-11d5-a672-00b0d022e945})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({a5366673-e8ca-11d3-9cd9-0090271d075b})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({e0e899ab-f487-11d5-8d29-0050ba6940e3})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with flashfxp Spyware/Adware ({e5a1691b-d188-4419-ad02-90002030b8ee})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({e0e899ab-f487-11d5-8d29-0050ba6940e3})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with yoursitebar Spyware/Adware ({86227d9c-0efe-4f8a-aa55-30386a3f5686})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with flashget Spyware/Adware ({a5366673-e8ca-11d3-9cd9-0090271d075b})! Action taken: No Action Taken.
Tue Oct 11 01:32:51 2005 => System found infected with flashfxp Spyware/Adware ({e5a1691b-d188-4419-ad02-90002030b8ee})! Action taken: No Action Taken.
Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\Microsoft\Windows\CurrentVersion\uni nstall\limewire !!!
Tue Oct 11 01:32:53 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\magnet\handlers\limewire !!!
Tue Oct 11 01:32:53 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\edonkey2000 !!!
Tue Oct 11 01:32:53 2005 => Object "edonkey2000 Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\gnu !!!
Tue Oct 11 01:32:53 2005 => Object "bearshare Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:53 2005 => Offending Key found: HKLM\Software\limewire !!!
Tue Oct 11 01:32:53 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:53 2005 => Offending Key found: HKCU\Software\maxthon !!!
Tue Oct 11 01:32:53 2005 => Object "abxtoolbar Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:55 2005 => Offending Folder found: C:\WINDOWS\DOWNLO~1\conflict.1
Tue Oct 11 01:32:55 2005 => Object "180solutions Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:56 2005 => Offending Folder found: C:\Archivos de programa\flashget
Tue Oct 11 01:32:56 2005 => Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:32:56 2005 => Offending Folder found: C:\Archivos de programa\limewire
Tue Oct 11 01:32:56 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:34:58 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\notepad2.exe
Tue Oct 11 01:34:58 2005 => System found infected with popuper Spyware/Adware (notepad2.exe)! Action taken: No Action Taken.

Tue Oct 11 01:35:00 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\search.htm
Tue Oct 11 01:35:00 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken.

Tue Oct 11 01:35:08 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_2_0rc2\tinymce\jscript s\tiny_mce\plugins\searchreplace\search.htm
Tue Oct 11 01:35:08 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken.

Tue Oct 11 01:35:15 2005 => Offending Folder found: C:\Documents and Settings\Propietario\Menú Inicio\programas\limewire
Tue Oct 11 01:35:15 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:35:15 2005 => Offending Folder found: C:\Documents and Settings\Propietario\Menú Inicio\Programas\limewire
Tue Oct 11 01:35:15 2005 => Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:35:20 2005 => Offending Folder found: C:\Documents and Settings\All Users\Menú Inicio\Programas\flashget
Tue Oct 11 01:35:20 2005 => Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:35:21 2005 => Offending Folder found: C:\Documents and Settings\All Users\Menú Inicio\programas\flashget
Tue Oct 11 01:35:21 2005 => Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Oct 11 01:35:24 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\notepad2.exe
Tue Oct 11 01:35:24 2005 => System found infected with popuper Spyware/Adware (notepad2.exe)! Action taken: No Action Taken.

Tue Oct 11 01:35:24 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\search.htm
Tue Oct 11 01:35:24 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken.

Tue Oct 11 01:35:24 2005 => Offending file found: C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_2_0rc2\tinymce\jscript s\tiny_mce\plugins\searchreplace\search.htm
Tue Oct 11 01:35:24 2005 => System found infected with weathercast Spyware/Adware (search.htm)! Action taken: No Action Taken.

Tue Oct 11 01:35:25 2005 => Offending file found: C:\WINDOWS\iun6002.exe
Tue Oct 11 01:35:25 2005 => System found infected with zipitpro Spyware/Adware (C:\WINDOWS\iun6002.exe)! Action taken: No Action Taken.


Tue Oct 11 01:35:26 2005 => ***** Scanning Registry for errors created because of Adware/Spyware *****
Tue Oct 11 01:35:30 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\Archivos de programa\Archivos comunes\Microsoft Shared\Triedit\DHTMLED.OCX". Action Taken: No Action Taken.

Tue Oct 11 01:35:30 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Paths\cmmgr32.exe" refers to invalid object "C:\WINDOWS\System32\cmmgr32.exe". Action Taken: No Action Taken.

Tue Oct 11 01:35:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\". Action Taken: No Action Taken.

Tue Oct 11 01:35:31 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\Required\". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".adr". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".cmw". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".jpg_". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".ssa". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "eMusic Promotion". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB873339". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB883939". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB885250". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB886185". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887472". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887742". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890175". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890859". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB891781". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893086". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893803v2". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB894391". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896428". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896727". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB898461". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899588". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899591". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "QuickTime". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "Windows XP Service Pack". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "WinRAR archiver". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{4E9C3F2D-C654-453E-B1AD-9F231905A50D}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{73819BA2-2E8B-430B-A6C9-0D89657DC865}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{7BF7B688-4A95-4003-BA98-EA8A79DA0ABA}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{9C2EDC9C-EF3B-443A-BB2C-3488DAC7247E}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{A27F2A64-3D23-4449-B395-75335CED458E}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{DBB034F0-9616-45F1-8CD3-ACB78262BE4E}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E583ED6F-BD99-4066-A420-C815BF692B69}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E8D25E54-D172-4FB0-929B-48D51E2E9C6D}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{FB015BB0-5518-4767-9DE4-F9A5C7C62E46}". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{0180E49C-13BF-46DB-9AFD-9F52292E1C22}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{01CFC007-C263-420A-80DC-2988DA4C6105}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{01EF6E5C-C79B-4E3E-A320-4B57B84F1807}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:39 2005 => Entry "HKCR\CLSID\{02391F44-2767-4E6A-A484-9B47B506F3A4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{078C3DAA-9E58-4D42-9E1C-7C8EE79539C5}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0835DC4B-AA01-48C3-A42D-FD62C530A3E1}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0A32EC6C-E4A0-4529-A20C-DA41716F8E16}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0A68C3B5-9164-4A54-AFAF-995B2FF0E0D4}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0D69FA1E-E90D-4BAF-B39E-6EA5EE2A7B49}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D00001}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D0611C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{12C79975-0C8E-46BF-A680-2BAB64E2F4A4}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{149D2E01-C32E-4939-80F6-C07B81015A7A}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:40 2005 => Entry "HKCR\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{1B62A3D1-9C04-4BD5-84B5-D2607302501F}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{227949BE-EBB8-4D13-9E2B-AC98CAFB9E78}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{26859A4B-BFCD-442A-96E3-6E3A03FD57C8}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{38BE3000-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{38BE3001-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:41 2005 => Entry "HKCR\CLSID\{38BE3002-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{4B420C26-B393-48B3-8A84-BC60827689E8}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{51D9596F-50F7-483D-934F-746378AA8CCC}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{52B63861-DC93-11CE-A099-00AA00479A58}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:42 2005 => Entry "HKCR\CLSID\{53D9DE0B-FC61-4650-9773-74D13CC7E582}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{5DBB7F32-16AF-41C8-9D4B-7D47654B7650}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{60765CF5-01C2-4EE7-A44B-C791CF25FEA0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{64697678-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{64F2005C-6CF5-4652-B94F-600360B15B27}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{66EA14E6-E2B3-433D-923E-EE401CADBBD9}" refers to invalid object "C:\WINDOWS\System32\MonkeySource.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:43 2005 => Entry "HKCR\CLSID\{68D0B5CF-3EC6-4113-86DF-8A34456B3A0C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{77983549-FFDA-4A88-B48F-B924E8D1F01C}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{78766964-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{7B63A013-DC2C-462E-9292-CAF8C867100F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{812C4C66-8B64-47ED-9651-AD6500005553}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:44 2005 => Entry "HKCR\CLSID\{8643B615-6A76-4060-8A29-C2C6BDF5D70F}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{876B9304-359C-42E2-864E-B98B03F33C9D}" refers to invalid object "C:\WINDOWS\System32\MPCDec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{889EF574-0656-4B52-9091-072E52BB1B80}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{895322C5-84A1-450C-8478-C57793CAE86F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{8CAE96B7-85B1-4605-B23C-17FF5262B296}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{8DD6C641-98CB-11D1-9846-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{915E0060-918C-4A02-A585-1B912BA71CEE}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{9710BDB0-E61E-4A99-B70B-FB18A19830F1}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:45 2005 => Entry "HKCR\CLSID\{9DD46B28-8A7F-409B-A365-C5CE3946A0C7}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{A8B25C0E-0894-4531-B668-AB1599FAF7F6}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{AB97AFC3-D08E-4E2D-98E0-AEE6D4634BA4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{AC031383-1479-4896-B296-E5032FDAD90C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{AF99DEEC-9680-4E45-BC34-DC6D0427669F}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:46 2005 => Entry "HKCR\CLSID\{B3DE7EDC-0CD4-4d07-B1C5-92219CD475CC}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mp4.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{C2D6D98F-09CA-4524-AF64-1049B5665C9C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{C5379125-FD36-4277-A7CD-FAB469EF3A2F}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{D8CF6A42-3E09-4922-A452-21DFF10BEEBA}" refers to invalid object "C:\WINDOWS\System32\WavPackDSSplitter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{D9C9D526-5F0E-45FC-BAEC-CD94ABE2FEBC}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{E1D57D79-AA6E-4BDC-82BA-59A7895AF9BD}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:47 2005 => Entry "HKCR\CLSID\{E232386E-CC39-4F03-8B19-A35F4DD86DAB}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{EB9FACE4-B2D7-40A9-9922-24B6528E84AA}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F07E245F-5A1F-4D1E-8BFF-DC31D84A55AB}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F0B801B1-A239-473B-B6B4-6AE3DB3ABBD3}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.

Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{F8C0C726-FEE7-4175-A7B5-1A4068EB5C47}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:48 2005 => Entry "HKCR\CLSID\{FBA5FB05-58C3-45CB-8B0D-C2313EA048CF}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.

Tue Oct 11 01:35:50 2005 => Entry "HKCR\.386" refers to invalid object "vxdfile". Action Taken: No Action Taken.

Tue Oct 11 01:35:50 2005 => Entry "HKCR\.bkf" refers to invalid object "msbackupfile". Action Taken: No Action Taken.

Tue Oct 11 01:35:50 2005 => Entry "HKCR\.mp4\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:50 2005 => Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken.

Tue Oct 11 01:35:51 2005 => Entry "HKCR\.vob" refers to invalid object "vobfile". Action Taken: No Action Taken.

Tue Oct 11 01:35:51 2005 => Entry "HKCR\.vxd" refers to invalid object "vxdfile". Action Taken: No Action Taken.

Tue Oct 11 01:35:51 2005 => Entry "HKCR\AcroAccess.AcrobatAccess" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken.

Tue Oct 11 01:35:51 2005 => Entry "HKCR\AcroAccess.AcrobatAccess.1" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken.

Tue Oct 11 01:35:52 2005 => Entry "HKCR\Connection Manager Profile\shell\open\command" refers to invalid object "C:\WINDOWS\System32\CMMGR32.EXE "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\Matroska File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\MPEG File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\MPEG-4 File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\Ms40uw1.UploadCtl" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\Ms40uw1.UploadCtl.1" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\Ogg File (*.ogg)\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\ogmfile\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\PDFShellServer.PDFShellInfo" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken.

Tue Oct 11 01:35:53 2005 => Entry "HKCR\PDFShellServer.PDFShellInfo.1" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken.

Tue Oct 11 01:35:54 2005 => Entry "HKCR\Windows Media Video\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.

Tue Oct 11 01:35:54 2005 => Entry "HKCR\WMSServer.Server" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken.

Tue Oct 11 01:35:54 2005 => Entry "HKCR\WMSServer.Server.9" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken.

Tue Oct 11 01:41:25 2005 => ***** Chequeando por virus ITW específicos *****
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Welchia ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus LovGate ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus CodeRed ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus OpaServ ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Sobig.e ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Winupie ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Swen ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus JS.Fortnight ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Novarg ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Pagabot ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Parite.b ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Parite.a ...
Tue Oct 11 01:41:25 2005 => Buscando por el Virus Adware.SeekSeek ...

Tue Oct 11 01:41:25 2005 => ***** Examen Completo. *****

Tue Oct 11 01:41:26 2005 => Archivos Examinados:: 24364
Tue Oct 11 01:41:26 2005 => Virus Encontrados:: 31
Tue Oct 11 01:41:26 2005 => Archivos Desinfectados:: 0
Tue Oct 11 01:41:26 2005 => Archivos Renombrados:: 0
Tue Oct 11 01:41:26 2005 => Archivos Eliminados:: 0
Tue Oct 11 01:41:26 2005 => Errores:: 133
Tue Oct 11 01:41:26 2005 => Tiempo Transcurrido:: 0005
Tue Oct 11 01:41:26 2005 => Fecha de Base de Datos de Virus: 2005/10/08
Tue Oct 11 01:41:26 2005 => Conteo de Base de Datos de Virus: 152936

Tue Oct 11 01:41:26 2005 => Examen Completo.
  post #9  
Antiguo 11/10/05, 05:04:31
Avatar de princesa_Ameria
Usuaria
 
Registrado: oct 2005
Ubicación: Mexico
Mensajes: 88
Contactar con princesa_Ameria a través de MSN Contactar con princesa_Ameria a través de Yahoo Send a message via Skype™ to princesa_Ameria
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

hula perdona k siga colocando mas info pero creo k esta tb es importante pues me decias is usaba proxy y en la lista de virus me aparece marcado el proxycfg.exe y sho k pense k nu tenia virus!!

Archivo C:\PROGRA~1\COMMON~1\system\proxycfg.exe marcado como not-a-virus:RemoteAdmin.Win32.WinVNC-based.h. No se tomó acción.
Archivo C:\PROGRA~1\COMMON~1\system\VNCHOOKS.DLL marcado como not-a-virus:RemoteAdmin.Win32.WinVNC-based.b. No se tomó acción.
Archivo C:\PROGRA~1\COMMON~1\system\proxycfg.exe marcado como not-a-virus:RemoteAdmin.Win32.WinVNC-based.h. No se tomó acción.
Object "searchexe Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashfxp Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "yoursitebar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashfxp Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "edonkey2000 Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "bearshare Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "abxtoolbar Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "180solutions Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "popuper Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "limewire Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "flashget Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "popuper Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "weathercast Spyware/Adware" found in File System! Action Taken: No Action Taken.
Object "zipitpro Spyware/Adware" found in File System! Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Sh aredDlls" refers to invalid object "D:\Archivos de programa\Archivos comunes\Microsoft Shared\Triedit\DHTMLED.OCX". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Paths\cmmgr32.exe" refers to invalid object "C:\WINDOWS\System32\cmmgr32.exe". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\In staller\Folders" refers to invalid object "C:\Archivos de programa\Adobe\Adobe Photoshop CS2\Required\". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".adr". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".cmw". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".jpg_". Action Taken: No Action Taken.
Entry "HKCU\Software\Microsoft\Windows\CurrentVersion\Ex plorer\FileExts" refers to invalid object ".ssa". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "eMusic Promotion". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB873339". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB883939". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB885250". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB886185". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887472". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB887742". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890175". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB890859". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB891781". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893086". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB893803v2". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB894391". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896428". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB896727". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB898461". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899588". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "KB899591". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "QuickTime". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "Windows XP Service Pack". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "WinRAR archiver". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{05BB2EC5-6BEF-4DDC-9E75-BEE7B161157A}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{4E9C3F2D-C654-453E-B1AD-9F231905A50D}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{73819BA2-2E8B-430B-A6C9-0D89657DC865}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{7BF7B688-4A95-4003-BA98-EA8A79DA0ABA}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{9C2EDC9C-EF3B-443A-BB2C-3488DAC7247E}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{A27F2A64-3D23-4449-B395-75335CED458E}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{DBB034F0-9616-45F1-8CD3-ACB78262BE4E}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E583ED6F-BD99-4066-A420-C815BF692B69}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{E8D25E54-D172-4FB0-929B-48D51E2E9C6D}". Action Taken: No Action Taken.
Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\Ap p Management\ARPCache" refers to invalid object "{FB015BB0-5518-4767-9DE4-F9A5C7C62E46}". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{00000001-4FEF-40D3-B3FA-E0531B897F98}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0180E49C-13BF-46DB-9AFD-9F52292E1C22}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{01CFC007-C263-420A-80DC-2988DA4C6105}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{01EF6E5C-C79B-4E3E-A320-4B57B84F1807}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{02391F44-2767-4E6A-A484-9B47B506F3A4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{078C3DAA-9E58-4D42-9E1C-7C8EE79539C5}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0835DC4B-AA01-48C3-A42D-FD62C530A3E1}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0A32EC6C-E4A0-4529-A20C-DA41716F8E16}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0A68C3B5-9164-4A54-AFAF-995B2FF0E0D4}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0D69FA1E-E90D-4BAF-B39E-6EA5EE2A7B49}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D00001}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{0E6772C0-DD80-11D4-B58F-A86B66D0611C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{12C79975-0C8E-46BF-A680-2BAB64E2F4A4}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{149D2E01-C32E-4939-80F6-C07B81015A7A}" refers to invalid object "C:\WINDOWS\system32\MatroskaSplitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{1B62A3D1-9C04-4BD5-84B5-D2607302501F}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{227949BE-EBB8-4D13-9E2B-AC98CAFB9E78}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{26859A4B-BFCD-442A-96E3-6E3A03FD57C8}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{363F46BE-27B4-4C8D-99E7-B1E049B84376}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{38BE3000-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{38BE3001-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{38BE3002-DBF4-11D0-860E-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{4B420C26-B393-48B3-8A84-BC60827689E8}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{51D9596F-50F7-483D-934F-746378AA8CCC}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{525F116F-04AD-40A2-AE2F-A0C4E1AFEF98}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{52B63861-DC93-11CE-A099-00AA00479A58}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaSplitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{53D9DE0B-FC61-4650-9773-74D13CC7E582}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{55DA30FC-F16B-49FC-BAA5-AE59FC65F82D}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{5DBB7F32-16AF-41C8-9D4B-7D47654B7650}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{60765CF5-01C2-4EE7-A44B-C791CF25FEA0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{64697678-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\System32\xvid.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{64F2005C-6CF5-4652-B94F-600360B15B27}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mkx.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{66EA14E6-E2B3-433D-923E-EE401CADBBD9}" refers to invalid object "C:\WINDOWS\System32\MonkeySource.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{68D0B5CF-3EC6-4113-86DF-8A34456B3A0C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{77983549-FFDA-4A88-B48F-B924E8D1F01C}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{78766964-0000-0010-8000-00AA00389B71}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{7B63A013-DC2C-462E-9292-CAF8C867100F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{812C4C66-8B64-47ED-9651-AD6500005553}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}" refers to invalid object "C:\WINDOWS\system32\divxdec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8643B615-6A76-4060-8A29-C2C6BDF5D70F}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{876B9304-359C-42E2-864E-B98B03F33C9D}" refers to invalid object "C:\WINDOWS\System32\MPCDec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{889EF574-0656-4B52-9091-072E52BB1B80}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{895322C5-84A1-450C-8478-C57793CAE86F}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\splitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8CAE96B7-85B1-4605-B23C-17FF5262B296}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{8DD6C641-98CB-11D1-9846-00A024CFEF6D}" refers to invalid object "C:\WINDOWS\System32\l3codecx.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{90A9B7D2-3794-45EA-9E23-140E3938D2D9}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{915E0060-918C-4A02-A585-1B912BA71CEE}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{93A22E7A-5091-45EF-BA61-6DA26156A5D0}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9710BDB0-E61E-4A99-B70B-FB18A19830F1}" refers to invalid object "C:\WINDOWS\System32\3ivxDSAudioDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9852A670-F845-491B-9BE6-EBD841B8A613}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{9DD46B28-8A7F-409B-A365-C5CE3946A0C7}" refers to invalid object "C:\WINDOWS\System32\WavPackDSDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A753A1EC-973E-4718-AF8E-A3F554D45C44}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{A8B25C0E-0894-4531-B668-AB1599FAF7F6}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AB97AFC3-D08E-4E2D-98E0-AEE6D4634BA4}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AC031383-1479-4896-B296-E5032FDAD90C}" refers to invalid object "C:\WINDOWS\System32\3ivxDSMediaMux.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{ACE4747B-35BD-4E97-9DD7-1D4245B0695C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{AF99DEEC-9680-4E45-BC34-DC6D0427669F}" refers to invalid object "C:\WINDOWS\System32\CoreFLACDecoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{B3DE7EDC-0CD4-4d07-B1C5-92219CD475CC}" refers to invalid object "C:\Archivos de programa\K-Lite Codec Pack\haali\mp4.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C2D6D98F-09CA-4524-AF64-1049B5665C9C}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{C5379125-FD36-4277-A7CD-FAB469EF3A2F}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{CE77C59C-CFD2-429F-868C-8B04D23F94CA}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D8CF6A42-3E09-4922-A452-21DFF10BEEBA}" refers to invalid object "C:\WINDOWS\System32\WavPackDSSplitter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{D9C9D526-5F0E-45FC-BAEC-CD94ABE2FEBC}" refers to invalid object "C:\WINDOWS\System32\vp6dec.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E1D57D79-AA6E-4BDC-82BA-59A7895AF9BD}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{E232386E-CC39-4F03-8B19-A35F4DD86DAB}" refers to invalid object "C:\WINDOWS\System32\3ivxDSEncoder.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{EB9FACE4-B2D7-40A9-9922-24B6528E84AA}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F07E245F-5A1F-4D1E-8BFF-DC31D84A55AB}" refers to invalid object "C:\WINDOWS\system32\OggDS.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F0B801B1-A239-473B-B6B4-6AE3DB3ABBD3}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F544E0F5-CA3C-47EA-A64D-35FCF1602396}" refers to invalid object "C:\WINDOWS\System32\vsfilter.dll". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{F8C0C726-FEE7-4175-A7B5-1A4068EB5C47}" refers to invalid object "C:\WINDOWS\System32\CoreVorbis.ax". Action Taken: No Action Taken.
Entry "HKCR\CLSID\{FBA5FB05-58C3-45CB-8B0D-C2313EA048CF}" refers to invalid object "C:\WINDOWS\System32\ac3filter.ax". Action Taken: No Action Taken.
Entry "HKCR\.386" refers to invalid object "vxdfile". Action Taken: No Action Taken.
Entry "HKCR\.bkf" refers to invalid object "msbackupfile". Action Taken: No Action Taken.
Entry "HKCR\.mp4\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\.pcb" refers to invalid object "PCBFile". Action Taken: No Action Taken.
Entry "HKCR\.vob" refers to invalid object "vobfile". Action Taken: No Action Taken.
Entry "HKCR\.vxd" refers to invalid object "vxdfile". Action Taken: No Action Taken.
Entry "HKCR\AcroAccess.AcrobatAccess" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken.
Entry "HKCR\AcroAccess.AcrobatAccess.1" refers to invalid object "{C523F39F-9C83-11D3-9094-00104BD0D535}". Action Taken: No Action Taken.
Entry "HKCR\Connection Manager Profile\shell\open\command" refers to invalid object "C:\WINDOWS\System32\CMMGR32.EXE "%1"". Action Taken: No Action Taken.
Entry "HKCR\Matroska File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\MPEG File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\MPEG-4 File\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\Ms40uw1.UploadCtl" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken.
Entry "HKCR\Ms40uw1.UploadCtl.1" refers to invalid object "{2B102038-52AB-4EF0-A25E-376D47F0F35E}". Action Taken: No Action Taken.
Entry "HKCR\Ogg File (*.ogg)\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\ogmfile\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\PDFShellServer.PDFShellInfo" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken.
Entry "HKCR\PDFShellServer.PDFShellInfo.1" refers to invalid object "{98D9A6F1-4696-4B5E-A2E8-36B3F9C1E12C}". Action Taken: No Action Taken.
Entry "HKCR\Windows Media Video\shell\open\command" refers to invalid object ""C:\Archivos de programa\K-Lite Codec Pack\Media Player Classic\mplayerc.exe" "%1"". Action Taken: No Action Taken.
Entry "HKCR\WMSServer.Server" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken.
Entry "HKCR\WMSServer.Server.9" refers to invalid object "{845FB959-4279-11D2-BF23-00805FBE84A6}". Action Taken: No Action Taken.
  post #10  
Antiguo 11/10/05, 19:36:05
Avatar de Jereque
Ex-Colaborador
 
Registrado: ene 2005
Mensajes: 9.010
Contactar con Jereque a través de MSN
Re: mi windows XP tarda mucho en iniciar (dejo mi Logfile of HijackThis)

Hola!!!

Bueno, pues ahora comprenderás que cuando se te recomienda no usar ciertos programas no es por ningún capricho, ni porque le tenga manía, sino porque hay muchos programas que no son lo que aparentan y terminan por ser dañinos para tu pc.

Bien, pues ve al Panel de Control/Agregar o Quitar Programas y desinstala si está:

FlashGet
Limewire


Ahora descarga KillBox y siguiendo las indicaciones delprograma ve eliminando de a uno estos archivos y reinicia tu pc cuando hayas eliminado el ultimo:

C:\WINDOWS\DOWNLO~1\conflict.1
C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\notepad2.exe
C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\search.htm
C:\WINDOWS\iun6002.exe
C:\PROGRA~1\COMMON~1\system\proxycfg.exe
C:\PROGRA~1\COMMON~1\system\VNCHOOKS.DLL

Eliminina también estas carpetas con todo su contenido, volviendo a emplear KillBox si algún archivo no se deja eliminar:

C:\Archivos de programa\limewire
C:\Documents and Settings\Propietario\Mis documentos\unzipped\notepad2_esar\
C:\Documents and Settings\Propietario\Mis documentos\unzipped\tinymce_1_44\tinymce\jscripts\ tiny_mce\plugins\searchreplace\
C:\Documents and Settings\Propietario\Menú Inicio\programas\limewire
C:\Documents and Settings\All Users\Menú Inicio\Programas\flashget
C:\Archivos de programa\FlashGet\

Descarga Ewido, actualizalo y analiza tu sistema.

Limpia bien el registro con RegSeeker, pasandolo varias veces hasta que no te detecte nada.

Elimina cookies y temporales con Disk Cleaner (marca todas las casillas y le das a "Clean") y vacía la papelera.

Reinicia y nos cuentas los resultados.

Saludos

PD// Con los archivos que te marco en rojo, me quedan ciertas dudas, ya que podrían ser legítimos o podria ser que te estuvieran intentando acceder remotamente a tu pc. Sólo eliminalos si no usas proxy (cosa que ya has dicho que no) y si no usas ningún programa de acceso remoto (VNC).


Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog


* Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando.
* Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !!
* No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.
Tema Cerrado

Herramientas

Reglas del foro
No puedes crear nuevos temas
No puedes responder temas
No puedes subir adjuntos
No puedes editar tus mensajes

BB code is activado
Las caritas están activado
Código [IMG] está activado
Código HTML está desactivado
Trackbacks are desactivado
Pingbacks are activado
Refbacks are activado


Temas Similares
Tema Autor Foro Respuestas Último mensaje
No apaga, tarda en iniciar, se reinicia, se guinda fal Foro Oficial de HijackThis en español 21 22/09/05 06:54:03
MI PC está demasiado lenta y tarda mucho en cargar (solucionado) ubaldo1980 Temas Solucionados 4 21/09/05 10:13:49
Error en actualizacion en Windows XP Instick Ayuda General 6 11/08/05 05:58:25
Problema al iniciar windows xp (terminado) Viloria Temas Solucionados 1 03/08/05 21:00:21
No puedo iniciar sesion en Windows 2000 Indeciso50 Ayuda General 2 15/04/05 08:49:39




Todas las horas son GMT -4. La hora es 09:33:30.


 

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31