Module introuvable BabSolution\Shared\NTRedirect.dll Résolu

Question

Bonjour,  à chaque démarrage de mon PC j'ai une fenêtre qui s'ouvre RunDLL et il est écrit : Problème lors du démarrage de 
C:\Users\Houda\AppData\Roaming\BabSolution\Shared\NTRedirect.dll 
Le module spécifié est introuvable. 

Rapport Adwcleaner:

# AdwCleaner v1.606 - Logfile created 11/26/2013 at 09:35:08
# Updated 10/05/2012 by Xplode
# Operating system : Windows 7 Home Premium Service Pack 1 (64 bits)
# User : Gilbert - GILBERT-PC
# Running from : C:\Users\Gilbert\Desktop\adwcleaner-1.606-en.exe
# Option [Search]


***** [Services] *****


***** [Files / Folders] *****

Folder Found : C:\Users\Gilbert\AppData\Local\Ilivid
File Found : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\searchplugins\Ask.xml
File Found : C:\Program Files (x86)\Mozilla Firefox\searchplugins\ask.xml

***** [Registry] *****

Key Found : HKCU\Software\APN DTX
Key Found : HKCU\Software\DataMngr
Key Found : HKCU\Software\DataMngr_Toolbar
Key Found : HKCU\Software\ilivid
Key Found : HKLM\SOFTWARE\DataMngr
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
Key Found : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
[x64] Key Found : HKCU\Software\APN DTX
[x64] Key Found : HKCU\Software\DataMngr
[x64] Key Found : HKCU\Software\DataMngr_Toolbar
[x64] Key Found : HKCU\Software\ilivid
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane
[x64] Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE
[x64] Key Found : HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43
[x64] Key Found : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Scheduled Update for Ask Toolbar

***** [Registre - GUID] *****

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}
[x64] Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
[x64] Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}
[x64] Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}

***** [Internet Browsers] *****

-\ Internet Explorer v9.11.9600.16428

[OK] Registry is clean.

-\ Mozilla Firefox v25.0.1 (es-ES)

Profile name : default 
File : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\prefs.js

Found : user_pref("browser.search.defaultenginename", "Ask.com");
Found : user_pref("browser.search.order.1", "Ask.com");
Found : user_pref("browser.search.selectedEngine", "Ask.com");
Found : user_pref("browser.startup.homepage", "hxxp://www.search.ask.com/?o=APN10645A&gct=hp&d=406-834&v=n10[...]
Found : user_pref("keyword.URL", "hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=834&systemid=406&v=n1024[...]

-\ Google Chrome v30.0.1599.101

File : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Preferences

Found : 		"name" : "Search The Web(HTM)",
Found : 					"name" : "SweetIM for Facebook",
Found : 					"update_url" : "hxxp://www.sweetim.com/simgcbar/GCSocialUpdate.xml",
Found : 					"explicit_host" : [ "chrome://favicon/*", "hxxp://*.sweetim.com/*" ]
Found : 						"hxxp://*.sweetim.com/*",
Found : 					"update_url" : "hxxp://www.sweetim.com/simgcbar/GCToolbarUpdate.xml",

*************************

AdwCleaner[R1].txt - [41739 octets] - [25/11/2013 10:19:57]
AdwCleaner[R2].txt - [41800 octets] - [25/11/2013 10:21:42]
AdwCleaner[S1].txt - [283 octets] - [25/11/2013 10:22:50]
AdwCleaner[R3].txt - [41923 octets] - [25/11/2013 10:34:20]
AdwCleaner[S2].txt - [32577 octets] - [25/11/2013 10:45:53]
AdwCleaner[R4].txt - [4971 octets] - [26/11/2013 09:35:08]

########## EOF - C:\AdwCleaner[R4].txt - [5099 octets] ##########


Configuration: Windows 7 / Mozilla 11.0

Malekal_morte- · Answer

Salut,

Ta version d'AdwCleaner est obsolète.
Supprime la.


Suis ce tutorial https://www.malekal.com/adwcleaner-supprimer-virus-adwares-pup/?t=33839&start= AdwCleaner ( d'Xplode ) sur ton bureau. 
Vas sur le lien, télécharge AdwCleaner comme indiqué.
Lance AdwCleaner, clique sur [Scanner]. 
Le scan peux durer plusieurs minutes, patienter. 
Une fois le scan terminé, clique sur [Nettoyer] 

Une fois le nettoyage terminé, un rapport s'ouvrira. Copie/colle le contenu du rapport dans ta prochaine réponse par un copier/coller. 
Si cela ne fonctionne pas, utilise le site http://pjjoint.malekal.com pour héberger le rapport, donne le lien du rapport dans un nouveau message. 

Note : Le rapport est également sauvegardé sous C:\AdwCleaner[S1].txt

Gibus · Answer

Salut,
Voici le rapport avec la bonne version AdwCleaner:
# AdwCleaner v3.013 - Reporte Creado 26/11/2013 en 10:14:57
# Actualizado 24/11/2013 por Xplode
# Sistema Operativo : Windows 7 Home Premium Service Pack 1 (64 bits)
# Nombre de usuario : Gilbert - GILBERT-PC
# Ejecutado desde : C:\Users\Gilbert\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GQY6MEI8\adwcleaner.exe
# Opción : Escanear

***** [ Servicios ] *****

Servicio Encontrado : 24x7HelpSvc
Servicio Encontrado : DatamngrCoordinator
Servicio Encontrado : SProtection

***** [ Archivos / Carpetas ] *****

Archivo Encontrado : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\Ask.xml
Archivo Encontrado : C:\Program Files (x86)\Mozilla Firefox\defaults\pref\all-iminent.js
Archivo Encontrado : C:\Program Files (x86)\Mozilla Firefox\searchplugins\Web Search.xml
Archivo Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_eooncjejnppfjjklapaamhcdmjbilmde_0.localstorage
Archivo Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_ifohbjbgfchkkfhphahclmkpgejiplfo_0.localstorage
Archivo Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage
Archivo Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_igdhbblpcellaljokkpfhcjlagemhgjl_0.localstorage-journal
Archivo Encontrado : C:\Users\Gilbert\AppData\Local\mysearchdial-speeddial.crx
Archivo Encontrado : C:\Users\Gilbert\AppData\Local\Temp\IminentMinibar.exe
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iLivid.lnk
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Extensions\***@***
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\searchplugins\Mysearchdial.xml
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\searchplugins\Web Search.xml
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\bprotector_extensions.sqlite
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\bprotector_prefs.js
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\Extensions\***@***
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\searchplugins\Mysearchdial.xml
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\searchplugins\Web Search.xml
Archivo Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\user.js
Archivo Encontrado : C:\Users\Public\Desktop\Advanced System Protector.lnk
Archivo Encontrado : C:\Users\Public\Desktop\Get The Best Facebook Chat Messenger.lnk
Archivo Encontrado : C:\Users\Public\Desktop\RegClean Pro.lnk
Archivo Encontrado : C:\Windows\System32oboot64.exe
Archivo Encontrado : C:\Windows\System32\Tasks\Advanced System Protector_startup
Archivo Encontrado : C:\Windows\System32\Tasks\Browser Updater
Archivo Encontrado : C:\Windows\System32\Tasks\Plus-HD-1.3-chromeinstaller
Archivo Encontrado : C:\Windows\System32\Tasks\Plus-HD-1.3-codedownloader
Archivo Encontrado : C:\Windows\System32\Tasks\Plus-HD-1.3-enabler
Archivo Encontrado : C:\Windows\System32\Tasks\Plus-HD-1.3-firefoxinstaller
Archivo Encontrado : C:\Windows\System32\Tasks\Plus-HD-1.3-updater
Archivo Encontrado : C:\Windows\System32\Tasks\ProtectedSearch
Archivo Encontrado : C:\Windows\System32\Tasks\RegClean Pro
Archivo Encontrado : C:\Windows\System32\Tasks\RegClean Pro_DEFAULT
Archivo Encontrado : C:\Windows\System32\Tasks\RegClean Pro_UPDATES
Archivo Encontrado : C:\Windows\System32\Tasks\Scheduled Update for Ask Toolbar
Archivo Encontrado : C:\Windows\Tasks\Plus-HD-1.3-chromeinstaller.job
Archivo Encontrado : C:\Windows\Tasks\Plus-HD-1.3-codedownloader.job
Archivo Encontrado : C:\Windows\Tasks\Plus-HD-1.3-enabler.job
Archivo Encontrado : C:\Windows\Tasks\Plus-HD-1.3-firefoxinstaller.job
Archivo Encontrado : C:\Windows\Tasks\Plus-HD-1.3-updater.job
Archivo Encontrado : C:\Windows\Tasks\RegClean Pro_DEFAULT.job
Archivo Encontrado : C:\Windows\Tasks\RegClean Pro_UPDATES.job
Carpeta Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Carpeta Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\hhlmghjmomaoodfgjeikphfdljhpcpkl
Carpeta Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Carpeta Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Carpeta Encontrado : C:\Users\Gilbert\AppData\Local\Google\Chrome\User Data\Default\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Extensions\{3d86a75b-cb6b-4764-885d-ca6336f04ba2}
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Extensions\***@***
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Extensions\***@***
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Extensions\***@***
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\Extensions\{AD9A41D2-9A49-4FA6-A79E-71A0785364C8}
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\Extensions\***@***
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\Extensions\***@***
Carpeta Encontrado : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\Extensions\***@***
Carpeta Encontrado C:\Program Files (x86)\24x7Help
Carpeta Encontrado C:\Program Files (x86)\Advanced System Protector
Carpeta Encontrado C:\Program Files (x86)\Common Files\Umbrella
Carpeta Encontrado C:\Program Files (x86)\Delta
Carpeta Encontrado C:\Program Files (x86)\HomeTab
Carpeta Encontrado C:\Program Files (x86)\Inbox Toolbar
Carpeta Encontrado C:\Program Files (x86)\Movies Toolbar
Carpeta Encontrado C:\Program Files (x86)\MyPC Backup
Carpeta Encontrado C:\Program Files (x86)\optimizer pro
Carpeta Encontrado C:\Program Files (x86)\Plus-HD-1.3
Carpeta Encontrado C:\Program Files (x86)\RegClean Pro
Carpeta Encontrado C:\Program Files (x86)\SimilarSites
Carpeta Encontrado C:\Program Files (x86)\wisestamp
Carpeta Encontrado C:\ProgramData\BitGuard
Carpeta Encontrado C:\ProgramData\Browser Manager
Carpeta Encontrado C:\ProgramData\BrowserProtect
Carpeta Encontrado C:\ProgramData\DSearchLink
Carpeta Encontrado C:\ProgramData\Microsoft\Windows\Start Menu\Programs\24x7 help
Carpeta Encontrado C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced System Protector
Carpeta Encontrado C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar
Carpeta Encontrado C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RegClean Pro
Carpeta Encontrado C:\ProgramData\ParetoLogic
Carpeta Encontrado C:\ProgramData\Systweak
Carpeta Encontrado C:\ProgramData\wincert
Carpeta Encontrado C:\Users\Gilbert\AppData\Local\lollipop
Carpeta Encontrado C:\Users\Gilbert\AppData\Local	orch
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\Delta
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\HomeTab
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\ilividmoviestoolbarha
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\Inbox Toolbar
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\Plus-HD-1.3
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\searchresultstb
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\SimplyTech
Carpeta Encontrado C:\Users\Gilbert\AppData\LocalLow\wisestamp
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\24x7 help
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\BabSolution
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\Delta
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\DriverCure
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\HomeTab
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\ilividmoviestoolbarha
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\Inbox Toolbar
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\Inbox Toolbar
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\ParetoLogic
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\Search Protection
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\SimilarSites
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\SimplyTech
Carpeta Encontrado C:\Users\Gilbert\AppData\Roaming\Systweak
Carpeta Encontrado C:\Users\Gilbert\Documents\optimizer pro

***** [ Accesos directos ] *****

Acceso directo Encontrado : C:\Users\Gilbert\Desktop\Search.lnk ( -url hxxp://www2.delta-search.com/?babsrc=DT_ss&mntrId=84BCB639E5815816&affID=123208&tt=150913_enh&tsp=5009 -wbr 2 )
Acceso directo Encontrado : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Aide.lnk ( /showurl hxxp://toolbar.inbox.com/faq.aspx )
Acceso directo Encontrado : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Inbox.com.lnk ( /showurl hxxp://www.inbox.com/homepage.aspx?tbid=80809&lng=fr )
Acceso directo Encontrado : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inbox Toolbar\Paramètres.lnk ( /showurl hxxp://toolbar.inbox.com/settings/settings.aspx?lng=fr )

***** [ Registro ] *****

Clave Encontrado : HKCU\Software\24x7help
Clave Encontrado : HKCU\Software\5328c8ab06def45
Clave Encontrado : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clave Encontrado : HKCU\Software\AppDataLow\Software\Crossrider
Clave Encontrado : HKCU\Software\AppDataLow\Software\Plus-HD-1.3
Clave Encontrado : HKCU\Software\AppDataLow\Software\simplytech
Clave Encontrado : HKCU\Software\AppDataLow\Software\Simplytech\HomeTab
Clave Encontrado : HKCU\Software\AppDataLow\Software\SmartBar
Clave Encontrado : HKCU\Software\AppDataLow\Software\wisestamp
Clave Encontrado : HKCU\Software\BabSolution
Clave Encontrado : HKCU\Software\Classes\iLivid.torrent
Clave Encontrado : HKCU\Software\DataMngr
Clave Encontrado : HKCU\Software\DataMngr_Toolbar
Clave Encontrado : HKCU\Software\Delta
Clave Encontrado : HKCU\Software\distromatic
Clave Encontrado : HKCU\Software\Google\Chrome\Extensions\amfclgbdpgndipgoegfpkkgobahigbcl
Clave Encontrado : HKCU\Software\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clave Encontrado : HKCU\Software\HomeTab
Clave Encontrado : HKCU\Software\Inbox Toolbar
Clave Encontrado : HKCU\Software\InstallCore
Clave Encontrado : HKCU\Software\installedbrowserextensions
Clave Encontrado : HKCU\Software\lollipop
Clave Encontrado : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110311121157}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4DA0B44C-498C-4F75-85DC-32FE3C4A0211}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110311121157}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4DA0B44C-498C-4F75-85DC-32FE3C4A0211}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clave Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}
Clave Encontrado : HKCU\Software\mysearchdial.com
Clave Encontrado : HKCU\Software\Pokki
Clave Encontrado : HKCU\Software\powerpack
Clave Encontrado : HKCU\Software\simplytech
Clave Encontrado : HKCU\Software\Simplytech\HomeTab
Clave Encontrado : HKCU\Software\smartbarlog
Clave Encontrado : HKCU\Software\systweak
Clave Encontrado : HKCU\Software	orch
Clave Encontrado : HKCU\Software\wisestamp
Clave Encontrado : [x64] HKCU\Software\24x7help
Clave Encontrado : [x64] HKCU\Software\BabSolution
Clave Encontrado : [x64] HKCU\Software\DataMngr
Clave Encontrado : [x64] HKCU\Software\DataMngr_Toolbar
Clave Encontrado : [x64] HKCU\Software\Delta
Clave Encontrado : [x64] HKCU\Software\distromatic
Clave Encontrado : [x64] HKCU\Software\HomeTab
Clave Encontrado : [x64] HKCU\Software\Inbox Toolbar
Clave Encontrado : [x64] HKCU\Software\InstallCore
Clave Encontrado : [x64] HKCU\Software\installedbrowserextensions
Clave Encontrado : [x64] HKCU\Software\lollipop
Clave Encontrado : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clave Encontrado : [x64] HKCU\Software\mysearchdial.com
Clave Encontrado : [x64] HKCU\Software\Pokki
Clave Encontrado : [x64] HKCU\Software\powerpack
Clave Encontrado : [x64] HKCU\Software\simplytech
Clave Encontrado : [x64] HKCU\Software\Simplytech\HomeTab
Clave Encontrado : [x64] HKCU\Software\smartbarlog
Clave Encontrado : [x64] HKCU\Software\systweak
Clave Encontrado : [x64] HKCU\Software	orch
Clave Encontrado : [x64] HKCU\Software\wisestamp
Clave Encontrado : HKLM\Software\{1146AC44-2F03-4431-B4FD-889BC837521F}
Clave Encontrado : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Clave Encontrado : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Clave Encontrado : HKLM\Software\24x7help
Clave Encontrado : HKLM\SOFTWARE\5328c8ab06def45
Clave Encontrado : HKLM\Software\aartemisSoftware
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\{39CB8175-E224-4446-8746-00566302DF8D}
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\{3FC27B34-0C19-49DA-875E-1875DDD4A6B2}
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\{6536801B-F50C-449B-9476-093DFD3789E3}
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\BabylonHelper.EXE
Clave Encontrado : HKLM\SOFTWARE\Classes\AppID\HomeTab.DLL
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{042DA63B-0933-403D-9395-B49307691690}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{0EE02110-967B-4256-ACA6-BC8AC7CB7E61}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311121157}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322122257}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{3223F2FB-D9B9-45FC-9D66-CD717FFA4EE5}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{37540F19-DD4C-478B-B2DF-C19281BCAF27}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{4DA0B44C-498C-4F75-85DC-32FE3C4A0211}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{4EF645BD-65B0-4F98-AD56-D0437B7045F6}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{4FCB4630-2A1C-4AA1-B422-345E8DC8A6DE}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{612AD33D-9824-4E87-8396-92374E91C4BB}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{82E1477C-B154-48D3-9891-33D83C26BCD3}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{86838207-681D-469D-9511-D0DCC6F19F9B}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{A928E66C-F501-4E66-9953-855C712F93B2}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{AF808758-C780-404C-A4EE-4526323FD9B6}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clave Encontrado : HKLM\SOFTWARE\Classes\CLSID\{E97A663B-81A6-49C5-A6D3-BCB05BA1DE26}
Clave Encontrado : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO
Clave Encontrado : HKLM\SOFTWARE\Classes\CrossriderApp0031257.BHO.1
Clave Encontrado : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox
Clave Encontrado : HKLM\SOFTWARE\Classes\CrossriderApp0031257.Sandbox.1
Clave Encontrado : HKLM\SOFTWARE\Classes\delta.deltaappCore
Clave Encontrado : HKLM\SOFTWARE\Classes\delta.deltaappCore.1
Clave Encontrado : HKLM\SOFTWARE\Classes\delta.deltadskBnd
Clave Encontrado : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
Clave Encontrado : HKLM\SOFTWARE\Classes\delta.deltaHlpr
Clave Encontrado : HKLM\SOFTWARE\Classes\delta.deltaHlpr.1
Clave Encontrado : HKLM\SOFTWARE\Classes\esrv.deltaESrvc
Clave Encontrado : HKLM\SOFTWARE\Classes\esrv.deltaESrvc.1
Clave Encontrado : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
Clave Encontrado : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
Clave Encontrado : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
Clave Encontrado : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
Clave Encontrado : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
Clave Encontrado : HKLM\SOFTWARE\Classes\Iminent.Mediator.Communication.DataContracts.TestContentCommand
Clave Encontrado : HKLM\SOFTWARE\Classes\Inbox.AppServer
Clave Encontrado : HKLM\SOFTWARE\Classes\Inbox.IBX404
Clave Encontrado : HKLM\SOFTWARE\Classes\Inbox.JSServer
Clave Encontrado : HKLM\SOFTWARE\Classes\Inbox.Toolbar
Clave Encontrado : HKLM\Software\Classes\Installer\Features\B05CCF18F0593604E8A49DC9AAF4BBF1
Clave Encontrado : HKLM\Software\Classes\Installer\Features\EB6AF8AEEB922FA4392548F13812E50B
Clave Encontrado : HKLM\Software\Classes\Installer\Products\B05CCF18F0593604E8A49DC9AAF4BBF1
Clave Encontrado : HKLM\Software\Classes\Installer\Products\EB6AF8AEEB922FA4392548F13812E50B
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{8216BD4A-4DC2-4DCE-9AFF-C86C5ACC6757}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{D4D390BE-98E6-4633-AD1B-B18B54BE5E76}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clave Encontrado : HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Clave Encontrado : HKLM\SOFTWARE\Classes\OfferBoxUI.TheBoxCtrl
Clave Encontrado : HKLM\SOFTWARE\Classes\OfferBoxUI.TheBoxCtrl.1
Clave Encontrado : HKLM\SOFTWARE\Classes\Prod.cap
Clave Encontrado : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Clave Encontrado : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Clave Encontrado : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\inbox
Clave Encontrado : HKLM\SOFTWARE\Classes\PROTOCOLS\Handlerebinfo
Clave Encontrado : HKLM\SOFTWARE\Classes\RebateI.Rebate Informer BHO
Clave Encontrado : HKLM\SOFTWARE\Classes\RebateI.RebateInformImageGen
Clave Encontrado : HKLM\SOFTWARE\Classes\RebateInf.RebateInfObj
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{39CB8175-E224-4446-8746-00566302DF8D}
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{438B047C-C041-4D15-98CF-A97C6B366C28}
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{44444444-4444-4444-4444-440344124457}
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{4599D05A-D545-4069-BB42-5895B4EAE05B}
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{615E8AA1-6BB8-4A3D-A1CC-373194DB612C}
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{8ABB9FA2-0740-4AD9-8F54-1192254B3CF4}
Clave Encontrado : HKLM\SOFTWARE\Classes\TypeLib\{CBEF8724-D080-4737-88DA-111EEC6651AA}
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.Band
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.Band.1
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.NotificationSource
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.NotificationSource.1
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.SourceSinkImpl.1
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo
Clave Encontrado : HKLM\SOFTWARE\Classes\wtb.ToolbarInfo.1
Clave Encontrado : HKLM\Software\DataMngr
Clave Encontrado : HKLM\Software\Delta
Clave Encontrado : HKLM\SOFTWARE\Google\Chrome\Extensions\aaaaojmikegpiepcfdkkjaplodkpfmlo
Clave Encontrado : HKLM\SOFTWARE\Google\Chrome\Extensions\eooncjejnppfjjklapaamhcdmjbilmde
Clave Encontrado : HKLM\SOFTWARE\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Clave Encontrado : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Clave Encontrado : HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clave Encontrado : HKLM\Software\Inbox Toolbar
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19e048ed-7ff3-4eaf-a089-8d22829089ac}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19e048ed-7ff3-4eaf-a089-8d22829089ac}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19e048ed-7ff3-4eaf-a089-8d22829089ac}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{348C2DF3-1191-4C3E-92A6-B3A89A9D9C85}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{369c2224-e676-4c4e-8196-fe1539ee09c1}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{369c2224-e676-4c4e-8196-fe1539ee09c1}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{369c2224-e676-4c4e-8196-fe1539ee09c1}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3C464F09-D1D7-4B24-A3B0-747289976925}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c6faf88-2aaf-497a-a048-41c0f7b5d8a3}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c6faf88-2aaf-497a-a048-41c0f7b5d8a3}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c6faf88-2aaf-497a-a048-41c0f7b5d8a3}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{64ADDE04-711E-4392-8701-D2EEE8D9A626}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{965d05d1-3371-4cbe-9571-ef1476d1910e}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{965d05d1-3371-4cbe-9571-ef1476d1910e}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{965d05d1-3371-4cbe-9571-ef1476d1910e}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a93c5f26-1839-416d-a7c0-77aa8533f906}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a93c5f26-1839-416d-a7c0-77aa8533f906}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a93c5f26-1839-416d-a7c0-77aa8533f906}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{CFD485F0-96BD-47CD-BB6D-CD7DDA95F102}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\App24x7Help_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\BundleSweetIMSetup_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\HomeTab_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\IminentSetup_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\QuickShare_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_smoothicons_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_pour_smoothicons_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasapi32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\sweetim_rasmancs
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\SweetPacksUpdateManager_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasapi32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\systweakasp_rasmancs
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasapi32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\wajam_install_rasmancs
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasapi32
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Tracing\wajamupdater_rasmancs
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsemngr.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsermngr.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bundlesweetimsetup.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\cltmngsvc.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta babylon.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta tb.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\delta2.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltainstaller.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltasetup.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\deltatb_2501-c733154b.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iminentsetup.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sweetimsetup.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options	bdelta.exetoolbar783881609.exe
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23AF19F7-1D5B-442C-B14C-3D1081953C94}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C1AF5FA5-852C-4C90-812E-A7F75E011D87}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{0EE02110-967B-4256-ACA6-BC8AC7CB7E61}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4DA0B44C-498C-4F75-85DC-32FE3C4A0211}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{CCB69577-088B-4004-9ED8-FF5BCC83A039}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{612AD33D-9824-4E87-8396-92374E91C4BB}_is1
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{81FCC50B-950F-4063-8E4A-D99CAA4FBB1F}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{ea8fa6be-29be-4af2-9352-841f83215eb0}
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\00212D92-C5D8-4ff4-AE50-B20F0F85C40A_Systweak_Ad~B9F029BF_is1
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Delta Chrome Toolbar
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ilivid
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-1.3
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RegClean Pro_is1
Clave Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wisestamp Toolbar
Clave Encontrado : HKLM\Software\Plus-HD-1.3
Clave Encontrado : HKLM\Software\systweak
Clave Encontrado : HKLM\Software	orch
Clave Encontrado : HKLM\Software\Umbrella
Clave Encontrado : HKLM\Software\wisestamp
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{11111111-1111-1111-1111-110311121157}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{22222222-2222-2222-2222-220322122257}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{865D7100-82C7-42F4-9C06-860DEC0871B2}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{28C3737A-32D1-492D-B76B-8D75EBBFB887}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{55555555-5555-5555-5555-550355125557}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{66666666-6666-6666-6666-660366126657}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{8216BD4A-4DC2-4DCE-9AFF-C86C5ACC6757}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{8DA8B89E-0C65-403B-8231-AB22ECFA0687}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{A928E66C-F501-4E66-9953-855C712F93B2}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{B0E28FA0-DF07-44B6-95CE-48BE26DB9266}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{CE057E0D-2D7E-4DFF-A890-07BA69B8C762}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{D4D390BE-98E6-4633-AD1B-B18B54BE5E76}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{E6B4EE8F-C38E-4994-BE28-229A3F92262C}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Clave Encontrado : [x64] HKLM\SOFTWARE\Classes\Interface\{FCA8936E-403A-4487-A966-70F80F1D5A6A}
Clave Encontrado : [x64] HKLM\SOFTWARE\Google\Chrome\Extensions\pflphaooapbgpeakohlggbpidpppgdff
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19e048ed-7ff3-4eaf-a089-8d22829089ac}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19e048ed-7ff3-4eaf-a089-8d22829089ac}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{19e048ed-7ff3-4eaf-a089-8d22829089ac}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{369c2224-e676-4c4e-8196-fe1539ee09c1}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{369c2224-e676-4c4e-8196-fe1539ee09c1}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{369c2224-e676-4c4e-8196-fe1539ee09c1}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c6faf88-2aaf-497a-a048-41c0f7b5d8a3}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c6faf88-2aaf-497a-a048-41c0f7b5d8a3}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5c6faf88-2aaf-497a-a048-41c0f7b5d8a3}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{612AD33D-9824-4E87-8396-92374E91C4BB}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{965d05d1-3371-4cbe-9571-ef1476d1910e}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{965d05d1-3371-4cbe-9571-ef1476d1910e}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{965d05d1-3371-4cbe-9571-ef1476d1910e}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a93c5f26-1839-416d-a7c0-77aa8533f906}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a93c5f26-1839-416d-a7c0-77aa8533f906}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a93c5f26-1839-416d-a7c0-77aa8533f906}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{77AA745B-F4F8-45DA-9B14-61D2D95054C8}
Clave Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110311121157}
Datos Encontrado : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command [(Default)] - C:\Program Files\Internet Explorer\iexplore.exe hxxp://aartemis.com/?type=sc&ts=1385295826&from=slbnew&uid=HitachiXHTS547575A9E384_J2190054D0KHXCD0KHXCX
Datos Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll
Datos Encontrado : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN32C~1.DLL
Datos Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~2\MOVIES~1\Datamngr\x64\mgrldr.dll
Datos Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\WIN64C~1.DLL
Valor Encontrado : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}]
Valor Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [iLivid]
Valor Encontrado : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NTRedirect]
Valor Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{82E1477C-B154-48D3-9891-33D83C26BCD3}]
Valor Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}]
Valor Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{DF96F37A-ACCD-42B5-BD3D-629C0895E2B0}]
Valor Encontrado : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [24x7HELP]
Valor Encontrado : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Valor Encontrado : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Valor Encontrado : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x64]
Valor Encontrado : HKLM\SYSTEM\ControlSet002\Control\Session Manager\AppCertDlls [x86]
Valor Encontrado : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x64]
Valor Encontrado : HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls [x86]

***** [ Navegadores ] *****

-\ Internet Explorer v11.0.9600.16428

Ajustes Encontrado : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.aartemis.com/web/?type=ds&ts=1385295899&from=slbnew&uid=HitachiXHTS547575A9E384_J2190054D0KHXCD0KHXCX&q={searchTerms}
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.aartemis.com/web/?type=ds&ts=1385295899&from=slbnew&uid=HitachiXHTS547575A9E384_J2190054D0KHXCD0KHXCX&q={searchTerms}
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Bar] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant] - hxxp://feed.snap.do/?publisher=QuickOC&dpid=QuickOC&co=ES&userid=2d73d80e-7415-4730-8ad3-3e51523d3be4&searchtype=ds&q={searchTerms}&installDate=18/04/2013
Ajustes Encontrado : HKCU\Software\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKCU\Software\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Default_Search_URL] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Bar] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\Search [Search Page] - hxxp://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
Ajustes Encontrado : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default] - hxxp://feed.snap.do/?publisher=QuickOC&dpid=QuickOC&co=ES&userid=2d73d80e-7415-4730-8ad3-3e51523d3be4&searchtype=ds&q={searchTerms}&installDate=18/04/2013
Ajustes Encontrado : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [(Default)] - hxxp://search.certified-toolbar.com?si=70474&st=bs&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&q=%s
Ajustes Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL] - hxxp://www.aartemis.com/web/?type=ds&ts=1385295899&from=slbnew&uid=HitachiXHTS547575A9E384_J2190054D0KHXCD0KHXCX&q={searchTerms}
Ajustes Encontrado : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page] - hxxp://www.aartemis.com/web/?type=ds&ts=1385295899&from=slbnew&uid=HitachiXHTS547575A9E384_J2190054D0KHXCD0KHXCX&q={searchTerms}

-\ Mozilla Firefox v25.0.1 (es-ES)

[ Archivo : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profilesysfo9s1.default\prefs.js ]

Linea encontrada : user_pref("extensions.crossrider.bic", "14283f090888487d6fb4492953fd904c");
Linea encontrada : user_pref("extensions.delta.admin", false);
Linea encontrada : user_pref("extensions.delta.aflt", "babsst");
Linea encontrada : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Linea encontrada : user_pref("extensions.delta.autoRvrt", "false");
Linea encontrada : user_pref("extensions.delta.dfltLng", "es");
Linea encontrada : user_pref("extensions.delta.excTlbr", false);
Linea encontrada : user_pref("extensions.delta.ffxUnstlRst", true);
Linea encontrada : user_pref("extensions.delta.id", "84bc4a34000000000000b639e5815816");
Linea encontrada : user_pref("extensions.delta.instlDay", "15966");
Linea encontrada : user_pref("extensions.delta.instlRef", "sst");
Linea encontrada : user_pref("extensions.delta.newTab", false);
Linea encontrada : user_pref("extensions.delta.prdct", "delta");
Linea encontrada : user_pref("extensions.delta.prtnrId", "delta");
Linea encontrada : user_pref("extensions.delta.rvrt", "false");
Linea encontrada : user_pref("extensions.delta.smplGrp", "none");
Linea encontrada : user_pref("extensions.delta.tlbrId", "base");
Linea encontrada : user_pref("extensions.delta.tlbrSrchUrl", "");
Linea encontrada : user_pref("extensions.delta.vrsn", "1.8.24.6");
Linea encontrada : user_pref("extensions.delta.vrsnTs", "1.8.24.617:40:21");
Linea encontrada : user_pref("extensions.delta.vrsni", "1.8.24.6");
Linea encontrada : user_pref("extensions.delta_i.babExt", "");
Linea encontrada : user_pref("extensions.delta_i.babTrack", "affID=123208&tt=150913_enh&tsp=5009");
Linea encontrada : user_pref("extensions.delta_i.srcExt", "ss");
Linea encontrada : user_pref("extensions.mysearchdial.aflt", "irmsd1103");
Linea encontrada : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Linea encontrada : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
Linea encontrada : user_pref("extensions.mysearchdial.cntry", "ES");
Linea encontrada : user_pref("extensions.mysearchdial.cr", "163688823");
Linea encontrada : user_pref("extensions.mysearchdial.dfltLng", "");
Linea encontrada : user_pref("extensions.mysearchdial.dfltSrch", true);
Linea encontrada : user_pref("extensions.mysearchdial.dnsErr", true);
Linea encontrada : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
Linea encontrada : user_pref("extensions.mysearchdial.dspFFXOld", "Yahoo");
Linea encontrada : user_pref("extensions.mysearchdial.excTlbr", false);
Linea encontrada : user_pref("extensions.mysearchdial.hdrMd5", "1DB32D920EA8A3AB7ADB41618E991CB0");
Linea encontrada : user_pref("extensions.mysearchdial.hmpg", true);
Linea encontrada : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutC[...]
Linea encontrada : user_pref("extensions.mysearchdial.id", "DC0EA117C8E54A34");
Linea encontrada : user_pref("extensions.mysearchdial.instlDay", "16032");
Linea encontrada : user_pref("extensions.mysearchdial.instlRef", "");
Linea encontrada : user_pref("extensions.mysearchdial.lastB", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD[...]
Linea encontrada : user_pref("extensions.mysearchdial.lastVrsnTs", "1.8.21.08:55:37");
Linea encontrada : user_pref("extensions.mysearchdial.newTabUrl", "hxxp://start.mysearchdial.com/?f=2&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1Czu[...]
Linea encontrada : user_pref("extensions.mysearchdial.pnu_base", "{\"newVrsn\":\"85\",\"lastVrsn\":\"85\",\"vrsnLoad\":\"\",\"showMsg\":\"false\",\"showSilent\":\"false\",\"msgTs\":0,\"lstMsgTs\":\"0\"}");
Linea encontrada : user_pref("extensions.mysearchdial.prdct", "mysearchdial");
Linea encontrada : user_pref("extensions.mysearchdial.prtnrId", "mysearchdial");
Linea encontrada : user_pref("extensions.mysearchdial.sg", "none");
Linea encontrada : user_pref("extensions.mysearchdial.srchPrvdr", "Mysearchdial");
Linea encontrada : user_pref("extensions.mysearchdial.tlbrId", "base");
Linea encontrada : user_pref("extensions.mysearchdial.tlbrSrchUrl", "hxxp://start.mysearchdial.com/?f=3&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1C[...]
Linea encontrada : user_pref("extensions.mysearchdial.vrsn", "1.8.21.0");
Linea encontrada : user_pref("extensions.mysearchdial.vrsni", "1.8.21.0");
Linea encontrada : user_pref("extensions.mysearchdial_i.hmpg", true);
Linea encontrada : user_pref("extensions.mysearchdial_i.newTab", false);
Linea encontrada : user_pref("extensions.mysearchdial_i.smplGrp", "none");
Linea encontrada : user_pref("extensions.mysearchdial_i.vrsnTs", "1.8.21.08:55:37");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.hp.enabled", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.initialized", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.installation.contextKey", "");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.installation.installDate", "2013042722");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.installation.partnerId", "^9N^xdm006^YY^es");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.installation.partnerSubId", "CPSN7MrR67YCFYjLtAodFGIAfQ");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.installation.success", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.installation.toolbarId", "7C893EC0-9A87-43C0-8091-C7A8A71501F6");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.lastActivePing", "1368886262064");
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.options.defaultSearch", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.options.homePageEnabled", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.options.keywordEnabled", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.options.tabEnabled", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.searchHistory", "charmingsvillas||||facebook charmingsvillas||***@***||google.com||coste de botella butano vacia||comprar botella buta[...]
Linea encontrada : user_pref("extensions.toolbar.mindspark._12Members_.weather.location", "10001");
Linea encontrada : user_pref("extensions.toolbar.mindspark.hp.enabled", true);
Linea encontrada : user_pref("extensions.toolbar.mindspark.hp.enabled.guid", "***@***");
Linea encontrada : user_pref("extensions.toolbar.mindspark.lastInstalled", "***@***");
Linea encontrada : user_pref("iminent.newtabredirect", "false");
Linea encontrada : user_pref("iminent.searchindex", "1");

[ Archivo : C:\Users\Gilbert\AppData\Roaming\Mozilla\Firefox\Profiles\Solo_75072\prefs.js ]

Linea encontrada : user_pref("browser.search.defaultengine", "Web Search");
Linea encontrada : user_pref("browser.search.order.1", "Web Search");
Linea encontrada : user_pref("extensions.BabylonToolbar.admin", false);
Linea encontrada : user_pref("extensions.BabylonToolbar.aflt", "babsst");
Linea encontrada : user_pref("extensions.BabylonToolbar.appId", "{BDB69379-802F-4eaf-B541-F8DE92DD98DB}");
Linea encontrada : user_pref("extensions.BabylonToolbar.autoRvrt", "false");
Linea encontrada : user_pref("extensions.BabylonToolbar.dfltLng", "en");
Linea encontrada : user_pref("extensions.BabylonToolbar.excTlbr", false);
Linea encontrada : user_pref("extensions.BabylonToolbar.id", "84bc4a340000000000009439e5815816");
Linea encontrada : user_pref("extensions.BabylonToolbar.instlDay", "15681");
Linea encontrada : user_pref("extensions.BabylonToolbar.instlRef", "sst");
Linea encontrada : user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
Linea encontrada : user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
Linea encontrada : user_pref("extensions.BabylonToolbar.rvrt", "false");
Linea encontrada : user_pref("extensions.BabylonToolbar.tlbrId", "tb9");
Linea encontrada : user_pref("extensions.BabylonToolbar.tlbrSrchUrl", "hxxp://search.babylon.com/?babsrc=TB_def&mntrId=84bc4a340000000000009439e5815816&q=");
Linea encontrada : user_pref("extensions.BabylonToolbar.vrsn", "1.8.4.9");
Linea encontrada : user_pref("extensions.BabylonToolbar.vrsni", "1.8.4.9");
Linea encontrada : user_pref("extensions.BabylonToolbar_i.babExt", "");
Linea encontrada : user_pref("extensions.BabylonToolbar_i.babTrack", "affID=110824&tt=4912_6");
Linea encontrada : user_pref("extensions.BabylonToolbar_i.excTlbr", false);
Linea encontrada : user_pref("extensions.BabylonToolbar_i.newTab", false);
Linea encontrada : user_pref("extensions.BabylonToolbar_i.smplGrp", "none");
Linea encontrada : user_pref("extensions.BabylonToolbar_i.srcExt", "ss");
Linea encontrada : user_pref("extensions.BabylonToolbar_i.vrsnTs", "1.8.4.919:39:48");
Linea encontrada : user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?st=kwd&ptb=7C893EC0-9A87-43C0-8091-C7A8A71501F6&n=77fc9822&ind=2013042722&p2=^9N^xdm006^YY[...]
Linea encontrada : user_pref("extensions.crossrider.bic", "14283f090888487d6fb4492953fd904c");
Linea encontrada : user_pref("extensions.delta.admin", false);
Linea encontrada : user_pref("extensions.delta.aflt", "babsst");
Linea encontrada : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Linea encontrada : user_pref("extensions.delta.autoRvrt", "false");
Linea encontrada : user_pref("extensions.delta.dfltLng", "es");
Linea encontrada : user_pref("extensions.delta.excTlbr", false);
Linea encontrada : user_pref("extensions.delta.ffxUnstlRst", true);
Linea encontrada : user_pref("extensions.delta.id", "84bc4a34000000000000b639e5815816");
Linea encontrada : user_pref("extensions.delta.instlDay", "15966");
Linea encontrada : user_pref("extensions.delta.instlRef", "sst");
Linea encontrada : user_pref("extensions.delta.newTab", false);
Linea encontrada : user_pref("extensions.delta.prdct", "delta");
Linea encontrada : user_pref("extensions.delta.prtnrId", "delta");
Linea encontrada : user_pref("extensions.delta.rvrt", "false");
Linea encontrada : user_pref("extensions.delta.smplGrp", "none");
Linea encontrada : user_pref("extensions.delta.tlbrId", "base");
Linea encontrada : user_pref("extensions.delta.tlbrSrchUrl", "");
Linea encontrada : user_pref("extensions.delta.vrsn", "1.8.24.6");
Linea encontrada : user_pref("extensions.delta.vrsnTs", "1.8.24.617:40:21");
Linea encontrada : user_pref("extensions.delta.vrsni", "1.8.24.6");
Linea encontrada : user_pref("extensions.delta_i.babExt", "");
Linea encontrada : user_pref("extensions.delta_i.babTrack", "affID=123208&tt=150913_enh&tsp=5009");
Linea encontrada : user_pref("extensions.delta_i.srcExt", "ss");
Linea encontrada : user_pref("extensions.mysearchdial.aflt", "irmsd1103");
Linea encontrada : user_pref("extensions.mysearchdial.appId", "{CA5CAA63-B27C-4963-9BEC-CB16A36D56F8}");
Linea encontrada : user_pref("extensions.mysearchdial.cd", "2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutCyD1B1P1R");
Linea encontrada : user_pref("extensions.mysearchdial.cntry", "ES");
Linea encontrada : user_pref("extensions.mysearchdial.cr", "163688823");
Linea encontrada : user_pref("extensions.mysearchdial.dfltLng", "");
Linea encontrada : user_pref("extensions.mysearchdial.dfltSrch", true);
Linea encontrada : user_pref("extensions.mysearchdial.dnsErr", true);
Linea encontrada : user_pref("extensions.mysearchdial.dpkLst", "3654782829,1334533236,1121012847,231756876,1895130307,603719297,4288797614,3754950497,426401714,3046281807,752626116,1657571787,3224935090,2597085128,18285[...]
Linea encontrada : user_pref("extensions.mysearchdial.dspFFXOld", "Yahoo");
Linea encontrada : user_pref("extensions.mysearchdial.excTlbr", false);
Linea encontrada : user_pref("extensions.mysearchdial.hdrMd5", "1DB32D920EA8A3AB7ADB41618E991CB0");
Linea encontrada : user_pref("extensions.mysearchdial.hmpg", true);
Linea encontrada : user_pref("extensions.mysearchdial.hmpgUrl", "hxxp://start.mysearchdial.com/?f=1&a=irmsd1103&cd=2XzuyEtN2Y1L1Qzu0D0CtD0E0AtCtCyB0Czz0EyDyE0AtAyEtN0D0Tzu0SyCzytBtN1L2XzutBtFtBtFtCyEtFtCtAyBzytN1L1CzutC[...]
Linea encontrada : user_pref("extensions.mysearchdial.id", "DC0EA117C8E54A34");
Linea encontrada : user_pref("extensions.mysearchdial.instlDay&qu

Gibus · Answer

Bonjour,

Je n'ai pasde réponse suite au rapport que j'ai déposé?
Merci

Malekal_morte- · Answer

Tu utilises quel navigateur pour surfer ?

Si Firefox et/ou Chrome sont installés :

Sur Firefox : Menu Outils / Modules complémentaires
Onglet Extension.
Donne la liste.

Sur Google Chrome : Menu en haut à droite puis Outils / Extensions
Donne la liste.



ensuite :


- Télécharge https://sourceforge.net/projects/hjt/ ton bureau.
- Pour lancer HijackThis :
* Sur Vista/Seven faire un clic droit puis executer en tant qu'administrater pour le lancer
* Sur XP un simple double-clic suffit
- Génère un rapport en suivant ces indications :
- Exécute le et clique sur Do a scan and save log file.
- Le rapport s'ouvre sur le Bloc-Note
- Enregistre le sur ton bureau
- Envoie le sur http://pjjoint.malekal.com
- Donne le lien pjjoint ici.

Gibus · Answer

Salut,

J'utilise Mozilla ,la liste des modules complementaires activés

New Tab 5.0.010433
WiseStampp 3.13.31
Avast 9.0.2006.53

Non activés
IMinent 7 48.1.1
InbooxTolbar 1.2.049
MySearch Dialnew Tab9.53
WebSiteRecomendation 1.08

Le rapport Hijack
Logfile of Trend Micro HijackThis v2.0.5
Scan saved at 10:13:19, on 29/11/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)

FIREFOX: 25.0.1 (es-ES)
Boot mode: Normal

Running processes:
C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Users\Gilbert\AppData\Roaming\uTorrent\uTorrent.exe
C:\Users\Gilbert\AppData\Roaming\Search Protection\SearchProtection.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\CyberLink\MediaEspresso\DeviceDetector\DeviceDetector.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_9_900_117.exe
C:\Users\Gilbert\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si=70474&st=home&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.certified-toolbar.com?si=70474&st=home&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://feed.snap.do/?publisher=QuickOC&dpid=QuickOC&co=ES&userid=2d73d80e-7415-4730-8ad3-3e51523d3be4&searchtype=ds&q={searchTerms}&installDate=18/04/2013
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://search.certified-toolbar.com?si=70474&tid=8095&ver=5.1&ts=1381500155181.000007&tguid=70474-8095-1381500155181-FD6A96411C0FA1D6C29503F36560291B&st=chrome&q=
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/search?q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.bing.com/search?q={searchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:56847
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.offerbox.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Bubble Dock SurfMatch - {23AF19F7-1D5B-442c-B14C-3D1081953C94} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15oot\Office15\URLREDIR.DLL
O2 - BHO: (no name) - {CCB69577-088B-4004-9ED8-FF5BCC83A039} - (no file)
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: wisestamp - {df96f37a-accd-42b5-bd3d-629c0895e2b0} - C:\Program Files (x86)\wisestamp\prxtbwis0.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: wisestamp Toolbar - {df96f37a-accd-42b5-bd3d-629c0895e2b0} - C:\Program Files (x86)\wisestamp\prxtbwis0.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [Norton Online Backup] C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [24x7HELP] "C:\Program Files (x86)\24x7Help\App24x7Help.exe" /STARTUP
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [YTDownloader] "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\f3c49ca3-5779-4fc6-962c-9f1e3c0576f6.exe /check
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [SkyDrive] "C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background
O4 - HKCU\..\Run: [NTRedirect] C:\Windows\SysWOW64undll32.exe "C:\Users\Gilbert\AppData\Roaming\BabSolution\Shared\enhancedNT.dll",Run
O4 - HKCU\..\Run: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [uTorrent] "C:\Users\Gilbert\AppData\Roaming\uTorrent\uTorrent.exe"  /MINIMIZED
O4 - HKCU\..\Run: [SearchProtection] "C:\Users\Gilbert\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
O4 - HKCU\..\Run: [iLivid] "C:\Users\Gilbert\AppData\Local\iLivid\iLivid.exe" -autorun
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\17.0.2010.0530\amd64"
O4 - HKCU\..\RunOnce: [Uninstall C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64] C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Gilbert\AppData\Local\Microsoft\SkyDrive\17.0.2011.0627\amd64"
O4 - Startup: Supervisar alertas de tinta - HP Deskjet 1050 J410 series.lnk = ?
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra 'Tools' menuitem: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Program Files (x86)\Hewlett-Packard\Smart Print 2.0\smartprintsetup.exe
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15oot\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15oot\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15oot\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15oot\Office15\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15oot\Office15\MSOSB.DLL
O18 - Protocol: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs:   C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll 
O23 - Service: 24x7HelpService (24x7HelpSvc) - PCRx.com, LLC - C:\Program Files (x86)\24x7Help\App24x7Svc.exe
O23 - Service: Adobe Active File Monitor V9 (AdobeActiveFileMonitor9.0) - Adobe Systems Incorporated - C:\Program Files (x86)\Adobe\Elements 9 Organizer\PhotoshopElementsFileAgent.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (AudioSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-11 (CertPropSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\ehome\ehrecvr.exe,-101 (ehRecvr) - Unknown owner - C:\Windows\ehome\ehRecvr.exe
O23 - Service: @%SystemRoot%\ehome\ehsched.exe,-101 (ehSched) - Unknown owner - C:\Windows\ehome\ehsched.exe
O23 - Service: ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Service Google Update (gupdate) (gupdate) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Service Google Update (gupdatem) (gupdatem) - Unknown owner - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Live Updater Service - Acer Incorporated - C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\iscsidsc.dll,-5000 (MSiSCSI) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe
O23 - Service: @%SystemRoot%\system32\qagentrt.dll,-6 (napagent) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @C:\Program Files (x86)\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files (x86)\Nero\Update\NASvc.exe
O23 - Service: @%SystemRoot%\System32
etlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32
etman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32
etprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32
lasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: @%SystemRoot%\system32
sisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\sysWow64\perfhost.exe,-2 (PerfHost) - Unknown owner - C:\Windows\SysWow64\perfhost.exe
O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32asauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%Systemroot%\system32asmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\sensrsvc.dll,-1000 (SensrSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\ipnathlp.dll,-106 (SharedAccess) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (stisvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	apisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32	bssvc.dll,-100 (TBS) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	ermsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32	hemeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32	rkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe
O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe
O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe
O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe

Gibus · Answer

J'ai posté le rapportégalement:http://pjjoint.malekal.com/files.php?id=HijackThis_20131129_i8c1514m11z13

Malekal_morte- · Answer

purée tu en installes des trucs pourris...

Vas dans le Panneau de Configuration puis Programmes et Fonctionnalités
Déinstalle si présent :
24x7 support truc
BingBar
GoogleToolbar
iLivid
Search Protection / Conduit
WiseStampp 3.13.31
YTDownloader

Supprime les extensions :
IMinent 7 48.1.1
InbooxTolbar 1.2.049
MySearch Dialnew Tab9.53
WiseStampp 3.13.31
WebSiteRecomendation 1.08

~~

Relance HijackThis (si tu es sur Vista/Seven - faire un clic droit et executer en tant qu'administrateur) et coche ces lignes :

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww7.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww7.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://search.safefinder.com/?st=ds&q={searchTerms}&installDate=18/04/2013 [Pays US - 65.52.144.16]
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = http://ww12.certified-toolbar.com [Pays IL - 82.80.196.117]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms} [Pays US - 204.79.197.200]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = https://www.bing.com/?scope=web&mkt=fr-FR{searchTerms} [Pays US - 204.79.197.200]
O2 - BHO: Bubble Dock SurfMatch - {23AF19F7-1D5B-442c-B14C-3D1081953C94} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (file missing)
O2 - BHO: wisestamp - {df96f37a-accd-42b5-bd3d-629c0895e2b0} - C:\Program Files (x86)\wisestamp\prxtbwis0.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (file missing)
O3 - Toolbar: wisestamp Toolbar - {df96f37a-accd-42b5-bd3d-629c0895e2b0} - C:\Program Files (x86)\wisestamp\prxtbwis0.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [24x7HELP] C:\Program Files (x86)\24x7Help\App24x7Help.exe /STARTUP
O4 - HKLM\..\Run: [YTDownloader] C:\Program Files (x86)\YTDownloader\YTDownloader.exe /boot
O4 - HKLM\..\Run: [20131121] C:\Program Files\AVAST Software\Avast\setup\emupdate\f3c49ca3-5779-4fc6-962c-9f1e3c0576f6.exe /check
O4 - HKCU\..\Run: [NTRedirect] C:\Windows\SysWOW64\rundll32.exe C:\Users\Gilbert\AppData\Roaming\BabSolution\Shared\enhancedNT.dll,Run
O4 - HKCU\..\Run: [uTorrent] C:\Users\Gilbert\AppData\Roaming\uTorrent\uTorrent.exe /MINIMIZED
O4 - HKCU\..\Run: [SearchProtection] C:\Users\Gilbert\AppData\Roaming\Search Protection\SearchProtection.EXE /autostart
O4 - HKCU\..\Run: [iLivid] C:\Users\Gilbert\AppData\Local\iLivid\iLivid.exe -autorun
O18 - Protocol: inbox - {37540F19-DD4C-478B-B2DF-C19281BCAF27} - C:\PROGRA~2\INBOXT~1\Inbox.dll
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: rebinfo - {AF808758-C780-404C-A4EE-4526323FD9B6} - (no file)
O20 - AppInit_DLLs: C:\PROGRA~2\MOVIES~1\Datamngr\mgrldr.dll
O23 - Service: 24x7HelpService (24x7HelpSvc) - PCRx.com, LLC - C:\Program Files (x86)\24x7Help\App24x7Svc.exe

==> clic sur fix checked

Redémarre l'ordinateur

Gibus · Answer

Salut,

 Super Tout est OK,le message n'apparait plus.

Merci.

Malekal_morte- · Answer

:)


Pour ne plus te faire avoir.
A lire - Programmes parasites / PUPs : https://www.malekal.com/adwares-pup-protection/

Module introuvable BabSolution\Shared\NTRedirect.dll

9 réponses

Discussions similaires

Newsletters