ulwindowseek & ulwindowurl

Discussion in 'Windows - Virus and spyware problems' started by feruz86, Jun 9, 2006.

  1. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    Hello, I need help with removing both ulwindowseek & ulwindowurl pop-ups. It seems that one of these is a dialer. I ran Windows Defender and it couldn't remove the pop-ups.
    my HijackThis log file looks like this:

    Logfile of HijackThis v1.99.1
    Scan saved at 02:29:43 a.m., on 10/06/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Archivos de programa\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\WINDOWS\System32\GEARSec.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\hkcmd.exe
    C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    C:\WINDOWS\mHotkey.exe
    C:\BITWARE\NT\bwprnmon.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\system32\imapi.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Archivos de programa\iTunes\iTunesHelper.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    C:\WINDOWS\system32\6c497d5b.exe
    C:\WINDOWS\system32\fd754d12.exe
    C:\Archivos de programa\iPod\bin\iPodService.exe
    C:\Archivos de programa\Windows Defender\MSASCui.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
    C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\ARCHIV~1\COMMON~1\ASKS~1\alg.exe
    C:\Archivos de programa\Common Files\?dobe\taskmgr.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\EAX.exe
    C:\Archivos de programa\Palm\HOTSYNC.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Center\RCenter.exe
    C:\Archivos de programa\Creative\ShareDLL\MediaDet.Exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\LimeWire\LimeWire.exe
    C:\Archivos de programa\Windows Media Player\wmplayer.exe
    C:\Archivos de programa\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Archivos de programa\Messenger\msmsgs.exe
    C:\Documents and Settings\Personal\Escritorio\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [mouseElf] C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Archivos de programa\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [bwprnmon.exe] C:\BITWARE\NT\bwprnmon.exe
    O4 - HKLM\..\Run: [AudCtrl] RunDll32 AudCtrl.dll,RCMonitor
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [iTunesHelper] C:\Archivos de programa\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    O4 - HKLM\..\Run: [6c497d5b.exe] C:\WINDOWS\system32\6c497d5b.exe
    O4 - HKLM\..\Run: [fd754d12.exe] C:\WINDOWS\system32\fd754d12.exe
    O4 - HKLM\..\Run: [Windows Defender] "C:\Archivos de programa\Windows Defender\MSASCui.exe" -hide
    O4 - HKCU\..\Run: [RemoteCenter] C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [areslite] "C:\Archivos de programa\Ares Lite Edition\AresLite.exe" -h
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [6c497d5b.exe] C:\Documents and Settings\Personal\Configuración local\Datos de programa\6c497d5b.exe
    O4 - HKCU\..\Run: [Usae] "C:\ARCHIV~1\COMMON~1\ASKS~1\alg.exe" -vt yax
    O4 - HKCU\..\Run: [Tbieogja] C:\Archivos de programa\Common Files\?dobe\taskmgr.exe
    O4 - HKCU\..\Run: [fd754d12.exe] C:\Documents and Settings\Personal\Configuración local\Datos de programa\fd754d12.exe
    O4 - Startup: HotSync Manager.lnk = C:\Archivos de programa\Palm\HOTSYNC.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &NeoTrace It! - C:\ARCHIV~1\NEOTRA~1\NTXcontext.htm
    O8 - Extra context menu item: Convert to Palm e-Book - C:\Archivos de programa\CnPUG-WavePDB\WavePDB.htm
    O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Crear un favorito móvil - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crear un favorito móvil... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\ARCHIV~1\NEOTRA~1\NTXtoolbar.htm (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://sumitel.com
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgMX2404.exe
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: msnim - 0 - (no file)
    O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O20 - Winlogon Notify: winjjq32 - C:\WINDOWS\SYSTEM32\winjjq32.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Archivos de programa\Archivos comunes\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Servicio Auto-Protect de Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\ARCHIV~1\ARCHIV~1\SONYSH~1\AVLib\Sptisrv.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
     
  2. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Hi feruz86

    Please download ewido anti malware it is a free version of the program -> http://www.ewido.net/en/download/

    1. Install ewido security suite
    2. When installing, under "Additional Options" uncheck..
    * Install background guard
    * Install scan via context menu
    3. Launch ewido, there should be an icon on your desktop, double-click it.
    4. The program will now open to the main screen.
    5. When you run ewido for the first time, you may get a warning "Database could not be found!". Click OK. We will fix this in a moment.
    6. You will need to update ewido to the latest definition files.
    * On the left hand side of the main screen click update.
    * Then click on Start Update.
    7. The update will start and a progress bar will show the updates being installed.
    (the status bar at the bottom will display ("Update successful")

    If you are having problems with the updater, you can use this link to manually update ewido.
    ewido manual updates -> http://www.ewido.net/en/download/updates/

    Once the updates are installed do the following:


    Download Killbox to your desktop -> http://www.downloads.subratam.org/KillBox.zip
    Unzip it to your desktop.

    Run Killbox.exe
    -> Choose Delete on Reboot
    -> Click All Files option.

    Copy the following lines to your clipboard (choose text with your mouse, press CTRL+C or copy)

    C:\WINDOWS\system32\6c497d5b.exe
    C:\WINDOWS\system32\fd754d12.exe
    C:\Documents and Settings\Personal\Configuración local\Datos de programa\6c497d5b.exe
    C:\Documents and Settings\Personal\Configuración local\Datos de programa\fd754d12.exe
    C:\WINDOWS\SYSTEM32\winjjq32.dll

    Then go back to Killbox
    -> go to File
    -> choose Paste from Clipboard
    -> Click the red-white Delete File option.
    -> Click Yes to Delete on Reboot question
    -> Click OK to any PendingFileRenameOperations requests (and tell me if you get any of these!)
    -> Restart your computer if Killbox won't do it.

    (If you get this error when running Killbox: "Component 'MsComCtl.ocx' or one of its dependencies not correctly registered: a file is missing or invalid.", download Missingfilessetup.exe form here to your desktop and run the file, then try running killbox -> http://www.eudaemonia.me.uk/downloads/Files/missingfilesetup.exe)


    When comp is running after removin, Scan hijack this and check

    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    O4 - HKLM\..\Run: [6c497d5b.exe] C:\WINDOWS\system32\6c497d5b.exe
    O4 - HKLM\..\Run: [fd754d12.exe] C:\WINDOWS\system32\fd754d12.exe
    O4 - HKCU\..\Run: [6c497d5b.exe] C:\Documents and Settings\Personal\Configuración local\Datos de programa\6c497d5b.exe
    O4 - HKCU\..\Run: [Tbieogja] C:\Archivos de programa\Common Files\?dobe\taskmgr.exe
    O4 - HKCU\..\Run: [fd754d12.exe] C:\Documents and Settings\Personal\Configuración local\Datos de programa\fd754d12.exe
    O20 - Winlogon Notify: winjjq32 - C:\WINDOWS\SYSTEM32\winjjq32.dll

    Close all programs exept HijackThis and click Fix Checked


    Reboot your computer in SafeMode by doing the following:

    1. Restart your computer
    2. After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
    3. Instead of Windows loading as normal, a menu should appear
    4. Select the first option, to run Windows in Safe Mode.

    Launch ewido:

    * Click on scanner
    * Click on Complete System Scan and the scan will begin.
    * You will be prompted to clean the first infection.
    * Select "Perform action on all infections", then proceed.
    * Once the scan has completed, there will be a button located on the bottom of the screen named Save report
    * Click Save report.
    * Save the report .txt file to your desktop or a location where you can find it easily.

    Close ewido security suite.

    Reboot back to normal mode

    Send a fresh HjT log and ewido report
     
    Last edited: Jun 10, 2006
  3. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    Ok, first of all thank you very much for all your advise tapiiri.
    I have already done all your instructions and my HijackThis and Ewido reports look like this:

    Logfile of HijackThis v1.99.1
    Scan saved at 12:33:48 a.m., on 11/06/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Archivos de programa\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\Archivos de programa\ewido anti-malware\ewidoctrl.exe
    C:\WINDOWS\System32\GEARSec.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\hkcmd.exe
    C:\WINDOWS\system32\imapi.exe
    C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    C:\WINDOWS\mHotkey.exe
    C:\BITWARE\NT\bwprnmon.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Archivos de programa\iTunes\iTunesHelper.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    C:\Archivos de programa\Windows Defender\MSASCui.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    C:\Archivos de programa\iPod\bin\iPodService.exe
    C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
    C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\ARCHIV~1\COMMON~1\ASKS~1\alg.exe
    C:\Archivos de programa\Palm\HOTSYNC.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\EAX.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Center\RCenter.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\Creative\ShareDLL\MediaDet.Exe
    C:\Archivos de programa\Mozilla Firefox\firefox.exe
    C:\Archivos de programa\Messenger\msmsgs.exe
    C:\Documents and Settings\Personal\Escritorio\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [mouseElf] C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Archivos de programa\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [bwprnmon.exe] C:\BITWARE\NT\bwprnmon.exe
    O4 - HKLM\..\Run: [AudCtrl] RunDll32 AudCtrl.dll,RCMonitor
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [iTunesHelper] C:\Archivos de programa\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    O4 - HKLM\..\Run: [Windows Defender] "C:\Archivos de programa\Windows Defender\MSASCui.exe" -hide
    O4 - HKCU\..\Run: [RemoteCenter] C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [areslite] "C:\Archivos de programa\Ares Lite Edition\AresLite.exe" -h
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Usae] "C:\ARCHIV~1\COMMON~1\ASKS~1\alg.exe" -vt yax
    O4 - Startup: HotSync Manager.lnk = C:\Archivos de programa\Palm\HOTSYNC.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &NeoTrace It! - C:\ARCHIV~1\NEOTRA~1\NTXcontext.htm
    O8 - Extra context menu item: Convert to Palm e-Book - C:\Archivos de programa\CnPUG-WavePDB\WavePDB.htm
    O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Crear un favorito móvil - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crear un favorito móvil... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\ARCHIV~1\NEOTRA~1\NTXtoolbar.htm (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://sumitel.com
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgMX2404.exe
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: msnim - 0 - (no file)
    O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: ewido security suite control - ewido networks - C:\Archivos de programa\ewido anti-malware\ewidoctrl.exe
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Archivos de programa\Archivos comunes\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Servicio Auto-Protect de Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\ARCHIV~1\ARCHIV~1\SONYSH~1\AVLib\Sptisrv.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe

    And...

    ---------------------------------------------------------
    ewido anti-malware - Report de exploración
    ---------------------------------------------------------

    + Creado en: 12:27:34 a.m., 11/06/2006
    + Report-Checksum: EF2F5550

    + Scan result:

    HKLM\SOFTWARE\Classes\WinRes.WindowsResources -> Adware.CoolWebSearch : Limpio con backup
    HKLM\SOFTWARE\Classes\WinRes.WindowsResources\CLSID -> Adware.CoolWebSearch : Limpio con backup
    HKLM\SOFTWARE\Classes\WinRes.WindowsResources\CurVer -> Adware.CoolWebSearch : Limpio con backup
    HKLM\SOFTWARE\Classes\WinRes.WindowsResources.1 -> Adware.CoolWebSearch : Limpio con backup
    [272] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Limpio con backup
    [320] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    [332] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    [492] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    [556] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    [612] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    [672] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    [1528] C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Error durante limpieza
    C:\!KillBox\winjjq32.dll -> Trojan.Agent.vg : Limpio con backup
    C:\Archivos de programa\Common Files\Аdobe\taskmgr.exe -> Adware.PurityScan : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@advertising[1].txt -> TrackingCookie.Advertising : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@as1.falkag[2].txt -> TrackingCookie.Falkag : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@atdmt[2].txt -> TrackingCookie.Atdmt : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@centrport[1].txt -> TrackingCookie.Centrport : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@counter.hitslink[2].txt -> TrackingCookie.Hitslink : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@doubleclick[2].txt -> TrackingCookie.Doubleclick : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@mediaplex[1].txt -> TrackingCookie.Mediaplex : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@revenue[2].txt -> TrackingCookie.Revenue : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@servedby.advertising[1].txt -> TrackingCookie.Advertising : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Limpio con backup
    C:\Documents and Settings\dani\Cookies\dani@zedo[1].txt -> TrackingCookie.Zedo : Limpio con backup
    C:\Documents and Settings\Papiringo\Configuración local\Archivos temporales de Internet\Content.IE5\WHYRWH2B\util[1].js -> Adware.MediaMotor : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@2o7[2].txt -> TrackingCookie.2o7 : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ad-logics[2].txt -> TrackingCookie.Ad-logics : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@advertising[2].txt -> TrackingCookie.Advertising : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@atdmt[2].txt -> TrackingCookie.Atdmt : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@bfast[2].txt -> TrackingCookie.Bfast : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@burstnet[2].txt -> TrackingCookie.Burstnet : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@c4.zedo[1].txt -> TrackingCookie.Zedo : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@casalemedia[1].txt -> TrackingCookie.Casalemedia : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@com[2].txt -> TrackingCookie.Com : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@counter.hitslink[2].txt -> TrackingCookie.Hitslink : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@doubleclick[1].txt -> TrackingCookie.Doubleclick : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@edge.ru4[1].txt -> TrackingCookie.Ru4 : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-bestbuy.hitbox[1].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-chrysler.hitbox[2].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-lexmark.hitbox[2].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-nokiafin.hitbox[2].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-playboy.hitbox[2].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@ehg-xmsatelliteradio.hitbox[2].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@estat[1].txt -> TrackingCookie.Estat : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@euniverseads[1].txt -> TrackingCookie.Euniverseads : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@fastclick[2].txt -> TrackingCookie.Fastclick : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@findwhat[1].txt -> TrackingCookie.Findwhat : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@hg1.hitbox[1].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@hitbox[2].txt -> TrackingCookie.Hitbox : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@mediaplex[1].txt -> TrackingCookie.Mediaplex : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@overture[2].txt -> TrackingCookie.Overture : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@paypopup[1].txt -> TrackingCookie.Paypopup : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@popunder.paypopup[2].txt -> TrackingCookie.Paypopup : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@questionmarket[1].txt -> TrackingCookie.Questionmarket : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@revenue[2].txt -> TrackingCookie.Revenue : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@servedby.advertising[2].txt -> TrackingCookie.Advertising : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@serving-sys[1].txt -> TrackingCookie.Serving-sys : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@starware[2].txt -> TrackingCookie.Starware : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@statcounter[2].txt -> TrackingCookie.Statcounter : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@tacoda[1].txt -> TrackingCookie.Tacoda : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@trafficmp[2].txt -> TrackingCookie.Trafficmp : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@valueclick[2].txt -> TrackingCookie.Valueclick : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@valueclick[3].txt -> TrackingCookie.Valueclick : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@z1.adserver[2].txt -> TrackingCookie.Adserver : Limpio con backup
    C:\Documents and Settings\Papiringo\Cookies\papiringo@zedo[1].txt -> TrackingCookie.Zedo : Limpio con backup
    :mozilla.11:C:\Documents and Settings\Papiringo\Datos de programa\Mozilla\Firefox\Profiles\4w8hnu10.default\cookies.txt -> TrackingCookie.Atdmt : Limpio con backup
    :mozilla.18:C:\Documents and Settings\Papiringo\Datos de programa\Mozilla\Firefox\Profiles\4w8hnu10.default\cookies.txt -> TrackingCookie.Coremetrics : Limpio con backup
    :mozilla.19:C:\Documents and Settings\Papiringo\Datos de programa\Mozilla\Firefox\Profiles\4w8hnu10.default\cookies.txt -> TrackingCookie.Revenue : Limpio con backup
    C:\Documents and Settings\Personal\Configuración local\Archivos temporales de Internet\Content.IE5\01I7OL63\srvaih[1].exe -> Trojan.Dialer.oy : Limpio con backup
    C:\Documents and Settings\Personal\Configuración local\Archivos temporales de Internet\Content.IE5\8PAZ4D6R\srvnnt[1].exe -> Trojan.Dialer.oy : Limpio con backup
    C:\Documents and Settings\Personal\Configuración local\Archivos temporales de Internet\Content.IE5\8PAZ4D6R\SystemDoctor2006FreeInstall[1].exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Limpio con backup
    C:\Documents and Settings\Personal\Configuración local\Archivos temporales de Internet\Content.IE5\S5IJG96R\srvowi[1].exe -> Trojan.Dialer.oy : Limpio con backup
    C:\Documents and Settings\Personal\Cookies\fernando@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Limpio con backup
    C:\Documents and Settings\Personal\Cookies\fernando@www.myaffiliateprogram[2].txt -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.19:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\Documents and Settings\Personal\Datos de programa\Mozilla\Firefox\Profiles\7z6fx2mh.default\cookies.txt -> TrackingCookie.Adjuggler : Limpio con backup
    C:\RECYCLER\NPROTECT\00940695.CAB/YazzleActiveX.ocx -> Adware.MediaTickets : Error durante limpieza
    C:\RECYCLER\NPROTECT\00940703.EXE -> Trojan.Dialer.oy : Limpio con backup
    C:\RECYCLER\NPROTECT\00940913.EXE -> Trojan.Dialer.oy : Limpio con backup
    C:\RECYCLER\NPROTECT\00940916.EXE -> Trojan.Dialer.oy : Limpio con backup
    C:\RECYCLER\NPROTECT\00940918.EXE -> Hijacker.Small.kx : Limpio con backup
    C:\RECYCLER\NPROTECT\00940936.EXE -> Trojan.Dialer.oy : Limpio con backup
    C:\RECYCLER\NPROTECT\00940996.EXE -> Hijacker.Small : Limpio con backup
    C:\RECYCLER\NPROTECT\00941040.EXE -> Downloader.IstBar.eq : Limpio con backup
    C:\RECYCLER\NPROTECT\00941156.EXE -> Trojan.Dialer.oy : Limpio con backup
    C:\RECYCLER\NPROTECT\00941215.EXE -> Trojan.Dialer.oy : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00941895.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00941895.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00941895.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00941895.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00941895.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00941895.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00941937.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00941937.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00941941.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00941941.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942000.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942000.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942006.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942010.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942013.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942017.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942021.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942024.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942029.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942035.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942059.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942060.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.36:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.37:C:\RECYCLER\NPROTECT\00942063.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.37:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942067.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942072.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942090.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942095.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942102.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942165.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942171.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942176.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.48:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942179.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.48:C:\RECYCLER\NPROTECT\00942182.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942185.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942189.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.36:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.37:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.43:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.53:C:\RECYCLER\NPROTECT\00942195.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.37:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.53:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.54:C:\RECYCLER\NPROTECT\00942204.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.54:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.55:C:\RECYCLER\NPROTECT\00942211.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.55:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942216.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.42:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.43:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942222.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.42:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.43:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942227.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.42:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.43:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942234.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.42:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.43:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942243.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.60:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.61:C:\RECYCLER\NPROTECT\00942258.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.60:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.61:C:\RECYCLER\NPROTECT\00942325.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942328.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942330.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.6:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.7:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.8:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.9:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942333.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942336.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.58:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942341.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.48:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.53:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.60:C:\RECYCLER\NPROTECT\00942346.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.10:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.11:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.47:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.48:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.53:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.59:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.60:C:\RECYCLER\NPROTECT\00942377.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942466.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942471.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.12:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.21:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.38:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942481.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942498.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.13:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.14:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.22:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.23:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.39:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.40:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.51:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942520.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.15:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.16:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.24:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.25:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.41:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.42:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.52:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.53:C:\RECYCLER\NPROTECT\00942522.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.17:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.26:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.43:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.48:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.54:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.55:C:\RECYCLER\NPROTECT\00942525.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.18:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.27:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.44:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.49:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.55:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942527.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\RECYCLER\NPROTECT\00942590.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\RECYCLER\NPROTECT\00942593.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\RECYCLER\NPROTECT\00942617.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\RECYCLER\NPROTECT\00942625.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\RECYCLER\NPROTECT\00942643.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    :mozilla.19:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.20:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Yieldmanager : Limpio con backup
    :mozilla.28:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.29:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.30:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.31:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.32:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Fastclick : Limpio con backup
    :mozilla.33:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Advertising : Limpio con backup
    :mozilla.34:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Revenue : Limpio con backup
    :mozilla.35:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Tribalfusion : Limpio con backup
    :mozilla.45:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.46:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Casalemedia : Limpio con backup
    :mozilla.50:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Trafic : Limpio con backup
    :mozilla.56:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Myaffiliateprogram : Limpio con backup
    :mozilla.57:C:\RECYCLER\NPROTECT\00942646.MOZ -> TrackingCookie.Adjuggler : Limpio con backup
    C:\WINDOWS\Downloaded Program Files\YazzleActiveX.ocx -> Adware.MediaTickets : Limpio con backup
    C:\WINDOWS\system32\1024 -> Trojan.Small : Limpio con backup
    C:\WINDOWS\system32\javaw.dll -> Adware.PurityScan : Limpio con backup
    C:\WINDOWS\Temp\win25.tmp.exe -> Trojan.Dialer.oy : Limpio con backup
    C:\WINDOWS\Temp\win34.tmp.exe -> Trojan.Dialer.oy : Limpio con backup
    C:\WINDOWS\Temp\win47.tmp.exe -> Trojan.Dialer.oy : Limpio con backup
    C:\WINDOWS\YAXUninst.exe -> Adware.MediaTickets : Limpio con backup


    ::Fin Report

    Those are my reports I hope my computer is clean by now. Thanx
     
  4. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Not yet clean :)

    Run Killbox.exe
    -> Choose Delete on Reboot
    -> Click All Files option.

    Copy the following lines to your clipboard (choose text with your mouse, press CTRL+C or copy)

    C:\WINDOWS\system32\javaw.dll

    Then go back to Killbox
    -> go to File
    -> choose Paste from Clipboard
    -> Click the red-white Delete File option.
    -> Click Yes to Delete on Reboot question
    -> Click OK to any PendingFileRenameOperations requests (and tell me if you get any of these!)
    -> Restart your computer if Killbox won't do it.

    Download SmitfraudFix.zip to your desktop -> http://siri.urz.free.fr/Fix/SmitfraudFix.zip

    Unzip it (folder named SmitFraudFix) to your desktop:

    Open the folder SmitfraudFix and doubleclick smitfraudfix.cmd
    Choose option #1 - Search by typing 1 and pressing "Enter"; a textfile opens and lists the infected files (if those exist)

    Post the contents of this textfile to here.

    (Some antiviruses recognises process.exe as a malware. It is not malware, it is a program that stops processes)
     
  5. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    Ok. I have already ran killbox then I ran Smitfraudfix.cmd and it reported this:

    SmitFraudFix v2.58

    Scan done at 13:21:02.32, 11/06/2006
    Run from C:\Documents and Settings\Personal\Escritorio\smitfraud\SmitfraudFix
    OS: Microsoft Windows XP [Versi¢n 5.1.2600] - Windows_NT
    Fix ran in normal mode

    »»»»»»»»»»»»»»»»»»»»»»»» C:\


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

    C:\WINDOWS\system32\ld????.tmp FOUND !
    C:\WINDOWS\system32\regperf.exe FOUND !
    C:\WINDOWS\system32\stdole3.tlb FOUND !
    C:\WINDOWS\system32\1024\ FOUND !

    »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Personal\Application Data


    »»»»»»»»»»»»»»»»»»»»»»»» Start Menu


    »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Personal\FAVORI~1


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop


    »»»»»»»»»»»»»»»»»»»»»»»» C:\Archivos de programa


    »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys


    »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components

    [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
    "Source"="About:Home"
    "SubscribedURL"="About:Home"
    "FriendlyName"="Mi p gina de inicio actual"


    »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Scanning wininet.dll infection


    »»»»»»»»»»»»»»»»»»»»»»»» End

    How does this look to you tapiiri?
     
  6. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Hi feruz86, It says that you have smithfraud too.

    Restart your computer to the safemode and choose your normal user account -> http://www.pchell.com/support/safemode.shtml

    When in safemode, open SmitfraudFix folder and doubleclick the file smitfraudfix.cmd
    Choose option #2 - Clean by typing 2 and pressing "Enter" in order to remove the infected files.

    You are asked: "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove your desktop wallpaper and the infected registry keys.

    The tool checks if wininet.dll file is infected. You might be asked to replace the infected .dll (if found); answer "Yes" by typing Y and press "Enter".

    The tool might have to restart your computer; if it won't do it, restart your computer back to normal mode.
    A textfile will appear after the cleaning process, copy this file and paste it to here.

    Tha log is saved to your local diskdrive, usually C:\rapport.txt.

    Warning : Running option 2 in a clean computer will delete your desktop wallpaper.

    Post a new HjT log and the contents of C:\Rapport.txt
     
    Last edited: Jun 11, 2006
  7. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    These are my new reports:

    SmitFraudFix v2.58

    Scan done at 15:03:51.45, 11/06/2006
    Run from C:\Documents and Settings\Personal\Escritorio\smitfraud\SmitfraudFix
    OS: Microsoft Windows XP [Versi¢n 5.1.2600] - Windows_NT
    Fix ran in safe mode

    »»»»»»»»»»»»»»»»»»»»»»»» Before SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll

    »»»»»»»»»»»»»»»»»»»»»»»» Killing process


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting infected files

    C:\WINDOWS\system32\ld????.tmp Deleted
    C:\WINDOWS\system32\regperf.exe Deleted
    C:\WINDOWS\system32\stdole3.tlb Deleted
    C:\WINDOWS\system32\1024\ Deleted

    »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

    GenericRenosFix by S!Ri


    »»»»»»»»»»»»»»»»»»»»»»»» Deleting Temp Files


    »»»»»»»»»»»»»»»»»»»»»»»» Registry Cleaning

    Registry Cleaning done.

    »»»»»»»»»»»»»»»»»»»»»»»» After SmitFraudFix
    !!!Attention, following keys are not inevitably infected!!!

    SrchSTS.exe by S!Ri
    Search SharedTaskScheduler's .dll


    »»»»»»»»»»»»»»»»»»»»»»»» End

    And

    Logfile of HijackThis v1.99.1
    Scan saved at 03:27:47 p.m., on 11/06/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\WINDOWS\System32\GEARSec.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\System32\hkcmd.exe
    C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    C:\WINDOWS\mHotkey.exe
    C:\BITWARE\NT\bwprnmon.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Archivos de programa\iTunes\iTunesHelper.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
    C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\ARCHIV~1\COMMON~1\ASKS~1\alg.exe
    C:\Archivos de programa\?ystem\lsass.exe
    C:\WINDOWS\system32\imapi.exe
    C:\Archivos de programa\iPod\bin\iPodService.exe
    C:\Archivos de programa\Palm\HOTSYNC.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\EAX.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Center\RCenter.exe
    C:\Archivos de programa\Creative\ShareDLL\MediaDet.Exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\Messenger\msmsgs.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Documents and Settings\Personal\Escritorio\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [mouseElf] C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Archivos de programa\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [bwprnmon.exe] C:\BITWARE\NT\bwprnmon.exe
    O4 - HKLM\..\Run: [AudCtrl] RunDll32 AudCtrl.dll,RCMonitor
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [iTunesHelper] C:\Archivos de programa\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    O4 - HKCU\..\Run: [RemoteCenter] C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [areslite] "C:\Archivos de programa\Ares Lite Edition\AresLite.exe" -h
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [Usae] "C:\ARCHIV~1\COMMON~1\ASKS~1\alg.exe" -vt yax
    O4 - HKCU\..\Run: [Kucmzbf] C:\Archivos de programa\?ystem\lsass.exe
    O4 - Startup: HotSync Manager.lnk = C:\Archivos de programa\Palm\HOTSYNC.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &NeoTrace It! - C:\ARCHIV~1\NEOTRA~1\NTXcontext.htm
    O8 - Extra context menu item: Convert to Palm e-Book - C:\Archivos de programa\CnPUG-WavePDB\WavePDB.htm
    O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Crear un favorito móvil - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crear un favorito móvil... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\ARCHIV~1\NEOTRA~1\NTXtoolbar.htm (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://sumitel.com
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgMX2404.exe
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: msnim - 0 - (no file)
    O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Archivos de programa\Archivos comunes\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Servicio Auto-Protect de Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\ARCHIV~1\ARCHIV~1\SONYSH~1\AVLib\Sptisrv.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe

    Is my system clean?
     
  8. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Not yet,

    Remove via add/remove application

    PuritySCAN By OIN, OuterInfo, OIN Or program similar name.

    Boot comp

    Delete folder if exist

    C:\Program Files\PurityScan

    If there is not in add/remove panel that kind off program,

    Please download uninstaller :
    http://www.outerinfo.com/OiUninstaller.exe

    Instructions :
    http://www.outerinfo.com/howto.html

    Boot comp when it's removed and send a fresh hijackthis log.

     
  9. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    Ok. Outerinfo is already uninstalled from my computer. The HijackThis log looks like this:

    Logfile of HijackThis v1.99.1
    Scan saved at 11:00:50 p.m., on 11/06/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\WINDOWS\System32\GEARSec.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\system32\imapi.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\hkcmd.exe
    C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    C:\WINDOWS\mHotkey.exe
    C:\BITWARE\NT\bwprnmon.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Archivos de programa\iTunes\iTunesHelper.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\Archivos de programa\iPod\bin\iPodService.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
    C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Archivos de programa\Palm\HOTSYNC.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\EAX.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Center\RCenter.exe
    C:\Archivos de programa\Creative\ShareDLL\MediaDet.Exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\MSN Messenger\msnmsgr.exe
    C:\Archivos de programa\Mozilla Firefox\firefox.exe
    C:\Archivos de programa\Messenger\msmsgs.exe
    C:\Documents and Settings\Personal\Escritorio\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [mouseElf] C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Archivos de programa\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [bwprnmon.exe] C:\BITWARE\NT\bwprnmon.exe
    O4 - HKLM\..\Run: [AudCtrl] RunDll32 AudCtrl.dll,RCMonitor
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [iTunesHelper] C:\Archivos de programa\iTunes\iTunesHelper.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    O4 - HKCU\..\Run: [RemoteCenter] C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [areslite] "C:\Archivos de programa\Ares Lite Edition\AresLite.exe" -h
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: HotSync Manager.lnk = C:\Archivos de programa\Palm\HOTSYNC.EXE
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &NeoTrace It! - C:\ARCHIV~1\NEOTRA~1\NTXcontext.htm
    O8 - Extra context menu item: Convert to Palm e-Book - C:\Archivos de programa\CnPUG-WavePDB\WavePDB.htm
    O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Crear un favorito móvil - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crear un favorito móvil... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\ARCHIV~1\NEOTRA~1\NTXtoolbar.htm (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://sumitel.com
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgMX2404.exe
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: msnim - 0 - (no file)
    O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Archivos de programa\Archivos comunes\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Servicio Auto-Protect de Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\ARCHIV~1\ARCHIV~1\SONYSH~1\AVLib\Sptisrv.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe

     
  10. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Run Killbox.exe
    -> Choose Delete on Reboot
    -> Click All Files option.

    Copy the following lines to your clipboard (choose text with your mouse, press CTRL+C or copy)

    C:\WINDOWS\system32\javaw.dll

    Then go back to Killbox
    -> go to File
    -> choose Paste from Clipboard
    -> Click the red-white Delete File option.
    -> Click Yes to Delete on Reboot question
    -> Click OK to any PendingFileRenameOperations requests (and tell me if you get any of these!)
    -> Restart your computer if Killbox won't do it.

    Send a fresh hijackthis log
     
  11. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    I have already deleted C:\WINDOWS\system32\javaw.dll from my system. the new hijackthis log looks like this:

    Logfile of HijackThis v1.99.1
    Scan saved at 08:08:33 p.m., on 13/06/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\WINDOWS\System32\GEARSec.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\hkcmd.exe
    C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    C:\WINDOWS\system32\imapi.exe
    C:\WINDOWS\mHotkey.exe
    C:\BITWARE\NT\bwprnmon.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    C:\Archivos de programa\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\6c497d5b.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
    C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Archivos de programa\iPod\bin\iPodService.exe
    C:\Archivos de programa\Palm\HOTSYNC.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\EAX.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Center\RCenter.exe
    C:\Archivos de programa\Creative\ShareDLL\MediaDet.Exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\Mozilla Firefox\firefox.exe
    C:\Archivos de programa\MSN Messenger\msnmsgr.exe
    C:\Archivos de programa\Messenger\msmsgs.exe
    C:\Documents and Settings\Personal\Escritorio\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [mouseElf] C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Archivos de programa\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [bwprnmon.exe] C:\BITWARE\NT\bwprnmon.exe
    O4 - HKLM\..\Run: [AudCtrl] RunDll32 AudCtrl.dll,RCMonitor
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Archivos de programa\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [6c497d5b.exe] C:\WINDOWS\system32\6c497d5b.exe
    O4 - HKCU\..\Run: [RemoteCenter] C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [areslite] "C:\Archivos de programa\Ares Lite Edition\AresLite.exe" -h
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [6c497d5b.exe] C:\Documents and Settings\Personal\Configuración local\Datos de programa\6c497d5b.exe
    O4 - Startup: HotSync Manager.lnk = C:\Archivos de programa\Palm\HOTSYNC.EXE
    O4 - Global Startup: .protected
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &NeoTrace It! - C:\ARCHIV~1\NEOTRA~1\NTXcontext.htm
    O8 - Extra context menu item: Convert to Palm e-Book - C:\Archivos de programa\CnPUG-WavePDB\WavePDB.htm
    O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Crear un favorito móvil - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crear un favorito móvil... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\ARCHIV~1\NEOTRA~1\NTXtoolbar.htm (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://sumitel.com
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgMX2404.exe
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: msnim - 0 - (no file)
    O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Archivos de programa\Archivos comunes\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Servicio Auto-Protect de Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\ARCHIV~1\ARCHIV~1\SONYSH~1\AVLib\Sptisrv.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe

     
  12. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Okei, then scan hijack and check and fix that:


    O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll

    Boot comp and send afresh hijack log
     
  13. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    This is the new hijackthis log after I fixed "O20 - AppInit_DLLs: C:\WINDOWS\system32\javaw.dll"

    Logfile of HijackThis v1.99.1
    Scan saved at 07:10:49 p.m., on 14/06/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\CTsvcCDA.EXE
    C:\WINDOWS\System32\GEARSec.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    C:\WINDOWS\System32\tcpsvcs.exe
    C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\System32\MsPMSPSv.exe
    C:\WINDOWS\system32\fxssvc.exe
    C:\WINDOWS\system32\imapi.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\hkcmd.exe
    C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    C:\BITWARE\NT\bwprnmon.exe
    C:\WINDOWS\system32\RunDll32.exe
    C:\WINDOWS\AGRSMMSG.exe
    C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe
    C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    C:\Archivos de programa\iTunes\iTunesHelper.exe
    C:\WINDOWS\system32\ntvdm.exe
    C:\Archivos de programa\iPod\bin\iPodService.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe
    C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Archivos de programa\Palm\HOTSYNC.EXE
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\EAX.exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Center\RCenter.exe
    C:\Archivos de programa\Creative\ShareDLL\MediaDet.Exe
    C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\OSDMenu.EXE
    C:\Archivos de programa\MSN Messenger\msnmsgr.exe
    C:\Archivos de programa\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Personal\Escritorio\HijackThis.exe
    C:\Archivos de programa\Messenger\msmsgs.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\ARCHIV~1\SYMNET~1\SNDMon.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [mouseElf] C:\ARCHIV~1\KYE\GENIUS~1\mouseElf.exe
    O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Archivos de programa\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
    O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
    O4 - HKLM\..\Run: [bwprnmon.exe] C:\BITWARE\NT\bwprnmon.exe
    O4 - HKLM\..\Run: [AudCtrl] RunDll32 AudCtrl.dll,RCMonitor
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [ccApp] "C:\Archivos de programa\Archivos comunes\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\GhostTray.exe
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Archivos de programa\iTunes\iTunesHelper.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [RemoteCenter] C:\Archivos de programa\Creative\SBExtigy\RemoteCenter\Rc\RcMan.EXE
    O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [areslite] "C:\Archivos de programa\Ares Lite Edition\AresLite.exe" -h
    O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Archivos de programa\Microsoft ActiveSync\WCESCOMM.EXE"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: HotSync Manager.lnk = C:\Archivos de programa\Palm\HOTSYNC.EXE
    O4 - Global Startup: .protected
    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
    O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
    O8 - Extra context menu item: &NeoTrace It! - C:\ARCHIV~1\NEOTRA~1\NTXcontext.htm
    O8 - Extra context menu item: Convert to Palm e-Book - C:\Archivos de programa\CnPUG-WavePDB\WavePDB.htm
    O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: Crear un favorito móvil - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra 'Tools' menuitem: Crear un favorito móvil... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Archivos de programa\Microsoft ActiveSync\INetRepl.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
    O9 - Extra button: Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra 'Tools' menuitem: &Messenger Addon - {FB5F1911-F110-11d2-BB9E-00C04F795683} - http://messenger.ipfox.com (file missing)
    O9 - Extra button: NeoTrace It! - {9885224C-1217-4c5f-83C2-00002E6CEF2B} - C:\ARCHIV~1\NEOTRA~1\NTXtoolbar.htm (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://sumitel.com
    O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
    O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} (YazzleActiveX Control) - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1123
    O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
    O16 - DPF: {97B79133-88F0-45F0-8D57-0F2EF27D9C66} - http://85.255.114.166/1/rdgMX2404.exe
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: msnim - 0 - (no file)
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
    O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\ccSetMgr.exe
    O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
    O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPodService - Apple Computer, Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
    O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Archivos de programa\Archivos comunes\Macromedia Shared\Service\Macromedia Licensing.exe
    O23 - Service: Servicio Auto-Protect de Norton AntiVirus (navapsvc) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
    O23 - Service: Norton Ghost - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton Ghost\Agent\PQV2iSvc.exe
    O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\IWP\NPFMntor.exe
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\NPROTECT.EXE
    O23 - Service: SAVScan - Symantec Corporation - C:\Archivos de programa\Norton SystemWorks\Norton AntiVirus\SAVScan.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SNDSrvc.exe
    O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\SPBBC\SPBBCSvc.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\ARCHIV~1\NORTON~3\NORTON~1\SPEEDD~1\NOPDB.EXE
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\ARCHIV~1\ARCHIV~1\SONYSH~1\AVLib\Sptisrv.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Archivos de programa\Archivos comunes\Symantec Shared\CCPD-LC\symlcsvc.exe

     
  14. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    Now it looks good :)
     
  15. feruz86

    feruz86 Member

    Joined:
    Jun 9, 2006
    Messages:
    22
    Likes Received:
    0
    Trophy Points:
    11
    Thanks a lot for your help tapiiri :)
     
  16. tapiiri

    tapiiri Regular member

    Joined:
    Jun 11, 2005
    Messages:
    1,142
    Likes Received:
    0
    Trophy Points:
    46
    You're welcome
     

Share This Page