C:\RECYCLER\NPROTECT\00008813.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009537.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009567.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009459.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009732.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009614.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009583.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009629.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009881.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009990.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008694.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009605.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008648.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009686.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00014896.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009663.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009799.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00014915.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009895.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00017594.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009621.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009933.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009481.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009670.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008683.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00014606.MOZ[searchportal.information.com/]
00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\Documents and Settings\e-efavalos\Application Data\Mozilla\Firefox\Profiles\rdvanmez.default\coo kies.txt[.searchportal.information.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008648.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00014915.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00014896.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008666.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00014606.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009605.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009614.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009583.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009621.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009629.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008670.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009567.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009647.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00010085.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009990.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008683.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009933.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009895.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009663.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00017594.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009537.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008694.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009881.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009833.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008758.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009817.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00008813.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009799.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009745.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009459.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009732.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009686.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009670.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00009481.MOZ[.atwola.com/]
00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\RECYCLER\NPROTECT\00017587.MOZ[.atwola.com/]
00286262 Hacktool/MSNPass.F HackTools No 1 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\mspass.exe]
00301093 Application/MailPassView HackTools No 0 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\mailpv.exe]
00371793 HackTool/NetPass.B HackTools No 1 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\netpass.exe]
00530899 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\nircmd.exe]
01182314 Hacktool/CookiesView HackTools No 0 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\mzcv.exe]
01262593 Application/NirCmd.A HackTools No 0 Yes No C:\Documents and Settings\edder.avalos\My Documents\edder memoria\nircmd.exe
02176689 HackTool/MailPassView.F HackTools No 0 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\PstPassword.exe]
02197130 Trj/Rebooter.J Virus/Trojan No 1 Yes No C:\Program Files\Navilog1\reboot.exe
02207304 W32/Mytob.QL.worm Virus/Worm No 1 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\iepv.exe]
02904583 Spyware/LinkReplacer Spyware No 1 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\Google_Earth_P ro.rar[Google_Earth_Pro\Google Earth Pro\Crack.exe]
02933758 Application/ProduKey HackTools No 0 No No C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar[usb robadatos\observa\batexe\ProduKey.exe]
;================================================= ================================================== ================================================== ==============================
SUSPECTS
Sent Location ӓ
;================================================= ================================================== ================================================== ==============================
No C:\WINDOWS\SYSTEM32\FFKCDPKK.DLL ӓ
;================================================= ================================================== ================================================== ==============================
VULNERABILITIES
Id Severity Description ӓ
;================================================= ================================================== ================================================== ==============================
;================================================= ================================================== ================================================== ==============================

Hola.

Realiza lo siguiente:

• Descargate OTMoveIt2 lo guardas en el Escritorio.
  • Haz un doble clic sobre OTMoveIt.exe para ejecutarlo.
  • Asegurate que este marcado "Unregister Dll's and Ocx's".
  • Copia el texto que se encuentra en el cuadrado más abajo, y pega el texto en el marco de izquierdo de OTMoveIt nombrado Paste Standar List of Files / Folders to be moved.
  Código HTML:

  C:\RECYCLER\NPROTECT
  C:\Documents and Settings\edder.avalos\My Documents\edder memoria\nircmd.exe
  C:\Documents and Settings\edder.avalos\Desktop\stuff\Google_Earth_Pro.rar
  C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos.rar
  C:\WINDOWS\SYSTEM32\FFKCDPKK.DLL
  

  • Haz clic en MoveIt! Para lanzar la supresión.
  • Cuando el resultado aparece en el marco Results, haz clic en Exit.
  • Reinicia el PC (Este paso es muy importante)
  • Envía el informe (reporte) de OTMoveIt situado sobre C: \ _ OTMoveIt\MovedFiles.
  
  
  
• Descarga y ejecuta ATF-Cleaner.
  1. Descarga ATF-Cleaner en tu escritorio.
  2. Ejecútala y marca la opción "Select All"
  3. Pulsa sobre el botón "Empty Selected".
  Nota: Si utiliza el navegador Firefox y/u Opera , realize el mismo procedimiento de arriba. (Click , pestaña de FireFox y de Opera.),
  

- Pega el reporte de OTMoveIt2.
- Comenta los resultados.

Saludos.

C:\RECYCLER\NPROTECT moved successfully.
C:\Documents and Settings\edder.avalos\My Documents\edder memoria\nircmd.exe moved successfully.
C:\Documents and Settings\edder.avalos\Desktop\stuff\Google_Earth_P ro.rar moved successfully.
File/Folder C:\Documents and Settings\edder.avalos\Desktop\stuff\usb_robadatos. rar not found.
DllUnregisterServer procedure not found in C:\WINDOWS\SYSTEM32\FFKCDPKK.DLL
C:\WINDOWS\SYSTEM32\FFKCDPKK.DLL NOT unregistered.
C:\WINDOWS\SYSTEM32\FFKCDPKK.DLL moved successfully.

OTMoveIt2 by OldTimer - Version 1.0.4.2 log created on 06112008_161728




pues muchas gracias
maco1128 por el tiempo invertido en mi caso
te comento que el cambio inmediato que note fue que mi laptop ya no tarda nada al iniciar que antes tardaba alrededor de 2 minutos loggeandose
y por otra parte ya no me han salido banners ni popups que me salian
ademas de que ya no tengo problemas al navegar en yahoo.

gracias a todos!!!!!

Hola.

Solo queda por hacer esto:

1. Borra esta carpeta: C: \ _ OTMoveIt <==
   
2. Vacia la papelera de reciclaje.

Pd: Cualquier cosa ya sabes donde ubicarnos.

Salu2!.