• Registrarse
  • Iniciar sesión


  • Página 1 de 2 12 ÚltimoÚltimo
    Resultados 1 al 10 de 14

    Express files

    Hola amigos soy nuevo en este foro y me gustaria saber si me podeis ayudar; Mi problema es el siguiente en alguna descarga que efectue se me ha instalado la express files toolbar y no ...

    1. #1
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Express files

      Hola amigos soy nuevo en este foro y me gustaria saber si me podeis ayudar;
      Mi problema es el siguiente en alguna descarga que efectue se me ha instalado la express files toolbar y no hay manera de quitarla y ademas no para de aparecerme publicidad en diferentes webs que antes no lo hacia. Ayer intente eliminarla con el malwarebytes y at destroyer pero me sigue apareciendo. El navegador en el que me aparece es el firefox, que es el que utilizo habitualmente. Os dejo el informe que me dio tanto el malwarebytes y at destroyer. Gracias de antemano

    2. #2
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Re: Express files

      Malwarebytes Anti-Malware (Versión de Prueba) 1.70.0.1100
      Malwarebytes : Free anti-malware download

      Versión de la Base de Datos: v2013.04.01.08

      Windows 7 Service Pack 1 x86 NTFS
      Internet Explorer 9.0.8112.16421
      Ion :: ION-PC [administrador]

      Protección: Personas de movilidad reducida

      01/04/2013 23:49:45
      mbam-log-2013-04-01 (23-49-45).txt

      Tipos de Análisis: Análisis Completo (C:\|)
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 307701
      Tiempo transcurrido: 1 hora(s), 15 minuto(s), 22 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Valores del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 0
      (No se han detectado elementos maliciosos)

      Archivos Detectados: 0
      (No se han detectado elementos maliciosos)

      fin)

    3. #3
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Re: Express files

      Hora/Día/Mes/Año: 17:37:00 \\\ 01/04/2013
      AT-Destroyer 2.1 By Infospyware ---> InfoSpyware
      Última actualización: 30/11/2012
      Opción escogida: 2 :Buscar y Destruir
      Versión Internet Explorer:9.0.8112.16421
      Mozilla Firefox:19.0.2.4814
      Privilegios: Ion - Administrador
      Modo Actual: Modo Normal.
      Nombre del pc: ION-PC
      Información del sistema operativo:X86-WIN_7-Service Pack 1
      nombre del usuario:Ion
      Lenguaje del sistema: Español



      >>>>>>> Servicios <<<<<<<



      >>>>>> Carpetas <<<<<<

      C:\Users\Ion\AppData\Roaming\OfferBox\config.dat (W32/Adware.OfferBox)
      C:\Users\Ion\AppData\Roaming\OfferBox\config.xml (W32/Adware.OfferBox)
      C:\Users\Ion\AppData\Roaming\OfferBox (W32/Adware.OfferBox)
      C:\Users\Ion\AppData\Roaming\Babylon\log_file.txt (W32/PND.Babylon Toolbar)
      C:\Users\Ion\AppData\Roaming\Babylon (W32/PND.Babylon Toolbar)
      C:\Program Files\Ask.com\assets (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\b.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\bl.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\br.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\l.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\pointer.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\r.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\t.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\tl.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\assets\oobe\tr.png (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\cb_a30a.ico (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\cobrand.ico (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\config.xml (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\favicon.ico (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\fv_9acf.ico (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\GenericAskToolbar.dll (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\mupcfg.xml (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\precache.exe (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\SaUpdate.exe (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\Updater (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\Updater\config.xml (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\Updater\Updater.exe (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com\UpdateTask.exe (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Ask.com (W32/Toolbar.ASK Toolbar)
      C:\Program Files\Conduit\Community Alerts 92
      C:\Program Files\Conduit\Community Alerts\Alert.dll 92
      C:\Program Files\Conduit 92
      C:\ProgramData\Babylon (W32/PND.Babylon Toolbar)
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504} 97
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Cache 97
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.dat 97
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.exe 97
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\Setup.ico 97
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setup.dll 97
      C:\ProgramData\Tarma Installer\{361E80BE-388B-4270-BF54-A10C2B756504}\_Setupx.dll 97
      C:\ProgramData\Tarma Installer 97

    4. #4
      Usuario Avatar de M4RTYN
      Registrado
      jun 2012
      Ubicación
      Ecuador
      Mensajes
      5.520

      Re: Express files

      Hola!

      porfavor evita autoresponderte yo te ayudare

      NOTA: el reporte de AT esta incompleto

      Realiza Los Siguientes Pasos (si no puedes con uno salta al siguiente)

      EN MODO SEGURO CON FUNCIONES DE RED

      Descarga,actualiza y realiza un escaneo completo con el malwarebytes:Manual de Malwarebytes Anti-Malware 2

      -Instala el programa con idioma español.
      -Vete a la pestaña actualizar y actualizas a la ultima version
      -Vete a la pestaña Escáner y realizas un Ánalisis completo.
      -Una vez finalizado, pulsa sobre "Mostrar los Resultados " y "Eliminar Seleccionadas" como se demuestra en esta FOTO
      -Todas las amenazas tienen que estar marcadas con un visto ()
      -En el caso de que te pida reiniciar,reinicia.
      -Peganos el reporte del escaneo del malwarebytes despues de reiniciar,esta en la pestaña Registros.


      Descarga Ccleaner:Manual de CCleaner <------------ Este paso es MUY IMPORTANTE

      Ejecutar CCleaner usando primero su opción de "Limpiador" para borrar cookies y temporales de Internet
      Usa su opción de "Registro" para limpiar todo el registro de Windows creando antes una copia de seguridad

      Realiza un análisis completo con Eset Nod32 online ----------> Version Descargable E Instalable: Eset Smart Installer Y mas aca su manual ---------->MANUAL DE ESET ONLINE

      1- Lo ejecutas.

      2-Marcas las casillas de Eliminar las amenazas detectadas y analizar archivos.

      3- Haces clic en Configuración adicional y ahi marcas las casillas:

      - Analizar en busca de aplicaciones potencialmente indeseables.

      - Analizar en busca de aplicaciones potencialmente peligrosas.

      - Activar la tecnolgía Anti-Stealth.



      4- Pulsas en Iniciar para que empiece a descargar la base firmas de virus y posteriormente empiece a analizar tu sistema.

      Cuando acabe haz clic en Finalizar

      5- Localizar el reporte en C:\Archivos de programa\ESET\ESET Online Scanner\log
      • Descarga AT-Destroyer (Adwares/Toolbars-Destroyer) by @Infospyware.
      • Debes cerrar todos los programas que estes usando durante el proceso
      • Desactiva temporalmente el Antivirus y/o Antispyware. o cualquier tipo de defensa que tenga en su PC
      • Ejecuta AT-Destroyer como administrador (Click Derecho Ejecutar como/Como Administrador).
      • Elige la Opcion #1 (Buscar y Destruir)
      • AT-Destroyer desconectará el escritorio momentáneamente.
      • En caso de estar infectado AT DESTROYER le indicara El tipo y numero mediante una Pantalla negra Con los datos anteriormente nombrados
      • Una vez terminado el escaneo, podrás volver a ver el escritorio y se te abrirá un reporte, que deberás copiar en tu próxima respuesta comentando cómo funciona el sistema.
      • NOTA: en la mayoria de los casos pedira un Reinicio de la PC, si esto pasa busque en reporte en C:/AT-Destroyer.txt
      • Si algún programa no inicia, reiniciar la PC.
      • Descarga AdwCleaner En su PC
      • NOTA: Cerra todos los programas antes de ejecutar esta herramienta.
      • Desactiva temporalmente el Antivirus y/o Antispyware. o cualquier tipo de defensa que tenga en su PC
      • Copia en el escritorio el programa Adwcleaner y lo ejecutas Como Administrador (Click Derecho Ejecutar como/Como Administrador).
      • Una Vez abierto le das a Supresión y esperas que termine su trabajo.
      • Se va a abrir un reporte donde muestra lo que detecto, lo copias y lo pegas acá.
      • NOTA: En caso de que EL PROGRAMA te pida reiniciar hazlo .
      • En caso de que no se abra el reporte lo buscas en C:\AdwCleaner[R1].txt


      saludos
      º El reporte del Malwarebytes, que se encuentra en su pestaña REGISTROS
      º El reporte del Eset Nod32
      º El reporte de at destroyer
      º El reporte de AdwCleaner
      º Nos cuentas como funciona tu pc ahora

      *Si tienes alguna duda,te puedes imprimir las instrucciones para hacer un mejor seguimiento.


    5. #5
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Re: Express files

      Problema resuelto, he probado con 3 de las soluciones que me has dado y alguna de ellas me ha funcionado. Muchisimas gracias por tu ayuda M4RTYN y a seguir adelante con este magnifico foro, gracias otra vez.

    6. #6
      Usuario Avatar de M4RTYN
      Registrado
      jun 2012
      Ubicación
      Ecuador
      Mensajes
      5.520

      Re: Express files

      Hola!

      porfavor necesito ver los reportes para saber si sigues o no infectado

      Muchas gracias

      saludos

    7. #7
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Re: Express files

      Hola te envio los reportes que hice tanto con nod 32, At destroyer y Adw cleaner ;

      [email protected] as downloader log:
      all ok
      # version=8
      # OnlineScannerApp.exe=1.0.0.1
      # OnlineScanner.ocx=1.0.0.6920
      # api_version=3.0.2
      # EOSSerial=8f7a581ebbcd60478d673b8563c22982
      # engine=13535
      # end=stopped
      # remove_checked=false
      # archives_checked=true
      # unwanted_checked=false
      # unsafe_checked=false
      # antistealth_checked=true
      # utc_time=2013-04-02 10:15:21
      # local_time=2013-04-03 12:15:21 (+0100, Hora de verano romance)
      # country="Spain"
      # lang=3082
      # osver=6.1.7601 NT Service Pack 1
      # compatibility_mode=771 16777214 16 1 12893641 12893641 0 0
      # compatibility_mode=1039 16777214 100 99 23439 52074905 0 0
      # compatibility_mode=5893 16776574 100 94 12895559 116572112 0 0
      # scanned=3804
      # found=0
      # cleaned=0
      # scan_time=179
      [email protected] as downloader log:
      all ok
      # version=8
      # OnlineScannerApp.exe=1.0.0.1
      # OnlineScanner.ocx=1.0.0.6920
      # api_version=3.0.2
      # EOSSerial=8f7a581ebbcd60478d673b8563c22982
      # engine=13535
      # end=finished
      # remove_checked=true
      # archives_checked=true
      # unwanted_checked=true
      # unsafe_checked=true
      # antistealth_checked=true
      # utc_time=2013-04-02 10:57:25
      # local_time=2013-04-03 12:57:25 (+0100, Hora de verano romance)
      # country="Spain"
      # lang=3082
      # osver=6.1.7601 NT Service Pack 1
      # compatibility_mode=771 16777214 16 1 12896165 12896165 0 0
      # compatibility_mode=1039 16777214 100 99 25963 52077429 0 0
      # compatibility_mode=5893 16776574 100 94 12898083 116574636 0 0
      # scanned=117056
      # found=13
      # cleaned=13
      # scan_time=2469
      sh=1FE9A1561AC63433360ED3BE42B4A16874F2D38E ft=1 fh=f9b72759194a286d vn="una variante de Win32/ExpressFiles.B aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\$Recycle.Bin\S-1-5-21-269256013-287269971-3568377673-1000\$RR9VHQM.exe"
      sh=71435DDB11E00D0243380C4902324853FE4ECE8F ft=1 fh=12b0cd2dde452d65 vn="una variante de Win32/Bundled.Toolbar.Ask aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\AskSLib.dll"
      sh=BAEDA16DA96302258A9D628B6BC517EED0CCF34E ft=1 fh=422019f850331b92 vn="una variante de Win32/InstallCore.BF aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\ICReinstall_HoolappSetup.exe"
      sh=63D8A233223061D42538AD5F8A1552A86C0420CA ft=1 fh=0b75d8cb754ba137 vn="múltiples amenazas (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\toolbar1565516.exe"
      sh=1FE9A1561AC63433360ED3BE42B4A16874F2D38E ft=1 fh=f9b72759194a286d vn="una variante de Win32/ExpressFiles.B aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\uninstall2604857.exe"
      sh=68998EDA1CB7FFA330E3CC18A765B39CDBE1F819 ft=1 fh=cfddd1a22fe3492b vn="una variante de Win32/ExpressFiles.A aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\uninstall2619334.exe"
      sh=027DF2D2944EA506A71D61928674C2CC42A8FE69 ft=1 fh=4c97c45eed1dce37 vn="Win32/Toolbar.Babylon aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbar4ie.exe"
      sh=2D5956DFBEBBA6F8D01462C7401F21130DD449C5 ft=1 fh=2665048a28d2282f vn="Win32/Adware.Yontoo aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\is87173921\ezLooker-S-Setup_Suite1.exe"
      sh=EB6AA6E142A33CEE2C2B47C3C201BDF6B28FA846 ft=1 fh=fc79af95b58d1e11 vn="Win32/Toolbar.Babylon aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Local\Temp\is87173921\MyBabylonTB.exe"
      sh=354BDD57F49997D0A1AB3BADA1339CB33765898B ft=0 fh=0000000000000000 vn="Win32/Adware.Yontoo aplicación (eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\extensions\[email protected]"
      sh=BAEDA16DA96302258A9D628B6BC517EED0CCF34E ft=1 fh=422019f850331b92 vn="una variante de Win32/InstallCore.BF aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\Downloads\HoolappSetup.exe"
      sh=E152F019555DD36CFD47CB994576DD4A745170A8 ft=1 fh=c6adbd57408257ad vn="una variante de Win32/YourFileDownloader.B aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\Downloads\Partition_piano_place_de_la_republique_coeur_de_pirate_downloader_99018.exe"
      sh=27FEDCBC5D35138741B7379EA898028705ADE88D ft=1 fh=e54bbe4432d48edc vn="una variante de Win32/SoftonicDownloader.E aplicación (no se ha podido desinfectar - archivo eliminado - puesto en Cuarentena)" ac=C fn="C:\Users\Ion\Downloads\SoftonicDownloader_para_norton-antivirus-2013.exe"

    8. #8
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Re: Express files

      ######################## AT-Destroyer [2.1] By Infospyware.
      Hora/Día/Mes/Año: 23:57:28 \\\ 02/04/2013
      AT-Destroyer 2.1 By Infospyware ---> InfoSpyware
      Última actualización: 30/11/2012
      Opción escogida: 2 :Buscar y Destruir
      Versión Internet Explorer:9.0.8112.16421
      Mozilla Firefox:19.0.2.4814
      Privilegios: Ion - Administrador
      Modo Actual: Modo Seguro.
      Nombre del pc: ION-PC
      Información del sistema operativo:X86-WIN_7-Service Pack 1
      nombre del usuario:Ion
      Lenguaje del sistema: Español



      >>>>>>> Servicios <<<<<<<



      >>>>>> Carpetas <<<<<<



      >>>>>> Archivos <<<<<<



      >>>>>> Registro <<<<<<

      HKEY_CURRENT_USER\Software\Conduit


      >>>>>> Heurística <<<<<<



      >>>>>> Internet Explorer <<<<<<

      Start Page==www.google.com
      Local Page==C:\Windows\System32\blank.htm
      Search Page==http://go.microsoft.com/fwlink/?LinkId=54896
      Default_search_url==http://go.microsoft.com/fwlink/?LinkId=54896
      Default_Page_URL==http://go.microsoft.com/fwlink/?LinkId=69157


      ''HKCU\Software\Microsoft\Internet Explorer\Main''
      Start Page==www.google.com
      Local Page==C:\Windows\system32\blank.htm
      Search Page==http://go.microsoft.com/fwlink/?LinkId=54896
      Default_search_url==
      Default_Page_URL==


      HKEY_USERS\S-1-5-21-269256013-287269971-3568377673-1000\Software\Microsoft\Internet Explorer\Main''
      Start Page==www.google.com
      Local Page==C:\Windows\system32\blank.htm
      Search Page==http://go.microsoft.com/fwlink/?LinkId=54896
      Default_search_url==
      Default_Page_URL==


      >>>>>> Firefox <<<<<<

      user_pref("browser.startup.homepage", "http://google.com");
      user_pref("browser.startup.homepage_override.buildID", "20130307023931");
      user_pref("browser.startup.homepage_override.mstone", "19.0.2");


      >>>>>> Plugins Firefox <<<<<<

      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.13.2
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308

      ======== Listado ===========

      [26/09/2010 17:18] [13/01/2010 23:36] [DI] C:\Users\Ion\AppData\Roaming\Apple Computer
      [17/12/2012 17:41] [17/12/2012 17:41] [DI] C:\Users\Ion\AppData\Roaming\AVG2013
      [04/11/2009 19:54] [02/11/2009 19:18] [DI] C:\Users\Ion\AppData\Roaming\BSplayer
      [02/11/2009 19:18] [02/11/2009 19:18] [DI] C:\Users\Ion\AppData\Roaming\BSplayer Pro
      [11/02/2013 19:59] [11/02/2013 19:59] [DI] C:\Users\Ion\AppData\Roaming\ExpressFiles
      [05/12/2010 21:49] [05/12/2010 21:06] [DI] C:\Users\Ion\AppData\Roaming\freeTVRadio
      [02/11/2009 18:50] [02/11/2009 18:50] [DI] C:\Users\Ion\AppData\Roaming\Identities
      [02/11/2009 20:52] [02/11/2009 20:52] [DI] C:\Users\Ion\AppData\Roaming\Macromedia
      [01/04/2013 15:41] [01/04/2013 15:41] [DI] C:\Users\Ion\AppData\Roaming\Malwarebytes
      [14/07/2009 11:07] [02/11/2009 18:50] [DI] C:\Users\Ion\AppData\Roaming\Media Center Programs
      [ 28/11/2009 3:35] [ 28/11/2009 3:35] [DI] C:\Users\Ion\AppData\Roaming\Media Player Classic
      [01/04/2013 15:57] [02/11/2009 18:50] [SDI] C:\Users\Ion\AppData\Roaming\Microsoft
      [02/11/2009 19:39] [02/11/2009 19:39] [DI] C:\Users\Ion\AppData\Roaming\Mozilla
      [02/11/2009 19:28] [02/11/2009 19:28] [DI] C:\Users\Ion\AppData\Roaming\OpenOffice.org
      [09/12/2010 18:19] [07/09/2010 1:47] [DI] C:\Users\Ion\AppData\Roaming\Real
      [21/10/2011 19:31] [21/10/2011 19:31] [DI] C:\Users\Ion\AppData\Roaming\Samsung
      [11/09/2012 19:48] [06/11/2009 18:39] [DI] C:\Users\Ion\AppData\Roaming\Skype
      [ 05/12/2011 0:06] [ 02/11/2009 19:49] [DI] C:\Users\Ion\AppData\Roaming\skypePM
      [09/11/2011 21:03] [02/11/2009 19:31] [DI] C:\Users\Ion\AppData\Roaming\Spotify
      [17/12/2012 17:40] [17/12/2012 17:40] [DI] C:\Users\Ion\AppData\Roaming\TuneUp Software
      [25/08/2010 11:36] [25/08/2010 11:36] [DI] C:\Users\Ion\AppData\Roaming\vlc
      [23/08/2010 17:55] [23/08/2010 17:55] [DI] C:\Users\Ion\AppData\Roaming\widestream
      [02/11/2009 19:22] [02/11/2009 19:22] [DI] C:\Users\Ion\AppData\Roaming\WinRAR
      [19/01/2013 12:06] [19/01/2013 12:06] [D] C:\Program Files\Apple Software Update
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\Program Files\Archivos comunes
      [09/02/2011 20:09] [09/02/2011 20:09] [D] C:\Program Files\Ares
      [15/03/2012 18:13] [15/03/2012 18:09] [D] C:\Program Files\AVAST Software
      [17/12/2012 17:38] [17/12/2012 17:38] [D] C:\Program Files\AVG
      [25/08/2010 11:36] [25/08/2010 11:36] [D] C:\Program Files\Babylon
      [16/09/2010 18:38] [16/09/2010 18:38] [D] C:\Program Files\Bonjour
      [17/12/2012 17:31] [14/07/2009 4:37] [D] C:\Program Files\Common Files
      C:\Program Files\desktop.ini [HSA] 174 bytes( 0)
      [27/09/2011 21:43] [14/07/2009 6:52] [D] C:\Program Files\DVD Maker
      [08/06/2010 1:44] [08/06/2010 1:44] [D] C:\Program Files\EA GAMES
      [25/08/2010 11:36] [25/08/2010 11:36] [D] C:\Program Files\Flash Player
      [05/12/2010 21:50] [05/12/2010 21:05] [D] C:\Program Files\freeTVRadio
      [21/10/2011 19:31] [08/06/2010 1:44] [HD] C:\Program Files\InstallShield Installation Information
      [13/03/2013 21:01] [14/07/2009 4:37] [D] C:\Program Files\Internet Explorer
      [16/09/2010 18:42] [16/09/2010 18:42] [D] C:\Program Files\iPod
      [16/09/2010 18:43] [16/09/2010 18:42] [D] C:\Program Files\iTunes
      [05/02/2013 23:43] [01/09/2010 19:10] [D] C:\Program Files\Java
      [02/11/2009 19:30] [02/11/2009 19:30] [D] C:\Program Files\K-Lite Codec Pack
      [01/04/2013 23:48] [01/04/2013 23:48] [D] C:\Program Files\Malwarebytes' Anti-Malware
      [21/10/2011 19:31] [21/10/2011 19:31] [D] C:\Program Files\MarkAny
      [14/07/2009 11:08] [14/07/2009 6:52] [D] C:\Program Files\Microsoft Games
      [13/03/2013 21:03] [02/11/2009 19:26] [D] C:\Program Files\Microsoft Silverlight
      [27/01/2011 17:40] [27/01/2011 17:40] [D] C:\Program Files\Microsoft SQL Server Compact Edition
      [11/09/2012 19:51] [11/09/2012 19:51] [D] C:\Program Files\Microsoft.NET
      [26/09/2010 17:14] [26/09/2010 17:14] [D] C:\Program Files\Movie Maker 2.6
      [08/03/2013 21:49] [08/03/2013 21:49] [D] C:\Program Files\Mozilla Firefox
      [09/03/2013 12:38] [29/04/2012 18:35] [D] C:\Program Files\Mozilla Maintenance Service
      [06/06/2011 21:02] [06/06/2011 21:01] [D] C:\Program Files\MPAccess
      [14/07/2009 6:52] [14/07/2009 6:52] [D] C:\Program Files\MSBuild
      [02/11/2009 19:28] [02/11/2009 19:28] [D] C:\Program Files\OpenOffice.org 3
      [01/10/2010 17:31] [30/09/2010 19:05] [D] C:\Program Files\Panda Security
      [02/11/2009 19:24] [02/11/2009 19:24] [D] C:\Program Files\PDFCreator
      [16/09/2010 18:41] [16/09/2010 18:41] [D] C:\Program Files\QuickTime
      [07/09/2010 1:48] [07/09/2010 1:47] [D] C:\Program Files\Real
      [14/07/2009 6:52] [14/07/2009 6:52] [D] C:\Program Files\Reference Assemblies
      [21/10/2011 19:32] [21/10/2011 19:31] [D] C:\Program Files\Samsung
      [01/04/2013 15:31] [06/11/2009 18:38] [RD] C:\Program Files\Skype
      [02/09/2012 20:13] [02/09/2012 20:13] [D] C:\Program Files\SopCast
      [02/11/2009 19:31] [02/11/2009 19:31] [D] C:\Program Files\Spotify
      [14/07/2009 6:53] [14/07/2009 6:53] [HD] C:\Program Files\Uninstall Information
      [05/01/2011 22:08] [05/01/2011 22:08] [D] C:\Program Files\vShare
      [02/11/2009 19:18] [02/11/2009 19:18] [D] C:\Program Files\Webteh
      [27/09/2011 21:43] [14/07/2009 6:52] [D] C:\Program Files\Windows Defender
      [11/09/2012 19:36] [14/07/2009 11:08] [D] C:\Program Files\Windows Journal
      [02/07/2012 23:47] [02/11/2009 19:25] [D] C:\Program Files\Windows Live
      [27/09/2011 21:43] [14/07/2009 4:37] [D] C:\Program Files\Windows Mail
      [27/09/2011 21:43] [14/07/2009 6:52] [D] C:\Program Files\Windows Media Player
      [02/11/2009 18:50] [14/07/2009 4:37] [D] C:\Program Files\Windows NT
      [27/09/2011 21:43] [14/07/2009 6:52] [D] C:\Program Files\Windows Photo Viewer
      [27/09/2011 21:43] [14/07/2009 6:52] [D] C:\Program Files\Windows Portable Devices
      [27/09/2011 21:43] [14/07/2009 6:52] [D] C:\Program Files\Windows Sidebar
      [02/11/2009 19:22] [02/11/2009 19:22] [D] C:\Program Files\WinRAR
      [13/01/2010 23:28] [13/01/2010 23:28] [DI] C:\ProgramData\Apple
      [16/09/2010 18:41] [13/01/2010 23:29] [DI] C:\ProgramData\Apple Computer
      [14/07/2009 6:53] [14/07/2009 6:53] [HSDLI] C:\ProgramData\Application Data
      [04/11/2012 17:41] [15/03/2012 18:09] [DI] C:\ProgramData\AVAST Software
      [17/12/2012 17:40] [17/12/2012 17:39] [DI] C:\ProgramData\AVG2013
      [17/12/2012 17:35] [17/12/2012 17:35] [HD] C:\ProgramData\Common Files
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\ProgramData\Datos de programa
      [14/07/2009 6:53] [14/07/2009 6:53] [HSDLI] C:\ProgramData\Desktop
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\ProgramData\Documentos
      [14/07/2009 6:53] [14/07/2009 6:53] [HSDLI] C:\ProgramData\Documents
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\ProgramData\Escritorio
      C:\ProgramData\ezsidmv.dat [AI] 56 bytes 0
      [14/07/2009 6:53] [14/07/2009 6:53] [HSDLI] C:\ProgramData\Favorites
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\ProgramData\Favoritos
      [01/04/2013 15:41] [01/04/2013 15:41] [DI] C:\ProgramData\Malwarebytes
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\ProgramData\Menú Inicio
      [02/04/2013 17:44] [17/12/2012 17:35] [DI] C:\ProgramData\MFAData
      [18/12/2012 17:20] [14/07/2009 4:37] [SDI] C:\ProgramData\Microsoft
      [29/04/2012 18:35] [29/04/2012 18:35] [DI] C:\ProgramData\Mozilla
      [17/12/2012 17:31] [02/11/2009 19:45] [DI] C:\ProgramData\Norton
      [01/10/2010 17:50] [02/11/2009 19:44] [DI] C:\ProgramData\NortonInstaller
      [04/11/2009 20:00] [02/11/2009 19:12] [DI] C:\ProgramData\NVIDIA
      [02/11/2009 18:50] [02/11/2009 18:50] [HSDLI] C:\ProgramData\Plantillas
      [09/12/2010 18:19] [07/09/2010 1:47] [DI] C:\ProgramData\Real
      [21/10/2011 19:32] [21/10/2011 19:31] [DI] C:\ProgramData\Samsung
      [11/09/2012 19:46] [02/11/2009 19:43] [DI] C:\ProgramData\Skype
      [14/07/2009 6:53] [14/07/2009 6:53] [HSDLI] C:\ProgramData\Start Menu
      [01/09/2010 19:11] [01/09/2010 19:11] [DI] C:\ProgramData\Sun
      [04/11/2009 17:34] [04/11/2009 17:34] [DI] C:\ProgramData\Symantec
      [14/07/2009 6:53] [14/07/2009 6:53] [HSDLI] C:\ProgramData\Templates
      [16/09/2010 18:43] [16/09/2010 18:42] [DI] C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
      [13/01/2010 23:35] [13/01/2010 23:35] [DI] C:\ProgramData\{755AC846-7372-4AC8-8550-C52491DAA8BD}

      ==================== EOF ==================

    9. #9
      Usuario Avatar de wakon84
      Registrado
      abr 2013
      Ubicación
      españa
      Mensajes
      28

      Re: Express files

      # AdwCleaner v2.200 - Fichero creado el 03/04/2013 a 01:01:58
      # Actualizado el 02/04/2013 por Xplode
      # Sistema operativo : Windows 7 Ultimate Service Pack 1 (32 bits)
      # Usuario : Ion - ION-PC
      # Modo de inicio : Modo seguro con funciones de red
      # Ejecutado desde : C:\Users\Ion\Desktop\adwcleaner.exe
      # Opción [Supresión]


      ***** [Servicios] *****


      ***** [Ficheros / Carpetas] *****

      Carpeta Suprimido : C:\Program Files\Babylon
      Carpeta Suprimido : C:\Program Files\freeTVRadio
      Carpeta Suprimido : C:\Program Files\vShare
      Carpeta Suprimido : C:\Users\Ion\AppData\Local\Conduit
      Carpeta Suprimido : C:\Users\Ion\AppData\Local\freetvradio Air
      Carpeta Suprimido : C:\Users\Ion\AppData\Local\Temp\AskSearch
      Carpeta Suprimido : C:\Users\Ion\AppData\Local\Temp\BabylonToolbar
      Carpeta Suprimido : C:\Users\Ion\AppData\Local\Temp\CT3176921
      Carpeta Suprimido : C:\Users\Ion\AppData\Local\widestream6 Air
      Carpeta Suprimido : C:\Users\Ion\AppData\LocalLow\AskToolbar
      Carpeta Suprimido : C:\Users\Ion\AppData\LocalLow\BabylonToolbar
      Carpeta Suprimido : C:\Users\Ion\AppData\LocalLow\Conduit
      Carpeta Suprimido : C:\Users\Ion\AppData\LocalLow\facemoods.com
      Carpeta Suprimido : C:\Users\Ion\AppData\LocalLow\vShare
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\freeTVRadio
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\Conduit
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\CT3176921
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\extensions\{88ac3cb6-596b-4217-964c-b6757ef9602d}
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\extensions\[email protected]
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\extensions\[email protected]
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\extensions\[email protected]
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\Smartbar
      Carpeta Suprimido : C:\Users\Ion\AppData\Roaming\widestream
      Carpeta Suprimido : C:\Users\Ion\Documents\widestream
      Carpeta Suprimido : C:\Windows\Installer\{2C8574B5-6935-4FCE-860E-F4E8602378FF}
      Carpeta Suprimido : C:\Windows\Installer\{38470B46-9BF1-40AE-A588-F6AD6D1C2D42}
      Carpeta Suprimido : C:\Windows\Installer\{835525BE-63BD-4EC4-9425-00CEAD4849C2}
      Carpeta Suprimido : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
      Fichero Suprimido : C:\END
      Fichero Suprimido : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\searchplugins\Askcom.xml

      ***** [Registro] *****

      Clave Supprimida : HKCU\Software\APN
      Clave Supprimida : HKCU\Software\AppDataLow\Software\AskToolbar
      Clave Supprimida : HKCU\Software\AppDataLow\Software\Conduit
      Clave Supprimida : HKCU\Software\AppDataLow\Software\SmartBar
      Clave Supprimida : HKCU\Software\Ask.com
      Clave Supprimida : HKCU\Software\Conduit
      Clave Supprimida : HKCU\Software\FissaSearch
      Clave Supprimida : HKCU\Software\freeTVRadio
      Clave Supprimida : HKCU\Software\InstallCore
      Clave Supprimida : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
      Clave Supprimida : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{043C5167-00BB-4324-AF7E-62013FAEDACF}
      Clave Supprimida : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
      Clave Supprimida : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFBCB7E0-F91A-4951-9F31-58FEE57A25C4}
      Clave Supprimida : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{043C5167-00BB-4324-AF7E-62013FAEDACF}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2EECD738-5844-4A99-B4B6-146BF802613B}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{043C5167-00BB-4324-AF7E-62013FAEDACF}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Clave Supprimida : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
      Clave Supprimida : HKCU\Software\Softonic
      Clave Supprimida : HKCU\Software\Spointer
      Clave Supprimida : HKCU\Software\vShare
      Clave Supprimida : HKCU\Software\WideStream
      Clave Supprimida : HKLM\Software\APN
      Clave Supprimida : HKLM\Software\AskToolbar
      Clave Supprimida : HKLM\Software\AVG Secure Search
      Clave Supprimida : HKLM\Software\Babylon
      Clave Supprimida : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
      Clave Supprimida : HKLM\SOFTWARE\Classes\AppID\{5B1881D1-D9C7-46DF-B041-1E593282C7D0}
      Clave Supprimida : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
      Clave Supprimida : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
      Clave Supprimida : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
      Clave Supprimida : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr
      Clave Supprimida : HKLM\SOFTWARE\Classes\bbylntlbr.bbylntlbrHlpr.1
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{043C5167-00BB-4324-AF7E-62013FAEDACF}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}
      Clave Supprimida : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}
      Clave Supprimida : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr
      Clave Supprimida : HKLM\SOFTWARE\Classes\facemoods.facemoodsHlpr.1
      Clave Supprimida : HKLM\Software\Classes\Installer\Features\A28B4D68DEBAA244EB686953B7074FEF
      Clave Supprimida : HKLM\Software\Classes\Installer\Products\A28B4D68DEBAA244EB686953B7074FEF
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{20ED5AF7-D9C4-409E-9EB3-D2A44A77FB6D}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{A9379648-F6EB-4F65-A624-1C10411A15D0}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Interface\{F16AB1DB-15C0-4456-A29E-4DF24FB9E3D2}
      Clave Supprimida : HKLM\SOFTWARE\Classes\Prod.cap
      Clave Supprimida : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\vsharechrome
      Clave Supprimida : HKLM\SOFTWARE\Classes\Toolbar.CT2431232
      Clave Supprimida : HKLM\SOFTWARE\Classes\Toolbar.CT2720081
      Clave Supprimida : HKLM\SOFTWARE\Classes\Toolbar.CT3176921
      Clave Supprimida : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
      Clave Supprimida : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
      Clave Supprimida : HKLM\SOFTWARE\Classes\TypeLib\{3E315C81-442B-431C-AEC8-ED189699EC24}
      Clave Supprimida : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol
      Clave Supprimida : HKLM\SOFTWARE\Classes\vShare.IMedixProtocol.1
      Clave Supprimida : HKLM\SOFTWARE\Classes\vShare.PugiObj
      Clave Supprimida : HKLM\SOFTWARE\Classes\vShare.PugiObj.1
      Clave Supprimida : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers
      Clave Supprimida : HKLM\SOFTWARE\Classes\vShare.ScriptHelpers.1
      Clave Supprimida : HKLM\SOFTWARE\Google\Chrome\Extensions\ihflimipbcaljfnojhhknppphnnciiif
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{043C5167-00BB-4324-AF7E-62013FAEDACF}
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\Babylon_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\BabylonToolbarsrv_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\offerbox_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\offerbox_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\WajamUpdater_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\Widestream_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\Widestream_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\Widestream6-setup_RASAPI32
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Tracing\Widestream6-setup_RASMANCS
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{043C5167-00BB-4324-AF7E-62013FAEDACF}
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3B7599DF-3D5D-4EF5-BF51-9C2EDA788E83}
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\063A857434EDED11A893800002C0A966
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
      Clave Supprimida : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
      Clave Supprimida : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\vShare
      Valor Supprimida : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{043C5167-00BB-4324-AF7E-62013FAEDACF}]
      Valor Supprimida : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
      Valor Supprimida : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{00000000-6E41-4FD3-8538-502F5495E5FC}]
      Valor Supprimida : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{043C5167-00BB-4324-AF7E-62013FAEDACF}]

      ***** [Navegadores] *****

      -\\ Internet Explorer v9.0.8112.16470

      [OK] El registro no contiene ninguna entrada ilegítima.

      -\\ Mozilla Firefox v19.0.2 (es-ES)

      Fichero : C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\prefs.js

      C:\Users\Ion\AppData\Roaming\Mozilla\Firefox\Profiles\ciwtjx3f.default\user.js ... Suprimido !

      Supprimida : user_pref("CT2431232.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
      Supprimida : user_pref("CT2431232.CTID", "CT2431232");
      Supprimida : user_pref("CT2431232.CurrentServerDate", "25-9-2010");
      Supprimida : user_pref("CT2431232.DialogsAlignMode", "LTR");
      Supprimida : user_pref("CT2431232.EMailNotifierPollDate", "Sat Sep 25 2010 21:22:53 GMT+0200 (Hora de verano roma[...]
      Supprimida : user_pref("CT2431232.FeedLastCount1063733374094621395", 888);
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972503", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972509", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972515", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972521", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972527", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972533", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972539", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972545", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972551", "Sat Sep 25 2010 20:22:52 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972557", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972563", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972569", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972575", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972581", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972587", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972593", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972599", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972605", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972611", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972617", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756972623", "Sat Sep 25 2010 20:22:53 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973437", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973443", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973449", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973455", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973461", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973467", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973473", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973479", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973485", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973491", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedPollDate129212126756973497", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de ve[...]
      Supprimida : user_pref("CT2431232.FeedTTL129212126756972521", 60);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756972533", 30);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756972539", 60);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756972551", 4);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756972563", 36000);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756972575", 10);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756973437", 15);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756973443", 60);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756973467", 16);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756973473", 36000);
      Supprimida : user_pref("CT2431232.FeedTTL129212126756973491", 10);
      Supprimida : user_pref("CT2431232.FirstServerDate", "1-7-2010");
      Supprimida : user_pref("CT2431232.FirstTime", true);
      Supprimida : user_pref("CT2431232.FirstTimeFF3", true);
      Supprimida : user_pref("CT2431232.FixPageNotFoundErrors", true);
      Supprimida : user_pref("CT2431232.GroupingServerCheckInterval", 1440);
      Supprimida : user_pref("CT2431232.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
      Supprimida : user_pref("CT2431232.Initialize", true);
      Supprimida : user_pref("CT2431232.InitializeCommonPrefs", true);
      Supprimida : user_pref("CT2431232.InstalledDate", "Thu Jul 01 2010 22:00:56 GMT+0200 (Hora de verano romance)");
      Supprimida : user_pref("CT2431232.InvalidateCache", false);
      Supprimida : user_pref("CT2431232.IsGrouping", false);
      Supprimida : user_pref("CT2431232.IsMulticommunity", false);
      Supprimida : user_pref("CT2431232.IsOpenThankYouPage", false);
      Supprimida : user_pref("CT2431232.IsOpenUninstallPage", true);
      Supprimida : user_pref("CT2431232.LanguagePackLastCheckTime", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de verano [...]
      Supprimida : user_pref("CT2431232.LanguagePackReloadIntervalMM", 1440);
      Supprimida : user_pref("CT2431232.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx[...]
      Supprimida : user_pref("CT2431232.LastLogin_2.5.8.6", "Sat Sep 25 2010 20:22:50 GMT+0200 (Hora de verano romance)[...]
      Supprimida : user_pref("CT2431232.LatestVersion", "2.7.2.0");
      Supprimida : user_pref("CT2431232.Locale", "es-es");
      Supprimida : user_pref("CT2431232.LoginCache", 4);
      Supprimida : user_pref("CT2431232.MCDetectTooltipHeight", "83");
      Supprimida : user_pref("CT2431232.MCDetectTooltipUrl", "hxxp:[email protected]_INSTALL_LINK@/rank/tooltip/?version=1");
      Supprimida : user_pref("CT2431232.MCDetectTooltipWidth", "295");
      Supprimida : user_pref("CT2431232.RadioIsPodcast", false);
      Supprimida : user_pref("CT2431232.RadioLastCheckTime", "Sat Sep 25 2010 20:22:51 GMT+0200 (Hora de verano romance[...]
      Supprimida : user_pref("CT2431232.RadioLastUpdateIPServer", "3");
      Supprimida : user_pref("CT2431232.RadioLastUpdateServer", "129193485567170000");
      Supprimida : user_pref("CT2431232.RadioMediaID", "20697147");
      Supprimida : user_pref("CT2431232.RadioMediaType", "Media Player");
      Supprimida : user_pref("CT2431232.RadioMenuSelectedID", "EBRadioMenu_CT243123220697147");
      Supprimida : user_pref("CT2431232.RadioStationName", "California%20Rock");
      Supprimida : user_pref("CT2431232.RadioStationURL", "hxxp://feedlive.net/california.asx");
      Supprimida : user_pref("CT2431232.SHRINK_TOOLBAR", 1);
      Supprimida : user_pref("CT2431232.SearchEngine", "Buscar||hxxp://search.conduit.com/Results.aspx?q=UCM_SEARCH_TER[...]
      Supprimida : user_pref("CT2431232.SearchFromAddressBarIsInit", true);
      Supprimida : user_pref("CT2431232.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT243[...]
      Supprimida : user_pref("CT2431232.SearchInNewTabEnabled", true);
      Supprimida : user_pref("CT2431232.SearchInNewTabIntervalMM", 1440);
      Supprimida : user_pref("CT2431232.SearchInNewTabLastCheckTime", "Sat Sep 25 2010 20:22:49 GMT+0200 (Hora de veran[...]
      Supprimida : user_pref("CT2431232.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_T[...]
      Supprimida : user_pref("CT2431232.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageServic[...]
      Supprimida : user_pref("CT2431232.SearchInNewTabUserEnabled", false);
      Supprimida : user_pref("CT2431232.SettingsCheckIntervalMin", 120);
      Supprimida : user_pref("CT2431232.SettingsLastCheckTime", "Sat Sep 25 2010 20:22:49 GMT+0200 (Hora de verano roma[...]
      Supprimida : user_pref("CT2431232.SettingsLastUpdate", "1277823967");
      Supprimida : user_pref("CT2431232.ThirdPartyComponentsInterval", 504);
      Supprimida : user_pref("CT2431232.ThirdPartyComponentsLastCheck", "Sat Sep 25 2010 20:22:49 GMT+0200 (Hora de ver[...]
      Supprimida : user_pref("CT2431232.ThirdPartyComponentsLastUpdate", "1277823967");
      Supprimida : user_pref("CT2431232.TrusteLinkUrl", "hxxp://www.truste.org/pvr.php?page=validate&softwareProgramId=[...]
      Supprimida : user_pref("CT2431232.Uninstall", true);
      Supprimida : user_pref("CT2431232.UserID", "UN07369529796177511");
      Supprimida : user_pref("CT2431232.WeatherNetwork", "");
      Supprimida : user_pref("CT2431232.WeatherPollDate", "Sat Sep 25 2010 21:22:53 GMT+0200 (Hora de verano romance)")[...]
      Supprimida : user_pref("CT2431232.WeatherUnit", "C");
      Supprimida : user_pref("CT2431232.alertChannelId", "825439");
      Supprimida : user_pref("CT2431232.clientLogIsEnabled", false);
      Supprimida : user_pref("CT2431232.clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asm[...]
      Supprimida : user_pref("CT2431232.myStuffEnabled", true);
      Supprimida : user_pref("CT2431232.myStuffPublihserMinWidth", 400);
      Supprimida : user_pref("CT2431232.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOr[...]
      Supprimida : user_pref("CT2431232.myStuffServiceIntervalMM", 1440);
      Supprimida : user_pref("CT2431232.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?Co[...]
      Supprimida : user_pref("CT2431232.uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/Reg[...]
      Supprimida : user_pref("CT3176921.1000082.isPlayDisplay", "true");
      Supprimida : user_pref("CT3176921.1000082.state", "{\"state\":\"stopped\",\"text\":\"Californi...\",\"description[...]
      Supprimida : user_pref("CT3176921.1000234.TWC_TMP_city", "PARIS");
      Supprimida : user_pref("CT3176921.1000234.TWC_TMP_country", "FR");
      Supprimida : user_pref("CT3176921.1000234.TWC_country", "FRANCE");
      Supprimida : user_pref("CT3176921.1000234.TWC_locId", "FRXX0076");
      Supprimida : user_pref("CT3176921.1000234.TWC_location", "Paris, France");
      Supprimida : user_pref("CT3176921.1000234.TWC_region", "FR");
      Supprimida : user_pref("CT3176921.1000234.TWC_temp_dis", "c");
      Supprimida : user_pref("CT3176921.1000234.TWC_wind_dis", "kmh");
      Supprimida : user_pref("CT3176921.1000234.weatherData", "{\"icon\":\"14.png\",\"temperature\":\"1°C\",\"temperatu[...]
      Supprimida : user_pref("CT3176921.129711077405682129.isToggled_item0_12", "true");
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000paramsGK1.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzYxMj[...]
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_followers.enc", "MHgwMDM[...]
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_followers_count.enc", "M[...]
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_following.enc", "");
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_following_count.enc", "M[...]
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_home.enc", "MHgwMDMxLDB4[...]
      Supprimida : user_pref("CT3176921.3176921a129719618372458539000000twitterTemplate_notify_home_count.enc", "Nw==")[...]
      Supprimida : user_pref("CT3176921.3176921a129720553164390415000000paramsGK0.enc", "eyJ1cGRhdGVSZXFUaW1lIjoxMzYxMj[...]
      Supprimida : user_pref("CT3176921.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"false\"}");
      Supprimida : user_pref("CT3176921.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
      Supprimida : user_pref("CT3176921.FF19Solved", "true");
      Supprimida : user_pref("CT3176921.FirstTime", "true");
      Supprimida : user_pref("CT3176921.FirstTimeFF3", "true");
      Supprimida : user_pref("CT3176921.LoginRevertSettingsEnabled", true);
      Supprimida : user_pref("CT3176921.PG_ENABLE", "dHJ1ZQ==");
      Supprimida : user_pref("CT3176921.PG_ENABLE.enc", "dHJ1ZQ==");
      Supprimida : user_pref("CT3176921.PrintItGreenStatus.enc", "dHJ1ZQ==");
      Supprimida : user_pref("CT3176921.RevertSettingsEnabled", true);
      Supprimida : user_pref("CT3176921.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT317[...]
      Supprimida : user_pref("CT3176921.TopHitsConfig.enc", "ew0KICAgICJzcHJpdGVVcmwiOiAiaHR0cDovL2NhcDEuY29uZHVpdC1hcH[...]
      Supprimida : user_pref("CT3176921.UserID", "UN24272361132458032");
      Supprimida : user_pref("CT3176921.addressBarTakeOverEnabledInHidden", "true");
      Supprimida : user_pref("CT3176921.autoDisableScopes", -1);
      Supprimida : user_pref("CT3176921.browser.search.defaultthis.engineName", "true");
      Supprimida : user_pref("CT3176921.cbfirsttime.enc", "TW9uIEZlYiAxMSAyMDEzIDIwOjAwOjE5IEdNVCswMTAw");
      Supprimida : user_pref("CT3176921.defaultSearch", "true");
      Supprimida : user_pref("CT3176921.embeddedsData", "[{\"appId\":\"10000002\",\"apiPermissions\":{\"crossDomainAjax[...]
      Supprimida : user_pref("CT3176921.enableAlerts", "always");
      Supprimida : user_pref("CT3176921.enableFix404ByUser", "FALSE");
      Supprimida : user_pref("CT3176921.enableSearchFromAddressBar", "true");
      Supprimida : user_pref("CT3176921.firstTimeDialogOpened", "true");
      Supprimida : user_pref("CT3176921.fixPageNotFoundError", "true");
      Supprimida : user_pref("CT3176921.fixPageNotFoundErrorByUser", "true");
      Supprimida : user_pref("CT3176921.fixPageNotFoundErrorInHidden", "true");
      Supprimida : user_pref("CT3176921.fixUrls", true);
      Supprimida : user_pref("CT3176921.hxxp___cdn_printitgreen_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPW5vLGhzY3JvbGw[...]
      Supprimida : user_pref("CT3176921.installDate", "11/2/2013 20:00:03");
      Supprimida : user_pref("CT3176921.installId", "stub.exe");
      Supprimida : user_pref("CT3176921.installType", "conduitnsisintegration");
      Supprimida : user_pref("CT3176921.isCheckedStartAsHidden", true);
      Supprimida : user_pref("CT3176921.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Supprimida : user_pref("CT3176921.isFirstTimeToolbarLoading", "false");
      Supprimida : user_pref("CT3176921.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"true\"}");
      Supprimida : user_pref("CT3176921.keyword", "true");
      Supprimida : user_pref("CT3176921.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
      Supprimida : user_pref("CT3176921.lastVersion", "10.15.0.562");
      Supprimida : user_pref("CT3176921.mam_gk_CouponBuddy_appState.enc", "b24=");
      Supprimida : user_pref("CT3176921.mam_gk_PriceGong_appState.enc", "b24=");
      Supprimida : user_pref("CT3176921.mam_gk_appStateReportTime.enc", "MTM2MTgxMjQyOTQ3Nw==");
      Supprimida : user_pref("CT3176921.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
      Supprimida : user_pref("CT3176921.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
      Supprimida : user_pref("CT3176921.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
      Supprimida : user_pref("CT3176921.mam_gk_currentVersion.enc", "MS40LjAuNA==");
      Supprimida : user_pref("CT3176921.mam_gk_first_time.enc", "MQ==");
      Supprimida : user_pref("CT3176921.mam_gk_installer_preapproved.enc", "dHJ1ZQ==");
      Supprimida : user_pref("CT3176921.mam_gk_lastLoginTime.enc", "MTM2MTgxMjQyNTM0OQ==");
      Supprimida : user_pref("CT3176921.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJQb2zDrXRp[...]
      Supprimida : user_pref("CT3176921.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
      Supprimida : user_pref("CT3176921.mam_gk_settings1.4.0.4.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
      Supprimida : user_pref("CT3176921.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
      Supprimida : user_pref("CT3176921.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
      Supprimida : user_pref("CT3176921.mam_gk_userId.enc", "MjhhNWU0MWEtNzBiMS00YTg4LWE0MWMtYmY5YmNlODMxODc0");
      Supprimida : user_pref("CT3176921.mam_gk_user_apps_selection.enc", "");
      Supprimida : user_pref("CT3176921.migrateAppsAndComponents", true);
      Supprimida : user_pref("CT3176921.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fwww.forospyware.[...]
      Supprimida : user_pref("CT3176921.openThankYouPage", "false");
      Supprimida : user_pref("CT3176921.openUninstallPage", "true");
      Supprimida : user_pref("CT3176921.revertSettingsEnabled", "false");
      Supprimida : user_pref("CT3176921.search.searchAppId", "10000002");
      Supprimida : user_pref("CT3176921.search.searchCount", "2");
      Supprimida : user_pref("CT3176921.searchInNewTabEnabledByUser", "true");
      Supprimida : user_pref("CT3176921.searchInNewTabEnabledInHidden", "true");
      Supprimida : user_pref("CT3176921.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"false\"}");
      Supprimida : user_pref("CT3176921.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
      Supprimida : user_pref("CT3176921.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
      Supprimida : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
      Supprimida : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
      Supprimida : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
      Supprimida : user_pref("CT3176921.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
      Supprimida : user_pref("CT3176921.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1364078404556");
      Supprimida : user_pref("CT3176921.serviceLayer_services_appsMetadata_lastUpdate", "1364940083117");
      Supprimida : user_pref("CT3176921.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1364419579417");
      Supprimida : user_pref("CT3176921.serviceLayer_services_location_lastUpdate", "1364938748520");
      Supprimida : user_pref("CT3176921.serviceLayer_services_login_10.14.42.7_lastUpdate", "1360788460904");
      Supprimida : user_pref("CT3176921.serviceLayer_services_login_10.14.65.43_lastUpdate", "1364143283445");
      Supprimida : user_pref("CT3176921.serviceLayer_services_login_10.15.0.562_lastUpdate", "1364938749016");
      Supprimida : user_pref("CT3176921.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1364419579491");
      Supprimida : user_pref("CT3176921.serviceLayer_services_searchAPI_lastUpdate", "1364938748666");
      Supprimida : user_pref("CT3176921.serviceLayer_services_serviceMap_lastUpdate", "1364938748210");
      Supprimida : user_pref("CT3176921.serviceLayer_services_setupAPI_lastUpdate", "1364128883444");
      Supprimida : user_pref("CT3176921.serviceLayer_services_toolbarContextMenu_lastUpdate", "1364419579078");
      Supprimida : user_pref("CT3176921.serviceLayer_services_toolbarSettings_lastUpdate", "1364940083142");
      Supprimida : user_pref("CT3176921.serviceLayer_services_translation_lastUpdate", "1364938749004");
      Supprimida : user_pref("CT3176921.settingsINI", true);
      Supprimida : user_pref("CT3176921.shouldFirstTimeDialog", "false");
      Supprimida : user_pref("CT3176921.showToolbarPermission", "false");
      Supprimida : user_pref("CT3176921.smartbar.CTID", "CT3176921");
      Supprimida : user_pref("CT3176921.smartbar.Uninstall", "0");
      Supprimida : user_pref("CT3176921.smartbar.toolbarName", "express-files ");
      Supprimida : user_pref("CT3176921.startPage", "true");
      Supprimida : user_pref("CT3176921.toolbarBornServerTime", "11-2-2013");
      Supprimida : user_pref("CT3176921.toolbarCurrentServerTime", "3-4-2013");
      Supprimida : user_pref("CT3176921.toolbarLoginClientTime", "Sun Mar 24 2013 20:29:58 GMT+0100");
      Supprimida : user_pref("CT3176921.twitterTemplate_3176921a129719618372458539000000_DailyActivity.enc", "MTM2MTIxN[...]
      Supprimida : user_pref("CT3176921.twitterTemplate_3176921a129719618372458539000000_LifetimeSent.enc", "VFJVRQ==")[...]
      Supprimida : user_pref("CT3176921.twitter_v1.8.0_twitter_app_open_t_f.enc", "ZmFsc2U=");
      Supprimida : user_pref("CT3176921.url_history0001.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEz[...]
      Supprimida : user_pref("CT3176921_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
      Supprimida : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "chrome://browser-region/locale/region.pr[...]
      Supprimida : user_pref("CommunityToolbar.ToolbarsList", "CT2431232");
      Supprimida : user_pref("CommunityToolbar.ToolbarsList2", "CT2431232");
      Supprimida : user_pref("CommunityToolbar.facebook.settingsLastCheckTime", "Thu Sep 02 2010 00:52:53 GMT+0200 (Hor[...]
      Supprimida : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2431232");
      Supprimida : user_pref("CommunityToolbar.twitter.user_14293310.LastCheckTime", "Thu Sep 02 2010 00:52:56 GMT+0200[...]
      Supprimida : user_pref("CommunityToolbar.twitter.user_2557521.LastCheckTime", "Thu Sep 02 2010 00:52:56 GMT+0200 [...]
      Supprimida : user_pref("CommunityToolbar.twitter.user_428333.LastCheckTime", "Thu Sep 02 2010 00:52:56 GMT+0200 ([...]
      Supprimida : user_pref("CommunityToolbar.twitter.user_807095.LastCheckTime", "Thu Sep 02 2010 00:52:56 GMT+0200 ([...]
      Supprimida : user_pref("Smartbar.ConduitSearchEngineList", "");
      Supprimida : user_pref("Smartbar.ConduitSearchUrlList", "");
      Supprimida : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://websearch.ask.com/redirect?client=ff&src=[...]
      Supprimida : user_pref("Smartbar.keywordURLSelectedCTID", "CT3176921");
      Supprimida : user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
      Supprimida : user_pref("browser.search.defaultthis.engineName", "express-files Customized Web Search");
      Supprimida : user_pref("extensions.BabylonToolbar.aflt", "orgnl");
      Supprimida : user_pref("extensions.BabylonToolbar.bbDpng", 8);
      Supprimida : user_pref("extensions.BabylonToolbar.cntry", "FR");
      Supprimida : user_pref("extensions.BabylonToolbar.firstRun", false);
      Supprimida : user_pref("extensions.BabylonToolbar.hdrMd5", "25829BB75B9B11B6A74942ADF39AAE6E");
      Supprimida : user_pref("extensions.BabylonToolbar.lastActv", "27");
      Supprimida : user_pref("extensions.BabylonToolbar.lastDP", 8);
      Supprimida : user_pref("extensions.BabylonToolbar.lastVrsn", "1.1.5");
      Supprimida : user_pref("extensions.BabylonToolbar.lastVrsnTs", "");
      Supprimida : user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "7.0");
      Supprimida : user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
      Supprimida : user_pref("extensions.BabylonToolbar.propectorlck", 59336174);
      Supprimida : user_pref("extensions.BabylonToolbar.smplGrp", "free");
      Supprimida : user_pref("extensions.BabylonToolbar_i.aflt", "babsst");
      Supprimida : user_pref("extensions.BabylonToolbar_i.babExt", "");
      Supprimida : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=113480&tt=060612_5_");
      Supprimida : user_pref("extensions.BabylonToolbar_i.hardId", "348a6e980000000000000625d342d037");
      Supprimida : user_pref("extensions.BabylonToolbar_i.id", "348a6e980000000000000625d342d037");
      Supprimida : user_pref("extensions.BabylonToolbar_i.instlDay", "15507");
      Supprimida : user_pref("extensions.BabylonToolbar_i.instlRef", "sst");
      Supprimida : user_pref("extensions.BabylonToolbar_i.newTab", true);
      Supprimida : user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=113480&tt=06061[...]
      Supprimida : user_pref("extensions.BabylonToolbar_i.prdct", "BabylonToolbar");
      Supprimida : user_pref("extensions.BabylonToolbar_i.prtnrId", "babylon");
      Supprimida : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
      Supprimida : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
      Supprimida : user_pref("extensions.BabylonToolbar_i.tlbrId", "tb9");
      Supprimida : user_pref("extensions.BabylonToolbar_i.vrsn", "1.5.3.17");
      Supprimida : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.5.3.1723:24:25");
      Supprimida : user_pref("extensions.BabylonToolbar_i.vrsni", "1.5.3.17");
      Supprimida : user_pref("extensions.Fissa.Uninstall.lastRunTime", "Sat, 11 Dec 2010 09:50:53 GMT");
      Supprimida : user_pref("extensions.Fissa.lastRunTime", "Sun, 05 Dec 2010 20:50:07 GMT");
      Supprimida : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.babylon.com/?affID=113480&tt=06[...]
      Supprimida : user_pref("extensions.facemoods.aflt", "_#fxt0");
      Supprimida : user_pref("extensions.facemoods.firstRun", false);
      Supprimida : user_pref("extensions.facemoods.lastActv", "7");
      Supprimida : user_pref("[email protected]", true);
      Supprimida : user_pref("[email protected]", true);
      Supprimida : user_pref("[email protected]", true);
      Supprimida : user_pref("[email protected]", false);
      Supprimida : user_pref("extentions.y2layers.defaultEnableAppsList", "DropDownDeals,buzzdock,YontooNewOffers");
      Supprimida : user_pref("extentions.y2layers.installId", "5978c524-82f5-48ab-9657-61de96acf227");
      Supprimida : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3176921&SearchSource=2&CU[...]
      Supprimida : user_pref("smartBar.searchInNewTabOwner", "CT3176921");
      Supprimida : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
      Supprimida : user_pref("smartbar.machineId", "GPEZ3ZRNU5IZG4ZCU7VOHYXBZAWRGQCL7/B1KEXQAE95S8FS++OPYHZH7UPNZRGHFIC[...]
      Supprimida : user_pref("smartbar.originalSearchAddressUrl", "hxxp://websearch.ask.com/redirect?client=ff&src=kw&t[...]
      Supprimida : user_pref("smartbar.originalSearchEngine", "Google");
      Supprimida : user_pref("vshare.install.date", "1294185600000");
      Supprimida : user_pref("vshare.install.finished", "1.0.0");
      Supprimida : user_pref("vshare.install.guid", "{8cf72d47-5f25-4195-8804-1fdc3df771ef}");
      Supprimida : user_pref("vshare.install.isHidden", true);
      Supprimida : user_pref("vshare.install.istoolbarhp", true);
      Supprimida : user_pref("vshare.install.istoolbarsearch", true);
      Supprimida : user_pref("vshare.install.laststatreq", "1308700800000");
      Supprimida : user_pref("vshare.install.newtab", true);
      Supprimida : user_pref("vshare.install.newtabDisabledByUser", true);
      Supprimida : user_pref("vshare.install.overlayVersion", 1);
      Supprimida : user_pref("vshare.install.userHPSettings", "www.google.com");
      Supprimida : user_pref("vshare.install.userSPSettings", "Google");

      *************************

      AdwCleaner[R1].txt - [45029 octets] - [01/04/2013 17:19:42]
      AdwCleaner[S1].txt - [335 octets] - [01/04/2013 17:20:20]
      AdwCleaner[S2].txt - [42325 octets] - [03/04/2013 01:01:58]

      ########## EOF - C:\AdwCleaner[S2].txt - [42386 octets] ##########

    10. #10
      Usuario Avatar de M4RTYN
      Registrado
      jun 2012
      Ubicación
      Ecuador
      Mensajes
      5.520

      Re: Express files

      Amigo! muy buena infeccion :(

      aunque no pasastes malarebytes SI ESTA resuelto el prbolema has esto:

      Desinstala ESET (en caso de que lo descargaras) Lo desinstalas como un programa normal

      Abre AT DESTROYER y dale a "Desinstalar"

      Abre AdwCleaner y dale a Desinstalar

      El Ccleaner te recomiendo que lo dejes :D!

      con MALWAREBYTES haces esto:



      La herramienta de eliminación de rastros tras la desinstalación de Malwarebytes se debe de usar del siguiente modo:

      • Desinstale MBAM y reinicie su equipo.
      • Descargue y ejecute mbam-clean.exe
      • Reinicie nuevamente su equipo.

      Una ves hecho todo eso pasa el Ccleaner en modo limpiador y registro!

      y nos comentas si podemos dar por solucionado el tema

    Página 1 de 2 12 ÚltimoÚltimo