Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola a tod@s y feliz año. He desinstalado el messenger plus, y me siguen saliendo ventanas de publicidad. He limpiado con superantispyware, spybot, ccleaner, etc. y nada. Ajunto los log de Kaspersky y panda. Gracias anticipadas.

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER INFORME
martes, 01 de enero de 2008 17:53:01
Sistema operativo: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.98.0
Ultima actualización: 1/01/2008
Registros en la base antivirus: 501052
-------------------------------------------------------------------------------

Configuración del análisis:
Analizar usando las siguientes bases: estendidas
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\

Estadísticas:
Número de objeros analizados: 58804
Virus encontrados: 1
Objetos infectados: 1
Objetos sospechosos: 0
Duración del análisis: 01:19:42

Bombre del objeto infectado / Nombre del virus / Última acción
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\sentinel\2.1\gwhashs.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\AtomAnte\pnygfryj.exe Infectados: Trojan.Win32.Inject.pu saltado
C:\Documents and Settings\JUANMA\Application Data\Roxio\MediaManager9\Album.ldb Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\Roxio\MediaManager9\Album.psod Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERAN TISPYWARE.LOG Object is locked saltado
C:\Documents and Settings\JUANMA\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\bl.db-journal Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\is2.db-journal Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Logs\Dfsr00005.l og Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\pending.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\dfsr.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\fsr.log Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\tmp.edb Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows Live Contacts\juanma.esmore-sinta@hotmail.com\real\members.stg Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows Live Contacts\juanma.esmore-sinta@hotmail.com\shadow\members.stg Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\History\History.IE5\MSHist012008010120080 102\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF3EF7.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF3F0B.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF58D1.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF58DF.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~ROMFN_00000840 Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\ntuser.dat Object is locked saltado
C:\Documents and Settings\JUANMA\NTUSER.DAT.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\4c2b889e4a32a5cb8b7f8c7474bdfc59PSK_NAMES Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\4c2b889e4a32a5cb8b7f8c7474bdfc59PSK_NAMES2 Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\AntiSpam\MshConf\scoffset.bin.incr Object is locked saltado
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
C:\System Volume Information\_restore{BD738FF6-58B9-4D50-8154-681E71A6E59A}\RP1\change.log Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt Object is locked saltado
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{9DCCFE32-A001-478B-8F3F-265D7341F7DA}.crmlog Object is locked saltado
C:\WINDOWS\SchedLgU.Txt Object is locked saltado
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\default Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\config\Media Ce.evt Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\software Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\system Object is locked saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\h323log.txt Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado
C:\WINDOWS\Temp\JETB258.tmp Object is locked saltado
C:\WINDOWS\WindowsUpdate.log Object is locked saltado

Análisis completado.


Incidencia Estado Elemento

Posible Virus. No desinfectado C:\Documents and Settings\JUANMA\Application Data\AtomAnte\kmyeyayd.exe

Hola y bienvenido al foro de Infospyware.

*Nota*

Antes de empezar con la desinfección desinstala programas como: Messenger Plus!
CiD Help/CiD Manager
Netpumper
BitGrabber
Bitroll
BitDownload
torrentq
torrent101
Zone Media
Download Plugin for Internet Explorer

Pasos para su eliminación.

- Descargar y actualizar las siguientes herramientas:
NoLop (al final de post)
SuperAntiSpyware
IniRem 2.0
CCleaner
Killbox


-Apaga el "Restaurar Sistema" (solo en Win Me y XP), ), activa ver archivos ocultos.

- Reiniciar en Modo Seguro (a prueba de fallos) y busca y elimina la siguiente carpeta (la pongo en rojo) usando Killbox:

C:\Documents and Settings\JUANMA\Application Data\AtomAnte

- Ejecutar de a una, estas herramientas:

SuperAntiSpyware
NoLop.exe


-Libere su página de inicio de Internet Explorer y restaure su archivo hosts con IniRem 2.0.

-Ejecute CCleaner usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

-Realiza un nuevo escaneo con Kaspersky y otro con Panda active Scan en modo normal y guarda los reportes que te generaron para revisarlos.

NOTA1

-Al finalizar los pasos esconde los archivos ocultos y activa restaurar sistema.
-Para mayor comodidad imprime los pasos.
-No olvides volver y comentarnos los resultados.

Hola de nuevo, he hecho todo lo que me has indicado y siguen saliendo. En el panda me ha salido limpio y en el kaspersky, ahí va el log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER INFORME
viernes, 04 de enero de 2008 18:26:39
Sistema operativo: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.98.0
Ultima actualización: 4/01/2008
Registros en la base antivirus: 502461
-------------------------------------------------------------------------------

Configuración del análisis:
Analizar usando las siguientes bases: estendidas
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\

Estadísticas:
Número de objeros analizados: 59396
Virus encontrados: 1
Objetos infectados: 2
Objetos sospechosos: 0
Duración del análisis: 01:59:16

Bombre del objeto infectado / Nombre del virus / Última acción
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\sentinel\2.1\gwhashs.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\Roxio\MediaManager9\Album.ldb Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\Roxio\MediaManager9\Album.psod Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERAN TISPYWARE.LOG Object is locked saltado
C:\Documents and Settings\JUANMA\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\bl.db-journal Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\is2.db-journal Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\SID.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\SII.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Logs\Dfsr00005.l og Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\pending.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\dfsr.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\fsr.log Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\fsrtmp.log Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\tmp.edb Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows Live Contacts\juanma.esmore-sinta@hotmail.com\real\members.stg Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows Live Contacts\juanma.esmore-sinta@hotmail.com\shadow\members.stg Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\History\History.IE5\MSHist012008010420080 105\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF1263.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF1277.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF32C9.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF32DD.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~ROMFN_00000694 Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\My Documents\Mis archivos recibidos\Programas\Microsoft Office 2003 All In One Español - Spanish (Office pro + Frontpage + Visio + Project + Onenot\OFFICE\QV561406.CAB Object is locked saltado
C:\Documents and Settings\JUANMA\ntuser.dat Object is locked saltado
C:\Documents and Settings\JUANMA\NTUSER.DAT.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\4c2b889e4a32a5cb8b7f8c7474bdfc59PSK_NAMES Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\4c2b889e4a32a5cb8b7f8c7474bdfc59PSK_NAMES2 Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\AntiSpam\MshConf\scoffset.bin.incr Object is locked saltado
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
C:\System Volume Information\_restore{BD738FF6-58B9-4D50-8154-681E71A6E59A}\RP1\A0001026.exe Infectados: Trojan.Win32.Inject.pu saltado
C:\System Volume Information\_restore{BD738FF6-58B9-4D50-8154-681E71A6E59A}\RP1\A0001046.exe Infectados: Trojan.Win32.Inject.pu saltado
C:\System Volume Information\_restore{BD738FF6-58B9-4D50-8154-681E71A6E59A}\RP1\change.log Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt Object is locked saltado
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{A7867F52-10AC-4C35-8C1E-714CAF4AB8DE}.crmlog Object is locked saltado
C:\WINDOWS\SchedLgU.Txt Object is locked saltado
C:\WINDOWS\SoftwareDistribution\DataStore\DataStor e.edb Object is locked saltado
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\edb .log Object is locked saltado
C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp .edb Object is locked saltado
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked saltado
C:\WINDOWS\system32\ActiveScan\Panda ActiveScanPSK_NAMES Object is locked saltado
C:\WINDOWS\system32\ActiveScan\Panda ActiveScanPSK_NAMES2 Object is locked saltado
C:\WINDOWS\system32\asfiles.txt Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\default Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\config\Media Ce.evt Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\software Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\system Object is locked saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\h323log.txt Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado
C:\WINDOWS\Temp\JETC1D9.tmp Object is locked saltado
C:\WINDOWS\WindowsUpdate.log Object is locked saltado

Análisis completado.

Gracias de nuevo. Saludos.

Realiza lo siguiente:

-Apaga el "Restaurar Sistema" (solo en Win Me y XP) y activa ver archivos ocultos.

- Descarga, Instala y/o actualiza estos programas, (pero no las ejecutes aun).
Spybot
Spywareblaster ---No lo instales todavia.
Fixwareout
Hoster(está al final del post)

-Reinicia en Modo Seguro (a prueba de fallos) .

-Ejecuta la herramienta Fixwareout siguiendo los pasos de su Manual.

Realiza un escaneo completo del PC con el spybot previamente actualizado como lo indica su Manual y elimina los intrusos que este encuentre.

-Ejecuta el programa Hoster siguiendo las indicaciones del enlace de descarga:

-Reinicia en modo normal e instala el Spywareblaster y lo actualizas como lo indica su Manual de SpywareBlaster en Español e inmunizas el PC.

-Usa el CCleaner para limpiar el sistema.
Primero utiliza la opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.
Luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

-Realiza un nuevo escaneo con Kaspersky online y pega su nuevo reporte para revisarlo y también uno de Fixwareout que se encuentra en C:\fixwareout\report.txt.

NOTA:
-Para mayor comodidad imprime los pasos.
-Al terminar los pasos esconde los archivos ocultos y activa restaurar sistema.
-Recuerda volver y contarnos los resultados.

Aquí estoy otra vez. Siguen saliendo ventanas. Ahí van los log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER INFORME
sábado, 05 de enero de 2008 13:39:22
Sistema operativo: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.98.0
Ultima actualización: 5/01/2008
Registros en la base antivirus: 502957
-------------------------------------------------------------------------------

Configuración del análisis:
Analizar usando las siguientes bases: estendidas
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\

Estadísticas:
Número de objeros analizados: 58896
Virus encontrados: 0
Objetos infectados: 0
Objetos sospechosos: 0
Duración del análisis: 01:21:15

Bombre del objeto infectado / Nombre del virus / Última acción
C:\Documents and Settings\All Users\Application Data\Microsoft\eHome\logs\ehRecvr.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\sentinel\2.1\gwhashs.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\Microsoft\Plantillas\Normal.dot Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\Roxio\MediaManager9\Album.ldb Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\Roxio\MediaManager9\Album.psod Object is locked saltado
C:\Documents and Settings\JUANMA\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERAN TISPYWARE.LOG Object is locked saltado
C:\Documents and Settings\JUANMA\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\bl.db-journal Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Ahead\Nero Home\is2.db-journal Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Logs\Dfsr00005.l og Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\pending.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\dfsr.db Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\fsr.log Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Messenger\juanma.esmore-sinta@hotmail.com\SharingMetadata\Working\database _2614_2AF6_142A_C89F\tmp.edb Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows Live Contacts\juanma.esmore-sinta@hotmail.com\real\members.stg Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Application Data\Microsoft\Windows Live Contacts\juanma.esmore-sinta@hotmail.com\shadow\members.stg Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\History\History.IE5\MSHist012008010520080 106\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF4834.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DF4C05.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DFE362.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DFF7C7.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DFFEF4.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~DFFF01.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temp\~ROMFN_00000AC8 Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\JUANMA\Local Settings\Temporary Internet Files\Content.Word\~WRS0000.tmp Object is locked saltado
C:\Documents and Settings\JUANMA\My Documents\Nuevo Documento de Microsoft Word (6).doc Object is locked saltado
C:\Documents and Settings\JUANMA\ntuser.dat Object is locked saltado
C:\Documents and Settings\JUANMA\NTUSER.DAT.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado
C:\fixwareout\FindT\nircmd.exe Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\4c2b889e4a32a5cb8b7f8c7474bdfc59PSK_NAMES Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\4c2b889e4a32a5cb8b7f8c7474bdfc59PSK_NAMES2 Object is locked saltado
C:\Program Files\Panda Security\Panda Internet Security 2008\AntiSpam\MshConf\scoffset.bin.incr Object is locked saltado
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
C:\System Volume Information\_restore{BD738FF6-58B9-4D50-8154-681E71A6E59A}\RP1\change.log Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\WINDOWS\ModemLog_HDAUDIO Soft Data Fax Modem with SmartCP.txt Object is locked saltado
C:\WINDOWS\Registration\{02D4B3F1-FD88-11D1-960D-00805FC79235}.{440200BA-C128-4BC5-BDE7-7F06A835B96C}.crmlog Object is locked saltado
C:\WINDOWS\SchedLgU.Txt Object is locked saltado
C:\WINDOWS\SoftwareDistribution\EventCache\{AA6D2B 73-FD16-42F2-8F70-BCB349863E31}.bin Object is locked saltado
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb Object is locked saltado
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\default Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\config\Media Ce.evt Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\software Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\system Object is locked saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\h323log.txt Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado
C:\WINDOWS\Temp\JETBB03.tmp Object is locked saltado
C:\WINDOWS\WindowsUpdate.log Object is locked saltado

Análisis completado.

Username "JUANMA" - 05/01/2008 11:00:25 [Fixwareout edited 9/01/2007]

~~~~~ Prerun check


System was rebooted successfully.

~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"=""
....
....
~~~~~ Misc files.
....
~~~~~ Checking for older varients.
....

~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"ehTray"="C:\\WINDOWS\\ehome\\ehtray.exe"
"High Definition Audio Property Page Shortcut"="CHDAudPropShortcut.exe"
"igfxtray"="C:\\WINDOWS\\system32\\igfxtray.ex e"
"igfxhkcmd"="C:\\WINDOWS\\system32\\hkcmd.exe"
"igfxpers"="C:\\WINDOWS\\system32\\igfxpers.ex e"
"IntelZeroConfig"="\"C:\\Program Files\\Intel\\Wireless\\bin\\ZCfgSvc.exe\""
"IntelWireless"="\"C:\\Program Files\\Intel\\Wireless\\Bin\\ifrmewrk.exe\" /tf Intel PROSet/Wireless"
"EOUApp"="\"C:\\Program Files\\Intel\\Wireless\\Bin\\EOUWiz.exe\""
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"RoxWatchTray"="\"C:\\Program Files\\Common Files\\Roxio Shared\\9.0\\SharedCOM\\RoxWatchTray9.exe\""
"DMXLauncher"="\"C:\\Program Files\\Roxio\\Media Experience\\DMXLauncher.exe\""
"Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader 8.0\\Reader\\Reader_sl.exe\""
"NeroFilterCheck"="C:\\Program Files\\Common Files\\Ahead\\Lib\\NeroCheck.exe"
"TkBellExe"="\"C:\\Program Files\\Common Files\\Real\\Update_OB\\realsched.exe\" -osboot"
"APVXDWIN"="\"C:\\Program Files\\Panda Security\\Panda Internet Security 2008\\APVXDWIN.EXE\" /s"
"SCANINICIO"="\"C:\\Program Files\\Panda Security\\Panda Internet Security 2008\\Inicio.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.6.0_03\\bin\\jusched.exe\""
"Comp about extra bin"="C:\\Documents and Settings\\All Users\\Application Data\\Roam Program Comp About\\Support Name.exe"

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"PowerBar"=""
"swg"="C:\\Program Files\\Google\\GoogleToolbarNotifier\\GoogleToolba rNotifier.exe"
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program Files\\Common Files\\Ahead\\lib\\NMBgMonitor.exe\""
"SpybotSD TeaTimer"="C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe"
"SUPERAntiSpyware"="C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.ex e"
"msnmsgr"="\"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe\" /background"
"PC Suite Tray"="\"C:\\Program Files\\Nokia\\Nokia PC Suite 6\\PCSuite.exe\" -onlytray"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~

Hola Juampa91

• Usa el Ccleaner para limpiar el sistema.
  • Primero utilizá la opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.
  • Luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

• Descargate LopReport 1.0.4.zip.
  • Descomprime el archivo LopReport 1.0.4.zip.
  • Ejecuta el archivo LopReport 1.0.4.exe y haz clic en el botón "Generar reporte"
  • Pegas el reporte de LopReport aquí mismo para que lo revisemos

Salu2
Recuerda volver

Cuando intento mandar el reporte, me dice que es demasiado largo y que lo recorte. Que debo hacer?

Hola, Mandalos por parte

Salu2

Ok, ahí una:

- LopReport 1.0.4 by Sebastián T.
- Reporte Creado: 05/01/2008 a las 15:53:56
- Sistema Operativo: WINDOWS XP
- Modo de Inicio: Normal
- Nombre de Usuario: JUANMA
______________________________________
Procesos en ejecución


\SystemRoot\System32\smss.exe
\SystemRoot\System32\smss.exe
\??\C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\TPSrv.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\PsCtrls.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\PavFnSvr.exe
C:\Program Files\Common Files\Panda Software\PavShld\pavprsrv.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\pavsrv51.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\AntiSpam\pskmssvc.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\AVENGINE.EXE
c:\program files\panda security\panda internet security 2008\firewall\PSHOST.EXE
C:\Program Files\Panda Security\Panda Internet Security 2008\PsImSvc.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Roxio\Media Experience\DMXLauncher.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Google\Google Updater\GoogleUpdater.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Panda Security\Panda Internet Security 2008\SRVLOAD.EXE
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\WebProxy.exe
C:\Program Files\Panda Security\Panda Internet Security 2008\PavBckPT.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\JUANMA\My Documents\Mis archivos recibidos\LopReport 1.0.4\LopReport 1.0.4.exe

__________________________________________________ _____
C:\Program Files

.
..
Adobe
Ahead
AtomAnte
Audacity
AviSynth 2.5
CCleaner
Common Files
ComPlus Applications
CONEXANT
CyberLink
CyberLink DVD Solution
DIFX
DivX
eRightSoft
FileASSASSIN
Google
Guitar Pro 5
Ideal Systems Consultancy Ltd
IE7Pro
Intel
InterActual
Internet Explorer
INTERNET_EXPLORER
Java
Lavasoft
Marvell
Messenger
microsoft frontpage
Microsoft Office
Microsoft SQL Server Compact Edition
Microsoft.NET
Movie Maker
Mozilla Firefox
MSN
MSN Gaming Zone
MSXML 4.0
Nero
NetMeeting
Nokia
Norton Security Scan
Online Services
Outlook Express
Panda Security
PC Connectivity Solution
Real
Roxio
SightSpeed
SopCast
Spybot - Search & Destroy
SpywareBlaster
SUPERAntiSpyware
Synaptics
Trend Micro
TVAnts
Uninstall_CDS.exe
Video Convert Master
Vitelcom Software
Windows Live
Windows Live Favorites
Windows Live Safety Center
Windows Live Toolbar
Windows Media Player
Windows NT
Windows Plus
Windows XP MUI Pack
xerox
Yahoo!
Zattoo

__________________________________________________ _____
C:\Documents and Settings\JUANMA\Local Settings

C:\Documents and Settings\JUANMA\Local Settings\Application Data\ZattooPlayer\zattoo.exe_Url_etf1nqicddddcw0bl smfs21ivky4gi2r
C:\Documents and Settings\JUANMA\Local Settings\Temp\SSUPDATE.EXE

__________________________________________________ ___
C:\Documents and Settings\JUANMA\Application Data

C:\Documents and Settings\JUANMA\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF11.exe
C:\Documents and Settings\JUANMA\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF13.exe
C:\Documents and Settings\JUANMA\Application Data\Microsoft\Installer\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}\IconCDDCBBF15.exe
C:\Documents and Settings\JUANMA\Application Data\Microsoft\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\Icon0E6AB9FC.exe
C:\Documents and Settings\JUANMA\Application Data\Microsoft\Installer\{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}\Icon0E6AB9FC1.exe
C:\Documents and Settings\JUANMA\Application Data\MSNInstaller\msnauins.exe
C:\Documents and Settings\JUANMA\Application Data\U3\temp\cleanup.exe

_____________________________________________
C:\Documents and Settings\JUANMA\Favorites

C:\Documents and Settings\JUANMA\Favorites\Agencia Tributaria.url
C:\Documents and Settings\JUANMA\Favorites\Ayuntamiento de Valencina de la Concepción.url
C:\Documents and Settings\JUANMA\Favorites\BP PREMIERPLUS.url
C:\Documents and Settings\JUANMA\Favorites\Cajasol
C:\Documents and Settings\JUANMA\Favorites\Carrefour.url
C:\Documents and Settings\JUANMA\Favorites\Desktop.ini
C:\Documents and Settings\JUANMA\Favorites\ewido - anti-spyware and anti-malware solutions.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco
C:\Documents and Settings\JUANMA\Favorites\Google Earth.url
C:\Documents and Settings\JUANMA\Favorites\Google Traductor.url
C:\Documents and Settings\JUANMA\Favorites\Google.url
C:\Documents and Settings\JUANMA\Favorites\http--noticias.juridicas.com-base_datos-Laboral-rd1435-1985.html.url
C:\Documents and Settings\JUANMA\Favorites\Info Spyware - Todo para eliminar Spywares, Adwares, Hijackers.url
C:\Documents and Settings\JUANMA\Favorites\Informacion meteorologica. Mapa de tiempo significativo previsto para mañana - INM.url
C:\Documents and Settings\JUANMA\Favorites\Kaspersky Online Scanner.url
C:\Documents and Settings\JUANMA\Favorites\LETUSA Distribuidora Musical S.A..url
C:\Documents and Settings\JUANMA\Favorites\Links
C:\Documents and Settings\JUANMA\Favorites\Live Search.url
C:\Documents and Settings\JUANMA\Favorites\Manolo Sanlucar - Web Oficial - Guitarrista Flamenco - El Arte de la Guitarra Flamenca.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites
C:\Documents and Settings\JUANMA\Favorites\PACODELUCIA.ORG Web oficial del Artista.url
C:\Documents and Settings\JUANMA\Favorites\Periódicos
C:\Documents and Settings\JUANMA\Favorites\Radio Marca.url
C:\Documents and Settings\JUANMA\Favorites\Real Academia Española.url
C:\Documents and Settings\JUANMA\Favorites\Real Betis Balompié
C:\Documents and Settings\JUANMA\Favorites\Seguridad Social Inicio.url
C:\Documents and Settings\JUANMA\Favorites\Traductor.url
C:\Documents and Settings\JUANMA\Favorites\Vodafone - Homepage.url
C:\Documents and Settings\JUANMA\Favorites\WebForm3_D'Addario España.url
C:\Documents and Settings\JUANMA\Favorites\www.movistar.es.url
C:\Documents and Settings\JUANMA\Favorites\Ya.com correo, chat, ocio, compras, noticias, ADSL y mucho mas..url
C:\Documents and Settings\JUANMA\Favorites\Cajasol\Cajasol directo - www.cajasol.es.url
C:\Documents and Settings\JUANMA\Favorites\Cajasol\Cajasol, Catálogo de Soles.url
C:\Documents and Settings\JUANMA\Favorites\Cajasol\Cajasol, Monte de Piedad y Caja de Ahorros San Fernando de Huelva, Jerez y Sevilla --.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\aireflamenco.co m - tu portal flamenco.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\El Flamenco Vive .. Flamenco Store Tienda de Flamenco.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\Flamenco - Todo sobre el flamenco.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\Flamenco - World.com - La web del flamenco Tienda de flamenco. Revista de flamenco.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\FLAMENCO CHIC.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\Flamenco News - Cante, Baile, Guitarra, Tienda Productos Flamencos, CD, DVD...url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\FLAMENCO por Todo Sobre España.url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\Flamenco. Cante, Guitarra y Baile..url
C:\Documents and Settings\JUANMA\Favorites\Flamenco\Horizonte Flamenco - La referencia obligada en el mundo del flamenco.url
C:\Documents and Settings\JUANMA\Favorites\Links\Customize Links.url
C:\Documents and Settings\JUANMA\Favorites\Links\Descubre quien te ha eliminado o bloqueado de su MSN Bloquo.com.url
C:\Documents and Settings\JUANMA\Favorites\Links\MSN.com.url
C:\Documents and Settings\JUANMA\Favorites\Links\Radio Station Guide.url
C:\Documents and Settings\JUANMA\Favorites\Links\Windows Marketplace.url
C:\Documents and Settings\JUANMA\Favorites\Links\Windows Media.url
C:\Documents and Settings\JUANMA\Favorites\Links\Windows.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Ayuda y Soporte Técnico de Microsoft España.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Download details Windows Internet Explorer 7 MUI Pack for Windows XP SP2.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Free Hotmail.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\IE Add-on site.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\IE site on Microsoft.com.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Marketplace.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Microsoft At Home.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Microsoft At Work.url
C:\Documents and Settings\JUANMA\Favorites\Microsoft Websites\Welcome to IE7.url
C:\Documents and Settings\JUANMA\Favorites\Periódicos\abc.es Sevilla.url
C:\Documents and Settings\JUANMA\Favorites\Periódicos\As.com.url
C:\Documents and Settings\JUANMA\Favorites\Periódicos\diariodesevil la.es -*tu información en tiempo real.url
C:\Documents and Settings\JUANMA\Favorites\Periódicos\Marca.com.url
C:\Documents and Settings\JUANMA\Favorites\Real Betis Balompié\Al final de la Palmera. Actualidad, imágenes y videos del Real Betis Balompie.url
C:\Documents and Settings\JUANMA\Favorites\Real Betis Balompié\Betisvision.url
C:\Documents and Settings\JUANMA\Favorites\Real Betis Balompié\La comunidad de aficionados del Betis.url
C:\Documents and Settings\JUANMA\Favorites\Real Betis Balompié\Real Betis Balompié - Página principal.url
C:\Documents and Settings\JUANMA\Favorites\Real Betis Balompié\Real Betis Balompié TV.url

__________________________________________________ ___
C:\Documents and Settings\All Users\Application Data

C:\Documents and Settings\All Users\Application Data\Installations\{29466F9C-7C6A-419C-B301-F440FAF78760}\Nokia_PC_Suite_rel_6_85_14_1_spa.exe
C:\Documents and Settings\All Users\Application Data\Installations\{29466F9C-7C6A-419C-B301-F440FAF78760}\Installer\CommonCustomActions\Uninst CCD.exe
C:\Documents and Settings\All Users\Application Data\Installations\{29466F9C-7C6A-419C-B301-F440FAF78760}\Installer\CommonCustomActions\Uninst PCS.exe
C:\Documents and Settings\All Users\Application Data\Installations\{29466F9C-7C6A-419C-B301-F440FAF78760}\Installer\CommonCustomActions\Uninst PCSFEMsi.exe
C:\Documents and Settings\All Users\Application Data\Installations\{29466F9C-7C6A-419C-B301-F440FAF78760}\Packages\Nokia_PC_Suite\CustomAction s\NSU_Inst_fix.exe
C:\Documents and Settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Nokia_PC_Suite_6_84_10_3_spa_web.exe
C:\Documents and Settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Installations\CommonCustomActions\Un instCCD.exe
C:\Documents and Settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Installations\CommonCustomActions\Un instPCS.exe
C:\Documents and Settings\All Users\Application Data\Installations\{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}\Installations\CommonCustomActions\Un instPCSFEMsi.exe
C:\Documents and Settings\All Users\Application Data\Installations\{FCD8DCE6-94C8-4FF6-8E3E-D3C96A5A707E}\Nokia_PC_Suite_rel_6_85_12_0_spa.exe
C:\Documents and Settings\All Users\Application Data\Installations\{FCD8DCE6-94C8-4FF6-8E3E-D3C96A5A707E}\Installer\CommonCustomActions\Uninst CCD.exe
C:\Documents and Settings\All Users\Application Data\Installations\{FCD8DCE6-94C8-4FF6-8E3E-D3C96A5A707E}\Installer\CommonCustomActions\Uninst PCS.exe
C:\Documents and Settings\All Users\Application Data\Installations\{FCD8DCE6-94C8-4FF6-8E3E-D3C96A5A707E}\Installer\CommonCustomActions\Uninst PCSFEMsi.exe
C:\Documents and Settings\All Users\Application Data\Mozilla\Firefox Extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\uninstaller.exe
C:\Documents and Settings\All Users\Application Data\Roam Program Comp About\Support Name.exe

_____________________________________________
C:\Documents and Settings\All Users\Favorites


__________________________________________________ ________
C:\Documents and Settings\Default User\Local Settings


__________________________________________________ ______
C:\Documents and Settings\Default User\Application Data


________________________________________________
C:\Documents and Settings\Default User\Favorites

C:\Documents and Settings\Default User\Favorites\Links
C:\Documents and Settings\Default User\Favorites\MSN.com.url
C:\Documents and Settings\Default User\Favorites\Radio Station Guide.url
C:\Documents and Settings\Default User\Favorites\Links\Customize Links.url
C:\Documents and Settings\Default User\Favorites\Links\Free Hotmail.url
C:\Documents and Settings\Default User\Favorites\Links\Windows Media.url
C:\Documents and Settings\Default User\Favorites\Links\Windows.url

__________________________________________________ ________
C:\Documents and Settings\LocalService\Local Settings


__________________________________________________ ______
C:\Documents and Settings\LocalService\Application Data


__________________________________________________ __________
C:\Documents and Settings\NetworkService\Local Settings


__________________________________________________ ________
C:\Documents and Settings\NetworkService\Application Data


__________________________________________________ __________
C:\WINDOWS\system32\config\systemprofile\Local Settings


__________________________________________________ ________
C:\WINDOWS\system32\config\systemprofile\Applicati on Data


__________________________________________________
C:\WINDOWS\system32\config\systemprofile\Favorites


________________
C:\WINDOWS\Tasks

C:\WINDOWS\Tasks\Comprobación de actualizaciones de Mcafee.com (YIPURIYIYI-Administrator).job
C:\WINDOWS\Tasks\Comprobar actualizaciones de Windows Live Toolbar.job
C:\WINDOWS\Tasks\Norton Security Scan.job
C:\WINDOWS\Tasks\User_Feed_Synchronization-{0F94ECA2-CF1F-4B3C-BFE3-3A5EB485BD7A}.job

C:\WINDOWS\Tasks\Comprobación de actualizaciones de Mcafee.com (YIPURIYIYI-Administrator).job
C:\WINDOWS\Tasks\Comprobar actualizaciones de Windows Live Toolbar.job
C:\WINDOWS\Tasks\Norton Security Scan.job

_______________________________
Valores del Registro de Windows

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.es
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.es
HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow = www.microsoft.com
HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow = montevia.elmonte.es
HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow = host-domain-lookup.com
HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow = www.host-domain-lookup.com
HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow = PopupMgr
HKCU\Software\Microsoft\Internet Explorer\New Windows\Allow =
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = {01E04581-4EEE-11D0-BFE9-00AA005B4383}
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = {0E5CBF21-D15F-11D0-8301-00AA005B4383}
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0}
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = ITBarLayout
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = {2318C2B1-4965-11D4-9B18-009027A5CD4F}
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = ITBar7Layout
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser = {F2CF5485-4E02-4F68-819C-B92DE9277049}
HKCU\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser =
HKCU\...\Run = [PowerBar]
HKCU\...\Run = [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
HKCU\...\Run = [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
HKCU\...\Run = [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
HKCU\...\Run = [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
HKCU\...\Run = [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
HKCU\...\Run = [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
HKCU\...\Run = [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray
HKLM\...\Run = [ehTray] C:\WINDOWS\ehome\ehtray.exe
HKLM\...\Run = [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
HKLM\...\Run = [igfxtray] C:\WINDOWS\system32\igfxtray.exe
HKLM\...\Run = [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
HKLM\...\Run = [igfxpers] C:\WINDOWS\system32\igfxpers.exe
HKLM\...\Run = [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
HKLM\...\Run = [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
HKLM\...\Run = [EOUApp] "C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe"
HKLM\...\Run = [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
HKLM\...\Run = [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
HKLM\...\Run = [DMXLauncher] "C:\Program Files\Roxio\Media Experience\DMXLauncher.exe"
HKLM\...\Run = [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
HKLM\...\Run = [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
HKLM\...\Run = [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
HKLM\...\Run = [APVXDWIN] "C:\Program Files\Panda Security\Panda Internet Security 2008\APVXDWIN.EXE" /s
HKLM\...\Run = [SCANINICIO] "C:\Program Files\Panda Security\Panda Internet Security 2008\Inicio.exe"
HKLM\...\Run = [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
HKLM\...\Run = [Comp about extra bin] C:\Documents and Settings\All Users\Application Data\Roam Program Comp About\Support Name.exe

______________________________
Claves del Registro de Windows

- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall:
[0C5EDC3653FED5B121F464339EAC12534D253B25] - Paquete de controladores de Windows - Nokia Modem (02/15/2007 3.1)
[6A630DCEC5EEC912115F2FF59D8C2C769798D930] - Paquete de controladores de Windows - Nokia Modem (10/12/2007 3.6)
[819D45A9F73817F5B6D7C71A33ADAB88C5DA1765] - Paquete de controladores de Windows - Nokia Modem (08/03/2007 6.84.0.2)
[Adobe Acrobat 5.0] - Adobe Acrobat 5.0
[Adobe Flash Player ActiveX] - Adobe Flash Player ActiveX
[Audacity_is1] - Audacity 1.2.1
[B726756F5B5A5AA9D798B399386FC6205A45F19E] - Paquete de controladores de Windows - Nokia Modem (02/15/2007 3.1)
[CCleaner] - CCleaner (remove only)
[CD8424B9400BFF7D34AA18F816C71322AC4BDAA7] - Paquete de controladores de Windows - Nokia Modem (05/24/2007 6.84.0.1)
[CNXT_HDAUDIO] - Conexant HD Audio
[CNXT_MODEM_PCI_VEN_14F1&DEV_5045&SUBSYS_152D0753] - Soft Data Fax Modem with SmartCP
[F1CB0AC2D40DDCFCA6933082B115073476C155DE] - Paquete de controladores de Windows - Nokia Modem (08/03/2007 3.2)
[FileASSASSIN] - FileASSASSIN
[Google Updater] - Google Updater
[Grundig Mobile Explorer 3G_is1] - Grundig Mobile Explorer 3G
[Guitar Pro 5_is1] - Guitar Pro 5.1
[HijackThis] - HijackThis 2.0.2
[IDNMitigationAPIs] - Microsoft Internationalized Domain Names Mitigation APIs
[ie7] - Windows Internet Explorer 7
[IE7-MUI] - Windows Internet Explorer 7 Multilingual User Interface (MUI)
[InstallShield_{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A}] - Texas Instruments PCIxx21/x515/xx12 drivers.
[Kaspersky Online Scanner] - Kaspersky Online Scanner
[KB873339] - Windows XP Hotfix - KB873339
[KB885835] - Windows XP Hotfix - KB885835
[KB885836] - Windows XP Hotfix - KB885836
[KB886185] - Windows XP Hotfix - KB886185
[KB887472] - Windows XP Hotfix - KB887472
[KB887998] - Microsoft .NET Framework 1.0 Hotfix (KB887998)
[KB888111WXPSP2] - High Definition Audio Driver Package - KB888111
[KB888302] - Windows XP Hotfix - KB888302
[KB888795] - Hotfix for Windows XP (KB888795)
[KB890046] - Security Update for Windows XP (KB890046)
[KB890859] - Windows XP Hotfix - KB890859
[KB891593] - Hotfix for Windows XP (KB891593)
[KB891781] - Windows XP Hotfix - KB891781
[KB892130] - Windows Genuine Advantage Validation Tool (KB892130)
[KB893756] - Security Update for Windows XP (KB893756)
[KB893803v2] - Windows Installer 3.1 (KB893803)
[KB894391] - Update for Windows XP (KB894391)
[KB895961] - Hotfix for Windows XP (KB895961)
[KB896358] - Security Update for Windows XP (KB896358)
[KB896423] - Security Update for Windows XP (KB896423)
[KB896428] - Security Update for Windows XP (KB896428)
[KB898461] - Update for Windows XP (KB898461)
[KB899337] - Hotfix for Windows XP (KB899337)
[KB899510] - Hotfix for Windows XP (KB899510)
[KB899587] - Security Update for Windows XP (KB899587)
[KB899591] - Security Update for Windows XP (KB899591)
[KB900325] - Update Rollup 2 for Windows XP Media Center Edition 2005
[KB900485] - Update for Windows XP (KB900485)
[KB900725] - Security Update for Windows XP (KB900725)
[KB901017] - Security Update for Windows XP (KB901017)
[KB901214] - Security Update for Windows XP (KB901214)
[KB902400] - Security Update for Windows XP (KB902400)
[KB902841] - Hotfix for Windows XP (KB902841)
[KB903157] - Hotfix for Windows Media Player 10 (KB903157)
[KB904706] - Security Update for Windows XP (KB904706)
[KB904942] - Update for Windows XP (KB904942)
[KB905414] - Security Update for Windows XP (KB905414)
[KB905749] - Security Update for Windows XP (KB905749)
[KB908250] - Windows XP Media Center Edition 2005 KB908250
[KB908519] - Security Update for Windows XP (KB908519)
[KB908531] - Update for Windows XP (KB908531)
[KB910437] - Update for Windows XP (KB910437)
[KB911164] - Update for Windows XP (KB911164)
[KB911280] - Update for Windows XP (KB911280)
[KB911562] - Security Update for Windows XP (KB911562)
[KB911564] - Security Update for Windows Media Player (KB911564)
[KB911927] - Security Update for Windows XP (KB911927)
[KB913580] - Security Update for Windows XP (KB913580)
[KB913800] - Update for Windows Media Player 10 (KB913800)
[KB914388] - Security Update for Windows XP (KB914388)
[KB914389] - Security Update for Windows XP (KB914389)
[KB914440] - Hotfix for Windows XP (KB914440)
[KB915865] - Hotfix for Windows XP (KB915865)
[KB916595] - Update for Windows XP (KB916595)
[KB917344] - Security Update for Windows XP (KB917344)
[KB917422] - Security Update for Windows XP (KB917422)
[KB917734_WMP10] - Security Update for Windows Media Player 10 (KB917734)
[KB917953] - Security Update for Windows XP (KB917953)
[KB918118] - Security Update for Windows XP (KB918118)
[KB918439] - Security Update for Windows XP (KB918439)
[KB919007] - Security Update for Windows XP (KB919007)
[KB920213] - Security Update for Windows XP (KB920213)
[KB920670] - Security Update for Windows XP (KB920670)
[KB920683] - Security Update for Windows XP (KB920683)
[KB920685] - Security Update for Windows XP (KB920685)
[KB920872] - Update for Windows XP (KB920872)
[KB921503] - Security Update for Windows XP (KB921503)
[KB922582] - Update for Windows XP (KB922582)
[KB922819] - Security Update for Windows XP (KB922819)
[KB923191] - Security Update for Windows XP (KB923191)
[KB923414] - Security Update for Windows XP (KB923414)
[KB923689] - Security Update for Windows XP (KB923689)
[KB923694] - Security Update for Windows XP (KB923694)
[KB923980] - Security Update for Windows XP (KB923980)
[KB924191] - Security Update for Windows XP (KB924191)
[KB924270] - Security Update for Windows XP (KB924270)
[KB924496] - Security Update for Windows XP (KB924496)
[KB924667] - Security Update for Windows XP (KB924667)
[KB925398_WMP64] - Security Update for Windows Media Player 6.4 (KB925398)
[KB925902] - Security Update for Windows XP (KB925902)
[KB926251] - Update for Windows Media Player 10 (KB926251)
[KB926255] - Security Update for Windows XP (KB926255)
[KB926436] - Security Update for Windows XP (KB926436)
[KB927779] - Security Update for Windows XP (KB927779)
[KB927802] - Security Update for Windows XP (KB927802)
[KB927891] - Update for Windows XP (KB927891)
[KB928255] - Security Update for Windows XP (KB928255)
[KB928843] - Security Update for Windows XP (KB928843)
[KB929123] - Security Update for Windows XP (KB929123)
[KB929969] - Security Update for Windows Internet Explorer 7 (KB929969)
[KB930178] - Security Update for Windows XP (KB930178)
[KB930494] - Microsoft .NET Framework 1.0 Hotfix (KB930494)
[KB930916] - Update for Windows XP (KB930916)
[KB931261] - Security Update for Windows XP (KB931261)
[KB931768] - Security Update for Windows XP (KB931768)
[KB931784] - Security Update for Windows XP (KB931784)
[KB931836] - Update for Windows XP (KB931836)
[KB932168] - Security Update for Windows XP (KB932168)
[KB933360] - Update for Windows XP (KB933360)
[KB933566] - Security Update for Windows XP (KB933566)
[KB933566-IE7] - Security Update for Windows Internet Explorer 7 (KB933566)
[KB933729] - Security Update for Windows XP (KB933729)
[KB935839] - Security Update for Windows XP (KB935839)
[KB935840] - Security Update for Windows XP (KB935840)
[KB936021] - Security Update for Windows XP (KB936021)
[KB936357] - Update for Windows XP (KB936357)
[KB936782_WMP10] - Security Update for Windows Media Player 10 (KB936782)
[KB937143-IE7] - Security Update for Windows Internet Explorer 7 (KB937143)
[KB937894] - Security Update for Windows XP (KB937894)
[KB938127-IE7] - Security Update for Windows Internet Explorer 7 (KB938127)
[KB938828] - Update for Windows XP (KB938828)
[KB938829] - Security Update for Windows XP (KB938829)
[KB939653-IE7] - Security Update for Windows Internet Explorer 7 (KB939653)
[KB941202] - Security Update for Windows XP (KB941202)
[KB941568] - Security Update for Windows XP (KB941568)
[KB941569] - Security Update for Windows XP (KB941569)
[KB942615-IE7] - Security Update for Windows Internet Explorer 7 (KB942615)
[KB942763] - Update for Windows XP (KB942763)
[KB943460] - Security Update for Windows XP (KB943460)
[KB944653] - Security Update for Windows XP (KB944653)
[M928366] - Microsoft .NET Framework 1.1 Hotfix (KB928366)
[Microsoft .NET Framework 1.1 (1033)] - Microsoft .NET Framework 1.1
[Mozilla Firefox (2.0.0.9)] - Mozilla Firefox (2.0.0.9)
[MSNINST] - MSN
[NanoScan] - Panda NanoScan
[NLSDownlevelMapping] - Microsoft National Language Support Downlevel APIs
[Nokia PC Suite] - Nokia PC Suite
[Panda ActiveScan] - Panda ActiveScan
[ProInst] - Software Intel(R) PROSet/Wireless
[RealPlayer 6.0] - RealPlayer
[SightSpeed] - SightSpeed (remove only)
[SpywareBlaster_is1] - SpywareBlaster v3.5.1
[SUPER ©] - SUPER © Version 2007.bld.23 (July 4, 2007)
[SynTPDeinstKey] - Synaptics Pointing Device Driver
[TotalScan] - Panda TotalScan
[Video Convert Master_is1] - Video Convert Master Trial Version (English) 8.0.1.18
[WGA] - Windows Genuine Advantage Validation Tool (KB892130)
[WgaNotify] - Windows Genuine Advantage Notifications (KB905474)
[WIC] - Windows Imaging Component
[Windows Live OneCare safety scanner] - Windows Live OneCare safety scanner
[Windows Live Toolbar] - Windows Live Toolbar
[Windows Media Format Runtime] - Windows Media Format Runtime
[Yahoo! Companion] - Barra Yahoo! con bloqueador de ventanas emergentes
[Yahoo! Toolbar] - Yahoo! Toolbar
[YInstHelper] - Yahoo! Install Manager
[Zattoo] - Zattoo 3.0.8 beta
[{01802DCC-4DE0-440B-A63B-FCB0C521DBC3}] - Extensión de Windows Live Toolbar (Windows Live Toolbar)
[{06C26156-78D7-44F3-B997-8A35E0F353A3}] - Barra de herramientas de Outlook de Windows Live (Windows Live Toolbar)
[{0A3D3C54-2EC0-4D67-B265-FF17926E6D67}] - Nokia Connectivity Cable Driver
[{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}] - mLogView
[{1479D5E1-7F8D-49CB-AD0A-6DD8ED37662E}] - Menús inteligentes (Windows Live Toolbar)
[{18D10072035C4515918F7E37EAFAACFC}] - AutoUpdate
[{1E04F83B-2AB9-4301-9EF7-E86307F79C72}] - Google Earth
[{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}] - Multimedia Launcher
[{212748BB-0DA5-46DE-82A1-403736DC9F27}] - MSVC80_x86
[{2318C2B1-4965-11d4-9B18-009027A5CD4F}] - Google Toolbar for Internet Explorer
[{23FB368F-1399-4EAC-817C-4B83ECBE3D83}] - mProSafe
[{27186902-32C5-4649-8952-8B9A7765ABAD}] - Windows Live Mail
[{29466F9C-7C6A-419C-B301-F440FAF78760}] - Nokia PC Suite
[{3248F0A8-6813-11D6-A77B-00B0D0160030}] - Java(TM) 6 Update 3
[{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}] - WebFldrs XP
[{37477865-A3F1-4772-AD43-AAFC6BCFF99F}] - MSXML 4.0 SP2 (KB927978)
[{3768ED30-B610-4C72-82B9-87BD0B8D38CB}] - Galería fotográfica de Windows Live
[{3E9D596A-61D4-4239-BD19-2DB984D2A16F}] - mIWA
[{4908C75E-E5E2-43F7-B1DF-023CBA831034}] - Nero 7 Ultra Edition
[{6110AC9D-6D79-4D32-BF4E-E600689F5B15}] - Localization Pack for Microsoft Windows XP Media Center Edition
[{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}] - PowerDVD
[{6998733B-9A6B-4DDE-954A-06992583AB12}] - Windows Live Toolbar
[{6A4E8C9B-298F-41A7-BE83-CBAFB17FB98A}] - Exploración por fichas (Windows Live Toolbar)
[{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}] - Windows Live Favorites para Windows Live Toolbar
[{7B63B2922B174135AFC0E1377DD81EC2}] - DivX
[{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A}] - TIPCI
[{83169D43-4660-4347-BC95-E9D6E6BE65CE}] - Microsoft .NET Framework 1.1 Spanish Language Pack
[{8A708DD8-A5E6-11D4-A706-000629E95E20}] - Intel(R) Graphics Media Accelerator Driver
[{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}] - mPfMgr
[{8C6BB412-D3A8-4AAE-A01B-35B681789D68}] - mHelp
[{8D90A775-1E32-48E5-BE1D-4F2EF5B30575}] - Windows Live Writer
[{90110C0A-6000-11D3-8CFE-0150048383C9}] - Microsoft Office Professional Edition 2003
[{90B0D222-8C21-4B35-9262-53B042F18AF9}] - mPfWiz
[{938B1CD7-7C60-491E-AA90-1F1888168240}] - Roxio Easy Media Creator 9 Suite
[{94658027-9F16-4509-BBD7-A59FE57C3023}] - mZConfig
[{9CC89556-3578-48DD-8408-04E66EBEF401}] - mXML
[{9E1DDBE7-BF44-4AC8-87CA-3D25FC63C6E1}] - Windows Live installer
[{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}] - mDriver
[{A49F249F-0C91-497F-86DF-B2585E8E76B7}] - Microsoft Visual C++ 2005 Redistributable
[{A4CFA95F-E042-481F-AC5C-DEAC1E6BD0ED}] - Norton Security Scan
[{A9CF9052-F4A0-475D-A00F-A8388C62DD63}] - MSXML 4.0 SP2 (KB925672)
[{AC76BA86-7AD7-1034-7B44-A81000000003}] - Adobe Reader 8.1.1 - Español
[{AFA4E5FD-ED70-4D92-99D0-162FD56DC986}] - Windows Live Asistente para el inicio de sesión
[{B1675F4D-1B79-4C7A-9BA8-EB1B7EEEF45E}] - OneCare Advisor (Windows Live Toolbar)
[{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1] - Spybot - Search & Destroy
[{B502B428-3386-40A9-98DB-079AAB72E64F}] - mEoU
[{B7A0CE06-068E-11D6-97FD-0050BACBF861}] - PowerProducer
[{B97CF5C3-0487-11D8-A36E-0050BAE317E1}] - DVD Solution
[{BA084E7C-8ABA-4670-BDE8-B85E689A5C1B}] - PC Connectivity Solution
[{BEA32BD3-F3A5-4F2D-B0E0-B0267ADB762D}] - Detector de suministros de Windows Live Toolbar (Windows Live Toolbar)
[{C04E32E0-0416-434D-AFB9-6969D703A9EF}] - MSXML 4.0 SP2 (KB936181)
[{C950420B-4182-49EA-850A-A6A2ABF06C6B}] - Marvell Miniport Driver
[{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}] - Microsoft .NET Framework 1.1
[{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}] - SUPERAntiSpyware Free Edition
[{DBEA1034-5882-4A88-8033-81C4EF0CFA29}] - Google Toolbar for Internet Explorer
[{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}] - Ad-Aware 2007
[{E81667C6-2856-46D6-ABEA-6A2F42166779}] - mCore
[{EEBA9416-3207-47E0-9022-116440599DBC}] - Panda Internet Security 2008
[{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}] - Microsoft SQL Server 2005 Compact Edition [ENU]
[{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}] - mMHouse
[{F6090A17-0967-4A8A-B3C3-422A1B514D49}] - mDrWiFi
[{FC411B47-30BF-428C-9C1E-F6C54A94EA7E}] - Windows Live Messenger
[{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}] - mWlsSafe

- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg:

- HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings\ZoneMap\Domains:
008i.com
008k.com
00hq.com
0190-dialers.com
01i.info
02pmnzy5eo29bfk4.com
05p.com
07ic5do2myz3vzpk.com
08nigbmwk43i01y6.com
093qpeuqpmz6ebfa.com
0calories.net
0cj.net
1-britney-spears-nude.com
1-domains-registrations.com
1-se.com
1001movie.com
1001night.biz
100gal.net
100sexlinks.com
101hotteens.com
101lottery.com
123expressview.com
123found.com
123keno.com
12don.info
143fuck.com
17webplace.com
180solutions.com
1gb.ru
1se.ru
1sexparty.com
1stfind.com
1stpagehere.com
1traff.us
1ze.net
2-antispyware.com
2004search.cc
2004synchronationals.org
2020search.com
20health.com
20x2p.com
24-7find.com
24qas.info
24teen.com
2pursuit.com
30search.com
31234.com
33search.cc
34f.com
34yo.com
356563.net
36site.com
3dxxx3d.com
4-counter.com
404dnserror.com
4buy.net
4corn.net
4pokertips.com
53ia49772x7r16ks.com
5hvx2m8sixttkn8a.com
5starvideos.com
600pics.com
680130.net
69teenage.com
700xxx.com
75tz.com
777search.com
777top.com
7adpower.com
7traffic.com
888net.net
8ad.com
8senderos.com
929oldies.com
99livecam.com
a2zlinks.com
a311.com
aa02.com
aa03.com
aa04.com
aa05.com
aamhi.com
aavc.com
abc-find.net
abccodec.com
abcfind.net
abcmusiques.net
abcoffshore.com
abcsearch.com
about-blank.biz
about-blank.ws
about-find.com
aboutclicker.com
aboutsearch.org
abrp.net
absolutdialer.com
absolutdialer.cz
access-dvd.com
access-find.com
accesskeygenerator.com
accessthefuture.net
accessvid.net
accipiter.com
acculoader.com
acegates.com
acemedic.com
achea.org
acidetective.com
acjp.com
actionbreastcancer.org
activexmediaobject.com
activexsite.com
activexsoftwares.com
activexsource.com
activexupdate.com
activexvideosoft.com
acupuncturealliance.org
ad25.com
ad45.com
ad77.com
ad86.com
adamsupportgroup.org
adasearch.com
adayinthelife.org
adbot.com
adbrite.com
adclick.de
addictivetechnologies.com
adeuscoimbra.org
adinfinity.com
adipics.com
admin2005.com
adolfopresidente.com
adoptawaitingchild.org
adpowerzone.com
adrevolver.com
adsag.com
adsonwww.com
adspics.com
adsrve.com
adsurplus.com
adult-engine-search.com
adult-erotic-guide.net
adult-friends-finder.net
adult-host.org
adult-loan.com
adultan.com
adultden.com
adulterotica4free.com
adultfilmsite.com
adulthyperlinks.com
adultlinksco.com
adultmovieplus.com
adultsper.com
adulttds.com
adultzoneworld.com
advancedfinder.com
advancedfixer.com
advancedsexualpleasure.com
advancedtrafficnetwork.com
advertology.com
advnt01.com
advnt02.com
advnt03.com
advnt04.com
advnt05.com
adwareno.com
aegisconsult.com
africaboys.com
africaspromise.org
afterlifetelegrams.com
agentstudio.com
ahppress.org
aifind.cc
aifind.info
aimonline.com
akril.com
alabama-train.info
alcatel.ws
aleateia.org
alectrablue.com
alfa-search.com
alfasearch.net
alfredfriends.org
alfreethought.org
all-dating-secrets.com
all-find.info
all-inet.com
all4all.biz
allabtcars.com
allabtjeeps.com
allcanfind.com
allcitypages.net
allcount.net
allcybersearch.com
alldnserrors.com
allhyperlinks.com
allinternetbusiness.com
allloading.com
allneedsearch.com
allotraffic.com
allprotections.com
allsearch.ws
allsecuritylinks.com
allsecuritysite.com
allsexlife.net
allsextops.com
allsitesaccess.com
alltheweb.ru
alltruesoftware.com
allwhores.com
allworldcars.com
almarvideos.com
alternativepost.com
alwaysfreealways.com
amandamountains.com
amasicon2005.com
amazing-search.info
ambassadedjibouti.org
american-teens.net
amigeek.com
amisbusiness.com
amisexyornot.co.uk
amyandelliott.com
amzip.info
analmovi.com
anarkdigital.com
angelinajoliepics.com
animal-cartoons.com
animal-drawings.com
animalrank.com
animalrating.com
animaltoplist.com
anin.org
anna-kournikova-pic.com
anna-kournikova-picture.com
annaromeo.com
antigravitytechnology.com
antispyguide.com
antispywarelinks.com
antivirgins.com
antrocity.com
any-find.com
anypussy.org
anything4health.com
apassmanager.com
apmebf.com
approvedlinks.com
apsua.com
aquaknox.org
aregay.com
arheo.com
aria-giovanni-pic.com
arizonaweb.org
armitageinn.com
aroundweb.com
art-func.com
art-xxx.com
artachnid.com
artem23.com
artofgeraldsteinmeyer.com
arubadev.com
asafetypage.com
ashenvale.xu.pl
ashkanamresort.com
ashley-harkleroad-nude.com
asiangirls.ss.ru
asiankingkong.com
askgates.com
asp010.com
asp020.com
asp030.com
asp040.com
asp050.com
asp060.com
asp070.com
ass-gals.com
astainscribing.com
asuid.org
atdmt.com
athenrye.com
athens-gop.org
atlaspalmsprings.com
atotalsafety.com
atruesecurity.com
audioseek.net
aurealm.com
authorsontour.com
auto-parts.ws
autosearch.cc
ava-vincent.com
avelavok.com
avian-ads.com
awebfind.biz
awmcafe.net
axobjectpage.com
axsoftwaretool.com
ayakawamura.com
ayumitaniguchi.com
azonica.com
b00gle.com
b13.com
baccarat.md
bad-credits.net
bad-url.com
badboss.tv
badcafe.com
badpopup.com
baer-conference.org
balletsanjosesiliconvalley.org
bamoggers.org
bankruptcy-police.com
bannedhost.net
bannedmpegs.com
bannerconnect.net
bannersandpopups.com
barbudafarms.com
barcelo-hotels-cuernavaca.com
barcelo-hotels-czech.com
barcelo-hotels-dc.com
barnandfence.com
barnetshenkinbridge.com
barrionet.org
batsearch.com
baygraphicsllc.com
bb-search.com
bb.org
bbbsearch.com
bbwrank.com
bbwrating.com
bcnproduction.com
beast-art.com
beast-cartoons.com
beast-drawings.com
beastrank.com
beastrating.com
beasttoplist.com
beautypantyhose.com
bedhome.com
bediadance.com
bedstuyheadstart.org
beehappyy.biz
beepwear.com
begalo.com
bellabasketsfl.com
bergeramusementrides.com
bernaolatwin.com
best-counter.com
best-find.org
best-hardpics.com
best-incest.net
best-mature-babes.com
best-offers-for-you.ws
best-search.info
best-searchengine.com
best-virgins.com
best-winning-casino.com
bestbabekiss.com
bestcrawler.com
bestfind.biz
bestfor.ru
bestfreepic.com
bestidcard.com
bestmature4free.com
bestofpornsites.com
bestonlinecatalogshopping.com
bestporngate.com
bestpornnews.com
bestsearch.cc
bestsecurityguide.com
bestteenagers.com
bestwaycum.com
bestwebslinks.com
bestxporno.com
bestxxxweb.com
betterfind.info
betterfinder.net
beyonce-knowles-nude.com
beyonce-knowles-pictures.com
beyonce-knowles.net
biblelifechurch.org
bibliotheque-sonore.org
big-tits-orgasm.biz
bigbr.cc
bigpornguide.com
bigredfriend.com
bigtrev.net
bigvideosonline.com
bikini-pics.com
billfind.com
bitchonmydick.net
biz-partner.org
biz-partners.net
bizonio.com
black-hunks.com
black-search.com
black-search.net
blackcodec.net
blackjack-free.net
blackjack.md
blackpatrol.com
blackrating.com
blacksexdream.com
blazefind.com
blender.xu.pl
block-checker.com
bluewillowpages.com
bluewing.net
blussy.com
blyabudu.info
bnmq.com
boardofsearching.com
bodaciousbabette.com
bogazicivideo.com
bondreal.com
boobdoll.com
boobsandtits.com
boobscategory.com
boobsclub.com
bootyduty.com
boredlife.com
bowlofogumbo.com
boy-men.com
boy-rape.com
boyadmin.com
boyandmen.com
boylovemen.com
boynmen.com
boyplatinum.com
boyporn.net
boys-city.com
boys-gays.com
boyscity.com
boysextasy.com
boysextop.com
boysgangs.com
bradcoem.org
brain-labo.net
brainbeat.net
bramermachine.com
brandiyoung.com
brea-lynn.com
breakspyware.com
briana-banks.com
brianalovesrocco.com
britney-spears-pic.com
britney-spears-picture.com
britnyspears.com
brittanyskye.com
broadband-porn-movies.com
broadband-xxx-movie.com
broadbandohio.org
brookeburn.com
browse-find.com
browserplugin.com
brutal-video.net
brutalpics.com
brutaltoplist.com
bsnlbuldhana.com
bucketbooks.com
bucps.com
buddylinks.com
buenavistacarecenter.com
bugdoctor.com
buildhere.org
bujinkanzenkadojo.com
bulk-search.net
burgerkingbigscreen.com
burnsrecyclinginc.com
buscards.net
business-cc.com
bustyrussell.com
buttejazz.org
buy-find.info
buymeds.com
buysearch.cc
buyselldomain.net
bvc02.info
bytecode.biz
c21tina.com
c7y.net
c911c.com
cadabra.biz
cagindia.org
calcioturris.com
calling-phone-cards.org
calriskmgmt.org
cambridgepoetryawards.org
cameup.com
canabdc.com
canberracricketcoaching.com
candiesclub.com
candyasians.com
candycantaloupes.com
cantfind.com
cardingworld.biz
carmen-luvana.com
carpediem-india.com
carsands.com
carsrentals.net
carterobregonlaw.com
casalemedia.com
cash-internet.net
cashsearch.biz
cashtoolbar.com
casino-007.com
casino-gambling-1.net
casino-gambling-2.net
casino-onlines.net
casino2win.net
casinomidas.net
casinonline.net
casinos-online.md
cassideypics.com
catallogue.com
cataloweb.net
catsss.da.ru
caxa.ru
cc-debt.com
cclebali.org
ccls-pku.org
cec-il.org
ceewawires.org
celeb-dialer.de
center-find.net
centralfinder.com
certumgroup.com
cgecwm.org
charcuterialazaro.com
chargitdial.com
chasey-lain-pictures.com
cheatall.net
checkssecurity.com
chefdanio.com
chelancatering.com
chesterbapt.org
chfela.org
chicagocub.com
chicklick.net
chickvip.net
childpaysite.com
childrenvilla.com
china-design.org
chipovka.ru
chips-4-free.com
chmails.com
chocolatebeauty.com
chocolatetwinks.com
chrisswasey.com
chriswallace.net
chubbyfantasy.com
chubbyolders.com
ciaclinton.com
cigarettes-directory-usa.com
cimfel.com
cimtoronto2005.org
cindymargolisnude.com
citizensbusinessbank.com
citycodec.com
cityonweb.com
cjb.net
ckick4thumbs.com
clackamasliteraryreview.com
claria.com
classilivre.com
cleancodec.com
cleanresults.info
cleansoftwares.com
clearask.com
clearsearch.cc
clearsearch.net
click-now.net
click2findnow.com
clickaire.com
clickfor-xxx.com
clickpeak.net
clickyestoenter.net
clickzs.com
closexxx.com
clrsch.com
club-super-sex.com
clubasean.org
clubxxxvideo.com
cma2004.com
cmtapestry.com
cnbcaustralia.com
coachellys.com
cocked.com
codecbest.com
codecdemo.com
codecmania.com
codecmega.com
codecnitro.com
codecred.net
codecspace.com
coderov.net
collcom.com
college-football-video.com
college-football-videos.com
coloreal.com
colorfulcollarcompany.com
com.ar
com.au
com.br
com.ru
communitychev.com
companyfaq.com
comxcast.net
conboost.com
conetka.com
confirmationdepartment.com
confirmationdept.com
consoles-fr.com
consumer-credits.com
content-loader.com
contentlocker.net
contentmatch.net
contextplus.com
contextplus.net
cool-find.info
cool-find.net
cool-homepage.com
cool-search.com
cool-search.net
cool-web-search.com
coolfetishsite.com
coolfreehost.com
coolfreepage.com
coolfreepages.com
coollocator.com
coolloud.org
coolmoneysearch.com
coolnameserv.com
coolnetsearch.com
coolpage.cc
coolporngalleries.com
coolpornsearch.com
coolsearch.biz
coolsearcher.info
coolsearcher.net
coolwebsearch.biz
coolwebsearch.cc
coolwebsearch.co.uk
coolwebsearch.com
coolwebsearch.info
coolwebsearch.net
coolwebsearch.org
coolwebsearch.us
coolwebsearchx.biz
coolwebsearsh.com
coolwwwsearch.com
copmtraine.com
copyporn.com
coriba-web-services.com
costplusdata.com
couldnotfind.com
count-all.com
countedstitches.com
cpcm.org
cracks-keygens.com
cracks-keygens.net
cracks.me.uk
cracks4u.com
crackszilla.com
crackweb.com
crackz.ws
craps.md
crawlermachine.com
crazy-toolbar.com
crazyitalydialer.com
creamedcutties.com
createaccesskey.com
creditsearchonline.com
crestring.com
crooder.com
crossdots.com
crueltoplist.com
csi2004.org
culvercountry.com
cumonmonica.com
cumonteens.biz
cumshack.com
cursorzone.com
curvedspaces.com
custom-adult.com
cutadult.com
cvsymphony.com
cwbsearch.com
cyberbsolutions.org
cyberneedfulthings.com
cydom.com
dadsandtwinks.com
dadscan.org
daily-gals.com
daily-virgins.com
dailydoc.com
dailyfreepics.us
dailyfreexxxmpegs.com
dailytoolbar.com
daisygalz.com
dan-evepuppylove.com
dancingbabycd.com
danmac.org
daosearch.com
darkspace.cc
data-line.us
datanotary.com
datareco.com
datasearch.info
davemarshall.org
dayboys.com
dbdecicated.com
dcfitusa.com
dclk.net
dd02.com
dd03.com
ddosexpert.com
de1et.info
dead3.net
deaddrunkbitches.com
deaddrunksluts.com
deadyeti.com
dealhelper.com
dedmazai.com
default-homepage-network.com
defaultbar.com
defaultsearch.com
defaultsearch.net
definehci.org
deftonsm.com
delay-raz.com
delficodec.com
deluxecompanion.com
democodec.com
dentserver.net
denverteachercompensation.org
desarrollocreativo.com
detroitigers.com
develip.com
devilsmp3.com
devilteensex.com
dewis.h1.ru
dewis.us
df809jow4wj2304lfd0sf9fsd0a2t4ldf809jow4wj2304lfd0 sf9fsd0a2t4ld.biz
dfg03.info
dhkn.com
dialeraccess.com
dialerbank.net
dialerclub.com
dialerdata.com
dialersworld.com
dialerworld.com
dialerzona.com
dialxs.nl
diamondsearch.info
diannemackay.com
didierbguadeloupe.com
dietpills4free.com
dietpillz.org
dietpussy.com
digistreamsa.com
digitalecontent.com
digitaltoolstech.com
digiwexonline.com
dionforvalleycouncil.org
directplugin.com
dirty-pantyhose.com
dirtyboys.net
dirtymoviesempire.com
disavowed.net
djfet.info
dk-forhandler.dk
dmqfirm.com
dmvlite.com
dns404.net
dnserror404.com
doctorwaldron.com
dogdj.info
doggyaction.com
dollaradvertising.com
dollarrevenue.com
dolookup.com
domain-your-registration.com
domains-for-you-online.com
domains2003.net
domkrat.com
dontgetporn.com
dopestar.org
doprdele.com
dorkodrom.com
dotcomtoolbar.com
dotmaniac.com
doubleclick.co.uk
doubleclick.com
doubleclick.ne.jp
doubleclick.net
downldboost.com
download-crack.com
downput.com
downsidemusic.net
dp-host.com
drabland.net
dreamsexy.info
drive-find.net
drug-interactions-reference.com
drug-sources-exposed.com
drummondislandnews.com
drunk-bang.com
drunk-girls-naked.com
drunk-movies.com
drunken-bitches.com
drunken-boys.com
drunken-holes.com
drunken-movies.com
drunken-party.com
drunken-sex.com
drunken-sluts.com
drunken-wives.com
drunkenmovie.com
drunkenworld.com
drusearch.com
drvvv.com
drxcount.biz
dsm.xu.pl
dubolom.com
dulcineasystems.net
dutch-sex.com
dvdaccess.net
dvdbank.org
dvdcodec.net
dvds-access.com
dvdsaccess.com
dvwebhost.info
dworbellinc.com
e--pics.com
e-localad.com
e-plus.cc
e-service.ws
e-websitesolutions.com
eameschairsandmore.com
eases.net
easy-search.net
easycategories.com
easyfastfind.com
easyinquire.com
easysearch.cc
easyteenies.com
easywww.info
ebch.com
ebdv.com
ebdw.com
ebjp.com
ebkn.com
ebky.com
eblv.com
ebony-hunks.com
ebony-list.com
ebony-top.com
ebony-twinks.com
ebonybabeclub.com
ebonyboom.com
ebonyboysex.com
ebonyrank.com
ebvr.com
ebwmanufacture.com
ecbaonline.org
echelon-dynamics.net
ecosrioplatenses.org
ecstasyporn.net
ecwz.com
ecyb.com
editsearch.net
edopps.com
edpol.net
eduy.com
ee02.com
eeev.com
effectivesearch.net
effnetedge.com
efim2003.org
efinder.cc
ehttp.cc
ehypercard.com
eikokoike.com
el-chiringuito.com
elateck.com
electronicsales.info
elite-product.biz
ellwoodcoast.org
emcodec.com
emediacodec.com
empnads.com
emptysearch.com
encheres-occasion.com
endcodec.com
engine-find.com
enjoysearch.info
enjoywebsurf.com
eole.org
epornsex.com
eroticwoman.net
erotomania.us
errorplace.com
esafetylist.com
esmacmegara2005.com
espotesqui.com
eu-adcenter.net
euniverseads.com
euro-infomedia.com
euuu.com
everything4find.com
everythingonweb.net
evidence-detector.biz
evilspidercomics.com
ewcca.org
ewebsearch.net
exaccess.ru
exactadvertising.com
excellentguide.com
excellentsckin.com
excixe.com
exeloads.info
exetraffic.com
exhns.com
exit-money.de
exit-traffic.net
exitmoney.com
exittraffic.net
exmoney.ru
explore-it.org
expressionswithmetal.com
extrasexmovie.com
extreme-virgins.com
extremegaymovies.com
extremeseek.net
exxxotic.com
ez-searching.com
ez2seek.com
ezthemes.com
f1-search.info
f1organizer.com
f1organizer.net
fackinginnocents.com
faithstevens.com
falkag.com
falkag.de
falkag.net
famestation.com
family-incest-sex.net
fan-club-de-virginie-moinard.net
fanpics.com
fantasiewelten.com
farmsteadbandb.com
fartpost.com
fast-search.org
fastadvert.com
fastclick.com
fastclick.net
fastfindservices.com
fastgoogle.com
fastsearch.cc
fastsearchweb.com
fastwebfinder.com
fat-mature-lady.com
fataldistraction.com
fatolders.com
fatty-movies.com
faxporn.com
fed-icc.org
federationofblackcowboys.com
feelsomepleasure.com
ferienhaus-international.net
ff02.com
fhgstr.com
fiafii.org
fide01.info
filesstore.com
filthlesbians.com
finance-loans.com
financial-aid-refinance.com
find-bid.com
find-browse.com
find-control.net
find-fun.com
find-fun.net
find-global.net
find-itnow.com
find-master.com
find-more.net
find-online.net
find-party.net
find-plus.net
find-porn-here.com
find-scan.net
find-seek.com
find-service.com
find-the.com
find-uk-health.co.uk
find-use.net
find-visit.com
find-visit.net
find4advance.com
find4better.com
find4bigfun.com
find4fun.net
find4u.net
find4you.net
findallgood.com
findarachnids.biz
findemnow.com
finder2003.com
findit-now.com
findloss.com
findmayflies.net
findonline.com
findsexxx.us
findsx.com
findthesite.com
findthewebsiteyouneed.com
findtop.net
findtry.net
finduse.net
findwasps.com
findwhat.com
fine-search.net
fineformosanteas.com
finetimesearch.com
fionasteel.com
firegriffin.com
firenzeantica.org
firstbangboatsexclips.com
firstbookmark.com
firstbookmark.net
fishidentification.net
fitness-free.com
fixerantispy.com
fki-eng.com
flickshagwell.com
flingstone.com
flipperkeys.com
floridahoneynet.org
flycast.com
flyinads.com
fnoob.info
foodvacations.net
footfetishmaniacs.com
forbidden-movies.com
forbidden-mpegs.com
forced-schoolgirls.com
forexcredit.com
forexcredit.ru
forgaymarriage.org
formingfusions.com
forsythfire.net
forthline.com
fortleesaloon.com
forum-celebrite.com
freddee.com
free-broadband-movie.com
free-celeb-pics.com
free-chipes.com
free-dating-free.com
free-delivery-pharmacy.com
free-fucking-video.com
free-hardporno.com
free-hit.com
free-naked-celebrity.com
free-pics-and-movies.com
free-porn-movies.info
free-porn-site-trial.com
free-scratch-cards.com
free-sex-movie-clips.net
free-spy-cam.net
free4porno.net
free64all.com
freeassvids.com
freebookmark.net
freebookmarks.net
freecategories.com
freecomics4u.com
freecoolhost.com
freednshost.info
freejuicysluts.com
freeloll.com
freemoviegroup.info
freepicturesofgirls.com
freepornbest.com
freepornisland.com
freeprod.com
freeprohosting.net
freerbhost.com
freescratchandwin.com
freeshemalepics.net
freex3.com
freexxxmovie.us
freexxxpages.net
freeyaho.com
fremontathletics.com
freshrape.com
freshrapepics.com
freshseek.com
freshteensite.com
freshvideogals.com
friendlysearch.net
frogsearch.net
fuck-album.com
fuck-dream.com
fuckdenniss.com
fuckedlesbian.com
fucking-machine.net
fucking-video.biz
fuckingteen.net
fuckk.org
fuckmeni.com
fucknicepics.com
fuckolders.com
fuckporn.com
fuckset.com
fucktera.com
fuckthebcs.com
fun-boys.com
funclickz.com
fungaymen.com
funnysearch.net
funolders.com
funsnuf.com
funtarget.com
funxxxporn.com
futbolisticabalear.com
future-factory.org
futuredreamscy.com
gabrielscott.com
gainpublishing.com
galleryclick.net
gallerypictures.net
gallsforpleasure.com
gallview.com
galpostgirls.com
gals-for-free.com
gambling-online4you.com
gamecodec.com
gameterror.net
gaming.md
garydineenhockey.com
gator.com
gatoradvertisinginformationnetwork.com
gay--sites.com
gay-clan.com
gay-f.com
gay-photos.info
gay-porn-sex-pictures.com
gay50.com
gayboysite.info
gays-top.net
gaysthumb.com
gaytraffic.info
generalsmeltingofcanada.com
generateskey.com
german-club-manila.com
get-search.cc
geteens.com
getfound.com
getloadz.com
getmirar.com
getpicshere.com
getthis4free.com
gfoogle.com
gg02.com
gigacodec.net
gigafinder.com
gigafreehost.com
gigs7.com
gimmezamore.com
gimnasiaer.com
gioiatours.com
gipersearch.com
girls-porn-life.com
girls.ss.ru
girlsascats.com
girlsteens.net
girlswantporn.biz
gkicp.info
gladsclan.com
glbdf.org
glenatmer.com
glenatmontagne.com
global-finder.com
globalfind.info
globalhosting4u.co.uk
globe-finder.cc
globe-finder.com
globe-finder.net
globesearch.com
glossypussy.com
gmldev.org
gneprogram.com
go-fuck-her.com
go2-search.com
goalegislature.org
gocybersearch.com
gofreegalleries.com
goiia.info
gold-boys.com
goldcodec.com
goldenstuff.net
golftennis.net
gomadworld.biz
gonnasearch.com
good-mortgages-calculator.com
good-mortgages.net
goodfellowsrestaurant.com
goodoldsearch.com
goodsexs.com
googfle.com
googkle.com
googlebrain.com
googlf.com
gotangent.com
gotofucks.com
gradforum.org
graf-euro.com
gratis-porn-movie.com
gratis-pornopics.com
gratisdownloads.nl
greatadultvideo.com
greatboyspics.com
greatsearch.biz
greg-search.com
grokfusebox.org
group-find.com
group-find.info
groupfind.info
groupfind.net
grupomarineda.net
gs-microdrive.com
gsnh.org
guardsoftware.net
gugle.biz
guidefind.net
guzzycats.com
gyusource.com
gzphoenix.com
h00auth.net
h0ax.org
hallnetaccolade.com
hand-book.com
hangoutspot.com
happy-money.net
happyanal.com
happytofind.com
hard-gals.com
hard-virgins.com
hardbodytgp.com
hardcore4ever.net
hardcoreover.com
hardcorevideosite.com
hardloved.com
hardporndreams.com
hardwareseek.net
hardysex.com
harukaigawa.com
hawthorneacademy.org
haznegocios.com
hc-express.org
hccsolanonapa.org
hcworld.com
hdnsservice.com
headinsurance.com
health-protein.com
heartacheandmisery.com
heartsmeeting.com
henrykaserne.net
hentai4u.net
hentaibaby.com
here4search.com
herocodec.com
hewittsch.com
heyrichy.com
hh02.com
hi-search.com
hiddenguides.com
hightcalldialer.com
hit-now.com
hitlistlyrics.com
hitmyass.com
hitq.com
hits4biz.com
hitscount.net
hizen.org
hogwatch.org
holidayautostr.com
holidayvillaestepona.com
home-search.cc
home2ocean.org
homematures.com
homemortage.ws
homepage.ru
homesexsearch.com
horny-legs.com
horsecockloving.com
horsefuckwives.com
horsesearch.net
host.sk
hostssp.com
hostthesky.com
hot-gay-stories.com
hot-porn-movies.info
hot-seventeen.com
hotbar.com
hotbookmark.com
hotels-list.net
hotelxxxcams.com
hotfreebies.com
hotmalepics.com
hotnetsearch.com
hotnewinfo.com
hotpopup.com
hotsearchbox.com
hotsex-series.com
hotstartpage.com
hotwebsearch.com
houstonfugitives.com
hq-search.com
hqcodec.com
hqlist.com
hqmp3s.com
hqsex.biz
http602.com
httpads.com
httpwwwads.com
hudormer.net
hugeporn4u.net
hugesearch.net
hunacsa.com
hupacasath.com
hustler-barely-legal.com
hustlers-barely-legal.com
huy-search.info
hyperbanner.net
hyperpaths.com
hzdruids.com
hzsx.com
i--search.com
i-lookup.com
iaxobject.com
ibankis.org
ibismultimedia.net
ibmx.com
ibsram.org
icanfindit.net
icannews.com
icannnews.com
icansearch.net
icarsinc.com
iciinfo.com
icodecpack.com
icoo-loader.com
ictprivate.com
icwb.com
icwo.com
icwp.com
iddh.com
ideagenerationmethods.com
idgsearch.com
idhh.com
idrct.com
idsa-ny.org
ie-search.com
iefeadsl.com
ieplugin.com
iesafetywarning.com
iesecuritytool.com
ieupdate.info
ifinditall.com
ifiz.com
iframecash.biz
iframedialer.com
iframedollars.biz
iframenetwork.biz
iframenetwork.com
iframenetwork.us
igalz.info
iguu.com
ijobsinc.com
illegalpages.com
imageactivex.com
imagemediaobject.com
imaginedp.net
imcodec.com
imediacodec.com
impotato.com
imrworldwide.com
inc-search.com
incestporngate.com
incfind.net
index-se.com
indiahcsl.org
indie.ru
indipindenza.com
infinite-ads.com
infodialer.biz
infodialer3000.com
infodigger.net
infoglobus.com
infusionantiques.com
inherhole.com
innerspaceaddison.com
innonlocust.com
insertthiscock.com
insorg.net
insorg.org
installs4money.com
instme.biz
insurance-flood.net
insurance-quotes-search.net
insuranceall.net
intcodec.com
inter-casinos.net
interactive-forum.org
interacttheatre.com
internetsearch.ru
inventorysearch.org
inwardhouse.org
ioacon.com
ionichost.com
ionomist.com
ipassist.biz
ipcons.biz
iplsolo.org
ipsex.net
iqsearch.net
ironeyegallery.com
isacasa.org
isearch.com
islandcreativeinc.net
isoftpay.com
ispfiltersporn.com
itchytushy.com
itemssearch.net
itsanal.com
itseasy.us
iufro-gfis.net
ivfdf2005.org
iweb-commerce.com
iwebland.com
ixcodec.com
jackycaps.com
jade-marcella.com
jeanie-rivers.com
jeannineoldfield.com
jengadss.com
jennajemeson.com
jennifer-lopez-pictures.com
jennilyn.com
jerkoffolders.com
jessica-simpson-nude.com
jessica-simpson-pictures.com
jetcodec.com
jethomepage.com
jetseeker.com
jewsformckinney.org
jkoon.com
jmhgallery.org
jnoob.info
joannelatham.com
johnsonsausage.com
jordan-katie-price.com
jpeg4.us
jppi.org
jps.ru
judin.ru
juicymatures.com
julie-meadows.com
juliehillmusic.com
juniorfatties.com
junkysex.com
just-a-porn.com
k4ewl.co.uk
kaley-cuoco.com
kathisomers.com
kazaa-lite.ws
kazanon.com
keithgreenpro.com
kenmccaul.com
keno.md
keycodec.com
keygenguru.com
khartsyzsk.com
kicnet.com
kidrockporntape.com
kilimedical.com
kilosex.com
kimhines.com
kingofmp3.com
kinoru.com
kissebony.com
kitasearch.com
kitehosting.com
kitosknygos.com
kliksearch.com
klodcash.com
kloun.com
klounada.com
kolobok-porn.com
kostigen.com
ksdspups.org
ksiazkipolskie.com
lacie-heart.com
lacyhart.com
lady4sex.net
ladyamateur.com
landrape.com
laopen.org
lastcodec.com
lastories.net
lastsoft.biz
latinbanking.com
latinboysex.com
latinboyslover.com
lauraroebuck.com
lavasoftfirewall.com
lavasoftpersonalfirewall.com
lavasoftpersonallfirewall.com
lawandco.com
leannalovelace.com
legs-city.com
legserotic.com
legspassion.com
lemarkregionals.com
lesbianporndreams.com
lesbisite4u.com
lesobank.ru
letssearch.com
libertyonlinehosting.com
librairiepaidos.com
lickingorgy.com
lickingpalace.com
liferowboys.com
lifestylelimo.com
lightcodec.com
lightcodec.net
lightofsearch.com
lightspeedsearch.net
lightspeedsearcher.com
lijn14.com
likehardcore.biz
lindsay-lohan-nude.com
lindsay-lohan-pic.com
lindsay-lohan-pics.com
lindsay-lohan-picture.com
line-find.com
line-find.net
line-search.com
lingerie-mania.com
linklover.com
linkph.com
linksummary.com
lisamatthew.com
list-porno.net
list2004.com
list666.com
litmagkiosk.com
liveadvert.com
livefinder.net
liveholio.com
livenewspaper.com
livesearchpage.com
loadcash.biz
localimagehost.com
locator.cc
lohan-lindsay.com
lolkiss.info
lolsites.info
lolso.com
lonely-sex.com
look.com
look2me.com
lookandvote.com
lookfor.cc
lookforwardpac.org
looking-for.cc
lookingfor.cc
looksa.com
lop.com
louiseleeds.com
love-pix.com
lovefatties.com
lovelas.com
lovelysearch.com
lovemynet.com
lovermatures.com
low-taxes.com
loweradult.com
ls0.net
luckysearch.net
lunitaweb.net
lust-movies.com
lustfatties.com
lustful-porno.com
lustlegs.com
luycos.com
lyricsandsongs.com