Más Problemas despues de Spybot y Kaspersky - Página 2

Buscar

		Foro de Spyware » Spyware - Adware - Hijackers - Malwares » Foro Oficial de HijackThis en español
Más Problemas despues de Spybot y Kaspersky

Para evitar Virus, Spyware y otros Malwares, te recomendamos mantenerte informado en: InfoSpyware Blog

Foro Oficial de HijackThis en español Analizamos tu log de HijackThis para eliminar Hijackers, Spyware, Adware, ToolBars, Virus, Troyanos y Malwares en gral. Antes lea las Políticas del Foro de HijackThis.

Página 2 de 2

Enviar a:

Herramientas

post #11

12/12/05, 19:31:37

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

log c)

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{69BB1EF1-F218-4DF0-8070-6CAE54196E96}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{69BB1EF1-F218-4DF0-8070-6CAE54196E96}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{69BB1EF1-F218-4DF0-8070-6CAE54196E96}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{69BB1EF1-F218-4DF0-8070-6CAE54196E96}\InprocServer32]
@="C:\\WINDOWS\\system32\\iqfxdev.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{2C00C011-132E-46D4-BDD1-C94ACBD7BA1A}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{2C00C011-132E-46D4-BDD1-C94ACBD7BA1A}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{2C00C011-132E-46D4-BDD1-C94ACBD7BA1A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{2C00C011-132E-46D4-BDD1-C94ACBD7BA1A}\InprocServer32]
@="C:\\WINDOWS\\system32\\cStsrv.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{24C6602F-B4E6-4298-8919-76BFE05FA86A}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{24C6602F-B4E6-4298-8919-76BFE05FA86A}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{24C6602F-B4E6-4298-8919-76BFE05FA86A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{24C6602F-B4E6-4298-8919-76BFE05FA86A}\InprocServer32]
@="C:\\WINDOWS\\system32\\mpftedit.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{8921844A-BE44-462E-B690-FBD6043EEC42}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8921844A-BE44-462E-B690-FBD6043EEC42}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8921844A-BE44-462E-B690-FBD6043EEC42}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{8921844A-BE44-462E-B690-FBD6043EEC42}\InprocServer32]
@="C:\\WINDOWS\\system32\\mximtf.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9}\InprocServer32]
@="C:\\WINDOWS\\system32\\sdbiop.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{3FDC37ED-A018-4858-8A58-8C611E328925}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3FDC37ED-A018-4858-8A58-8C611E328925}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3FDC37ED-A018-4858-8A58-8C611E328925}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3FDC37ED-A018-4858-8A58-8C611E328925}\InprocServer32]
@="C:\\WINDOWS\\system32\\lkrmonui.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{5BEB4A56-FAB8-4203-992D-57142735AF6D}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{5BEB4A56-FAB8-4203-992D-57142735AF6D}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{5BEB4A56-FAB8-4203-992D-57142735AF6D}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{5BEB4A56-FAB8-4203-992D-57142735AF6D}\InprocServer32]
@="C:\\WINDOWS\\system32\\mfxml3a.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44}\InprocServer32]
@="C:\\WINDOWS\\system32\\swdoclc.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{3BD8BCD6-51E2-48A1-B75B-7A9F68528F72}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3BD8BCD6-51E2-48A1-B75B-7A9F68528F72}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3BD8BCD6-51E2-48A1-B75B-7A9F68528F72}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3BD8BCD6-51E2-48A1-B75B-7A9F68528F72}\InprocServer32]
@="C:\\WINDOWS\\system32\\mtxbde40.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{C4C53472-96F8-45AA-A1AA-53C2C2EE24A4}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C4C53472-96F8-45AA-A1AA-53C2C2EE24A4}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C4C53472-96F8-45AA-A1AA-53C2C2EE24A4}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{C4C53472-96F8-45AA-A1AA-53C2C2EE24A4}\InprocServer32]
@="C:\\WINDOWS\\system32\\rPsctrs.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{1172C10B-CA55-41DA-90F9-385FED1A0E87}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1172C10B-CA55-41DA-90F9-385FED1A0E87}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1172C10B-CA55-41DA-90F9-385FED1A0E87}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1172C10B-CA55-41DA-90F9-385FED1A0E87}\InprocServer32]
@="C:\\WINDOWS\\system32\\vchelper.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{AE730924-829E-43EB-AF64-7000331E5701}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{AE730924-829E-43EB-AF64-7000331E5701}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{AE730924-829E-43EB-AF64-7000331E5701}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{AE730924-829E-43EB-AF64-7000331E5701}\InprocServer32]
@="C:\\WINDOWS\\system32\\notshell.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{4A5474B6-11B2-4F58-85BE-F632376056A1}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4A5474B6-11B2-4F58-85BE-F632376056A1}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4A5474B6-11B2-4F58-85BE-F632376056A1}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{4A5474B6-11B2-4F58-85BE-F632376056A1}\InprocServer32]
@="C:\\WINDOWS\\system32\\fjamebuf.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{A6A603E1-7605-4425-A506-A51BD9DCF62E}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A6A603E1-7605-4425-A506-A51BD9DCF62E}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A6A603E1-7605-4425-A506-A51BD9DCF62E}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A6A603E1-7605-4425-A506-A51BD9DCF62E}\InprocServer32]
@="C:\\WINDOWS\\system32\\wcbcheck.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9}\InprocServer32]
@="C:\\WINDOWS\\system32\\mgtext40.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{5EE76382-6A3D-4810-90B3-19078414BA61}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{5EE76382-6A3D-4810-90B3-19078414BA61}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{5EE76382-6A3D-4810-90B3-19078414BA61}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{5EE76382-6A3D-4810-90B3-19078414BA61}\InprocServer32]
@="C:\\WINDOWS\\system32\\mthgrcoi.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB}\InprocServer32]
@="C:\\WINDOWS\\system32\\mng4c32.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78}\InprocServer32]
@="C:\\WINDOWS\\system32\\icnathlp.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{1040BCF9-76CF-471D-B2B7-FF17A43C7809}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1040BCF9-76CF-471D-B2B7-FF17A43C7809}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1040BCF9-76CF-471D-B2B7-FF17A43C7809}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{1040BCF9-76CF-471D-B2B7-FF17A43C7809}\InprocServer32]
@="C:\\WINDOWS\\system32\\dEdramp.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{BBC05E6E-74A1-4138-B107-979DA34EF07A}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BBC05E6E-74A1-4138-B107-979DA34EF07A}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BBC05E6E-74A1-4138-B107-979DA34EF07A}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BBC05E6E-74A1-4138-B107-979DA34EF07A}\InprocServer32]
@="C:\\WINDOWS\\system32\\iqnathlp.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{60AE8C56-5C74-46BD-AB19-CC90DD6E6646}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{60AE8C56-5C74-46BD-AB19-CC90DD6E6646}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{60AE8C56-5C74-46BD-AB19-CC90DD6E6646}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{60AE8C56-5C74-46BD-AB19-CC90DD6E6646}\InprocServer32]
@="C:\\WINDOWS\\system32\\mudemui.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{E7CF8ABE-8027-4A39-9A75-6471C241DD44}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{E7CF8ABE-8027-4A39-9A75-6471C241DD44}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{E7CF8ABE-8027-4A39-9A75-6471C241DD44}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{E7CF8ABE-8027-4A39-9A75-6471C241DD44}\InprocServer32]
@="C:\\WINDOWS\\system32\\hU4mlah11d4.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{0DF175C3-7A88-45B8-8688-C316B0D1F16F}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0DF175C3-7A88-45B8-8688-C316B0D1F16F}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0DF175C3-7A88-45B8-8688-C316B0D1F16F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{0DF175C3-7A88-45B8-8688-C316B0D1F16F}\InprocServer32]
@="C:\\WINDOWS\\system32\\dllayx.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F}\InprocServer32]
@="C:\\WINDOWS\\system32\\cartcli.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{824DDAAD-7EBA-43DA-B02F-1E60C60726ED}]
@=""
"IDEx"="AD"

[HKEY_CLASSES_ROOT\CLSID\{824DDAAD-7EBA-43DA-B02F-1E60C60726ED}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{824DDAAD-7EBA-43DA-B02F-1E60C60726ED}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{824DDAAD-7EBA-43DA-B02F-1E60C60726ED}\InprocServer32]
@="C:\\WINDOWS\\system32\\iusetup.dll"
"ThreadingModel"="Apartment"

Windows Registry Editor Version 5.00

[HKEY_CLASSES_ROOT\CLSID\{3526A3CD-792E-4F39-BFBE-E9009CB29D8C}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3526A3CD-792E-4F39-BFBE-E9009CB29D8C}\Implemented Categories]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3526A3CD-792E-4F39-BFBE-E9009CB29D8C}\Implemented Categories\{00021492-0000-0000-C000-000000000046}]
@=""

[HKEY_CLASSES_ROOT\CLSID\{3526A3CD-792E-4F39-BFBE-E9009CB29D8C}\InprocServer32]
@="C:\\WINDOWS\\system32\\hkffyuv.dll"
"ThreadingModel"="Apartment"

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Shell Extensions\Approved]
"{DC583763-A0A1-46D6-B86B-9B993533EEAD}"=
"{85151F62-4582-4C22-B464-350FCCBE1947}"=
"{256049D5-0A70-469C-AE09-E57554D0E7A7}"=
"{E3DC7420-9D0E-46BB-B5DB-800A11EA48E1}"=
"{19B1EEE9-BDFC-4696-8760-D5F3088ECC13}"=
"{9258FD83-6A56-4FC4-B65D-DD6931572FA2}"=
"{9D46F508-CF90-419D-849A-5C006EF004DA}"=
"{37493A6E-B431-48FC-B613-A1B5A6DC4E1C}"=
"{FF1F9CA4-AF9B-4D29-A62D-171E26C2DBE4}"=
"{4D518C84-3C73-406B-965A-CB11B14EAFAE}"=
"{40B68667-0882-4150-BB2A-23D376993E08}"=
"{19DACAAD-88E1-4900-A1A0-79BC6C900AED}"=
"{94DAF9CD-A62C-49A0-A606-F23A4495FDEF}"=
"{2B5E44EA-B3E4-4469-A673-179E827E95BB}"=
"{EACF3101-AB4C-4D1B-8DE9-0696161784EB}"=
"{69BB1EF1-F218-4DF0-8070-6CAE54196E96}"=
"{2C00C011-132E-46D4-BDD1-C94ACBD7BA1A}"=
"{24C6602F-B4E6-4298-8919-76BFE05FA86A}"=
"{8921844A-BE44-462E-B690-FBD6043EEC42}"=
"{C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9}"=
"{3FDC37ED-A018-4858-8A58-8C611E328925}"=
"{5BEB4A56-FAB8-4203-992D-57142735AF6D}"=
"{0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44}"=
"{3BD8BCD6-51E2-48A1-B75B-7A9F68528F72}"=
"{C4C53472-96F8-45AA-A1AA-53C2C2EE24A4}"=
"{1172C10B-CA55-41DA-90F9-385FED1A0E87}"=
"{AE730924-829E-43EB-AF64-7000331E5701}"=
"{4A5474B6-11B2-4F58-85BE-F632376056A1}"=
"{A6A603E1-7605-4425-A506-A51BD9DCF62E}"=
"{A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9}"=
"{5EE76382-6A3D-4810-90B3-19078414BA61}"=
"{3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB}"=
"{A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78}"=
"{1040BCF9-76CF-471D-B2B7-FF17A43C7809}"=
"{BBC05E6E-74A1-4138-B107-979DA34EF07A}"=
"{60AE8C56-5C74-46BD-AB19-CC90DD6E6646}"=
"{E7CF8ABE-8027-4A39-9A75-6471C241DD44}"=
"{0DF175C3-7A88-45B8-8688-C316B0D1F16F}"=
"{BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F}"=
"{824DDAAD-7EBA-43DA-B02F-1E60C60726ED}"=
"{3526A3CD-792E-4F39-BFBE-E9009CB29D8C}"=
[-HKEY_CLASSES_ROOT\CLSID\{DC583763-A0A1-46D6-B86B-9B993533EEAD}]
[-HKEY_CLASSES_ROOT\CLSID\{85151F62-4582-4C22-B464-350FCCBE1947}]
[-HKEY_CLASSES_ROOT\CLSID\{256049D5-0A70-469C-AE09-E57554D0E7A7}]
[-HKEY_CLASSES_ROOT\CLSID\{E3DC7420-9D0E-46BB-B5DB-800A11EA48E1}]
[-HKEY_CLASSES_ROOT\CLSID\{19B1EEE9-BDFC-4696-8760-D5F3088ECC13}]
[-HKEY_CLASSES_ROOT\CLSID\{9258FD83-6A56-4FC4-B65D-DD6931572FA2}]
[-HKEY_CLASSES_ROOT\CLSID\{9D46F508-CF90-419D-849A-5C006EF004DA}]
[-HKEY_CLASSES_ROOT\CLSID\{37493A6E-B431-48FC-B613-A1B5A6DC4E1C}]
[-HKEY_CLASSES_ROOT\CLSID\{FF1F9CA4-AF9B-4D29-A62D-171E26C2DBE4}]
[-HKEY_CLASSES_ROOT\CLSID\{4D518C84-3C73-406B-965A-CB11B14EAFAE}]
[-HKEY_CLASSES_ROOT\CLSID\{40B68667-0882-4150-BB2A-23D376993E08}]
[-HKEY_CLASSES_ROOT\CLSID\{19DACAAD-88E1-4900-A1A0-79BC6C900AED}]
[-HKEY_CLASSES_ROOT\CLSID\{94DAF9CD-A62C-49A0-A606-F23A4495FDEF}]
[-HKEY_CLASSES_ROOT\CLSID\{2B5E44EA-B3E4-4469-A673-179E827E95BB}]
[-HKEY_CLASSES_ROOT\CLSID\{EACF3101-AB4C-4D1B-8DE9-0696161784EB}]
[-HKEY_CLASSES_ROOT\CLSID\{69BB1EF1-F218-4DF0-8070-6CAE54196E96}]
[-HKEY_CLASSES_ROOT\CLSID\{2C00C011-132E-46D4-BDD1-C94ACBD7BA1A}]
[-HKEY_CLASSES_ROOT\CLSID\{24C6602F-B4E6-4298-8919-76BFE05FA86A}]
[-HKEY_CLASSES_ROOT\CLSID\{8921844A-BE44-462E-B690-FBD6043EEC42}]
[-HKEY_CLASSES_ROOT\CLSID\{C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9}]
[-HKEY_CLASSES_ROOT\CLSID\{3FDC37ED-A018-4858-8A58-8C611E328925}]
[-HKEY_CLASSES_ROOT\CLSID\{5BEB4A56-FAB8-4203-992D-57142735AF6D}]
[-HKEY_CLASSES_ROOT\CLSID\{0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44}]
[-HKEY_CLASSES_ROOT\CLSID\{3BD8BCD6-51E2-48A1-B75B-7A9F68528F72}]
[-HKEY_CLASSES_ROOT\CLSID\{C4C53472-96F8-45AA-A1AA-53C2C2EE24A4}]
[-HKEY_CLASSES_ROOT\CLSID\{1172C10B-CA55-41DA-90F9-385FED1A0E87}]
[-HKEY_CLASSES_ROOT\CLSID\{AE730924-829E-43EB-AF64-7000331E5701}]
[-HKEY_CLASSES_ROOT\CLSID\{4A5474B6-11B2-4F58-85BE-F632376056A1}]
[-HKEY_CLASSES_ROOT\CLSID\{A6A603E1-7605-4425-A506-A51BD9DCF62E}]
[-HKEY_CLASSES_ROOT\CLSID\{A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9}]
[-HKEY_CLASSES_ROOT\CLSID\{5EE76382-6A3D-4810-90B3-19078414BA61}]
[-HKEY_CLASSES_ROOT\CLSID\{3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB}]
[-HKEY_CLASSES_ROOT\CLSID\{A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78}]
[-HKEY_CLASSES_ROOT\CLSID\{1040BCF9-76CF-471D-B2B7-FF17A43C7809}]
[-HKEY_CLASSES_ROOT\CLSID\{BBC05E6E-74A1-4138-B107-979DA34EF07A}]
[-HKEY_CLASSES_ROOT\CLSID\{60AE8C56-5C74-46BD-AB19-CC90DD6E6646}]
[-HKEY_CLASSES_ROOT\CLSID\{E7CF8ABE-8027-4A39-9A75-6471C241DD44}]
[-HKEY_CLASSES_ROOT\CLSID\{0DF175C3-7A88-45B8-8688-C316B0D1F16F}]
[-HKEY_CLASSES_ROOT\CLSID\{BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F}]
[-HKEY_CLASSES_ROOT\CLSID\{824DDAAD-7EBA-43DA-B02F-1E60C60726ED}]
[-HKEY_CLASSES_ROOT\CLSID\{3526A3CD-792E-4F39-BFBE-E9009CB29D8C}]
REGEDIT4

[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\User Agent\Post Platform]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Internet Settings\User Agent\Post Platform]
"SV1"=""
************************************************** **************************
Desktop.ini Contents:
************************************************** **************************
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
<IDone>{F9B20994-EBBF-4C31-AC8C-B9AD5C78BD10}</IDone>
<IDtwo>VT01</IDtwo>
<VERSION>200</VERSION>
************************************************** **************************
C:\WINDOWS\System32\0BD33AC5-C693-4B6D-A0EF-A4D08C3BAA44.reg
C:\WINDOWS\System32\0DF175C3-7A88-45B8-8688-C316B0D1F16F.reg
C:\WINDOWS\System32\1040BCF9-76CF-471D-B2B7-FF17A43C7809.reg
C:\WINDOWS\System32\1172C10B-CA55-41DA-90F9-385FED1A0E87.reg
C:\WINDOWS\System32\19B1EEE9-BDFC-4696-8760-D5F3088ECC13.reg
C:\WINDOWS\System32\19DACAAD-88E1-4900-A1A0-79BC6C900AED.reg
C:\WINDOWS\System32\24C6602F-B4E6-4298-8919-76BFE05FA86A.reg
C:\WINDOWS\System32\256049D5-0A70-469C-AE09-E57554D0E7A7.reg
C:\WINDOWS\System32\2B5E44EA-B3E4-4469-A673-179E827E95BB.reg
C:\WINDOWS\System32\2C00C011-132E-46D4-BDD1-C94ACBD7BA1A.reg
C:\WINDOWS\System32\3507B29F-3BEE-4CAE-BD5D-D7ED99C960FB.reg
C:\WINDOWS\System32\3526A3CD-792E-4F39-BFBE-E9009CB29D8C.reg
C:\WINDOWS\System32\37493A6E-B431-48FC-B613-A1B5A6DC4E1C.reg
C:\WINDOWS\System32\3BD8BCD6-51E2-48A1-B75B-7A9F68528F72.reg
C:\WINDOWS\System32\3FDC37ED-A018-4858-8A58-8C611E328925.reg
C:\WINDOWS\System32\40B68667-0882-4150-BB2A-23D376993E08.reg
C:\WINDOWS\System32\4A5474B6-11B2-4F58-85BE-F632376056A1.reg
C:\WINDOWS\System32\4D518C84-3C73-406B-965A-CB11B14EAFAE.reg
C:\WINDOWS\System32\5BEB4A56-FAB8-4203-992D-57142735AF6D.reg
C:\WINDOWS\System32\5EE76382-6A3D-4810-90B3-19078414BA61.reg
C:\WINDOWS\System32\60AE8C56-5C74-46BD-AB19-CC90DD6E6646.reg
C:\WINDOWS\System32\69BB1EF1-F218-4DF0-8070-6CAE54196E96.reg
C:\WINDOWS\System32\824DDAAD-7EBA-43DA-B02F-1E60C60726ED.reg
C:\WINDOWS\System32\85151F62-4582-4C22-B464-350FCCBE1947.reg
C:\WINDOWS\System32\8921844A-BE44-462E-B690-FBD6043EEC42.reg
C:\WINDOWS\System32\9258FD83-6A56-4FC4-B65D-DD6931572FA2.reg
C:\WINDOWS\System32\94DAF9CD-A62C-49A0-A606-F23A4495FDEF.reg
C:\WINDOWS\System32\9D46F508-CF90-419D-849A-5C006EF004DA.reg
C:\WINDOWS\System32\A2E2A1F5-A5E7-425C-B491-CD3C3CF1C7D9.reg
C:\WINDOWS\System32\A30A8B6E-C94C-4FBD-9BC9-B3FD5BF8CB78.reg
C:\WINDOWS\System32\A6A603E1-7605-4425-A506-A51BD9DCF62E.reg
C:\WINDOWS\System32\AE730924-829E-43EB-AF64-7000331E5701.reg
C:\WINDOWS\System32\BBC05E6E-74A1-4138-B107-979DA34EF07A.reg
C:\WINDOWS\System32\BEF07E84-AC2D-4DBD-BBAA-53DBE362A34F.reg
C:\WINDOWS\System32\C3EE636E-8BEB-42DF-8B3A-BA5DC9CEDAD9.reg
C:\WINDOWS\System32\C4C53472-96F8-45AA-A1AA-53C2C2EE24A4.reg
C:\WINDOWS\System32\DC583763-A0A1-46D6-B86B-9B993533EEAD.reg
C:\WINDOWS\System32\E3DC7420-9D0E-46BB-B5DB-800A11EA48E1.reg
C:\WINDOWS\System32\E7CF8ABE-8027-4A39-9A75-6471C241DD44.reg
C:\WINDOWS\System32\EACF3101-AB4C-4D1B-8DE9-0696161784EB.reg
C:\WINDOWS\System32\FF1F9CA4-AF9B-4D29-A62D-171E26C2DBE4.reg
Checking for L2MFix account(0=no 1=yes):
0
adding: dlls/6ho4svc.dll (164 bytes security) (deflated 5%)
adding: dlls/aimfd.dll (164 bytes security) (deflated 4%)
adding: dlls/asledit.dll (164 bytes security) (deflated 4%)
adding: dlls/avi2cqag.dll (164 bytes security) (deflated 4%)
adding: dlls/aza40e5qeh.dll (164 bytes security) (deflated 5%)
adding: dlls/azaml5311.dll (164 bytes security) (deflated 5%)
adding: dlls/azaol1j31.dll (164 bytes security) (deflated 5%)
adding: dlls/cartcli.dll (164 bytes security) (deflated 5%)
adding: dlls/ckosys.dll (164 bytes security) (deflated 4%)
adding: dlls/cLrtcli.dll (164 bytes security) (deflated 4%)
adding: dlls/clsetacl.dll (164 bytes security) (deflated 5%)
adding: dlls/cms_ui.dll (164 bytes security) (deflated 4%)
adding: dlls/cpcdll.dll (164 bytes security) (deflated 5%)
adding: dlls/cStsrv.dll (164 bytes security) (deflated 4%)
adding: dlls/d40m0ed1eh0.dll (164 bytes security) (deflated 4%)
adding: dlls/dEdramp.dll (164 bytes security) (deflated 4%)
adding: dlls/dfgeng.dll (164 bytes security) (deflated 4%)
adding: dlls/dllayx.dll (164 bytes security) (deflated 4%)
adding: dlls/dmcpmon.dll (164 bytes security) (deflated 5%)
adding: dlls/dMdpmesh.dll (164 bytes security) (deflated 5%)
adding: dlls/dMdramp.dll (164 bytes security) (deflated 4%)
adding: dlls/dnwsockx.dll (164 bytes security) (deflated 5%)
adding: dlls/dqrgui.dll (164 bytes security) (deflated 5%)
adding: dlls/dtgeng.dll (164 bytes security) (deflated 4%)
adding: dlls/e4jm0e11eh.dll (164 bytes security) (deflated 5%)
adding: dlls/en0ql1d51.dll (164 bytes security) (deflated 4%)
adding: dlls/en2ql1f51.dll (164 bytes security) (deflated 4%)
adding: dlls/en44l1hq1.dll (164 bytes security) (deflated 4%)
adding: dlls/en6ol1j31.dll (164 bytes security) (deflated 5%)
adding: dlls/en6ql1j51.dll (164 bytes security) (deflated 4%)
adding: dlls/en8ql1l51.dll (164 bytes security) (deflated 4%)
adding: dlls/en8sl1l71.dll (164 bytes security) (deflated 6%)
adding: dlls/enlql1351.dll (164 bytes security) (deflated 5%)
adding: dlls/ennol1531.dll (164 bytes security) (deflated 6%)
adding: dlls/enp4l17q1.dll (164 bytes security) (deflated 5%)
adding: dlls/f02mlaf11d2.dll (164 bytes security) (deflated 5%)
adding: dlls/fadrclnr.dll (164 bytes security) (deflated 4%)
adding: dlls/FG20ESP.DLL (164 bytes security) (deflated 5%)
adding: dlls/fjamebuf.dll (164 bytes security) (deflated 4%)
adding: dlls/g8400ihme84a0.dll (164 bytes security) (deflated 4%)
adding: dlls/h04mlah11d4.dll (164 bytes security) (deflated 5%)
adding: dlls/h4l20e3oeh.dll (164 bytes security) (deflated 4%)
adding: dlls/h62olgf3162.dll (164 bytes security) (deflated 5%)
adding: dlls/HDActiveX.dll (164 bytes security) (deflated 5%)
adding: dlls/hkffyuv.dll (164 bytes security) (deflated 4%)
adding: dlls/hosetup.dll (164 bytes security) (deflated 5%)
adding: dlls/hr4805hue.dll (164 bytes security) (deflated 5%)
adding: dlls/hr4q05h5e.dll (164 bytes security) (deflated 4%)
adding: dlls/hr6805jue.dll (164 bytes security) (deflated 5%)
adding: dlls/hr8805lue.dll (164 bytes security) (deflated 5%)
adding: dlls/hrnu0559e.dll (164 bytes security) (deflated 5%)
adding: dlls/hrp6057se.dll (164 bytes security) (deflated 5%)
adding: dlls/hrp8057ue.dll (164 bytes security) (deflated 4%)
adding: dlls/hrps0577e.dll (164 bytes security) (deflated 5%)
adding: dlls/hU4mlah11d4.dll (164 bytes security) (deflated 4%)
adding: dlls/i6jqlg1516.dll (164 bytes security) (deflated 4%)
adding: dlls/icnathlp.dll (164 bytes security) (deflated 4%)
adding: dlls/idetres.dll (164 bytes security) (deflated 5%)
adding: dlls/iesecsvc.dll (164 bytes security) (deflated 4%)
adding: dlls/ikfxexps.dll (164 bytes security) (deflated 5%)
adding: dlls/iqfxdev.dll (164 bytes security) (deflated 5%)
adding: dlls/iqfxsrvc.dll (164 bytes security) (deflated 4%)
adding: dlls/iqnathlp.dll (164 bytes security) (deflated 4%)
adding: dlls/ir0ol5d31.dll (164 bytes security) (deflated 4%)
adding: dlls/ir40l5hm1.dll (164 bytes security) (deflated 5%)
adding: dlls/ir6ml5j11.dll (164 bytes security) (deflated 5%)
adding: dlls/ir82l5lo1.dll (164 bytes security) (deflated 4%)
adding: dlls/irlml5311.dll (164 bytes security) (deflated 5%)
adding: dlls/iusetup.dll (164 bytes security) (deflated 4%)
adding: dlls/izengine.dll (164 bytes security) (deflated 5%)
adding: dlls/j4l40e3qeh.dll (164 bytes security) (deflated 4%)
adding: dlls/jPvacypt.dll (164 bytes security) (deflated 5%)
adding: dlls/k0lq0a35ed.dll (164 bytes security) (deflated 5%)
adding: dlls/k4800elmehqa0.dll (164 bytes security) (deflated 5%)
adding: dlls/k644lghq164e.dll (164 bytes security) (deflated 5%)
adding: dlls/kcdgr.dll (164 bytes security) (deflated 4%)
adding: dlls/kedmon.dll (164 bytes security) (deflated 4%)
adding: dlls/kfdsl1.dll (164 bytes security) (deflated 4%)
adding: dlls/kndinbe1.dll (164 bytes security) (deflated 5%)
adding: dlls/kodhe319.dll (164 bytes security) (deflated 5%)
adding: dlls/ktl8l73u1.dll (164 bytes security) (deflated 4%)
adding: dlls/kzdgr.dll (164 bytes security) (deflated 4%)
adding: dlls/l08mlal11dq.dll (164 bytes security) (deflated 4%)
adding: dlls/l0j80a1ued.dll (164 bytes security) (deflated 5%)
adding: dlls/l4n40e5qeh.dll (164 bytes security) (deflated 5%)
adding: dlls/l6p2lg7o16.dll (164 bytes security) (deflated 4%)
adding: dlls/ld_xtrans.dll (164 bytes security) (deflated 5%)
adding: dlls/lgcalsec.dll (164 bytes security) (deflated 6%)
adding: dlls/Lgpng13n.dll (164 bytes security) (deflated 5%)
adding: dlls/lkrmonui.dll (164 bytes security) (deflated 4%)
adding: dlls/lmcalui.dll (164 bytes security) (deflated 5%)
adding: dlls/ltexpand.dll (164 bytes security) (deflated 5%)
adding: dlls/lv0209doe.dll (164 bytes security) (deflated 4%)
adding: dlls/lv2m09f1e.dll (164 bytes security) (deflated 4%)
adding: dlls/lvjq0915e.dll (164 bytes security) (deflated 4%)
adding: dlls/lvl2093oe.dll (164 bytes security) (deflated 4%)
adding: dlls/lvl4093qe.dll (164 bytes security) (deflated 5%)
adding: dlls/lvn0095me.dll (164 bytes security) (deflated 5%)
adding: dlls/lvpo0973e.dll (164 bytes security) (deflated 5%)
adding: dlls/lvr4099qe.dll (164 bytes security) (deflated 5%)
adding: dlls/lvrm0991e.dll (164 bytes security) (deflated 5%)
adding: dlls/lxcmgr10.dll (164 bytes security) (deflated 5%)
adding: dlls/m0280afued280.dll (164 bytes security) (deflated 4%)
adding: dlls/m0ju0a19ed.dll (164 bytes security) (deflated 5%)
adding: dlls/mcrating.dll (164 bytes security) (deflated 5%)
adding: dlls/mdsystem.dll (164 bytes security) (deflated 5%)
adding: dlls/mexclu.dll (164 bytes security) (deflated 4%)
adding: dlls/mfxml3a.dll (164 bytes security) (deflated 4%)
adding: dlls/mgtext40.dll (164 bytes security) (deflated 4%)
adding: dlls/mljetoledb40.dll (164 bytes security) (deflated 4%)
adding: dlls/mmr2c.dll (164 bytes security) (deflated 4%)
adding: dlls/mng4c32.dll (164 bytes security) (deflated 5%)
adding: dlls/mpftedit.dll (164 bytes security) (deflated 4%)
adding: dlls/MRIIpl4.dll (164 bytes security) (deflated 4%)
adding: dlls/mrvcrt40.dll (164 bytes security) (deflated 4%)
adding: dlls/mtcndmgr.dll (164 bytes security) (deflated 4%)
adding: dlls/mthgrcoi.dll (164 bytes security) (deflated 4%)
adding: dlls/mtxbde40.dll (164 bytes security) (deflated 4%)
adding: dlls/mudemui.dll (164 bytes security) (deflated 4%)
adding: dlls/mvc42loc.dll (164 bytes security) (deflated 4%)
adding: dlls/mwvidc32.dll (164 bytes security) (deflated 5%)
adding: dlls/mximtf.dll (164 bytes security) (deflated 4%)
adding: dlls/n02u0af9ed2.dll (164 bytes security) (deflated 4%)
adding: dlls/nchtml.dll (164 bytes security) (deflated 3%)
adding: dlls/nehtml.dll (164 bytes security) (deflated 4%)
adding: dlls/njevent.dll (164 bytes security) (deflated 5%)
adding: dlls/notshell.dll (164 bytes security) (deflated 5%)
adding: dlls/npevent.dll (164 bytes security) (deflated 5%)
adding: dlls/nqapi16.dll (164 bytes security) (deflated 4%)
adding: dlls/o0lu0a39ed.dll (164 bytes security) (deflated 4%)
adding: dlls/obbc16gt.dll (164 bytes security) (deflated 6%)
adding: dlls/orpdx32.dll (164 bytes security) (deflated 4%)
adding: dlls/oyecnv32.dll (164 bytes security) (deflated 4%)
adding: dlls/pgustab.dll (164 bytes security) (deflated 5%)
adding: dlls/plotowiz.dll (164 bytes security) (deflated 5%)
adding: dlls/q6rqlg9516.dll (164 bytes security) (deflated 5%)
adding: dlls/qCsf.dll (164 bytes security) (deflated 5%)
adding: dlls/r08s0al7edq.dll (164 bytes security) (deflated 5%)
adding: dlls/r0r60a9sed.dll (164 bytes security) (deflated 4%)
adding: dlls/r6p8lg7u16.dll (164 bytes security) (deflated 4%)
adding: dlls/rFssapi.dll (164 bytes security) (deflated 5%)
adding: dlls/rPsctrs.dll (164 bytes security) (deflated 4%)
adding: dlls/rYsadhlp.dll (164 bytes security) (deflated 5%)
adding: dlls/sas.dll (164 bytes security) (deflated 6%)
adding: dlls/scdocvw.dll (164 bytes security) (deflated 5%)
adding: dlls/sdbiop.dll (164 bytes security) (deflated 4%)
adding: dlls/sgbcsp.dll (164 bytes security) (deflated 6%)
adding: dlls/sglwid.dll (164 bytes security) (deflated 4%)
adding: dlls/shdll.dll (164 bytes security) (deflated 5%)
adding: dlls/ShnTPFcs.dll (164 bytes security) (deflated 5%)
adding: dlls/smi.dll (164 bytes security) (deflated 5%)
adding: dlls/sogtab.dll (164 bytes security) (deflated 4%)
adding: dlls/SrnTPAPI.dll (164 bytes security) (deflated 5%)
adding: dlls/ssellstyle.dll (164 bytes security) (deflated 4%)
adding: dlls/subiop.dll (164 bytes security) (deflated 5%)
adding: dlls/swcbase.dll (164 bytes security) (deflated 5%)
adding: dlls/swdoclc.dll (164 bytes security) (deflated 4%)
adding: dlls/sylogcfg.dll (164 bytes security) (deflated 4%)
adding: dlls/tAembed.dll (164 bytes security) (deflated 5%)
adding: dlls/tkkwks.dll (164 bytes security) (deflated 4%)
adding: dlls/TnansportIrCOMM.dll (164 bytes security) (deflated 5%)
adding: dlls/tPpiperf.dll (164 bytes security) (deflated 4%)
adding: dlls/tVpisrv.dll (164 bytes security) (deflated 4%)
adding: dlls/u0ru0a99ed.dll (164 bytes security) (deflated 5%)
adding: dlls/udeg.dll (164 bytes security) (deflated 5%)
adding: dlls/uzerenv.dll (164 bytes security) (deflated 5%)
adding: dlls/vchelper.dll (164 bytes security) (deflated 4%)
adding: dlls/vdpubapi.dll (164 bytes security) (deflated 5%)
adding: dlls/vds_ps.dll (164 bytes security) (deflated 5%)
adding: dlls/vgs_ps.dll (164 bytes security) (deflated 5%)
adding: dlls/wbavideo.dll (164 bytes security) (deflated 5%)
adding: dlls/wbstream.dll (164 bytes security) (deflated 5%)
adding: dlls/wcbcheck.dll (164 bytes security) (deflated 4%)
adding: dlls/weps.dll (164 bytes security) (deflated 5%)
adding: dlls/whps.dll (164 bytes security) (deflated 5%)
adding: dlls/wiiscmgr.dll (164 bytes security) (deflated 5%)
adding: dlls/wjiprop.dll (164 bytes security) (deflated 4%)
adding: dlls/WMASPINT.DLL (164 bytes security) (deflated 4%)
adding: dlls/wphnetbs.dll (164 bytes security) (deflated 3%)
adding: dlls/wsnscard.dll (164 bytes security) (deflated 5%)
adding: dlls/wxascr.dll (164 bytes security) (deflated 4%)
adding: dlls/wyn87em.dll (164 bytes security) (deflated 5%)
adding: dlls/wyps.dll (164 bytes security) (deflated 4%)

FINAL

InfoSpyware

post #12

12/12/05, 19:32:57

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

post #13

12/12/05, 19:35:50

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

post #14

12/12/05, 19:39:38

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

Aqui teneis el log final del HijackThis, parece que las webs han parado de brotar... Estamos en el buen camino?

Logfile of HijackThis v1.99.1
Scan saved at 0:37:03, on 13/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\Synaptics\SynTP\SynTPLpr.exe
C:\Archivos de programa\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wscntfy.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Documents and Settings\Miguel Angel\Escritorio\Anti Spyware\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.es/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Archivos de programa\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Archivos de programa\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MMTray] C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100257246984
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Extensions - C:\WINDOWS\system32\l6p2lg7o16.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: kavsvc - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

post #15

12/12/05, 19:42:43

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

log final del HiJackThis:

Logfile of HijackThis v1.99.1
Scan saved at 0:37:03, on 13/12/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\Synaptics\SynTP\SynTPLpr.exe
C:\Archivos de programa\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mm_tray.exe
C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mmtask.exe
C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\wscntfy.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Documents and Settings\Miguel Angel\Escritorio\Anti Spyware\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.es/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Archivos de programa\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Archivos de programa\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MMTray] C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [mmtask] C:\Archivos de programa\Musicmatch\Musicmatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by17fd.bay17.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1100257246984
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: Extensions - C:\WINDOWS\system32\l6p2lg7o16.dll (file missing)
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: kavsvc - Kaspersky Lab - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

post #16

12/12/05, 19:45:55

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

Perdon por los duplicados.

Gracias por tu/vuestro tiempo.

Lizard

post #17

12/12/05, 20:00:50

Jereque

Ex-Colaborador

Registrado: ene 2005

Mensajes: 9.010

Re: Más Problemas despues de Spybot y Kaspersky

Bien, ejecuta HijackThis con todos los programas cerrados y dale Fix checked a:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R3 - Default URLSearchHook is missing

O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} -

O20 - Winlogon Notify: Extensions - C:\WINDOWS\system32\l6p2lg7o16.dll (file missing)

Ahora descarga y ejecuta estas dos herramientas:

Vx2Finder.exe
Kill2Me

Analiza el sistema con Panda Online, reinicia y nos cuentas los resultados.

Saludos

Novedades del Foro | Antivirus Online | Eliminar Malwares | Políticas del Foro | Blog

* Ayúdanos haciendo una DONACIÓN para poder seguir Ayudando.
* Para evitar Virus y Spywares al navegar por internet, USE FIREFOX !!
* No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

post #18

12/12/05, 21:30:03

lizard

Usuario

Registrado: dic 2005

Ubicación: España

Mensajes: 34

Re: Más Problemas despues de Spybot y Kaspersky

Log for VX2.BetterInternet File Finder (msg126)

Files Found---

Additional Files---

Keys Under Notify---
crypt32chain
cryptnet
cscdll
igfxcui
ScCertProp
Schedule
sclgntfy
SensLogn
termsrv
wlballoon
wzcnotif

Guardian Key--- is called:

User Agent String---
SV1

En el log del panda active scan:

Incidencia Estado Elemento

Adware:Adware/nCase No desinfectado C:\Documents and Settings\Miguel Angel\Configuración local\Archivos temporales de Internet\Content.IE5\DSWVDTWH\AppWrap[1].exe
Adware:Adware/nCase No desinfectado C:\Documents and Settings\Miguel Angel\Configuración local\Archivos temporales de Internet\Content.IE5\DSWVDTWH\AppWrap[2].exe
Adware:Adware/nCase No desinfectado C:\Documents and Settings\Miguel Angel\Configuración local\Archivos temporales de Internet\Content.IE5\DSWVDTWH\AppWrap[3].exe
Adware:Adware/nCase No desinfectado C:\Documents and Settings\Miguel Angel\Configuración local\Archivos temporales de Internet\Content.IE5\JRHBZPWW\AppWrap[1].exe
Adware:Adware/nCase No desinfectado C:\Documents and Settings\Miguel Angel\Configuración local\Archivos temporales de Internet\Content.IE5\M9TY7YTO\AppWrap[3].exe
Adware:Adware/nCase No desinfectado C:\Documents and Settings\Miguel Angel\Configuración local\Archivos temporales de Internet\Content.IE5\WDE3OH2F\AppWrap[1].exe
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\backup.zip[6ho4svc.dll]
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\backup.zip[aimfd.dll]
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\backup.zip[asledit.dll]
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\backup.zip[avi2cqag.dll]
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\backup.zip[aza40e5qeh.dll]

...

Siguen las detecciones Look2me, hasta un numero de 350 del backup del l2mfix

...

Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\dlls\wxascr.dll
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\dlls\wyn87em.dll
Adware:Adware/Look2Me No desinfectado C:\Documents and Settings\Miguel Angel\Escritorio\l2mfix\dlls\wyps.dll
Adware:Adware/P2PNetworking No desinfectado C:\WINDOWS\Downloaded Program Files\WebP2PInstaller.dll
Adware:Adware/nCase No desinfectado C:\WINDOWS\icont.exe
Spyware:Spyware/Virtumonde No desinfectado C:\WINDOWS\system32\akcore.dll
Adware:Adware/Startpage.AAI No desinfectado C:\WINDOWS\system32\mplay32.dll
Aquí termina el scan

post #19

13/12/05, 19:52:46

Jereque

Ex-Colaborador

Registrado: ene 2005

Mensajes: 9.010

Re: Más Problemas despues de Spybot y Kaspersky

Hola!!!

No hay problema con que te detecte eso en el backup de l2mfix, es normal. En el backup se guarda aquello que elimina para que lo puedas recuperar si elimina algo por error, pero nada del backup te puede hacer daño.

De todos modos ya puedes eliminar l2mfix, ya que no lo vas a usar mas.

Elimina estos archivos:

C:\WINDOWS\Downloaded Program Files\WebP2PInstaller.dll
C:\WINDOWS\icont.exe
C:\WINDOWS\system32\akcore.dll
C:\WINDOWS\system32\mplay32.dll

Para archivos que no se dejen eliminar usa KillBox

Después finaliza con estos pasos:

- Pasa al menos 2 de estos Antivirus Online

- Limpia el registro con RegSeeker y pasa Ad-Aware actualizado.

- Elimina cookies y temporales con Disk Cleaner y vacía la papelera.

Reinicias y nos cuentas los resultados

Saludos

Página 2 de 2

« Tema Anterior | Próximo Tema »

Herramientas
Mostrar Versión Imprimible Enviar por Correo

Reglas del foro
No puedes crear nuevos temas No puedes responder temas No puedes subir adjuntos No puedes editar tus mensajes BB code is activado Las caritas están activado Código [IMG] está activado Código HTML está desactivado Trackbacks are desactivado Pingbacks are activado Refbacks are activado Políticas del foro

Temas Similares

Tema	Autor	Foro	Respuestas	Último mensaje
Invasión de Malware S.O.S.!!!	signi	Foro de Virus y Spywares	12	12/04/07 20:27:54
Quiero saber que es Caavsetup (solucionado)	azul	Temas Solucionados	4	01/11/05 10:20:53
problema con el vroomsearch	dasanlos	Foro Oficial de HijackThis en español	5	05/05/05 12:31:01
Me bloquean la conexión a Internet (solucionado)	lopeztruji	Temas Solucionados	7	04/05/05 03:50:30
Gane dinero enviando dinero. La estafa de la pirámide	InfoSpyware	Últimas Noticias	2	10/04/05 14:21:34

Todas las horas son GMT -4. La hora es 23:03:01.

InfoSpyware es miembro de ASAP - Alliance of Security Analysis Professionals

Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus